last executing test programs:

4m29.018708619s ago: executing program 1 (id=158):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10)

4m29.018140757s ago: executing program 1 (id=160):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40021103)

4m29.017737223s ago: executing program 1 (id=162):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)

4m28.939648741s ago: executing program 1 (id=163):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0)

4m28.939394678s ago: executing program 1 (id=164):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)

4m27.957979889s ago: executing program 1 (id=176):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x37, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4102, 0x2}]}, 0x1c}}, 0x4010)

4m27.795072621s ago: executing program 32 (id=176):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x37, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x4102, 0x2}]}, 0x1c}}, 0x4010)

3m19.899192754s ago: executing program 0 (id=974):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3m19.89895469s ago: executing program 0 (id=975):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24048084)
recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x2040, 0x0)

3m19.807529696s ago: executing program 0 (id=976):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000001c0)={0x10001, 0x0, '\x00', {0x0, @bt={0x5, 0x100, 0x1, 0x1, 0x2, 0x2, 0x3, 0xff, 0x10001, 0x7, 0x0, 0x2, 0x5f43, 0x80000001, 0x9, 0x5, {0x1, 0x6}, 0x22, 0xfd}}})

3m19.807103733s ago: executing program 0 (id=977):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x400410, &(0x7f00000001c0)={[{@nodiscard}, {@nocheckpoint_merge}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@inline_data}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {@grpjquota}, {@checkpoint_diasble}]}, 0x4, 0x550c, &(0x7f00000089c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m19.324333006s ago: executing program 0 (id=978):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x10, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c317", 0x0}, 0x50)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000080), 0x5e2, 0x2001, 0x0)

3m18.458234785s ago: executing program 0 (id=995):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m18.321351106s ago: executing program 33 (id=995):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2m45.521382194s ago: executing program 4 (id=1427):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fdffffff0f00000030000780080001"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)

2m45.458041017s ago: executing program 4 (id=1430):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r0, 0xc2)

2m45.369022869s ago: executing program 4 (id=1431):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000001c0)=0x6, 0x12)

2m45.318923659s ago: executing program 4 (id=1432):
r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425200000000000000008fa437e38b8200000000630000000000000000000000000000000000000000000000e91100000000ee65e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658020e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba042bb2617f5b3eb59efcdf3e9332827586e6be0cd2d7297ebd5716514942fd941c1152a8df17f7bf8d23188cc812736a6eb35f0004dde29f79717df9065381ba566751a8e1710210f00ca58ff481633fa3fbe088f86e336cce022c8e2233b79af7f3fb562f9863b2842df189b15ae659ffd7fb31258935a7d1eec82952520f62fbf0f4c8d879805ef3e6b576f5bac6cd8ad874081", @ANYRES16], 0x0, 0x11dc, &(0x7f0000001280)="$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")
r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x30)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307202, &(0x7f0000000f00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

2m45.147320894s ago: executing program 4 (id=1436):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a80)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x3c}}, 0x0)

2m44.828913893s ago: executing program 4 (id=1438):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xffffffff, 0x0, 0x10]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x38}}, 0x0)

2m44.591261857s ago: executing program 34 (id=1438):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xffffffff, 0x0, 0x10]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x38}}, 0x0)

2m32.912393051s ago: executing program 5 (id=1574):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a01040000f6ffffff00000a0000040900010073797a31000000002c000480280001800d00010073796e70726f78790000000014000280080003400000000505000200010000000900020073797a320000000014000000"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8e37f3", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

2m32.56171873s ago: executing program 5 (id=1582):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_ifreq(r0, 0x8955, &(0x7f0000000400)={'bond0\x00', @ifru_addrs=@llc={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @broadcast}})

2m32.488435302s ago: executing program 5 (id=1583):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x1000000000000, 0x0, 0x10, r0, 0x0)

2m32.488017019s ago: executing program 5 (id=1584):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1, 0x261, &(0x7f0000000600)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

2m32.332147613s ago: executing program 5 (id=1586):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40800, 0x0)
read$FUSE(r3, &(0x7f0000002ac0)={0x2020}, 0x2020)

2m32.331392026s ago: executing program 5 (id=1587):
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@bsdgroups}, {@debug}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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")

2m17.344785602s ago: executing program 35 (id=1587):
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@bsdgroups}, {@debug}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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")

2m8.527837387s ago: executing program 6 (id=1854):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0xa, 0x4)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @remote}, 0x10)

2m8.467616313s ago: executing program 6 (id=1856):
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')

2m8.467335112s ago: executing program 6 (id=1858):
syz_init_net_socket$bt_hci(0x1f, 0x7, 0x1)

2m8.388285516s ago: executing program 6 (id=1859):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0)

2m8.377946676s ago: executing program 6 (id=1860):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20)

2m8.03708603s ago: executing program 6 (id=1871):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x4000010)

2m7.886865073s ago: executing program 36 (id=1871):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x4000010)

1m12.474943621s ago: executing program 2 (id=2678):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)="975bd92822"})

1m12.424904209s ago: executing program 2 (id=2679):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000200)={[{@nodots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@fat=@usefree}, {@fat=@nfs_nostale_ro}, {@fat=@dos1xfloppy}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@fat=@usefree}, {@fat=@errors_remount}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@dots}, {@fat=@errors_remount}, {@nodots}, {@dots}]}, 0xf5, 0x1bf, &(0x7f0000000300)="$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")
rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

1m12.328532889s ago: executing program 2 (id=2681):
r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000100))
io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3, '\x00', 0x1000000}, 0x1)

1m12.257308309s ago: executing program 2 (id=2685):
r0 = gettid()
rt_sigqueueinfo(r0, 0x12, &(0x7f0000000000)={0x33, 0x2, 0xf8ff})

1m12.147877149s ago: executing program 2 (id=2688):
read$msr(0xffffffffffffffff, 0x0, 0x0)
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000100)='./file0\x00')
utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffc000, 0x0)

1m12.084763623s ago: executing program 2 (id=2691):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$eJzs279rE2Ecx/HPXS7pNdpWrDqIQlGsLjb+mBxE3Tr1H+hU2qjFE6tVsEWwWdRB6OTm4iQIDo4idRMn/wAHwU0pdgg4OfTkzvvR5JLmB5ecpO/X0ueez/Pkee7oJd82iQDsWVc1IUOGCt7BMfvA+riR9ZYA9Ikb/Ny23JgZhgAG282RrHcAIBtb16SXp6Rf1UfzyhXCssCrAL5tStqYfKo1Bbk5JOn1F8mK6oetinTUCnLD1nB9ffFKOh3ON4q14UNbqkjFKN+3IxyWKq7/+GdOhuvv14hGNZb38oMaD9ZfiOYfaVnvWJ2XSAAADBxDU63yXQeYur7olM81zfN+fr5pXvDzCy3yi9HxUNSafTHz4IN7edvLp+bvOAu7bRNAA2YX9//X43E71+L+t5rc//V/JwDov+WV1VtzjuM+lvxG+V7QEzTC/wjEPbnEmFQa4XsObQwO36FMRN5j7OjJJaevTybPPb2zMOONjUnqzYX6jxtqEH2f/ndNoh6zF1e+pnHi558nS8/fvW9n8NsOlzCj37rZjXK1boxMqYfnNZG4C+Ycu73pxprrdrhow6eL+MMBdtrPRAD6rXT/9lJpeWX17GJO0o1yPnzBn/6x6Vf2pZr6Pp/dTgGkLX7Rb5RWEj1u7eHMp8+/q5fePOti5SuSPha7mAgAAAAAAAAAAAAAAOoc0uGstwAAAACgT5Lf/rk7mvZXl7I+RwAAAAAAAAAAAAAAAAAABs3fAAAA///PtQqI")
sync()
truncate(&(0x7f0000000040)='./file1\x00', 0x6e4)

57.058186066s ago: executing program 37 (id=2691):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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")
sync()
truncate(&(0x7f0000000040)='./file1\x00', 0x6e4)

16.611553229s ago: executing program 8 (id=3164):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5})

16.337906735s ago: executing program 8 (id=3165):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000003d40)=""/4106, 0x100a}, {&(0x7f0000002c40)=""/190, 0xbe}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/199, 0xc7}, {&(0x7f0000001940)=""/229, 0xe5}, {&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000002d40)=""/4073, 0xfe9}, {&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f0000000500)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x827}], 0x5, 0x140, 0x0)

16.251357491s ago: executing program 8 (id=3167):
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0x1)

16.191855707s ago: executing program 8 (id=3169):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18008, &(0x7f0000003b40)=ANY=[], 0x7, 0x2f4, &(0x7f0000000880)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file1'}, 0xb)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xb0}}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ptrace(0x10, r1)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0)
ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={0x0})

15.647567248s ago: executing program 8 (id=3172):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0xff, 0xfff, 0x4, {0xa, @pix_mp={0x12, 0x5be7, 0x32315258, 0x6, 0xb, [{0x80000004, 0x4}, {0x7ff, 0x5}, {0x10000001, 0xffff4a7a}, {0x3, 0x7fd}, {0x1, 0x8000000b}, {0x7, 0x489aa92e}, {0x5, 0x4}, {0xabb8, 0x7}], 0x3, 0x9b, 0x2, 0x0, 0x3}}, 0xfffffffd})

6.083799843s ago: executing program 8 (id=3249):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

5.760268549s ago: executing program 38 (id=3249):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

1.23145675s ago: executing program 3 (id=3274):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={<r2=>0xffffffffffffffff})
close_range(r2, 0xffffffffffffffff, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0)

478.213767ms ago: executing program 7 (id=3276):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)

352.091039ms ago: executing program 7 (id=3277):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x400005, 0xffffffff}, 0x48)

351.273237ms ago: executing program 3 (id=3278):
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0xcc, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}]}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

292.021949ms ago: executing program 7 (id=3279):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000040), 0x65)

227.791705ms ago: executing program 3 (id=3280):
openat$dir(0xffffffffffffff9c, 0x0, 0x200040, 0x4a)
syz_mount_image$fuse(0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xc, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0)

227.342169ms ago: executing program 7 (id=3281):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1, 0x0, 0xfff}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41, 0xffffffffffffffff, 0xfffffffc}, 0x50)

144.186994ms ago: executing program 3 (id=3282):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0x17, 0x0, &(0x7f0000000000)="b9fe0307681f5c8c989a14f088a8657988a8a8c6e96fd9", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

83.659535ms ago: executing program 7 (id=3283):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x5fa, 0x400, 0x2, {0x1, @pix={0x1, 0x63, 0x494e4f4b, 0x6, 0x8, 0x4000004, 0x3, 0x6, 0x0, 0x0, 0x1, 0x2}}, 0x7f})

83.350795ms ago: executing program 3 (id=3284):
r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0x541b, 0x0)

174.122µs ago: executing program 7 (id=3285):
socket(0x2, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='qgroup_meta_reserve\x00', r0}, 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0x7fffffff}]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r4 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, r4, 0x0, 0x8, 'syz1\x00', 0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, 0xffffffffffffffff, 0x300}, 0x38)
socket$packet(0x11, 0x2, 0x300)
lseek(r1, 0x7, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)

0s ago: executing program 3 (id=3286):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

kernel console output (not intermixed with test programs):

evice loop7): disabling free space tree
[  227.118277][T11059] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  227.131929][T11059] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  227.210552][T11059] BTRFS info (device loop7): balance: start -d -m
[  227.225348][T11059] BTRFS info (device loop7): relocating block group 6881280 flags data|metadata
[  227.276069][T11070] loop3: detected capacity change from 0 to 32768
[  227.286653][T11059] BTRFS info (device loop7): relocating block group 5242880 flags data|metadata
[  227.287524][T11070] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2065 (11070)
[  227.331474][T11070] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  227.335461][T11070] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  227.339341][T11070] BTRFS info (device loop3): disk space caching is enabled
[  227.350894][T11070] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  227.366225][T11059] BTRFS info (device loop7): balance: canceled
[  227.410816][T10604] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  227.479232][T11070] BTRFS info (device loop3): rebuilding free space tree
[  227.622274][T11070] BTRFS info (device loop3): disabling free space tree
[  227.625282][T11070] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  227.629401][T11070] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  227.921975][   T33] audit: type=1800 audit(1755038270.387:31): pid=11070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2065" name="file1" dev="loop3" ino=260 res=0 errno=0
[  228.041555][ T6262] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  228.379946][T11128] netlink: 'syz.7.2077': attribute type 5 has an invalid length.
[  228.386396][T11128] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2077'.
[  228.528773][T11135] loop7: detected capacity change from 0 to 2048
[  228.539146][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  228.550830][T11135] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.568703][T11135] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  228.584506][T11135] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28
[  228.591370][T11135] EXT4-fs (loop7): This should not happen!! Data will be lost
[  228.591370][T11135] 
[  228.595391][T11135] EXT4-fs (loop7): Total free blocks count 0
[  228.597887][T11135] EXT4-fs (loop7): Free/Dirty block details
[  228.611991][T11135] EXT4-fs (loop7): free_blocks=2415919504
[  228.615791][T11135] EXT4-fs (loop7): dirty_blocks=16
[  228.624464][T11135] EXT4-fs (loop7): Block reservation details
[  228.627425][T11135] EXT4-fs (loop7): i_reserved_data_blocks=1
[  228.663888][T10604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.679659][T11177] loop3: detected capacity change from 0 to 2048
[  229.712364][ T6571] Dev loop3: RDB in block 1 has bad checksum
[  229.718366][T11177] Dev loop3: RDB in block 1 has bad checksum
[  229.866129][T11190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2103'.
[  229.956967][T11197] loop3: detected capacity change from 0 to 1024
[  229.975421][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  230.005158][T11197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.040291][ T6262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.961037][T11235] loop7: detected capacity change from 0 to 4096
[  230.985801][T11236] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  230.986122][T11235] NILFS error (device loop7): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  230.991972][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:7' failed: Read-only file system
[  231.015880][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:7' failed: Read-only file system
[  231.016036][T11235] Remounting filesystem read-only
[  231.132425][T11241] netlink: 'syz.2.2122': attribute type 4 has an invalid length.
[  231.179855][T11244] openvswitch: netlink: Message has 4 unknown bytes.
[  231.183490][T11244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.189721][T11245] netlink: 'syz.2.2122': attribute type 4 has an invalid length.
[  231.244690][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2125'.
[  231.430856][   T33] audit: type=1326 audit(1755038273.897:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11258 comm="syz.3.2131" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f162af8ebe9 code=0x0
[  231.738934][T11272] openvswitch: netlink: Key 4 has unexpected len 0 expected 12
[  232.276844][T11282] futex_wake_op: syz.2.2142 tries to shift op by 32; fix this program
[  234.037058][T11318] netlink: zone id is out of range
[  234.044033][T11318] netlink: zone id is out of range
[  234.046014][T11318] netlink: zone id is out of range
[  234.048071][T11318] netlink: zone id is out of range
[  234.050041][T11318] netlink: zone id is out of range
[  234.056308][T11318] netlink: zone id is out of range
[  234.057197][T11321] bridge: RTM_NEWNEIGH with invalid ether address
[  234.058466][T11318] netlink: zone id is out of range
[  234.221162][   T33] audit: type=1326 audit(1755038276.687:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.3.2164" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  234.229074][   T33] audit: type=1326 audit(1755038276.687:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.3.2164" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  234.271173][   T33] audit: type=1326 audit(1755038276.687:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.3.2164" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  234.282269][   T33] audit: type=1326 audit(1755038276.687:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.3.2164" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  234.465172][T11339] netlink: 'syz.7.2168': attribute type 15 has an invalid length.
[  234.468269][T11339] netlink: 666 bytes leftover after parsing attributes in process `syz.7.2168'.
[  234.668289][T11344] netlink: 'syz.7.2169': attribute type 1 has an invalid length.
[  235.262443][T11353] loop3: detected capacity change from 0 to 32768
[  235.291925][T11353] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  235.312618][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system
[  235.318838][T11353] XFS (loop3): Ending clean mount
[  235.319704][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2179'.
[  235.331208][T11370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2179'.
[  235.349039][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system
[  235.369040][T11353] XFS (loop3): Quotacheck needed: Please wait.
[  235.394562][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  235.397751][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  235.400714][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  235.428803][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  235.448303][T11353] XFS (loop3): Quotacheck: Done.
[  235.510708][ T6262] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  235.965708][T11393] netlink: 'syz.7.2190': attribute type 1 has an invalid length.
[  235.968882][T11393] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2190'.
[  236.411614][T11409] usb usb8: check_ctrlrecip: process 11409 (syz.7.2194) requesting ep 01 but needs 81
[  236.415683][T11409] usb usb8: usbfs: process 11409 (syz.7.2194) did not claim interface 0 before use
[  236.755534][    T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  236.911495][    T9] usb 8-1: device descriptor read/64, error -71
[  237.161208][    T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  237.292692][    T9] usb 8-1: device descriptor read/64, error -71
[  237.402083][    T9] usb usb8-port1: attempt power cycle
[  237.646934][T11436] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2209'.
[  237.761119][    T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  237.783412][    T9] usb 8-1: device descriptor read/8, error -71
[  238.601122][    T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  238.621982][    T9] usb 8-1: device descriptor read/8, error -71
[  238.734374][    T9] usb usb8-port1: unable to enumerate USB device
[  238.946558][T11469] vlan2: entered allmulticast mode
[  239.927771][T11491] sit0: entered promiscuous mode
[  239.972984][T11491] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2232'.
[  240.132708][ T6065] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  240.155552][T11494] loop3: detected capacity change from 0 to 256
[  240.291154][ T6065] usb 8-1: Using ep0 maxpacket: 32
[  240.296667][ T6065] usb 8-1: config 0 has an invalid interface number: 35 but max is 0
[  240.300002][ T6065] usb 8-1: config 0 has no interface number 0
[  240.304488][ T6065] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  240.308230][ T6065] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.312770][ T6065] usb 8-1: Product: syz
[  240.314376][ T6065] usb 8-1: Manufacturer: syz
[  240.316156][ T6065] usb 8-1: SerialNumber: syz
[  240.323523][ T6065] usb 8-1: config 0 descriptor??
[  240.330614][ T6065] radio-si470x 8-1:0.35: could not find interrupt in endpoint
[  240.334887][ T6065] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5
[  240.796968][ T6065] radio-raremono 8-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  240.974636][T11511] erspan0: left allmulticast mode
[  240.976945][T11511] erspan0: left promiscuous mode
[  240.979509][T11511] bridge0: port 3(erspan0) entered disabled state
[  240.988678][T11511] bond0: (slave bridge0): Releasing backup interface
[  240.996185][T11511] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.009105][ T6065] radio-raremono 8-1:0.35: raremono_cmd_main failed (-71)
[  241.025584][T11511] net_ratelimit: 5 callbacks suppressed
[  241.025601][T11511] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  241.025822][ T6065] radio-raremono 8-1:0.35: V4L2 device registered as radio48
[  241.044055][ T6065] usb 8-1: USB disconnect, device number 6
[  241.051862][ T6065] radio-raremono 8-1:0.35: Thanko's Raremono disconnected
[  242.049052][ T6065] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  242.224283][ T6065] usb 8-1: Using ep0 maxpacket: 16
[  242.237921][ T6065] usb 8-1: config 0 has no interfaces?
[  242.245838][ T6065] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  242.249744][ T6065] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.255974][ T6065] usb 8-1: Product: syz
[  242.257518][ T6065] usb 8-1: Manufacturer: syz
[  242.259109][ T6065] usb 8-1: SerialNumber: syz
[  242.262825][ T6065] usb 8-1: config 0 descriptor??
[  242.351161][ T6010] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  242.477251][ T6065] usb 8-1: USB disconnect, device number 7
[  242.522525][ T6010] usb 4-1: Using ep0 maxpacket: 32
[  242.526539][ T6010] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  242.529669][ T6010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.534331][ T6010] usb 4-1: config 0 descriptor??
[  242.542061][ T6010] gspca_main: sunplus-2.14.0 probing 041e:400b
[  243.229495][T11576] loop7: detected capacity change from 0 to 64
[  243.304280][T11579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2270'.
[  243.308933][T11579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2270'.
[  243.371348][ T6010] gspca_sunplus: reg_r err -71
[  243.373561][ T6010] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  243.401505][ T6010] usb 4-1: USB disconnect, device number 28
[  243.595606][T11597] loop7: detected capacity change from 0 to 1024
[  243.616814][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  243.628984][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:7' failed: Read-only file system
[  243.652062][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  243.667493][   T27] hfsplus: b-tree write err: -5, ino 4
[  243.677240][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:7' failed: Read-only file system
[  243.756658][T11600] netlink: 'syz.2.2281': attribute type 16 has an invalid length.
[  243.759510][T11600] netlink: 'syz.2.2281': attribute type 17 has an invalid length.
[  243.784169][T11600] 8021q: adding VLAN 0 to HW filter on device team0
[  243.790263][T11600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  243.918492][T11602] loop7: detected capacity change from 0 to 32768
[  243.932227][T11602] XFS (loop7): Invalid device [./file0], error=-16
[  243.946918][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/ca7e2101-b8f1-4838-8e2d-7637b90620e6.tmp-b7:7' failed: Read-only file system
[  244.089713][T11622] loop7: detected capacity change from 0 to 1024
[  244.098183][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  244.104819][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:7' failed: Read-only file system
[  244.152518][T11622] hfsplus: cannot replace xattr
[  244.156157][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  244.166037][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:7' failed: Read-only file system
[  244.199248][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  244.204652][ T7887] hfsplus: b-tree write err: -5, ino 4
[  244.392302][T11640] loop3: detected capacity change from 0 to 1024
[  244.511720][ T6065] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  244.663496][ T6065] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  244.667293][ T6065] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.672946][ T6065] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[  244.677731][ T6065] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.684666][ T6065] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  244.688685][ T6065] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  244.693005][ T6065] usb 8-1: Product: syz
[  244.694736][ T6065] usb 8-1: Manufacturer: syz
[  244.702318][ T6065] cdc_wdm 8-1:1.0: skipping garbage
[  244.704674][ T6065] cdc_wdm 8-1:1.0: skipping garbage
[  244.707450][ T6065] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22
[  244.911602][ T6065] usb 8-1: USB disconnect, device number 8
[  245.389093][T11657] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  245.434653][T11659] loop3: detected capacity change from 0 to 1024
[  245.861890][T11663] loop7: detected capacity change from 0 to 40427
[  245.893083][T11663] F2FS-fs (loop7): invalid crc value
[  245.999719][T11669] loop3: detected capacity change from 0 to 32768
[  246.026320][T11669] ERROR: (device loop3): diAllocAG: numfree > numinos
[  246.026320][T11669] 
[  246.027395][T11663] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  246.039351][T11663] F2FS-fs (loop7): Start checkpoint disabled!
[  246.043693][T11669] ialloc: diAlloc returned -5!
[  246.046382][T11663] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  246.075471][T11663] F2FS-fs (loop7): disabling checkpoint not compatible with read-only
[  246.165688][T11686] overlayfs: failed to clone upperpath
[  246.479080][T11698] loop3: detected capacity change from 0 to 128
[  246.704061][ T7887] kworker/u10:6: attempt to access beyond end of device
[  246.704061][ T7887] loop3: rw=1, sector=145, nr_sectors = 40 limit=128
[  246.710291][ T7887] kworker/u10:6: attempt to access beyond end of device
[  246.710291][ T7887] loop3: rw=1, sector=193, nr_sectors = 8 limit=128
[  246.731876][ T7887] kworker/u10:6: attempt to access beyond end of device
[  246.731876][ T7887] loop3: rw=1, sector=209, nr_sectors = 8 limit=128
[  246.737727][ T7887] kworker/u10:6: attempt to access beyond end of device
[  246.737727][ T7887] loop3: rw=1, sector=225, nr_sectors = 8 limit=128
[  246.747288][ T7887] kworker/u10:6: attempt to access beyond end of device
[  246.747288][ T7887] loop3: rw=1, sector=241, nr_sectors = 8 limit=128
[  246.777736][ T7887] kworker/u10:6: attempt to access beyond end of device
[  246.777736][ T7887] loop3: rw=1, sector=257, nr_sectors = 8 limit=128
[  246.784021][ T7887] kworker/u10:6: attempt to access beyond end of device
[  246.784021][ T7887] loop3: rw=1, sector=273, nr_sectors = 8 limit=128
[  246.789806][ T7887] kworker/u10:6: attempt to access beyond end of device
[  246.789806][ T7887] loop3: rw=1, sector=289, nr_sectors = 8 limit=128
[  246.797346][ T7887] kworker/u10:6: attempt to access beyond end of device
[  246.797346][ T7887] loop3: rw=1, sector=305, nr_sectors = 8 limit=128
[  246.803704][ T7887] kworker/u10:6: attempt to access beyond end of device
[  246.803704][ T7887] loop3: rw=1, sector=321, nr_sectors = 8 limit=128
[  247.673922][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2335'.
[  247.676912][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2335'.
[  247.679624][T11727] netlink: 'syz.2.2335': attribute type 30 has an invalid length.
[  248.694167][ T6136] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  248.754114][T11756] netlink: 'syz.3.2347': attribute type 1 has an invalid length.
[  248.759384][T11756] netlink: 'syz.3.2347': attribute type 4 has an invalid length.
[  248.766356][T11756] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2347'.
[  248.796248][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'.
[  248.971166][ T6136] usb 8-1: Using ep0 maxpacket: 16
[  248.975343][ T6136] usb 8-1: config 254 has an invalid interface number: 235 but max is 0
[  248.984800][ T6136] usb 8-1: config 254 has no interface number 0
[  248.987663][ T6136] usb 8-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  248.992401][ T6136] usb 8-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  248.996728][ T6136] usb 8-1: config 254 interface 235 has no altsetting 0
[  249.003316][ T6136] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  249.007279][ T6136] usb 8-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3
[  249.011681][ T6136] usb 8-1: Product: syz
[  249.013544][ T6136] usb 8-1: Manufacturer: syz
[  249.015568][ T6136] usb 8-1: SerialNumber: syz
[  249.021139][T11745] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  249.027396][ T6136] usbtest 8-1:254.235: couldn't get endpoints, -22
[  249.030104][ T6136] usbtest 8-1:254.235: probe with driver usbtest failed with error -22
[  249.431573][  T792] usb 8-1: USB disconnect, device number 9
[  249.659104][   T33] audit: type=1326 audit(1755038292.117:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.2.2356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ead8ebe9 code=0x7ffc0000
[  249.666822][   T33] audit: type=1326 audit(1755038292.117:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.2.2356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ead8ebe9 code=0x7ffc0000
[  249.677736][   T33] audit: type=1326 audit(1755038292.117:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.2.2356" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f83ead8ebe9 code=0x7ffc0000
[  249.685400][   T33] audit: type=1326 audit(1755038292.117:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.2.2356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ead8ebe9 code=0x7ffc0000
[  249.695729][   T33] audit: type=1326 audit(1755038292.117:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11774 comm="syz.2.2356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ead8ebe9 code=0x7ffc0000
[  250.043576][T11796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2366'.
[  250.179189][T11805] loop3: detected capacity change from 0 to 1024
[  250.955840][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2373'.
[  251.160083][T11824] tap0: tun_chr_ioctl cmd 1074025680
[  251.220338][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2381'.
[  251.344770][T11840] tmpfs: Bad value for 'mpol'
[  251.562321][ T6065] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  251.701096][ T6136] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  251.711190][ T6065] usb 8-1: Using ep0 maxpacket: 8
[  251.715513][ T6065] usb 8-1: config index 0 descriptor too short (expected 6427, got 27)
[  251.718642][ T6065] usb 8-1: config 0 has an invalid interface number: 21 but max is 0
[  251.723704][ T6065] usb 8-1: config 0 has no interface number 0
[  251.726079][ T6065] usb 8-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  251.731887][ T6065] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  251.736341][ T6065] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  251.743667][ T6065] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  251.747247][ T6065] usb 8-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  251.750440][ T6065] usb 8-1: Product: syz
[  251.755188][ T6065] usb 8-1: config 0 descriptor??
[  251.762437][T11836] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  251.851061][ T6136] usb 4-1: Using ep0 maxpacket: 32
[  251.855713][ T6136] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  251.859701][ T6136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.870136][ T6136] usb 4-1: config 0 descriptor??
[  251.879064][ T6136] gspca_main: nw80x-2.14.0 probing 055f:d001
[  252.283799][ T6136] gspca_nw80x: reg_r err -71
[  252.287189][ T6136] nw80x 4-1:0.0: probe with driver nw80x failed with error -71
[  252.295950][ T6136] usb 4-1: USB disconnect, device number 29
[  252.551825][ T6065] usb 8-1: USB disconnect, device number 10
[  252.903624][T11866] loop3: detected capacity change from 0 to 4096
[  252.908102][T11866] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  252.916866][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:3' failed: Read-only file system
[  252.931575][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:3' failed: Read-only file system
[  253.025887][T11866] ntfs3(loop3): ino=9, mi_enum_attr
[  253.028263][T11866] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  253.036779][T11866] ntfs3(loop3): Failed to load $Secure (-22).
[  253.040803][T11866] ntfs3(loop3): Failed to initialize $Secure (-22).
[  253.059497][   T33] audit: type=1326 audit(1755038295.527:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11873 comm="syz.2.2402" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83ead8ebe9 code=0x0
[  253.148113][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'.
[  253.151487][T11880] loop7: detected capacity change from 0 to 128
[  253.159081][T11878] netlink: 'syz.3.2403': attribute type 30 has an invalid length.
[  253.178186][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'.
[  253.179965][ T6033] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  253.182264][T11878] netlink: 'syz.3.2403': attribute type 30 has an invalid length.
[  253.187138][ T6033] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  253.199514][ T6033] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  253.205038][ T6033] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  253.442666][T11882] loop3: detected capacity change from 0 to 32768
[  253.446515][T11882] XFS: noikeep mount option is deprecated.
[  253.449061][T11882] XFS: noikeep mount option is deprecated.
[  253.462786][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system
[  253.470513][T11882] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  253.481851][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system
[  253.505057][T11882] XFS (loop3): Ending clean mount
[  253.514192][T11882] XFS (loop3): Quotacheck needed: Please wait.
[  253.550398][T11882] XFS (loop3): Quotacheck: Done.
[  253.578344][ T6262] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  254.066017][T11914] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2416'.
[  254.070182][T11914] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  254.074103][T11914] openvswitch: netlink: Message has 8454 unknown bytes.
[  254.111950][  T792] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  254.338349][T11934] overlayfs: failed to clone upperpath
[  254.394584][  T792] usb 8-1: unable to get BOS descriptor or descriptor too short
[  254.399229][  T792] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  254.403539][  T792] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  254.413548][  T792] usb 8-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[  254.417477][  T792] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.421240][  T792] usb 8-1: Product: syz
[  254.423220][  T792] usb 8-1: Manufacturer: syz
[  254.425378][  T792] usb 8-1: SerialNumber: syz
[  254.430021][  T792] usb 8-1: config 0 descriptor??
[  254.434905][  T792] pn533_usb 8-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  254.699203][ T6065] usb 8-1: USB disconnect, device number 11
[  255.289950][T11960] loop3: detected capacity change from 0 to 32768
[  255.299846][T11960] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  255.329293][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.336959][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system
[  255.370646][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system
[  255.378799][T11960] XFS (loop3): Ending clean mount
[  255.384379][T11960] XFS (loop3): Quotacheck needed: Please wait.
[  255.427633][T11960] XFS (loop3): Quotacheck: Done.
[  256.000412][ T6262] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  256.223777][T11990] netlink: 'syz.7.2448': attribute type 2 has an invalid length.
[  256.494643][T12009] loop7: detected capacity change from 0 to 512
[  256.504028][T12009] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  256.511979][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  256.529209][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  256.576981][T12009] EXT4-fs (loop7): 1 truncate cleaned up
[  256.579552][T12009] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.635963][T10604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.898025][T12028] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.934404][T12028] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.017997][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2459'.
[  257.026389][T12031] netlink: 34 bytes leftover after parsing attributes in process `syz.7.2459'.
[  257.103124][T12028] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.107514][T12028] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.196150][T12028] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.200205][T12028] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.268469][T12028] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.277389][T12028] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.391115][ T6065] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  257.439024][ T6033] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  257.444330][ T6033] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.462381][T12044] loop3: detected capacity change from 0 to 512
[  257.480461][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  257.481397][T12044] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2471: bg 0: block 5: invalid block bitmap
[  257.490092][ T6033] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  257.494621][T12044] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  257.497082][ T6033] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.499907][T12044] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2471: invalid indirect mapped block 3 (level 2)
[  257.506549][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  257.507051][T12044] EXT4-fs (loop3): 1 orphan inode deleted
[  257.512560][ T6033] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  257.513737][T12044] EXT4-fs (loop3): 1 truncate cleaned up
[  257.516862][ T6033] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.519427][T12044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.541652][ T6065] usb 8-1: Using ep0 maxpacket: 16
[  257.544891][ T6065] usb 8-1: config 0 has an invalid interface number: 104 but max is 1
[  257.545131][ T6003] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  257.547679][ T6065] usb 8-1: config 0 has an invalid interface number: 104 but max is 1
[  257.547693][ T6065] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.547701][ T6065] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  257.547728][ T6065] usb 8-1: config 0 has no interface number 0
[  257.547748][ T6065] usb 8-1: config 0 interface 104 has no altsetting 1
[  257.550394][ T6065] usb 8-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  257.554694][ T6003] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.571078][ T6065] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.576813][ T6065] usb 8-1: Product: syz
[  257.579219][ T6065] usb 8-1: Manufacturer: syz
[  257.580812][ T6065] usb 8-1: SerialNumber: syz
[  257.585248][ T6065] usb 8-1: config 0 descriptor??
[  257.592033][ T6262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.794655][ T6065] asix 8-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  257.799091][ T6065] asix 8-1:0.104: probe with driver asix failed with error -71
[  257.805598][T12058] loop3: detected capacity change from 0 to 512
[  257.808532][T12058] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  257.830916][   T33] audit: type=1800 audit(1755038300.297:43): pid=12058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2476" name="file1" dev="loop3" ino=1048763 res=0 errno=0
[  257.842103][ T6065] usb 8-1: USB disconnect, device number 12
[  258.079020][T12074] overlayfs: failed to clone upperpath
[  258.152594][ T6136] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  258.316029][ T6136] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 183, changing to 11
[  258.321274][ T6136] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 50680, setting to 1024
[  258.326296][ T6136] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  258.341687][ T6136] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  258.345689][ T6136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  258.349872][ T6136] usb 4-1: SerialNumber: syz
[  258.362949][T12064] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  258.518035][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2491'.
[  258.592816][ T6136] usbtest 4-1:1.0: couldn't get endpoints, -22
[  258.595554][ T6136] usbtest 4-1:1.0: probe with driver usbtest failed with error -22
[  258.614644][ T6136] usb 4-1: USB disconnect, device number 30
[  260.344552][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2505'.
[  260.350003][T12125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2505'.
[  261.552196][T12151] netlink: 'syz.7.2520': attribute type 1 has an invalid length.
[  261.987356][T12173] loop7: detected capacity change from 0 to 8
[  262.002981][T12173] Filesystem uses "unknown" compression. This is not supported
[  262.128574][T12165] loop3: detected capacity change from 0 to 32768
[  262.159346][T12177] loop7: detected capacity change from 0 to 1024
[  262.166655][T12177] EXT4-fs: Ignoring removed orlov option
[  262.179551][ T5874] udevd[5874]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  262.187487][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/07000000-0000-0000-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system
[  262.202536][T12165] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  262.217431][ T5874] udevd[5874]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  262.224730][T12177] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.312191][T10604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.387428][ T6262] ocfs2: Unmounting device (7,3) on (node local)
[  262.778411][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'.
[  262.928092][T12204] netem: change failed
[  262.976996][T12206] loop7: detected capacity change from 0 to 128
[  263.000551][T12187] loop3: detected capacity change from 0 to 32768
[  263.045124][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:3' failed: Read-only file system
[  263.068472][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:3' failed: Read-only file system
[  263.204641][T12217] netlink: 'syz.2.2551': attribute type 7 has an invalid length.
[  263.213319][T12217] netlink: 'syz.2.2551': attribute type 8 has an invalid length.
[  264.102359][   T51] usb 8-1: new full-speed USB device number 13 using dummy_hcd
[  264.269657][   T33] audit: type=1326 audit(1755038306.737:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12258 comm="syz.2.2569" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ead8ebe9 code=0x7ffc0000
[  264.293638][   T33] audit: type=1326 audit(1755038306.747:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12258 comm="syz.2.2569" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ead8ebe9 code=0x7ffc0000
[  264.305971][   T51] usb 8-1: unable to get BOS descriptor or descriptor too short
[  264.310466][   T51] usb 8-1: not running at top speed; connect to a high speed hub
[  264.315782][   T51] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  264.319179][   T51] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  264.331088][   T33] audit: type=1326 audit(1755038306.747:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12258 comm="syz.2.2569" exe="/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f83ead8ebe9 code=0x7ffc0000
[  264.340056][   T51] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  264.348721][   T51] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  264.355231][   T51] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.357826][   T51] usb 8-1: Product: syz
[  264.359853][   T51] usb 8-1: Manufacturer: syz
[  264.362019][   T33] audit: type=1326 audit(1755038306.747:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12258 comm="syz.2.2569" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ead8ebe9 code=0x7ffc0000
[  264.371592][   T51] usb 8-1: SerialNumber: syz
[  264.374349][   T33] audit: type=1326 audit(1755038306.747:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12258 comm="syz.2.2569" exe="/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f83ead8ebe9 code=0x7ffc0000
[  264.387279][   T33] audit: type=1326 audit(1755038306.747:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12258 comm="syz.2.2569" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ead8ebe9 code=0x7ffc0000
[  264.404027][   T33] audit: type=1326 audit(1755038306.747:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12258 comm="syz.2.2569" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f83ead8ebe9 code=0x7ffc0000
[  264.427367][   T33] audit: type=1326 audit(1755038306.747:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12258 comm="syz.2.2569" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ead8ebe9 code=0x7ffc0000
[  264.631241][   T51] usb 8-1: USB disconnect, device number 13
[  264.684321][ T6571] udevd[6571]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  264.756967][T12287] netlink: 'syz.2.2583': attribute type 3 has an invalid length.
[  264.760429][T12287] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2583'.
[  264.799999][T12289] loop3: detected capacity change from 0 to 512
[  264.807888][T12289] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  264.884403][ T5972] Bluetooth: hci2: unexpected event for opcode 0x2064
[  264.890359][   T33] audit: type=1326 audit(1755038307.357:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.3.2587" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  264.906322][   T33] audit: type=1326 audit(1755038307.357:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.3.2587" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  265.259585][T12326] tap0: tun_chr_ioctl cmd 1074025677
[  265.264766][T12326] tap0: linktype set to 780
[  265.798343][T12360] loop7: detected capacity change from 0 to 1024
[  265.818840][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  265.828850][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:7' failed: Read-only file system
[  265.914591][T12365] : entered promiscuous mode
[  265.925300][ T1090] hfsplus: b-tree write err: -5, ino 4
[  266.056636][T12374] loop3: detected capacity change from 0 to 128
[  266.090267][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system
[  266.102482][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:3' failed: Read-only file system
[  266.117825][T12377] loop7: detected capacity change from 0 to 1024
[  266.157387][T12377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.180181][T12381] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3910373050/3910373052
[  266.368071][T10604] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.454244][T12393] loop7: detected capacity change from 0 to 256
[  266.461146][T12393] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  266.468417][T12393] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  266.499947][T12393] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  266.596376][T12401] loop3: detected capacity change from 0 to 128
[  266.624035][T12401] vxfs: WRONG superblock magic 7b3185b5 at 1
[  266.634172][T12401] vxfs: unsupported VxFS version (-1232326277)
[  266.978520][T12429] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2651'.
[  267.074756][T12423] loop7: detected capacity change from 0 to 40427
[  267.094606][T12423] F2FS-fs (loop7): Image doesn't support compression
[  267.097109][T12423] F2FS-fs (loop7): build fault injection rate: 690
[  267.125310][T12423] F2FS-fs (loop7): invalid crc value
[  267.190222][T12423] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  267.196030][T12423] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  267.229068][T10604] bio_check_eod: 98 callbacks suppressed
[  267.229082][T10604] syz-executor: attempt to access beyond end of device
[  267.229082][T10604] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  267.253566][T10604] CPU: 1 UID: 0 PID: 10604 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  267.253582][T10604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  267.253588][T10604] Call Trace:
[  267.253591][T10604]  <TASK>
[  267.253596][T10604]  dump_stack_lvl+0x189/0x250
[  267.253613][T10604]  ? __pfx_dump_stack_lvl+0x10/0x10
[  267.253622][T10604]  ? __pfx_queue_work_on+0x10/0x10
[  267.253630][T10604]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  267.253639][T10604]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  267.253651][T10604]  f2fs_handle_critical_error+0x37c/0x540
[  267.253664][T10604]  f2fs_write_end_io+0x886/0xb60
[  267.253714][T10604]  __submit_merged_bio+0x27a/0x6a0
[  267.253725][T10604]  __submit_merged_write_cond+0x255/0x530
[  267.253737][T10604]  f2fs_write_data_pages+0x261d/0x3000
[  267.253760][T10604]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  267.253790][T10604]  ? folios_put_refs+0x559/0x640
[  267.253803][T10604]  ? __pfx_folios_put_refs+0x10/0x10
[  267.253809][T10604]  ? rcu_is_watching+0x15/0xb0
[  267.253821][T10604]  ? __lock_acquire+0xab9/0xd20
[  267.253837][T10604]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  267.253846][T10604]  do_writepages+0x32e/0x550
[  267.253860][T10604]  ? do_raw_spin_unlock+0x4d/0x240
[  267.253870][T10604]  filemap_fdatawrite+0x199/0x240
[  267.253881][T10604]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  267.253908][T10604]  ? do_raw_spin_unlock+0x4d/0x240
[  267.253918][T10604]  f2fs_sync_dirty_inodes+0x31f/0x830
[  267.253934][T10604]  f2fs_write_checkpoint+0x95a/0x1df0
[  267.253953][T10604]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  267.253980][T10604]  ? kill_f2fs_super+0x298/0x6c0
[  267.253995][T10604]  kill_f2fs_super+0x2c3/0x6c0
[  267.254006][T10604]  ? __pfx_kill_f2fs_super+0x10/0x10
[  267.254014][T10604]  ? radix_tree_delete_item+0x2b6/0x400
[  267.254026][T10604]  ? shrinker_free+0x2ce/0x3e0
[  267.254035][T10604]  deactivate_locked_super+0xbc/0x130
[  267.254045][T10604]  cleanup_mnt+0x425/0x4c0
[  267.254053][T10604]  ? lockdep_hardirqs_on+0x9c/0x150
[  267.254064][T10604]  task_work_run+0x1d4/0x260
[  267.254075][T10604]  ? __pfx_task_work_run+0x10/0x10
[  267.254083][T10604]  ? __x64_sys_umount+0x122/0x160
[  267.254094][T10604]  ? exit_to_user_mode_loop+0x40/0x110
[  267.254106][T10604]  exit_to_user_mode_loop+0xec/0x110
[  267.254115][T10604]  do_syscall_64+0x2bd/0x3b0
[  267.254124][T10604]  ? lockdep_hardirqs_on+0x9c/0x150
[  267.254131][T10604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.254138][T10604]  ? exc_page_fault+0x9f/0xf0
[  267.254146][T10604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.254153][T10604] RIP: 0033:0x7febd198ff17
[  267.254162][T10604] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  267.254168][T10604] RSP: 002b:00007ffc5b185328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  267.254177][T10604] RAX: 0000000000000000 RBX: 00007febd1a11c05 RCX: 00007febd198ff17
[  267.254182][T10604] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5b1853e0
[  267.254186][T10604] RBP: 00007ffc5b1853e0 R08: 0000000000000000 R09: 0000000000000000
[  267.254190][T10604] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5b186470
[  267.254195][T10604] R13: 00007febd1a11c05 R14: 0000000000041357 R15: 00007ffc5b1864b0
[  267.254206][T10604]  </TASK>
[  267.254210][T10604] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  267.362052][    T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  267.565006][ T6571] udevd[6571]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system
[  267.694249][    T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  267.708466][    T9] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  267.732212][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  267.745806][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.844558][T12455] loop7: detected capacity change from 0 to 256
[  267.864603][T12455] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  267.968162][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2663'.
[  268.027541][ T6065] usb 4-1: USB disconnect, device number 31
[  268.034909][ T5972] Bluetooth: hci2: Malformed LE Event: 0x0d
[  268.827318][T12494] loop3: detected capacity change from 0 to 512
[  268.844549][T12494] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2680: iget: bad i_size value: 38620345925642
[  268.854600][T12494] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2680: couldn't read orphan inode 15 (err -117)
[  268.859834][T12494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.860327][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  268.903464][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  268.930403][ T6262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.127536][T12517] cgroup: fork rejected by pids controller in /syz7
[  271.081082][ T5972] Bluetooth: hci2: command 0x0406 tx timeout
[  271.081149][T12504] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  271.966622][T12504] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  271.979784][T12504] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  271.987391][T12504] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  271.990169][T12504] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  271.997012][T12504] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  272.076107][T12525] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  272.327967][ T6003] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.410903][ T6003] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.487220][ T6003] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.535302][ T6003] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.579483][ T6027] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  272.584598][ T6027] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  272.589446][ T6027] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  272.596174][ T6027] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  272.600118][ T6027] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  272.732483][ T6003] bridge_slave_1: left allmulticast mode
[  272.736860][ T6003] bridge_slave_1: left promiscuous mode
[  272.739341][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.743870][ T6003] bridge_slave_0: left allmulticast mode
[  272.745758][ T6003] bridge_slave_0: left promiscuous mode
[  272.747927][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.048503][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  273.054991][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  273.060203][ T6003] bond0 (unregistering): Released all slaves
[  273.162260][ T5972] Bluetooth: hci2: command 0x0406 tx timeout
[  273.236005][T12541] chnl_net:caif_netlink_parms(): no params data found
[  273.401302][ T6003] hsr_slave_0: left promiscuous mode
[  273.406224][ T6003] hsr_slave_1: left promiscuous mode
[  273.409220][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.415692][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  273.420040][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  273.423446][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  273.443964][ T6003] veth1_macvtap: left promiscuous mode
[  273.448385][ T6003] veth0_macvtap: left promiscuous mode
[  273.454459][ T6003] veth1_vlan: left promiscuous mode
[  273.456834][ T6003] veth0_vlan: left promiscuous mode
[  273.476978][T12549] loop3: detected capacity change from 0 to 32768
[  273.480373][T12549] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2703 (12549)
[  273.504909][T12549] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  273.509442][T12549] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  273.525709][T12549] BTRFS info (device loop3): using free-space-tree
[  273.539238][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:3' failed: Read-only file system
[  273.618453][T12549] BTRFS info (device loop3): checking UUID tree
[  273.714865][T12549] BTRFS info (device loop3): balance: start -d -m
[  273.748422][T12549] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata
[  273.756789][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:3' failed: Read-only file system
[  273.807333][T12549] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata
[  273.906306][T12549] BTRFS info (device loop3): found 9 extents, stage: move data extents
[  274.020488][T12549] BTRFS info (device loop3): found 1 extents, stage: update data pointers
[  274.059756][ T5972] Bluetooth: hci1: command 0x0c1a tx timeout
[  274.086258][T12549] BTRFS info (device loop3): balance: ended with status: 0
[  274.136999][ T6262] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  274.393698][ T6003] team0 (unregistering): Port device team_slave_1 removed
[  274.449520][ T6003] team0 (unregistering): Port device team_slave_0 removed
[  274.688399][ T5972] Bluetooth: hci3: command tx timeout
[  274.957379][T12576] loop3: detected capacity change from 0 to 512
[  274.963456][T12541] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.965916][T12541] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.968089][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  274.968378][T12541] bridge_slave_0: entered allmulticast mode
[  274.981582][T12541] bridge_slave_0: entered promiscuous mode
[  274.981998][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  274.986174][T12541] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.992162][T12541] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.995017][T12541] bridge_slave_1: entered allmulticast mode
[  274.998995][T12541] bridge_slave_1: entered promiscuous mode
[  275.011123][T12576] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  275.014319][T12576] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  275.017068][T12576] System zones: 0-1, 15-15, 18-18, 34-34
[  275.030070][T12576] EXT4-fs (loop3): orphan cleanup on readonly fs
[  275.042988][T12576] __quota_error: 5 callbacks suppressed
[  275.043001][T12576] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  275.049485][T12576] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  275.054877][T12541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.056315][T12576] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  275.060416][T12541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.078113][T12576] EXT4-fs (loop3): 1 truncate cleaned up
[  275.080842][T12576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  275.109230][T12576] fscrypt (loop3, inode 16): Error -61 getting encryption context
[  275.113451][T12541] team0: Port device team_slave_0 added
[  275.118683][T12576] fscrypt (loop3, inode 16): Error -61 getting encryption context
[  275.122066][T12541] team0: Port device team_slave_1 added
[  275.145863][ T6262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.184067][T12541] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.186469][T12541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.197658][T12541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.203018][T12541] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.205616][T12541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.222970][T12541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.241094][ T5972] Bluetooth: hci2: command 0x0406 tx timeout
[  275.290394][T12541] hsr_slave_0: entered promiscuous mode
[  275.293203][T12541] hsr_slave_1: entered promiscuous mode
[  275.296048][T12541] debugfs: 'hsr0' already exists in 'hsr'
[  275.298352][T12541] Cannot create hsr debugfs directory
[  275.485106][ T1088] wlan1: Trigger new scan to find an IBSS to join
[  276.092473][T12541] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  276.098894][T12541] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  276.105296][T12541] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  276.112277][T12541] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  276.133727][ T5972] Bluetooth: hci1: command 0x0c1a tx timeout
[  276.187328][T12541] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.203611][T12541] 8021q: adding VLAN 0 to HW filter on device team0
[  276.211906][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.215021][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  276.233348][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.236487][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.313820][T12541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  276.319010][T12541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  276.504964][T12541] 8021q: adding VLAN 0 to HW filter on device batadv0
[  276.696713][T12541] veth0_vlan: entered promiscuous mode
[  276.704905][T12541] veth1_vlan: entered promiscuous mode
[  276.730465][T12541] veth0_macvtap: entered promiscuous mode
[  276.736888][T12541] veth1_macvtap: entered promiscuous mode
[  276.750681][T12541] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.762089][ T5972] Bluetooth: hci3: command tx timeout
[  276.767725][T12541] batman_adv: batadv0: Interface activated: batadv_slave_1
[  276.776663][ T6003] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.780402][ T6003] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.785486][ T6003] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.789397][ T6003] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.855742][ T2271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.859067][ T2271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.887423][ T2271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.890851][ T2271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.335095][ T5972] Bluetooth: hci2: command 0x0406 tx timeout
[  277.415982][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2723'.
[  277.560560][T12651] loop7: detected capacity change from 0 to 512
[  277.564156][T12651] EXT4-fs: Ignoring removed bh option
[  277.566325][T12651] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  277.577058][T12651] EXT4-fs (loop7): 1 truncate cleaned up
[  277.579590][T12651] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.586619][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/\x86\x5b.tmp-b7:7' failed: Read-only file system
[  277.609887][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/\x86\x5b.tmp-b7:7' failed: Read-only file system
[  277.615436][T12541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.725559][T12663] netlink: 'syz.7.2735': attribute type 2 has an invalid length.
[  277.729018][T12663] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2735'.
[  278.201152][ T5972] Bluetooth: hci1: command 0x0c1a tx timeout
[  278.452007][T12665] loop3: detected capacity change from 0 to 131072
[  278.459748][T12665] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  278.463425][T12665] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  278.469411][T12665] F2FS-fs (loop3): invalid crc value
[  278.506172][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/1cfefce0-b2cb-4c1d-89df-92d67f97f153.tmp-b7:3' failed: Read-only file system
[  278.526218][T12665] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  278.533610][T12665] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  278.536707][T12665] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  278.842059][ T5972] Bluetooth: hci3: command tx timeout
[  280.367881][T12689] loop7: detected capacity change from 0 to 128
[  280.371569][T12689] EXT4-fs: Ignoring removed bh option
[  280.376387][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:7' failed: Read-only file system
[  280.395721][T12689] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  280.400146][T12689] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  280.428379][T12541] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  280.443226][ T7887] wlan1: Trigger new scan to find an IBSS to join
[  280.483727][T12692] loop7: detected capacity change from 0 to 256
[  280.500557][   T33] audit: type=1800 audit(1755038322.967:59): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2744" name="file1" dev="loop7" ino=1048772 res=0 errno=0
[  280.517909][T12692] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  280.525291][T12692] FAT-fs (loop7): Filesystem has been set read-only
[  280.664256][T12694] loop3: detected capacity change from 0 to 32768
[  280.686176][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:3' failed: Read-only file system
[  280.798454][   T33] audit: type=1326 audit(1755038323.267:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.3.2748" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f162af8ebe9 code=0x0
[  280.830123][T12698] loop7: detected capacity change from 0 to 32768
[  280.838842][T12698] bcachefs (/dev/loop7): error validating superblock: Invalid option shard_inode_numbers_bits: too big (max 8)
[  280.861464][T12698] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_big
[  280.930596][T12702] loop3: detected capacity change from 0 to 512
[  280.936432][ T5972] Bluetooth: hci3: command tx timeout
[  280.969364][T12702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.977637][ T5874] udevd[5874]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  280.977854][T12702] ext4 filesystem being mounted at /794/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.422824][ T1088] wlan1: Creating new IBSS network, BSSID 82:79:26:44:9f:a6
[  282.048601][T12710] loop7: detected capacity change from 0 to 2048
[  282.103085][T12710] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  282.113907][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/LinuxUDF.tmp-b7:7' failed: Read-only file system
[  282.122447][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/1234567812345678.tmp-b7:7' failed: Read-only file system
[  282.125569][T12710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  282.146450][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/LinuxUDF.tmp-b7:7' failed: Read-only file system
[  282.160641][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/1234567812345678.tmp-b7:7' failed: Read-only file system
[  282.314124][ T6262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.922286][T12736] kernel profiling enabled (shift: 17)
[  283.090755][T12738] vlan2: entered promiscuous mode
[  283.092587][T12738] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode
[  283.276500][T12744] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2766'.
[  284.157064][   T33] audit: type=1800 audit(1755038326.627:61): pid=12761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2773" name="bus" dev="overlay" ino=225 res=0 errno=0
[  284.268226][T12766] loop7: detected capacity change from 0 to 1024
[  284.278994][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:7' failed: Read-only file system
[  284.307996][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:7' failed: Read-only file system
[  284.396374][ T6027] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  284.402829][ T6027] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  284.406380][ T6027] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  284.410331][ T6027] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  284.413248][ T6027] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  284.526111][T12777] loop3: detected capacity change from 0 to 256
[  284.537237][T12777] FAT-fs (loop3): Directory bread(block 64) failed
[  284.539682][T12777] FAT-fs (loop3): Directory bread(block 65) failed
[  284.542486][T12777] FAT-fs (loop3): Directory bread(block 66) failed
[  284.544780][T12777] FAT-fs (loop3): Directory bread(block 67) failed
[  284.547050][T12777] FAT-fs (loop3): Directory bread(block 68) failed
[  284.549652][T12777] FAT-fs (loop3): Directory bread(block 69) failed
[  284.553073][T12777] FAT-fs (loop3): Directory bread(block 70) failed
[  284.555247][T12777] FAT-fs (loop3): Directory bread(block 71) failed
[  284.557446][T12777] FAT-fs (loop3): Directory bread(block 72) failed
[  284.559656][T12777] FAT-fs (loop3): Directory bread(block 73) failed
[  284.675858][T12767] chnl_net:caif_netlink_parms(): no params data found
[  284.841878][T12767] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.844356][T12767] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.848385][T12767] bridge_slave_0: entered allmulticast mode
[  284.854822][T12767] bridge_slave_0: entered promiscuous mode
[  284.860112][T12767] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.870447][T12767] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.874832][T12767] bridge_slave_1: entered allmulticast mode
[  284.879656][T12767] bridge_slave_1: entered promiscuous mode
[  284.987356][T12767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.994965][T12767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.058679][T12767] team0: Port device team_slave_0 added
[  285.072230][T12767] team0: Port device team_slave_1 added
[  285.181438][T12767] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.184029][T12767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.193387][T12767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.208554][T12767] batman_adv: batadv0: Adding interface: batadv_slave_1
[  285.211925][T12767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.220825][T12767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  285.408942][T12767] hsr_slave_0: entered promiscuous mode
[  285.415810][T12767] hsr_slave_1: entered promiscuous mode
[  285.420839][T12767] debugfs: 'hsr0' already exists in 'hsr'
[  285.424125][T12767] Cannot create hsr debugfs directory
[  285.957348][T12767] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  285.974224][T12767] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  286.012431][T12767] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  286.051464][T12767] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  286.234766][T12767] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.281692][T12767] 8021q: adding VLAN 0 to HW filter on device team0
[  286.297242][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.300427][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.315437][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.318255][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.350004][T12767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  286.365552][T12767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  286.449329][ T6027] Bluetooth: hci4: command tx timeout
[  286.579627][T12767] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.662119][T12808] loop3: detected capacity change from 0 to 32768
[  286.677970][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system
[  286.696071][T12808] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  286.714017][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system
[  286.808950][T12767] veth0_vlan: entered promiscuous mode
[  286.817946][ T6262] (syz-executor,6262,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  286.818545][T12767] veth1_vlan: entered promiscuous mode
[  286.829262][ T6262] ocfs2: Unmounting device (7,3) on (node local)
[  287.207655][T12767] veth0_macvtap: entered promiscuous mode
[  287.213642][T12767] veth1_macvtap: entered promiscuous mode
[  287.224108][T12767] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.234118][T12839] [U] 2
[  287.234457][T12767] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.236060][T12838] [U] 2
[  287.244775][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.255733][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.261636][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.279407][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.358954][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.369409][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.393680][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.397338][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.428153][T12845] loop3: detected capacity change from 0 to 256
[  287.434360][T12845] exfat: Deprecated parameter 'utf8'
[  287.439265][T12845] exfat: Deprecated parameter 'namecase'
[  287.446631][T12845] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  287.604828][T12851] netlink: 'syz.8.2801': attribute type 1 has an invalid length.
[  287.607456][T12851] netlink: 'syz.8.2801': attribute type 2 has an invalid length.
[  287.608541][T12855] netlink: 'syz.7.2803': attribute type 1 has an invalid length.
[  287.610051][T12851] netlink: 1172 bytes leftover after parsing attributes in process `syz.8.2801'.
[  287.613755][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2803'.
[  287.739635][T12865] loop3: detected capacity change from 0 to 1024
[  287.743613][T12865] EXT4-fs: Ignoring removed orlov option
[  287.756401][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  287.784275][T12865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.809181][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  287.817043][T12870] loop8: detected capacity change from 0 to 7
[  287.839331][ T6571] Dev loop8: unable to read RDB block 7
[  287.846109][ T6571]  loop8: unable to read partition table
[  287.848854][ T6571] loop8: partition table beyond EOD, truncated
[  287.891462][ T6262] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  287.931728][ T6262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.959211][T12870] Dev loop8: unable to read RDB block 7
[  287.969838][T12870]  loop8: unable to read partition table
[  287.982756][T12870] loop8: partition table beyond EOD, truncated
[  287.987938][T12870] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[  288.177978][T12877] loop3: detected capacity change from 0 to 512
[  288.208505][T12877] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  288.237070][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system
[  288.263403][T12877] EXT4-fs (loop3): 1 truncate cleaned up
[  288.266108][T12877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.295434][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system
[  288.395960][ T6262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.521187][ T6027] Bluetooth: hci4: command tx timeout
[  288.915982][T12880] loop7: detected capacity change from 0 to 32768
[  288.933397][T12880] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  288.946251][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:7' failed: Read-only file system
[  288.979495][T12880] XFS (loop7): Ending clean mount
[  288.989808][T12880] XFS (loop7): Quotacheck needed: Please wait.
[  289.058188][T12880] XFS (loop7): Quotacheck: Done.
[  289.155524][T12541] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  289.249668][T12904] loop8: detected capacity change from 0 to 512
[  289.265402][T12904] EXT4-fs: Ignoring removed orlov option
[  289.277704][T12904] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  289.331854][T12904] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  289.336282][T12904] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.2820: corrupted in-inode xattr: e_value size too large
[  289.357102][T12904] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2820: couldn't read orphan inode 15 (err -117)
[  289.367372][ T6571] udevd[6571]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system
[  289.393210][T12904] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.406026][ T6571] udevd[6571]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system
[  289.435917][T12907] bridge0: entered promiscuous mode
[  289.447358][T12907] bridge0: port 3(macsec1) entered blocking state
[  289.453015][T12907] bridge0: port 3(macsec1) entered disabled state
[  289.456648][T12907] macsec1: entered allmulticast mode
[  289.459302][T12904] EXT4-fs error (device loop8): ext4_check_dx_root:2203: inode #2: comm syz.8.2820: Corrupt dir, invalid name_len for '..', running e2fsck is recommended
[  289.476784][T12907] bridge0: entered allmulticast mode
[  289.484955][T12907] macsec1: left allmulticast mode
[  289.486760][T12907] bridge0: left allmulticast mode
[  289.495823][T12907] bridge0: left promiscuous mode
[  289.570077][T12767] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.644045][T12909] netlink: 2384 bytes leftover after parsing attributes in process `syz.8.2822'.
[  289.907199][T12923] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2830'.
[  290.123207][T12938] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2837'.
[  290.130655][T12939] loop8: detected capacity change from 0 to 64
[  290.349124][   T33] audit: type=1326 audit(1755038332.817:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  290.382625][   T33] audit: type=1326 audit(1755038332.817:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  290.390211][   T33] audit: type=1326 audit(1755038332.827:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  290.403995][   T33] audit: type=1326 audit(1755038332.827:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  290.414307][   T33] audit: type=1326 audit(1755038332.827:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  290.423355][   T33] audit: type=1326 audit(1755038332.827:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  290.444531][   T33] audit: type=1326 audit(1755038332.837:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  290.463133][   T33] audit: type=1326 audit(1755038332.837:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  290.482389][   T33] audit: type=1326 audit(1755038332.837:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  290.494478][T12958] loop3: detected capacity change from 0 to 4096
[  290.501435][   T33] audit: type=1326 audit(1755038332.837:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12951 comm="syz.3.2843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162af8ebe9 code=0x7ffc0000
[  290.512647][T12958] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  290.526880][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  290.543341][T12958] ntfs3(loop3): ino=1d, mi_enum_attr
[  290.545512][T12958] ntfs3(loop3): ino=1d, mi_enum_attr
[  290.548942][T12958] ntfs3(loop3): ino=1d, mi_enum_attr
[  290.556111][T12958] ntfs3(loop3): ino=1b, "file0" ntfs_readdir
[  290.602061][ T6027] Bluetooth: hci4: command tx timeout
[  291.397253][T12991] netlink: 'syz.7.2862': attribute type 4 has an invalid length.
[  291.538203][T12999] loop8: detected capacity change from 0 to 512
[  291.548967][T12999] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  291.566425][T12999] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2866: invalid indirect mapped block 4294967295 (level 1)
[  291.586858][T12999] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2866: invalid indirect mapped block 4294967295 (level 1)
[  291.593091][T12999] EXT4-fs (loop8): 2 truncates cleaned up
[  291.596013][T12999] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.668177][T12767] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.892860][T13013] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  291.895718][T13013] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  291.899514][T13016] openvswitch: netlink: Message has 8 unknown bytes.
[  291.908031][T13016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.908346][T13013] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  291.918677][T13013] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  291.929816][T13013] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  291.963388][T13013] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  291.965661][T13013] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  291.994471][T13013] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  292.413238][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2878'.
[  292.429417][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2878'.
[  293.191359][T13045] loop8: detected capacity change from 0 to 8
[  293.626258][T13063] netlink: 'syz.8.2894': attribute type 1 has an invalid length.
[  293.629785][T13063] netlink: 'syz.8.2894': attribute type 4 has an invalid length.
[  293.633169][T13063] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.2894'.
[  293.637550][T13063] netlink: 'syz.8.2894': attribute type 1 has an invalid length.
[  293.641434][T13063] netlink: 'syz.8.2894': attribute type 4 has an invalid length.
[  293.644083][T13063] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.2894'.
[  293.683002][T13065] loop8: detected capacity change from 0 to 8
[  293.705215][T13065] SQUASHFS error: Failed to read block 0x4de: -5
[  293.707853][T13065] SQUASHFS error: Failed to read block 0x4de: -5
[  293.710507][T13065] SQUASHFS error: Failed to read block 0x4de: -5
[  293.713323][T13065] SQUASHFS error: Failed to read block 0x4de: -5
[  293.715533][T13065] SQUASHFS error: Failed to read block 0x4de: -5
[  293.772288][T13067] loop8: detected capacity change from 0 to 16
[  293.794895][T13067] erofs (device loop8): negative i_size @ nid 36
[  293.799180][ T6571] udevd[6571]: symlink '../../loop8' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:8' failed: Read-only file system
[  293.960828][ T6027] Bluetooth: hci3: command 0x0c1a tx timeout
[  293.961239][ T6026] Bluetooth: hci2: command 0x0406 tx timeout
[  293.966031][ T5972] Bluetooth: hci1: command 0x0c1a tx timeout
[  294.040933][ T5972] Bluetooth: hci4: command 0x0c1a tx timeout
[  294.077425][T13079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.083419][T13081] loop8: detected capacity change from 0 to 128
[  294.110189][T13081] hpfs: hpfs_map_4sectors(): unaligned read
[  294.116444][T13081] hpfs: filesystem error: can't load hotfix map; already mounted read-only
[  294.126250][T13081] hpfs: hpfs_map_sector(): read error
[  294.207430][T13083] loop3: detected capacity change from 0 to 4096
[  294.233642][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  294.243510][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:3' failed: Read-only file system
[  294.263206][ T6026] Bluetooth: hci4: unexpected event for opcode 0x1408
[  295.627503][T13102] loop3: detected capacity change from 0 to 128
[  295.637740][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/8AF2-7630.tmp-b7:3' failed: Read-only file system
[  295.660995][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  295.661008][   T33] audit: type=1804 audit(1755038594.127:75): pid=13102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2912" name="/newroot/842/file0/bus" dev="loop3" ino=1048780 res=1 errno=0
[  295.661330][T13102] Invalid ELF header magic: != ELF
[  295.663065][   T33] audit: type=1800 audit(1755038594.127:76): pid=13102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2912" name="bus" dev="loop3" ino=1048780 res=0 errno=0
[  295.785583][T13110] netlink: 'syz.3.2915': attribute type 10 has an invalid length.
[  295.799036][T13110] bond0: (slave bond_slave_0): Releasing backup interface
[  295.809588][T13114] loop8: detected capacity change from 0 to 2048
[  295.826823][T13114] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  295.829399][ T6571] udevd[6571]: symlink '../../loop8' '/dev/disk/by-label/LinuxUDF.tmp-b7:8' failed: Read-only file system
[  295.833054][T13114] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  295.839667][ T6571] udevd[6571]: symlink '../../loop8' '/dev/disk/by-uuid/1234567812345678.tmp-b7:8' failed: Read-only file system
[  295.880094][ T6571] udevd[6571]: symlink '../../loop8' '/dev/disk/by-label/LinuxUDF.tmp-b7:8' failed: Read-only file system
[  295.887613][ T6571] udevd[6571]: symlink '../../loop8' '/dev/disk/by-uuid/1234567812345678.tmp-b7:8' failed: Read-only file system
[  295.898289][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e851400: rx timeout, send abort
[  296.040731][ T6026] Bluetooth: hci3: command 0x0c1a tx timeout
[  296.397870][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e850800: rx timeout, send abort
[  296.403819][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e851400: abort rx timeout. Force session deactivation
[  296.650103][T13125] loop8: detected capacity change from 0 to 32768
[  296.657152][T13125] XFS: attr2 mount option is deprecated.
[  296.710110][T13125] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  296.718533][ T6571] udevd[6571]: symlink '../../loop8' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:8' failed: Read-only file system
[  296.744148][ T6571] udevd[6571]: symlink '../../loop8' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:8' failed: Read-only file system
[  296.770166][T13125] XFS (loop8): Ending clean mount
[  296.813765][T13125] XFS (loop8): Quotacheck needed: Please wait.
[  296.900999][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e850800: abort rx timeout. Force session deactivation
[  296.905598][    C1] vcan0: j1939_tp_rxtimer: 0xffff88812b91d800: rx timeout, send abort
[  296.905975][T13125] XFS (loop8): Quotacheck: Done.
[  296.909959][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88812b91d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  297.033699][T12767] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  297.436959][T13137] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2924'.
[  297.664854][T13135] loop7: detected capacity change from 0 to 32768
[  297.691276][T13135] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2923 (13135)
[  297.719358][T13135] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  297.727605][T13135] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  297.743567][T13135] BTRFS info (device loop7): using free-space-tree
[  297.802136][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'.
[  297.855653][T12541] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  298.121990][ T6026] Bluetooth: hci3: command 0x0c1a tx timeout
[  298.197133][T13167] loop3: detected capacity change from 0 to 32768
[  298.208135][T13173] loop8: detected capacity change from 0 to 256
[  298.280469][ T6026] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  298.283795][ T6026] Bluetooth: hci4: Injecting HCI hardware error event
[  299.737661][T13222] geneve2: entered promiscuous mode
[  300.019638][    T9] IPVS: starting estimator thread 0...
[  300.114584][T13236] IPVS: using max 53 ests per chain, 127200 per kthread
[  301.011472][T13256] IPVS: Scheduler module ip_vs_sip not found
[  301.015729][T13258] IPVS: length: 146 != 8
[  301.866551][T13277] loop7: detected capacity change from 0 to 2048
[  301.878623][T13277] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  301.896789][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/LinuxUDF.tmp-b7:7' failed: Read-only file system
[  301.912446][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/1234567812345678.tmp-b7:7' failed: Read-only file system
[  301.978314][T13286] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2979'.
[  301.993861][T13286] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2979'.
[  302.098790][T13296] loop7: detected capacity change from 0 to 128
[  302.191514][T13301] openvswitch: netlink: Multiple metadata blocks provided
[  302.209184][T13302] loop8: detected capacity change from 0 to 256
[  302.222781][T13305] loop3: detected capacity change from 0 to 1024
[  302.229492][T13305] EXT4-fs: Ignoring removed bh option
[  302.234759][T13305] EXT4-fs: inline encryption not supported
[  302.248260][T13305] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  302.250334][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:3' failed: Read-only file system
[  302.270321][T13305] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  302.278748][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:3' failed: Read-only file system
[  302.298279][T13305] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.2988: lblock 2 mapped to illegal pblock 2 (length 1)
[  302.308666][T13305] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  302.313948][T13305] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2988: lblock 0 mapped to illegal pblock 48 (length 1)
[  302.323345][T13305] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  302.339957][T13305] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2988: Failed to acquire dquot type 0
[  302.344214][T13305] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  302.347964][T13305] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2988: mark_inode_dirty error
[  302.352147][T13305] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  302.355659][T13305] EXT4-fs (loop3): 1 orphan inode deleted
[  302.358315][T13305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.364836][   T27] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  302.375556][   T27] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  302.378477][   T27] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u10:0: Failed to release dquot type 0
[  302.408646][T13305] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2988: lblock 0 mapped to illegal pblock 48 (length 1)
[  302.420417][T13305] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117
[  302.466034][ T6262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.516183][T13314] loop8: detected capacity change from 0 to 32768
[  302.540831][T13314] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  302.544264][ T6571] udevd[6571]: symlink '../../loop8' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:8' failed: Read-only file system
[  302.567823][ T6571] udevd[6571]: symlink '../../loop8' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:8' failed: Read-only file system
[  302.575056][T13326] loop3: detected capacity change from 0 to 136
[  302.581945][T13314] XFS (loop8): Ending clean mount
[  302.596142][ T5874] udevd[5874]: symlink '../../loop3' '/dev/disk/by-label/CDROM.tmp-b7:3' failed: Read-only file system
[  302.603081][T13314] XFS (loop8): Quotacheck needed: Please wait.
[  302.603143][ T5874] udevd[5874]: symlink '../../loop3' '/dev/disk/by-uuid/202\x20-11-22-16-59-57-00.tmp-b7:3' failed: Read-only file system
[  302.619173][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/CDROM.tmp-b7:3' failed: Read-only file system
[  302.625797][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/202\x20-11-22-16-59-57-00.tmp-b7:3' failed: Read-only file system
[  302.683475][T13316] loop7: detected capacity change from 0 to 32768
[  302.687878][ T6262] iso9660: Corrupted directory entry in block 2 of inode 1472
[  302.698645][T13314] XFS (loop8): Quotacheck: Done.
[  302.707813][ T6262] iso9660: Corrupted directory entry in block 2 of inode 1472
[  302.722770][T13316] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  302.740983][T12767] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  302.748846][T13316] XFS (loop7): Ending clean mount
[  302.758052][T13316] XFS (loop7): Quotacheck needed: Please wait.
[  302.832446][T13316] XFS (loop7): Quotacheck: Done.
[  302.840843][T13338] loop3: detected capacity change from 0 to 512
[  302.843878][T13338] EXT4-fs (loop3): bad s_want_extra_isize: 11962
[  302.949433][T12541] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  303.140829][T13354] program syz.7.3004 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  303.224543][T13359] loop7: detected capacity change from 0 to 764
[  303.268993][T13359] rock: directory entry would overflow storage
[  303.284463][T13359] rock: sig=0x4654, size=5, remaining=4
[  303.397991][ T6136] IPVS: starting estimator thread 0...
[  303.599882][T13366] IPVS: using max 77 ests per chain, 184800 per kthread
[  304.297371][T13382] loop3: detected capacity change from 0 to 164
[  304.326545][T13382] isofs_fill_super: root inode is not a directory. Corrupted media?
[  304.716223][T13390] loop3: detected capacity change from 0 to 256
[  306.053948][T13398] bond1: entered allmulticast mode
[  307.226888][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3038'.
[  307.363624][T13437] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3040'.
[  307.404843][T13435] loop7: detected capacity change from 0 to 2048
[  307.435168][T13441] random: crng reseeded on system resumption
[  307.709184][ T6010] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  307.877407][ T6010] usb 9-1: unable to get BOS descriptor or descriptor too short
[  307.885650][ T6010] usb 9-1: not running at top speed; connect to a high speed hub
[  307.891045][ T6010] usb 9-1: config 1 has an invalid interface number: 138 but max is 0
[  307.894210][ T6010] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  307.897860][ T6010] usb 9-1: config 1 has no interface number 0
[  307.902894][ T6010] usb 9-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  307.909936][ T6010] usb 9-1: config 1 interface 138 has no altsetting 0
[  307.916211][ T6010] usb 9-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[  307.925043][ T6010] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.927946][ T6010] usb 9-1: Product: syz
[  307.929910][ T6010] usb 9-1: Manufacturer: syz
[  307.933204][ T6010] usb 9-1: SerialNumber: syz
[  308.196684][ T6010] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  308.355335][ T6010] usb 9-1: USB disconnect, device number 2
[  308.736820][T13453] loop7: detected capacity change from 0 to 1024
[  308.772276][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  308.816955][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:7' failed: Read-only file system
[  308.890842][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  308.902588][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:7' failed: Read-only file system
[  308.967532][T13458] loop8: detected capacity change from 0 to 512
[  308.980926][T13458] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  308.992421][ T6571] udevd[6571]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  309.034623][ T6571] udevd[6571]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  309.034835][T13458] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  309.042777][T13458] EXT4-fs (loop8): failed to initialize system zone (-117)
[  309.045522][T13458] EXT4-fs (loop8): mount failed
[  309.578873][ T6136] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  309.626719][T13471] netlink: 209840 bytes leftover after parsing attributes in process `syz.7.3054'.
[  309.729465][ T6136] usb 9-1: Using ep0 maxpacket: 16
[  309.736088][ T6136] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.740614][ T6136] usb 9-1: config 0 interface 0 has no altsetting 0
[  309.743322][ T6136] usb 9-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00
[  309.749112][ T6136] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.755557][ T6136] usb 9-1: config 0 descriptor??
[  310.332371][ T6136] logitech 0003:046D:C295.000A: unknown main item tag 0x0
[  310.335399][ T6136] logitech 0003:046D:C295.000A: unknown main item tag 0x0
[  310.338167][ T6136] logitech 0003:046D:C295.000A: unknown main item tag 0x0
[  310.346122][ T6136] logitech 0003:046D:C295.000A: unknown main item tag 0x0
[  310.349743][ T6136] logitech 0003:046D:C295.000A: unknown main item tag 0x0
[  310.356525][ T6136] logitech 0003:046D:C295.000A: hidraw0: USB HID v0.05 Device [HID 046d:c295] on usb-dummy_hcd.8-1/input0
[  310.363907][ T6136] logitech 0003:046D:C295.000A: no inputs found
[  310.405653][T13491] 9pnet: p9_errstr2errno: server reported unknown error @c0xffffffffffffffff
[  310.523768][T13493] loop3: detected capacity change from 0 to 164
[  310.527146][  T124] usb 9-1: USB disconnect, device number 3
[  310.548200][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/CDROM\x20\x20\x20\x20Р.tmp-b7:3' failed: Read-only file system
[  310.560708][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:3' failed: Read-only file system
[  310.563470][T13493] iso9660: Corrupted directory entry in block 4 of inode 1792
[  310.583624][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/CDROM\x20\x20\x20\x20Р.tmp-b7:3' failed: Read-only file system
[  310.592768][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:3' failed: Read-only file system
[  310.864346][T13503] veth1_vlan: entered allmulticast mode
[  310.877231][T13503] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  311.273210][T13515] loop8: detected capacity change from 0 to 32768
[  311.281570][T13515] bcachefs (/dev/loop8): error validating superblock: Invalid option btree_node_size: must be a power of two
[  311.286440][T13515] bcachefs: bch2_fs_get_tree() error: opt_parse_error
[  311.440460][ T1151] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  311.628924][ T6010] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  311.789468][ T6010] usb 9-1: Using ep0 maxpacket: 8
[  311.793524][ T6010] usb 9-1: config 0 has an invalid interface number: 176 but max is 2
[  311.797014][ T6010] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  311.801578][ T6010] usb 9-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  311.805416][ T6010] usb 9-1: config 0 has no interface number 0
[  311.807998][ T6010] usb 9-1: config 0 has no interface number 1
[  311.814186][ T6010] usb 9-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  311.818132][ T6010] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.828372][ T6010] usb 9-1: config 0 descriptor??
[  311.833004][ T6010] usb 9-1: unknown number of interfaces: 2
[  311.968712][T13524] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  311.971573][T13524] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  311.978724][T13524] vhci_hcd vhci_hcd.0: Device attached
[  312.036386][  T124] usb 9-1: USB disconnect, device number 4
[  312.158659][ T6010] vhci_hcd: vhci_device speed not set
[  312.218743][ T6010] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  312.272183][  T792] usb 4-1: new low-speed USB device number 32 using dummy_hcd
[  312.421249][  T792] usb 4-1: config 0 has no interfaces?
[  312.423813][  T792] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  312.427653][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.435804][  T792] usb 4-1: config 0 descriptor??
[  312.624641][T13530] loop8: detected capacity change from 0 to 256
[  312.654563][T13530] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  312.665296][T13525] vhci_hcd: connection reset by peer
[  312.669556][  T124] usb 4-1: USB disconnect, device number 32
[  312.678112][ T6003] vhci_hcd: stop threads
[  312.686608][ T6003] vhci_hcd: release socket
[  312.701445][ T6003] vhci_hcd: disconnect device
[  312.729084][ T6010] vhci_hcd: vhci_device speed not set
[  312.749226][T13532] loop8: detected capacity change from 0 to 1024
[  312.765336][   T33] audit: type=1800 audit(1755038611.239:77): pid=13532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3082" name="file1" dev="loop8" ino=20 res=0 errno=0
[  312.778105][T13532] syz.8.3082: attempt to access beyond end of device
[  312.778105][T13532] loop8: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  312.834959][T13534] loop8: detected capacity change from 0 to 128
[  313.015570][T13538] loop8: detected capacity change from 0 to 4096
[  313.020170][T13538] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  313.043821][T13538] ntfs3(loop8): Failed to initialize $Extend/$Reparse.
[  313.073922][T13538] ntfs3(loop8): ino=1e, mi_enum_attr
[  313.076231][T13538] ntfs3(loop8): ino=1e, mi_enum_attr
[  313.654619][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3099'.
[  313.722967][   T33] audit: type=1326 audit(1755038612.199:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13570 comm="syz.8.3102" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61d0f8ebe9 code=0x0
[  314.190535][T13588] loop3: detected capacity change from 0 to 1024
[  314.199716][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  314.227680][T13588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.249141][T13588] EXT4-fs error (device loop3): __ext4_new_inode:1073: comm syz.3.3110: reserved inode found cleared - inode=2
[  314.259712][T13588] EXT4-fs (loop3): Remounting filesystem read-only
[  314.285121][ T6262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.527660][T13611] loop3: detected capacity change from 0 to 4096
[  314.532050][T13611] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  314.553200][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:3' failed: Read-only file system
[  314.565829][T13611] ntfs3(loop3): ino=19, mi_enum_attr
[  314.571033][T13611] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  314.573710][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:3' failed: Read-only file system
[  314.706752][T13616] netlink: 5636 bytes leftover after parsing attributes in process `syz.3.3119'.
[  315.030616][ T6136] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  315.193503][ T6136] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  315.197642][ T6136] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  315.208136][ T6136] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  315.221539][ T6136] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  315.224931][ T6136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.235076][ T6136] usb 4-1: Product: syz
[  315.236577][ T6136] usb 4-1: Manufacturer: syz
[  315.239172][ T6136] usb 4-1: SerialNumber: syz
[  315.248270][ T6136] usb 4-1: config 0 descriptor??
[  315.470649][ T6136] usb 4-1: Found UVC 34.00 device syz (8086:0b5b)
[  315.474116][ T6136] usb 4-1: No valid video chain found.
[  315.485339][ T6136] usb 4-1: USB disconnect, device number 33
[  316.808144][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  317.458047][    T9] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  317.472278][T13667] syzkaller0: entered promiscuous mode
[  317.474218][T13667] syzkaller0: entered allmulticast mode
[  317.640936][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  317.645002][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  317.649616][    T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  317.662390][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.667321][    T9] usb 4-1: config 0 descriptor??
[  317.687201][    T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  317.690520][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  317.698070][    T9] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  317.701966][    T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  317.704924][    T9] usb 4-1: media controller created
[  317.720306][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  317.729235][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  317.731480][    T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  317.745759][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15
[  317.763079][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[  317.765440][    T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  317.904232][ T6065] usb 4-1: USB disconnect, device number 34
[  318.156503][ T6065] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  320.630818][T13691] loop7: detected capacity change from 0 to 1024
[  320.634762][T13691] hfsplus: Bad value for 'session'
[  320.639656][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  320.642833][ T6026] Bluetooth: hci3: unexpected event for opcode 0x0809
[  320.644854][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:7' failed: Read-only file system
[  321.246732][    C1] vcan0: j1939_tp_rxtimer: 0xffff888112621c00: rx timeout, send abort
[  321.253064][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888112621c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  321.331111][    T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  321.495876][    T9] usb 9-1: Using ep0 maxpacket: 16
[  321.499304][    T9] usb 9-1: too many configurations: 9, using maximum allowed: 8
[  321.587623][    T9] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  321.591531][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.594877][    T9] usb 9-1: Product: syz
[  321.596684][    T9] usb 9-1: Manufacturer: syz
[  321.599015][    T9] usb 9-1: SerialNumber: syz
[  321.609559][    T9] r8152-cfgselector 9-1: Unknown version 0x0000
[  321.612240][    T9] r8152-cfgselector 9-1: config 0 descriptor??
[  321.998912][   T33] audit: type=1800 audit(1755038620.470:79): pid=13707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3159" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  324.129039][    T9] r8152-cfgselector 9-1: USB disconnect, device number 5
[  325.065779][T13726] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3168'.
[  325.112156][T13728] loop8: detected capacity change from 0 to 128
[  325.566734][T12767] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00)
[  325.574805][T12767] FAT-fs (loop8): Filesystem has been set read-only
[  325.704316][T13737] loop7: detected capacity change from 0 to 2048
[  325.718219][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  325.745128][T13737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.761377][T13737] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  325.851091][T12541] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.937956][T13744] netlink: 'syz.7.3174': attribute type 11 has an invalid length.
[  325.945672][T13744] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3174'.
[  326.092188][T13752] tmpfs: Bad value for 'mpol'
[  326.103953][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3177'.
[  326.445380][T13755] loop3: detected capacity change from 0 to 32768
[  326.453974][T13755] bcachefs (/dev/loop3): error reading superblock: block size (0) smaller than device block size (512)
[  326.470651][T13755] bcachefs: bch2_fs_get_tree() error: block_size_too_small
[  326.825062][T13771] loop7: detected capacity change from 0 to 32768
[  326.847814][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:7' failed: Read-only file system
[  326.881672][T13771] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.889788][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:7' failed: Read-only file system
[  326.928656][T13771] XFS (loop7): Ending clean mount
[  326.940732][T13771] XFS (loop7): Quotacheck needed: Please wait.
[  327.033804][T13771] XFS (loop7): Quotacheck: Done.
[  327.105395][T12541] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  328.387843][T13802] loop3: detected capacity change from 0 to 40427
[  328.391258][T13802] F2FS-fs: heap/no_heap options were deprecated
[  328.405800][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system
[  328.410479][T13802] F2FS-fs (loop3): invalid crc value
[  328.429140][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system
[  328.498064][T13802] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  328.502365][T13802] F2FS-fs (loop3): Start checkpoint disabled!
[  328.512399][T13802] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  328.684380][ T6571] udevd[6571]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system
[  328.764793][T13823] loop3: detected capacity change from 0 to 128
[  328.780742][T13823] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  328.787133][T13823] ext4 filesystem being mounted at /951/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  328.787960][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system
[  328.800461][T13823] EXT4-fs (loop3): shut down requested (1)
[  328.810104][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system
[  328.833597][ T6262] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  329.104496][T13829] loop3: detected capacity change from 0 to 32768
[  329.108464][T13829] XFS: ikeep mount option is deprecated.
[  329.124192][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system
[  329.139155][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system
[  329.157505][T13829] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  329.178843][T13829] XFS (loop3): Ending clean mount
[  329.183216][T13829] XFS (loop3): Quotacheck needed: Please wait.
[  329.228555][T13829] XFS (loop3): Quotacheck: Done.
[  329.326722][   T33] audit: type=1326 audit(1755038627.791:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13818 comm="syz.7.3206" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4bd8ebe9 code=0x7fc00000
[  330.410350][ T6262] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  330.782795][T13859] loop3: detected capacity change from 0 to 8
[  330.838124][T13859] SQUASHFS error: xz decompression failed, data probably corrupt
[  330.848591][T13859] SQUASHFS error: Failed to read block 0x108: -5
[  330.851097][T13859] SQUASHFS error: Unable to read metadata cache entry [106]
[  330.853600][T13859] SQUASHFS error: Unable to read inode 0x11f
[  330.913354][T13859] loop3: detected capacity change from 0 to 1024
[  330.938044][T13859] hfsplus: Bad value for 'gid'
[  330.961055][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system
[  330.967497][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:3' failed: Read-only file system
[  331.850115][T13865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3220'.
[  332.091081][T13879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3226'.
[  332.150143][T13881] loop3: detected capacity change from 0 to 512
[  332.169387][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  332.170966][T13881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.180189][T13881] ext4 filesystem being mounted at /966/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  332.189705][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  332.194533][   T33] audit: type=1800 audit(1755038630.661:81): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3227" name="file1" dev="loop3" ino=15 res=0 errno=0
[  332.240483][ T6262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.329640][T13888] loop3: detected capacity change from 0 to 512
[  332.341274][T13888] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3229: casefold flag without casefold feature
[  332.349681][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  332.356582][T13888] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3229: couldn't read orphan inode 15 (err -117)
[  332.368977][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  332.375311][T13888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.445225][ T6262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.535337][T13893] loop3: detected capacity change from 0 to 128
[  332.542440][T13893] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  332.544370][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system
[  332.547900][T13893] ext4 filesystem being mounted at /970/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  332.592908][T13893] EXT4-fs error (device loop3): make_indexed_dir:2269: inode #2: block 18: comm syz.3.3231: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=128, rec_len=9, size=1000 fake=0
[  332.631342][ T6262] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  332.733362][T13898] loop3: detected capacity change from 0 to 1024
[  332.739854][T13898] hfsplus: Filesystem is marked locked, mounting read-only.
[  332.760480][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system
[  332.761778][T13898] hfsplus: invalid attributes max_key_len 0
[  332.767381][ T6571] udevd[6571]: symlink '../../loop3' '/dev/disk/by-uuid/67d633f8-938d-3ec7-b076-6b27e93c5b1e.tmp-b7:3' failed: Read-only file system
[  332.769207][T13898] hfsplus: failed to load attributes file
[  334.105425][T13923] loop7: detected capacity change from 0 to 8192
[  334.112880][T13923] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  334.131597][T13923] ntfs3(loop7): Failed to initialize $Extend/$Reparse.
[  334.133666][ T6571] udevd[6571]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  334.134090][T13923] ntfs3(loop7): ino=5, mi_enum_attr
[  334.213594][T13929] netlink: 'syz.7.3247': attribute type 3 has an invalid length.
[  334.356060][  T792] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  334.371196][T13933] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  334.869682][T13933] loop7: detected capacity change from 0 to 32768
[  334.919443][T13933] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  334.956565][T13933] XFS (loop7): Ending clean mount
[  335.025878][  T792] usb 4-1: Using ep0 maxpacket: 32
[  335.029894][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.033918][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.037609][  T792] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  335.040714][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.045151][  T792] usb 4-1: config 0 descriptor??
[  335.053931][  T792] hub 4-1:0.0: USB hub found
[  335.192196][T12541] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  335.299547][  T792] hub 4-1:0.0: 1 port detected
[  335.369851][ T6003] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.654223][ T6003] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.786853][ T6003] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.859044][ T6026] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  335.868719][ T6026] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  335.878870][ T6026] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  335.883222][ T6026] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  335.888812][ T6026] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  335.955335][ T6003] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.074143][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3255'.
[  336.082196][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3255'.
[  336.327009][ T6003] bridge_slave_1: left allmulticast mode
[  336.332251][ T6003] bridge_slave_1: left promiscuous mode
[  336.334877][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.343090][ T6003] bridge_slave_0: left allmulticast mode
[  336.346434][ T6003] bridge_slave_0: left promiscuous mode
[  336.349097][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.620653][  T792] hub 4-1:0.0: hub_hub_status failed (err = -32)
[  336.624687][  T792] hub 4-1:0.0: config failed, can't get hub status (err -32)
[  336.633643][  T792] usbhid 4-1:0.0: can't add hid device: -32
[  336.638009][  T792] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[  336.731997][  T792] usb 4-1: USB disconnect, device number 35
[  337.143932][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  337.149988][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  337.154809][ T6003] bond0 (unregistering): Released all slaves
[  337.165256][ T6003] bond1 (unregistering): Released all slaves
[  337.459752][T13950] chnl_net:caif_netlink_parms(): no params data found
[  337.785480][T13988] mkiss: ax0: crc mode is auto.
[  337.800899][T13990] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3268'.
[  337.817620][T13950] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.820585][T13950] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.823622][T13950] bridge_slave_0: entered allmulticast mode
[  337.827847][T13950] bridge_slave_0: entered promiscuous mode
[  337.860773][ T6003] hsr_slave_0: left promiscuous mode
[  337.865001][ T6003] hsr_slave_1: left promiscuous mode
[  337.871022][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.874146][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  337.883784][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  337.888703][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  337.910814][ T6003] veth1_macvtap: left promiscuous mode
[  337.913586][ T6003] veth0_macvtap: left promiscuous mode
[  337.916413][ T6003] veth1_vlan: left promiscuous mode
[  337.918935][ T6003] veth0_vlan: left promiscuous mode
[  337.955757][ T6026] Bluetooth: hci4: command tx timeout
[  338.817534][ T6003] team0 (unregistering): Port device team_slave_1 removed
[  338.890723][ T6003] team0 (unregistering): Port device team_slave_0 removed
[  339.709105][T13950] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.712168][T13950] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.717926][T13950] bridge_slave_1: entered allmulticast mode
[  339.721791][T13950] bridge_slave_1: entered promiscuous mode
[  339.810962][T13950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.822419][T13950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.037777][ T6026] Bluetooth: hci4: command tx timeout
[  340.161541][T13950] team0: Port device team_slave_0 added
[  340.360975][T13950] team0: Port device team_slave_1 added
[  340.446761][T13950] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.449907][T13950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.461392][T13950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.491130][T13950] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.494177][T13950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.511346][T13950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.583534][T13950] hsr_slave_0: entered promiscuous mode
[  340.587655][T13950] hsr_slave_1: entered promiscuous mode
[  340.590718][T13950] debugfs: 'hsr0' already exists in 'hsr'
[  340.593145][T13950] Cannot create hsr debugfs directory
[  340.903846][T14014] netlink: 'syz.3.3278': attribute type 9 has an invalid length.
[  340.910572][T14014] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.3278'.
[  341.101413][T13950] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  341.120995][T13950] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  341.148438][T13950] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  341.164033][T13950] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  341.302678][T13950] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.349514][T13950] 8021q: adding VLAN 0 to HW filter on device team0
[  341.367945][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.371307][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.400943][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.403608][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.716427][   T34] INFO: task syz-executor:9544 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  341.726308][   T34]       Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0
[  341.730046][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  341.740586][   T34] task:syz-executor    state:D stack:21832 pid:9544  tgid:9544  ppid:1      task_flags:0x400140 flags:0x00004004
[  341.776964][   T34] Call Trace:
[  341.779124][   T34]  <TASK>
[  341.792563][   T34]  __schedule+0x1798/0x4cc0
[  341.856242][   T34]  ? do_raw_spin_lock+0x121/0x290
[  341.858651][   T34]  ? __lock_acquire+0xab9/0xd20
[  341.860796][   T34]  ? __pfx___schedule+0x10/0x10
[  341.863081][   T34]  ? schedule+0x91/0x360
[  341.887731][   T34]  schedule+0x165/0x360
[  341.898341][   T34]  v9fs_evict_inode+0x170/0x320
[  341.925420][   T34]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  341.927828][   T34]  ? __pfx_var_wake_function+0x10/0x10
[  341.930228][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  341.932554][   T34]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  341.934989][   T34]  evict+0x504/0x9c0
[  341.985198][   T34]  ? __pfx_evict+0x10/0x10
[  341.987292][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  341.989622][   T34]  ? _raw_spin_unlock+0x28/0x50
[  341.991817][   T34]  ? iput+0x6d8/0x9d0
[  341.993633][   T34]  __dentry_kill+0x209/0x660
[  342.026596][   T34]  ? dput+0x37/0x2b0
[  342.028451][   T34]  dput+0x19f/0x2b0
[  342.030152][   T34]  shrink_dcache_for_umount+0xa0/0x170
[  342.032668][   T34]  generic_shutdown_super+0x67/0x2c0
[  342.035027][   T34]  kill_anon_super+0x3b/0x70
[  342.046685][   T34]  v9fs_kill_super+0x4c/0x90
[  342.048793][   T34]  deactivate_locked_super+0xbc/0x130
[  342.067156][   T34]  cleanup_mnt+0x425/0x4c0
[  342.069287][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.071666][   T34]  task_work_run+0x1d4/0x260
[  342.073774][   T34]  ? __pfx_task_work_run+0x10/0x10
[  342.080242][   T34]  ? __x64_sys_umount+0x122/0x160
[  342.082528][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  342.084903][   T34]  exit_to_user_mode_loop+0xec/0x110
[  342.089626][   T34]  do_syscall_64+0x2bd/0x3b0
[  342.091739][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.094012][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.097263][   T34]  ? exc_page_fault+0x9f/0xf0
[  342.099226][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.101787][   T34] RIP: 0033:0x7f4c31f8ff17
[  342.103688][   T34] RSP: 002b:00007fffa23e2c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  342.109413][   T34] RAX: 0000000000000000 RBX: 00007f4c32011c05 RCX: 00007f4c31f8ff17
[  342.112240][   T34] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa23e2d30
[  342.115016][   T34] RBP: 00007fffa23e2d30 R08: 0000000000000000 R09: 0000000000000000
[  342.115440][ T6026] Bluetooth: hci4: command tx timeout
[  342.120373][   T34] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffa23e3dc0
[  342.123864][   T34] R13: 00007f4c32011c05 R14: 000000000002e148 R15: 00007fffa23e3e00
[  342.127626][   T34]  </TASK>
[  342.133188][   T34] 
[  342.133188][   T34] Showing all locks held in the system:
[  342.144824][   T34] 1 lock held by khungtaskd/34:
[  342.147284][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  342.151700][   T34] 3 locks held by kworker/1:1/51:
[  342.153949][   T34] 4 locks held by kworker/1:2/792:
[  342.161935][   T34] 2 locks held by kworker/u10:5/4677:
[  342.164379][   T34]  #0: ffff88801f789148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  342.169446][   T34]  #1: ffffc9002239fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  342.174700][   T34] 2 locks held by getty/5669:
[  342.177022][   T34]  #0: ffff88810dfaa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  342.181148][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  342.191203][   T34] 3 locks held by kworker/1:3/6010:
[  342.193516][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  342.200648][   T34]  #1: ffffc900039afbc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  342.226249][   T34]  #2: ffff888027c29240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180
[  342.230702][   T34] 1 lock held by syz-executor/9544:
[  342.232994][   T34]  #0: ffff8880392a40e0 (&type->s_umount_key#93){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
[  342.255190][   T34] 1 lock held by syz.2.2691/12521:
[  342.257450][   T34]  #0: ffff8880392a40e0 (&type->s_umount_key#93){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
[  342.276549][   T34] 1 lock held by syz-executor/13950:
[  342.278862][   T34] 1 lock held by syz.3.3286/14037:
[  342.324748][   T34] 
[  342.326396][   T34] =============================================
[  342.326396][   T34] 
[  342.329949][   T34] NMI backtrace for cpu 0
[  342.329961][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  342.329975][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.329982][   T34] Call Trace:
[  342.330007][   T34]  <TASK>
[  342.330014][   T34]  dump_stack_lvl+0x189/0x250
[  342.330036][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.330050][   T34]  ? __pfx__printk+0x10/0x10
[  342.330075][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  342.330088][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  342.330101][   T34]  ? __pfx__printk+0x10/0x10
[  342.330120][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  342.330140][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  342.330153][   T34]  watchdog+0xf93/0xfe0
[  342.330173][   T34]  ? watchdog+0x1de/0xfe0
[  342.330192][   T34]  kthread+0x711/0x8a0
[  342.330209][   T34]  ? __pfx_watchdog+0x10/0x10
[  342.330223][   T34]  ? __pfx_kthread+0x10/0x10
[  342.330238][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.330251][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.330263][   T34]  ? __pfx_kthread+0x10/0x10
[  342.330276][   T34]  ret_from_fork+0x3fc/0x770
[  342.330289][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  342.330302][   T34]  ? __switch_to_asm+0x39/0x70
[  342.330314][   T34]  ? __switch_to_asm+0x33/0x70
[  342.330325][   T34]  ? __pfx_kthread+0x10/0x10
[  342.330337][   T34]  ret_from_fork_asm+0x1a/0x30
[  342.330383][   T34]  </TASK>
[  342.330443][   T34] Sending NMI from CPU 0 to CPUs 1:
[  342.391497][   T52] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  342.393567][    C1] NMI backtrace for cpu 1
[  342.393583][    C1] CPU: 1 UID: 0 PID: 52 Comm: kworker/u9:2 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  342.393596][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.393604][    C1] Workqueue: events_unbound cfg80211_wiphy_work
[  342.393628][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  342.393647][    C1] Code: e8 ee 35 71 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 df a3 d4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 ca 05 2d 06 cc 44 89 f9 80 e1 07
[  342.393655][    C1] RSP: 0018:ffffc900007af278 EFLAGS: 00000006
[  342.393663][    C1] RAX: 1ffffffff33bce05 RBX: 00000000000003f9 RCX: 0000000000000000
[  342.393669][    C1] RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020
[  342.393675][    C1] RBP: ffffc900007af450 R08: 0000000000000003 R09: 0000000000000004
[  342.393681][    C1] R10: dffffc0000000000 R11: ffffffff854e7590 R12: dffffc0000000000
[  342.393687][    C1] R13: dffffc0000000000 R14: ffffffff99de7520 R15: 0000000000000000
[  342.393695][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[  342.393703][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  342.393710][    C1] CR2: 0000200000026000 CR3: 000000013532e000 CR4: 00000000000006f0
[  342.393743][    C1] Call Trace:
[  342.393749][    C1]  <TASK>
[  342.393755][    C1]  serial8250_console_write+0x584/0x1ba0
[  342.393773][    C1]  ? __lock_acquire+0xab9/0xd20
[  342.393789][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  342.393802][    C1]  ? console_flush_all+0x13a/0xc40
[  342.393813][    C1]  ? console_flush_all+0x13a/0xc40
[  342.393825][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  342.393836][    C1]  ? console_flush_all+0x13a/0xc40
[  342.393846][    C1]  ? console_flush_all+0x13a/0xc40
[  342.393857][    C1]  console_flush_all+0x728/0xc40
[  342.393870][    C1]  ? console_flush_all+0x13a/0xc40
[  342.393884][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  342.393899][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  342.393911][    C1]  console_unlock+0xc4/0x270
[  342.393923][    C1]  ? __pfx_console_unlock+0x10/0x10
[  342.393934][    C1]  ? vprintk_emit+0x444/0x7a0
[  342.393943][    C1]  ? vprintk_emit+0x444/0x7a0
[  342.393953][    C1]  vprintk_emit+0x5b7/0x7a0
[  342.393962][    C1]  ? vprintk_emit+0x444/0x7a0
[  342.393973][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  342.393990][    C1]  _printk+0xcf/0x120
[  342.394007][    C1]  ? ieee80211_sta_active_ibss+0xc3/0x330
[  342.394019][    C1]  ? __pfx__printk+0x10/0x10
[  342.394034][    C1]  ? ieee80211_sta_active_ibss+0x2e0/0x330
[  342.394045][    C1]  ieee80211_ibss_work+0xd55/0x1060
[  342.394057][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.394070][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  342.394083][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  342.394094][    C1]  ? kcov_remote_stop+0x17e/0x6d0
[  342.394109][    C1]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  342.394128][    C1]  ? skb_dequeue+0x10e/0x150
[  342.394140][    C1]  ? ieee80211_iface_work+0xfbd/0x12d0
[  342.394153][    C1]  ? ieee80211_iface_work+0x1224/0x12d0
[  342.394167][    C1]  cfg80211_wiphy_work+0x2bb/0x470
[  342.394179][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  342.394189][    C1]  process_scheduled_works+0xae1/0x17b0
[  342.394206][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  342.394228][    C1]  worker_thread+0x8a0/0xda0
[  342.394246][    C1]  kthread+0x711/0x8a0
[  342.394261][    C1]  ? __pfx_worker_thread+0x10/0x10
[  342.394271][    C1]  ? __pfx_kthread+0x10/0x10
[  342.394284][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.394295][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.394305][    C1]  ? __pfx_kthread+0x10/0x10
[  342.394316][    C1]  ret_from_fork+0x3fc/0x770
[  342.394327][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  342.394338][    C1]  ? __switch_to_asm+0x39/0x70
[  342.394394][    C1]  ? __switch_to_asm+0x33/0x70
[  342.394405][    C1]  ? __pfx_kthread+0x10/0x10
[  342.394418][    C1]  ret_from_fork_asm+0x1a/0x30
[  342.394442][    C1]  </TASK>
[  342.395856][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  342.395872][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  342.395888][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.395896][   T34] Call Trace:
[  342.395902][   T34]  <TASK>
[  342.395908][   T34]  dump_stack_lvl+0x99/0x250
[  342.395928][   T34]  ? __asan_memcpy+0x40/0x70
[  342.395943][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.395957][   T34]  ? __pfx__printk+0x10/0x10
[  342.395981][   T34]  vpanic+0x281/0x750
[  342.395996][   T34]  ? __pfx_vpanic+0x10/0x10
[  342.396008][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  342.396024][   T34]  ? preempt_schedule+0xae/0xc0
[  342.396039][   T34]  ? preempt_schedule_common+0x83/0xd0
[  342.396056][   T34]  panic+0xb9/0xc0
[  342.396069][   T34]  ? __pfx_panic+0x10/0x10
[  342.396083][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  342.396104][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  342.396118][   T34]  watchdog+0xfd2/0xfe0
[  342.396138][   T34]  ? watchdog+0x1de/0xfe0
[  342.396158][   T34]  kthread+0x711/0x8a0
[  342.396174][   T34]  ? __pfx_watchdog+0x10/0x10
[  342.396189][   T34]  ? __pfx_kthread+0x10/0x10
[  342.396204][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.396217][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.396231][   T34]  ? __pfx_kthread+0x10/0x10
[  342.396246][   T34]  ret_from_fork+0x3fc/0x770
[  342.396261][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  342.396277][   T34]  ? __switch_to_asm+0x39/0x70
[  342.396290][   T34]  ? __switch_to_asm+0x33/0x70
[  342.396304][   T34]  ? __pfx_kthread+0x10/0x10
[  342.396319][   T34]  ret_from_fork_asm+0x1a/0x30
[  342.396342][   T34]  </TASK>
[  342.397311][   T34] Kernel Offset: disabled

VM DIAGNOSIS:
22:39:44  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000000fb RBX=00000000000000fb RCX=0000000000000830 RDX=0000000000000001
RSI=00000000000000fb RDI=0000000000000001 RBP=ffffc90000007e60 RSP=ffffc90000007d70
R8 =ffffffff8fa34237 R9 =1ffffffff1f46846 R10=dffffc0000000000 R11=ffffffff81705100
R12=dffffc0000000000 R13=0000000000000000 R14=ffff8881366201b0 R15=ffffffff8dbdbd18
RIP=ffffffff81716273 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb0584e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fb0579876c3 00007fb0579876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055556682dec5 000055556682ddc0
XMM06=0000000000000000 0000000000000000 XMM07=0df403010000020c a4060dd0037a0200
XMM08=0dce036f6e646677 01ffffffffffffff XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=161cb061e3b73d00 RBX=ffffffff81968328 RCX=161cb061e3b73d00 RDX=0000000000000001
RSI=ffffffff8d9b44c3 RDI=ffffffff8be32600 RBP=ffffc90000177f20 RSP=ffffc90000177db8
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34230 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff81001530 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000020000 CR3=000000013532e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=3230253a3a303865 660030667663696e
XMM02=2d205d736d756c6c 255b206425230078 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00ff000000000000 XMM05=0000000000000000 00007fd551212e53
XMM06=0000000000000000 00007fd551212e4d XMM07=0000000000000000 00007fd551212e61
XMM08=0000000000000000 00007fd551212ee7 XMM09=0000000000000000 00007fd551212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
