last executing test programs:

5.745616069s ago: executing program 2:
syz_mount_image$bfs(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x4, 0xb1, &(0x7f0000000400)="$eJzs1zFqwmAYBuC3oW3aJT1Ah94gd+hRSsd261Rx8ELunsIjCB7AwU1cIjExZHYwIM8DCby8/wff+P/r4/I9VdK85awZ+fuf/Xz9tv9VBs/hjhRJyiQvbai6vPvsuoe+3+zn35dvNPo40coAAMCVitRJXvubfhZF6rprtsOZj/YtcOjD02i4vOmqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJM4BQAA//8fTCFM")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x2)
getdents(r0, 0x0, 0x0)

5.61412533s ago: executing program 2:
r0 = io_uring_setup(0x253d, &(0x7f0000000180))
r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e70009058a", @ANYRES8], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read$rfkill(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.857697995s ago: executing program 1:
socket(0x200000100000011, 0x803, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300))
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0})
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2})
pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x78}}, 0x0)

2.573257356s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x13, r0, 0x0)

2.525592594s ago: executing program 1:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], &(0x7f0000000580)=""/202, 0x26, 0xca, 0x1}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x1}, 0x10}, 0x80)

2.461445744s ago: executing program 2:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000000)=0x1)

2.373432588s ago: executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0001}]})
personality(0x0)

2.283040872s ago: executing program 2:
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0)

2.280184583s ago: executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
io_uring_setup(0x5237, &(0x7f00000002c0))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0)

2.204992975s ago: executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1.97435508s ago: executing program 1:
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000280), 0x4, 0x97e1, &(0x7f0000009b80)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4024587b, 0x0)

1.955965284s ago: executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1)

1.874086036s ago: executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
chdir(&(0x7f0000000000)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)

1.33873265s ago: executing program 0:
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x1a9)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143442, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000185300000b00000000000000f4ffffff17110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000ad0880000800000085000000c80000009500000000000000180000000200000000000000070000001800000028d1000000000000ada0000018330000030000000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x401b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r6=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0xa891, "340b7832ceefd131b8e6498c25f58f00000000e93bbabd1ccfde974a2700", <r7=>0xffffffffffffffff})
read$FUSE(r1, &(0x7f00000017c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffb, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0x3}, @noop, @lsrr={0x83, 0xf, 0xdc, [@broadcast, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r11, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r11, 0x0)
r12 = dup(r6)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r13, 0xae9a)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
flistxattr(r7, &(0x7f00000002c0)=""/130, 0x82)
prctl$PR_SCHED_CORE(0x3e, 0x4, r8, 0x2, &(0x7f0000000280))
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, <r14=>0xffffffffffffffff})
ppoll(&(0x7f00000001c0)=[{r14}], 0x1, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

1.325871982s ago: executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)

1.321928833s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x13, r0, 0x0)

1.237247626s ago: executing program 3:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000000)=0x1)

1.21546784s ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "3c69a0a7123acbf35d628196cc1da7c2"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "6aefbf48ce3a3c5c7acf948c6d3adca1"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)

1.120631994s ago: executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0001}]})
personality(0x0)

1.113519535s ago: executing program 4:
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd, 0x0, &(0x7f0000000000)="ff418864b0833efc792e968781", 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x60642, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x1930c0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000000c00)={[{@noblock_validity}, {}, {@nombcache}, {@acl}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@lazytime}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x56a, &(0x7f0000000680)="$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")
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
r7 = dup2(r4, r3)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000003c0)={r6, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000340)=0x90)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
setxattr$incfs_id(0x0, 0x0, &(0x7f0000000180), 0x20, 0x0)

989.665855ms ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

874.045013ms ago: executing program 4:
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x762, &(0x7f0000000680)="$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")

783.218237ms ago: executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
writev(r0, &(0x7f0000000580)=[{0x0}], 0x1)

768.13323ms ago: executing program 0:
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x1008801, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x2, 0x1ee, &(0x7f00000001c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="039b070000"])

566.916281ms ago: executing program 4:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)

563.155752ms ago: executing program 0:
r0 = socket(0x22, 0x2, 0x4)
recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x1)

537.775516ms ago: executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x94)

477.313015ms ago: executing program 0:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0)
r0 = socket(0x18, 0x0, 0x1)
r1 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0x541b, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000002c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000180))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x10, 0x2a, [@random={0xdd, 0xa, 'abcdefghij'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0xb}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f00000000c0)={{0x4, 0x4}, 'port1\x00', 0xd0, 0x11018, 0x7f, 0x6b, 0xffff, 0x7, 0x0, 0x0, 0x1, 0x9})
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000280)=0x1, 0x4)

123.464411ms ago: executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x44, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0)

0s ago: executing program 3:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000000)=0x1)

kernel console output (not intermixed with test programs):

ty change from 0 to 512
[  119.678819][ T4923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  119.691882][   T26] audit: type=1804 audit(1717608173.431:13): pid=4919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4077396351/syzkaller.Fkg9qx/102/file0" dev="sda1" ino=1957 res=1 errno=0
[  119.716872][ T4930] loop1: detected capacity change from 0 to 64
[  119.729103][ T4919] loop4: detected capacity change from 0 to 164
[  119.731451][ T4923] ext4 filesystem being mounted at /root/syzkaller-testdir2463646531/syzkaller.mcnsrL/48/bus supports timestamps until 2038 (0x7fffffff)
[  119.761520][ T4930] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1
[  119.776530][   T26] audit: type=1804 audit(1717608173.431:14): pid=4919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4077396351/syzkaller.Fkg9qx/102/file0" dev="sda1" ino=1957 res=1 errno=0
[  119.965095][   T26] audit: type=1804 audit(1717608173.431:15): pid=4919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4077396351/syzkaller.Fkg9qx/102/file0" dev="sda1" ino=1957 res=1 errno=0
[  120.743113][ T4323] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  120.750264][   T26] audit: type=1804 audit(1717608173.431:16): pid=4919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4077396351/syzkaller.Fkg9qx/102/file0" dev="sda1" ino=1957 res=1 errno=0
[  120.782838][ T4934] loop0: detected capacity change from 0 to 2048
[  120.915166][ T3743] EXT4-fs (loop2): unmounting filesystem.
[  120.981348][ T4934] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  121.301151][ T4323] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  121.445999][ T4323] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26994, setting to 1024
[  121.765747][ T4323] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024
[  121.791357][ T4323] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  121.801729][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.832997][ T4919] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  121.844677][   T26] audit: type=1326 audit(1717608175.581:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5761c7cf69 code=0x0
[  121.882901][ T4323] usb 5-1: invalid MIDI out EP 0
[  121.899248][ T3571] EXT4-fs (loop0): unmounting filesystem.
[  122.074230][ T4323] snd-usb-audio: probe of 5-1:27.0 failed with error -22
[  122.093211][ T3564] udevd[3564]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  122.249414][   T26] audit: type=1326 audit(1717608175.981:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e0da7cf69 code=0x0
[  122.349332][ T4966] loop1: detected capacity change from 0 to 4096
[  122.438409][ T4323] usb 5-1: USB disconnect, device number 6
[  122.846271][ T4963] loop2: detected capacity change from 0 to 32768
[  122.889258][ T4963] XFS (loop2): Mounting V5 Filesystem
[  122.981613][ T4963] XFS (loop2): Ending clean mount
[  123.026211][ T4970] loop0: detected capacity change from 0 to 32768
[  123.124340][ T4970] XFS (loop0): Mounting V5 Filesystem
[  123.142843][ T3743] XFS (loop2): Unmounting Filesystem
[  123.333775][ T4970] XFS (loop0): Ending clean mount
[  123.369973][ T4970] XFS (loop0): Quotacheck needed: Please wait.
[  123.416927][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  123.446235][   T26] audit: type=1326 audit(1717608177.181:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5002 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e0da7cf69 code=0x0
[  123.469272][ T4970] XFS (loop0): Quotacheck: Done.
[  123.578293][ T3571] XFS (loop0): Unmounting Filesystem
[  123.828786][ T5011] loop1: detected capacity change from 0 to 4096
[  124.172107][   T26] audit: type=1326 audit(1717608177.911:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8ca07cf69 code=0x0
[  124.371830][ T5030] loop3: detected capacity change from 0 to 2048
[  124.557021][ T5030] hpfs: filesystem error: improperly stopped; already mounted read-only
[  124.570030][ T5030] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4
[  124.862424][ T5054] loop4: detected capacity change from 0 to 512
[  124.910142][ T5054] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  124.922479][ T5054] ext4 filesystem being mounted at /root/syzkaller-testdir4077396351/syzkaller.Fkg9qx/108/bus supports timestamps until 2038 (0x7fffffff)
[  124.948649][ T5052] loop3: detected capacity change from 0 to 4096
[  125.056015][ T3572] EXT4-fs (loop4): unmounting filesystem.
[  125.848165][ T5067] autofs4:pid:5067:autofs_fill_super: called with bogus options
[  125.965701][   T26] audit: type=1800 audit(1717608179.701:21): pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1950 res=0 errno=0
[  126.031211][   T26] audit: type=1800 audit(1717608179.701:22): pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1950 res=0 errno=0
[  126.330614][ T5076] loop2: detected capacity change from 0 to 2048
[  126.745559][ T5076] hpfs: filesystem error: improperly stopped; already mounted read-only
[  126.774700][ T5076] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4
[  126.831841][ T3617] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  126.976695][ T5100] loop3: detected capacity change from 0 to 2048
[  127.020951][ T5100] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.169194][ T5105] loop4: detected capacity change from 0 to 4096
[  127.735945][ T5118] loop1: detected capacity change from 0 to 2048
[  127.742662][ T5118] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  127.743779][ T5118] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  127.832669][ T5118] loop1: detected capacity change from 0 to 1024
[  127.835003][ T5118] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  127.898119][ T5118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  129.241303][   T26] audit: type=1804 audit(1717608182.191:23): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2404691181/syzkaller.tK0xUi/79/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  129.241813][   T26] audit: type=1800 audit(1717608182.191:24): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0
[  129.241945][   T26] audit: type=1804 audit(1717608182.781:25): pid=5138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2404691181/syzkaller.tK0xUi/79/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  129.611969][   T26] audit: type=1800 audit(1717608183.351:26): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1960 res=0 errno=0
[  129.662285][ T3943] EXT4-fs (loop1): unmounting filesystem.
[  129.853239][ T5147] loop3: detected capacity change from 0 to 1024
[  130.040443][ T5153] loop2: detected capacity change from 0 to 2048
[  130.067121][ T5153] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[  130.098670][ T5124] loop4: detected capacity change from 0 to 32768
[  130.111705][ T5124] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5124)
[  130.163142][ T5124] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  130.187754][ T5124] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  130.266673][ T5124] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  130.296179][ T5124] BTRFS info (device loop4): force zstd compression, level 3
[  130.330506][ T5124] BTRFS info (device loop4): force zlib compression, level 3
[  130.372251][ T5124] BTRFS info (device loop4): force clearing of disk cache
[  130.401026][ T5124] BTRFS info (device loop4): turning off barriers
[  130.412950][ T5124] BTRFS info (device loop4): enabling ssd optimizations
[  130.419968][ T5124] BTRFS info (device loop4): using free space tree
[  130.645222][ T5157] xt_hashlimit: invalid interval
[  130.665293][ T3696] hfsplus: b-tree write err: -5, ino 4
[  131.065292][ T5124] BTRFS error (device loop4): open_ctree failed
[  131.076580][ T3700] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.219551][ T3700] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.320669][ T3700] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.385973][ T5189] loop0: detected capacity change from 0 to 4096
[  131.418910][ T3700] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.579324][   T26] audit: type=1800 audit(1717608185.311:27): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=33 res=0 errno=0
[  131.770312][ T5162] loop2: detected capacity change from 0 to 32768
[  131.800140][ T5201] loop1: detected capacity change from 0 to 2048
[  131.826485][ T5162] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5162)
[  131.852583][ T5201] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[  131.874638][ T5162] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  131.886059][ T3588] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.898414][ T3588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.908272][ T3588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.928861][ T3588] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.936464][ T5162] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  131.945723][ T3588] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  131.953120][ T3588] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.982502][ T5162] BTRFS info (device loop2): using free space tree
[  132.159588][ T5228] loop4: detected capacity change from 0 to 512
[  132.218895][ T5162] BTRFS info (device loop2): enabling ssd optimizations
[  132.227929][ T5228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  132.287081][ T5228] ext4 filesystem being mounted at /root/syzkaller-testdir4077396351/syzkaller.Fkg9qx/119/bus supports timestamps until 2038 (0x7fffffff)
[  132.444548][ T5206] chnl_net:caif_netlink_parms(): no params data found
[  132.510070][ T3743] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.568033][ T5247] loop1: detected capacity change from 0 to 256
[  133.262295][ T5247] FAT-fs (loop1): Directory bread(block 64) failed
[  133.276459][ T1252] ieee802154 phy0 wpan0: encryption failed: -22
[  133.284860][ T1252] ieee802154 phy1 wpan1: encryption failed: -22
[  133.301386][ T5247] FAT-fs (loop1): Directory bread(block 65) failed
[  133.316125][ T5247] FAT-fs (loop1): Directory bread(block 66) failed
[  133.332106][ T5247] FAT-fs (loop1): Directory bread(block 67) failed
[  133.350388][ T5247] FAT-fs (loop1): Directory bread(block 68) failed
[  133.357743][ T5247] FAT-fs (loop1): Directory bread(block 69) failed
[  133.370262][ T5247] FAT-fs (loop1): Directory bread(block 70) failed
[  133.378326][ T5247] FAT-fs (loop1): Directory bread(block 71) failed
[  133.385433][ T5247] FAT-fs (loop1): Directory bread(block 72) failed
[  133.397430][ T5247] FAT-fs (loop1): Directory bread(block 73) failed
[  133.458422][ T5221] loop0: detected capacity change from 0 to 32768
[  133.510136][ T5221] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5221)
[  133.573904][ T5221] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  133.600118][ T5221] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  133.617115][ T5221] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  133.628522][ T5221] BTRFS info (device loop0): force zstd compression, level 3
[  133.648085][ T5221] BTRFS info (device loop0): force zlib compression, level 3
[  133.658244][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.691127][ T5221] BTRFS info (device loop0): force clearing of disk cache
[  133.691632][ T3572] EXT4-fs (loop4): unmounting filesystem.
[  133.698416][ T5221] BTRFS info (device loop0): turning off barriers
[  133.711759][ T5206] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.719937][ T5206] device bridge_slave_0 entered promiscuous mode
[  133.728001][ T5221] BTRFS info (device loop0): enabling ssd optimizations
[  133.745486][ T5221] BTRFS info (device loop0): using free space tree
[  133.821558][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.828726][ T5206] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.856559][ T5206] device bridge_slave_1 entered promiscuous mode
[  133.941110][ T5270] loop1: detected capacity change from 0 to 1024
[  133.961952][ T5270] EXT4-fs: Ignoring removed orlov option
[  133.987920][ T5270] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  133.996193][ T3583] Bluetooth: hci2: command tx timeout
[  134.018890][ T5221] BTRFS info (device loop0): rebuilding free space tree
[  134.029193][ T3700] device hsr_slave_0 left promiscuous mode
[  134.046711][ T3700] device hsr_slave_1 left promiscuous mode
[  134.072533][ T5270] EXT4-fs (loop1): orphan cleanup on readonly fs
[  134.089476][ T3700] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.102049][ T5267] loop4: detected capacity change from 0 to 4096
[  134.106354][ T3700] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.130399][ T5270] EXT4-fs error (device loop1): ext4_map_blocks:721: inode #3: block 3: comm syz-executor.1: lblock 3 mapped to illegal pblock 3 (length 1)
[  134.149683][ T3700] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.165224][ T3700] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.186834][ T3700] device bridge_slave_1 left promiscuous mode
[  134.223385][ T5270] EXT4-fs (loop1): Remounting filesystem read-only
[  134.244273][ T3571] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  134.259916][ T5270] Quota error (device loop1): write_blk: dquota write failed
[  134.270039][ T3700] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.271924][ T5270] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3
[  134.293639][ T5270] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  134.317499][   T26] audit: type=1800 audit(1717608188.051:28): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=33 res=0 errno=0
[  134.350024][ T5270] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz-executor.1: Failed to acquire dquot type 0
[  134.361899][ T5286] loop2: detected capacity change from 0 to 512
[  134.364014][ T3700] device bridge_slave_0 left promiscuous mode
[  134.389934][ T3700] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.412518][ T5286] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  134.428768][ T5286] ext4 filesystem being mounted at /root/syzkaller-testdir2463646531/syzkaller.mcnsrL/71/bus supports timestamps until 2038 (0x7fffffff)
[  134.474352][ T5270] EXT4-fs (loop1): 1 orphan inode deleted
[  134.578440][ T5270] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  134.580059][ T3743] EXT4-fs (loop2): unmounting filesystem.
[  134.647261][ T3700] device veth1_macvtap left promiscuous mode
[  134.657656][ T3700] device veth0_macvtap left promiscuous mode
[  134.681919][ T3700] device veth1_vlan left promiscuous mode
[  134.724458][ T3943] EXT4-fs (loop1): unmounting filesystem.
[  135.160311][ T3700] team0 (unregistering): Port device team_slave_1 removed
[  135.178982][ T3700] team0 (unregistering): Port device team_slave_0 removed
[  135.199000][ T3700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.215725][ T3700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.402993][ T3700] bond0 (unregistering): Released all slaves
[  135.649751][ T5317] xt_hashlimit: invalid interval
[  135.731146][ T5206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.788585][ T5206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.953307][ T5322] overlayfs: missing 'lowerdir'
[  136.008511][ T5206] team0: Port device team_slave_0 added
[  136.035283][ T5322] overlayfs: failed to create directory ./file1/work (errno: 1); mounting read-only
[  136.047396][ T5206] team0: Port device team_slave_1 added
[  136.071253][ T3583] Bluetooth: hci2: command tx timeout
[  136.122789][ T5206] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.129900][ T5206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.157988][ T5206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.171566][ T5206] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.178728][ T5206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.208580][ T5329] loop1: detected capacity change from 0 to 1024
[  136.212569][ T5206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.226542][ T5329] EXT4-fs: Ignoring removed orlov option
[  136.236770][ T5329] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  136.246232][ T5329] EXT4-fs (loop1): orphan cleanup on readonly fs
[  136.255662][ T5329] EXT4-fs error (device loop1): ext4_map_blocks:721: inode #3: block 3: comm syz-executor.1: lblock 3 mapped to illegal pblock 3 (length 1)
[  136.270682][ T5329] EXT4-fs (loop1): Remounting filesystem read-only
[  136.278296][ T5329] Quota error (device loop1): write_blk: dquota write failed
[  136.287437][ T5329] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3
[  136.296906][ T5329] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  136.320889][   T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  136.321119][ T5329] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz-executor.1: Failed to acquire dquot type 0
[  136.378806][ T5329] EXT4-fs (loop1): 1 orphan inode deleted
[  136.403074][ T5206] device hsr_slave_0 entered promiscuous mode
[  136.420226][ T5329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  136.435895][ T5206] device hsr_slave_1 entered promiscuous mode
[  136.450926][ T5206] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.467575][ T5206] Cannot create hsr debugfs directory
[  136.546829][ T3943] EXT4-fs (loop1): unmounting filesystem.
[  136.581004][   T22] usb 1-1: Using ep0 maxpacket: 32
[  136.647461][ T5342] loop4: detected capacity change from 0 to 2048
[  136.693310][ T5342] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.721156][   T22] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.737638][   T22] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.766297][   T22] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  136.775213][ T5348] loop1: detected capacity change from 0 to 2048
[  136.785527][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.790117][ T5348] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  136.805781][ T5348] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  136.892183][ T5348] loop1: detected capacity change from 0 to 1024
[  136.899645][ T5348] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  136.901887][   T22] hub 1-1:4.0: USB hub found
[  136.942027][ T5348] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  137.111269][   T22] hub 1-1:4.0: 2 ports detected
[  137.371719][   T26] audit: type=1804 audit(1717608191.001:29): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2404691181/syzkaller.tK0xUi/99/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  137.501085][ T4250] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  137.813053][   T26] audit: type=1800 audit(1717608191.001:30): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0
[  137.887375][   T26] audit: type=1804 audit(1717608191.041:31): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2404691181/syzkaller.tK0xUi/99/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  137.895928][ T3943] EXT4-fs (loop1): unmounting filesystem.
[  137.912885][    C1] vkms_vblank_simulate: vblank timer overrun
[  138.036890][ T5206] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  138.065147][ T5206] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  138.085266][ T5206] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  138.093797][ T4250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.111005][ T4250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.120788][ T4250] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  138.150987][ T3583] Bluetooth: hci2: command tx timeout
[  138.171148][ T4250] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10
[  138.180234][ T4250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.202366][ T4250] usb 5-1: config 0 descriptor??
[  138.210179][ T5362] loop2: detected capacity change from 0 to 16
[  138.213309][ T5206] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  138.270784][ T5362] erofs: (device loop2): mounted with root inode @ nid 36.
[  138.342670][ T5206] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.377886][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  138.391283][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  138.402842][ T5206] 8021q: adding VLAN 0 to HW filter on device team0
[  138.445488][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  138.459387][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  138.478416][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.485631][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.514110][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  138.531687][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  138.572155][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.579296][ T3573] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.608219][ T5371] loop2: detected capacity change from 0 to 512
[  138.608932][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  138.643824][ T5371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  138.661026][ T5371] ext4 filesystem being mounted at /root/syzkaller-testdir2463646531/syzkaller.mcnsrL/79/bus supports timestamps until 2038 (0x7fffffff)
[  138.666112][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  138.864445][ T4250] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0
[  138.871985][ T4250] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0
[  138.881952][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  138.891884][ T4250] prodikeys 0003:041E:2801.0005: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0
[  138.903458][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  138.914581][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  138.968605][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  139.026654][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  139.185783][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  139.221033][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  139.269616][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  139.312943][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  139.359854][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  139.389725][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  139.406127][ T4326] usb 5-1: USB disconnect, device number 7
[  139.566745][ T3743] EXT4-fs (loop2): unmounting filesystem.
[  139.586565][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  139.599148][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  139.629786][ T5206] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.680706][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  139.700662][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  139.725314][   T22] hub 1-1:4.0: hub_ext_port_status failed (err = -32)
[  139.769095][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  139.784735][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  139.812754][ T5206] device veth0_vlan entered promiscuous mode
[  139.832983][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  139.845195][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  139.866132][ T5206] device veth1_vlan entered promiscuous mode
[  139.922740][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  139.936603][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  139.967029][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  139.977424][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  140.012186][ T5206] device veth0_macvtap entered promiscuous mode
[  140.034942][ T5206] device veth1_macvtap entered promiscuous mode
[  140.070911][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.087402][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.103759][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.120335][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.147545][ T3618] usb 1-1: USB disconnect, device number 5
[  140.155802][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.177238][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.187805][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.214776][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.232023][ T3583] Bluetooth: hci2: command tx timeout
[  140.240182][ T5206] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.284087][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  140.289958][ T5403] loop1: detected capacity change from 0 to 2048
[  140.301059][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  140.334284][ T5403] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  140.343812][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  140.370146][ T5401] loop2: detected capacity change from 0 to 4096
[  140.377516][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  140.391805][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.403208][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.413469][ T5401] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  140.427194][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.454352][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.482562][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.498261][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.536924][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.560703][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.573155][ T5206] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.582243][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  140.591621][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  140.619433][ T5406] loop0: detected capacity change from 0 to 512
[  140.630770][ T5206] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.640336][ T5206] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.663299][ T5206] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.675666][ T5206] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.697751][ T5406] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  140.698927][   T26] audit: type=1326 audit(1717608194.431:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5408 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8ca07cf69 code=0x0
[  140.707010][ T5406] ext4 filesystem being mounted at /root/syzkaller-testdir2261318602/syzkaller.pMJwRy/121/bus supports timestamps until 2038 (0x7fffffff)
[  140.797661][ T5386] loop4: detected capacity change from 0 to 32768
[  140.900957][ T5386] XFS (loop4): Mounting V5 Filesystem
[  140.979735][ T5386] XFS (loop4): Ending clean mount
[  141.043922][ T3696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.064537][ T3696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.114456][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  141.459341][ T3698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.750908][ T3573] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  141.759448][ T3698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.841268][ T3572] XFS (loop4): Unmounting Filesystem
[  141.885918][ T3571] EXT4-fs (loop0): unmounting filesystem.
[  141.894916][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  142.023968][ T5432] loop0: detected capacity change from 0 to 128
[  142.101748][ T5432] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  142.116040][ T3573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.133786][ T5432] ext4 filesystem being mounted at /root/syzkaller-testdir2261318602/syzkaller.pMJwRy/122/mnt supports timestamps until 2038 (0x7fffffff)
[  142.150672][ T3573] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.168219][ T3573] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  142.193807][ T3573] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10
[  142.209727][ T3573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.226366][ T3573] usb 2-1: config 0 descriptor??
[  142.287689][ T5448] loop2: detected capacity change from 0 to 16
[  142.310082][ T3571] EXT4-fs (loop0): unmounting filesystem.
[  142.311989][ T5448] erofs: (device loop2): mounted with root inode @ nid 36.
[  142.489395][   T26] audit: type=1326 audit(1717608196.221:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5459 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd72287cf69 code=0x0
[  142.681133][ T4326] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  142.734601][ T3573] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  142.742504][ T3573] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  142.754276][ T3573] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0
[  142.782164][ T5477] loop2: detected capacity change from 0 to 1024
[  142.872551][ T3739] hfsplus: b-tree write err: -5, ino 4
[  142.920918][ T4326] usb 1-1: Using ep0 maxpacket: 32
[  142.957910][ T3573] usb 2-1: USB disconnect, device number 4
[  143.041181][ T4326] usb 1-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=99.db
[  143.053803][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.063503][ T5475] loop4: detected capacity change from 0 to 32768
[  143.073071][ T4326] usb 1-1: config 0 descriptor??
[  143.078702][ T5475] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5475)
[  143.100208][ T5475] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.110956][ T5475] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  143.119648][ T5475] BTRFS info (device loop4): using free space tree
[  143.122854][ T4326] pwc: Logitech ViewPort AV 100 webcam detected.
[  143.179922][ T5475] BTRFS info (device loop4): enabling ssd optimizations
[  143.364183][ T3572] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.551122][ T4326] pwc: send_video_command error -71
[  143.556415][ T4326] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  143.595973][ T4326] Philips webcam: probe of 1-1:0.0 failed with error -71
[  143.623867][ T4326] usb 1-1: USB disconnect, device number 6
[  143.750978][ T5522] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x2
[  143.918638][   T26] audit: type=1326 audit(1717608197.651:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5761c7cf69 code=0x0
[  143.927828][ T5528] device dummy0 entered promiscuous mode
[  143.948064][ T5528] device macsec1 entered promiscuous mode
[  143.959558][ T5528] device dummy0 left promiscuous mode
[  144.141923][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  144.387253][ T5552] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  144.447045][ T5552] 8021q: adding VLAN 0 to HW filter on device batadv1
[  144.457649][ T5552] bond1: (slave batadv1): Enslaving as a backup interface with an up link
[  144.476571][ T5552] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.477285][ T3739] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  144.498002][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  144.518348][   T26] audit: type=1804 audit(1717608198.251:35): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4077396351/syzkaller.Fkg9qx/142/bus" dev="sda1" ino=1964 res=1 errno=0
[  144.568716][ T5558] loop4: detected capacity change from 0 to 736
[  144.691970][   T11] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  144.701281][ T5567] syz-executor.3[5567] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  144.702128][ T5567] syz-executor.3[5567] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  144.791457][ T5568] device dummy0 entered promiscuous mode
[  144.838845][ T5568] device macsec1 entered promiscuous mode
[  144.876222][ T5568] device dummy0 left promiscuous mode
[  145.140773][ T5589] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  145.267773][   T26] audit: type=1326 audit(1717608199.001:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f557ec7cf69 code=0x0
[  145.325341][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv1
[  145.336557][ T5601] syz-executor.3[5601] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  145.336659][ T5601] syz-executor.3[5601] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  145.355729][ T5595] bond1: (slave batadv1): Enslaving as a backup interface with an up link
[  145.418174][ T5589] 8021q: adding VLAN 0 to HW filter on device bond1
[  145.419453][ T3696] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  145.464152][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  145.601640][ T3698] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  145.699644][ T5611] loop4: detected capacity change from 0 to 256
[  145.768935][ T5613] device dummy0 entered promiscuous mode
[  145.784958][ T5613] device macsec1 entered promiscuous mode
[  145.813140][ T5613] device dummy0 left promiscuous mode
[  145.825914][ T5582] loop1: detected capacity change from 0 to 32768
[  145.844530][ T5582] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5582)
[  145.875744][ T5582] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  145.904858][ T5582] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  145.933894][ T5582] BTRFS info (device loop1): setting nodatacow, compression disabled
[  145.954949][ T5582] BTRFS info (device loop1): setting datacow
[  145.975028][ T5582] BTRFS info (device loop1): enabling disk space caching
[  146.003146][ T5582] BTRFS info (device loop1): force clearing of disk cache
[  146.023687][ T5582] BTRFS info (device loop1): turning off barriers
[  146.030755][ T5582] BTRFS info (device loop1): enabling ssd optimizations
[  146.048672][ T5582] BTRFS info (device loop1): using spread ssd allocation scheme
[  146.059057][ T5582] BTRFS info (device loop1): not using ssd optimizations
[  146.080988][ T5582] BTRFS info (device loop1): not using spread ssd allocation scheme
[  146.191079][ T5582] BTRFS info (device loop1): disk space caching is enabled
[  147.206690][   T26] audit: type=1800 audit(1717608200.941:37): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1955 res=0 errno=0
[  147.228127][   T26] audit: type=1800 audit(1717608200.961:38): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1955 res=0 errno=0
[  147.268527][ T5582] BTRFS info (device loop1): rebuilding free space tree
[  147.337581][   T26] audit: type=1326 audit(1717608201.071:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5644 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd72287cf69 code=0x0
[  147.384993][ T5582] BTRFS info (device loop1): disabling free space tree
[  147.410995][ T5582] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  147.431207][ T5582] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  147.624978][ T3943] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  148.154934][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  148.285878][ T5697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.187638][   T26] audit: type=1804 audit(1717608202.921:40): pid=5704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=1961 res=1 errno=0
[  149.239731][ T5703] device dummy0 entered promiscuous mode
[  149.246939][ T5708] fuse: Bad value for 'fd'
[  149.261395][ T5703] device macsec1 entered promiscuous mode
[  149.261870][ T5714] process 'syz-executor.0' launched './file0' with NULL argv: empty string added
[  149.282766][ T5703] device dummy0 left promiscuous mode
[  149.306107][ T5709] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  149.438632][ T5724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  149.482964][ T5710] 8021q: adding VLAN 0 to HW filter on device batadv1
[  149.521021][ T4634] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  149.568448][ T5710] bond1: (slave batadv1): Enslaving as a backup interface with an up link
[  149.603705][ T5717] 8021q: adding VLAN 0 to HW filter on device bond1
[  149.612655][ T3739] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  149.641533][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  149.677245][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  149.747384][ T5738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.763425][   T56] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  149.778239][ T4634] usb 5-1: Using ep0 maxpacket: 32
[  149.796392][ T5742] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'.
[  149.840306][   T26] audit: type=1804 audit(1717608203.571:41): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=1951 res=1 errno=0
[  149.923543][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  149.933741][ T4634] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=99.db
[  149.947535][ T4634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.971338][ T4634] usb 5-1: config 0 descriptor??
[  150.042985][ T4634] pwc: Logitech ViewPort AV 100 webcam detected.
[  150.076426][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.085692][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.168480][ T5762] device bridge_slave_1 left promiscuous mode
[  150.213871][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.227003][   T26] audit: type=1800 audit(1717608203.961:42): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1964 res=0 errno=0
[  150.255467][ T5762] device bridge_slave_0 left promiscuous mode
[  150.278403][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.432492][ T5764] device dummy0 entered promiscuous mode
[  150.439989][ T5764] device macsec1 entered promiscuous mode
[  150.450633][ T5764] device dummy0 left promiscuous mode
[  150.491086][ T4634] pwc: send_video_command error -71
[  150.498471][ T4634] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  150.506693][ T4634] Philips webcam: probe of 5-1:0.0 failed with error -71
[  150.526997][ T4634] usb 5-1: USB disconnect, device number 8
[  150.536365][ T5771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.805385][ T4576] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.941962][ T4576] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.116080][ T4576] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.135972][ T5790] 9pnet: p9_errstr2errno: server reported unknown error œæøýÓ®
[  151.148595][ T5792] loop4: detected capacity change from 0 to 256
[  151.171910][ T5792] exfat: Deprecated parameter 'namecase'
[  151.187859][ T5792] exfat: Deprecated parameter 'utf8'
[  151.206936][ T5792] exfat: Deprecated parameter 'namecase'
[  151.229290][ T5792] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  151.247723][ T4576] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.365474][ T5796] device dummy0 entered promiscuous mode
[  151.396896][ T5796] device macsec1 entered promiscuous mode
[  151.437518][ T5796] device dummy0 left promiscuous mode
[  151.461006][ T5800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  151.611200][ T5773] loop0: detected capacity change from 0 to 32768
[  151.636525][ T5773] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5773)
[  151.688788][ T3588] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  151.704232][ T3588] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  151.726767][ T3588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  151.731271][ T5773] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  151.746908][ T3589] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  151.755738][ T3589] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  151.763277][ T3589] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  151.772229][ T5773] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  151.792410][ T5773] BTRFS info (device loop0): setting nodatacow, compression disabled
[  151.802907][ T5773] BTRFS info (device loop0): setting datacow
[  151.829262][ T5773] BTRFS info (device loop0): enabling disk space caching
[  151.854456][ T5773] BTRFS info (device loop0): force clearing of disk cache
[  151.894364][ T5773] BTRFS info (device loop0): turning off barriers
[  151.927515][ T5773] BTRFS info (device loop0): enabling ssd optimizations
[  151.940959][ T5773] BTRFS info (device loop0): using spread ssd allocation scheme
[  151.959881][ T5773] BTRFS info (device loop0): not using ssd optimizations
[  152.002086][ T5773] BTRFS info (device loop0): not using spread ssd allocation scheme
[  152.043510][ T5773] BTRFS info (device loop0): disk space caching is enabled
[  152.284077][ T5773] BTRFS info (device loop0): rebuilding free space tree
[  152.336777][ T5837] 9pnet: p9_errstr2errno: server reported unknown error œæøýÓ®
[  152.363218][ T3572] syz-executor.4 (3572) used greatest stack depth: 18840 bytes left
[  152.371102][ T5773] BTRFS info (device loop0): disabling free space tree
[  152.389880][ T5773] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  152.390392][ T5803] chnl_net:caif_netlink_parms(): no params data found
[  152.441120][ T5773] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  152.478769][ T5810] loop1: detected capacity change from 0 to 32768
[  152.495575][ T5810] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5810)
[  152.521417][ T5810] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  152.560252][ T5810] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  152.569502][ T5810] BTRFS info (device loop1): using free space tree
[  152.593669][ T3571] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  152.899878][ T5810] BTRFS info (device loop1): enabling ssd optimizations
[  152.946926][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.955876][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.026794][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.037604][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.070462][ T5803] device bridge_slave_0 entered promiscuous mode
[  153.136951][ T4576] device hsr_slave_0 left promiscuous mode
[  153.146255][ T4576] device hsr_slave_1 left promiscuous mode
[  153.158748][ T3583] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  153.171936][ T3583] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  153.190375][ T4576] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.198341][ T3583] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  153.208025][ T4576] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.208204][ T3583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  153.225279][ T3583] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  153.228342][ T4576] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.240603][ T3583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  153.250550][ T4576] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.266097][ T3943] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  153.282558][ T4576] device bridge_slave_1 left promiscuous mode
[  153.297170][ T4576] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.415362][ T4576] device bridge_slave_0 left promiscuous mode
[  153.422210][ T4576] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.501860][ T4576] device veth1_macvtap left promiscuous mode
[  153.508195][ T4576] device veth0_macvtap left promiscuous mode
[  153.516289][ T4576] device veth1_vlan left promiscuous mode
[  153.522896][ T4576] device veth0_vlan left promiscuous mode
[  153.646811][ T5881] loop1: detected capacity change from 0 to 256
[  153.775790][ T4576] team0 (unregistering): Port device team_slave_1 removed
[  153.791346][ T4576] team0 (unregistering): Port device team_slave_0 removed
[  153.807514][ T4576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.825286][ T4576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.840941][ T3583] Bluetooth: hci4: command tx timeout
[  153.938099][ T4576] bond0 (unregistering): Released all slaves
[  153.987299][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.996761][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.005469][ T5803] device bridge_slave_1 entered promiscuous mode
[  154.024972][ T5879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  154.205310][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.261698][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.360463][ T5803] team0: Port device team_slave_0 added
[  154.412650][ T5803] team0: Port device team_slave_1 added
[  154.579205][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.611083][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.667830][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.761852][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.768866][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.797267][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.865637][ T5803] device hsr_slave_0 entered promiscuous mode
[  154.893862][ T5803] device hsr_slave_1 entered promiscuous mode
[  154.928970][ T5803] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  154.940406][ T5803] Cannot create hsr debugfs directory
[  154.960774][ T3589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  154.961496][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  154.980766][ T3589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  154.991954][ T3589] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  155.002857][ T3589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  155.010569][ T3589] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  155.017996][ T3589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  155.051284][ T5870] chnl_net:caif_netlink_parms(): no params data found
[  155.271539][ T3583] Bluetooth: hci0: command tx timeout
[  155.356667][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.374695][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.393389][ T5870] device bridge_slave_0 entered promiscuous mode
[  155.409223][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.417064][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.426402][ T5870] device bridge_slave_1 entered promiscuous mode
[  155.478920][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.494845][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.557071][ T5870] team0: Port device team_slave_0 added
[  155.584184][ T5870] team0: Port device team_slave_1 added
[  155.720115][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.738040][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.785313][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.815881][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.834788][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.871990][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.911436][ T3583] Bluetooth: hci4: command tx timeout
[  155.968137][ T5917] chnl_net:caif_netlink_parms(): no params data found
[  156.053191][ T5870] device hsr_slave_0 entered promiscuous mode
[  156.060433][ T5870] device hsr_slave_1 entered promiscuous mode
[  156.067458][ T5870] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.076565][ T5870] Cannot create hsr debugfs directory
[  156.290284][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.309268][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.324627][ T5917] device bridge_slave_0 entered promiscuous mode
[  156.361170][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.368316][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.388760][ T5917] device bridge_slave_1 entered promiscuous mode
[  156.438594][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  156.477899][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  156.498855][ T5917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.509776][ T5943] 9pnet: p9_errstr2errno: server reported unknown error œæøýÓ®
[  156.529260][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  156.549051][ T5917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.619925][ T5870] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  156.647924][ T5870] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.667142][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  156.753151][ T5870] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  156.776099][ T5870] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.819844][ T5917] team0: Port device team_slave_0 added
[  156.875405][ T5870] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  156.900475][ T5870] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.928888][ T5917] team0: Port device team_slave_1 added
[  156.979181][ T5954] Zero length message leads to an empty skb
[  157.006917][ T5870] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  157.018469][ T5870] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.039323][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.057091][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.084022][ T5917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.111126][ T3583] Bluetooth: hci2: command tx timeout
[  157.126035][ T4576] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.142828][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  157.169026][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.178254][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.185922][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.213837][ T5917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.268306][ T4576] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.328961][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  157.338679][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  157.349858][ T5803] 8021q: adding VLAN 0 to HW filter on device team0
[  157.356856][ T3583] Bluetooth: hci0: command tx timeout
[  157.396293][ T4576] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.427878][ T5917] device hsr_slave_0 entered promiscuous mode
[  157.435279][ T5917] device hsr_slave_1 entered promiscuous mode
[  157.444859][ T5917] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.452829][ T5917] Cannot create hsr debugfs directory
[  157.479274][ T4576] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.494264][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  157.503815][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.513295][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.520459][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.564574][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  157.575425][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  157.586672][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  157.595980][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  157.604562][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.611708][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.619749][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  157.629287][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  157.649229][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  157.700147][ T5803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  157.733089][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  157.748274][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  157.758519][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  157.767482][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  157.777111][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  157.785878][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  157.798936][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  157.807819][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  157.816645][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  157.825417][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  157.834821][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  157.951222][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  157.991469][ T3583] Bluetooth: hci4: command tx timeout
[  158.000780][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  159.004603][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.092042][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  159.100030][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  159.158612][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[  159.190898][ T3589] Bluetooth: hci2: command tx timeout
[  159.331137][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  159.340067][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  159.363985][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.371260][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.395230][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  159.404631][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  159.414136][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.421293][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.431036][ T3583] Bluetooth: hci0: command tx timeout
[  159.451200][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  159.460588][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  159.468323][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  159.512183][ T5978] loop1: detected capacity change from 0 to 32768
[  159.520576][ T5978] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5978)
[  159.542531][ T5975] loop0: detected capacity change from 0 to 40427
[  159.552649][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  159.560699][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  159.571402][ T5978] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  159.582264][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  159.586347][ T5978] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  159.599521][ T5978] BTRFS info (device loop1): using free space tree
[  159.601414][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  159.606236][ T5975] F2FS-fs (loop0): invalid crc value
[  159.624495][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  159.633950][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  159.642708][ T5975] F2FS-fs (loop0): Found nat_bits in checkpoint
[  159.647312][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  159.657719][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  159.666974][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  159.680532][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.723505][ T5975] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  159.751866][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  159.760434][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  159.762389][ T5975] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  159.796236][ T5975] F2FS-fs (loop0): Unrecognized mount option "./file0" or missing value
[  159.803837][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  159.821015][ T5978] BTRFS info (device loop1): enabling ssd optimizations
[  159.829070][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  159.839263][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  159.894673][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  159.905588][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  159.947671][ T5803] device veth0_vlan entered promiscuous mode
[  159.985133][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  160.002121][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  160.028827][ T5803] device veth1_vlan entered promiscuous mode
[  160.071102][ T3583] Bluetooth: hci4: command tx timeout
[  160.081239][ T3943] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  160.210701][ T5803] device veth0_macvtap entered promiscuous mode
[  160.440389][ T5917] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  160.468042][ T5803] device veth1_macvtap entered promiscuous mode
[  160.481544][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  160.514787][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  160.531781][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  160.539993][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  160.556503][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  160.565599][   T26] audit: type=1800 audit(1717608214.301:43): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1948 res=0 errno=0
[  160.597235][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  160.605800][ T5917] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  160.672340][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  160.684588][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  160.721787][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  160.729527][ T5917] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  160.751748][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.798783][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.825157][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.855041][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.905611][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.946802][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.963161][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.973668][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.991105][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.013181][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.023228][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  161.035648][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  161.045443][ T5917] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  161.088327][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.106323][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.118639][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.129460][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.139709][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.150404][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.168833][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.179758][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.204005][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1
[  161.223008][ T6031] netlink: 2036 bytes leftover after parsing attributes in process `syz-executor.0'.
[  161.254184][ T6031] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  161.271333][ T3589] Bluetooth: hci2: command tx timeout
[  161.277064][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  161.290766][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  161.326235][ T5803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  161.343849][ T5803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  161.368602][ T5803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  161.378191][ T5803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.408840][   T26] audit: type=1800 audit(1717608215.141:44): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1948 res=0 errno=0
[  161.511379][ T3589] Bluetooth: hci0: command tx timeout
[  161.627907][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  161.641379][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  161.672081][ T3696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.680511][ T3696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.719346][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  161.742213][ T6010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  161.750265][ T6010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  161.762487][ T6010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  161.790506][ T5870] device veth0_vlan entered promiscuous mode
[  161.807820][ T6010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  161.816604][ T6010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  161.829425][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.835591][ T5917] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.851434][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.900430][ T4576] device hsr_slave_0 left promiscuous mode
[  161.931438][ T4576] device hsr_slave_1 left promiscuous mode
[  161.952197][ T4576] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.970948][ T4576] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.984854][ T4576] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.992873][ T4576] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.004383][ T4576] device bridge_slave_1 left promiscuous mode
[  162.010780][ T4576] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.030725][ T4576] device bridge_slave_0 left promiscuous mode
[  162.037322][ T4576] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.057271][ T4576] device hsr_slave_0 left promiscuous mode
[  162.064285][ T4576] device hsr_slave_1 left promiscuous mode
[  162.071526][ T4576] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.083614][ T4576] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.100227][ T4576] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.107938][ T4576] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.118443][ T4576] device bridge_slave_1 left promiscuous mode
[  162.129478][ T4576] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.140462][ T4576] device bridge_slave_0 left promiscuous mode
[  162.160111][ T4576] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.180084][ T4576] device veth1_macvtap left promiscuous mode
[  162.186833][ T4576] device veth0_macvtap left promiscuous mode
[  162.193117][ T4576] device veth1_vlan left promiscuous mode
[  162.199050][ T4576] device veth0_vlan left promiscuous mode
[  162.221867][ T4576] device veth1_macvtap left promiscuous mode
[  162.228140][ T4576] device veth0_macvtap left promiscuous mode
[  162.234824][ T4576] device veth1_vlan left promiscuous mode
[  162.241465][ T4576] device veth0_vlan left promiscuous mode
[  163.271035][   T26] audit: type=1800 audit(1717608217.001:45): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1943 res=0 errno=0
[  163.361007][ T3583] Bluetooth: hci2: command tx timeout
[  163.439554][ T4576] team0 (unregistering): Port device team_slave_1 removed
[  163.459047][ T4576] team0 (unregistering): Port device team_slave_0 removed
[  163.476704][ T4576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.489790][ T4576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.562457][ T4576] bond0 (unregistering): Released all slaves
[  163.616716][ T4576] bond1 (unregistering): (slave batadv1): Removing an active aggregator
[  163.626350][ T4576] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  163.639771][ T4576] bond1 (unregistering): Released all slaves
[  163.744401][ T4576] team0 (unregistering): Port device team_slave_1 removed
[  163.760212][ T4576] team0 (unregistering): Port device team_slave_0 removed
[  163.776689][ T4576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.789994][ T4576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.865298][ T4576] bond0 (unregistering): Released all slaves
[  163.940168][ T5870] device veth1_vlan entered promiscuous mode
[  163.948267][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  163.956892][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  163.991035][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  164.022425][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  164.030499][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  164.045614][ T5917] 8021q: adding VLAN 0 to HW filter on device team0
[  164.078222][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  164.097083][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  164.112051][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  164.132555][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  164.141712][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.148918][ T3650] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.159442][ T5870] device veth0_macvtap entered promiscuous mode
[  164.191485][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  164.202121][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  164.222500][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  164.240779][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  164.519801][ T6080] loop2: detected capacity change from 0 to 32768
[  164.530426][ T6080] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6080)
[  164.546643][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.553984][ T5864] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.562062][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  164.573517][ T5870] device veth1_macvtap entered promiscuous mode
[  164.583578][ T6080] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  164.593849][ T6080] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  164.602766][ T6080] BTRFS info (device loop2): using free space tree
[  164.616387][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  164.625707][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  164.649157][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.701252][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.730985][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.768929][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.779078][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.792181][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.809721][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.830429][ T5917] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  164.843398][ T5917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  164.861295][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  164.881791][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  164.894609][ T6080] BTRFS info (device loop2): enabling ssd optimizations
[  164.913392][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  164.937314][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  164.942609][ T6074] loop1: detected capacity change from 0 to 32768
[  164.962377][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  164.974990][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  164.994555][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  165.003640][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  165.012793][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  165.021412][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  165.030328][ T6010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  165.039241][ T6010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  165.055384][ T6074] XFS (loop1): Mounting V5 Filesystem
[  165.067858][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.119496][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.129905][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.150265][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.180180][ T5870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.233554][ T5870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.290199][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.590346][ T6074] XFS (loop1): Ending clean mount
[  165.614942][ T6074] XFS (loop1): Quotacheck needed: Please wait.
[  165.676305][ T6074] XFS (loop1): Quotacheck: Done.
[  165.792297][ T5870] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.809759][ T5870] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.818661][ T5870] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.830540][ T5870] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.849029][ T5803] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.860918][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  165.876867][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  166.156136][ T3943] XFS (loop1): Unmounting Filesystem
[  166.191782][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.200014][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.259954][   T26] audit: type=1800 audit(1717608219.991:46): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1947 res=0 errno=0
[  166.294103][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  166.316964][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  166.324900][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  166.342267][ T5917] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.380069][ T3696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.402703][ T3696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.429541][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  166.450141][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  166.520766][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  166.551365][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  166.568935][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  166.580532][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  166.599311][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  166.619043][ T5917] device veth0_vlan entered promiscuous mode
[  166.683603][ T5917] device veth1_vlan entered promiscuous mode
[  166.752580][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  166.763352][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  166.771920][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  166.780880][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  166.814047][ T5917] device veth0_macvtap entered promiscuous mode
[  166.839723][ T5917] device veth1_macvtap entered promiscuous mode
[  166.914353][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.947048][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.981480][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.020073][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.059389][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.091689][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.122291][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.158351][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.189673][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.213068][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  167.226518][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  167.247311][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  167.266685][ T3565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  167.347968][ T6155] xt_CT: You must specify a L4 protocol and not use inversions on it
[  167.376163][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.411014][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.441008][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.470915][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.480778][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.507687][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.530127][ T5917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.558051][ T5917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.585286][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.611315][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  167.625573][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  167.651565][ T5917] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.660560][ T5917] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.685785][ T5917] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.704983][ T5917] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.735277][ T6161] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'.
[  167.914167][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.963501][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.975374][ T6170] loop1: detected capacity change from 0 to 512
[  168.003270][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  168.014130][ T6170] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  168.027672][ T3696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.063086][ T3696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.094483][ T6170] EXT4-fs (loop1): orphan cleanup on readonly fs
[  168.133902][ T6138] loop0: detected capacity change from 0 to 32768
[  168.144742][ T6170] Quota error (device loop1): v2_read_file_info: Can't read info structure
[  168.158079][ T6138] gfs2: fsid=mountinfo: Trying to join cluster "lock_nolock", "mountinfo"
[  168.168118][ T6170] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  168.182726][ T6138] gfs2: fsid=mountinfo: Now mounting FS (format 1801)...
[  168.199823][ T6138] gfs2: fsid=mountinfo.s: journal 0 mapped with 18 extents in 0ms
[  168.212263][ T6170] EXT4-fs (loop1): Cannot turn on quotas: error -5
[  168.226249][ T6176] team0: Port device macvlan2 added
[  168.250193][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  168.283413][ T6170] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 64: padding at end of block bitmap is not set
[  168.355429][ T6170] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6171: Corrupt filesystem
[  168.432322][ T6138] gfs2: fsid=mountinfo.s: first mount done, others may mount
[  168.439273][ T6170] EXT4-fs (loop1): 1 orphan inode deleted
[  168.465068][ T6170] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  168.637411][ T3943] EXT4-fs (loop1): unmounting filesystem.
[  168.831483][ T6194] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'.
[  168.840194][ T6192] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  168.968931][ T6199] loop1: detected capacity change from 0 to 512
[  169.070024][ T6199] EXT4-fs (loop1): 1 truncate cleaned up
[  169.070713][ T6203] team0: Port device macvlan3 added
[  169.102013][ T6199] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  169.136790][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  169.292879][ T3943] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor.1: path /root/syzkaller-testdir2404691181/syzkaller.tK0xUi/160/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0
[  169.440290][ T3943] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor.1: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  169.560678][ T3943] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor.1: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  169.577927][ T6211] loop0: detected capacity change from 0 to 32768
[  169.586032][ T6211] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6211)
[  169.619938][ T6211] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  169.630361][ T6211] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  169.639145][ T6211] BTRFS info (device loop0): using free space tree
[  169.687777][ T6175] loop2: detected capacity change from 0 to 40427
[  169.735972][ T6175] F2FS-fs (loop2): invalid crc value
[  169.768374][ T6175] F2FS-fs (loop2): Found nat_bits in checkpoint
[  169.841721][ T6211] BTRFS info (device loop0): enabling ssd optimizations
[  170.011000][ T6175] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  170.048728][ T6175] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  170.077235][ T6175] F2FS-fs (loop2): Unrecognized mount option "./file0" or missing value
[  170.230550][ T3943] EXT4-fs (loop1): unmounting filesystem.
[  170.641810][ T3589] Bluetooth: hci2: command tx timeout
[  170.721685][ T3571] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.178935][ T4576] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.223216][ T6246] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'.
[  171.241199][ T6246] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'.
[  171.285864][ T6213] loop3: detected capacity change from 0 to 32768
[  171.285981][ T4576] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.326575][ T6213] gfs2: fsid=mountinfo: Trying to join cluster "lock_nolock", "mountinfo"
[  171.350637][ T6213] gfs2: fsid=mountinfo: Now mounting FS (format 1801)...
[  171.379918][ T6250] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'.
[  171.403028][ T6249] team0: Port device macvlan2 added
[  171.418269][ T6213] gfs2: fsid=mountinfo.s: journal 0 mapped with 18 extents in 0ms
[  171.438095][ T4576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.544120][ T4576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.596148][ T3583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  171.610548][ T6213] gfs2: fsid=mountinfo.s: first mount done, others may mount
[  171.614143][ T3583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  171.629969][ T3583] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  171.638405][ T3583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  171.654619][ T3583] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  171.664588][ T3583] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  171.989645][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  172.134140][ T6274] loop0: detected capacity change from 0 to 512
[  172.211219][ T6274] EXT4-fs (loop0): 1 truncate cleaned up
[  172.230555][ T6274] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  172.276131][ T6255] chnl_net:caif_netlink_parms(): no params data found
[  172.296257][ T6271] loop3: detected capacity change from 0 to 32768
[  172.304423][ T6271] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6271)
[  172.324509][ T6271] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.334986][ T6271] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  172.343743][ T6271] BTRFS info (device loop3): using free space tree
[  172.381809][ T3571] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir2261318602/syzkaller.pMJwRy/201/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0
[  172.412925][ T3571] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz-executor.0: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  172.428379][ T6271] BTRFS info (device loop3): enabling ssd optimizations
[  172.442487][ T3571] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz-executor.0: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0)
[  172.639749][ T6255] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.647666][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.652085][ T6298] xt_CT: You must specify a L4 protocol and not use inversions on it
[  172.655961][ T6255] device bridge_slave_0 entered promiscuous mode
[  173.314277][ T6255] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.333521][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.344404][ T5917] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  173.356641][ T6255] device bridge_slave_1 entered promiscuous mode
[  173.468224][ T3571] EXT4-fs (loop0): unmounting filesystem.
[  173.647832][ T6255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.670392][ T6255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.752187][ T3589] Bluetooth: hci3: command tx timeout
[  173.869799][ T6255] team0: Port device team_slave_0 added
[  173.925037][ T4576] device hsr_slave_0 left promiscuous mode
[  173.941385][ T4576] device hsr_slave_1 left promiscuous mode
[  173.959394][ T4576] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.967869][ T4576] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.987425][ T4576] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.005197][ T4576] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.024806][ T4576] device bridge_slave_1 left promiscuous mode
[  174.036555][ T4576] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.049639][ T4576] device bridge_slave_0 left promiscuous mode
[  174.071548][ T4576] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.100591][ T4576] device veth1_macvtap left promiscuous mode
[  174.114120][ T4576] device veth0_macvtap left promiscuous mode
[  174.120457][ T4576] device veth1_vlan left promiscuous mode
[  174.136469][ T4576] device veth0_vlan left promiscuous mode
[  174.330231][ T3583] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  174.333208][ T6305] loop2: detected capacity change from 0 to 32768
[  174.344488][ T3588] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  174.353347][ T3588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  174.365452][ T3588] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  174.365897][ T6305] gfs2: fsid=mountinfo: Trying to join cluster "lock_nolock", "mountinfo"
[  174.382532][ T3588] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  174.390039][ T3588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  174.410482][ T6305] gfs2: fsid=mountinfo: Now mounting FS (format 1801)...
[  174.434827][ T6305] gfs2: fsid=mountinfo.s: journal 0 mapped with 18 extents in 0ms
[  174.522684][ T6305] gfs2: fsid=mountinfo.s: first mount done, others may mount
[  174.555141][ T6318] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'.
[  174.615963][ T4576] bond1 (unregistering): (slave batadv1): Removing an active aggregator
[  174.631761][ T4576] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  174.643927][ T6320] loop4: detected capacity change from 0 to 256
[  174.658588][ T4576] bond1 (unregistering): Released all slaves
[  174.858117][ T4576] team0 (unregistering): Port device team_slave_1 removed
[  174.887236][ T4576] team0 (unregistering): Port device team_slave_0 removed
[  174.905406][ T4576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.927077][ T4576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.013869][   T26] audit: type=1800 audit(1717608228.751:47): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1954 res=0 errno=0
[  175.039567][ T4576] bond0 (unregistering): Released all slaves
[  175.108186][ T6255] team0: Port device team_slave_1 added
[  175.124272][ T6311] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[  175.134657][ T6311] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[  175.158626][ T6324] team0: Port device macvlan3 added
[  175.263973][ T6255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.288607][ T6255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.339022][ T6255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.363411][ T6255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.371692][ T6255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.417226][ T6255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.536596][ T6255] device hsr_slave_0 entered promiscuous mode
[  175.544062][ T6255] device hsr_slave_1 entered promiscuous mode
[  175.822781][ T6314] chnl_net:caif_netlink_parms(): no params data found
[  175.830916][ T3588] Bluetooth: hci3: command tx timeout
[  176.209968][ T6341] loop3: detected capacity change from 0 to 32768
[  176.232562][ T6341] gfs2: fsid=mountinfo: Trying to join cluster "lock_nolock", "mountinfo"
[  176.252466][ T6341] gfs2: fsid=mountinfo: Now mounting FS (format 1801)...
[  176.297611][ T6341] gfs2: fsid=mountinfo.s: journal 0 mapped with 18 extents in 0ms
[  176.471026][ T3588] Bluetooth: hci1: command tx timeout
[  176.471734][ T6341] gfs2: fsid=mountinfo.s: first mount done, others may mount
[  176.558015][ T6314] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.570903][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.586161][ T6314] device bridge_slave_0 entered promiscuous mode
[  176.733715][ T6314] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.742832][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.778356][ T6314] device bridge_slave_1 entered promiscuous mode
[  176.888575][ T6314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.916492][ T6314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.974946][ T6357] loop3: detected capacity change from 0 to 64
[  177.004041][ T6314] team0: Port device team_slave_0 added
[  177.030082][ T6357] BFS-fs: bfs_readdir(): Bad f_pos=00000001 for loop3:00000002
[  177.079021][ T6314] team0: Port device team_slave_1 added
[  177.175086][   T26] audit: type=1800 audit(1717608230.911:48): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1955 res=0 errno=0
[  177.225061][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.238169][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.288501][ T6314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.315813][ T6255] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  177.372238][ T6314] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.379532][ T6314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.419315][ T6369] loop3: detected capacity change from 0 to 512
[  177.427733][ T6314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.478838][ T6369] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  177.486833][ T6255] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  177.495240][ T6369] ext4 filesystem being mounted at /root/syzkaller-testdir4095972937/syzkaller.4tFoxz/12/file0 supports timestamps until 2038 (0x7fffffff)
[  177.560084][ T6255] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  177.588761][ T6255] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  177.667101][ T6314] device hsr_slave_0 entered promiscuous mode
[  177.698029][ T6314] device hsr_slave_1 entered promiscuous mode
[  177.698453][ T5917] EXT4-fs (loop3): unmounting filesystem.
[  177.713282][ T6314] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.733205][ T6314] Cannot create hsr debugfs directory
[  177.911074][ T3588] Bluetooth: hci3: command tx timeout
[  178.028292][ T6255] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.401653][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  178.409608][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  178.440151][ T6255] 8021q: adding VLAN 0 to HW filter on device team0
[  178.550983][ T3588] Bluetooth: hci1: command tx timeout
[  178.577121][ T6314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.654239][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  178.665309][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.689183][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.696394][ T6122] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.795223][ T6382] loop2: detected capacity change from 0 to 32768
[  178.813560][ T6382] gfs2: fsid=mountinfo: Trying to join cluster "lock_nolock", "mountinfo"
[  178.848415][ T6382] gfs2: fsid=mountinfo: Now mounting FS (format 1801)...
[  178.882671][ T6382] gfs2: fsid=mountinfo.s: journal 0 mapped with 18 extents in 0ms
[  178.896983][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  178.908956][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  178.928491][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  178.948388][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.955600][ T6121] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.976608][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  178.990324][ T6396] loop3: detected capacity change from 0 to 256
[  178.996387][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  179.008855][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  179.034567][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  179.115559][ T6382] gfs2: fsid=mountinfo.s: first mount done, others may mount
[  179.125059][ T6314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.135674][   T26] audit: type=1800 audit(1717608232.861:49): pid=6399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1958 res=0 errno=0
[  179.184392][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  179.200670][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  179.226755][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  179.245249][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  179.276440][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  179.285976][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  179.297273][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  179.384748][ T6314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.428019][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  179.511183][ T6314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.700595][ T6421] device veth1_macvtap left promiscuous mode
[  179.720942][ T6421] device macsec0 entered promiscuous mode
[  179.773056][ T6423] device veth1_macvtap entered promiscuous mode
[  179.779806][ T6423] device macsec0 left promiscuous mode
[  179.968353][ T6431] loop4: detected capacity change from 0 to 1024
[  179.991083][ T3588] Bluetooth: hci3: command tx timeout
[  180.016894][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  180.022052][ T6431] EXT4-fs: Ignoring removed nobh option
[  180.032366][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  180.063142][ T6255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.096528][ T6314] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  180.112253][ T6431] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  180.552537][ T6314] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  180.565110][ T5870] EXT4-fs (loop4): unmounting filesystem.
[  180.585851][ T6314] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  180.631561][ T3588] Bluetooth: hci1: command tx timeout
[  180.655665][ T6314] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  180.744519][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  180.757543][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.830949][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  180.839400][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.873569][ T6255] device veth0_vlan entered promiscuous mode
[  180.897633][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.909589][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.927370][ T6255] device veth1_vlan entered promiscuous mode
[  181.041967][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  181.050286][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  181.064938][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  181.076670][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  181.088703][ T6255] device veth0_macvtap entered promiscuous mode
[  181.120290][ T4576] device hsr_slave_0 left promiscuous mode
[  181.128871][ T4576] device hsr_slave_1 left promiscuous mode
[  181.135874][ T4576] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.144202][ T4576] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.154462][ T4576] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.162585][ T4576] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.177592][ T4576] device veth1_macvtap left promiscuous mode
[  181.185555][ T6455] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure
[  181.187749][ T4576] device veth0_macvtap left promiscuous mode
[  181.204025][ T4576] device veth1_vlan left promiscuous mode
[  181.210076][ T4576] device veth0_vlan left promiscuous mode
[  181.347280][ T6438] loop4: detected capacity change from 0 to 32768
[  181.356933][ T6438] gfs2: fsid=mountinfo: Trying to join cluster "lock_nolock", "mountinfo"
[  181.365651][ T6438] gfs2: fsid=mountinfo: Now mounting FS (format 1801)...
[  181.384052][ T6438] gfs2: fsid=mountinfo.s: journal 0 mapped with 18 extents in 0ms
[  181.447874][ T6438] gfs2: fsid=mountinfo.s: first mount done, others may mount
[  181.546484][ T4576] bond1 (unregistering): (slave batadv1): Removing an active aggregator
[  181.571461][ T4576] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  181.604713][ T4576] bond1 (unregistering): Released all slaves
[  181.817226][ T4576] team0 (unregistering): Port device team_slave_1 removed
[  181.841897][ T4576] team0 (unregistering): Port device team_slave_0 removed
[  181.858674][ T4576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.895786][ T4576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.004764][ T4576] bond0 (unregistering): Released all slaves
[  182.027632][ T6255] device veth1_macvtap entered promiscuous mode
[  182.040546][ T6462] device veth1_macvtap left promiscuous mode
[  182.046759][ T6462] device macsec0 entered promiscuous mode
[  182.069210][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  182.076830][ T3588] Bluetooth: hci3: command tx timeout
[  182.087081][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  182.095555][ T6464] device veth1_macvtap entered promiscuous mode
[  182.104665][ T6464] device macsec0 left promiscuous mode
[  182.162463][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  182.198879][ T6314] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.218709][ T6475] loop2: detected capacity change from 0 to 64
[  182.224468][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.244653][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.257741][ T6479] loop4: detected capacity change from 0 to 256
[  182.260237][ T6475] BFS-fs: bfs_readdir(): Bad f_pos=00000001 for loop2:00000002
[  182.267361][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.300916][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.316355][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.328054][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.350144][ T6255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.381444][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  182.712833][ T3589] Bluetooth: hci1: command tx timeout
[  183.116667][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  183.129789][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.142155][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.157804][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.168314][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.179512][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.198441][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.211522][ T6255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.227486][ T6314] 8021q: adding VLAN 0 to HW filter on device team0
[  183.243562][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  183.268950][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  183.278299][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  183.286618][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  183.297733][ T6255] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.308376][ T6255] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.318452][ T6255] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.327858][ T6255] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.329396][ T6495] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  183.351011][ T4326] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  183.361735][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  183.380745][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  183.394932][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.402125][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.416848][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  183.426711][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  183.436085][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.443268][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.451143][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  183.460078][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  183.469226][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  183.481997][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  183.531948][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  183.540259][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  183.548622][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  183.559633][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  183.582767][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  183.592515][ T4326] usb 3-1: Using ep0 maxpacket: 8
[  183.594583][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  183.606497][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  183.618337][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  183.651407][ T6314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  183.668637][ T6501] loop3: detected capacity change from 0 to 16
[  183.699923][ T3739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.711276][ T4326] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  183.726426][ T6501] erofs: (device loop3): mounted with root inode @ nid 36.
[  183.737295][ T4326] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  183.754639][ T3739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.770227][ T4326] usb 3-1: config 0 has no interface number 0
[  183.777176][ T3700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.800505][ T3700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.807782][ T6010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  183.808127][ T4326] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  183.866873][ T4326] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  183.894653][ T4326] usb 3-1: config 0 interface 52 has no altsetting 0
[  183.908346][ T4326] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  183.928929][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.966207][ T4326] usb 3-1: config 0 descriptor??
[  183.986331][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  184.115837][ T6507] device veth1_macvtap left promiscuous mode
[  184.135958][ T6507] device macsec0 entered promiscuous mode
[  184.168389][ T6513] device veth1_macvtap entered promiscuous mode
[  184.201179][ T6513] device macsec0 left promiscuous mode
[  184.240384][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  184.249543][ T4326] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input17
[  184.273351][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  184.313898][ T6314] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.370136][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  184.385204][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  184.439735][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  184.466800][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  184.493310][ T6314] device veth0_vlan entered promiscuous mode
[  184.508031][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  184.518321][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  184.537741][ T3618] usb 3-1: USB disconnect, device number 3
[  184.548832][ T6314] device veth1_vlan entered promiscuous mode
[  184.662506][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  184.679876][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  184.700468][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  184.729009][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  184.764410][ T6314] device veth0_macvtap entered promiscuous mode
[  184.812480][ T6314] device veth1_macvtap entered promiscuous mode
[  184.850301][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.889304][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.910259][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.931985][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.955681][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.981216][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.010863][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.038800][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.062777][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.076132][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  185.088137][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  185.106162][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  185.125656][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  185.147671][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.171238][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.192475][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.214262][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.240908][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.261603][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.287618][ T6314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.320887][ T6314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.357793][ T6314] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.385332][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  185.394739][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  185.424564][ T6314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.435433][ T6314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.456432][ T6314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.492163][ T6314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.710748][ T3657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.719797][ T3657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.761931][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  185.817045][ T6546] loop4: detected capacity change from 0 to 2048
[  185.833552][ T3640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.851720][ T3640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.869761][ T6546] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  185.902222][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  186.147075][ T6557] loop0: detected capacity change from 0 to 1024
[  186.157916][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  186.166475][ T6557] EXT4-fs: Ignoring removed orlov option
[  186.189795][ T6557] EXT4-fs: Ignoring removed nomblk_io_submit option
[  186.267974][ T6557] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  186.396422][ T6564] device veth1_macvtap left promiscuous mode
[  186.418047][ T6557] EXT4-fs error (device loop0): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.0: corrupt xattr in inline inode
[  186.448205][ T6564] device macsec0 entered promiscuous mode
[  186.455896][ T6557] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.0: corrupted in-inode xattr
[  186.514012][ T6565] device veth1_macvtap entered promiscuous mode
[  186.531265][ T6565] device macsec0 left promiscuous mode
[  186.541186][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  186.629315][ T6314] EXT4-fs (loop0): unmounting filesystem.
[  186.817978][ T6545] loop2: detected capacity change from 0 to 32768
[  186.848821][ T6545] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6545)
[  186.887990][ T6579] loop4: detected capacity change from 0 to 1024
[  186.904195][ T6579] EXT4-fs: Ignoring removed nobh option
[  186.908052][ T6545] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  186.940514][ T6579] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  186.965117][ T6545] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  186.986943][ T6555] loop1: detected capacity change from 0 to 32768
[  187.008668][ T6545] BTRFS info (device loop2): using free space tree
[  187.008708][ T6555] XFS (loop1): Mounting V5 Filesystem
[  187.053076][ T5870] EXT4-fs (loop4): unmounting filesystem.
[  187.060461][ T6555] XFS (loop1): Ending clean mount
[  187.167508][ T6255] XFS (loop1): Unmounting Filesystem
[  187.173912][ T6604] loop4: detected capacity change from 0 to 2048
[  187.200142][ T6604] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  187.239014][ T6545] BTRFS info (device loop2): enabling ssd optimizations
[  187.243388][ T6615] loop0: detected capacity change from 0 to 16
[  187.283975][ T6615] erofs: (device loop0): mounted with root inode @ nid 36.
[  187.396304][ T5803] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.447290][ T6617] loop4: detected capacity change from 0 to 1024
[  187.476848][ T6617] EXT4-fs: Ignoring removed orlov option
[  187.484589][ T6621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.531958][ T6617] EXT4-fs: Ignoring removed nomblk_io_submit option
[  187.568198][ T6617] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  187.693642][ T6617] EXT4-fs error (device loop4): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.4: corrupt xattr in inline inode
[  187.708842][ T6617] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.4: corrupted in-inode xattr
[  187.790919][ T6121] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  187.869382][ T5870] ==================================================================
[  187.877504][ T5870] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0
[  187.885621][ T5870] Read of size 4 at addr ffff88805477f000 by task syz-executor.4/5870
[  187.893794][ T5870] 
[  187.896139][ T5870] CPU: 1 PID: 5870 Comm: syz-executor.4 Not tainted 6.1.92-syzkaller #0
[  187.904523][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  187.914606][ T5870] Call Trace:
2024/06/05 17:24:01 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  187.917987][ T5870]  <TASK>
[  187.920945][ T5870]  dump_stack_lvl+0x1e3/0x2cb
[  187.925670][ T5870]  ? nf_tcp_handle_invalid+0x642/0x642
[  187.931165][ T5870]  ? panic+0x764/0x764
[  187.935251][ T5870]  ? _printk+0xd1/0x111
[  187.939427][ T5870]  ? __virt_addr_valid+0x17f/0x520
[  187.944566][ T5870]  ? __virt_addr_valid+0x17f/0x520
[  187.949696][ T5870]  print_report+0x15f/0x4f0
[  187.954216][ T5870]  ? __virt_addr_valid+0x17f/0x520
[  187.959385][ T5870]  ? __virt_addr_valid+0x17f/0x520
[  187.964707][ T5870]  ? __virt_addr_valid+0x44a/0x520
[  187.969982][ T5870]  ? __phys_addr+0xb6/0x170
[  187.974517][ T5870]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  187.980203][ T5870]  kasan_report+0x136/0x160
[  187.984727][ T5870]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  187.990401][ T5870]  ext4_xattr_delete_inode+0xcd0/0xce0
[  187.995894][ T5870]  ? ext4_blocks_for_truncate+0x270/0x270
[  188.001726][ T5870]  ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0
[  188.007816][ T5870]  ? rcu_read_lock_any_held+0xb3/0x160
[  188.013302][ T5870]  ? ext4_inode_is_fast_symlink+0x262/0x390
[  188.019212][ T5870]  ext4_evict_inode+0xc77/0x1150
[  188.024168][ T5870]  ? _raw_spin_unlock+0x24/0x40
[  188.029047][ T5870]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  188.034965][ T5870]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  188.040883][ T5870]  evict+0x2a4/0x620
[  188.044806][ T5870]  vfs_rmdir+0x381/0x4b0
[  188.049062][ T5870]  do_rmdir+0x3a2/0x590
[  188.053235][ T5870]  ? d_delete_notify+0x150/0x150
[  188.058188][ T5870]  ? syscall_enter_from_user_mode+0x2e/0x230
[  188.064185][ T5870]  __x64_sys_unlinkat+0xdc/0xf0
[  188.069059][ T5870]  do_syscall_64+0x3b/0xb0
[  188.073760][ T5870]  ? clear_bhb_loop+0x45/0xa0
[  188.078458][ T5870]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  188.080910][ T6121] usb 1-1: Using ep0 maxpacket: 32
[  188.084364][ T5870] RIP: 0033:0x7f041b67c747
[  188.093905][ T5870] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  188.113615][ T5870] RSP: 002b:00007ffcc2087fa8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[  188.122059][ T5870] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f041b67c747
[  188.130135][ T5870] RDX: 0000000000000200 RSI: 00007ffcc2089150 RDI: 00000000ffffff9c
[  188.138126][ T5870] RBP: 00007f041b6d9636 R08: 0000000000000000 R09: 0000000000000000
[  188.146116][ T5870] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffcc2089150
[  188.154226][ T5870] R13: 00007f041b6d9636 R14: 000000000002dbd5 R15: 0000000000000009
[  188.162338][ T5870]  </TASK>
[  188.165370][ T5870] 
[  188.167714][ T5870] The buggy address belongs to the physical page:
[  188.174144][ T5870] page:ffffea000151dfc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5477f
[  188.184577][ T5870] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  188.191818][ T5870] raw: 00fff00000000000 ffffea00016042c8 ffffea0000488848 0000000000000000
[  188.200419][ T5870] raw: 0000000000000001 0000000000000000 00000000ffffff7f 0000000000000000
[  188.209066][ T5870] page dumped because: kasan: bad access detected
[  188.215503][ T5870] page_owner tracks the page as freed
[  188.220872][ T5870] page last allocated via order 0, migratetype Movable, gfp_mask 0x141cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_WRITE), pid 6575, tgid 6573 (syz-executor.0), ts 186847536356, free_ts 187128954390
[  188.240080][ T5870]  post_alloc_hook+0x18d/0x1b0
[  188.244954][ T5870]  get_page_from_freelist+0x31a1/0x3320
[  188.250517][ T5870]  __alloc_pages+0x28d/0x770
[  188.255128][ T5870]  folio_alloc+0x1a/0x50
[  188.259392][ T5870]  filemap_alloc_folio+0xda/0x4f0
[  188.264480][ T5870]  __filemap_get_folio+0x749/0xe80
[  188.269695][ T5870]  pagecache_get_page+0x28/0x250
[  188.274745][ T5870]  ext4_da_write_begin+0x581/0x9c0
[  188.279870][ T5870]  generic_perform_write+0x2fc/0x5e0
[  188.285167][ T5870]  ext4_buffered_write_iter+0x122/0x3a0
[  188.290727][ T5870]  ext4_file_write_iter+0x1d2/0x1880
[  188.296112][ T5870]  vfs_write+0x7ae/0xba0
[  188.300363][ T5870]  ksys_write+0x19c/0x2c0
[  188.304708][ T5870]  do_syscall_64+0x3b/0xb0
[  188.309144][ T5870]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  188.315059][ T5870] page last free stack trace:
[  188.319735][ T5870]  free_unref_page_prepare+0xf63/0x1120
[  188.325305][ T5870]  free_unref_page_list+0x663/0x900
[  188.330523][ T5870]  release_pages+0x2836/0x2b40
[  188.335307][ T5870]  __pagevec_release+0x80/0xf0
[  188.340089][ T5870]  truncate_inode_pages_range+0x48a/0x1340
[  188.345910][ T5870]  ext4_evict_inode+0x39c/0x1150
[  188.350857][ T5870]  evict+0x2a4/0x620
[  188.354849][ T5870]  do_unlinkat+0x509/0x820
[  188.359279][ T5870]  __x64_sys_unlink+0x45/0x50
[  188.363971][ T5870]  do_syscall_64+0x3b/0xb0
[  188.368430][ T5870]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  188.374349][ T5870] 
[  188.376694][ T5870] Memory state around the buggy address:
[  188.382333][ T5870]  ffff88805477ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  188.390414][ T5870]  ffff88805477ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  188.398491][ T5870] >ffff88805477f000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  188.406568][ T5870]                    ^
[  188.410650][ T5870]  ffff88805477f080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  188.418729][ T5870]  ffff88805477f100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  188.426882][ T5870] ==================================================================
[  188.452309][ T5870] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  188.459591][ T5870] CPU: 1 PID: 5870 Comm: syz-executor.4 Not tainted 6.1.92-syzkaller #0
[  188.468196][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  188.478268][ T5870] Call Trace:
[  188.481563][ T5870]  <TASK>
[  188.484596][ T5870]  dump_stack_lvl+0x1e3/0x2cb
[  188.489373][ T5870]  ? nf_tcp_handle_invalid+0x642/0x642
[  188.494833][ T5870]  ? panic+0x764/0x764
[  188.498896][ T5870]  ? preempt_schedule_common+0xa6/0xd0
[  188.504354][ T5870]  ? vscnprintf+0x59/0x80
[  188.508685][ T5870]  panic+0x318/0x764
[  188.512576][ T5870]  ? check_panic_on_warn+0x1d/0xa0
[  188.517686][ T5870]  ? memcpy_page_flushcache+0xfc/0xfc
[  188.523139][ T5870]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  188.529118][ T5870]  ? _raw_spin_unlock+0x40/0x40
[  188.533963][ T5870]  ? print_report+0x4a3/0x4f0
[  188.538643][ T5870]  check_panic_on_warn+0x7e/0xa0
[  188.543586][ T5870]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  188.549224][ T5870]  end_report+0x66/0x110
[  188.553463][ T5870]  kasan_report+0x143/0x160
[  188.558056][ T5870]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  188.563691][ T5870]  ext4_xattr_delete_inode+0xcd0/0xce0
[  188.569154][ T5870]  ? ext4_blocks_for_truncate+0x270/0x270
[  188.574869][ T5870]  ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0
[  188.581028][ T5870]  ? rcu_read_lock_any_held+0xb3/0x160
[  188.586528][ T5870]  ? ext4_inode_is_fast_symlink+0x262/0x390
[  188.592422][ T5870]  ext4_evict_inode+0xc77/0x1150
[  188.597441][ T5870]  ? _raw_spin_unlock+0x24/0x40
[  188.602318][ T5870]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  188.608230][ T5870]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  188.614126][ T5870]  evict+0x2a4/0x620
[  188.618028][ T5870]  vfs_rmdir+0x381/0x4b0
[  188.622274][ T5870]  do_rmdir+0x3a2/0x590
[  188.626557][ T5870]  ? d_delete_notify+0x150/0x150
[  188.631500][ T5870]  ? syscall_enter_from_user_mode+0x2e/0x230
[  188.637477][ T5870]  __x64_sys_unlinkat+0xdc/0xf0
[  188.642328][ T5870]  do_syscall_64+0x3b/0xb0
[  188.646832][ T5870]  ? clear_bhb_loop+0x45/0xa0
[  188.651532][ T5870]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  188.657433][ T5870] RIP: 0033:0x7f041b67c747
[  188.661840][ T5870] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  188.681451][ T5870] RSP: 002b:00007ffcc2087fa8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[  188.689861][ T5870] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f041b67c747
[  188.697827][ T5870] RDX: 0000000000000200 RSI: 00007ffcc2089150 RDI: 00000000ffffff9c
[  188.705790][ T5870] RBP: 00007f041b6d9636 R08: 0000000000000000 R09: 0000000000000000
[  188.713777][ T5870] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffcc2089150
[  188.721826][ T5870] R13: 00007f041b6d9636 R14: 000000000002dbd5 R15: 0000000000000009
[  188.729846][ T5870]  </TASK>
[  188.733116][ T5870] Kernel Offset: disabled
[  188.737443][ T5870] Rebooting in 86400 seconds..