last executing test programs:

18.200569638s ago: executing program 2:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@noinit_itable}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x55f, &(0x7f0000001040)="$eJzs3U9rHOUfAPDvbJL+//2aQinqQQI9WKndNIl/KgjWo2ixoPe6JNNQsumW7KY0sdD2YC9epAgiFsQX4N1j8Q34KgpaKFKCHrxEZjObbpvdJE037tb5fGDa55mZzTPffeb77DM7u2wAhTWW/VOKeDkivk4iDrdtG45849jafiuPrk9nSxKrq5/+kUSSr2vtn+T/H8wrL0XEL19GnCxtbLe+tDxXqVbThbw+3pi/Ml5fWj51ab4ym86mlyenps68NTX57jtv9yzW18//9d0n9z4889XxlW9/enDkThJn41C+rT2O53CzvTIWY/lzMhJnn9pxogeNDZKk3wfAjgzleT4S2RhwOIbyrAf++25ExCpQUIn8h4JqzQNa1/Y9ug5+YTz8YO0CaGP8w2vvjcS+5rXRgZXkiSuj7Hp3tAftZ238/PvdO9kSW7wPcaMH7QG03LwVEaeHhzeOf0k+/u3c6eabx5t7uo2ivf5AP93L5j9vdJr/lNbnP9Fh/nOwQ+7uxNb5X3rQg2a6yuZ/73Wc/64PXaNDee1/zTnfSHLxUjU9HRH/j4gTMbI3q292P+fMyv3Vbtva53/ZkrXfmgvmx/FgeO+Tj5mpNCrPE3O7h7ciXuk4/03W+z/p0P/Z83F+m20cS+++2m3b1vHvrtUfI17r2P+P72glm9+fHG+eD+Ots2KjP28f+7Vb+/2OP+v/A5vHP5q036+tP3sbP+z7O+22bafn/57ks2Z5T77uWqXRWJiI2JN8vHH95OPHtuqt/bP4TxzffPzrdP7vj4jPtxn/7aO3u+46CP0/80z9/+yF+x998X239rfX/282SyfyNdsZ/7Z7gM/z3AEAAAAAAMCgKUXEoUhK5fVyqVQur32+42gcKFVr9cbJi7XFyzPR/K7saIyUWne6D7d9HmIi/zxsqz75VH0qIo5ExDdD+5v18nStOtPv4AEAAAAAAAAAAAAAAAAAAGBAHOzy/f/Mb0P9Pjpg1/nJbyiuLfO/F7/0BAwkr/9QXPIfikv+Q3HJfygu+Q/FJf+huOQ/FJf8BwAAAAAAAAAAAAAAAAAAAAAAAAAAgJ46f+5ctqyuPLo+ndVnri4tztWunppJ63Pl+cXp8nRt4Up5tlabrabl6dr8Vn+vWqtdmZiMxWvjjbTeGK8vLV+Yry1ebly4NF+ZTS+kI/9KVAAAAAAAAAAAAAAAAAAAAPBiqS8tz1Wq1XRBoWvh/RiIw9jNANfs6OHDgxKFQk8LfR6YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDNPwEAAP//Auk1cw==")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080), &(0x7f0000002340)=ANY=[], 0x361, 0x0)
setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0)
sync()
unlink(&(0x7f0000000100)='./file1\x00')

16.604741846s ago: executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x4004480f, &(0x7f0000000080))

12.631559922s ago: executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x3f0, 0xffffffff, 0x148, 0x280, 0x280, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}}, @common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@mcast1, @empty, [], [], 'vlan1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x21, 'ERROR\x00', 0x0, "3a69199fb8f4af703fe193000f3e34e1c27647d8cd16b804edb9654cf89d"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)

12.555666094s ago: executing program 2:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x1, 0x158, &(0x7f00000011c0)="$eJzs281KAmEUxvFn/Na+LGsTLYQ2bXJS6cNdXYroJNZYkm2UILqU7q+gbiDDQScchajQN53/b3WeOYyeWbx6NiMAoZVXXpYsxQdhL5V9zFmmRwIwJ31JH30A4RR9Mz0BADNeL6S2pJf3h5qi8Yn9YNA/H/Ujicn+k7QbG/atpFLB/eI5PawG/fTU+zOjz7cyU/sH+6PvX9Gq1rSuDWW1qa1hv+7fv/OHTQgIH0uFYB67ENFl03WO/Bz3ctHPCS+XArns56SXC7Vbtz6rRwDwS5Fvzn80cP5jgfMPYHF1ur3rqus6dxQUi1Mk9C/GWObC9C8TgFmz71ttu9PtHTZb1YbTcG5KZ6XKSfm4eFqxvc3fHt//ASyPrz/98etXpgYCAAAAAAAAAAAAAAA/ltO26REAAAAAzMk8Xicy/YwAAAAAAAAAAAAAAAAAAADAsvgMAAD//yD/IsA=")
chdir(&(0x7f0000000a40)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/104, 0x68)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

12.399565948s ago: executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000000c0)='./file1\x00')
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80, &(0x7f0000000700), 0x0, 0x4bb, &(0x7f0000000800)="$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")
mount$binder(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fchdir(r0)
r1 = open(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0x810c9365, 0x0)

11.050297177s ago: executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f00000001c0)=ANY=[], 0x0}, 0x90)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x98, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000340))
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000340)='ext4_remove_blocks\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(r9, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
ioctl$TCSETAF(r3, 0x5408, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})

7.325762124s ago: executing program 1:
r0 = syz_io_uring_setup(0x2bdf, &(0x7f0000000080), &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0})
io_uring_enter(r0, 0x1808, 0x0, 0x0, 0x0, 0x0)

7.28657703s ago: executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x40}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10011, &(0x7f00000002c0), 0x8, 0x617, &(0x7f0000001280)="$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")
r1 = gettid()
r2 = eventfd2(0x0, 0x0)
r3 = dup(r2)
read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0)
syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1c0, &(0x7f00000007c0)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, 0xffffffffffffffff, 0x0)
ftruncate(r5, 0xc17a)
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200400, &(0x7f0000000140)=ANY=[], 0x3, 0xa73, &(0x7f0000003cc0)="$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")
sync_file_range(r5, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801"], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000001c0)=ANY=[], 0x0}, 0x90)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)

6.498765862s ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x94}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', <r2=>0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x3b, 0x0, [{0xc0010141}]})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x8010, r7, 0xe5127000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r2, r6, 0x4, 0x4, 0x3}, 0x48)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0x1c, 0x2, [{0x0, 0x35}, {0x2}, {0x1}]}]}, 0x34}}, 0x8000)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20)

6.408557626s ago: executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x80001)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101)

6.232698874s ago: executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058bff7f0040101109050b362f"], 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x107409, 0x0)

6.162730614s ago: executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8004}, 0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000080000000200088b2f01000846"], 0xfdef)

5.982829682s ago: executing program 3:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}]}, 0x44}}, 0x0)

5.93920355s ago: executing program 3:
syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000000), 0x1, 0x55a1, &(0x7f0000005b00)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000008000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x1})
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioprio_set$pid(0x0, 0x0, 0x0)
r4 = io_uring_setup(0x1b94, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20000})
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
listen(0xffffffffffffffff, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x16a042, 0x0)
statx(r5, &(0x7f0000000040)='./bus\x00', 0x0, 0x100, &(0x7f0000000540))
getresuid(0x0, &(0x7f00000002c0), 0x0)

5.111254528s ago: executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x4c, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0)

3.607398131s ago: executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x356, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x8000000}})

3.5453913s ago: executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0x4}, {0x6}]})
write$ppp(r0, &(0x7f0000000140)="1627", 0x2)

3.323677875s ago: executing program 4:
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1804001, &(0x7f0000000680)=ANY=[], 0x1, 0x1a3, &(0x7f00000002c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x86422, 0x0)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa")
mknod(0x0, 0x0, 0x0)
rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\x1b\x00m\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0)
socket$netlink(0x10, 0x3, 0xf)
dup(0xffffffffffffffff)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
r1 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000000c0)={0x4})

3.303679888s ago: executing program 0:
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000026c0)={&(0x7f0000002640)='track_foreign_dirty\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_int(r2, &(0x7f0000000040), 0x12)

2.720164548s ago: executing program 0:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote, 0x4}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b0}, {@multicast2}]}, @noop, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.521223259s ago: executing program 3:
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf03, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14}]}}]}, 0x48}, 0x1, 0x8d010000}, 0x0)

2.497534403s ago: executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000017110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0), 0x12)
ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}})

2.361962914s ago: executing program 1:
r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0xff, 0x10000)
read$hiddev(r0, &(0x7f00000002c0)=""/139, 0x8b)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x541b, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

1.922348952s ago: executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x40, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc}}]}}]}, 0x40}}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x4, 0x0, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r6=>0x0})
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x816, &(0x7f0000000140), 0x1, 0x50ed, &(0x7f000000a2c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000340)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$FUSE_STATFS(r7, &(0x7f0000010140)={0x60}, 0x60)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa40, 0x0)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]})
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000340))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000003c0))
syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=<r10=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000300)=<r11=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r11, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})

1.671747381s ago: executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002580), 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="1b", 0x1}], 0x1}}], 0x1, 0x0)
unshare(0x20000400)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
shutdown(r0, 0x1)

1.444058006s ago: executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89e0, 0x0)

1.414799111s ago: executing program 0:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x25, 0x334, &(0x7f0000000c00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x16, 0x1, 0x0, "1c30040470c3e288a88b2c3fa9da00000000990000000000000000001700"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000), 0x4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x100)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f00000001c0)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@uid_forget}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {}, {}, {@lastblock}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x1, 0xc32, &(0x7f000001fd40)="$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")
r4 = open(&(0x7f0000000380)='./file2\x00', 0x14507e, 0x0)
pwrite64(r4, &(0x7f0000000000)='+', 0xc0014, 0x7003000)

1.206309023s ago: executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0104000000000000000002000000340004803000018008000100636d7000240002800800024000000000100003800c000100824d22b3c8000000080001400000004c0900010073797a30000000000900020073797a32"], 0x88}}, 0x0)

921.082797ms ago: executing program 4:
open(&(0x7f0000000180)='./bus\x00', 0x10f27f, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}]}})
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 4:
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020aeb2, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

an0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.423638][ T5334] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.436723][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.470783][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  280.538553][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.541293][ T5334] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.557499][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.625616][    T7] Bluetooth: hci0: command 0x041b tx timeout
[  281.631942][ T3584] Bluetooth: hci2: command 0x040f tx timeout
[  281.844551][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  281.846341][ T5422] loop4: detected capacity change from 0 to 512
[  281.972958][ T5366] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.986021][ T4281] tipc: Disabling bearer <udp:syz1>
[  281.992288][ T4281] tipc: Left network mode
[  282.025874][ T5422] EXT4-fs (loop4): Ignoring removed orlov option
[  282.058735][ T5422] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor.4: inode #1: comm syz-executor.4: iget: illegal inode #
[  282.079078][ T5422] EXT4-fs (loop4): Remounting filesystem read-only
[  282.085642][ T5422] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 1 err=-117
[  282.100689][ T5422] EXT4-fs error (device loop4): ext4_evict_inode:293: comm syz-executor.4: couldn't truncate inode 15 (err -30)
[  282.114874][ T5422] EXT4-fs (loop4): 1 orphan inode deleted
[  282.129955][ T5422] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,errors=remount-ro,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,sb=0x00000000000003ff,init_itable=0x0000000000000006,orlov,. Quota mode: none.
[  282.410814][ T5366] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.081711][ T5366] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.118657][ T5437] netlink: 480 bytes leftover after parsing attributes in process `syz-executor.3'.
[  283.161382][ T5437] bond0: option mode: unable to set because the bond device has slaves
[  283.174384][ T4484] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  283.213164][ T5366] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.240128][ T4484] EXT4-fs (loop4): Remounting filesystem read-only
[  283.269633][ T4484] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor.4: deleted inode referenced: 15
[  283.297824][ T4484] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor.4: deleted inode referenced: 15
[  283.394301][ T5334] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  283.521660][ T5334] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  283.553251][ T5334] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  283.615364][ T5366] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  283.658669][ T5334] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  283.686499][ T3585] Bluetooth: hci2: command 0x0419 tx timeout
[  283.695312][ T3585] Bluetooth: hci0: command 0x040f tx timeout
[  283.743367][ T5366] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  283.773145][ T5366] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  283.788004][ T5366] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  283.813844][ T5451] loop3: detected capacity change from 0 to 1024
[  283.905029][ T5451] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  283.952369][ T5451] EXT4-fs (loop3): invalid journal inode
[  283.970028][ T5451] EXT4-fs (loop3): can't get journal size
[  284.003419][ T5451] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue. Quota mode: writeback.
[  284.096955][ T5451] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (7780!=20869)
[  284.255555][ T5366] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.313285][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  284.322818][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  284.340619][ T5366] 8021q: adding VLAN 0 to HW filter on device team0
[  284.381591][ T5334] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.429213][ T5334] 8021q: adding VLAN 0 to HW filter on device team0
[  284.540762][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  284.554740][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  284.563548][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  284.573332][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  284.583268][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.590417][ T4466] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.601310][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  284.614283][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  284.625475][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.632639][ T4466] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.809631][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  284.823402][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  284.834974][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.842416][ T4466] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.856806][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  284.932010][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  285.051789][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.059113][ T4466] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.346213][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  285.476022][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  285.488988][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  285.503142][ T5469] loop1: detected capacity change from 0 to 512
[  285.515057][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  285.524485][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  285.538935][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  285.553569][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  285.561358][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.561494][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.561518][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.561542][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.570225][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  285.589136][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.597976][ T5469] EXT4-fs (loop1): Ignoring removed orlov option
[  285.609670][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.620560][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  285.629324][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.637193][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.642969][ T5469] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz-executor.1: inode #1: comm syz-executor.1: iget: illegal inode #
[  285.644609][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.666724][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.674152][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.683245][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.690777][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.698361][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.700254][ T5469] EXT4-fs (loop1): Remounting filesystem read-only
[  285.708500][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.720106][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.729401][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.734369][ T5469] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 1 err=-117
[  285.739673][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.759218][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.767137][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.773216][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  285.774558][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.790161][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.795712][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  285.797879][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.813113][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.814914][ T5469] EXT4-fs error (device loop1): ext4_evict_inode:293: comm syz-executor.1: couldn't truncate inode 15 (err -30)
[  285.820961][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.840849][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.842550][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  285.848817][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.864768][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  285.868293][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  285.874457][ T5469] EXT4-fs (loop1): 1 orphan inode deleted
[  285.886753][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.894030][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  285.894170][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.909057][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  285.909814][ T5469] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,errors=remount-ro,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,sb=0x00000000000003ff,init_itable=0x0000000000000006,orlov,. Quota mode: none.
[  285.926396][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  285.939865][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.955182][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.956010][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  285.963100][ T3637] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  285.972656][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  286.006730][ T3637] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  286.007636][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  286.032762][ T4991] Bluetooth: hci0: command 0x0419 tx timeout
[  286.032830][ T5334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  286.050510][ T5334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  286.094955][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  286.104132][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  286.113541][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  286.122207][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  286.131885][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  286.148329][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  286.235886][ T4466] Bluetooth: hci1: command 0x0409 tx timeout
[  286.241233][ T5244] EXT4-fs error (device loop1): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  286.284614][ T5454] chnl_net:caif_netlink_parms(): no params data found
[  286.291769][ T3637] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  286.294438][ T5244] EXT4-fs (loop1): Remounting filesystem read-only
[  286.313802][ T5244] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz-executor.1: deleted inode referenced: 15
[  286.360979][ T5244] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz-executor.1: deleted inode referenced: 15
[  286.467946][ T4281] device hsr_slave_0 left promiscuous mode
[  286.475731][ T4281] device hsr_slave_1 left promiscuous mode
[  286.483788][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.497224][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.507059][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.514533][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.523612][ T4281] device bridge_slave_1 left promiscuous mode
[  286.530421][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.540934][ T4281] device bridge_slave_0 left promiscuous mode
[  286.547699][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.562383][ T4281] device hsr_slave_0 left promiscuous mode
[  286.571787][ T4281] device hsr_slave_1 left promiscuous mode
[  286.578779][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.586924][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.596502][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.603968][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.613635][ T4281] device bridge_slave_1 left promiscuous mode
[  286.620824][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.629878][ T4281] device bridge_slave_0 left promiscuous mode
[  286.636535][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.653457][ T4281] device veth1_macvtap left promiscuous mode
[  286.660046][ T3637] usb 4-1: config 185 has too many interfaces: 125, using maximum allowed: 32
[  286.661007][ T4281] device veth0_macvtap left promiscuous mode
[  286.669121][ T3637] usb 4-1: config 185 has 0 interfaces, different from the descriptor's value: 125
[  286.684842][ T3637] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  286.686311][ T4281] device veth1_vlan left promiscuous mode
[  286.693887][ T3637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.708535][ T4281] device veth0_vlan left promiscuous mode
[  286.716910][ T4281] device veth1_macvtap left promiscuous mode
[  286.723380][ T4281] device veth0_macvtap left promiscuous mode
[  286.730766][ T4281] device veth1_vlan left promiscuous mode
[  286.737115][ T4281] device veth0_vlan left promiscuous mode
[  287.064755][ T3637] usb 4-1: string descriptor 0 read error: -71
[  287.072379][ T3637] usb 4-1: USB disconnect, device number 9
[  287.090526][ T4281] team0 (unregistering): Port device team_slave_1 removed
[  287.109089][ T4281] team0 (unregistering): Port device team_slave_0 removed
[  287.125830][ T4281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  287.142110][ T4281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  287.222209][ T4281] bond0 (unregistering): Released all slaves
[  287.361798][ T4281] team0 (unregistering): Port device team_slave_1 removed
[  287.379542][ T4281] team0 (unregistering): Port device team_slave_0 removed
[  287.397937][ T4281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  287.413680][ T4281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  287.498888][ T4281] bond0 (unregistering): Released all slaves
[  287.636693][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  287.644182][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  287.653831][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  287.662288][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  287.676833][ T5366] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.709928][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.719915][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.733268][ T5454] device bridge_slave_0 entered promiscuous mode
[  287.747185][ T5334] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.780839][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.794263][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.802942][ T5454] device bridge_slave_1 entered promiscuous mode
[  287.872083][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  287.898204][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  287.934545][ T5366] device veth0_vlan entered promiscuous mode
[  288.020283][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  288.039227][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  288.054448][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  288.063158][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  288.083616][ T5366] device veth1_vlan entered promiscuous mode
[  288.103496][ T5454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.121161][ T5454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  288.194139][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  288.217960][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  288.255491][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  288.280778][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  288.324632][ T4466] Bluetooth: hci1: command 0x041b tx timeout
[  288.340674][ T5366] device veth0_macvtap entered promiscuous mode
[  288.357477][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  288.375331][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  288.393172][ T5454] team0: Port device team_slave_0 added
[  288.412451][ T5366] device veth1_macvtap entered promiscuous mode
[  288.440334][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  288.451264][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  288.462785][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  288.473544][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  288.498984][ T5454] team0: Port device team_slave_1 added
[  288.512237][ T5334] device veth0_vlan entered promiscuous mode
[  288.525298][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  288.540833][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  288.622955][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.632283][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.673072][ T5454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.694023][ T5334] device veth1_vlan entered promiscuous mode
[  288.721939][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  288.780517][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.788902][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.818232][ T5454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.937633][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.956599][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.973723][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.984362][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.994225][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.004885][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.018186][ T5366] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.170165][ T5505] chnl_net:caif_netlink_parms(): no params data found
[  289.224467][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  289.236992][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  289.253888][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.264787][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.274935][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.285799][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.325072][ T5366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.650745][ T5366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.750060][ T5366] batman_adv: batadv0: Interface activated: batadv_slave_1
[  290.191712][ T5454] device hsr_slave_0 entered promiscuous mode
[  290.201224][ T5454] device hsr_slave_1 entered promiscuous mode
[  290.208159][ T5454] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  290.219238][ T5454] Cannot create hsr debugfs directory
[  290.238774][ T5518] loop3: detected capacity change from 0 to 512
[  290.251609][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  290.261334][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  290.270859][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  290.280074][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  290.292311][ T5366] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.301931][ T5366] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.309113][ T5518] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  290.321824][ T5366] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.325362][ T3585] Bluetooth: hci4: command 0x0409 tx timeout
[  290.333583][ T5366] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.338758][ T5518] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  290.377467][ T5518] EXT4-fs (loop3): 1 truncate cleaned up
[  290.383443][ T5518] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none.
[  290.409975][ T4265] Bluetooth: hci1: command 0x040f tx timeout
[  290.426718][ T5518] EXT4-fs error (device loop3): ext4_nfs_get_inode:1433: inode #11: comm syz-executor.3: iget: bad extra_isize 46 (inode size 256)
[  290.426911][ T5334] device veth0_macvtap entered promiscuous mode
[  290.471232][ T5518] EXT4-fs (loop3): Remounting filesystem read-only
[  290.520947][ T5505] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.528232][ T5505] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.540437][ T5505] device bridge_slave_0 entered promiscuous mode
[  290.568961][ T5525] ucma_write: process 266 (syz-executor.3) changed security contexts after opening file descriptor, this is not allowed.
[  290.613013][ T5334] device veth1_macvtap entered promiscuous mode
[  290.620741][ T5505] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.631800][ T5505] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.642082][ T5505] device bridge_slave_1 entered promiscuous mode
[  290.682264][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.741250][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.751267][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.763635][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.774711][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.785524][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.796148][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.808363][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.820270][ T5334] batman_adv: batadv0: Interface activated: batadv_slave_0
[  290.849615][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  290.859040][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  290.868324][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  290.903697][ T1448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.912036][ T1448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.913489][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.948131][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.958710][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.969552][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.980575][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.002574][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.016243][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.031823][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.054210][ T5334] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.082110][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  291.099788][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  291.109336][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  291.134763][ T5334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.146990][ T5334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.157377][ T5334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.166383][ T5334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.208549][ T5505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.284457][ T5505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.335628][ T1448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.355682][ T1448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.423368][ T5454] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.454142][ T5505] team0: Port device team_slave_0 added
[  291.486211][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  291.600819][ T5454] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.622401][ T5505] team0: Port device team_slave_1 added
[  291.641166][ T5543] loop3: detected capacity change from 0 to 1024
[  291.661918][ T5545] loop2: detected capacity change from 0 to 256
[  291.689236][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.726135][ T5543] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  291.732426][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.743540][ T5545] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x16b5df41, utbl_chksum : 0xe619d30d)
[  291.752673][ T5505] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.768037][ T5543] EXT4-fs (loop3): invalid journal inode
[  291.780216][ T5505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.781361][ T5543] EXT4-fs (loop3): can't get journal size
[  291.825797][ T5505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.839553][ T5543] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue. Quota mode: writeback.
[  291.864402][ T5505] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.878526][ T5505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.906577][ T5505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.922743][ T5543] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (7780!=20869)
[  291.953893][ T5548] loop2: detected capacity change from 0 to 256
[  292.017973][ T5454] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.060724][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  292.336766][ T3752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.346875][ T3752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.360561][ T5505] device hsr_slave_0 entered promiscuous mode
[  292.372459][ T5505] device hsr_slave_1 entered promiscuous mode
[  292.389682][ T5505] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  292.729743][ T5505] Cannot create hsr debugfs directory
[  293.121870][ T4339] Bluetooth: hci4: command 0x041b tx timeout
[  293.166886][ T3637] Bluetooth: hci1: command 0x0419 tx timeout
[  293.239987][ T5454] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.313994][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  293.330301][ T5557] loop3: detected capacity change from 0 to 64
[  293.437500][ T5557] hfs: unable to parse mount options
[  293.754903][ T5454] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  293.811694][ T5505] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.851610][ T5454] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  293.867028][ T5454] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  293.921410][ T5454] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  293.929019][ T5572] loop0: detected capacity change from 0 to 512
[  293.972572][ T5505] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.009045][ T5572] EXT4-fs (loop0): Ignoring removed orlov option
[  294.048292][ T5572] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode #
[  294.106311][ T5505] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.120751][ T5572] EXT4-fs (loop0): Remounting filesystem read-only
[  294.140241][ T5572] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117
[  294.157841][ T5572] EXT4-fs error (device loop0): ext4_evict_inode:293: comm syz-executor.0: couldn't truncate inode 15 (err -30)
[  294.170914][ T5572] EXT4-fs (loop0): 1 orphan inode deleted
[  294.185468][ T5572] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,errors=remount-ro,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,sb=0x00000000000003ff,init_itable=0x0000000000000006,orlov,. Quota mode: none.
[  294.541736][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.571235][   T26] audit: type=1326 audit(1718380335.104:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5582 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f828ef1dea9 code=0x0
[  294.601881][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  294.616610][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  294.628435][ T5454] 8021q: adding VLAN 0 to HW filter on device team0
[  294.643242][ T5505] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.675858][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  294.686862][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  294.695808][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.702942][ T4266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.712951][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  294.722324][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  294.735277][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.740751][ T5334] EXT4-fs error (device loop0): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  294.742436][ T4266] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.773437][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  294.811127][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  294.823314][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  294.828020][ T5334] EXT4-fs (loop0): Remounting filesystem read-only
[  294.840851][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  294.847056][ T5334] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz-executor.0: deleted inode referenced: 15
[  294.864158][ T5334] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz-executor.0: deleted inode referenced: 15
[  294.873647][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  294.894563][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  294.909587][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  294.943686][ T5454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  294.954421][ T5454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  294.974718][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  294.998348][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  295.007846][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  295.017379][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  295.026347][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  295.068422][ T5590] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  295.094949][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  295.169267][ T5505] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  295.226725][ T5600] input: syz0 as /devices/virtual/input/input10
[  295.252751][ T4465] kernel read not supported for file /bus/input/devices (pid: 4465 comm: kworker/0:15)
[  295.253171][ T4001] Bluetooth: hci4: command 0x040f tx timeout
[  295.279804][ T5505] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  295.302874][ T4281] tipc: Disabling bearer <udp:syz1>
[  295.309297][ T4281] tipc: Left network mode
[  295.310616][ T5505] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  295.367532][ T5505] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  295.509752][ T5454] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.542032][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  295.549778][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  295.903370][ T5618] loop2: detected capacity change from 0 to 512
[  295.950194][ T5618] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled
[  295.994655][ T5618] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  296.228894][ T5505] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.247647][ T5628] loop2: detected capacity change from 0 to 256
[  296.307688][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  296.342097][ T5628] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  296.368578][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  296.532797][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  296.546559][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  296.565231][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  296.580794][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  296.606576][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  296.631727][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  296.653513][ T5505] 8021q: adding VLAN 0 to HW filter on device team0
[  296.672419][ T5454] device veth0_vlan entered promiscuous mode
[  296.712356][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  298.123962][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  298.132571][ T3637] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.139784][ T3637] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.152074][ T4339] Bluetooth: hci4: command 0x0419 tx timeout
[  298.159082][ T4339] Bluetooth: hci2: command 0x0409 tx timeout
[  298.166888][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  298.193566][ T5454] device veth1_vlan entered promiscuous mode
[  298.310174][ T5505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  298.339287][ T5505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  298.392947][ T5614] chnl_net:caif_netlink_parms(): no params data found
[  298.420175][   T26] audit: type=1326 audit(1718380338.966:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5635 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f828ef1dea9 code=0x0
[  298.444480][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  298.459790][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  298.477777][ T3637] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.484973][ T3637] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.501975][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  298.516182][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  298.535490][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  298.556576][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  298.565931][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  298.574404][ T5639] loop3: detected capacity change from 0 to 1024
[  298.577325][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  298.590475][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  298.603984][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  298.612655][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  298.621516][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  298.671234][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  298.685324][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  298.697005][ T5639] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  298.728522][ T5454] device veth0_macvtap entered promiscuous mode
[  298.752001][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  298.770858][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  298.786859][ T5454] device veth1_macvtap entered promiscuous mode
[  298.808190][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  298.820605][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  298.900595][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.919141][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.929563][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.940219][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.958365][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.970744][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.980690][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  298.991296][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.001393][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  299.012139][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.024033][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.035898][ T5505] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.056452][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  299.069126][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  299.076753][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  299.093297][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  299.124483][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.137801][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.148136][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.166114][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.177072][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.187881][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.200928][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.211859][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.222416][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.233353][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.253191][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.272675][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.283613][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.293740][ T5614] device bridge_slave_0 entered promiscuous mode
[  299.307060][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  299.317442][ T5657] loop2: detected capacity change from 0 to 256
[  299.326502][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  299.352431][ T5454] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.368521][ T5454] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.377291][ T5454] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.388512][ T5454] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.404065][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.417111][ T5657] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x16b5df41, utbl_chksum : 0xe619d30d)
[  299.418780][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.453716][ T5614] device bridge_slave_1 entered promiscuous mode
[  299.611190][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  299.629346][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  299.655814][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.687879][ T5505] device veth0_vlan entered promiscuous mode
[  299.739843][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  299.748877][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  299.759446][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.771220][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  299.780224][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  299.800833][ T5505] device veth1_vlan entered promiscuous mode
[  299.930356][ T1448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.952333][ T5614] team0: Port device team_slave_0 added
[  299.959142][ T1448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.977430][ T5614] team0: Port device team_slave_1 added
[  300.011835][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  300.023285][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  300.047020][ T5672] loop3: detected capacity change from 0 to 512
[  300.056371][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  300.077625][ T5505] device veth0_macvtap entered promiscuous mode
[  300.096534][ T3752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.109585][ T3752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.117923][ T5672] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled
[  300.136230][ T5672] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  300.174389][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  300.181028][ T5676] loop2: detected capacity change from 0 to 1024
[  300.197080][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  300.206842][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  300.229487][ T3637] Bluetooth: hci2: command 0x041b tx timeout
[  300.238994][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.246064][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.278775][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.294768][ T5505] device veth1_macvtap entered promiscuous mode
[  300.304307][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  300.316842][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  300.319015][ T5676] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  300.344669][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.357795][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.398459][ T5683] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  300.402937][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.432113][ T4281] device hsr_slave_0 left promiscuous mode
[  300.449037][ T5687] loop4: detected capacity change from 0 to 256
[  300.456389][ T4281] device hsr_slave_1 left promiscuous mode
[  300.463177][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.479376][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.509964][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.527458][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.537568][ T4281] device bridge_slave_1 left promiscuous mode
[  300.554380][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.574566][ T4281] device bridge_slave_0 left promiscuous mode
[  300.585049][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.615083][ T4281] device hsr_slave_0 left promiscuous mode
[  300.626207][ T4281] device hsr_slave_1 left promiscuous mode
[  300.639433][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.647138][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_0
[  300.666579][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.678164][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.698299][ T4281] device bridge_slave_1 left promiscuous mode
[  300.704722][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.729884][ T4281] device bridge_slave_0 left promiscuous mode
[  300.736174][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.760375][ T4281] device veth1_macvtap left promiscuous mode
[  300.766594][ T4281] device veth0_macvtap left promiscuous mode
[  300.772965][ T4281] device veth1_vlan left promiscuous mode
[  300.779011][ T4281] device veth0_vlan left promiscuous mode
[  300.785799][ T4281] device veth1_macvtap left promiscuous mode
[  300.792274][ T4281] device veth0_macvtap left promiscuous mode
[  301.535684][ T4281] device veth1_vlan left promiscuous mode
[  301.552852][ T4281] device veth0_vlan left promiscuous mode
[  302.015159][ T4281] team0 (unregistering): Port device team_slave_1 removed
[  302.035727][ T4281] team0 (unregistering): Port device team_slave_0 removed
[  302.049582][ T4281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  302.067647][ T4281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.134430][ T1290] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  302.151717][ T4281] bond0 (unregistering): Released all slaves
[  302.296576][ T4281] team0 (unregistering): Port device team_slave_1 removed
[  302.307218][ T3637] Bluetooth: hci2: command 0x040f tx timeout
[  302.317200][ T4281] team0 (unregistering): Port device team_slave_0 removed
[  302.331998][ T4281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  302.348469][ T4281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.430940][ T4281] bond0 (unregistering): Released all slaves
[  302.537353][ T1290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.560049][ T1290] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  302.569666][ T1290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.580226][ T1290] usb 5-1: config 0 descriptor??
[  302.607559][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.619564][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.629725][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.640727][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.646886][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.659337][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.666832][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.666856][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.674352][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.691835][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.699309][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.700683][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.707152][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.725885][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.733052][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.733862][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.752169][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.756792][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.759745][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.777741][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.779161][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.785144][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.803075][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.805595][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.810532][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.810562][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.835240][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.836878][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.849277][ T5505] batman_adv: batadv0: Interface activated: batadv_slave_0
[  302.870080][ T5614] device hsr_slave_0 entered promiscuous mode
[  302.875583][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.886945][ T5614] device hsr_slave_1 entered promiscuous mode
[  302.894018][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.894287][ T5614] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  302.909079][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.919828][ T5614] Cannot create hsr debugfs directory
[  302.921428][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.925883][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  302.934162][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.950105][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.954490][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  302.966769][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.974755][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.982558][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.986139][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.990013][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.990041][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.990065][ T3586] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  302.991478][ T3586] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  303.011172][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.051829][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.062728][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.067914][ T1290] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor
[  303.073220][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.096352][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.100120][ T1290] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0010/input/input11
[  303.106335][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.128796][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.159184][ T5505] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.205142][ T1290] keytouch 0003:0926:3333.0010: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  303.241624][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  303.262321][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  303.305442][ T5505] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.317000][ T3586] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  303.318202][ T5505] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.336685][ T5505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.345484][ T5505] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.598531][ T5614] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.650690][ T1448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.669165][ T1448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.724006][ T3752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.736759][ T3586] usb 4-1: config 185 has too many interfaces: 125, using maximum allowed: 32
[  303.739968][ T5614] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.745768][ T3586] usb 4-1: config 185 has 0 interfaces, different from the descriptor's value: 125
[  303.745829][ T3586] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  303.745856][ T3586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.784236][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  303.830353][ T3752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.847755][ T5614] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.883683][ T4923] usb 5-1: USB disconnect, device number 6
[  303.900340][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  304.042474][ T5614] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.064048][ T5708] loop1: detected capacity change from 0 to 16
[  304.132932][ T5708] erofs: (device loop1): mounted with root inode @ nid 36.
[  304.166099][ T3586] usb 4-1: string descriptor 0 read error: -71
[  304.187978][ T3586] usb 4-1: USB disconnect, device number 10
[  304.200394][ T5708] overlayfs: failed to get redirect (-117)
[  304.236219][ T5712] input: syz0 as /devices/virtual/input/input12
[  304.254678][ T3585] kernel read not supported for file /bus/input/devices (pid: 3585 comm: kworker/0:7)
[  304.267205][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  304.279873][ T5708] overlayfs: failed to get metacopy (-117)
[  304.281596][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  304.298878][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  304.330702][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  304.388268][ T3637] Bluetooth: hci2: command 0x0419 tx timeout
[  304.462666][ T5721] loop2: detected capacity change from 0 to 256
[  304.551831][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.599164][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  304.620198][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  304.627912][ T5725] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  304.633480][ T5724] loop4: detected capacity change from 0 to 256
[  304.650603][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[  304.688622][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  304.706717][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  304.731926][ T4001] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.739187][ T4001] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.772773][ T5730] loop3: detected capacity change from 0 to 1024
[  304.816391][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  304.824592][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  304.877372][ T5730] hfsplus: bad catalog entry used to create inode
[  305.021975][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  305.030674][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.037904][ T4257] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.046660][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  305.056739][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  305.065949][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  305.085605][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  305.353229][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  305.852426][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  305.909247][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  305.941542][ T5740] loop1: detected capacity change from 0 to 16
[  306.004940][ T5740] erofs: (device loop1): mounted with root inode @ nid 36.
[  306.012944][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  306.024254][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  306.050529][ T5740] overlayfs: failed to get redirect (-117)
[  306.055993][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  306.095920][ T5740] overlayfs: failed to get metacopy (-117)
[  306.096023][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  306.130044][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  306.173464][ T5743] loop3: detected capacity change from 0 to 256
[  306.276430][ T5743] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  306.490487][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  306.504268][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  306.528706][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.592928][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  306.595603][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.605829][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  306.635081][ T4265] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  306.639412][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.663740][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  306.670679][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.675694][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  306.690925][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.707551][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.710679][ T5614] device veth0_vlan entered promiscuous mode
[  306.721293][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.728959][ T3585] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  306.744019][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  306.749329][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.752889][ T5737] loop2: detected capacity change from 0 to 32768
[  306.767043][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  306.774728][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.782163][ T5614] device veth1_vlan entered promiscuous mode
[  306.800696][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.815194][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  306.819828][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.824288][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  306.844582][ T5737] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5737)
[  306.854686][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.874407][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  306.882612][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.882643][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.882668][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.903002][ T4001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  306.922266][ T5614] device veth0_macvtap entered promiscuous mode
[  306.928094][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.948181][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.955364][ T5614] device veth1_macvtap entered promiscuous mode
[  306.971590][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  306.980304][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.992718][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.994922][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  307.002859][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.021147][ T4265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.032751][ T4265] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  307.043153][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.051144][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  307.053385][ T4265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.070909][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  307.074588][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.088817][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  307.098933][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  307.102980][ T4265] usb 2-1: config 0 descriptor??
[  307.115004][ T3585] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10
[  307.121279][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.126594][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  307.137485][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.156047][ T3585] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  307.162714][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.174534][ T3585] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  307.185408][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  307.188387][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.192823][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  307.216649][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.224494][ T3585] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.235954][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.249758][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  307.254521][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  307.265340][ T5759] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  307.268765][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  307.280541][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  307.288379][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  307.302537][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  307.311799][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  307.316770][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.331870][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  307.342497][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.359444][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  307.361924][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.387891][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  307.388650][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.395460][ T3586] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  307.396761][ T3586] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  307.413692][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.441622][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.462490][ T5737] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  307.479736][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.494509][ T5737] BTRFS info (device loop2): using free space tree
[  307.501064][ T5737] BTRFS info (device loop2): has skinny extents
[  307.519460][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.715468][ T4265] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor
[  307.720822][ T3586] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  307.729829][ T4265] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0012/input/input13
[  307.743857][ T5614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.755845][ T5614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.774098][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.782378][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  308.259243][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  308.407919][ T4265] keytouch 0003:0926:3333.0012: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  308.558584][ T5614] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.593762][ T5614] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.616586][ T5614] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.653394][ T5614] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.800504][ T4991] usb 2-1: USB disconnect, device number 6
[  308.837371][ T5737] BTRFS error (device loop2): open_ctree failed
[  308.885300][ T3586] usb 4-1: config 185 has too many interfaces: 125, using maximum allowed: 32
[  308.914696][ T3586] usb 4-1: config 185 has 0 interfaces, different from the descriptor's value: 125
[  308.933902][ T3586] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  308.973664][ T3586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.980563][ T4194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.027333][ T4194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.075875][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  309.095149][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.109818][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.164672][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  309.250926][ T5785] loop2: detected capacity change from 0 to 256
[  309.354132][ T3586] usb 4-1: string descriptor 0 read error: -71
[  309.369138][ T3586] usb 4-1: USB disconnect, device number 11
[  309.677880][ T4262] usb 5-1: USB disconnect, device number 7
[  309.756731][ T5796] loop4: detected capacity change from 0 to 1024
[  309.847096][ T5796] hfsplus: bad catalog entry used to create inode
[  309.859449][ T5799] loop2: detected capacity change from 0 to 512
[  309.980588][ T5799] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz-executor.2: casefold flag without casefold feature
[  309.985009][ T5802] loop3: detected capacity change from 0 to 16
[  310.005946][ T5784] loop0: detected capacity change from 0 to 32768
[  310.017478][ T5799] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  310.033570][ T5799] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  310.042224][ T5799] System zones: 0-2, 18-18, 34-35
[  310.061221][ T5799] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  310.088743][ T5802] erofs: (device loop3): mounted with root inode @ nid 36.
[  310.122509][ T5799] overlayfs: missing 'lowerdir'
[  310.137899][ T5802] overlayfs: failed to get redirect (-117)
[  310.138398][ T5799] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 3: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=7, size=2048 fake=0
[  310.184361][ T5784] XFS (loop0): Mounting V5 Filesystem
[  310.225203][ T5802] overlayfs: failed to get metacopy (-117)
[  310.436625][ T5784] XFS (loop0): Ending clean mount
[  310.496559][ T5784] XFS (loop0): Quotacheck needed: Please wait.
[  310.498005][ T5830] ebt_among: src integrity fail: 100
[  310.552723][ T5833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  310.590049][ T5835] loop3: detected capacity change from 0 to 256
[  310.677386][ T5784] XFS (loop0): Quotacheck: Done.
[  310.712988][ T4262] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  310.778916][ T4281] device hsr_slave_0 left promiscuous mode
[  310.807858][ T4281] device hsr_slave_1 left promiscuous mode
[  310.825104][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.840230][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.850996][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.866758][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.928880][ T5614] XFS (loop0): Unmounting Filesystem
[  310.936351][ T4281] device bridge_slave_1 left promiscuous mode
[  310.950932][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.962054][ T4281] device bridge_slave_0 left promiscuous mode
[  310.969635][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.983145][ T4281] device veth1_macvtap left promiscuous mode
[  310.989598][ T4281] device veth0_macvtap left promiscuous mode
[  310.998406][ T4281] device veth1_vlan left promiscuous mode
[  311.004304][ T4281] device veth0_vlan left promiscuous mode
[  311.822660][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  311.848538][ T4262] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  311.886048][ T4262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.901128][ T4262] usb 5-1: config 0 descriptor??
[  312.167290][ T4281] team0 (unregistering): Port device team_slave_1 removed
[  312.189094][ T4281] team0 (unregistering): Port device team_slave_0 removed
[  312.194696][ T5850] loop3: detected capacity change from 0 to 256
[  312.205450][ T4281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  312.241495][ T4281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  312.284665][ T5850] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  312.370688][ T4281] bond0 (unregistering): Released all slaves
[  312.393357][ T4262] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor
[  312.412101][ T4262] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0013/input/input14
[  312.425983][ T5854] loop0: detected capacity change from 0 to 16
[  312.515548][ T5856] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  312.517894][ T4262] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  312.526535][ T5854] erofs: (device loop0): mounted with root inode @ nid 36.
[  312.629824][ T5854] overlayfs: failed to get redirect (-117)
[  312.702132][ T5854] overlayfs: failed to get metacopy (-117)
[  312.771323][ T5867] ebt_among: src integrity fail: 100
[  312.996876][ T5875] loop3: detected capacity change from 0 to 4096
[  313.082082][ T5875] NILFS (loop3): invalid segment: Checksum error in segment payload
[  313.118071][ T5875] NILFS (loop3): trying rollback from an earlier position
[  313.166437][ T5875] NILFS (loop3): recovery complete
[  313.225750][ T4262] usb 5-1: USB disconnect, device number 8
[  313.232128][ T5887] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  313.311047][ T5890] loop0: detected capacity change from 0 to 256
[  313.336173][ T5884] kvm: emulating exchange as write
[  313.618192][ T5869] loop1: detected capacity change from 0 to 32768
[  314.421614][ T5869] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5869)
[  314.527629][ T5869] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  314.545968][ T5869] BTRFS info (device loop1): using free space tree
[  314.558497][ T5869] BTRFS info (device loop1): has skinny extents
[  314.683935][ T5908] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  314.736932][ T5920] ebt_among: src integrity fail: 100
[  314.808557][ T5869] BTRFS info (device loop1): enabling ssd optimizations
[  314.986198][ T5936] loop0: detected capacity change from 0 to 256
[  315.101970][   T26] audit: type=1800 audit(1718380355.654:75): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=263 res=0 errno=0
[  315.203500][ T5943] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  315.223411][   T26] audit: type=1804 audit(1718380355.664:76): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1583216660/syzkaller.baZyLB/15/file0/file1" dev="loop1" ino=263 res=1 errno=0
[  315.392941][ T5949] loop3: detected capacity change from 0 to 1024
[  315.442213][ T5949] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  315.518900][ T5949] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5
[  315.518900][ T5949] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  315.518900][ T5949] 
[  315.626617][ T5949] EXT4-fs (loop3): unsupported descriptor size 6720
[  315.780338][ T3637] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  315.800471][ T5943] loop3: detected capacity change from 0 to 512
[  315.839933][ T5968] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  315.859081][ T5943] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  315.901961][ T5943] EXT4-fs (loop3): 1 truncate cleaned up
[  315.916460][ T5943] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000003,stripe=0x0000000000000004,block_validity,debug_want_extra_isize=0x000000000000002e,,errors=continue. Quota mode: writeback.
[  316.009235][ T5943] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.3: corrupted in-inode xattr
[  316.024472][ T5977] loop2: detected capacity change from 0 to 1024
[  316.036203][ T5974] loop1: detected capacity change from 0 to 512
[  316.037712][ T5949] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  316.073350][ T5943] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1745: inode #15: comm syz-executor.3: unable to update i_inline_off
[  316.086737][ T5977] EXT4-fs (loop2): Ignoring removed orlov option
[  316.087061][ T5977] EXT4-fs (loop2): Test dummy encryption mode enabled
[  316.087301][ T5977] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  316.087328][ T5977] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  316.097282][ T5977] EXT4-fs (loop2): invalid journal inode
[  316.097353][ T5977] EXT4-fs (loop2): can't get journal size
[  316.108734][ T5977] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,norecovery,orlov,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  316.119820][ T5974] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz-executor.1: casefold flag without casefold feature
[  316.124450][ T5974] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  316.130088][ T5974] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  316.130182][ T5974] System zones: 0-2, 18-18, 34-35
[  316.131347][ T5974] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  316.140441][ T3637] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.140490][ T3637] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  316.140518][ T3637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.142354][ T3637] usb 5-1: config 0 descriptor??
[  316.173021][ T5974] overlayfs: missing 'lowerdir'
[  316.174542][ T5943] syz-executor.3 (5943) used greatest stack depth: 18904 bytes left
[  316.198561][ T5974] EXT4-fs error (device loop1): ext4_search_dir:1548: inode #2: block 3: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=7, size=2048 fake=0
[  316.289819][ T5983] loop2: detected capacity change from 0 to 256
[  316.664014][ T3637] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor
[  316.675169][ T3637] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0014/input/input15
[  316.867085][ T3637] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  317.460500][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  317.554984][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  317.741479][ T5964] usb 5-1: USB disconnect, device number 9
[  317.856667][ T5992] loop1: detected capacity change from 0 to 32768
[  318.862511][   T26] audit: type=1804 audit(1718380358.496:77): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2457735736/syzkaller.e4QOXK/12/file0" dev="sda1" ino=1965 res=1 errno=0
[  318.949486][ T6006] loop2: detected capacity change from 0 to 4096
[  318.955210][ T5992] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5992)
[  319.034081][ T5992] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  319.050643][ T6006] NILFS (loop2): invalid segment: Checksum error in segment payload
[  319.068730][ T5992] BTRFS info (device loop1): using free space tree
[  319.076410][ T6006] NILFS (loop2): trying rollback from an earlier position
[  319.078820][ T5992] BTRFS info (device loop1): has skinny extents
[  319.113231][ T6006] NILFS (loop2): recovery complete
[  319.146734][ T6016] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  319.198185][ T5990] loop3: detected capacity change from 0 to 40427
[  319.199543][ T6022] loop0: detected capacity change from 0 to 1024
[  319.208069][ T6026] loop4: detected capacity change from 0 to 128
[  319.234279][ T5992] BTRFS info (device loop1): enabling ssd optimizations
[  319.294082][   T26] audit: type=1800 audit(1718380359.846:78): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=263 res=0 errno=0
[  319.315359][ T6039] loop2: detected capacity change from 0 to 512
[  319.322217][ T6022] EXT4-fs (loop0): Ignoring removed orlov option
[  319.330609][ T6022] EXT4-fs (loop0): Test dummy encryption mode enabled
[  319.338045][   T26] audit: type=1804 audit(1718380359.886:79): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1583216660/syzkaller.baZyLB/17/file0/file1" dev="loop1" ino=263 res=1 errno=0
[  319.338127][ T6022] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  319.363725][    C0] vkms_vblank_simulate: vblank timer overrun
[  319.390295][ T6022] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  319.392431][ T5990] F2FS-fs (loop3): Found nat_bits in checkpoint
[  319.411769][ T6022] EXT4-fs (loop0): invalid journal inode
[  319.421033][ T6022] EXT4-fs (loop0): can't get journal size
[  319.457768][ T6039] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz-executor.2: casefold flag without casefold feature
[  319.481556][ T6022] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,norecovery,orlov,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  319.488366][ T6039] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  319.512868][ T6039] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  319.543182][ T6039] System zones: 0-2, 18-18, 34-35
[  319.592843][ T6039] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  319.688136][ T6047] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 224: padding at end of block bitmap is not set
[  319.746417][ T6039] overlayfs: missing 'lowerdir'
[  319.860883][ T6048] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 3: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=7, size=2048 fake=0
[  320.073261][ T6060] loop0: detected capacity change from 0 to 2048
[  320.185152][ T6060] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  320.286517][ T6077] loop3: detected capacity change from 0 to 256
[  320.311249][ T6060] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  320.342856][ T6080] loop4: detected capacity change from 0 to 1024
[  320.358127][ T6060] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[  320.386104][ T6083] loop1: detected capacity change from 0 to 1024
[  320.410052][ T6060] EXT4-fs (loop0): This should not happen!! Data will be lost
[  320.410052][ T6060] 
[  320.424818][ T6060] EXT4-fs (loop0): Total free blocks count 0
[  320.432647][ T6060] EXT4-fs (loop0): Free/Dirty block details
[  320.443661][ T6060] EXT4-fs (loop0): free_blocks=2415919104
[  320.466655][ T6060] EXT4-fs (loop0): dirty_blocks=32
[  320.486282][ T6083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  320.509156][ T6080] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  320.530057][ T6060] EXT4-fs (loop0): Block reservation details
[  320.577119][ T6075] loop2: detected capacity change from 0 to 32768
[  320.584043][ T6060] EXT4-fs (loop0): i_reserved_data_blocks=2
[  320.736186][ T6075] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6075)
[  321.079392][ T6089] IPVS: Unknown mcast interface: pim6reg
[  321.693778][ T6075] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  321.711027][ T6075] BTRFS info (device loop2): using free space tree
[  321.720250][ T6075] BTRFS info (device loop2): has skinny extents
[  321.839780][ T6100] loop3: detected capacity change from 0 to 512
[  321.925480][ T6100] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz-executor.3: casefold flag without casefold feature
[  321.950543][ T6100] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  321.960707][ T6100] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  321.968972][ T6100] System zones: 0-2, 18-18, 34-35
[  321.998407][ T6100] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  322.021670][ T6100] overlayfs: missing 'lowerdir'
[  322.033259][ T6100] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 3: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=7, size=2048 fake=0
[  322.084430][ T6075] BTRFS info (device loop2): enabling ssd optimizations
[  322.163655][   T26] audit: type=1800 audit(1718380362.718:80): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=263 res=0 errno=0
[  322.277149][   T26] audit: type=1804 audit(1718380362.718:81): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir798890271/syzkaller.iTK9Km/57/file0/file1" dev="loop2" ino=263 res=1 errno=0
[  322.470731][ T6140] loop3: detected capacity change from 0 to 1024
[  322.627011][ T6140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  323.111460][ T6146] loop3: detected capacity change from 0 to 256
[  323.201895][ T6149] IPVS: Unknown mcast interface: pim6reg
[  324.182050][ T6142] loop0: detected capacity change from 0 to 32768
[  324.223398][ T6135] loop1: detected capacity change from 0 to 40427
[  324.279137][ T6135] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  324.295261][ T6154] loop2: detected capacity change from 0 to 4096
[  324.305098][ T6135] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  324.325052][ T6142] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6142)
[  324.394278][ T6135] F2FS-fs (loop1): Found nat_bits in checkpoint
[  324.496714][ T6142] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  324.505659][ T6142] BTRFS info (device loop0): using free space tree
[  325.159613][ T6142] BTRFS info (device loop0): has skinny extents
[  325.307871][ T6154] ntfs: volume version 3.1.
[  326.201712][ T6185] loop3: detected capacity change from 0 to 512
[  326.623410][ T6185] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz-executor.3: casefold flag without casefold feature
[  326.665051][ T6142] BTRFS error (device loop0): open_ctree failed
[  326.697005][ T6185] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  326.771080][ T6185] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  326.819643][ T6185] System zones: 0-2, 18-18, 34-35
[  326.829924][ T6185] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  326.868409][ T6185] overlayfs: missing 'lowerdir'
[  326.927570][ T6199] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 3: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=7, size=2048 fake=0
[  326.962940][ T6202] loop0: detected capacity change from 0 to 164
[  326.978225][ T6198] loop4: detected capacity change from 0 to 1024
[  327.045799][ T6202] Unable to read rock-ridge attributes
[  327.067220][ T6198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  327.360406][ T6216] loop0: detected capacity change from 0 to 128
[  327.379941][ T6215] loop4: detected capacity change from 0 to 2048
[  327.434174][ T6219] loop2: detected capacity change from 0 to 4096
[  327.503108][ T6215] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  327.606233][ T6215] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  327.630476][ T6219] ntfs: volume version 3.1.
[  327.673997][ T6215] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[  327.686853][ T6215] EXT4-fs (loop4): This should not happen!! Data will be lost
[  327.686853][ T6215] 
[  327.697309][ T6215] EXT4-fs (loop4): Total free blocks count 0
[  327.703449][ T6215] EXT4-fs (loop4): Free/Dirty block details
[  327.709748][ T6215] EXT4-fs (loop4): free_blocks=2415919104
[  327.716852][ T6215] EXT4-fs (loop4): dirty_blocks=32
[  327.722223][ T6215] EXT4-fs (loop4): Block reservation details
[  327.728451][ T6215] EXT4-fs (loop4): i_reserved_data_blocks=2
[  329.034365][ T6231] loop3: detected capacity change from 0 to 256
[  329.180930][ T6233] loop0: detected capacity change from 0 to 2048
[  329.277282][ T6241] loop4: detected capacity change from 0 to 1024
[  329.345740][ T6233] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  332.385198][ T6254] cgroup: none used incorrectly
[  332.464535][ T6259] loop1: detected capacity change from 0 to 64
[  333.558576][ T6266] sched: RT throttling activated
[  335.326068][ T6254] Trying to free block not in datazone
[  335.332932][ T6254] Trying to free block not in datazone
[  335.347931][ T6254] Trying to free block not in datazone
[  335.354033][ T6254] Trying to free block not in datazone
[  335.359828][ T6254] minix_free_block (loop1:6): bit already cleared
[  335.367421][ T6254] Trying to free block not in datazone
[  335.411049][ T6254] Trying to free block not in datazone
[  335.513165][ T6283] loop2: detected capacity change from 0 to 256
[  335.616799][ T6291] bpf: Bad value for 'mode'
[  335.790486][ T4001] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  335.882192][ T6291] loop0: detected capacity change from 0 to 1764
[  336.180705][ T4001] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10
[  336.237244][ T4001] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  336.324090][ T4001] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  336.402440][ T4001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.430390][ T6285] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  336.579242][ T6299] loop2: detected capacity change from 0 to 4096
[  336.768016][ T6299] ntfs: volume version 3.1.
[  336.845489][ T6309] cgroup: none used incorrectly
[  336.923096][ T6309] loop1: detected capacity change from 0 to 64
[  337.668121][ T4563] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.693208][ T6309] Trying to free block not in datazone
[  337.698793][ T6309] Trying to free block not in datazone
[  337.729333][ T6309] Trying to free block not in datazone
[  337.751705][ T6309] Trying to free block not in datazone
[  337.762037][ T6309] minix_free_block (loop1:6): bit already cleared
[  337.773250][ T6309] Trying to free block not in datazone
[  337.787484][ T4563] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.787739][ T6309] Trying to free block not in datazone
[  337.811428][ T6318] loop2: detected capacity change from 0 to 8
[  337.881948][ T4563] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.910936][ T6321] loop3: detected capacity change from 0 to 1024
[  337.982370][ T6321] EXT4-fs (loop3): Ignoring removed orlov option
[  338.004114][ T4563] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.076818][ T6321] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,noinit_itable,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none.
[  339.116418][ T4991] usb 5-1: USB disconnect, device number 10
[  339.158614][ T6335] sctp: failed to load transform for md5: -2
[  339.428264][ T6330] loop2: detected capacity change from 0 to 32768
[  339.516363][ T6330] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6330)
[  339.537644][ T6353] loop3: detected capacity change from 0 to 2048
[  339.561784][ T6322] chnl_net:caif_netlink_parms(): no params data found
[  339.646943][ T6353] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  339.648336][ T5964] Bluetooth: hci3: command 0x0406 tx timeout
[  339.665276][ T6330] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  339.727772][ T6330] BTRFS info (device loop2): using free space tree
[  339.756659][ T6330] BTRFS info (device loop2): has skinny extents
[  339.812398][ T6353] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  339.819029][ T6369] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  339.832814][ T6353] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[  339.936600][ T6353] EXT4-fs (loop3): This should not happen!! Data will be lost
[  339.936600][ T6353] 
[  339.961139][ T6353] EXT4-fs (loop3): Total free blocks count 0
[  339.971113][ T6353] EXT4-fs (loop3): Free/Dirty block details
[  339.977225][ T6353] EXT4-fs (loop3): free_blocks=2415919104
[  339.983251][ T6353] EXT4-fs (loop3): dirty_blocks=32
[  339.988526][ T6353] EXT4-fs (loop3): Block reservation details
[  339.994658][ T6353] EXT4-fs (loop3): i_reserved_data_blocks=2
[  340.025762][ T6369] loop1: detected capacity change from 0 to 8
[  340.036853][ T6322] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.060061][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.069167][ T6369] squashfs: Unknown parameter 'd5ùî‚ÊM2µl'
[  340.076458][ T6322] device bridge_slave_0 entered promiscuous mode
[  340.085823][ T6322] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.092992][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.102398][ T6322] device bridge_slave_1 entered promiscuous mode
[  340.133180][ T4001] Bluetooth: hci2: command 0x0409 tx timeout
[  340.203872][ T6330] BTRFS info (device loop2): enabling ssd optimizations
[  340.269048][ T6322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.325884][ T6322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.342833][ T6390] cgroup: none used incorrectly
[  340.434444][ T6390] loop4: detected capacity change from 0 to 64
[  340.553426][ T6322] team0: Port device team_slave_0 added
[  340.856982][ T6390] Trying to free block not in datazone
[  340.926956][ T6390] Trying to free block not in datazone
[  341.281175][ T6390] Trying to free block not in datazone
[  341.288961][ T6390] Trying to free block not in datazone
[  341.294618][ T6390] minix_free_block (loop4:6): bit already cleared
[  341.306238][ T6390] Trying to free block not in datazone
[  341.315167][ T6390] Trying to free block not in datazone
[  341.433763][ T6322] team0: Port device team_slave_1 added
[  341.739471][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.746460][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.781435][ T6322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.795776][ T4264] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  341.814170][ T6322] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.823883][ T6322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.873357][ T6322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.897009][ T6411] loop1: detected capacity change from 0 to 1024
[  341.928971][ T4563] device hsr_slave_0 left promiscuous mode
[  341.936423][ T4563] device hsr_slave_1 left promiscuous mode
[  341.956030][ T4563] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  341.968280][ T6413] loop2: detected capacity change from 0 to 1024
[  341.974824][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_0
[  341.993861][ T4563] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  342.004623][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_1
[  342.024159][ T6411] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  342.042136][ T6413] EXT4-fs (loop2): Ignoring removed orlov option
[  342.058057][ T6411] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869)
[  342.071573][ T4563] device bridge_slave_1 left promiscuous mode
[  342.075717][ T6411] EXT4-fs error (device loop1): ext4_get_journal_inode:5159: inode #5: comm syz-executor.1: casefold flag without casefold feature
[  342.078425][ T4563] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.099079][ T6411] EXT4-fs error (device loop1): ext4_get_journal_inode:5159: inode #5: comm syz-executor.1: unexpected EA_INODE flag
[  342.114234][ T6411] EXT4-fs (loop1): no journal found
[  342.120314][ T4563] device bridge_slave_0 left promiscuous mode
[  342.121702][ T6413] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,noinit_itable,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none.
[  342.145781][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.291715][ T4001] Bluetooth: hci2: command 0x041b tx timeout
[  342.354828][ T4563] device veth1_macvtap left promiscuous mode
[  342.387764][ T4264] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10
[  342.400718][ T4563] device veth0_macvtap left promiscuous mode
[  342.429001][ T4264] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  342.443507][ T4563] device veth1_vlan left promiscuous mode
[  342.476486][ T4563] device veth0_vlan left promiscuous mode
[  342.496721][ T4264] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  342.550234][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.649574][ T6403] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  343.121546][ T6423] loop1: detected capacity change from 0 to 47
[  343.254680][ T6425] loop4: detected capacity change from 0 to 256
[  343.356871][ T6425] FAT-fs (loop4): Directory bread(block 64) failed
[  343.363768][ T6425] FAT-fs (loop4): Directory bread(block 65) failed
[  343.418672][ T6425] FAT-fs (loop4): Directory bread(block 66) failed
[  343.447189][ T4258] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  343.835594][ T6425] FAT-fs (loop4): Directory bread(block 67) failed
[  343.947203][ T4258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.975088][ T6425] FAT-fs (loop4): Directory bread(block 68) failed
[  344.044315][ T4258] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  344.097106][ T6425] FAT-fs (loop4): Directory bread(block 69) failed
[  344.103854][ T6425] FAT-fs (loop4): Directory bread(block 70) failed
[  344.110484][ T6425] FAT-fs (loop4): Directory bread(block 71) failed
[  344.117596][ T4258] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  344.127977][ T4258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.136330][ T6425] FAT-fs (loop4): Directory bread(block 72) failed
[  344.142938][ T6425] FAT-fs (loop4): Directory bread(block 73) failed
[  344.152758][ T4258] usb 3-1: config 0 descriptor??
[  344.200861][ T4563] team0 (unregistering): Port device team_slave_1 removed
[  344.314477][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  344.344374][ T4563] team0 (unregistering): Port device team_slave_0 removed
[  344.365964][ T4264] Bluetooth: hci2: command 0x040f tx timeout
[  344.399996][ T4563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  344.417870][ T4563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  345.854716][   T26] audit: type=1800 audit(1718380385.979:82): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="loop4" ino=1048680 res=0 errno=0
[  346.116607][ T6441] cgroup: none used incorrectly
[  346.126493][ T4258] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  346.134373][ T4258] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving
[  346.138234][ T3584] usb 4-1: USB disconnect, device number 12
[  346.204080][ T4258] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  346.234761][ T6442] loop3: detected capacity change from 0 to 64
[  346.272090][ T4563] bond0 (unregistering): Released all slaves
[  346.371149][ T6440] Trying to free block not in datazone
[  346.380112][ T6440] Trying to free block not in datazone
[  346.386686][ T6440] Trying to free block not in datazone
[  346.395929][ T6440] Trying to free block not in datazone
[  346.401809][ T6440] minix_free_block (loop3:6): bit already cleared
[  346.408640][ T6440] Trying to free block not in datazone
[  346.414482][ T6440] Trying to free block not in datazone
[  346.444953][ T3588] Bluetooth: hci2: command 0x0419 tx timeout
[  346.474894][ T6322] device hsr_slave_0 entered promiscuous mode
[  346.496004][ T6322] device hsr_slave_1 entered promiscuous mode
[  346.955864][ T5964] usb 3-1: USB disconnect, device number 3
[  347.100554][ T6457] loop2: detected capacity change from 0 to 64
[  347.150677][ T6322] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  347.210527][ T6322] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  347.242270][ T6322] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  347.275654][ T6322] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  347.328048][ T6459] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  347.419572][ T6462] loop2: detected capacity change from 0 to 512
[  347.440803][ T6459] x_tables: duplicate underflow at hook 2
[  347.531657][ T6462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  347.563558][ T6322] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.580978][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  347.589655][ T6462] System zones: 1-12
[  347.590037][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  347.606238][ T6322] 8021q: adding VLAN 0 to HW filter on device team0
[  347.619805][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  347.629414][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  347.634569][ T6462] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #11: comm syz-executor.2: iget: bogus i_mode (0)
[  347.638325][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.656586][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.694634][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  347.703322][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  347.713544][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  347.723161][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.730314][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.745022][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  347.759680][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  347.815300][ T6462] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 11 (err -117)
[  347.856207][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  347.873451][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  347.910014][ T6462] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  347.953379][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  348.516748][   T26] audit: type=1804 audit(1718380388.641:83): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1583216660/syzkaller.baZyLB/53/file0" dev="sda1" ino=1955 res=1 errno=0
[  348.725934][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  348.735057][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  348.743775][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  348.752257][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  348.760952][ T3584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  348.775331][ T6322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  348.816274][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  348.990495][ T6489] loop1: detected capacity change from 0 to 512
[  348.999367][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  349.008017][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  349.028110][ T6322] 8021q: adding VLAN 0 to HW filter on device batadv0
[  349.055707][ T6489] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5
[  349.055707][ T6489] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  349.055707][ T6489] 
[  349.069269][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  349.074522][ T2979] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  349.091291][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  349.135193][ T6489] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #3: comm syz-executor.1: corrupted inode contents
[  349.164568][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  349.172868][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  349.183189][ T6489] EXT4-fs (loop1): Remounting filesystem read-only
[  349.190311][ T6489] EXT4-fs error (device loop1): ext4_dirty_inode:5993: inode #3: comm syz-executor.1: mark_inode_dirty error
[  349.195941][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  349.221200][ T6489] EXT4-fs error (device loop1): ext4_do_update_inode:5160: inode #3: comm syz-executor.1: corrupted inode contents
[  349.236528][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  349.247740][ T6489] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz-executor.1: mark_inode_dirty error
[  349.262472][ T6322] device veth0_vlan entered promiscuous mode
[  349.287058][ T6489] Quota error (device loop1): write_blk: dquota write failed
[  349.306790][ T6322] device veth1_vlan entered promiscuous mode
[  349.313785][ T6489] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  349.341048][ T6489] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz-executor.1: Failed to acquire dquot type 0
[  349.355630][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  349.364852][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  349.375549][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  349.384574][ T6489] EXT4-fs (loop1): 1 truncate cleaned up
[  349.384905][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  349.390240][ T6489] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,. Quota mode: writeback.
[  349.390410][ T6489] ext4 filesystem being mounted at /root/syzkaller-testdir1583216660/syzkaller.baZyLB/55/file1 supports timestamps until 2038 (0x7fffffff)
[  349.428487][ T6322] device veth0_macvtap entered promiscuous mode
[  349.442885][ T6322] device veth1_macvtap entered promiscuous mode
[  349.483887][ T2979] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10
[  349.506670][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  349.519171][ T2979] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  349.530426][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.541096][ T2979] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  349.550242][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  349.561289][ T2979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.571324][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.584102][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  349.596050][ T6474] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  349.603396][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.621626][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  349.654453][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.675177][ T6322] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.683946][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  349.696293][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  349.712871][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  349.724366][ T3585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  349.737336][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  349.750725][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.767044][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  349.788492][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.808746][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  349.846879][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  349.948990][ T6322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  349.981378][ T6322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.018357][ T6322] batman_adv: batadv0: Interface activated: batadv_slave_1
[  350.070382][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  350.079672][ T2979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  350.092109][ T6322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.104196][ T6322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.141993][ T6322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.198241][ T6322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  351.017554][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.035053][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.072557][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  351.107154][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.133586][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.189733][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  351.764556][ T6513] loop1: detected capacity change from 0 to 32768
[  351.982441][ T4991] usb 4-1: USB disconnect, device number 13
[  352.257312][ T6515] loop0: detected capacity change from 0 to 65536
[  352.347613][ T6527] loop1: detected capacity change from 0 to 1024
[  352.381092][ T6515] XFS (loop0): Mounting V5 Filesystem
[  352.400896][ T6527] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  352.409721][ T6521] loop3: detected capacity change from 0 to 8192
[  352.411156][ T6527] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869)
[  352.429691][ T6527] EXT4-fs error (device loop1): ext4_get_journal_inode:5159: inode #5: comm syz-executor.1: casefold flag without casefold feature
[  352.449830][ T6517] loop4: detected capacity change from 0 to 40427
[  352.450130][ T6527] EXT4-fs error (device loop1): ext4_get_journal_inode:5159: inode #5: comm syz-executor.1: unexpected EA_INODE flag
[  352.474702][ T6527] EXT4-fs (loop1): no journal found
[  352.481421][ T6515] XFS (loop0): Ending clean mount
[  352.490307][ T6515] XFS (loop0): Quotacheck needed: Please wait.
[  352.494735][ T6521] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  352.507849][ T6521] REISERFS (device loop3): using ordered data mode
[  352.516686][ T6521] reiserfs: using flush barriers
[  352.529089][ T6517] F2FS-fs (loop4): invalid crc value
[  352.536385][ T6521] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  352.553998][ T6521] REISERFS (device loop3): checking transaction log (loop3)
[  352.567888][ T6515] XFS (loop0): Quotacheck: Done.
[  352.570031][ T6517] F2FS-fs (loop4): Found nat_bits in checkpoint
[  352.581919][ T6521] REISERFS (device loop3): Using tea hash to sort names
[  352.621525][ T6521] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  352.650050][ T6322] XFS (loop0): Unmounting Filesystem
[  352.687716][ T6517] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  352.702443][ T6537] loop1: detected capacity change from 0 to 47
[  352.816353][ T5454] attempt to access beyond end of device
[  352.816353][ T5454] loop4: rw=2049, want=45104, limit=40427
[  352.908494][ T6539] loop3: detected capacity change from 0 to 1024
[  353.027317][ T6539] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  353.432407][ T6559] loop4: detected capacity change from 0 to 164
[  353.661399][ T3585] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  353.931004][ T6578] loop4: detected capacity change from 0 to 4096
[  353.981279][ T6578] ntfs: (device loop4): map_mft_record_page(): Mft record 0xa is corrupt.  Run chkdsk.
[  353.999942][ T6578] ntfs: (device loop4): map_mft_record(): Failed with error code 5.
[  354.008067][ T6578] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  354.029527][ T6578] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  354.043684][ T6578] ntfs: (device loop4): map_mft_record_page(): Mft record 0x4 is corrupt.  Run chkdsk.
[  354.064522][ T6571] loop3: detected capacity change from 0 to 32768
[  354.069010][ T6578] ntfs: (device loop4): map_mft_record(): Failed with error code 5.
[  354.079225][ T6578] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x4 as bad.  Run chkdsk.
[  354.100037][ T6578] ntfs: (device loop4): load_and_init_attrdef(): Failed to initialize attribute definition table.
[  354.111302][ T6578] ntfs: (device loop4): ntfs_fill_super(): Failed to load system files.
[  354.131182][ T3585] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10
[  354.144547][ T3585] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  354.144589][ T6571] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6571)
[  354.154601][ T3585] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  354.186904][ T3585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.202877][ T6573] loop0: detected capacity change from 0 to 40427
[  354.221434][ T6562] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  354.249726][ T6571] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  354.262381][ T6571] BTRFS info (device loop3): using free space tree
[  354.269037][ T6571] BTRFS info (device loop3): has skinny extents
[  354.294965][ T6573] F2FS-fs (loop0): invalid crc value
[  354.314340][ T6573] F2FS-fs (loop0): Found nat_bits in checkpoint
[  354.392013][ T6573] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  354.421964][   T26] audit: type=1804 audit(1718380394.984:84): pid=6573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1072825705/syzkaller.vBBzq8/3/file0/bus" dev="loop0" ino=10 res=1 errno=0
[  354.500629][ T6322] attempt to access beyond end of device
[  354.500629][ T6322] loop0: rw=2049, want=45104, limit=40427
[  356.026701][ T6571] BTRFS info (device loop3): enabling ssd optimizations
[  356.334887][ T6618] loop4: detected capacity change from 0 to 64
[  356.897041][ T6618] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  356.944271][ T6618] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[  357.089753][ T4258] usb 2-1: USB disconnect, device number 7
[  357.719486][ T4258] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  357.738832][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  357.959408][ T4258] usb 2-1: Using ep0 maxpacket: 8
[  358.079304][ T4258] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  358.100601][ T4258] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  358.129193][ T4258] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  358.149030][ T4258] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  358.179123][ T4258] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  358.198715][ T4258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.231210][ T6644] loop0: detected capacity change from 0 to 256
[  358.260131][ T4258] hub 2-1:1.0: bad descriptor, ignoring hub
[  358.270985][ T4258] hub: probe of 2-1:1.0 failed with error -5
[  358.284500][ T6637] loop3: detected capacity change from 0 to 32768
[  358.295267][ T4258] cdc_wdm 2-1:1.0: skipping garbage
[  358.300805][ T4258] cdc_wdm 2-1:1.0: skipping garbage
[  358.325732][ T4258] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  358.333173][ T6644] FAT-fs (loop0): Directory bread(block 64) failed
[  358.345689][ T4258] cdc_wdm 2-1:1.0: Unknown control protocol
[  358.348969][ T6644] FAT-fs (loop0): Directory bread(block 65) failed
[  358.356192][ T6637] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6637)
[  358.368705][ T6644] FAT-fs (loop0): Directory bread(block 66) failed
[  358.377665][ T6644] FAT-fs (loop0): Directory bread(block 67) failed
[  358.385486][ T6644] FAT-fs (loop0): Directory bread(block 68) failed
[  358.400317][ T6644] FAT-fs (loop0): Directory bread(block 69) failed
[  358.407425][ T6644] FAT-fs (loop0): Directory bread(block 70) failed
[  358.415343][ T6644] FAT-fs (loop0): Directory bread(block 71) failed
[  358.423341][ T6644] FAT-fs (loop0): Directory bread(block 72) failed
[  358.430101][ T6644] FAT-fs (loop0): Directory bread(block 73) failed
[  358.430520][ T6637] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  358.445973][ T6637] BTRFS info (device loop3): using free space tree
[  358.452645][ T6637] BTRFS info (device loop3): has skinny extents
[  358.481851][ T6631] udc-core: couldn't find an available UDC or it's busy
[  358.494031][ T6631] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  358.544378][ T6637] BTRFS info (device loop3): enabling ssd optimizations
[  358.619272][ T3585] usb 2-1: USB disconnect, device number 8
[  359.258151][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  359.258279][   T26] audit: type=1800 audit(1718380399.686:87): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=1048685 res=0 errno=0
[  359.629690][ T6669] 
[  359.632065][ T6669] ======================================================
[  359.639093][ T6669] WARNING: possible circular locking dependency detected
[  359.646213][ T6669] 5.15.160-syzkaller #0 Not tainted
[  359.651419][ T6669] ------------------------------------------------------
[  359.658441][ T6669] syz-executor.3/6669 is trying to acquire lock:
[  359.664780][ T6669] ffff88807af5e650 (sb_internal#3){.+.+}-{0:0}, at: btrfs_dirty_inode+0xcc/0x1c0
[  359.674253][ T6669] 
[  359.674253][ T6669] but task is already holding lock:
[  359.681794][ T6669] ffff888023adea28 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x175/0x2d0
[  359.690934][ T6669] 
[  359.690934][ T6669] which lock already depends on the new lock.
[  359.690934][ T6669] 
[  359.701447][ T6669] 
[  359.701447][ T6669] the existing dependency chain (in reverse order) is:
[  359.710557][ T6669] 
[  359.710557][ T6669] -> #5 (&mm->mmap_lock){++++}-{3:3}:
[  359.718132][ T6669]        lock_acquire+0x1db/0x4f0
[  359.723170][ T6669]        __might_fault+0xb4/0x110
[  359.728384][ T6669]        _copy_to_user+0x28/0x130
[  359.733407][ T6669]        fat_ioctl_filldir+0x1d8/0x600
[  359.738975][ T6669]        __fat_readdir+0x1485/0x1b40
[  359.744281][ T6669]        fat_dir_ioctl+0x27e/0x3b0
[  359.749397][ T6669]        __se_sys_ioctl+0xf1/0x160
[  359.754511][ T6669]        do_syscall_64+0x3b/0xb0
[  359.759454][ T6669]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  359.765894][ T6669] 
[  359.765894][ T6669] -> #4 (&sbi->s_lock#2){+.+.}-{3:3}:
[  359.773652][ T6669]        lock_acquire+0x1db/0x4f0
[  359.778695][ T6669]        __mutex_lock_common+0x1da/0x25a0
[  359.784498][ T6669]        mutex_lock_nested+0x17/0x20
[  359.789956][ T6669]        __fat_readdir+0x1d4/0x1b40
[  359.795158][ T6669]        iterate_dir+0x224/0x570
[  359.800192][ T6669]        __se_sys_getdents+0x1e8/0x4c0
[  359.805647][ T6669]        do_syscall_64+0x3b/0xb0
[  359.810580][ T6669]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  359.816987][ T6669] 
[  359.816987][ T6669] -> #3 (&sb->s_type->i_mutex_key#40){.+.+}-{3:3}:
[  359.825674][ T6669]        lock_acquire+0x1db/0x4f0
[  359.830694][ T6669]        down_read+0x45/0x2e0
[  359.835367][ T6669]        lookup_slow+0x45/0x70
[  359.840124][ T6669]        walk_component+0x48c/0x610
[  359.845317][ T6669]        path_lookupat+0x16f/0x450
[  359.850427][ T6669]        filename_lookup+0x230/0x5c0
[  359.855710][ T6669]        kern_path+0x37/0x180
[  359.860383][ T6669]        lookup_bdev+0xc1/0x280
[  359.865228][ T6669]        btrfs_free_stale_devices+0x71f/0xb00
[  359.871681][ T6669]        btrfs_forget_devices+0x52/0x80
[  359.877260][ T6669]        btrfs_control_ioctl+0x108/0x210
[  359.882928][ T6669]        __se_sys_ioctl+0xf1/0x160
[  359.888070][ T6669]        do_syscall_64+0x3b/0xb0
[  359.893158][ T6669]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  359.899573][ T6669] 
[  359.899573][ T6669] -> #2 (&fs_devs->device_list_mutex){+.+.}-{3:3}:
[  359.908519][ T6669]        lock_acquire+0x1db/0x4f0
[  359.913641][ T6669]        __mutex_lock_common+0x1da/0x25a0
[  359.919357][ T6669]        mutex_lock_nested+0x17/0x20
[  359.924781][ T6669]        btrfs_run_dev_stats+0xeb/0xfd0
[  359.930344][ T6669]        commit_cowonly_roots+0x1cb/0x9d0
[  359.936188][ T6669]        btrfs_commit_transaction+0x13af/0x3800
[  359.942423][ T6669]        sync_filesystem+0x1bc/0x220
[  359.947968][ T6669]        generic_shutdown_super+0x6e/0x2c0
[  359.953782][ T6669]        kill_anon_super+0x37/0x60
[  359.958980][ T6669]        btrfs_kill_super+0x3d/0x50
[  359.964176][ T6669]        deactivate_locked_super+0xa0/0x110
[  359.970073][ T6669]        cleanup_mnt+0x44e/0x500
[  359.975002][ T6669]        task_work_run+0x129/0x1a0
[  359.980108][ T6669]        exit_to_user_mode_loop+0x106/0x130
[  359.986080][ T6669]        exit_to_user_mode_prepare+0xb1/0x140
[  359.992252][ T6669]        syscall_exit_to_user_mode+0x5d/0x240
[  359.998319][ T6669]        do_syscall_64+0x47/0xb0
[  360.003252][ T6669]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  360.009665][ T6669] 
[  360.009665][ T6669] -> #1 (&fs_info->tree_log_mutex){+.+.}-{3:3}:
[  360.018087][ T6669]        reacquire_held_locks+0x3a2/0x660
[  360.023803][ T6669]        lock_release+0x369/0x9a0
[  360.028934][ T6669]        __mutex_unlock_slowpath+0xde/0x750
[  360.034909][ T6669]        btrfs_commit_transaction+0x1e34/0x3800
[  360.041206][ T6669]        close_ctree+0x390/0x890
[  360.046135][ T6669]        generic_shutdown_super+0x136/0x2c0
[  360.052129][ T6669]        kill_anon_super+0x37/0x60
[  360.057338][ T6669]        btrfs_kill_super+0x3d/0x50
[  360.062630][ T6669]        deactivate_locked_super+0xa0/0x110
[  360.068609][ T6669]        cleanup_mnt+0x44e/0x500
[  360.073538][ T6669]        task_work_run+0x129/0x1a0
[  360.078761][ T6669]        exit_to_user_mode_loop+0x106/0x130
[  360.084647][ T6669]        exit_to_user_mode_prepare+0xb1/0x140
[  360.090983][ T6669]        syscall_exit_to_user_mode+0x5d/0x240
[  360.097132][ T6669]        do_syscall_64+0x47/0xb0
[  360.102177][ T6669]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  360.108586][ T6669] 
[  360.108586][ T6669] -> #0 (sb_internal#3){.+.+}-{0:0}:
[  360.116054][ T6669]        validate_chain+0x1649/0x5930
[  360.121506][ T6669]        __lock_acquire+0x1295/0x1ff0
[  360.126880][ T6669]        lock_acquire+0x1db/0x4f0
[  360.132006][ T6669]        start_transaction+0x5a8/0x11a0
[  360.137554][ T6669]        btrfs_dirty_inode+0xcc/0x1c0
[  360.143114][ T6669]        touch_atime+0x34e/0x680
[  360.148052][ T6669]        btrfs_file_mmap+0xbf/0x120
[  360.153252][ T6669]        mmap_region+0x10e7/0x1670
[  360.158360][ T6669]        do_mmap+0x78d/0xe00
[  360.163125][ T6669]        vm_mmap_pgoff+0x1ca/0x2d0
[  360.168504][ T6669]        ksys_mmap_pgoff+0x559/0x780
[  360.173806][ T6669]        do_syscall_64+0x3b/0xb0
[  360.178821][ T6669]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  360.185402][ T6669] 
[  360.185402][ T6669] other info that might help us debug this:
[  360.185402][ T6669] 
[  360.195620][ T6669] Chain exists of:
[  360.195620][ T6669]   sb_internal#3 --> &sbi->s_lock#2 --> &mm->mmap_lock
[  360.195620][ T6669] 
[  360.208572][ T6669]  Possible unsafe locking scenario:
[  360.208572][ T6669] 
[  360.216101][ T6669]        CPU0                    CPU1
[  360.221478][ T6669]        ----                    ----
[  360.226838][ T6669]   lock(&mm->mmap_lock);
[  360.231163][ T6669]                                lock(&sbi->s_lock#2);
[  360.238012][ T6669]                                lock(&mm->mmap_lock);
[  360.244856][ T6669]   lock(sb_internal#3);
[  360.249148][ T6669] 
[  360.249148][ T6669]  *** DEADLOCK ***
[  360.249148][ T6669] 
[  360.257286][ T6669] 2 locks held by syz-executor.3/6669:
[  360.262731][ T6669]  #0: ffff888023adea28 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x175/0x2d0
[  360.272307][ T6669]  #1: ffff88807af5e460 (sb_writers#16){.+.+}-{0:0}, at: btrfs_file_mmap+0xbf/0x120
[  360.281806][ T6669] 
[  360.281806][ T6669] stack backtrace:
[  360.287777][ T6669] CPU: 1 PID: 6669 Comm: syz-executor.3 Not tainted 5.15.160-syzkaller #0
[  360.296356][ T6669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  360.306501][ T6669] Call Trace:
[  360.309782][ T6669]  <TASK>
[  360.312708][ T6669]  dump_stack_lvl+0x1e3/0x2d0
[  360.317398][ T6669]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  360.323029][ T6669]  ? print_circular_bug+0x12b/0x1a0
[  360.328229][ T6669]  check_noncircular+0x2f8/0x3b0
[  360.333167][ T6669]  ? add_chain_block+0x850/0x850
[  360.338361][ T6669]  ? lockdep_lock+0x11f/0x2a0
[  360.343127][ T6669]  validate_chain+0x1649/0x5930
[  360.347983][ T6669]  ? lockdep_hardirqs_on+0x94/0x130
[  360.353178][ T6669]  ? reacquire_held_locks+0x660/0x660
[  360.358540][ T6669]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  360.364430][ T6669]  ? _raw_spin_unlock+0x40/0x40
[  360.369276][ T6669]  ? stack_trace_save+0x113/0x1c0
[  360.374295][ T6669]  ? stack_trace_snprint+0xe0/0xe0
[  360.379400][ T6669]  ? stack_depot_save+0x3db/0x440
[  360.384538][ T6669]  ? __kasan_slab_alloc+0xa5/0xc0
[  360.389643][ T6669]  ? __kasan_slab_alloc+0x8e/0xc0
[  360.394775][ T6669]  ? slab_post_alloc_hook+0x53/0x380
[  360.400056][ T6669]  ? start_transaction+0x49f/0x11a0
[  360.405339][ T6669]  ? mark_lock+0x98/0x340
[  360.409661][ T6669]  ? ksys_mmap_pgoff+0x559/0x780
[  360.414593][ T6669]  __lock_acquire+0x1295/0x1ff0
[  360.419441][ T6669]  lock_acquire+0x1db/0x4f0
[  360.424025][ T6669]  ? btrfs_dirty_inode+0xcc/0x1c0
[  360.429137][ T6669]  ? read_lock_is_recursive+0x10/0x10
[  360.434588][ T6669]  ? __might_sleep+0xc0/0xc0
[  360.439176][ T6669]  ? slab_post_alloc_hook+0x73/0x380
[  360.444458][ T6669]  ? start_transaction+0x49f/0x11a0
[  360.449649][ T6669]  ? rcu_is_watching+0x11/0xa0
[  360.454580][ T6669]  ? start_transaction+0x49f/0x11a0
[  360.459866][ T6669]  ? kmem_cache_alloc+0x128/0x280
[  360.464884][ T6669]  start_transaction+0x5a8/0x11a0
[  360.469919][ T6669]  ? btrfs_dirty_inode+0xcc/0x1c0
[  360.475036][ T6669]  btrfs_dirty_inode+0xcc/0x1c0
[  360.479884][ T6669]  ? btrfs_fiemap+0x160/0x160
[  360.484555][ T6669]  ? btrfs_file_mmap+0xbf/0x120
[  360.489600][ T6669]  touch_atime+0x34e/0x680
[  360.494013][ T6669]  ? current_time+0x2f0/0x2f0
[  360.498684][ T6669]  ? vm_area_alloc+0x20/0xe0
[  360.503298][ T6669]  ? vm_area_alloc+0x20/0xe0
[  360.507928][ T6669]  ? kmem_cache_alloc+0x128/0x280
[  360.513001][ T6669]  btrfs_file_mmap+0xbf/0x120
[  360.517683][ T6669]  mmap_region+0x10e7/0x1670
[  360.522288][ T6669]  ? file_mmap_ok+0x150/0x150
[  360.526959][ T6669]  ? cap_mmap_addr+0x15e/0x2d0
[  360.531721][ T6669]  ? bpf_lsm_mmap_addr+0x5/0x10
[  360.536917][ T6669]  ? get_unmapped_area+0x317/0x380
[  360.542027][ T6669]  do_mmap+0x78d/0xe00
[  360.546190][ T6669]  vm_mmap_pgoff+0x1ca/0x2d0
[  360.550864][ T6669]  ? account_locked_vm+0xe0/0xe0
[  360.555814][ T6669]  ? __fget_files+0x413/0x480
[  360.560690][ T6669]  ksys_mmap_pgoff+0x559/0x780
[  360.565454][ T6669]  ? mmap_region+0x1670/0x1670
[  360.570222][ T6669]  ? syscall_enter_from_user_mode+0x2e/0x240
[  360.576235][ T6669]  ? lockdep_hardirqs_on+0x94/0x130
[  360.581468][ T6669]  do_syscall_64+0x3b/0xb0
[  360.585988][ T6669]  ? clear_bhb_loop+0x15/0x70
[  360.590675][ T6669]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  360.596573][ T6669] RIP: 0033:0x7fd4f55a2ea9
[  360.600992][ T6669] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  360.620767][ T6669] RSP: 002b:00007fd4f40fb0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  360.629538][ T6669] RAX: ffffffffffffffda RBX: 00007fd4f56da050 RCX: 00007fd4f55a2ea9
[  360.637507][ T6669] RDX: 0000000000000003 RSI: 0000000000003000 RDI: 0000000020000000
[  360.645473][ T6669] RBP: 00007fd4f5611ff4 R08: 000000000000000a R09: 0000000000000000
[  360.653450][ T6669] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000
[  360.661413][ T6669] R13: 000000000000006e R14: 00007fd4f56da050 R15: 00007fffd2987268
[  360.669388][ T6669]  </TASK>
2024/06/14 15:53:21 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  360.684680][ T4563] attempt to access beyond end of device
[  360.684680][ T4563] loop0: rw=1, want=1768, limit=256
[  360.701356][ T4563] attempt to access beyond end of device
[  360.701356][ T4563] loop0: rw=1, want=1928, limit=256
[  360.716808][ T4563] attempt to access beyond end of device
[  360.716808][ T4563] loop0: rw=1, want=6200, limit=256
[  360.730676][ T4563] attempt to access beyond end of device
[  360.730676][ T4563] loop0: rw=1, want=6824, limit=256