last executing test programs:

4.596260384s ago: executing program 4:
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009840)='./file1\x00', 0x14804, &(0x7f00000000c0)={[{@nouuid}, {@gquota}]}, 0x1, 0x980d, &(0x7f00000130c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r3 = openat$cgroup_ro(r0, &(0x7f0000000440)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000580), 0x4)
copy_file_range(r3, &(0x7f0000000080), r2, 0x0, 0xfffffffffffffff8, 0x0)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
copy_file_range(r4, 0x0, r1, &(0x7f00000000c0)=0x10000, 0x6, 0x0)

4.233618724s ago: executing program 1:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0)

3.521337528s ago: executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSW2(r0, 0x5416, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})

3.302093794s ago: executing program 1:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
write(r0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

2.689689991s ago: executing program 0:
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0)

2.526160171s ago: executing program 0:
io_uring_setup(0x30d3, &(0x7f00000000c0))
r0 = socket$qrtr(0x2a, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000240)={0x2, {{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3f}}}, 0x88)
connect$qrtr(r0, &(0x7f0000000080), 0xc)
read(r0, &(0x7f0000000180)=""/52, 0xfffffdef)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001400010000000000000000000a3800fe", @ANYRES32=r3, @ANYBLOB="140002000000000000000000000000000000000014000600000000008003000001000000000000001400"], 0x64}}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xb, &(0x7f0000000040), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000007c0)=@raw=[@map_idx={0x18, 0x5}, @map_idx_val={0x18, 0x4827e06c4ed09d8c, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14000}], 0x0, 0xb, 0xc8, &(0x7f00000008c0)=""/200}, 0x90)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000280)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
io_uring_setup(0x758a, 0x0)
r5 = socket$unix(0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0xf0bb}, &(0x7f0000000140), &(0x7f0000000100))
r7 = io_uring_setup(0x2edd, &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x200884, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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")
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x1a, 0x20000028, r8)
connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r9 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
shutdown(r9, 0x0)

2.055786183s ago: executing program 1:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000000140)=""/102400, 0x19000)

1.756429972s ago: executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, 'F'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0)

1.649904122s ago: executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
readv(r0, 0x0, 0x0)

1.511109239s ago: executing program 0:
poll(&(0x7f0000000000)=[{}], 0x1, 0x3f)
shmget$private(0x0, 0x3000, 0x0, &(0x7f00003ea000/0x3000)=nil)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)

1.477153949s ago: executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000004000004850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=")
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
write$cgroup_pressure(r2, &(0x7f0000000100)={'full'}, 0x2f)
unlink(&(0x7f00000000c0)='./file0\x00')
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
r4 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x100000003]}, 0x8, 0x0)
pipe2$9p(&(0x7f0000000100), 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="8764a9b15509bd0509ba173673c09c16132b803d77380a71dfe18058f0e0a04c03485f4a59d1cf28670decd73b51c19b260bc9660aa41262943c617f2d1d40f9cee13d88e5bb2623f1aba2ef00cf308a67f5ac326d82b84802ee3c936023edc842833fabe18dc5c3e7c89198de34cf916ed74d015ae0be1a3d5e6dc135c425060b4b9c84a3168436551d255d63"])
socket$nl_generic(0x10, 0x3, 0x10)
msgsnd(0x0, &(0x7f0000000340)=ANY=[], 0x1008, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000840005000000000000000000000000000000000000a900003c00000000000000ff0200000000000000000000000000010000000001000000000000000000000000000000e0000001000000000000000000000000000000006c00000000000000ff020000000000000000000000000001000000008d"], 0x13c}}, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4)
getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f00000001c0)=""/19, &(0x7f0000000240)=0x13)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10)
write$evdev(r0, &(0x7f0000000000), 0x100000008)

1.332604916s ago: executing program 3:
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0)

1.200530886s ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000002fc0)={0x1, 0x8, &(0x7f0000000b00)=@raw=[@ringbuf_query, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde0}], 0x0, 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xccb}, 0x90)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)
socket(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200), 0x0)
io_setup(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
io_submit(0x0, 0x0, 0x0)

1.173680062s ago: executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0)
recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

1.121568285s ago: executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB="08000300"], 0x44}}, 0x0)

1.061883511s ago: executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0x13)
r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56})
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000140))

1.043101567s ago: executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
read(r0, &(0x7f0000000340)=""/248, 0xf8)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5437, 0x0)

988.784643ms ago: executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000480)="58000000140091d427323b4725458db4560200000000ff81000e22f4e3c854e206ce21224e227f0000017b00092b1e58e6000001e809000000fff7ffef3ac7100003ffffff", 0x45}], 0x1)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0])

829.992508ms ago: executing program 2:
io_submit(0x0, 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x4, 0x1)
syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x4169, &(0x7f0000000200), &(0x7f0000000480), &(0x7f0000000000)=<r1=>0x0)
syz_io_uring_setup(0xa94, 0x0, &(0x7f0000000040), &(0x7f00000005c0))
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @rand_addr=0x640100fe}], 0x10)
sendto$inet6(r2, &(0x7f00000004c0)="d8", 0x1, 0x4850, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000045}, 0x8050)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x4c004)
r3 = dup(r0)
write$UHID_INPUT(r3, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006)

788.7769ms ago: executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{}, {0x7c}, {0x6}]}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x1c}, 0x1c}}, 0x0)

689.705791ms ago: executing program 4:
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000d40)='./file0\x00', 0x2200010, &(0x7f0000000d80)=ANY=[], 0x3, 0x7a8, &(0x7f0000000440)="$eJzs3V+IHHcdAPDvnLkmuUIoVWIIaTpJKiSYXnf32qtHH+p2b+5u2r3dY3dPEkTa0FzKkUtbWoo2D9a8tCqK+ORj7Wvpi2+KoOCD+iTYB198EAp9kgoKoogQmdnd3l1y//LnkrZ+Pkf2Nzv7nZnvb25uvjubnZkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACJpTFcq1SSaeWvxTLq5xnSnPb/F68P5/Xpds8VyI5LiX+zbF4f6ow59YfXlg8XD8TjSf3Yk9hXNvrh878H7nvj8npHh9FskdLOO7TAuifhOkdTFcysrS6/sQiJ30Pd/ecOT/Ptq8TibtfJuO5+vz2Zp3m2nU5OTlUfmZrrpTN7Mume7vWw+bXSyeq/dSU82TqXVqamJNBs/215szU7Xm9lw5OMP1yqVyfTp8YWs3um2W488Pd5tzOXNZt6aLWNqlW9GEfN4sSE+k/fSXlafT9MLyytLE9ulWgRV143Zu27DOfLQfR++9sE/lpeKDXKzmSSDDbNWrdZq1cnHph57vFLZU6vU1o+oXCM+joiRiCJiVzZaPkVu384bbtHIoP5HM/JoxWKciTTSGCkfV39GY19MRyfaMV88/9PoNa9fV/+/9Mjf/rDVctfW/2GVP7T68uEo6//R/rOjm9X/67LYzZ/We/1s1o57NV6Py3ExzsVKrMRSvHJHM7qJn5HbO7/ZyKIVeXSjHXnMR70ckw7GpDEVkzEZlXg25mImupHGTOTRjCy6cTa60Yus3KIa0Yks6tGLdnQijZPRiFORRjWmYiomIo0sxuNstGMxWjEb01Ev53Ihlsv1PnFNXge//dwvXvjjh28Xwx8HVbfoSFK8mSuC/r5F0KCYPxg3Uf+HEer/Z82+wT5rp/G3c/cNt+RqWf/33O00AAAAgF2UlJ++JxExGg+UQzN5M/v63U4LAAAAuI3K7zUfKZrRYuiBSIrj/8oGke/f8dwAAACA2yMpz7FLImIsHuwPDU+X2uhDAAAAAOBTqPz//6NFMxbxRjnC8T8AAAB8xnx3s2vsf3DP4Bq73YW9yecG0QtnHkou1Yuh+qXBuEHzteFVMKM3czg5MJhJ2UzuuXxvEhF7GtmRZHj1y//u7bcflY+HVy9AuNm1/pNOZzS5snkCqzZMoHwWP4hj/Zhj5/vt+eEr/aWMzeTNbLzRbj5RTQYfjvRee3H5WxHF0r/Xmj+QxIXllaXx519aOV/mcqWYy5VLg8vDJzeQy9XBGogHNu7xaHkixmC5Y/3lVtb2f6Q/+cjWy0zWLvPNON6POT7Wb8fW939fsczq+BPVqNcPjPSyM73Xrq7p/SCL6i32/M040Y85cfJEv9kgi9q6LF68Pova2ix2ti52nMXbx94488/ftpNsYrssJm4xC4C75UJ51Z/VKrS/rEL/udpX1P9r6u7+4ZQ3spe7sPouY/+gZK+pdXvi9lT3N+NkP+Zk//3EnsMb1JXKBnv0l5df/t1gj/7ouz/56TeO/v5nN1/d3o1T/ZhBE/f/ZpMaW/T5h9dU1XeKKd7ZdLndZi2J0f69DwqXH16+dO6FpReWXqzVJiYrj1Yqj9VitHyrMGjUHgA2sP09draNSB7d+Kg6hhXv/o+/UjAez8dLsRLn43R5tkFEPLjxXMfWfA3h9DZHrWNr7vByeptjy9XY2rWxe08ksUnsxJo19sUfl82/du93AgC77fg2dXgn9f/0Nsfd62v5qf6Nc4dHx7F5Ld/IV3Z7hQDA/4Gs81Ey1nsr6XTyhWerU1PVem8uSzvtxjNpJ5+ezdK81cs6jbl6azZLFzrtXrsx/OB4Ouum3cWFhXanl860O+lCu5ufKe/8ng5u/d7N5uutXt7oLjSzejdLG+1Wr97opdN5t5EuLD7VzLtzWaecuLuQNfKZvFHv5e1W2m0vdhrZeJp2s2xNYD6dtXr5TF4MttKFTj5f71yJiObifJZOZ91GJ1/otfszHC4rb820O/PlbMev7/5f7/T6BoBPgldfv3zx3MrK0is3N/DnnQTf7T4CAOup0gAAAAAAAAAAAAAA8Ml3/el6xdgbOhFwNG769MFX98atnH342Rv48nv9X8vOpvrVljE7n8/1A/vX/U7vGWwsd3/93PDAc08+eXGzmKfeODT3lyxi+/ls/Jey0amubx2IuOfnP+qP+eqd6un7UfTi4I3+5V5Ntoi5a7skAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjU/wIAAP//tUhTeQ==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)

664.972187ms ago: executing program 3:
creat(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0)
mmap(&(0x7f0000406000/0x4000)=nil, 0x4000, 0x7ffffe, 0x11, r0, 0x0)
ftruncate(r0, 0x7fff)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(r1, &(0x7f0000000040)=""/148, 0xffffff96)

525.924139ms ago: executing program 3:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="2b0d0a1d8929c054aaf2445debdc80265033923f882eb023e97b722dc089af55c8b09faf6533b7e8e8bd0351523df68d0c3f6df1dc48f8cfaa391efde641648f10a5d2727b08b4cf19a2a127cf6322f94aa552fbb5674caf4308f00aafcaa515d6095a69a26a6a", 0x67, 0x800, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @remote, 0x100}, 0x1c)
stat(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0))
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
epoll_create(0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

448.692009ms ago: executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0)

339.79809ms ago: executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x0, 0x1f85, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
creat(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = socket(0x11, 0x0, 0x0)
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
utime(&(0x7f0000000200)='./file0\x00', 0x0)
creat(0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x10, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000400)=@gcm_128={{0x304, 0x38}, "add31beb2000", "ff0000000000000000000600", '\x00', "d656898a4c9ae4cd"}, 0x28)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0x10, &(0x7f0000000980)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "1ffd9954067ce2d5d776261e2cda5b841bcc182a7df598605cce73fcd9a3542038dc38b2a4222f09eef0943748888a3392affcce16302e68f4b031cc53caed3c9a25aa664aa26a6d7cda790a759594e2"}, 0xd8)
ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000080)={0x0, 0x0, "00fa00"})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
migrate_pages(0x0, 0x0, 0x0, 0x0)

259.416179ms ago: executing program 4:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000380), 0x1040c)
close(r0)

248.877682ms ago: executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)
shutdown(r0, 0x2)

139.384794ms ago: executing program 2:
timer_create(0x3, 0x0, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{}, {0x77359400}}, &(0x7f0000000200))

90.942971ms ago: executing program 0:
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0)
r5 = pidfd_getfd(r4, r4, 0x0)
r6 = fcntl$dupfd(r2, 0x0, r5)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000f, 0x12, r6, 0x0)

0s ago: executing program 2:
socket$packet(0x11, 0x2, 0x300)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149882, 0x0)
r0 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=<r1=>0x0, &(0x7f0000001340)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ast unmount of filesystem df618dc7-867c-492d-a63a-a034802fc4ec
[  264.265937][ T9484] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  264.274500][ T9484] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  264.325489][ T9484] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  264.340600][ T9484] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  264.374534][ T9484] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  264.384875][ T9457] loop1: detected capacity change from 0 to 32768
[  264.388531][ T9484] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  264.460160][ T9490] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  264.501789][ T9457] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  264.662321][ T9497] loop0: detected capacity change from 0 to 1024
[  264.693132][ T9457] XFS (loop1): Ending clean mount
[  264.876667][ T8873] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  264.904965][ T9502] loop2: detected capacity change from 0 to 1024
[  265.440808][ T9482] loop3: detected capacity change from 0 to 32768
[  265.495309][ T9482] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9482)
[  265.558387][ T9482] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  265.613031][ T9482] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  265.669509][ T9482] BTRFS info (device loop3): using free-space-tree
[  266.048022][ T9531] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  266.090064][ T9531] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  266.122016][ T9085] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  266.139825][ T9531] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  266.151654][ T9503] loop4: detected capacity change from 0 to 32768
[  266.523736][ T9511] loop1: detected capacity change from 0 to 32768
[  266.555621][ T9511] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (9511)
[  266.598770][ T9511] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  266.624068][ T9511] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  266.692461][ T9511] BTRFS info (device loop1): using free-space-tree
[  266.963360][   T29] audit: type=1800 audit(1716928520.884:54): pid=9511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=260 res=0 errno=0
[  267.053356][ T8873] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  267.709998][ T9533] loop0: detected capacity change from 0 to 32768
[  267.869601][ T9533] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  268.013126][ T9533] XFS (loop0): Ending clean mount
[  268.048529][ T9533] XFS (loop0): Quotacheck needed: Please wait.
[  268.130018][ T9555] loop4: detected capacity change from 0 to 32768
[  268.146203][ T9533] XFS (loop0): Quotacheck: Done.
[  268.181615][ T9555] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9555)
[  268.272186][ T9555] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  268.285382][ T9555] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  268.304933][ T9561] loop1: detected capacity change from 0 to 32768
[  268.315616][ T9555] BTRFS info (device loop4): using free-space-tree
[  268.344405][ T9561] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  268.374275][ T9557] loop3: detected capacity change from 0 to 32768
[  268.478041][ T9561] XFS (loop1): Ending clean mount
[  268.524649][ T9557] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  268.542870][ T8785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  268.619445][ T9557] XFS (loop3): Ending clean mount
[  268.629238][ T8873] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  268.769429][   T29] audit: type=1804 audit(1716928522.694:55): pid=9557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1213758869/syzkaller.9DGknS/5/file0/bus" dev="loop3" ino=1065 res=1 errno=0
[  268.860895][   T29] audit: type=1804 audit(1716928522.724:56): pid=9557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1213758869/syzkaller.9DGknS/5/file0/bus" dev="loop3" ino=1065 res=1 errno=0
[  268.881133][ T5168] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  268.944947][ T5168] XFS (loop3): Unmount and run xfs_repair
[  268.961759][ T5168] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  268.983835][ T9610] BTRFS info (device loop4): balance: start 
[  268.996244][   T29] audit: type=1804 audit(1716928522.794:57): pid=9608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1213758869/syzkaller.9DGknS/5/file0/bus" dev="loop3" ino=1065 res=1 errno=0
[  269.001735][ T5168] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  269.031907][ T9610] BTRFS info (device loop4): balance: ended with status: 0
[  269.096197][ T5168] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  269.105834][ T5168] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  269.115889][ T5168] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  269.127047][ T5168] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  269.138112][ T5168] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  269.169079][ T5168] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  269.193014][ T5168] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  269.221459][ T9557] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  269.249955][ T9557] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  269.291917][ T9557] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  269.456910][ T9085] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  269.473858][ T9008] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  269.887201][ T9621] validate_nla: 17 callbacks suppressed
[  269.887222][ T9621] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  269.902799][ T9621] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  269.912815][ T9621] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  269.941260][ T9621] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  270.006309][ T9621] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  270.032311][ T9621] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  270.065830][ T9621] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  270.073941][ T9615] loop2: detected capacity change from 0 to 32768
[  270.111274][ T9615] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9615)
[  270.153076][ T9615] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  270.202064][ T9615] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  270.211787][ T9615] BTRFS info (device loop2): using free-space-tree
[  270.614248][ T5117] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  270.692094][ T9647] loop4: detected capacity change from 0 to 128
[  270.748933][ T9647] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  270.887234][ T9647] ext4 filesystem being mounted at /root/syzkaller-testdir86839496/syzkaller.jEljcb/9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  271.052327][ T9008] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  271.395504][ T9645] loop1: detected capacity change from 0 to 32768
[  271.498612][ T9645] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  271.539966][ T9624] loop0: detected capacity change from 0 to 32768
[  271.579131][ T9625] loop3: detected capacity change from 0 to 32768
[  271.597262][ T9624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (9624)
[  271.705367][ T9624] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  271.742848][ T9624] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  271.745748][ T9645] XFS (loop1): Ending clean mount
[  271.770997][ T9624] BTRFS info (device loop0): using free-space-tree
[  271.813027][ T9645] XFS (loop1): Quotacheck needed: Please wait.
[  271.974312][ T9645] XFS (loop1): Quotacheck: Done.
[  272.003307][   T29] audit: type=1800 audit(1716928525.924:58): pid=9624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=260 res=0 errno=0
[  272.057037][ T8785] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  272.602267][ T9651] loop4: detected capacity change from 0 to 32768
[  272.603949][ T8873] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  272.720877][ T9651] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  272.746840][ T9653] loop2: detected capacity change from 0 to 32768
[  272.824232][ T9653] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9653)
[  272.922752][ T9653] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  272.988001][ T9653] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  272.999473][ T9651] XFS (loop4): Ending clean mount
[  273.008456][ T9653] BTRFS info (device loop2): using free-space-tree
[  273.147562][ T9008] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  273.149542][ T9707] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  273.253890][ T9707] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  273.306168][ T9716] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  273.866478][ T9725] BTRFS info (device loop2): balance: start 
[  273.888817][ T9725] BTRFS info (device loop2): balance: ended with status: 0
[  273.989586][ T9727] loop1: detected capacity change from 0 to 128
[  274.034463][ T9727] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  274.119884][ T9727] ext4 filesystem being mounted at /root/syzkaller-testdir2980049947/syzkaller.j07d8T/15/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  274.148157][ T5117] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  274.237576][ T8873] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  274.311788][ T9684] loop0: detected capacity change from 0 to 32768
[  274.324526][ T9734] loop4: detected capacity change from 0 to 1024
[  274.345297][ T9684] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (9684)
[  274.405527][ T9684] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  274.455310][ T9684] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  274.464068][ T9684] BTRFS info (device loop0): using free-space-tree
[  274.795207][ T5165] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  274.995230][ T5165] usb 2-1: Using ep0 maxpacket: 8
[  275.021755][ T5165] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  275.041118][ T9730] loop3: detected capacity change from 0 to 32768
[  275.097398][ T5165] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  275.120691][ T5165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.147711][ T5165] usb 2-1: Product: syz
[  275.171779][ T5165] usb 2-1: Manufacturer: syz
[  275.193954][ T5165] usb 2-1: SerialNumber: syz
[  275.635347][ T5165] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  275.704379][ T9737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.719477][ T9737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.810782][ T5167] usb 2-1: USB disconnect, device number 5
[  275.885540][ T5165] usb 5-1: Using ep0 maxpacket: 8
[  275.893970][ T5165] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  275.915363][ T5165] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  275.924552][ T5165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.934427][ T5165] usb 5-1: Product: syz
[  275.949092][ T5165] usb 5-1: Manufacturer: syz
[  275.966990][ T5165] usb 5-1: SerialNumber: syz
[  276.246458][ T8785] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  276.389730][ T9756] loop2: detected capacity change from 0 to 32768
[  276.408067][ T9756] BTRFS: device /dev/loop2 (7:2) using temp-fsid e350604b-e8fe-4e21-84cc-2b89a5f4dcc9
[  276.431530][ T9761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.437721][ T9756] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9756)
[  276.440453][ T9761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.510170][   T58] usb 5-1: USB disconnect, device number 3
[  276.548194][ T9767] validate_nla: 4 callbacks suppressed
[  276.548214][ T9767] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  276.576169][ T9767] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  276.622390][ T9756] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  276.641038][ T9767] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  276.689327][ T9756] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  276.699379][ T9767] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  276.731993][ T9756] BTRFS info (device loop2): using free-space-tree
[  276.739048][ T9767] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  276.753538][ T9767] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  276.773222][ T9767] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  277.026101][   T29] audit: type=1800 audit(1716928530.954:59): pid=9756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=260 res=0 errno=0
[  277.126071][ T5117] BTRFS info (device loop2): last unmount of filesystem e350604b-e8fe-4e21-84cc-2b89a5f4dcc9
[  278.108909][ T9816] loop2: detected capacity change from 0 to 1024
[  278.195328][ T5167] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  278.259671][ T9797] loop0: detected capacity change from 0 to 32768
[  278.405310][ T5167] usb 4-1: Using ep0 maxpacket: 8
[  278.424514][ T5167] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  278.477482][ T5167] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  278.506115][ T5167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.514167][ T5167] usb 4-1: Product: syz
[  278.539351][ T5167] usb 4-1: Manufacturer: syz
[  278.544005][ T5167] usb 4-1: SerialNumber: syz
[  278.548756][ T9819] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  278.549124][ T9819] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  278.552173][ T9819] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  278.663713][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  278.776215][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  278.844552][ T9803] loop4: detected capacity change from 0 to 32768
[  278.888392][ T9803] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9803)
[  278.942913][ T9803] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  278.991541][ T9803] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  279.027971][ T9803] BTRFS info (device loop4): using free-space-tree
[  279.162587][ T9813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.185766][ T9813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.224186][ T5165] usb 4-1: USB disconnect, device number 2
[  279.285240][   T58] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  279.513356][   T58] usb 3-1: Using ep0 maxpacket: 8
[  279.540013][   T58] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  279.572321][   T58] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  279.592565][   T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.615163][   T58] usb 3-1: Product: syz
[  279.626049][   T58] usb 3-1: Manufacturer: syz
[  279.630687][   T58] usb 3-1: SerialNumber: syz
[  279.656368][ T9824] loop0: detected capacity change from 0 to 32768
[  279.682370][ T9824] BTRFS: device /dev/loop0 (7:0) using temp-fsid 017d20e6-61b6-4ea0-9eee-72a365fd6b3e
[  279.710444][ T9824] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (9824)
[  280.016713][ T9824] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  280.057404][ T9824] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  280.085287][ T9824] BTRFS info (device loop0): using free-space-tree
[  280.170875][ T9829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.198668][ T9829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.259804][ T5167] usb 3-1: USB disconnect, device number 3
[  280.387218][   T29] audit: type=1800 audit(1716928534.314:60): pid=9824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=260 res=0 errno=0
[  280.446321][ T8785] BTRFS info (device loop0): last unmount of filesystem 017d20e6-61b6-4ea0-9eee-72a365fd6b3e
[  280.460707][ T9008] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  281.018866][ T9887] loop2: detected capacity change from 0 to 1024
[  281.977242][ T9890] loop3: detected capacity change from 0 to 32768
[  281.999773][ T9890] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9890)
[  282.057587][ T9890] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  282.073748][ T9885] loop4: detected capacity change from 0 to 32768
[  282.127233][ T9890] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  282.180989][ T9890] BTRFS info (device loop3): using free-space-tree
[  282.184917][ T9883] loop0: detected capacity change from 0 to 32768
[  282.216978][ T9898] loop2: detected capacity change from 0 to 1024
[  282.338523][ T9883] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  282.537977][   T29] audit: type=1800 audit(1716928536.454:61): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=260 res=0 errno=0
[  282.576352][ T9883] XFS (loop0): Ending clean mount
[  282.775274][ T5121] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  282.798347][ T5121] XFS (loop0): Unmount and run xfs_repair
[  282.804363][ T5121] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  282.821148][ T5121] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  282.842401][ T5121] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  282.868117][ T5121] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  282.898643][ T5121] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  282.939574][ T5121] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  282.954945][ T9085] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  282.971455][ T5121] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  282.972117][ T9935] validate_nla: 11 callbacks suppressed
[  282.972132][ T9935] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  282.980767][ T5121] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  283.014893][ T9935] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  283.054598][ T9935] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  283.067461][ T5121] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  283.094073][ T9883] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  283.104563][ T9935] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  283.156193][ T9935] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  283.191337][ T9883] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  283.207508][ T9935] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  283.257204][ T9935] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  283.265264][ T9883] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  283.396559][ T8785] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  283.529694][ T9919] loop1: detected capacity change from 0 to 32768
[  283.569084][ T9919] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (9919)
[  283.603971][ T9919] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  283.618425][ T9919] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  283.679295][ T9919] BTRFS info (device loop1): using free-space-tree
[  283.817429][   T29] audit: type=1800 audit(1716928537.744:62): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=260 res=0 errno=0
[  283.939101][ T8873] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  284.876091][ T9957] loop3: detected capacity change from 0 to 32768
[  284.931226][ T9957] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  285.042322][ T9957] XFS (loop3): Starting recovery (logdev: internal)
[  285.106338][ T9957] XFS (loop3): Ending recovery (logdev: internal)
[  285.128947][ T9957] XFS (loop3): Quotacheck needed: Please wait.
[  285.207326][ T9965] loop1: detected capacity change from 0 to 32768
[  285.219552][ T9957] XFS (loop3): Quotacheck: Done.
[  285.296844][ T9965] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  285.438691][ T9965] XFS (loop1): Ending clean mount
[  285.444094][ T9085] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  285.740033][   T25] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  285.782587][   T25] XFS (loop1): Unmount and run xfs_repair
[  285.810475][   T25] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  286.674119][   T25] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  286.685979][   T25] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  286.695402][   T25] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  286.704287][   T25] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  286.714610][   T25] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  286.723564][   T25] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.732532][   T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.743490][   T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  286.768072][ T9994] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  286.811862][ T9994] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  286.863135][ T9994] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  286.932351][ T8873] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  287.181235][ T9988] loop4: detected capacity change from 0 to 32768
[  287.202899][ T9988] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9988)
[  287.244243][ T9988] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  287.271159][ T9988] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  287.292992][ T9988] BTRFS info (device loop4): using free-space-tree
[  287.480840][T10016] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  287.522647][T10016] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  287.564589][T10024] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  287.884908][T10030] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  288.348633][ T9998] loop2: detected capacity change from 0 to 32768
[  288.503927][ T9998] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  288.618316][ T9998] XFS (loop2): Ending clean mount
[  288.664952][ T5165] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  288.677180][ T5165] XFS (loop2): Unmount and run xfs_repair
[  288.689609][ T5165] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  288.727044][ T5165] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  288.752687][ T5165] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  288.783833][ T5165] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  288.786907][   T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  288.795674][ T5165] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  288.813482][ T5165] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  288.822952][ T5165] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  288.838979][ T5165] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  288.850009][ T5165] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  288.863642][ T9998] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  288.886401][ T9998] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  288.907355][ T9998] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  288.932404][T10032] loop0: detected capacity change from 0 to 32768
[  288.953656][ T5117] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  288.964346][T10032] BTRFS: device /dev/loop0 (7:0) using temp-fsid dc7eb3ee-570e-4777-abaf-46bad75aaa5b
[  289.005409][   T25] usb 4-1: Using ep0 maxpacket: 8
[  289.027434][   T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  289.050010][T10032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (10032)
[  289.127085][   T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  289.154954][ T9008] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  289.174363][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.183760][   T25] usb 4-1: Product: syz
[  289.201544][   T25] usb 4-1: Manufacturer: syz
[  289.203885][T10032] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  289.207078][   T25] usb 4-1: SerialNumber: syz
[  289.225331][T10032] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  289.234183][T10032] BTRFS info (device loop0): using free-space-tree
[  289.378647][   T29] audit: type=1800 audit(1716928543.304:63): pid=10032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=260 res=0 errno=0
[  289.594277][ T8785] BTRFS info (device loop0): last unmount of filesystem dc7eb3ee-570e-4777-abaf-46bad75aaa5b
[  289.814822][T10046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.824275][ T5168] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  289.834906][T10046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.869570][ T5167] usb 4-1: USB disconnect, device number 3
[  290.025187][ T5168] usb 3-1: Using ep0 maxpacket: 8
[  290.032261][ T5168] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  290.053946][T10075] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  290.078383][ T5168] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  290.100361][ T5168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.126175][ T5168] usb 3-1: Product: syz
[  290.130723][ T5168] usb 3-1: Manufacturer: syz
[  290.157365][ T5168] usb 3-1: SerialNumber: syz
[  290.329142][T10079] validate_nla: 11 callbacks suppressed
[  290.329164][T10079] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  290.350972][T10079] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  290.368141][T10079] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  290.406893][T10079] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  290.463752][T10080] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  290.484422][T10079] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  290.497588][T10079] netlink: 'syz-executor.0': attribute type 29 has an invalid length.
[  290.680139][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.710963][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.736145][T10084] loop0: detected capacity change from 0 to 128
[  290.757527][ T5168] usb 3-1: USB disconnect, device number 4
[  290.784141][T10084] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  290.850070][T10084] ext4 filesystem being mounted at /root/syzkaller-testdir3597072338/syzkaller.zZPfL6/23/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  290.983192][T10084] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  290.989807][T10084] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  291.163210][ T8785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  291.426964][T10077] loop1: detected capacity change from 0 to 32768
[  291.472828][T10082] loop3: detected capacity change from 0 to 32768
[  291.520846][T10077] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  291.590840][T10082] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  291.759644][T10077] XFS (loop1): Ending clean mount
[  291.786346][T10077] XFS (loop1): Quotacheck needed: Please wait.
[  291.879047][T10082] XFS (loop3): Ending clean mount
[  291.908055][T10077] XFS (loop1): Quotacheck: Done.
[  291.923779][T10082] XFS (loop3): Quotacheck needed: Please wait.
[  292.114860][T10118] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  292.133361][T10082] XFS (loop3): Quotacheck: Done.
[  292.144227][T10118] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  292.169821][T10118] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  292.182585][ T8873] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  292.732556][ T9085] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  292.736432][T10090] loop2: detected capacity change from 0 to 32768
[  292.770520][T10090] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (10090)
[  292.856955][T10090] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  292.905309][T10090] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  292.985506][T10090] BTRFS info (device loop2): using free-space-tree
[  293.375179][   T29] audit: type=1800 audit(1716928547.294:64): pid=10090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=260 res=0 errno=0
[  293.483351][T10147] loop3: detected capacity change from 0 to 512
[  293.597366][T10147] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  293.615312][T10147] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it
[  293.658299][T10126] loop1: detected capacity change from 0 to 32768
[  293.666813][T10147] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended
[  293.681038][T10147] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  293.689454][T10126] BTRFS: device /dev/loop1 (7:1) using temp-fsid bcc49c1a-61cb-4adb-899d-8bc5e2a6dca8
[  293.704329][T10147] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino
[  293.718265][T10126] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10126)
[  293.736796][T10147] EXT4-fs (loop3): Remounting filesystem read-only
[  293.743918][T10126] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  293.763767][T10126] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  293.774095][T10147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.787514][T10126] BTRFS info (device loop1): using free-space-tree
[  293.851224][T10147] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  293.887672][ T5117] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  293.956925][ T9085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.066676][T10125] loop0: detected capacity change from 0 to 32768
[  294.096179][   T29] audit: type=1800 audit(1716928548.004:65): pid=10126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=260 res=0 errno=0
[  294.114314][T10122] loop4: detected capacity change from 0 to 32768
[  294.240858][T10125] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  294.276717][T10122] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  294.379272][ T8873] BTRFS info (device loop1): last unmount of filesystem bcc49c1a-61cb-4adb-899d-8bc5e2a6dca8
[  294.435219][T10125] XFS (loop0): Ending clean mount
[  294.449397][T10122] XFS (loop4): Starting recovery (logdev: internal)
[  294.552686][T10122] XFS (loop4): Ending recovery (logdev: internal)
[  294.594435][T10122] XFS (loop4): Quotacheck needed: Please wait.
[  294.612943][T10186] loop2: detected capacity change from 0 to 128
[  294.643810][ T8785] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  294.678152][T10186] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  294.734391][T10186] ext4 filesystem being mounted at /root/syzkaller-testdir200763771/syzkaller.8OcW5R/156/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  294.770882][T10122] XFS (loop4): Quotacheck: Done.
[  294.855090][T10186] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  294.861642][T10186] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  294.946268][   T29] audit: type=1804 audit(1716928548.864:66): pid=10122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir86839496/syzkaller.jEljcb/28/file1/bus" dev="loop4" ino=1066 res=1 errno=0
[  295.072944][ T5117] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  295.126674][ T9008] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  295.974251][T10193] loop3: detected capacity change from 0 to 32768
[  295.991950][T10193] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10193)
[  295.997344][T10189] loop0: detected capacity change from 0 to 32768
[  296.857041][T10189] BTRFS: device /dev/loop0 (7:0) using temp-fsid 25989c85-8ec5-4b35-976f-e26d9194e6ce
[  296.886616][T10189] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (10189)
[  296.901052][T10193] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  296.925427][T10193] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  296.948365][T10193] BTRFS info (device loop3): using free-space-tree
[  296.952442][T10189] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  296.980840][T10210] validate_nla: 11 callbacks suppressed
[  296.980860][T10210] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  297.001813][T10189] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  297.013050][T10210] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  297.022580][T10210] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  297.031487][T10210] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  297.047514][T10189] BTRFS info (device loop0): using free-space-tree
[  297.055920][T10210] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  297.076788][T10210] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  297.105731][T10210] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  297.288013][   T29] audit: type=1800 audit(1716928551.194:67): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=260 res=0 errno=0
[  297.398812][   T29] audit: type=1800 audit(1716928551.254:68): pid=10193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=260 res=0 errno=0
[  297.608063][ T8785] BTRFS info (device loop0): last unmount of filesystem 25989c85-8ec5-4b35-976f-e26d9194e6ce
[  297.735222][   T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  297.846963][ T9085] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  297.958191][   T25] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  298.005998][   T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  298.060662][   T25] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  298.102413][   T25] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  298.145187][   T25] usb 2-1: Manufacturer: syz
[  298.167774][   T25] usb 2-1: config 0 descriptor??
[  298.190770][   T25] igorplugusb 2-1:0.0: incorrect number of endpoints
[  298.369286][T10245] loop4: detected capacity change from 0 to 32768
[  298.421061][T10245] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10245)
[  298.441970][ T5121] usb 2-1: USB disconnect, device number 6
[  298.512875][T10211] loop2: detected capacity change from 0 to 32768
[  298.522340][T10245] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  298.564389][T10245] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  298.598637][T10245] BTRFS info (device loop4): using free-space-tree
[  298.693030][T10211] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  298.902518][T10211] XFS (loop2): Ending clean mount
[  298.931907][T10211] XFS (loop2): Quotacheck needed: Please wait.
[  299.053190][T10211] XFS (loop2): Quotacheck: Done.
[  299.081770][T10249] loop0: detected capacity change from 0 to 32768
[  299.110214][ T9008] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  299.169193][T10249] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  299.399871][T10249] XFS (loop0): Ending clean mount
[  299.465310][T10249] XFS (loop0): Quotacheck needed: Please wait.
[  299.624165][T10249] XFS (loop0): Quotacheck: Done.
[  299.661220][T10290] loop4: detected capacity change from 0 to 128
[  299.680993][T10290] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  299.706319][T10290] ext4 filesystem being mounted at /root/syzkaller-testdir86839496/syzkaller.jEljcb/32/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  299.791345][T10265] loop3: detected capacity change from 0 to 32768
[  299.812284][ T5117] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  299.841313][ T9008] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  299.870918][T10265] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  300.017537][T10265] XFS (loop3): Starting recovery (logdev: internal)
[  300.030445][ T8785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  300.182242][T10265] XFS (loop3): Ending recovery (logdev: internal)
[  300.239426][T10265] XFS (loop3): Quotacheck needed: Please wait.
[  300.384523][T10265] XFS (loop3): Quotacheck: Done.
[  300.620841][ T9085] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  302.416859][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  302.463591][T10333] overlayfs: failed to resolve './file2': -2
[  302.599042][T10337] loop3: detected capacity change from 0 to 128
[  302.629602][T10311] loop1: detected capacity change from 0 to 32768
[  302.638650][    T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  302.643484][T10311] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10311)
[  302.648573][T10337] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  302.680978][T10337] ext4 filesystem being mounted at /root/syzkaller-testdir1213758869/syzkaller.9DGknS/35/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  302.689363][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  302.709802][    T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  302.720205][    T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  302.732790][T10311] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  302.734832][    T9] usb 1-1: Manufacturer: syz
[  302.778236][    T9] usb 1-1: config 0 descriptor??
[  302.782678][T10311] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  302.789103][    T9] igorplugusb 1-1:0.0: incorrect number of endpoints
[  302.802447][ T9085] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  302.829463][T10311] BTRFS info (device loop1): using free-space-tree
[  303.073558][   T29] audit: type=1800 audit(1716928556.994:69): pid=10311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=260 res=0 errno=0
[  303.134471][    T9] usb 1-1: USB disconnect, device number 7
[  303.417162][ T8873] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  305.016713][T10342] loop4: detected capacity change from 0 to 32768
[  305.133280][T10342] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  305.274883][T10397] loop3: detected capacity change from 0 to 128
[  305.288230][T10364] loop2: detected capacity change from 0 to 32768
[  305.301123][T10397] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  305.370439][T10397] ext4 filesystem being mounted at /root/syzkaller-testdir1213758869/syzkaller.9DGknS/42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  305.419446][T10364] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  305.440856][T10342] XFS (loop4): Ending clean mount
[  305.485999][T10342] XFS (loop4): Quotacheck needed: Please wait.
[  305.553311][ T9085] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  305.601261][T10364] XFS (loop2): Ending clean mount
[  305.651752][T10342] XFS (loop4): Quotacheck: Done.
[  305.665378][T10364] XFS (loop2): Quotacheck needed: Please wait.
[  305.786664][T10364] XFS (loop2): Quotacheck: Done.
[  305.790711][T10409] loop3: detected capacity change from 0 to 256
[  305.947539][ T9008] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  306.020940][T10377] loop1: detected capacity change from 0 to 32768
[  306.161891][T10377] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  306.356034][T10377] XFS (loop1): Ending clean mount
[  306.474182][T10425] loop0: detected capacity change from 0 to 256
[  306.492923][T10425] FAT-fs (loop0): Unrecognized mount option "shortname=w/innt" or missing value
[  306.515481][ T5117] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  306.641122][ T8873] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  307.130373][T10412] loop3: detected capacity change from 0 to 32768
[  307.401613][T10412] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  307.974996][T10412] XFS (loop3): Ending clean mount
[  308.027862][T10412] XFS (loop3): Quotacheck needed: Please wait.
[  308.199014][T10412] XFS (loop3): Quotacheck: Done.
[  308.706207][ T9085] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  309.178355][T10443] loop2: detected capacity change from 0 to 32768
[  309.205322][T10443] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (10443)
[  309.328110][T10443] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  309.362292][T10443] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  309.390189][T10443] BTRFS info (device loop2): using free-space-tree
[  309.677633][   T29] audit: type=1800 audit(1716928563.604:70): pid=10443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=260 res=0 errno=0
[  309.847962][ T5117] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  310.776804][T10498] loop3: detected capacity change from 0 to 32768
[  310.839380][T10498] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  311.122038][T10498] XFS (loop3): Ending clean mount
[  311.147655][T10498] XFS (loop3): Quotacheck needed: Please wait.
[  311.239651][T10498] XFS (loop3): Quotacheck: Done.
[  311.390190][T10535] loop1: detected capacity change from 0 to 256
[  311.473618][T10535] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  311.520465][ T9085] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  311.986767][T10513] loop0: detected capacity change from 0 to 32768
[  312.015012][T10513] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (10513)
[  312.060354][T10513] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  312.088225][T10513] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  312.108764][T10513] BTRFS info (device loop0): using free-space-tree
[  312.304294][T10567] loop4: detected capacity change from 0 to 128
[  312.417942][T10567] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  312.517470][T10567] ext4 filesystem being mounted at /root/syzkaller-testdir86839496/syzkaller.jEljcb/42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  312.561887][ T8785] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  312.622391][T10567] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  312.629012][T10567] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  313.048363][T10581] loop1: detected capacity change from 0 to 256
[  313.080543][T10581] FAT-fs (loop1): Unrecognized mount option "shortname=w/innt" or missing value
[  313.176870][ T5274] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  313.178353][T10583] loop0: detected capacity change from 0 to 128
[  313.218924][T10583] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  313.277637][ T9008] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  313.277716][T10583] ext4 filesystem being mounted at /root/syzkaller-testdir3597072338/syzkaller.zZPfL6/43/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  313.367897][T10549] loop3: detected capacity change from 0 to 32768
[  313.401850][T10583] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  313.406537][T10549] btrfs: Deprecated parameter 'usebackuproot'
[  313.408425][T10583] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  313.421293][T10549] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  313.451792][T10549] btrfs: Deprecated parameter 'usebackuproot'
[  313.483531][T10549] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  313.508812][T10549] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10549)
[  313.555332][T10549] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  313.585267][T10549] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  313.588894][ T8785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  313.606221][T10549] BTRFS info (device loop3): disk space caching is enabled
[  313.630871][T10571] loop2: detected capacity change from 0 to 32768
[  313.690395][T10571] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  313.776209][T10605] loop4: detected capacity change from 0 to 256
[  313.838304][T10571] XFS (loop2): Starting recovery (logdev: internal)
[  313.871765][T10605] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  313.882266][T10549] BTRFS info (device loop3 state M): disabling free space tree
[  313.884258][T10549] BTRFS info (device loop3 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  313.914454][T10549] BTRFS info (device loop3 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  313.933326][T10571] XFS (loop2): Ending recovery (logdev: internal)
[  313.945654][T10571] XFS (loop2): Quotacheck needed: Please wait.
[  314.012531][T10571] XFS (loop2): Quotacheck: Done.
[  314.093609][T10549] BTRFS info (device loop3 state M): use  compression, level 0
[  314.114760][T10620] loop4: detected capacity change from 0 to 128
[  314.129876][   T29] audit: type=1804 audit(1716928568.054:71): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir200763771/syzkaller.8OcW5R/168/file1/bus" dev="loop2" ino=1066 res=1 errno=0
[  314.173183][ T9085] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  314.196505][T10620] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  314.217191][ T5117] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  314.227498][T10620] ext4 filesystem being mounted at /root/syzkaller-testdir86839496/syzkaller.jEljcb/45/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  314.343961][T10620] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  314.351669][T10620] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  314.462484][ T9008] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  314.914682][T10618] loop0: detected capacity change from 0 to 32768
[  314.951950][T10618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (10618)
[  315.012101][T10618] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  315.045378][T10618] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  315.074430][T10618] BTRFS info (device loop0): using free-space-tree
[  315.599843][T10658] loop1: detected capacity change from 0 to 256
[  315.629134][ T8785] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  315.660830][T10658] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  315.828005][T10631] loop4: detected capacity change from 0 to 32768
[  315.848477][T10631] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10631)
[  315.906511][T10631] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  315.947481][T10631] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  315.986651][T10660] loop3: detected capacity change from 0 to 128
[  316.002288][T10631] BTRFS info (device loop4): using free-space-tree
[  316.146184][T10660] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  316.200307][T10660] ext4 filesystem being mounted at /root/syzkaller-testdir1213758869/syzkaller.9DGknS/48/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  316.252397][T10660] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  316.258970][T10660] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  316.296914][ T9085] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  316.409102][   T29] audit: type=1800 audit(1716928570.334:72): pid=10631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=260 res=0 errno=0
[  316.512682][T10684] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  316.621764][T10634] loop2: detected capacity change from 0 to 32768
[  316.705638][ T9008] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.752365][T10634] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  317.135324][T10634] XFS (loop2): Ending clean mount
[  317.335016][T10634] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  317.380353][T10634] XFS (loop2): Unmount and run xfs_repair
[  317.408379][T10634] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  317.436002][T10634] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  317.475310][T10634] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  317.490125][ T1242] ieee802154 phy0 wpan0: encryption failed: -22
[  317.496648][ T1242] ieee802154 phy1 wpan1: encryption failed: -22
[  317.543131][T10634] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  317.596275][T10634] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  317.622430][T10634] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  317.697567][T10634] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  317.755785][T10634] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  317.778213][T10634] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  317.811307][T10634] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  317.866410][T10706] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  317.879072][T10634] XFS (loop2): page discard on page ffffea0001776c00, inode 0x429, pos 0.
[  317.885839][T10706] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  317.934367][T10706] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  317.961099][T10706] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  317.998407][T10706] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  317.999417][ T5117] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  318.018116][T10706] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  318.050867][T10706] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  318.078567][ T5117] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  318.613828][T10703] loop3: detected capacity change from 0 to 32768
[  318.692181][T10703] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  318.816816][T10703] XFS (loop3): Ending clean mount
[  318.876115][T10699] loop0: detected capacity change from 0 to 32768
[  318.989848][T10699] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  318.994191][T10703] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  319.045478][T10703] XFS (loop3): Unmount and run xfs_repair
[  319.075808][T10703] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  319.090007][T10703] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  319.109222][T10703] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  319.135697][T10703] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  319.162553][T10703] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  319.199572][T10699] XFS (loop0): Starting recovery (logdev: internal)
[  319.222309][T10703] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  319.249585][T10703] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  319.270949][T10699] XFS (loop0): Ending recovery (logdev: internal)
[  319.274594][T10703] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  319.304917][T10699] XFS (loop0): Quotacheck needed: Please wait.
[  319.308655][T10703] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  319.345319][T10703] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  319.390118][T10711] loop4: detected capacity change from 0 to 32768
[  319.403710][T10699] XFS (loop0): Quotacheck: Done.
[  319.404163][T10703] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  319.427956][T10711] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10711)
[  319.451793][T10711] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  319.464381][T10703] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  319.464382][T10711] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  319.464418][T10711] BTRFS info (device loop4): using free-space-tree
[  319.546416][   T29] audit: type=1804 audit(1716928573.474:73): pid=10699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3597072338/syzkaller.zZPfL6/46/file1/bus" dev="loop0" ino=1066 res=1 errno=0
[  319.617816][ T9085] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  319.693870][ T8785] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  320.039578][ T9008] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  320.276387][T10729] loop2: detected capacity change from 0 to 32768
[  320.310838][T10729] btrfs: Deprecated parameter 'usebackuproot'
[  320.340425][T10729] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  320.376004][T10729] btrfs: Deprecated parameter 'usebackuproot'
[  320.411092][T10729] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  320.596322][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  320.650883][T10736] loop1: detected capacity change from 0 to 32768
[  320.657986][T10729] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (10729)
[  321.529081][T10756] loop3: detected capacity change from 0 to 32768
[  321.598654][T10756] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  321.720631][T10756] XFS (loop3): Starting recovery (logdev: internal)
[  321.792161][T10756] XFS (loop3): Ending recovery (logdev: internal)
[  321.813655][T10756] XFS (loop3): Quotacheck needed: Please wait.
[  321.907130][T10756] XFS (loop3): Quotacheck: Done.
[  321.991184][   T29] audit: type=1804 audit(1716928575.914:74): pid=10756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1213758869/syzkaller.9DGknS/51/file1/bus" dev="loop3" ino=1066 res=1 errno=0
[  322.082258][ T9085] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  322.125600][T10736] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop1": -EINTR
[  322.147674][T10729] BTRFS error (device loop2): open_ctree failed
[  322.219005][T10769] loop4: detected capacity change from 0 to 32768
[  322.229779][T10769] btrfs: Deprecated parameter 'usebackuproot'
[  322.236098][T10769] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  322.246453][T10769] btrfs: Deprecated parameter 'usebackuproot'
[  322.252867][T10769] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  322.263171][T10769] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10769)
[  322.302330][T10769] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  322.375237][T10769] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  322.407493][T10769] BTRFS info (device loop4): disk space caching is enabled
[  322.710721][T10769] BTRFS info (device loop4 state M): disabling free space tree
[  322.735272][T10769] BTRFS info (device loop4 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  322.830325][T10769] BTRFS info (device loop4 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  323.010943][T10769] BTRFS info (device loop4 state M): use  compression, level 0
[  323.155976][ T9008] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  323.297695][T10808] loop3: detected capacity change from 0 to 256
[  323.403173][T10808] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  323.478049][T10810] loop4: detected capacity change from 0 to 256
[  323.506006][T10810] FAT-fs (loop4): Unrecognized mount option "shortname=w/innt" or missing value
[  323.856388][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  324.375329][T10780] loop0: detected capacity change from 0 to 32768
[  324.887103][T10780] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  325.182172][T10780] XFS (loop0): Ending clean mount
[  325.277350][ T8785] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  325.378469][T10801] loop2: detected capacity change from 0 to 32768
[  325.422135][T10801] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (10801)
[  325.467395][T10801] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  325.501040][T10801] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  325.575243][T10801] BTRFS info (device loop2): using free-space-tree
[  325.851068][   T29] audit: type=1800 audit(1716928579.774:75): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=260 res=0 errno=0
[  326.317926][T10833] loop3: detected capacity change from 0 to 32768
[  326.409260][T10833] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  326.508466][T10833] XFS (loop3): Starting recovery (logdev: internal)
[  326.561390][T10833] XFS (loop3): Ending recovery (logdev: internal)
[  326.594832][T10833] XFS (loop3): Quotacheck needed: Please wait.
[  326.670118][T10833] XFS (loop3): Quotacheck: Done.
[  326.701558][T10837] loop4: detected capacity change from 0 to 32768
[  326.711845][T10837] btrfs: Deprecated parameter 'usebackuproot'
[  326.726698][T10837] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  326.772634][T10837] btrfs: Deprecated parameter 'usebackuproot'
[  326.805112][T10837] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  326.838720][   T29] audit: type=1804 audit(1716928580.764:76): pid=10833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1213758869/syzkaller.9DGknS/56/file1/bus" dev="loop3" ino=1066 res=1 errno=0
[  326.864310][    C0] vkms_vblank_simulate: vblank timer overrun
[  326.871011][T10837] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10837)
[  327.471394][T10837] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  327.502707][ T9085] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  327.518896][T10837] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  327.572507][T10837] BTRFS info (device loop4): disk space caching is enabled
[  327.642059][ T5117] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  328.023114][T10837] BTRFS info (device loop4 state M): disabling free space tree
[  328.035409][T10837] BTRFS info (device loop4 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  328.087597][T10837] BTRFS info (device loop4 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  328.090191][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  328.164576][T10837] BTRFS info (device loop4 state M): use  compression, level 0
[  328.322242][ T9008] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  328.499986][T10900] loop2: detected capacity change from 0 to 128
[  328.511603][T10904] loop3: detected capacity change from 0 to 128
[  328.595559][T10904] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  328.634011][T10900] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  328.667497][T10904] ext4 filesystem being mounted at /root/syzkaller-testdir1213758869/syzkaller.9DGknS/59/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  328.729793][T10900] ext4 filesystem being mounted at /root/syzkaller-testdir200763771/syzkaller.8OcW5R/173/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  328.906086][ T9085] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  329.963452][ T5117] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  330.355498][T10891] loop0: detected capacity change from 0 to 32768
[  330.391893][T10891] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (10891)
[  330.443412][T10927] loop1: detected capacity change from 0 to 4096
[  330.461675][T10891] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  330.483689][T10891] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  330.501123][T10927] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  330.522705][T10891] BTRFS info (device loop0): using free-space-tree
[  330.571548][T10927] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  330.828804][   T29] audit: type=1800 audit(1716928584.754:77): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=260 res=0 errno=0
[  331.063155][ T8785] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  331.313271][T10923] loop4: detected capacity change from 0 to 32768
[  331.441675][T10923] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  331.477081][T10928] loop2: detected capacity change from 0 to 32768
[  331.517302][T10928] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (10928)
[  331.641546][T10923] XFS (loop4): Ending clean mount
[  331.656218][T10928] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  331.689681][T10928] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  331.726197][T10928] BTRFS info (device loop2): using free-space-tree
[  331.829007][    T9] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  331.856443][    T9] XFS (loop4): Unmount and run xfs_repair
[  331.862284][    T9] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  331.876182][    T9] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  331.885437][    T9] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  331.894389][    T9] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  331.904268][    T9] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  331.913331][    T9] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  331.922335][    T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  331.931465][    T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  331.940436][    T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  331.950301][T10923] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  331.990157][T10923] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  332.006739][T10923] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  332.031708][ T9008] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  332.349349][ T5117] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  333.455628][T10997] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  333.475710][T10997] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  333.509964][T10999] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  333.543815][T10997] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  333.571683][T10997] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  333.597515][T10997] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  333.619775][T10997] netlink: 'syz-executor.3': attribute type 29 has an invalid length.
[  334.408123][T11002] loop3: detected capacity change from 0 to 32768
[  334.430903][T11002] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (11002)
[  334.496764][T11002] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  334.518782][T11002] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  334.544665][T11002] BTRFS info (device loop3): using free-space-tree
[  334.935883][T11020] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  334.950532][   T29] audit: type=1800 audit(1716928588.874:78): pid=11002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=260 res=0 errno=0
[  334.962243][T11020] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  335.029038][T11021] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  335.501610][ T9085] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  335.627105][T10822] ntfs3: loop1: ino=5, ntfs3_write_inode failed, -22.
[  335.692884][T11030] loop4: detected capacity change from 0 to 256
[  335.708865][T11030] FAT-fs (loop4): Unrecognized mount option "shortname=w/innt" or missing value
[  335.815010][ T5274] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  336.696819][T11024] loop2: detected capacity change from 0 to 32768
[  336.807249][T11024] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  336.943847][T11035] loop3: detected capacity change from 0 to 32768
[  336.963793][T11035] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (11035)
[  336.994484][T11024] XFS (loop2): Ending clean mount
[  337.017795][T11035] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  337.031115][T11035] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  337.045206][T11035] BTRFS info (device loop3): using free-space-tree
[  337.173779][ T5165] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  337.215367][ T5165] XFS (loop2): Unmount and run xfs_repair
[  337.245651][ T5165] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  337.253075][ T5165] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  337.266021][ T5165] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  337.275014][ T5165] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  337.307257][ T5165] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  337.335924][ T5165] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  337.378087][ T5165] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  337.405281][ T5165] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  337.414606][ T5165] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  337.459595][T11024] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  337.512448][ T9085] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  337.520587][T11024] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  337.557689][T11024] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  337.670456][ T5117] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  337.682087][T11039] loop4: detected capacity change from 0 to 32768
[  337.803447][T11039] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11039)
[  337.880938][T11039] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  337.915214][T11039] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  337.942556][T11039] BTRFS info (device loop4): using free-space-tree
[  338.553449][ T9008] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  339.188066][T11112] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'.
[  339.633013][T11115] loop0: detected capacity change from 0 to 4096
[  339.665402][T11115] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  339.696043][T11117] loop4: detected capacity change from 0 to 4096
[  339.744691][T11117] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  339.778844][T11115] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  339.875475][T11117] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  339.912604][T11117] ntfs3: loop4: Failed to load $Extend (-22).
[  339.935268][T11117] ntfs3: loop4: Failed to initialize $Extend.
[  340.176672][T11126] loop3: detected capacity change from 0 to 128
[  340.280496][T11126] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  340.313904][T11126] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  340.783675][T11119] loop1: detected capacity change from 0 to 32768
[  340.827839][T11119] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (11119)
[  340.900101][T11119] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  340.947007][T11119] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  340.999704][T11119] BTRFS info (device loop1): using free-space-tree
[  341.489552][ T8873] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  341.753901][T11157] loop4: detected capacity change from 0 to 512
[  341.805775][T11157] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  341.871391][T11136] loop3: detected capacity change from 0 to 32768
[  341.878359][T11157] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it
[  341.936919][T11136] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (11136)
[  341.950478][T11157] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended
[  342.002135][T11157] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  342.030266][T11136] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  342.055316][T11157] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino
[  342.091777][T11136] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  342.118218][T11136] BTRFS info (device loop3): using free-space-tree
[  342.124983][T11157] EXT4-fs (loop4): Remounting filesystem read-only
[  342.150456][T11157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.187677][T11161] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  342.351973][   T29] audit: type=1800 audit(1716928596.274:79): pid=11136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=260 res=0 errno=0
[  342.377257][ T9008] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.850600][ T9085] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  343.093977][ T2825] ntfs3: loop0: ino=5, ntfs3_write_inode failed, -22.
[  343.751562][T11192] loop0: detected capacity change from 0 to 128
[  343.762611][T11185] loop2: detected capacity change from 0 to 32768
[  343.795559][T11185] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (11185)
[  343.845982][T11187] loop4: detected capacity change from 0 to 32768
[  343.853687][T11192] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  343.888627][T11192] ext4 filesystem being mounted at /root/syzkaller-testdir3597072338/syzkaller.zZPfL6/60/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  343.913095][T11185] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  343.937407][T11185] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  343.958743][T11193] loop1: detected capacity change from 0 to 4096
[  343.963571][T11187] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  343.967563][T11185] BTRFS info (device loop2): using free-space-tree
[  344.005130][T11193] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  344.086116][T11193] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  344.106240][ T8785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  344.122346][T11193] ntfs3: loop1: Failed to load $Extend (-22).
[  344.131279][T11193] ntfs3: loop1: Failed to initialize $Extend.
[  344.193204][T11187] XFS (loop4): Ending clean mount
[  344.240220][   T29] audit: type=1800 audit(1716928598.164:80): pid=11185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=260 res=0 errno=0
[  344.259073][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  344.298161][T11187] XFS (loop4): Quotacheck needed: Please wait.
[  344.392399][T11187] XFS (loop4): Quotacheck: Done.
[  344.490198][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  344.603555][ T5117] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  344.604690][ T9008] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  344.706602][T11232] Bluetooth: hci3: invalid length 0, exp 2 for type 15
[  344.824618][T11235] loop0: detected capacity change from 0 to 512
[  344.899302][T11235] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  344.955239][T11235] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it
[  344.989828][T11235] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended
[  345.035706][T11235] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  345.061217][T11235] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino
[  345.120124][T11235] EXT4-fs (loop0): Remounting filesystem read-only
[  345.145367][T11235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.212392][T11240] loop4: detected capacity change from 0 to 128
[  345.288212][T11240] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  345.400173][ T8785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.469264][T11244] validate_nla: 4 callbacks suppressed
[  345.469284][T11244] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  345.521655][T11244] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  345.554727][T11244] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  345.582562][T11244] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  345.615882][T11244] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  345.649071][T11244] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  345.680832][T11244] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  345.982302][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  346.099248][T11257] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  346.222265][T11238] loop1: detected capacity change from 0 to 32768
[  346.252837][T11238] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (11238)
[  346.312119][T11238] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  346.346257][T11238] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  346.355008][T11238] BTRFS info (device loop1): using free-space-tree
[  346.729046][ T8873] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  346.849438][T11246] loop0: detected capacity change from 0 to 32768
[  346.987129][T11246] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  347.253480][T11246] XFS (loop0): Ending clean mount
[  347.285346][T11246] XFS (loop0): Quotacheck needed: Please wait.
[  347.316581][T11258] loop2: detected capacity change from 0 to 32768
[  347.378178][T11258] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  347.409114][T11246] XFS (loop0): Quotacheck: Done.
[  347.483918][T11258] XFS (loop2): Starting recovery (logdev: internal)
[  347.549347][T11258] XFS (loop2): Ending recovery (logdev: internal)
[  347.584312][T11258] XFS (loop2): Quotacheck needed: Please wait.
[  347.669187][T11258] XFS (loop2): Quotacheck: Done.
[  347.710916][ T8785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  347.867976][ T5117] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  348.565523][T11292] loop1: detected capacity change from 0 to 32768
[  348.632862][T11292] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  348.847554][T11292] XFS (loop1): Ending clean mount
[  348.873022][T11292] XFS (loop1): Quotacheck needed: Please wait.
[  348.980693][T11292] XFS (loop1): Quotacheck: Done.
[  349.122004][ T8873] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  349.187595][T11319] loop3: detected capacity change from 0 to 512
[  349.233068][T11319] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  349.244841][T11319] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it
[  349.267933][T11319] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended
[  349.324620][T11319] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  349.371067][T11319] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino
[  349.440579][T11319] EXT4-fs (loop3): Remounting filesystem read-only
[  349.459197][T11319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.678006][ T9085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.779909][T11305] loop0: detected capacity change from 0 to 32768
[  349.811466][T11328] loop4: detected capacity change from 0 to 128
[  349.867451][T11305] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  349.875851][T11328] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  349.925981][T11328] ext4 filesystem being mounted at /root/syzkaller-testdir86839496/syzkaller.jEljcb/75/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  349.948686][T11329] loop1: detected capacity change from 0 to 4096
[  349.968302][T11329] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  349.988888][T11314] loop2: detected capacity change from 0 to 32768
[  350.042797][T11328] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  350.049366][T11328] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  350.072316][T11314] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  350.122276][T11329] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  350.144117][T11329] ntfs3: loop1: Failed to load $Extend (-22).
[  350.153580][T11329] ntfs3: loop1: Failed to initialize $Extend.
[  350.220882][T11314] XFS (loop2): Starting recovery (logdev: internal)
[  350.230122][ T9008] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  350.275210][T11305] XFS (loop0): Ending clean mount
[  350.285953][ T5124] Bluetooth: hci3: command 0x0406 tx timeout
[  350.354611][T11314] XFS (loop2): Ending recovery (logdev: internal)
[  350.362594][T11305] XFS (loop0): Quotacheck needed: Please wait.
[  350.397634][T11314] XFS (loop2): Quotacheck needed: Please wait.
[  350.466825][T11305] XFS (loop0): Quotacheck: Done.
[  350.517899][T11314] XFS (loop2): Quotacheck: Done.
[  350.614918][   T29] audit: type=1804 audit(1716928604.534:81): pid=11314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir200763771/syzkaller.8OcW5R/189/file1/bus" dev="loop2" ino=1066 res=1 errno=0
[  350.711753][ T5117] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  350.949874][ T8785] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  351.721471][T11359] loop3: detected capacity change from 0 to 32768
[  351.784635][T11359] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  351.823973][T11353] loop1: detected capacity change from 0 to 32768
[  351.895523][T11353] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  351.943043][T11359] XFS (loop3): Ending clean mount
[  351.957235][T11359] XFS (loop3): Quotacheck needed: Please wait.
[  352.022912][T11359] XFS (loop3): Quotacheck: Done.
[  352.088285][ T9085] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  352.267745][T11353] XFS (loop1): Ending clean mount
[  352.274929][T11387] loop0: detected capacity change from 0 to 128
[  352.361047][T11387] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  352.381240][T11353] XFS (loop1): Quotacheck needed: Please wait.
[  352.413447][T11387] ext4 filesystem being mounted at /root/syzkaller-testdir3597072338/syzkaller.zZPfL6/67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  352.453758][T11353] XFS (loop1): Quotacheck: Done.
[  352.501801][T11387] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  352.508423][T11387] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  352.672569][T11361] loop4: detected capacity change from 0 to 32768
[  352.694141][ T8785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  352.801539][T11361] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  352.881787][ T8873] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  353.124525][T11361] XFS (loop4): Ending clean mount
[  353.159418][T11361] XFS (loop4): Quotacheck needed: Please wait.
[  353.282907][T11361] XFS (loop4): Quotacheck: Done.
[  353.709187][ T9008] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  353.716671][T11411] loop3: detected capacity change from 0 to 32768
[  353.752189][T11411] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (11411)
[  353.808598][T11411] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  353.832323][T11411] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  353.843815][T11411] BTRFS info (device loop3): using free-space-tree
[  354.261853][ T9085] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  355.031113][T11444] loop2: detected capacity change from 0 to 128
[  355.106480][T11444] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  355.308491][T11444] ext4 filesystem being mounted at /root/syzkaller-testdir200763771/syzkaller.8OcW5R/191/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  355.408385][ T5123] Bluetooth: hci4: command 0x0406 tx timeout
[  356.737846][T11444] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  356.744370][T11444] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  356.770932][T11454] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'.
[  356.950126][ T5117] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  357.193573][   T29] audit: type=1326 audit(1716928611.114:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080aa7cee9 code=0x7ffc0000
[  357.216645][   T29] audit: type=1326 audit(1716928611.114:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080aa7cee9 code=0x7ffc0000
[  357.239417][    C0] vkms_vblank_simulate: vblank timer overrun
[  357.252155][   T29] audit: type=1326 audit(1716928611.134:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f080aa7cee9 code=0x7ffc0000
[  357.274924][    C0] vkms_vblank_simulate: vblank timer overrun
[  357.307792][   T29] audit: type=1326 audit(1716928611.134:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080aa7cee9 code=0x7ffc0000
[  357.344377][   T29] audit: type=1326 audit(1716928611.134:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080aa7cee9 code=0x7ffc0000
[  357.373192][   T29] audit: type=1326 audit(1716928611.134:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f080aa7cee9 code=0x7ffc0000
[  357.404502][   T29] audit: type=1326 audit(1716928611.134:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080aa7cee9 code=0x7ffc0000
[  357.411891][T11434] loop4: detected capacity change from 0 to 32768
[  357.441117][   T29] audit: type=1326 audit(1716928611.134:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f080aa7cee9 code=0x7ffc0000
[  357.516790][   T29] audit: type=1326 audit(1716928611.134:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080aa7cee9 code=0x7ffc0000
[  357.539570][    C0] vkms_vblank_simulate: vblank timer overrun
[  357.588769][   T29] audit: type=1326 audit(1716928611.144:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11466 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080aa7cee9 code=0x7ffc0000
[  357.625178][ T5274] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  358.179098][T11456] loop3: detected capacity change from 0 to 32768
[  358.280087][T11456] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  358.311029][T11484] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'.
[  358.492975][T11456] XFS (loop3): Ending clean mount
[  358.526890][T11456] XFS (loop3): Quotacheck needed: Please wait.
[  359.959310][T11456] XFS (loop3): Quotacheck: Done.
[  360.096079][ T9085] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  360.127146][T11503] loop4: detected capacity change from 0 to 128
[  360.203579][T11503] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  360.272295][T11503] ext4 filesystem being mounted at /root/syzkaller-testdir86839496/syzkaller.jEljcb/83/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  360.376995][T11503] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  360.383504][T11503] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  360.525457][ T5124] Bluetooth: hci0: command 0x0406 tx timeout
[  360.587150][ T9008] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  360.937345][T11519] loop0: detected capacity change from 0 to 256
[  361.132411][T11519] loop0: detected capacity change from 256 to 0
[  361.172486][    C0] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  361.199638][T11522] Unable to read inode block
[  361.311363][ T8785] syz-executor.0: attempt to access beyond end of device
[  361.311363][ T8785] loop0: rw=0, sector=8, nr_sectors = 2 limit=0
[  361.355838][T11526] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  361.391417][ T8785] Unable to read inode block
[  361.424896][ T8785] syz-executor.0: attempt to access beyond end of device
[  361.424896][ T8785] loop0: rw=0, sector=8, nr_sectors = 2 limit=0
[  361.487909][ T8785] Unable to read inode block
[  361.843215][ T2825] kworker/u8:11: attempt to access beyond end of device
[  361.843215][ T2825] loop0: rw=0, sector=8, nr_sectors = 2 limit=0
[  361.873843][ T2825] Unable to read inode block
[  361.889957][ T2825] kworker/u8:11: attempt to access beyond end of device
[  361.889957][ T2825] loop0: rw=0, sector=8, nr_sectors = 2 limit=0
[  361.932899][T10822] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.944070][ T2825] Unable to read inode block
[  362.134055][T10822] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.159682][T11539] loop2: detected capacity change from 0 to 128
[  362.211022][T11517] loop4: detected capacity change from 0 to 32768
[  362.232104][T11539] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  362.310473][T11517] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  362.328408][T10822] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.577885][T10822] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.658073][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  362.668456][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  362.677259][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  362.694236][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  362.703050][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  362.712188][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  362.827152][T11517] XFS (loop4): Ending clean mount
[  363.067232][T11551] chnl_net:caif_netlink_parms(): no params data found
[  364.234575][T11517] XFS (loop4): Quotacheck needed: Please wait.
[  364.333119][T11517] XFS (loop4): Quotacheck: Done.
[  364.387942][T11551] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.395855][T11551] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.403080][T11551] bridge_slave_0: entered allmulticast mode
[  364.418619][T11551] bridge_slave_0: entered promiscuous mode
[  364.429849][ T9008] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  364.469342][T11532] loop1: detected capacity change from 0 to 32768
[  364.495898][T11551] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.503069][T11551] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.517951][T11532] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (11532)
[  364.545763][T11551] bridge_slave_1: entered allmulticast mode
[  364.553203][T11551] bridge_slave_1: entered promiscuous mode
[  364.579246][T11532] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  364.595644][T10822] bridge_slave_1: left allmulticast mode
[  364.601323][T10822] bridge_slave_1: left promiscuous mode
[  364.615129][T10822] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.637600][T10822] bridge_slave_0: left allmulticast mode
[  364.638980][T11532] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  364.643264][T10822] bridge_slave_0: left promiscuous mode
[  364.695585][T10822] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.706934][T11532] BTRFS info (device loop1): using free-space-tree
[  364.742493][T11532] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  364.743308][T11532] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  364.775445][ T5124] Bluetooth: hci3: command tx timeout
[  364.789245][T11532] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  364.792129][T11532] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  364.844834][T11532] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  364.906268][T11532] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  364.958823][T11532] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  364.998939][T11532] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  365.034769][T11532] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  365.085198][T11532] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  365.118238][T11532] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  365.175553][T11532] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  365.213808][T11532] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  365.296570][T11532] BTRFS error (device loop1): open_ctree failed
[  365.645316][ T5124] Bluetooth: hci1: command 0x0406 tx timeout
[  365.669564][T11562] loop2: detected capacity change from 0 to 32768
[  365.751309][T11562] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  365.781463][T10822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  365.804902][T10822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  365.832098][T10822] bond0 (unregistering): Released all slaves
[  365.861418][T10822] bond1 (unregistering): Released all slaves
[  365.983396][T11592] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  366.087407][T11562] XFS (loop2): Ending clean mount
[  366.091341][T11551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.124912][T11551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.138138][T11562] XFS (loop2): Quotacheck needed: Please wait.
[  366.245778][T11562] XFS (loop2): Quotacheck: Done.
[  366.369150][T11551] team0: Port device team_slave_0 added
[  366.420269][T11578] loop4: detected capacity change from 0 to 32768
[  366.452320][T11551] team0: Port device team_slave_1 added
[  366.521284][T11578] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  366.608581][ T5117] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  366.621981][T10822] hsr_slave_0: left promiscuous mode
[  366.648341][T10822] hsr_slave_1: left promiscuous mode
[  366.661826][T10822] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.674074][T10822] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.708731][T10822] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.737509][T10822] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.855610][ T5123] Bluetooth: hci3: command tx timeout
[  366.858529][T10822] veth1_macvtap: left promiscuous mode
[  366.892099][T10822] veth0_macvtap: left promiscuous mode
[  366.901792][T10822] veth1_vlan: left promiscuous mode
[  366.913532][T10822] veth0_vlan: left promiscuous mode
[  367.035265][T11578] XFS (loop4): Ending clean mount
[  367.070464][T11578] XFS (loop4): Quotacheck needed: Please wait.
[  367.254478][T11578] XFS (loop4): Quotacheck: Done.
[  367.266337][T11622] Bluetooth: MGMT ver 1.23
[  367.288902][T11622] Bluetooth: hci3: invalid length 0, exp 2 for type 0
[  367.526517][ T9008] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  368.358826][T10822] team0 (unregistering): Port device team_slave_1 removed
[  368.420931][T10822] team0 (unregistering): Port device team_slave_0 removed
[  368.945208][ T5123] Bluetooth: hci3: command tx timeout
[  369.176209][T11551] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.183183][T11551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.218451][T11551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.313998][T11551] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.326592][T11551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.362109][T11551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.578076][T11551] hsr_slave_0: entered promiscuous mode
[  369.602596][T11551] hsr_slave_1: entered promiscuous mode
[  370.037770][T11621] loop2: detected capacity change from 0 to 32768
[  370.168119][T11621] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  370.206958][T11621] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop2": -EINTR
[  370.211252][T11621] XFS (loop2): log mount failed
[  370.343230][T11629] loop1: detected capacity change from 0 to 32768
[  370.431537][T11629] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  370.472616][T11629] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop1": -EINTR
[  370.473498][T11629] XFS (loop1): log mount failed
[  371.005269][ T5123] Bluetooth: hci3: command tx timeout
[  371.048242][T11551] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  371.059533][T11551] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  371.112467][T11551] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  371.133927][T11551] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  371.408269][T11551] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.428740][T11640] loop4: detected capacity change from 0 to 32768
[  371.504098][T11551] 8021q: adding VLAN 0 to HW filter on device team0
[  371.553923][T11640] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  371.557779][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.569706][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.585822][T11686] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'.
[  371.688476][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.695666][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.852498][T11551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  371.889375][T11551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  371.922516][T11640] XFS (loop4): Ending clean mount
[  371.955892][T11640] XFS (loop4): Quotacheck needed: Please wait.
[  372.061280][T11640] XFS (loop4): Quotacheck: Done.
[  372.422715][T11551] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.534441][T11669] loop2: detected capacity change from 0 to 32768
[  372.562463][ T9008] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  372.571846][T11551] veth0_vlan: entered promiscuous mode
[  372.586035][T11669] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (11669)
[  372.632257][T11551] veth1_vlan: entered promiscuous mode
[  372.671096][T11669] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  372.726512][T11669] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  372.764411][T11551] veth0_macvtap: entered promiscuous mode
[  372.771572][T11669] BTRFS info (device loop2): using free-space-tree
[  372.839277][T11551] veth1_macvtap: entered promiscuous mode
[  372.923901][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.985372][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.002337][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.033524][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.065875][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.076772][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.087067][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.098382][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.123369][T11551] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.203903][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.229641][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.263828][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.275916][   T29] audit: type=1800 audit(1716928627.184:92): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=260 res=0 errno=0
[  373.304550][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.335278][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.365291][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.404526][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.437682][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.467441][T11551] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.476600][T11751] Bluetooth: hci3: invalid length 0, exp 2 for type 0
[  373.514548][T11551] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.546381][T11551] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.569810][T11551] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.590171][T11551] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.816201][T11759] loop4: detected capacity change from 0 to 2048
[  373.833284][ T2492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.836909][ T5117] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  373.842858][ T2492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.970021][T11763] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  373.975818][T11715] loop1: detected capacity change from 0 to 32768
[  374.009500][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.045815][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.130742][T11715] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  374.322186][   T29] audit: type=1800 audit(1716928628.244:93): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=2097152 res=0 errno=0
[  374.547692][T11715] XFS (loop1): Ending clean mount
[  374.563896][T11715] XFS (loop1): Quotacheck needed: Please wait.
[  374.661714][T11715] XFS (loop1): Quotacheck: Done.
[  374.925955][ T8873] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  375.084476][T11800] Bluetooth: hci3: invalid length 0, exp 2 for type 0
[  375.590988][T11804] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  375.830827][T11790] loop2: detected capacity change from 0 to 32768
[  375.931720][T11790] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  375.975491][T11809] loop3: detected capacity change from 0 to 2048
[  376.066519][T11820] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  376.164540][T11790] XFS (loop2): Ending clean mount
[  376.176287][   T29] audit: type=1800 audit(1716928630.104:94): pid=11809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=2097152 res=0 errno=0
[  376.224970][T11790] XFS (loop2): Quotacheck needed: Please wait.
[  376.313508][T11790] XFS (loop2): Quotacheck: Done.
[  376.427302][T11802] loop4: detected capacity change from 0 to 32768
[  376.466130][T11802] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11802)
[  376.572298][T11802] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  376.627629][T11802] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  376.660792][T11802] BTRFS info (device loop4): using free-space-tree
[  376.770674][ T5117] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  376.833595][T11843] loop3: detected capacity change from 0 to 2048
[  376.959016][T11855] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  377.095228][   T29] audit: type=1800 audit(1716928631.014:95): pid=11843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=2097152 res=0 errno=0
[  377.255802][ T9008] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  377.602290][T11867] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure
[  377.678809][T11867] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  377.977876][T11879] loop4: detected capacity change from 0 to 64
[  378.131028][T11879] hfs: request for non-existent node 1286 in B*Tree
[  378.166093][T11879] hfs: request for non-existent node 1286 in B*Tree
[  378.312558][   T11] hfs: request for non-existent node 1286 in B*Tree
[  378.326210][   T11] hfs: request for non-existent node 1286 in B*Tree
[  378.384807][T11889] Bluetooth: hci3: unsupported parameter 65535
[  378.425292][T11889] Bluetooth: hci3: invalid length 0, exp 2 for type 0
[  378.774653][T11897] loop2: detected capacity change from 0 to 4096
[  378.815690][T11897] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  378.932742][ T1242] ieee802154 phy0 wpan0: encryption failed: -22
[  378.939166][ T1242] ieee802154 phy1 wpan1: encryption failed: -22
[  378.945635][T11897] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  379.466894][T11907] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [FSRP.]L3 index 0
[  379.724000][T11913] loop1: detected capacity change from 0 to 4096
[  379.769981][T11913] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  379.865228][T11913] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  379.920213][T11917] loop4: detected capacity change from 0 to 4096
[  379.970662][T11917] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[  380.053895][T11917] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  381.029158][T11919] loop3: detected capacity change from 0 to 32768
[  381.112760][T11919] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  381.299587][T11919] XFS (loop3): Ending clean mount
[  381.332617][T11919] XFS (loop3): Quotacheck needed: Please wait.
[  381.423420][T11919] XFS (loop3): Quotacheck: Done.
[  381.595687][ T9085] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  381.947873][   T51] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22.
[  382.368132][T11927] loop0: detected capacity change from 0 to 32768
[  382.442928][T11927] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  382.472915][T11943] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  382.633326][T11927] XFS (loop0): Ending clean mount
[  382.662765][T11927] XFS (loop0): Quotacheck needed: Please wait.
[  382.725637][   T51] ntfs3: loop1: ino=5, ntfs3_write_inode failed, -22.
[  382.767055][T11927] XFS (loop0): Quotacheck: Done.
[  382.846167][T11950] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  382.894578][T11950] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  382.948483][T11950] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  382.982043][T11950] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  382.992571][T11551] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  383.009669][ T2825] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22.
[  383.028022][T11950] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  383.073381][T11950] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  383.111544][T11950] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  383.522736][T11958] loop2: detected capacity change from 0 to 128
[  383.561514][T11958] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  383.610787][T11960] Bluetooth: hci3: invalid length 0, exp 2 for type 0
[  383.622772][T11937] loop3: detected capacity change from 0 to 32768
[  383.716140][T11937] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  383.964408][T11937] XFS (loop3): Ending clean mount
[  383.992426][T11937] XFS (loop3): Quotacheck needed: Please wait.
[  384.105344][T11937] XFS (loop3): Quotacheck: Done.
[  384.302589][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  384.382287][T11984] loop0: detected capacity change from 0 to 1024
[  384.397464][T11982] vlan2: entered promiscuous mode
[  384.424403][T11982] syz_tun: entered promiscuous mode
[  384.439234][T11984] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869)
[  384.476532][T11982] syz_tun: left promiscuous mode
[  384.484824][T11984] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  384.498080][ T9085] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  384.549583][T11984] EXT4-fs (loop0): invalid journal inode
[  384.678306][   T29] audit: type=1804 audit(1716928638.604:96): pid=11984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3442632713/syzkaller.k8HRox/15/bus" dev="sda1" ino=1943 res=1 errno=0
[  384.687611][T11984] Invalid ELF header type: 0 != 1
[  385.024127][T11989] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'.
[  385.034218][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.045638][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.056438][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.066923][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.076832][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.087332][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.097212][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  385.107693][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.118107][T11989] batadv_slave_1: entered promiscuous mode
[  385.198186][T11991] random: crng reseeded on system resumption
[  385.252148][   T29] audit: type=1326 audit(1716928639.174:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11990 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5ad87cee9 code=0x0
[  385.310316][T11996] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  385.502816][T12001] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  385.619072][T11972] loop4: detected capacity change from 0 to 32768
[  385.701805][T12006] 8021q: VLANs not supported on ipvlan0
[  385.725280][T11972] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  385.881993][T11972] XFS (loop4): Starting recovery (logdev: internal)
[  385.948965][T12026] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  385.958654][T11972] XFS (loop4): Ending recovery (logdev: internal)
[  385.966402][   T29] audit: type=1326 audit(1716928639.894:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080aa7cee9 code=0x7ffc0000
[  386.011706][   T29] audit: type=1326 audit(1716928639.894:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f080aa7cee9 code=0x7ffc0000
[  386.053423][   T29] audit: type=1326 audit(1716928639.894:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080aa7cee9 code=0x7ffc0000
[  386.056213][T11972] XFS (loop4): Quotacheck needed: Please wait.
[  386.082389][   T29] audit: type=1326 audit(1716928639.894:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f080aa7cee9 code=0x7ffc0000
[  386.106854][   T29] audit: type=1326 audit(1716928639.964:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080aa7cee9 code=0x7ffc0000
[  386.136067][   T29] audit: type=1326 audit(1716928639.964:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f080aa7a667 code=0x7ffc0000
[  386.166629][   T29] audit: type=1326 audit(1716928639.964:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f080aa40329 code=0x7ffc0000
[  386.177971][T12028] loop0: detected capacity change from 0 to 128
[  386.196018][   T29] audit: type=1326 audit(1716928639.974:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f080aa7a667 code=0x7ffc0000
[  386.265974][T11972] XFS (loop4): Quotacheck: Done.
[  386.589888][ T9008] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  386.917379][T12045] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'.
[  386.944512][T12044] loop1: detected capacity change from 0 to 128
[  386.976692][T12044] FAT-fs (loop1): Unrecognized mount option "ÿ" or missing value
[  387.394029][T12069] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  387.746157][T12078] loop4: detected capacity change from 0 to 764
[  388.182050][T12098] loop4: detected capacity change from 0 to 512
[  388.269920][T12098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.334792][T12106] ------------[ cut here ]------------
[  388.340629][T12106] kernel BUG at mm/page_table_check.c:148!
[  388.353150][T12098] ext4 filesystem being mounted at /root/syzkaller-testdir86839496/syzkaller.jEljcb/103/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  388.399089][T12106] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[  388.406041][T12106] CPU: 1 PID: 12106 Comm: syz-executor.0 Not tainted 6.10.0-rc1-next-20240528-syzkaller #0
[  388.415996][T12106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  388.426036][T12106] RIP: 0010:__page_table_check_zero+0x25c/0x340
[  388.432264][T12106] Code: c1 0f 8c 51 fe ff ff 48 89 df e8 8f 2c f4 ff e9 44 fe ff ff e8 05 65 8e ff 90 0f 0b e8 fd 64 8e ff 90 0f 0b e8 f5 64 8e ff 90 <0f> 0b f3 0f 1e fa 4c 89 f6 48 81 e6 ff 0f 00 00 31 ff e8 bd 69 8e
[  388.451854][T12106] RSP: 0018:ffffc9001af67938 EFLAGS: 00010287
[  388.457915][T12106] RAX: ffffffff8207d20b RBX: dffffc0000000000 RCX: 0000000000040000
[  388.465879][T12106] RDX: ffffc90003fa9000 RSI: 0000000000005e5b RDI: 0000000000005e5c
[  388.473860][T12106] RBP: ffff8880190f7acc R08: ffff8880190f7acf R09: 1ffff1100321ef59
[  388.481845][T12106] R10: dffffc0000000000 R11: ffffed100321ef5a R12: ffff8880190f7a80
[  388.489832][T12106] R13: 1ffffffff29033e0 R14: 0000000000000002 R15: 0000000000000000
[  388.497815][T12106] FS:  00007f0f719ea6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  388.506748][T12106] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  388.513341][T12106] CR2: 0000000020000400 CR3: 000000002a882000 CR4: 00000000003506f0
[  388.521323][T12106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  388.529293][T12106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  388.537257][T12106] Call Trace:
[  388.540531][T12106]  <TASK>
[  388.543453][T12106]  ? __die_body+0x88/0xe0
[  388.547780][T12106]  ? die+0xcf/0x110
[  388.551586][T12106]  ? do_trap+0x15a/0x3a0
[  388.555830][T12106]  ? __page_table_check_zero+0x25c/0x340
[  388.561456][T12106]  ? do_error_trap+0x1dc/0x2c0
[  388.566209][T12106]  ? __page_table_check_zero+0x25c/0x340
[  388.571835][T12106]  ? __pfx_do_error_trap+0x10/0x10
[  388.576940][T12106]  ? handle_invalid_op+0x34/0x40
[  388.581867][T12106]  ? __page_table_check_zero+0x25c/0x340
[  388.587486][T12106]  ? exc_invalid_op+0x38/0x50
[  388.592158][T12106]  ? asm_exc_invalid_op+0x1a/0x20
[  388.597175][T12106]  ? __page_table_check_zero+0x25b/0x340
[  388.602793][T12106]  ? __page_table_check_zero+0x25c/0x340
[  388.608418][T12106]  ? __page_table_check_zero+0x25b/0x340
[  388.614040][T12106]  free_unref_page+0xd36/0xea0
[  388.618825][T12106]  dec_usb_memory_use_count+0x259/0x350
[  388.624385][T12106]  ? __pfx_usbdev_vm_close+0x10/0x10
[  388.629678][T12106]  mmap_region+0x13b4/0x2090
[  388.634273][T12106]  ? __pfx_mmap_region+0x10/0x10
[  388.639207][T12106]  ? thp_get_unmapped_area_vmflags+0x269/0x380
[  388.645359][T12106]  ? cap_mmap_addr+0x163/0x2c0
[  388.650119][T12106]  ? __get_unmapped_area+0x2f0/0x360
[  388.655412][T12106]  do_mmap+0x8ad/0xfa0
[  388.659485][T12106]  ? __pfx_do_mmap+0x10/0x10
[  388.664070][T12106]  ? __mmap_lock_do_trace_acquire_returned+0x2f2/0x630
[  388.670925][T12106]  vm_mmap_pgoff+0x1dd/0x3d0
[  388.675513][T12106]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  388.680623][T12106]  ? __fget_files+0x29/0x470
[  388.685209][T12106]  ? __fget_files+0x3f6/0x470
[  388.689879][T12106]  ksys_mmap_pgoff+0x4f1/0x720
[  388.694632][T12106]  ? __x64_sys_mmap+0x7f/0x140
[  388.699390][T12106]  do_syscall_64+0xf3/0x230
[  388.703882][T12106]  ? clear_bhb_loop+0x35/0x90
[  388.708553][T12106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.714432][T12106] RIP: 0033:0x7f0f70c7cee9
[  388.718848][T12106] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  388.738459][T12106] RSP: 002b:00007f0f719ea0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
2024/05/28 20:37:22 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  388.746880][T12106] RAX: ffffffffffffffda RBX: 00007f0f70db3fa0 RCX: 00007f0f70c7cee9
[  388.754846][T12106] RDX: 000000000200000f RSI: 0000000000004000 RDI: 0000000020ff9000
[  388.762816][T12106] RBP: 00007f0f70cc947f R08: 0000000000000007 R09: 0000000000000000
[  388.770782][T12106] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000
[  388.778756][T12106] R13: 000000000000000b R14: 00007f0f70db3fa0 R15: 00007ffd1fde9ab8
[  388.786741][T12106]  </TASK>
[  388.789752][T12106] Modules linked in: