last executing test programs:

17.220519816s ago: executing program 3:
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r2=>0x0})
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

17.093357421s ago: executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000008c0), 0x8)

16.988147067s ago: executing program 3:
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000000280))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9)

16.628284754s ago: executing program 3:
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
write(r0, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000080)={{}, "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"})

11.618791164s ago: executing program 3:
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x11, '\x00', @string=&(0x7f00000000c0)}})

11.54091512s ago: executing program 3:
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xf, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0)

4.909351636s ago: executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x3)
syz_emit_ethernet(0xf24, &(0x7f0000000500)={@broadcast, @empty, @void, {@llc_tr={0x11, {@snap={0x0, 0x0, "f0", "36858a", 0x0, "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"}}}}}, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001423)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000004c0))
close(r0)

4.723134009s ago: executing program 4:
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabb, &(0x7f0000000340)="$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")
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
readahead(r0, 0x0, 0x0)

4.48103647s ago: executing program 4:
mlockall(0x3)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)

4.47256784s ago: executing program 0:
mlockall(0x1)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r0 = socket$unix(0x1, 0x1, 0x0)
recvmmsg$unix(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}}], 0x0, 0x0, 0x0)
openat$cgroup_type(r1, &(0x7f0000000000), 0x2, 0x0)

4.030365977s ago: executing program 1:
syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x6, 0x8}, {0x0, 0x0, 0x3}}]}}, 0x15)

3.911813556s ago: executing program 1:
syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_TENBIT(0xffffffffffffffff, 0x703, 0x0)

3.739171537s ago: executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000002c0)=0x10)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001400010627bd7000000000040a84bfc6fc"], 0x58}}, 0x0)

3.659464744s ago: executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
io_setup(0x3, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x21, 0x0, 0x2)
socket(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
socket(0xa, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4)

2.644489775s ago: executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r1}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0)

2.516634244s ago: executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0844123, &(0x7f0000000240))

2.247665004s ago: executing program 0:
r0 = socket$unix(0x1, 0x2, 0x0)
mknod(&(0x7f0000000200)='./file0\x00', 0x8000, 0x0)
semctl$GETPID(0x0, 0x0, 0x4, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000001100)=@file={0x0, './file0\x00'}, 0xa)

2.134942926s ago: executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000002c0)=0x10)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001400010627bd7000000000040a84bfc6fc"], 0x58}}, 0x0)

2.034260073s ago: executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000feb000/0x3000)=nil, 0x3000}, 0x3})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

1.732195405s ago: executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x6, 0x6, 0x8001, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, 0x0, 0x0}, 0x20)

1.57915385s ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000380), 0x20000000}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x181001, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x2000}], 0x1)
close(r0)

1.324549236s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x3, 0x8, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48)

1.178036007s ago: executing program 4:
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabb, &(0x7f0000000340)="$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")
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
readahead(r0, 0x0, 0x0)

1.038941705s ago: executing program 0:
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYBLOB="c3649be801cfa9d37b32e5a81bd8ef65d2d6ae7c55dce6f28d147bd4743ac27b", @ANYRES16, @ANYBLOB="91f895dd7ebcc2b83a83fb121e4e844e5d7a09e7d4a4979f3fdfe200b83e593144c1cf15b5624e3448b3b40065bc381005ed653b2e5aeafdfb38eeddb8c08b04fb2e46eba33d22f32db6a9608832f35ee976140648653030c5dd9306f90fc9f46534c6d9f2b37f945ba052c7197494046b00916b8f07b5b9f05f77f79225aa0700a01e414c5352def7a6078229384108c95320a4abf33afd65548efaf0b3dc54c4c10995d3e08a9017ae0c8828c59983d23cf29ff4ff4a16908f199ba7"], 0x1, 0x556c, &(0x7f000000b980)="$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")
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x4008f50a, 0x0)

892.371502ms ago: executing program 4:
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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")
open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x2000)

772.841457ms ago: executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'erspan0\x00', <r4=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

508.823718ms ago: executing program 2:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$I2C_TENBIT(r0, 0x703, 0x0)

401.808232ms ago: executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000002c0)=0x10)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001400010627bd7000000000040a84bfc6fc"], 0x58}}, 0x0)

301.744267ms ago: executing program 2:
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_usb_control_io$uac1(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00032a0000002a03"]}, 0x0)

0s ago: executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
sendmmsg$inet6(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
ppoll(&(0x7f0000000d40)=[{r0}], 0x1, &(0x7f0000000dc0)={0x0, 0x3938700}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

n complete
[  686.705117][T12583] bcachefs (loop2): shutdown complete
[  686.768467][ T2946] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.902264][T13163] team0: Port device team_slave_0 added
[  686.936360][T13163] team0: Port device team_slave_1 added
[  686.968813][ T5120] Bluetooth: hci1: command tx timeout
[  687.031769][ T2946] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.095842][T13211] bridge0: port 1(bridge_slave_0) entered blocking state
[  687.102980][T13211] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.126495][T13211] bridge_slave_0: entered allmulticast mode
[  687.136559][T13211] bridge_slave_0: entered promiscuous mode
[  687.159123][T13211] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.186459][T13211] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.193826][T13211] bridge_slave_1: entered allmulticast mode
[  687.210095][T13211] bridge_slave_1: entered promiscuous mode
[  687.305423][ T2946] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.498583][T13163] batman_adv: batadv0: Adding interface: batadv_slave_0
[  687.505577][T13163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  687.549400][T13268] loop0: detected capacity change from 0 to 4096
[  687.561328][T13163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  687.577448][T13211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  687.601680][T13163] batman_adv: batadv0: Adding interface: batadv_slave_1
[  687.609238][T13163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  687.616691][T13270] loop2: detected capacity change from 0 to 2048
[  687.641795][T13163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  687.670390][T13211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  687.790545][T13211] team0: Port device team_slave_0 added
[  687.864367][T13211] team0: Port device team_slave_1 added
[  688.082068][T13163] hsr_slave_0: entered promiscuous mode
[  688.098997][T13163] hsr_slave_1: entered promiscuous mode
[  688.116309][T13163] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  688.124649][T13163] Cannot create hsr debugfs directory
[  688.155170][T13211] batman_adv: batadv0: Adding interface: batadv_slave_0
[  688.163315][T13211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  688.218038][T13211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  688.257092][T13211] batman_adv: batadv0: Adding interface: batadv_slave_1
[  688.284420][T13211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  688.326301][ T5120] Bluetooth: hci3: command tx timeout
[  688.356503][T13211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  688.511722][ T2946] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  688.566162][ T5120] Bluetooth: hci0: command tx timeout
[  688.669432][T13211] hsr_slave_0: entered promiscuous mode
[  688.681267][T13211] hsr_slave_1: entered promiscuous mode
[  688.692693][T13211] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  688.707473][T13211] Cannot create hsr debugfs directory
[  688.752246][T12683] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  688.768220][T12683] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  688.776913][T12683] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  688.781373][ T2946] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  688.787776][T12683] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  688.810026][T12683] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  688.825866][T12683] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  688.922738][ T2946] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.051063][T12683] Bluetooth: hci1: command tx timeout
[  689.069414][ T2946] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.244320][T13250] chnl_net:caif_netlink_parms(): no params data found
[  690.314859][T13297] loop0: detected capacity change from 0 to 4096
[  690.360679][T13250] bridge0: port 1(bridge_slave_0) entered blocking state
[  690.368210][T13250] bridge0: port 1(bridge_slave_0) entered disabled state
[  690.375560][T13250] bridge_slave_0: entered allmulticast mode
[  690.383067][T13250] bridge_slave_0: entered promiscuous mode
[  690.391867][ T2946] bridge_slave_1: left allmulticast mode
[  690.398452][ T2946] bridge_slave_1: left promiscuous mode
[  690.404199][ T2946] bridge0: port 2(bridge_slave_1) entered disabled state
[  690.414971][ T2946] bridge_slave_0: left allmulticast mode
[  690.416157][T12683] Bluetooth: hci3: command tx timeout
[  690.421391][ T2946] bridge_slave_0: left promiscuous mode
[  690.433593][ T2946] bridge0: port 1(bridge_slave_0) entered disabled state
[  690.447486][ T2946] bridge_slave_1: left allmulticast mode
[  690.453401][ T2946] bridge_slave_1: left promiscuous mode
[  690.460094][ T2946] bridge0: port 2(bridge_slave_1) entered disabled state
[  690.472480][ T2946] bridge_slave_0: left allmulticast mode
[  690.479410][ T2946] bridge_slave_0: left promiscuous mode
[  690.485191][ T2946] bridge0: port 1(bridge_slave_0) entered disabled state
[  690.896299][T12683] Bluetooth: hci4: command tx timeout
[  691.136589][T12683] Bluetooth: hci1: command tx timeout
[  691.786284][ T2946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  691.799492][ T2946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  691.836152][ T2946] bond0 (unregistering): Released all slaves
[  692.055938][T13302] loop0: detected capacity change from 0 to 32768
[  692.153548][ T2946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  692.168323][ T2946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  692.186621][ T2946] bond0 (unregistering): Released all slaves
[  692.205607][T13302] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names
[  692.226016][T13302] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  692.253434][T13250] bridge0: port 2(bridge_slave_1) entered blocking state
[  692.269903][T13250] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.279565][T13250] bridge_slave_1: entered allmulticast mode
[  692.288554][T13250] bridge_slave_1: entered promiscuous mode
[  692.295855][T13302] bcachefs (loop0): alloc_read... done
[  692.301411][T13302] bcachefs (loop0): stripes_read... done
[  692.315015][T13302] bcachefs (loop0): snapshots_read... done
[  692.349459][T13302] bcachefs (loop0): journal_replay... done
[  692.357007][T13302] bcachefs (loop0): resume_logged_ops... done
[  692.369791][T13302] bcachefs (loop0): going read-write
[  692.391229][T13302] bcachefs (loop0): done starting filesystem
[  692.485965][ T5120] Bluetooth: hci3: command tx timeout
[  692.499634][T13250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  692.516794][T12466] bcachefs (loop0): shutting down
[  692.521861][T12466] bcachefs (loop0): going read-only
[  692.527364][T12466] bcachefs (loop0): finished waiting for writes to stop
[  692.528098][T13250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  692.561369][T12466] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12
[  692.589974][T12466] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 14
[  692.613274][T12466] bcachefs (loop0): shutdown complete, journal seq 15
[  692.622136][T12466] bcachefs (loop0): marking filesystem clean
[  692.652408][T12466] bcachefs (loop0): shutdown complete
[  692.741755][T13250] team0: Port device team_slave_0 added
[  692.829970][T13250] team0: Port device team_slave_1 added
[  692.866344][T13163] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  692.884597][T13163] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  692.965943][T12683] Bluetooth: hci4: command tx timeout
[  693.007979][T13250] batman_adv: batadv0: Adding interface: batadv_slave_0
[  693.014975][T13250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  693.041410][T13250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  693.072920][T13163] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  693.096715][T13163] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  693.149372][T13276] chnl_net:caif_netlink_parms(): no params data found
[  693.181087][T13250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  693.200846][T13250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  693.235913][T13250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  693.309399][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies.
[  693.460881][T13250] hsr_slave_0: entered promiscuous mode
[  693.467989][T13250] hsr_slave_1: entered promiscuous mode
[  693.474011][T13250] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  693.482913][T13250] Cannot create hsr debugfs directory
[  693.761287][ T2946] hsr_slave_0: left promiscuous mode
[  693.772258][ T2946] hsr_slave_1: left promiscuous mode
[  693.783869][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  693.801649][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_0
[  693.810875][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  693.818875][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  693.835197][ T2946] hsr_slave_0: left promiscuous mode
[  693.841321][ T2946] hsr_slave_1: left promiscuous mode
[  693.850370][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  694.033019][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_0
[  694.082389][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  694.123135][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  694.496027][ T2946] veth1_macvtap: left promiscuous mode
[  694.501702][ T2946] veth0_macvtap: left promiscuous mode
[  694.516470][ T2946] veth1_vlan: left promiscuous mode
[  694.527745][ T2946] veth0_vlan: left promiscuous mode
[  694.550316][ T2946] veth1_macvtap: left promiscuous mode
[  694.561660][ T2946] veth0_macvtap: left promiscuous mode
[  694.568221][ T2946] veth1_vlan: left promiscuous mode
[  694.579400][ T2946] veth0_vlan: left promiscuous mode
[  694.625157][T12683] Bluetooth: hci3: command tx timeout
[  695.045812][T12683] Bluetooth: hci4: command tx timeout
[  695.055327][T13329] loop0: detected capacity change from 0 to 32768
[  695.076008][T13329] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (13329)
[  695.113364][T13329] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  695.123942][T13329] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  695.133081][T13329] BTRFS info (device loop0): using free-space-tree
[  695.222753][T13329] BTRFS info (device loop0): checking UUID tree
[  695.370876][T12466] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  695.763253][T13348] loop0: detected capacity change from 0 to 4096
[  695.787552][ T2946] team0 (unregistering): Port device team_slave_1 removed
[  695.866563][ T2946] team0 (unregistering): Port device team_slave_0 removed
[  696.649671][ T2946] pim6reg (unregistering): left allmulticast mode
[  697.129870][T12683] Bluetooth: hci4: command tx timeout
[  697.743881][ T2946] team0 (unregistering): Port device team_slave_1 removed
[  697.879332][ T2946] team0 (unregistering): Port device team_slave_0 removed
[  698.506174][T13276] bridge0: port 1(bridge_slave_0) entered blocking state
[  698.513284][T13276] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.522330][T13276] bridge_slave_0: entered allmulticast mode
[  698.530115][T13276] bridge_slave_0: entered promiscuous mode
[  698.566416][T13276] bridge0: port 2(bridge_slave_1) entered blocking state
[  698.573606][T13276] bridge0: port 2(bridge_slave_1) entered disabled state
[  698.581550][T13276] bridge_slave_1: entered allmulticast mode
[  698.589003][T13276] bridge_slave_1: entered promiscuous mode
[  698.754228][T13276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  698.796777][T13276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  698.971049][T13211] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  699.007392][T13276] team0: Port device team_slave_0 added
[  699.020490][T13211] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  699.061394][T13276] team0: Port device team_slave_1 added
[  699.089026][T13211] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  699.103074][T13211] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  699.193539][T13163] 8021q: adding VLAN 0 to HW filter on device bond0
[  699.230654][T13276] batman_adv: batadv0: Adding interface: batadv_slave_0
[  699.246258][T13276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  699.273066][T13276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  699.284584][T13362] loop0: detected capacity change from 0 to 32768
[  699.308759][T13276] batman_adv: batadv0: Adding interface: batadv_slave_1
[  699.316455][T13276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  699.346971][T13276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  699.420508][T13163] 8021q: adding VLAN 0 to HW filter on device team0
[  699.454665][T13362] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names
[  699.477514][T13362] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  699.512428][T13362] bcachefs (loop0): alloc_read... done
[  699.520693][T13362] bcachefs (loop0): stripes_read... done
[  699.530570][T13362] bcachefs (loop0): snapshots_read... done
[  699.544756][T13362] bcachefs (loop0): journal_replay... done
[  699.553414][T13362] bcachefs (loop0): resume_logged_ops... done
[  699.561746][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state
[  699.568954][ T5185] bridge0: port 1(bridge_slave_0) entered forwarding state
[  699.570627][T13362] bcachefs (loop0): going read-write
[  699.578996][ T5185] bridge0: port 2(bridge_slave_1) entered blocking state
[  699.589142][ T5185] bridge0: port 2(bridge_slave_1) entered forwarding state
[  699.599613][T13362] bcachefs (loop0): done starting filesystem
[  699.621361][T13276] hsr_slave_0: entered promiscuous mode
[  699.628365][T13276] hsr_slave_1: entered promiscuous mode
[  699.764372][T12466] bcachefs (loop0): shutting down
[  699.786666][T12466] bcachefs (loop0): going read-only
[  699.791922][T12466] bcachefs (loop0): finished waiting for writes to stop
[  699.811688][T12466] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12
[  699.847941][T12466] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13
[  699.874679][T13163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  699.918117][T13211] 8021q: adding VLAN 0 to HW filter on device bond0
[  699.932904][T12466] bcachefs (loop0): shutdown complete, journal seq 14
[  699.947607][T12466] bcachefs (loop0): marking filesystem clean
[  700.001466][T12466] bcachefs (loop0): shutdown complete
[  700.171768][ T2946] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.222009][T13250] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  700.247085][T13250] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  700.264159][T13250] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  700.283799][T13163] 8021q: adding VLAN 0 to HW filter on device batadv0
[  700.305203][T13211] 8021q: adding VLAN 0 to HW filter on device team0
[  700.313787][T13250] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  700.422457][ T2946] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.512903][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.520127][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  700.549025][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.556299][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  700.612317][ T2946] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.720608][ T2946] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  700.962037][ T2946] bridge_slave_1: left allmulticast mode
[  700.978580][ T2946] bridge_slave_1: left promiscuous mode
[  700.984384][ T2946] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.004448][ T2946] bridge_slave_0: left allmulticast mode
[  701.010629][ T2946] bridge_slave_0: left promiscuous mode
[  701.018609][ T2946] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.367967][T13386] loop0: detected capacity change from 0 to 32768
[  701.389036][T13386] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (13386)
[  701.432067][T13386] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  701.444045][T13386] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  701.452923][T13386] BTRFS info (device loop0): using free-space-tree
[  701.624824][T12466] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  701.670128][ T2946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  701.691531][ T2946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  701.724048][ T2946] bond0 (unregistering): Released all slaves
[  701.951607][T13163] veth0_vlan: entered promiscuous mode
[  701.973504][T13163] veth1_vlan: entered promiscuous mode
[  702.189447][T13250] 8021q: adding VLAN 0 to HW filter on device bond0
[  702.223264][T13211] 8021q: adding VLAN 0 to HW filter on device batadv0
[  702.272035][T13250] 8021q: adding VLAN 0 to HW filter on device team0
[  702.335913][ T2946] hsr_slave_0: left promiscuous mode
[  702.343841][ T2946] hsr_slave_1: left promiscuous mode
[  702.369491][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  702.379358][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_0
[  702.387787][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  702.395208][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  702.621742][ T2946] veth1_macvtap: left promiscuous mode
[  702.662992][ T2946] veth0_macvtap: left promiscuous mode
[  702.694326][ T2946] veth1_vlan: left promiscuous mode
[  702.730014][ T2946] veth0_vlan: left promiscuous mode
[  703.878002][ T2946] team0 (unregistering): Port device team_slave_1 removed
[  703.970240][ T2946] team0 (unregistering): Port device team_slave_0 removed
[  704.057209][   T29] audit: type=1326 audit(1717240730.827:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13419 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e047cee9 code=0x7ffc0000
[  704.106465][   T29] audit: type=1326 audit(1717240730.857:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13419 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e047cee9 code=0x7ffc0000
[  705.004644][  T931] bridge0: port 1(bridge_slave_0) entered blocking state
[  705.011901][  T931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  705.145169][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  705.152401][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  705.197933][T13163] veth0_macvtap: entered promiscuous mode
[  705.254359][T13163] veth1_macvtap: entered promiscuous mode
[  705.348157][T13211] veth0_vlan: entered promiscuous mode
[  705.393742][T13211] veth1_vlan: entered promiscuous mode
[  705.458689][T13163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  705.492077][T13163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  705.517845][T13163] batman_adv: batadv0: Interface activated: batadv_slave_0
[  705.618057][T13163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  705.644581][T13163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  705.668067][T13163] batman_adv: batadv0: Interface activated: batadv_slave_1
[  705.685484][T13163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  705.706780][T13163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  705.715490][T13163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  705.731612][T13163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  705.741866][T13276] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  705.755120][T13211] veth0_macvtap: entered promiscuous mode
[  705.786368][T13276] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  705.809393][T13276] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  705.854363][T13211] veth1_macvtap: entered promiscuous mode
[  705.872580][T13276] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  705.885789][   T29] audit: type=1326 audit(1717240732.657:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13424 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e047cee9 code=0x7ffc0000
[  705.935834][   T29] audit: type=1326 audit(1717240732.657:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13424 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e047cee9 code=0x7ffc0000
[  705.997741][T13250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  706.045542][T13211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.087222][T13211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.103178][T13211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.120639][T13211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.142034][T13211] batman_adv: batadv0: Interface activated: batadv_slave_0
[  706.242244][T13211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  706.252909][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  706.252937][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  706.270866][T13211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.285470][T13211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  706.303658][T13211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.315504][T13211] batman_adv: batadv0: Interface activated: batadv_slave_1
[  706.388928][T13211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  706.399113][T13211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  706.411992][T13211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  706.421195][T13211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  706.489000][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  706.503156][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  706.530294][T13250] veth0_vlan: entered promiscuous mode
[  706.612615][T13250] veth1_vlan: entered promiscuous mode
[  706.705354][T13276] 8021q: adding VLAN 0 to HW filter on device bond0
[  706.783262][ T5203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  706.791608][ T5203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  706.823883][T13276] 8021q: adding VLAN 0 to HW filter on device team0
[  706.897140][ T8198] bridge0: port 1(bridge_slave_0) entered blocking state
[  706.904291][ T8198] bridge0: port 1(bridge_slave_0) entered forwarding state
[  706.976299][ T8198] bridge0: port 2(bridge_slave_1) entered blocking state
[  706.983487][ T8198] bridge0: port 2(bridge_slave_1) entered forwarding state
[  707.050840][T13250] veth0_macvtap: entered promiscuous mode
[  707.091243][ T5157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  707.116980][ T5157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  707.180770][T13250] veth1_macvtap: entered promiscuous mode
[  707.305592][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  707.323877][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.334995][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  707.374051][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.384400][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  707.396555][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.411183][T13250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  707.438854][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.450361][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.461329][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.472948][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.483099][T13250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.493857][T13250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.511501][T13250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  707.559107][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  707.569221][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  707.577724][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  707.587839][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  707.598717][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  707.608329][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  707.652341][T13250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  707.669876][T13250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  707.687061][T13250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  707.704637][T13250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  707.823307][T13441] loop0: detected capacity change from 0 to 32768
[  707.832138][T13441] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (13441)
[  707.863222][T13441] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  707.869255][ T2900] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.879119][T13441] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  707.894065][T13441] BTRFS info (device loop0): using free-space-tree
[  708.065142][ T2900] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.168430][T12466] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  708.238126][ T2900] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.368713][T13447] loop3: detected capacity change from 0 to 32768
[  708.387535][T13276] 8021q: adding VLAN 0 to HW filter on device batadv0
[  708.423797][T13447] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13447)
[  708.473678][T13447] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  708.484117][T13447] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  708.493491][T13447] BTRFS info (device loop3): using free-space-tree
[  708.506094][ T2900] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.672215][T13276] veth0_vlan: entered promiscuous mode
[  708.780642][T13447] BTRFS info (device loop3): checking UUID tree
[  708.790325][ T5109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  708.792868][T13276] veth1_vlan: entered promiscuous mode
[  708.819983][ T5109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.532023][T13211] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  709.686642][T13492] syz-executor.0[13492] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  709.686792][T13492] syz-executor.0[13492] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  709.703323][T12683] Bluetooth: hci0: command tx timeout
[  709.802781][T13293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.825143][T13293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  709.837473][T13276] veth0_macvtap: entered promiscuous mode
[  709.898374][T13276] veth1_macvtap: entered promiscuous mode
[  710.099277][T13276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  710.120296][T13276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.132993][T13501] loop3: detected capacity change from 0 to 512
[  710.148132][T13276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  710.168669][T13276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.186650][T13501] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino
[  710.195954][T13276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  710.211092][T13276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.222236][T13276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  710.222551][T13501] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117)
[  710.233380][T13276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.237178][T13276] batman_adv: batadv0: Interface activated: batadv_slave_0
[  710.343788][T13501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  710.364341][T13276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  710.384987][T13276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.403807][T13276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  710.438604][T13276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.450510][T13276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  710.464348][T13276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.494092][T13276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  710.516844][T13276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.535086][T13276] batman_adv: batadv0: Interface activated: batadv_slave_1
[  710.569715][T13445] chnl_net:caif_netlink_parms(): no params data found
[  710.596164][ T2900] bridge_slave_1: left allmulticast mode
[  710.608338][ T2900] bridge_slave_1: left promiscuous mode
[  710.635938][ T2900] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.639217][T13518] loop1: detected capacity change from 0 to 512
[  710.664476][ T2900] bridge_slave_0: left allmulticast mode
[  710.674328][T13518] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino
[  710.716187][ T2900] bridge_slave_0: left promiscuous mode
[  710.722151][ T2900] bridge0: port 1(bridge_slave_0) entered disabled state
[  710.837424][T13518] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117)
[  710.885164][T13518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  710.895418][T13211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.415271][T13250] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.775880][T12683] Bluetooth: hci0: command tx timeout
[  712.298039][T13536] syz-executor.1[13536] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  712.298201][T13536] syz-executor.1[13536] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  712.370706][ T2900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  712.395570][ T2900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  712.417301][ T2900] bond0 (unregistering): Released all slaves
[  712.447634][T13276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  712.470303][T13276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  712.499434][T13276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  712.515166][T13276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  712.884932][T13445] bridge0: port 1(bridge_slave_0) entered blocking state
[  712.948241][T13445] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.966863][T13445] bridge_slave_0: entered allmulticast mode
[  712.974178][T13445] bridge_slave_0: entered promiscuous mode
[  713.092992][T13445] bridge0: port 2(bridge_slave_1) entered blocking state
[  713.112873][T13445] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.132212][T13445] bridge_slave_1: entered allmulticast mode
[  713.169870][T13445] bridge_slave_1: entered promiscuous mode
[  713.281176][T13552] loop3: detected capacity change from 0 to 4096
[  713.288034][ T2900] hsr_slave_0: left promiscuous mode
[  713.293345][T13552] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  713.320808][ T2900] hsr_slave_1: left promiscuous mode
[  713.336077][T13552] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  713.346256][ T2900] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  713.353731][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_0
[  713.403940][ T2900] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  713.420497][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_1
[  713.462071][ T2900] veth1_macvtap: left promiscuous mode
[  713.468667][ T2900] veth0_macvtap: left promiscuous mode
[  713.474491][ T2900] veth1_vlan: left promiscuous mode
[  713.480256][ T2900] veth0_vlan: left promiscuous mode
[  713.722683][   T29] audit: type=1326 audit(1717240740.497:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13541 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75b67cee9 code=0x7ffc0000
[  713.828800][   T29] audit: type=1326 audit(1717240740.527:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13541 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75b67cee9 code=0x7ffc0000
[  713.853868][T12683] Bluetooth: hci0: command tx timeout
[  714.053204][T13573] syz-executor.0[13573] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  714.053351][T13573] syz-executor.0[13573] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  714.955111][T13575] loop3: detected capacity change from 0 to 32768
[  714.984281][ T2900] team0 (unregistering): Port device team_slave_1 removed
[  715.006950][T13575] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13575)
[  715.043708][T13575] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  715.056551][T13575] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  715.065227][T13575] BTRFS info (device loop3): using free-space-tree
[  715.083934][ T2900] team0 (unregistering): Port device team_slave_0 removed
[  715.137695][T13592] loop1: detected capacity change from 0 to 512
[  715.148572][T13592] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  715.176138][T13592] EXT4-fs (loop1): group descriptors corrupted!
[  715.333096][T13211] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  715.467096][T13604] loop1: detected capacity change from 0 to 4096
[  715.489540][T13604] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  715.551208][T13604] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  715.925874][T12683] Bluetooth: hci0: command tx timeout
[  716.022623][T13619] syz-executor.1[13619] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  716.022773][T13619] syz-executor.1[13619] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  716.619287][T13445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  716.698583][T13445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  716.833414][T13445] team0: Port device team_slave_0 added
[  716.863239][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  716.885209][T13445] team0: Port device team_slave_1 added
[  716.891863][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.032852][T13445] batman_adv: batadv0: Adding interface: batadv_slave_0
[  717.045964][T13445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  717.113829][T13445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  717.148176][T13445] batman_adv: batadv0: Adding interface: batadv_slave_1
[  717.148788][T13624] loop0: detected capacity change from 0 to 32768
[  717.175028][T13445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  717.231441][T13445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  717.370669][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.386298][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.445078][T13445] hsr_slave_0: entered promiscuous mode
[  717.483680][T13445] hsr_slave_1: entered promiscuous mode
[  717.502881][T13445] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  717.526177][T13445] Cannot create hsr debugfs directory
[  717.997316][T13636] loop3: detected capacity change from 0 to 32768
[  718.021871][T13636] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13636)
[  718.093673][T13636] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  718.131716][T13636] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  718.144884][T13636] BTRFS info (device loop3): using free-space-tree
[  718.241049][T13636] BTRFS info (device loop3): checking UUID tree
[  718.509974][T13211] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  718.694279][T13445] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  718.734845][T13445] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  718.783323][T13445] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  718.818445][T13684] loop1: detected capacity change from 0 to 2048
[  718.844849][T13649] loop2: detected capacity change from 0 to 32768
[  718.851933][T13684] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  718.854887][T13445] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  718.899229][T13684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  718.900379][T13649] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (13649)
[  719.002049][T13649] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  719.036134][T13649] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  719.068005][T13649] BTRFS info (device loop2): using free-space-tree
[  719.222313][T13689] loop3: detected capacity change from 0 to 2048
[  719.234150][T13445] 8021q: adding VLAN 0 to HW filter on device bond0
[  719.252334][T13649] BTRFS info (device loop2): checking UUID tree
[  719.293085][T13445] 8021q: adding VLAN 0 to HW filter on device team0
[  719.317967][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.325115][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  719.335184][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.342386][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  719.364551][T13689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  719.425933][T13689] ext4 filesystem being mounted at /root/syzkaller-testdir283406212/syzkaller.fcxEKk/17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  719.550894][T13276] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  719.573167][T13709] No control pipe specified
[  719.779582][T13680] loop0: detected capacity change from 0 to 32768
[  720.129900][T13445] 8021q: adding VLAN 0 to HW filter on device batadv0
[  720.529334][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.647834][T13725] loop0: detected capacity change from 0 to 2048
[  720.715784][T13725] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  720.771584][T13725] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  720.800063][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.938182][T13733] loop2: detected capacity change from 0 to 2048
[  720.972075][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  721.001559][T13733] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  721.040044][T13733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  721.190688][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  721.322142][T13445] veth0_vlan: entered promiscuous mode
[  721.376613][T13445] veth1_vlan: entered promiscuous mode
[  721.459930][ T5120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  721.473617][ T5120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  721.474023][T13689] fs-verity: sha512 using implementation "sha512-avx2"
[  721.503152][ T5120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  721.512632][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  721.527209][ T5120] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  721.534603][ T5120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  721.634229][   T12] bridge_slave_1: left allmulticast mode
[  721.653546][   T12] bridge_slave_1: left promiscuous mode
[  721.664202][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.682781][   T12] bridge_slave_0: left allmulticast mode
[  721.688612][   T12] bridge_slave_0: left promiscuous mode
[  721.694419][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.709220][T13211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  722.324417][T13737] loop0: detected capacity change from 0 to 32768
[  722.370583][T13737] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (13737)
[  722.397113][T13737] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  722.417926][T13737] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  722.432180][T13737] BTRFS info (device loop0): using free-space-tree
[  722.510195][T13737] BTRFS info (device loop0): checking UUID tree
[  722.782425][T12466] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  722.970937][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  723.020867][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  723.052672][   T12] bond0 (unregistering): Released all slaves
[  723.180966][T13445] veth0_macvtap: entered promiscuous mode
[  723.240504][T13445] veth1_macvtap: entered promiscuous mode
[  723.462726][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.505985][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.527113][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.537823][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.555744][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.567363][T13783] loop0: detected capacity change from 0 to 2048
[  723.575778][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.585619][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.606112][T12683] Bluetooth: hci3: command tx timeout
[  723.618654][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.647727][T13445] batman_adv: batadv0: Interface activated: batadv_slave_0
[  723.662437][T13773] loop2: detected capacity change from 0 to 32768
[  723.676658][T13773] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (13773)
[  723.702907][T13773] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  723.715175][T13773] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  723.724583][T13773] BTRFS info (device loop2): using free-space-tree
[  723.727014][T13783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  723.760717][T13783] ext4 filesystem being mounted at /root/syzkaller-testdir1806190968/syzkaller.HYmfts/94/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  723.793137][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  723.812544][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.834262][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  723.847848][T13777] loop3: detected capacity change from 0 to 32768
[  723.852005][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.856290][T13777] btrfs: Deprecated parameter 'usebackuproot'
[  723.870422][T13777] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  723.882446][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  723.892964][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.903030][T13777] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13777)
[  723.916745][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  723.927845][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.940206][T13445] batman_adv: batadv0: Interface activated: batadv_slave_1
[  723.959021][T13777] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  723.980587][T13777] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  724.002752][   T12] hsr_slave_0: left promiscuous mode
[  724.038156][   T12] hsr_slave_1: left promiscuous mode
[  724.051423][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  724.064175][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  724.091986][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  724.102701][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  724.174084][   T12] veth1_macvtap: left promiscuous mode
[  724.180049][   T12] veth0_macvtap: left promiscuous mode
[  724.189068][   T12] veth1_vlan: left promiscuous mode
[  724.194418][   T12] veth0_vlan: left promiscuous mode
[  724.200482][T13276] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  724.214683][T13777] BTRFS info (device loop3): rebuilding free space tree
[  724.236766][T13777] BTRFS info (device loop3): disabling free space tree
[  724.246122][T13777] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  724.282915][T13777] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  724.519347][T13211] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  725.391987][T12466] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  725.706951][T12683] Bluetooth: hci3: command tx timeout
[  725.890369][T13827] loop3: detected capacity change from 0 to 32768
[  726.139970][T13827] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names
[  726.168071][   T12] team0 (unregistering): Port device team_slave_1 removed
[  726.194728][T13827] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  726.272448][T13827] bcachefs (loop3): alloc_read... done
[  726.295934][T13827] bcachefs (loop3): stripes_read... done
[  726.301749][T13827] bcachefs (loop3): snapshots_read... done
[  726.303434][   T12] team0 (unregistering): Port device team_slave_0 removed
[  726.318570][T13827] bcachefs (loop3): journal_replay... done
[  726.324459][T13827] bcachefs (loop3): resume_logged_ops... done
[  726.359642][T13827] bcachefs (loop3): going read-write
[  726.372091][T13848] loop2: detected capacity change from 0 to 4096
[  726.384869][T13827] bcachefs (loop3): done starting filesystem
[  726.683255][T13211] bcachefs (loop3): shutting down
[  726.736756][T13211] bcachefs (loop3): going read-only
[  726.742466][T13211] bcachefs (loop3): finished waiting for writes to stop
[  726.786082][T13211] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13
[  726.851545][T13211] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 15
[  726.888722][T13211] bcachefs (loop3): shutdown complete, journal seq 16
[  726.909142][T13211] bcachefs (loop3): marking filesystem clean
[  726.991621][T13842] loop0: detected capacity change from 0 to 32768
[  727.003775][T13211] bcachefs (loop3): shutdown complete
[  727.029450][T13842] gfs2: fsid=(淸{{{+: Trying to join cluster "lock_nolock", "(淸{{{+"
[  727.056095][T13842] gfs2: fsid=(淸{{{+: Now mounting FS (format 0)...
[  727.161127][T13842] gfs2: fsid=(淸{{{+.0: journal 0 mapped with 22 extents in 0ms
[  727.172629][ T5154] gfs2: fsid=(淸{{{+.0: jid=0, already locked for use
[  727.180417][ T5154] gfs2: fsid=(淸{{{+.0: jid=0: Looking at journal...
[  727.267241][ T5154] gfs2: fsid=(淸{{{+.0: jid=0: Journal head lookup took 86ms
[  727.274775][ T5154] gfs2: fsid=(淸{{{+.0: jid=0: Done
[  727.285881][T13842] gfs2: fsid=(淸{{{+.0: first mount done, others may mount
[  727.783417][ T5120] Bluetooth: hci3: command tx timeout
[  728.273509][T13445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  728.285031][T13445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  728.307554][T13445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  728.340751][T13445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  728.357357][T13859] loop2: detected capacity change from 0 to 32768
[  728.485419][T13859] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  728.693695][T13859] XFS (loop2): Ending clean mount
[  728.705360][T13859] XFS (loop2): Quotacheck needed: Please wait.
[  728.730882][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  728.764150][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  728.851724][T13738] chnl_net:caif_netlink_parms(): no params data found
[  728.928749][T13859] XFS (loop2): Quotacheck: Done.
[  728.960244][T13859] fuse: Unknown parameter 'user_i00000000000000000000'
[  729.068405][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.076650][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.123456][T13276] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  729.280432][T13869] loop3: detected capacity change from 0 to 32768
[  729.302278][T13869] btrfs: Deprecated parameter 'usebackuproot'
[  729.308609][T13869] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  729.373291][T13869] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13869)
[  729.709875][T13869] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  729.721823][T13738] bridge0: port 1(bridge_slave_0) entered blocking state
[  729.740738][T13869] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  729.743992][T13738] bridge0: port 1(bridge_slave_0) entered disabled state
[  729.772765][T13738] bridge_slave_0: entered allmulticast mode
[  729.780778][T13738] bridge_slave_0: entered promiscuous mode
[  729.791904][T13738] bridge0: port 2(bridge_slave_1) entered blocking state
[  729.799755][T13738] bridge0: port 2(bridge_slave_1) entered disabled state
[  729.808893][T13738] bridge_slave_1: entered allmulticast mode
[  729.816806][T13738] bridge_slave_1: entered promiscuous mode
[  729.857651][ T5120] Bluetooth: hci3: command tx timeout
[  729.942936][T13738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  730.040501][T13869] BTRFS info (device loop3): rebuilding free space tree
[  730.061373][T13738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  730.127270][T13869] BTRFS info (device loop3): disabling free space tree
[  730.150761][T13869] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  730.180374][T13869] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  730.229191][T13917] loop0: detected capacity change from 0 to 4096
[  730.264647][T13738] team0: Port device team_slave_0 added
[  730.294420][T13738] team0: Port device team_slave_1 added
[  730.380604][T13211] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  730.393806][T13738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  730.412719][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  730.516323][T13738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  730.621756][T13738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  730.656150][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  730.762738][T13738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  730.863200][T13897] loop4: detected capacity change from 0 to 32768
[  730.977482][T13738] hsr_slave_0: entered promiscuous mode
[  731.048294][T13738] hsr_slave_1: entered promiscuous mode
[  731.056820][T13738] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  731.073962][T13738] Cannot create hsr debugfs directory
[  731.175059][T13897] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names
[  731.203343][T13897] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  731.295131][T13897] bcachefs (loop4): alloc_read... done
[  731.333938][T13897] bcachefs (loop4): stripes_read... done
[  731.345193][T13897] bcachefs (loop4): snapshots_read... done
[  731.373659][T13897] bcachefs (loop4): journal_replay... done
[  731.405813][T13897] bcachefs (loop4): resume_logged_ops... done
[  731.437659][T13897] bcachefs (loop4): going read-write
[  731.457485][T13897] bcachefs (loop4): done starting filesystem
[  731.746412][T13445] bcachefs (loop4): shutting down
[  731.751655][T13445] bcachefs (loop4): going read-only
[  731.782561][T13445] bcachefs (loop4): finished waiting for writes to stop
[  731.824085][T13445] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13
[  731.900287][T13445] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15
[  732.070429][T13445] bcachefs (loop4): shutdown complete, journal seq 16
[  732.093408][T13445] bcachefs (loop4): marking filesystem clean
[  732.353119][T13445] bcachefs (loop4): shutdown complete
[  732.573008][T13738] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  732.597463][T13738] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  732.625600][T13738] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  732.645342][T13738] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  733.051581][T13738] 8021q: adding VLAN 0 to HW filter on device bond0
[  733.097855][T13738] 8021q: adding VLAN 0 to HW filter on device team0
[  733.167256][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  733.174407][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  733.198663][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  733.205876][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  733.381401][T13952] loop2: detected capacity change from 0 to 32768
[  733.484899][T13952] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  733.624655][T13958] loop3: detected capacity change from 0 to 32768
[  733.634722][T13958] btrfs: Deprecated parameter 'usebackuproot'
[  733.647462][T13958] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  733.755872][T13952] XFS (loop2): Ending clean mount
[  733.764714][T13958] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13958)
[  733.801497][T13958] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  733.824800][T13952] XFS (loop2): Quotacheck needed: Please wait.
[  733.865334][T13958] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  733.961978][T13738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  733.974695][T13952] XFS (loop2): Quotacheck: Done.
[  734.063462][T13738] veth0_vlan: entered promiscuous mode
[  734.117822][T13958] BTRFS info (device loop3): rebuilding free space tree
[  734.137939][T13952] fuse: Unknown parameter 'user_i00000000000000000000'
[  734.160978][T13738] veth1_vlan: entered promiscuous mode
[  734.186917][T13958] BTRFS info (device loop3): disabling free space tree
[  734.205779][T13958] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  734.239696][T13989] loop4: detected capacity change from 0 to 4096
[  734.254707][T13276] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  734.277752][T13958] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  734.293294][T13738] veth0_macvtap: entered promiscuous mode
[  734.302314][T13989] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[  734.347538][T13738] veth1_macvtap: entered promiscuous mode
[  734.412277][T13989] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  734.447257][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  734.509522][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  734.545052][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  734.566065][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  734.583655][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  734.594481][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  734.605178][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  734.615811][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  734.627850][T13738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  734.638738][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  734.649516][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  734.687597][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  734.705701][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  734.715707][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  734.735698][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  734.745550][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  734.785731][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  734.804054][T13738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  734.814164][   T35] ntfs3: loop4: ino=5, ntfs3_write_inode failed, -22.
[  734.830002][T13211] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  734.893631][T13738] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  734.920631][T13738] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  734.930106][T13738] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  734.939386][T13738] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  735.165888][ T5154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  735.174604][ T5154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  735.314032][    T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  735.328692][    T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  736.371657][T14008] loop0: detected capacity change from 0 to 32768
[  736.483521][T14040] loop1: detected capacity change from 0 to 2048
[  736.550019][T14040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  736.564941][T14040] ext4 filesystem being mounted at /root/syzkaller-testdir356784313/syzkaller.XcD3ix/1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  736.635142][T14008] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names
[  736.651269][T14008] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  736.783592][T14008] bcachefs (loop0): alloc_read... done
[  736.835956][T14008] bcachefs (loop0): stripes_read... done
[  736.842229][T14008] bcachefs (loop0): snapshots_read... done
[  736.851570][T14008] bcachefs (loop0): journal_replay... done
[  736.858033][T14008] bcachefs (loop0): resume_logged_ops... done
[  736.870970][T14008] bcachefs (loop0): going read-write
[  736.888002][T14008] bcachefs (loop0): done starting filesystem
[  737.019711][T12466] bcachefs (loop0): shutting down
[  737.024935][T12466] bcachefs (loop0): going read-only
[  737.030823][T12466] bcachefs (loop0): finished waiting for writes to stop
[  737.038924][T12466] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11
[  737.050953][T13738] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  737.088683][T12466] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13
[  737.100145][T12466] bcachefs (loop0): shutdown complete, journal seq 14
[  737.115301][T12466] bcachefs (loop0): marking filesystem clean
[  737.249540][T12466] bcachefs (loop0): shutdown complete
[  737.268146][T14043] loop4: detected capacity change from 0 to 32768
[  737.308808][T14043] btrfs: Deprecated parameter 'usebackuproot'
[  737.326043][T14043] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  737.336759][T14043] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (14043)
[  737.379947][T14043] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  737.406050][T14043] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  737.458255][T14061] loop1: detected capacity change from 0 to 4096
[  737.571132][T14043] BTRFS info (device loop4): rebuilding free space tree
[  737.648338][T14043] BTRFS info (device loop4): disabling free space tree
[  737.676420][T14043] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  737.720582][T14043] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  737.832842][   T29] audit: type=1804 audit(1717240764.587:301): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3787392042/syzkaller.XkEy5j/5/file0/file1" dev="loop4" ino=260 res=1 errno=0
[  737.923235][T13445] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  738.657276][T14097] loop0: detected capacity change from 0 to 512
[  738.698361][T14097] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  738.732570][T14097] EXT4-fs (loop0): group descriptors corrupted!
[  739.161906][T14107] syz-executor.2[14107] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  739.161995][T14107] syz-executor.2[14107] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  739.229471][T14105] loop0: detected capacity change from 0 to 2048
[  739.289580][T14105] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  739.314849][T14105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  739.613455][T14086] loop3: detected capacity change from 0 to 32768
[  739.713043][T14086] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (14086)
[  739.781026][T14086] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  739.808261][T14086] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  739.827173][T14089] loop4: detected capacity change from 0 to 32768
[  739.833781][T14086] BTRFS info (device loop3): using free-space-tree
[  739.939156][T14131] loop0: detected capacity change from 0 to 2048
[  740.028280][T14131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  740.066044][T14131] ext4 filesystem being mounted at /root/syzkaller-testdir1806190968/syzkaller.HYmfts/115/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  740.130964][T13211] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  740.161762][T14089] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names
[  740.192791][T14089] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  740.240962][T14089] bcachefs (loop4): alloc_read... done
[  740.270109][T14089] bcachefs (loop4): stripes_read... done
[  740.301260][T14089] bcachefs (loop4): snapshots_read... done
[  740.374059][T14089] bcachefs (loop4): journal_replay... done
[  740.390698][T14089] bcachefs (loop4): resume_logged_ops... done
[  740.416980][T14089] bcachefs (loop4): going read-write
[  740.435180][T14089] bcachefs (loop4): done starting filesystem
[  740.471388][T14138] fs-verity (loop0, inode 13): Error -28 writing Merkle tree block 1
[  740.545844][T14138] fs-verity (loop0, inode 13): Error -28 building Merkle tree
[  740.753539][T12466] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  740.780551][T13445] bcachefs (loop4): shutting down
[  740.785621][T13445] bcachefs (loop4): going read-only
[  740.812765][T13445] bcachefs (loop4): finished waiting for writes to stop
[  740.866129][T13445] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13
[  740.935482][T13445] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15
[  740.979369][T13445] bcachefs (loop4): shutdown complete, journal seq 16
[  741.001096][T13445] bcachefs (loop4): marking filesystem clean
[  741.107003][T14149] loop0: detected capacity change from 0 to 2048
[  741.122263][T13445] bcachefs (loop4): shutdown complete
[  741.170132][T14149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  741.194007][T14149] ext4 filesystem being mounted at /root/syzkaller-testdir1806190968/syzkaller.HYmfts/117/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  741.291296][T12466] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  741.692639][T14142] loop2: detected capacity change from 0 to 32768
[  741.705956][T14142] btrfs: Deprecated parameter 'usebackuproot'
[  741.705983][T14142] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  741.722894][T14142] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (14142)
[  741.725075][T14160] loop3: detected capacity change from 0 to 2048
[  741.745609][T14142] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  741.748900][T14142] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  741.763938][T14160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  741.764017][T14160] ext4 filesystem being mounted at /root/syzkaller-testdir283406212/syzkaller.fcxEKk/37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  741.950867][T14142] BTRFS info (device loop2): rebuilding free space tree
[  741.965353][T14142] BTRFS info (device loop2): disabling free space tree
[  741.965427][T14142] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  741.965452][T14142] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  741.996317][T14181] fs-verity (loop3, inode 13): Error -28 writing Merkle tree block 1
[  741.996407][T14181] fs-verity (loop3, inode 13): Error -28 building Merkle tree
[  742.005329][   T29] audit: type=1804 audit(1717240768.767:302): pid=14142 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir444862262/syzkaller.sxeRQv/28/file0/file1" dev="loop2" ino=260 res=1 errno=0
[  742.092338][T13276] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  742.231750][T13211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  742.425867][T14189] loop0: detected capacity change from 0 to 512
[  742.469299][T14189] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent
[  742.803306][T14193] loop4: detected capacity change from 0 to 2048
[  742.920161][T14193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  743.002902][T14193] ext4 filesystem being mounted at /root/syzkaller-testdir3787392042/syzkaller.XkEy5j/8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  743.364707][T14200] fs-verity (loop4, inode 13): Error -28 writing Merkle tree block 1
[  743.434308][T14200] fs-verity (loop4, inode 13): Error -28 building Merkle tree
[  743.680875][T13445] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  744.020827][T14206] loop1: detected capacity change from 0 to 2048
[  744.078407][T14206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  744.139937][T14206] ext4 filesystem being mounted at /root/syzkaller-testdir356784313/syzkaller.XcD3ix/6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  744.160726][T14195] loop2: detected capacity change from 0 to 32768
[  744.438039][T13738] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  744.473959][T14195] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names
[  744.526296][T14195] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  744.536566][T14220] loop3: detected capacity change from 0 to 2048
[  744.617893][T14195] bcachefs (loop2): alloc_read... done
[  744.623870][T14195] bcachefs (loop2): stripes_read... done
[  744.633071][T14195] bcachefs (loop2): snapshots_read... done
[  744.642779][T14220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  744.661312][T14195] bcachefs (loop2): journal_replay... done
[  744.700181][T14202] loop0: detected capacity change from 0 to 32768
[  744.711689][T14220] ext4 filesystem being mounted at /root/syzkaller-testdir283406212/syzkaller.fcxEKk/39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  744.726563][T14195] bcachefs (loop2): resume_logged_ops... done
[  744.756680][T14195] bcachefs (loop2): going read-write
[  744.788366][T14195] bcachefs (loop2): done starting filesystem
[  744.937106][T14234] fs-verity (loop3, inode 13): Error -28 writing Merkle tree block 1
[  744.945984][T14234] fs-verity (loop3, inode 13): Error -28 building Merkle tree
[  745.179135][T14202] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open
[  745.211526][T14202] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete
[  745.228924][T13211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  745.269901][T13276] bcachefs (loop2): shutting down
[  745.275060][T13276] bcachefs (loop2): going read-only
[  745.301242][T13276] bcachefs (loop2): finished waiting for writes to stop
[  745.324343][T13276] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13
[  745.384873][T13276] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 15
[  745.459084][T13276] bcachefs (loop2): shutdown complete, journal seq 16
[  745.468586][T13276] bcachefs (loop2): marking filesystem clean
[  745.569857][T13276] bcachefs (loop2): shutdown complete
[  746.163559][T14225] loop1: detected capacity change from 0 to 32768
[  746.173518][T14225] btrfs: Deprecated parameter 'usebackuproot'
[  746.180061][T14225] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  746.190256][T14225] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (14225)
[  746.249162][T14225] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  746.284435][T14225] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  746.564309][T14225] BTRFS info (device loop1): rebuilding free space tree
[  746.604064][T14225] BTRFS info (device loop1): disabling free space tree
[  746.623879][T14225] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  746.710267][T14225] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  746.732170][ T5120] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  746.741267][ T5120] Bluetooth: hci2: Injecting HCI hardware error event
[  746.753505][ T5120] Bluetooth: hci2: hardware error 0x00
[  747.010341][   T29] audit: type=1804 audit(1717240773.787:303): pid=14225 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir356784313/syzkaller.XcD3ix/7/file0/file1" dev="loop1" ino=260 res=1 errno=0
[  747.095483][T13738] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  747.691233][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  747.697711][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  747.867940][T14275] loop2: detected capacity change from 0 to 2048
[  747.933290][T14275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  747.972308][T14275] ext4 filesystem being mounted at /root/syzkaller-testdir444862262/syzkaller.sxeRQv/31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  748.149455][T13276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  748.995383][ T5120] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  749.312762][T14291] loop1: detected capacity change from 0 to 512
[  749.362437][T14291] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  749.396796][T14291] EXT4-fs (loop1): group descriptors corrupted!
[  750.136058][   T58] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  750.159559][T14286] loop2: detected capacity change from 0 to 32768
[  750.641670][   T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  750.675154][   T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  750.704182][   T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  750.720475][T14286] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names
[  750.735726][   T58] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  750.754662][T14286] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  750.762995][   T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.782371][   T58] usb 2-1: config 0 descriptor??
[  750.788361][T14300] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  750.888638][T14286] bcachefs (loop2): alloc_read... done
[  750.895402][T14286] bcachefs (loop2): stripes_read... done
[  750.912071][T14286] bcachefs (loop2): snapshots_read... done
[  750.929243][T14286] bcachefs (loop2): journal_replay... done
[  750.935599][T14286] bcachefs (loop2): resume_logged_ops... done
[  750.957340][T14286] bcachefs (loop2): going read-write
[  751.262246][T14286] bcachefs (loop2): done starting filesystem
[  751.799790][   T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  751.810501][   T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  751.818790][   T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  751.828052][   T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  751.835489][   T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  751.843452][   T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  751.851163][   T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  751.858662][   T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  751.867849][   T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  751.875289][   T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  751.882865][   T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  751.890440][   T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  751.898866][   T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  751.924906][   T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  751.952244][   T58] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  751.964222][T13276] bcachefs (loop2): shutting down
[  751.972334][T13276] bcachefs (loop2): going read-only
[  751.979027][   T58] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  751.996490][T13276] bcachefs (loop2): finished waiting for writes to stop
[  752.009296][   T58] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  752.036109][T13276] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13
[  752.061004][   T58] usb 2-1: USB disconnect, device number 28
[  752.073291][T13276] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 15
[  752.084807][T13276] bcachefs (loop2): shutdown complete, journal seq 16
[  752.093173][T13276] bcachefs (loop2): marking filesystem clean
[  752.131242][T13276] bcachefs (loop2): shutdown complete
[  752.607868][T14356] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'.
[  752.647143][T14356] gretap0: entered promiscuous mode
[  752.694286][T14357] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  752.730718][T14357] 0猉功D: renamed from gretap0
[  752.789783][T14357] 0猉功D: left promiscuous mode
[  752.794708][T14357] 0猉功D: entered allmulticast mode
[  752.845411][T14357] A link change request failed with some changes committed already. Interface 
40猉功D may have been left with an inconsistent configuration, please check.
[  753.428839][   T29] audit: type=1326 audit(1717240780.207:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14395 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eef87cee9 code=0x7ffc0000
[  753.477440][T14398] loop2: detected capacity change from 0 to 256
[  753.478043][   T29] audit: type=1326 audit(1717240780.207:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14395 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eef87cee9 code=0x7ffc0000
[  753.531775][T14398] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d)
[  753.555933][   T29] audit: type=1326 audit(1717240780.207:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14395 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eef87cee9 code=0x7ffc0000
[  753.585944][T14398] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  753.606664][   T29] audit: type=1326 audit(1717240780.207:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14395 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eef87cee9 code=0x7ffc0000
[  753.644531][T14403] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'.
[  753.668435][   T29] audit: type=1326 audit(1717240780.207:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14395 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4eef87cee9 code=0x7ffc0000
[  753.702288][T14403] 0猉功D: entered promiscuous mode
[  753.735893][   T29] audit: type=1326 audit(1717240780.207:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14395 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eef87cee9 code=0x7ffc0000
[  753.738366][T14403] 0猉功D: left allmulticast mode
[  753.842494][   T29] audit: type=1326 audit(1717240780.207:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14395 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eef87cee9 code=0x7ffc0000
[  753.919548][   T29] audit: type=1326 audit(1717240780.317:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14400 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eef87cee9 code=0x7ffc0000
[  753.978368][   T29] audit: type=1326 audit(1717240780.317:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14400 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eef87cee9 code=0x7ffc0000
[  754.023537][   T29] audit: type=1326 audit(1717240780.317:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14400 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4eef87cee9 code=0x7ffc0000
[  754.169005][T14418] loop2: detected capacity change from 0 to 128
[  754.194201][T14418] udf: Unknown parameter '︹梜\C�m2谳.M咵蕧#V9h8趦荰垀{�/5躁fx賁*餰蜚樰悂�q��簧d犛��'
[  754.501653][T14443] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'.
[  754.547536][T14443] gretap0: entered promiscuous mode
[  754.570910][T14442] lo: entered allmulticast mode
[  754.596435][T14444] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  754.613056][T14444] 0猉功D: renamed from gretap0
[  754.651640][T14444] 0猉功D: left promiscuous mode
[  754.665284][T14444] 0猉功D: entered allmulticast mode
[  754.688483][T14444] A link change request failed with some changes committed already. Interface 
40猉功D may have been left with an inconsistent configuration, please check.
[  754.751336][T14445] pimreg: entered allmulticast mode
[  754.766354][T14442] lo: left allmulticast mode
[  754.795398][T14442] pimreg: left allmulticast mode
[  754.902499][T14455] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  754.915107][T14455] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  754.937885][T14455] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.939819][T14455] bridge0: port 2(bridge_slave_1) entered blocking state
[  754.939937][T14455] bridge0: port 2(bridge_slave_1) entered forwarding state
[  755.437618][T14491] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  755.455748][T14491] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  755.457477][T14487] loop0: detected capacity change from 0 to 2048
[  755.469497][T14491] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.494996][T14491] bridge0: port 2(bridge_slave_1) entered blocking state
[  755.502305][T14491] bridge0: port 2(bridge_slave_1) entered forwarding state
[  755.543454][T14487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  755.579808][T14487] ext4 filesystem being mounted at /root/syzkaller-testdir1806190968/syzkaller.HYmfts/141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  755.816177][T14483] loop0: detected capacity change from 2048 to 64
[  755.830135][T14487] syz-executor.0: attempt to access beyond end of device
[  755.830135][T14487] loop0: rw=524288, sector=768, nr_sectors = 8 limit=64
[  755.908765][T14487] syz-executor.0: attempt to access beyond end of device
[  755.908765][T14487] loop0: rw=0, sector=768, nr_sectors = 8 limit=64
[  756.156927][T14518] loop4: detected capacity change from 0 to 2048
[  756.184732][T14518] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  756.203868][T14518] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  756.217464][T14518] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[  756.231881][T14518] EXT4-fs (loop4): group descriptors corrupted!
[  756.653075][T12466] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  756.728271][T14494] kmmpd-loop0: attempt to access beyond end of device
[  756.728271][T14494] loop0: rw=14337, sector=512, nr_sectors = 8 limit=64
[  756.767284][T14494] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  757.177089][T14537] xt_CT: You must specify a L4 protocol and not use inversions on it
[  757.191255][T14539] loop4: detected capacity change from 0 to 2048
[  757.222356][T14539] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  757.261841][T14539] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  757.272952][T14542] loop3: detected capacity change from 0 to 1024
[  757.308348][T14539] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[  757.330445][T14539] EXT4-fs (loop4): group descriptors corrupted!
[  757.348185][T14542] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  757.383125][   T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  757.405046][T14548] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  757.435772][T14542] JBD2: no valid journal superblock found
[  757.453866][T14542] EXT4-fs (loop3): Could not load journal inode
[  757.793417][   T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  757.974242][   T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.051460][ T5120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  758.063102][ T5120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  758.073239][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  758.088185][T14570] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  758.105927][ T5120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  758.122026][ T5120] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  758.129776][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  758.223807][   T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.288377][T14576] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  758.390752][T14576] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  758.604242][   T29] kauditd_printk_skb: 78 callbacks suppressed
[  758.604258][   T29] audit: type=1326 audit(1717240785.377:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444347cee9 code=0x7ffc0000
[  758.632508][    C1] vkms_vblank_simulate: vblank timer overrun
[  758.728733][   T29] audit: type=1326 audit(1717240785.427:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f444347cee9 code=0x7ffc0000
[  758.764916][   T67] bridge_slave_1: left allmulticast mode
[  758.791549][   T67] bridge_slave_1: left promiscuous mode
[  758.806525][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.816051][   T29] audit: type=1326 audit(1717240785.427:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444347cee9 code=0x7ffc0000
[  758.868250][   T67] bridge_slave_0: left allmulticast mode
[  758.885600][   T67] bridge_slave_0: left promiscuous mode
[  758.895512][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.907264][   T29] audit: type=1326 audit(1717240785.427:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444347cee9 code=0x7ffc0000
[  758.981575][   T29] audit: type=1326 audit(1717240785.427:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f444347cee9 code=0x7ffc0000
[  759.047113][   T29] audit: type=1326 audit(1717240785.427:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444347cee9 code=0x7ffc0000
[  759.114997][   T29] audit: type=1326 audit(1717240785.427:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f444347cee9 code=0x7ffc0000
[  759.199066][   T29] audit: type=1326 audit(1717240785.427:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444347cee9 code=0x7ffc0000
[  759.286675][   T29] audit: type=1326 audit(1717240785.427:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f444347cee9 code=0x7ffc0000
[  759.361399][   T29] audit: type=1326 audit(1717240785.427:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14585 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444347cee9 code=0x7ffc0000
[  759.383520][    C1] vkms_vblank_simulate: vblank timer overrun
[  759.621002][T14584] loop1: detected capacity change from 0 to 32768
[  759.657825][   T53] Bluetooth: hci1: link tx timeout
[  759.663416][   T53] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  759.986255][T14593] loop4: detected capacity change from 0 to 32768
[  760.003723][T14593] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (14593)
[  760.072697][T14593] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  760.118258][T14593] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  760.151764][T14593] BTRFS info (device loop4): using free-space-tree
[  760.168607][ T5120] Bluetooth: hci2: command tx timeout
[  760.495197][T14591] loop2: detected capacity change from 0 to 32768
[  760.543078][T14591] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  760.559144][T14591] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  760.575476][T14598] loop3: detected capacity change from 0 to 40427
[  760.601561][T14598] F2FS-fs (loop3): invalid crc value
[  760.609636][T14591] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  760.638665][T14598] F2FS-fs (loop3): Found nat_bits in checkpoint
[  760.647034][ T5154] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  760.669750][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  760.670113][ T5154] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  760.714057][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  760.716144][T14598] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  760.731946][T13445] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  760.744988][   T67] bond0 (unregistering): Released all slaves
[  760.769446][T14618] f2fs_ckpt-7:3: attempt to access beyond end of device
[  760.769446][T14618] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  760.824161][T14618] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  760.840832][ T5154] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 170ms
[  760.856663][ T5154] gfs2: fsid=syz:syz.0: jid=0: Done
[  760.905261][T14591] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  760.964427][T14567] chnl_net:caif_netlink_parms(): no params data found
[  761.342205][ T5154] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  761.372552][T14567] bridge0: port 1(bridge_slave_0) entered blocking state
[  761.396255][T14567] bridge0: port 1(bridge_slave_0) entered disabled state
[  761.410858][T14567] bridge_slave_0: entered allmulticast mode
[  761.420182][T14567] bridge_slave_0: entered promiscuous mode
[  761.432902][T14567] bridge0: port 2(bridge_slave_1) entered blocking state
[  761.441744][T14567] bridge0: port 2(bridge_slave_1) entered disabled state
[  761.460199][T14567] bridge_slave_1: entered allmulticast mode
[  761.468352][T14567] bridge_slave_1: entered promiscuous mode
[  761.569354][ T5154] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  761.585779][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  761.601469][ T5154] usb 2-1: config 0 descriptor??
[  761.623088][T14567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  761.656999][T14567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  761.694083][ T5120] Bluetooth: hci1: command 0x0406 tx timeout
[  761.755483][T14567] team0: Port device team_slave_0 added
[  761.763274][   T58] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  761.781324][   T67] hsr_slave_0: left promiscuous mode
[  761.793243][   T67] hsr_slave_1: left promiscuous mode
[  761.801948][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  761.804395][T14636] loop3: detected capacity change from 0 to 2048
[  761.810193][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  761.826097][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  761.833844][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  761.847659][ T5154] usb 2-1: Cannot read MAC address
[  761.853225][ T5154] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  761.876352][T14636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  761.886226][ T5154] usb 2-1: USB disconnect, device number 29
[  761.894993][T14636] ext4 filesystem being mounted at /root/syzkaller-testdir283406212/syzkaller.fcxEKk/76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  761.901566][   T67] veth1_macvtap: left promiscuous mode
[  761.915339][   T67] veth0_macvtap: left promiscuous mode
[  761.921098][   T67] veth1_vlan: left promiscuous mode
[  761.927193][   T67] veth0_vlan: left promiscuous mode
[  761.981943][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  761.983984][T13211] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  762.027385][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  762.040061][   T58] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  762.053551][   T58] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  762.063551][   T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.074459][   T58] usb 3-1: config 0 descriptor??
[  762.081024][T14634] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  762.222015][   T67] pim6reg (unregistering): left allmulticast mode
[  762.248065][   T53] Bluetooth: hci2: command tx timeout
[  762.473491][T14651] loop1: detected capacity change from 0 to 164
[  762.548617][   T58] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  762.569577][T14651] Unable to read rock-ridge attributes
[  762.575855][   T58] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  762.583533][   T58] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  762.621503][   T58] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  762.633619][   T58] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  762.642189][   T58] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  762.662567][   T58] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  762.670442][   T58] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  762.693513][   T58] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  762.710293][   T58] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  762.733279][   T58] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  762.752519][   T58] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  762.801797][   T58] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  762.849799][   T58] usb 3-1: USB disconnect, device number 24
[  763.153659][T14664] loop4: detected capacity change from 0 to 512
[  763.164928][T14664] EXT4-fs (loop4): invalid inodes per group: 262176
[  763.164928][T14664] 
[  763.224521][   T67] team0 (unregistering): Port device team_slave_1 removed
[  763.292672][   T67] team0 (unregistering): Port device team_slave_0 removed
[  763.344745][   T53] Bluetooth: hci4: link tx timeout
[  763.345870][ T8198] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  763.350427][   T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  763.531555][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies.
[  763.594723][ T8198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  763.606100][ T8198] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  763.635744][ T8198] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  763.662745][ T8198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.696880][ T8198] usb 2-1: config 0 descriptor??
[  763.823902][T14674] loop4: detected capacity change from 0 to 8192
[  763.873329][T14674] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  764.135109][ T8198] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  764.146612][ T8198] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  764.162436][ T8198] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  764.185713][ T8198] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  764.193153][ T8198] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  764.227593][ T8198] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  764.250085][ T8198] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  764.327816][   T53] Bluetooth: hci2: command tx timeout
[  764.348178][ T5157] usb 2-1: USB disconnect, device number 30
[  764.501676][T14678] loop4: detected capacity change from 0 to 1024
[  764.555148][T14567] team0: Port device team_slave_1 added
[  764.635409][T14678] EXT4-fs: Ignoring removed orlov option
[  764.661837][T14678] EXT4-fs (loop4): Test dummy encryption mode enabled
[  764.685801][T14678] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  764.719769][T14567] batman_adv: batadv0: Adding interface: batadv_slave_0
[  764.735590][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  764.755030][T14678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  764.805770][T14567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  764.819699][T14567] batman_adv: batadv0: Adding interface: batadv_slave_1
[  764.829320][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  764.855837][T14567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  765.053427][T13445] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  765.057146][T14567] hsr_slave_0: entered promiscuous mode
[  765.088720][T14567] hsr_slave_1: entered promiscuous mode
[  765.105133][T14567] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  765.119894][T14567] Cannot create hsr debugfs directory
[  765.380814][T14706] ext4: Unknown parameter 'trans'
[  765.451194][   T53] Bluetooth: hci4: command 0x0406 tx timeout
[  766.063995][T14567] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  766.094314][T14567] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  766.128366][T14567] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  766.149106][T14567] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  766.406633][ T5120] Bluetooth: hci2: command tx timeout
[  766.473891][T14567] 8021q: adding VLAN 0 to HW filter on device bond0
[  766.496435][T14567] 8021q: adding VLAN 0 to HW filter on device team0
[  766.537655][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state
[  766.544826][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  766.600392][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  766.607639][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  766.995126][T14715] loop4: detected capacity change from 0 to 40427
[  767.053354][T14715] F2FS-fs (loop4): Found nat_bits in checkpoint
[  767.198381][T14715] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  767.303739][T14567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  767.312540][   T29] kauditd_printk_skb: 27 callbacks suppressed
[  767.312558][   T29] audit: type=1800 audit(1717240794.077:429): pid=14715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0
[  767.398911][T14715] syz-executor.4: attempt to access beyond end of device
[  767.398911][T14715] loop4: rw=2049, sector=53248, nr_sectors = 16 limit=40427
[  767.417566][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies.
[  767.443292][T14567] veth0_vlan: entered promiscuous mode
[  767.472709][T14567] veth1_vlan: entered promiscuous mode
[  767.513582][T14715] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  767.547488][T14715] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  767.551985][T14760] netlink: get zone limit has 4 unknown bytes
[  767.562153][T14567] veth0_macvtap: entered promiscuous mode
[  767.588057][T14715] syz-executor.4: attempt to access beyond end of device
[  767.588057][T14715] loop4: rw=0, sector=53256, nr_sectors = 8 limit=40427
[  767.590641][T14567] veth1_macvtap: entered promiscuous mode
[  767.665377][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  767.685499][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  767.715509][T14758] loop1: detected capacity change from 0 to 8192
[  767.722024][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  767.738010][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  767.750626][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  767.769998][T14758] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  767.783875][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  767.806711][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  767.830051][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  767.853238][T14567] batman_adv: batadv0: Interface activated: batadv_slave_0
[  767.882984][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  767.903078][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  767.919824][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  767.930412][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  767.955681][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  767.969917][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  767.995719][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  768.017803][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  768.050864][T14567] batman_adv: batadv0: Interface activated: batadv_slave_1
[  768.091366][T14567] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  768.119072][T14567] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  768.136778][T14567] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  768.145603][T14567] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  768.411717][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  768.439332][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  768.561563][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  768.599625][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  768.783921][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies.
[  769.072200][T14781] loop1: detected capacity change from 0 to 8192
[  769.110950][T14781] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  769.230999][   T29] audit: type=1326 audit(1717240796.007:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e7447cee9 code=0x0
[  769.418223][T14801] netlink: zone id is out of range
[  769.423666][T14801] netlink: zone id is out of range
[  769.431575][T14801] netlink: zone id is out of range
[  769.437652][T14801] netlink: get zone limit has 4 unknown bytes
[  769.686831][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  770.785875][T14850] pim6reg1: entered promiscuous mode
[  770.792068][T14850] pim6reg1: entered allmulticast mode
[  770.844950][T14856] loop1: detected capacity change from 0 to 512
[  770.902877][T14856] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  770.955432][T14856] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz-executor.1: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  771.015022][T14856] EXT4-fs error (device loop1): ext4_quota_enable:7037: comm syz-executor.1: Bad quota inode: 3, type: 0
[  771.080829][T14856] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  771.148198][T14856] EXT4-fs (loop1): mount failed
[  772.129926][T14897] overlayfs: failed to clone lowerpath
[  774.388553][T14913] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  774.399060][T14912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  774.454627][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  774.538952][T14922] netlink: 'syz-executor.4': attribute type 15 has an invalid length.
[  774.567612][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  774.887872][T14939] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  775.020498][T14945] loop4: detected capacity change from 0 to 256
[  775.479538][T14956] loop4: detected capacity change from 0 to 2048
[  775.508812][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  775.522013][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  775.533238][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  775.537648][T14956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  775.555991][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  775.565230][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  775.573202][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  776.002467][T14960] chnl_net:caif_netlink_parms(): no params data found
[  776.119426][T14994] loop0: detected capacity change from 0 to 2048
[  776.132768][T14994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  776.233751][T14960] bridge0: port 1(bridge_slave_0) entered blocking state
[  776.243534][T14960] bridge0: port 1(bridge_slave_0) entered disabled state
[  776.253007][T14960] bridge_slave_0: entered allmulticast mode
[  776.262314][T14960] bridge_slave_0: entered promiscuous mode
[  776.281924][T14960] bridge0: port 2(bridge_slave_1) entered blocking state
[  776.290633][T14960] bridge0: port 2(bridge_slave_1) entered disabled state
[  776.298986][T14960] bridge_slave_1: entered allmulticast mode
[  776.314514][T14998] kvm: emulating exchange as write
[  776.332993][T14960] bridge_slave_1: entered promiscuous mode
[  776.404441][T14960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  776.437283][T14960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  776.492132][T14960] team0: Port device team_slave_0 added
[  776.507928][T14960] team0: Port device team_slave_1 added
[  776.574818][T14960] batman_adv: batadv0: Adding interface: batadv_slave_0
[  776.583108][T14960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  776.630414][T14960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  776.663462][T14960] batman_adv: batadv0: Adding interface: batadv_slave_1
[  776.667913][T15007] loop4: detected capacity change from 0 to 64
[  776.673883][T14960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  776.706835][T14960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  776.803192][T14960] hsr_slave_0: entered promiscuous mode
[  776.820692][T14960] hsr_slave_1: entered promiscuous mode
[  776.841875][T14960] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  776.863049][T14960] Cannot create hsr debugfs directory
[  777.091841][T14960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.208368][T14960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.303452][T14960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.415369][T14960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.586130][T14960] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  777.598879][T14960] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  777.617949][   T53] Bluetooth: hci4: command tx timeout
[  777.620959][T14960] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  777.643485][T14960] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  777.778941][T14960] 8021q: adding VLAN 0 to HW filter on device bond0
[  777.811550][T14960] 8021q: adding VLAN 0 to HW filter on device team0
[  777.826454][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  777.833655][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  777.873395][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  777.880633][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  778.207415][T14960] 8021q: adding VLAN 0 to HW filter on device batadv0
[  778.302440][T14960] veth0_vlan: entered promiscuous mode
[  778.324159][T14960] veth1_vlan: entered promiscuous mode
[  778.365488][T14960] veth0_macvtap: entered promiscuous mode
[  778.421599][T14960] veth1_macvtap: entered promiscuous mode
[  778.449714][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  778.461775][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.473435][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  778.492163][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.503546][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  778.503896][T15071] loop4: detected capacity change from 0 to 2048
[  778.515175][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.541111][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  778.541196][T15075] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  778.551757][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.581678][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  778.595927][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.625545][T14960] batman_adv: batadv0: Interface activated: batadv_slave_0
[  778.651611][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  778.676752][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.705750][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  778.723569][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.736935][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  778.760268][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.773327][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  778.788947][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.803991][T14960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  778.821310][T14960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  778.833741][T14960] batman_adv: batadv0: Interface activated: batadv_slave_1
[  778.861408][T14960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  778.871744][T14960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  778.882415][T14960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  778.892864][T14960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  779.094536][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  779.110375][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  779.148588][   T53] Bluetooth: Unknown BR/EDR signaling command 0x0d
[  779.155235][   T53] Bluetooth: Wrong link type (-22)
[  779.204675][    T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  779.225949][    T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  779.715764][   T53] Bluetooth: hci4: command tx timeout
[  780.563617][T15107] loop2: detected capacity change from 0 to 2048
[  780.635366][T15110] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  781.222597][   T29] audit: type=1326 audit(1717240807.997:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7447cee9 code=0x7ffc0000
[  781.265737][   T29] audit: type=1326 audit(1717240807.997:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7447cee9 code=0x7ffc0000
[  781.315724][   T29] audit: type=1326 audit(1717240807.997:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e7447cee9 code=0x7ffc0000
[  781.339050][   T29] audit: type=1326 audit(1717240807.997:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7447cee9 code=0x7ffc0000
[  781.362935][   T29] audit: type=1326 audit(1717240807.997:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e7447cee9 code=0x7ffc0000
[  781.387417][   T29] audit: type=1326 audit(1717240807.997:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7447cee9 code=0x7ffc0000
[  781.409959][   T29] audit: type=1326 audit(1717240807.997:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4e7447a667 code=0x7ffc0000
[  781.432128][   T29] audit: type=1326 audit(1717240807.997:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e74440329 code=0x7ffc0000
[  781.455479][   T29] audit: type=1326 audit(1717240807.997:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4e7447cee9 code=0x7ffc0000
[  781.486951][   T29] audit: type=1326 audit(1717240807.997:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15124 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4e7447a667 code=0x7ffc0000
[  781.767676][   T53] Bluetooth: hci4: command tx timeout
[  782.111008][T15139] loop4: detected capacity change from 0 to 2048
[  782.159839][T15142] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  782.924396][T15141] loop0: detected capacity change from 0 to 40427
[  782.940407][T15141] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  782.948473][T15141] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  782.972067][T15141] F2FS-fs (loop0): Found nat_bits in checkpoint
[  783.011538][T15144] loop4: detected capacity change from 0 to 40427
[  783.028125][T15144] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  783.042343][T15144] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  783.051946][T15141] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  783.060621][T15141] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  783.069975][T15144] F2FS-fs (loop4): Found nat_bits in checkpoint
[  783.147615][T15144] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  783.154789][T15144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  783.175829][ T5154] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  783.275226][T15144] ------------[ cut here ]------------
[  783.281406][T15144] kernel BUG at fs/f2fs/inline.c:258!
[  783.304188][T15144] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[  783.311163][T15144] CPU: 0 PID: 15144 Comm: syz-executor.4 Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0
2024/06/01 11:20:10 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  783.321671][T15144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  783.331727][T15144] RIP: 0010:f2fs_write_inline_data+0x781/0x790
[  783.337910][T15144] Code: ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 fc ff ff 48 89 df e8 9f 5e 0a fe e9 d6 fc ff ff e8 b5 58 8f 07 e8 30 e8 a7 fd 90 <0f> 0b e8 28 e8 a7 fd 90 0f 0b 0f 1f 44 00 00 90 90 90 90 90 90 90
[  783.357530][T15144] RSP: 0018:ffffc90003386b20 EFLAGS: 00010283
[  783.363615][T15144] RAX: ffffffff83ee2d60 RBX: 0000000000000001 RCX: 0000000000040000
[  783.371687][T15144] RDX: ffffc90017801000 RSI: 00000000000119b4 RDI: 00000000000119b5
[  783.379675][T15144] RBP: ffffc90003386c50 R08: ffffffff83ee2825 R09: 1ffff1100b291cb3
[  783.387659][T15144] R10: dffffc0000000000 R11: ffffed100b291cb4 R12: ffffc90003386ba8
[  783.395638][T15144] R13: 1ffff1100b291cb3 R14: ffffc90003386ba0 R15: ffffc90003386bb0
[  783.403620][T15144] FS:  00007f4442fff6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[  783.412563][T15144] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  783.419182][T15144] CR2: 0000001b33929000 CR3: 000000002412e000 CR4: 00000000003506f0
[  783.427170][T15144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  783.435147][T15144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  783.443214][T15144] Call Trace:
[  783.446508][T15144]  <TASK>
[  783.449443][T15144]  ? __die_body+0x88/0xe0
[  783.453785][T15144]  ? die+0xcf/0x110
[  783.457613][T15144]  ? do_trap+0x15a/0x3a0
[  783.461872][T15144]  ? f2fs_write_inline_data+0x781/0x790
[  783.467435][T15144]  ? do_error_trap+0x1dc/0x2c0
[  783.472204][T15144]  ? f2fs_write_inline_data+0x781/0x790
[  783.477767][T15144]  ? __pfx_do_error_trap+0x10/0x10
[  783.482890][T15144]  ? report_bug+0x3e8/0x500
[  783.487413][T15144]  ? handle_invalid_op+0x34/0x40
[  783.492359][T15144]  ? f2fs_write_inline_data+0x781/0x790
[  783.497919][T15144]  ? exc_invalid_op+0x38/0x50
[  783.502607][T15144]  ? asm_exc_invalid_op+0x1a/0x20
[  783.507646][T15144]  ? f2fs_write_inline_data+0x245/0x790
[  783.513209][T15144]  ? f2fs_write_inline_data+0x780/0x790
[  783.518945][T15144]  ? f2fs_write_inline_data+0x781/0x790
[  783.524514][T15144]  ? __pfx_f2fs_write_inline_data+0x10/0x10
[  783.530421][T15144]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  783.536416][T15144]  f2fs_write_single_data_page+0xbb6/0x1e90
[  783.542323][T15144]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  783.548665][T15144]  ? mlock_drain_local+0x2a6/0x490
[  783.553791][T15144]  f2fs_write_data_pages+0x1efe/0x3a90
[  783.559282][T15144]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  783.565142][T15144]  ? __pfx_lock_release+0x10/0x10
[  783.570173][T15144]  ? do_raw_spin_lock+0x14f/0x370
[  783.575212][T15144]  ? do_raw_spin_unlock+0x13c/0x8b0
[  783.580422][T15144]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  783.586235][T15144]  do_writepages+0x359/0x870
[  783.590843][T15144]  ? __pfx_do_writepages+0x10/0x10
[  783.595965][T15144]  ? filemap_fdatawrite_wbc+0x11a/0x180
[  783.601517][T15144]  ? do_raw_spin_lock+0x14f/0x370
[  783.606555][T15144]  ? __pfx_lock_release+0x10/0x10
[  783.611590][T15144]  ? do_raw_spin_unlock+0x13c/0x8b0
[  783.616807][T15144]  ? wbc_attach_and_unlock_inode+0x568/0x580
[  783.622814][T15144]  filemap_fdatawrite_wbc+0x125/0x180
[  783.628205][T15144]  file_write_and_wait_range+0x1aa/0x290
[  783.633855][T15144]  ? __pfx_file_write_and_wait_range+0x10/0x10
[  783.640041][T15144]  ? f2fs_inode_dirtied+0x2a3/0x2e0
[  783.645250][T15144]  ? do_raw_spin_lock+0x14f/0x370
[  783.650287][T15144]  f2fs_do_sync_file+0x68a/0x1ae0
[  783.655324][T15144]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  783.660813][T15144]  ? __pfx_generic_perform_write+0x10/0x10
[  783.666633][T15144]  ? __pfx_up_write+0x10/0x10
[  783.671321][T15144]  ? f2fs_sync_file+0xec/0x160
[  783.676093][T15144]  f2fs_file_write_iter+0x7bd/0x24e0
[  783.681406][T15144]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  783.687139][T15144]  ? rcu_read_lock_any_held+0xb7/0x160
[  783.692616][T15144]  vfs_write+0xa72/0xc90
[  783.696873][T15144]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  783.702606][T15144]  ? __pfx_vfs_write+0x10/0x10
[  783.707397][T15144]  ? do_futex+0x392/0x560
[  783.711746][T15144]  ksys_write+0x1a0/0x2c0
[  783.716095][T15144]  ? __pfx_ksys_write+0x10/0x10
[  783.720962][T15144]  ? do_syscall_64+0x100/0x230
[  783.725737][T15144]  ? do_syscall_64+0xb6/0x230
[  783.730422][T15144]  do_syscall_64+0xf3/0x230
[  783.734933][T15144]  ? clear_bhb_loop+0x35/0x90
[  783.739618][T15144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  783.745521][T15144] RIP: 0033:0x7f444347cee9
[  783.749953][T15144] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  783.769564][T15144] RSP: 002b:00007f4442fff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001