last executing test programs:

6m30.338414678s ago: executing program 0 (id=553):
r0 = open(&(0x7f0000000100)='./bus\x00', 0x121243, 0x0)
lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000240)=ANY=[@ANYBLOB="0413"], 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x2010, r0, 0x0)

6m30.032833429s ago: executing program 0 (id=557):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)="cbeb76dd9eecf260cb2c422f4084e7ed772cabd1209916c9e2753f542956238673a099f4f0b7d5f4e5500663abf40f09430f49b994bcb56b648e44ce425f837e901ccf7c1dc7a256c1f25046faee1f648ba06c87febdf5e6bfb5253090c02f", 0x5f}, {&(0x7f0000000200)='\x00\x00', 0x2}], 0x2}}], 0x2, 0x28048005)
writev(r0, &(0x7f00000037c0)=[{&(0x7f00000036c0)="7d29dbe640bf91367e7f68f8", 0xc}], 0x1)

6m29.734977221s ago: executing program 0 (id=561):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e37040201", 0x27}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33)

6m29.219638115s ago: executing program 0 (id=563):
syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4fe, &(0x7f0000000a40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

6m28.242681856s ago: executing program 0 (id=570):
r0 = socket$netlink(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1)
close(r0)

6m26.748355479s ago: executing program 0 (id=584):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

6m25.971558843s ago: executing program 32 (id=584):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

6m13.496413303s ago: executing program 5 (id=688):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xfffd}}}, 0x24}}, 0x40000)

6m13.268316315s ago: executing program 5 (id=691):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r0, r1, 0x0, 0x201400)

6m12.940560318s ago: executing program 5 (id=694):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094)
connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x118, 0x4a, 0xe3, 0xf, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10)

6m11.853846458s ago: executing program 5 (id=703):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=iso8859-9,utf8,dmask=00000000000000000000011,utf8,errors=remount-ro,utf8,fmask=00000000000000000000001,errors=remount-ro,iocharset=iso8859-5,gid=', @ANYRESHEX=0x0, @ANYBLOB="0002"], 0x1, 0x1548, &(0x7f0000000380)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)

6m11.374303505s ago: executing program 5 (id=707):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000840)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{}, {0xffffffff}], ['\x00']})

6m10.412374841s ago: executing program 5 (id=714):
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548010203010902120101049570810904008100dd80620d"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/132, 0x84}], 0x1, 0x9a, 0x1)

6m9.891843598s ago: executing program 33 (id=714):
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548010203010902120101049570810904008100dd80620d"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/132, 0x84}], 0x1, 0x9a, 0x1)

4m42.685568777s ago: executing program 1 (id=1453):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0x2, 0x2, 0x831a, 0x1, "030000000000000000049dd0ffd76d7fcb0b0e", 0x6, 0x201})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff)

4m42.308758692s ago: executing program 1 (id=1456):
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$eJzs3Am4T+X2OPC13vfdHDJ8k8x7vWvzTYaXJMmQJEOSJCGZE5IkSZLEIVMSkpDxJJlD5nTSMc9D5qSTK0mSkJDk/T+n4e823H/33l/3r9896/M8+znv2nu/a6991vmePTzPOV90HVa9UY0q9ZkZ/h365wH++CURABIAYCAAZAeAAADK5CiTI217Jo2J/9ZBxH9IgxmXuwJxOUn/0zfpf/om/U/fpP/pm/Q/fZP+p2/S//RN+i9EujYr75WypN9F3v//L6f+J5Pl+v/fB/G3q/7RvtL//zb6X9pb+p9uZPi9ldL/9OL3LwHS//RN+p+eBZe7AHGZyec/fZP+C5Gu/envlDecu9zvtGX5FxYhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOL/g3P+EgMAP48vd11CCCGEEEIIIYT48/i3LncFQgghhBBCCCGE+M9DUKDBQAAZICMkQCbIDFdAFsgK2SA7xOBKyAFXQU64GnJBbsgDeSEf5IcCEAKBBYYICkIhiMM1UBiuhSJQFIpBcXBQAkrCdVAKrofScAOUgRuhLNwE5aA8VICKcDNUglugMtwKVeA2qArVoDrUgNuhJtwBteBOqA13QR24G+rCPVAP7oX60AAawn3QCO6HxtAEmkIzaA4toOUfzE/K/nvzn4Ee8Cz0hF6QCL2hDzwHfaEf9IcBMBCeh0HwAgyGF2EIDIVh8BIMh5dhBLwCI2EUjIZXYQyMhXEwHibAREiC12ASvA6T4Y37s8JUmAbTYQbMhFnwJsyGOTAX3oJ5MB8WQFKmRbAYlsDbsBTegWR4F5bBe5ACy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2Abvw3bYATthF+yGPbAXPoB98CHsh48gFT/+F+ef/eV86IaAgAoVGjSYATNgAiZgZsyMWTALZsNsGMMY5sAcmBNzYi7MhXkwD+bDfFgACyAhISNjQSyIcYxjYSyMRbAIFsNi6NBhSSyJpfB6LI2lsQyWwbJYFstheSyPFbEiVsJKWBkrYxWsglWxKlbH6ng73o53YC2shbWxNtbBOlgX62I9rIf1sT42xIbYCBthY2yMTbEpNsfm2BJbYitsha2xNbbFttgO22F7bI8dsAN2xI7YCTthZ+yMXbALdsWu2A2fxqfxGXwGn8VnsRdWVb2xD/bBvtgX++MAHIDP4yB8AV/AF3EIDsVh+BK+hC/jCDyDI3EUjsbRWEmNxXE4HllNxCRMwowwCSfjZJyCU3EqTscZOBNn4SycjXNwDr6F83A+zseFuBAX4xJcgkvxHUzGZFyGZzEFl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBXfx/dxB+7AXbgL9+Ae/AA/wA/xQxyCqZiKB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5wDgPJ7HC3gBL+LFtA+/SmOUURlUBpWgElRmlVllUVlUNpVNxVRM5VA5VE6VU+VSuVQelUflU/lUAVVAkSLFKlIFVUEVV3FVWBVWRVQRVUwVU045VVKVVKVUKVValVZl1I2qrLpJlVPlVRtXUVVUlVRbV1ndqqqoKqqqqqaqqxqqhqqpaqpaqpaqrWqrOqqOqqvuUfVUb+yPDVRaZxqpodhYDcOmqplqrlqol/EB1UqNwNaqjWqrHlKjcCS2V61cB/Wo6qjGYSf1uBqPT6guaiJ2VU+pbupp1V09o3qo1q6n6qWmYG/VR03Hvqqf6q8GqNlYTaV1rLp6UQ1RQ9Uw9ZJajC+rEeoVNVKNUqPVq2qMGqvGqfFqgpqoktRrapJ6XU1Wb6gpaqqapqarGWqmmqXeVLPVHDVXvaXmqflqgVqoFqnFaol6Wy1V76hk9a5apt5TKWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm3qfbVd7VA71S61W+1Re9UHap/6UO1XH6lU9bE6oP6mDqpP1CH1qTqsPlNH1OfqqPpCHVNfquPqK3VCnVSn1NfqtPpGnVFn1Tn1rTqvvlMX1PfqovIKNGqltTY60Bl0Rp2gM+nM+gqdRWfV2XR2HdNX6hz6Kp1TX61z6dw6j8mr8+n8uoAONWmrWUe6oC6k4/oaXVhfq4voorqYLq6dLqFL6ut0KX29Lq1v0GX0jbqsvkmX0+V1BQ/6Zl1J36Ir61t1FX2brqqr6eq6hr5d19R36Fr6Tl1b36Xr6Lt1XX2Prqfv1fV1A91Q36cb6ft1Y91EN9XNdHPdQrfUD+hW+kHdWrfRbfVDup1+WLfXj+gO+lHdUT+mO+nHdWf9hO6in9Rd9VO6m35ad9ff64va6566l07UvXUf/Zzuq/vp/nqAHqif14P0C3qwflEP0UP1MP2SHq5f1iP0K3qkHqVH61f1GD1Wj9Pj9QQ9USfp1/Qk/bqerN/QU/RUPU1P1zP0TN3/p0xz/4n5r//O/ME/HH2r3qbf19v1Dr1T79K79R69V+/V+/Q+vV/v16k6VR/QB/RBfVAf0of0YX1YH9FH9FF9VB/Tx/RxfVyf0Cf1t/prfVp/o8/os/qs/laf1+f1hZ++B2DQKKONMYHJYDKaBJPJZDZXmCwmq8lmspuYudLkMFeZnOZqk8vkNnlMXpPP5DcFTGjIWMMmMgVNIRM315jC5lpTxBQ1xUxx40wJU9Jc9z+e/0f1tTQtTSvTyrQ2rU1b09a0M+1Me9PedDAdTEfT0XQynUxn09l0MV1MV9PVdDPdTHfT3fQwPUxP09MkmkTTxzxn+pp+pr8ZYAaa580gM8gMNoPNEDPEDDPDzHAz3IwwI8xIM9KMNqPNGDPGjDPjzAQzwST57GaSmWQmm8lmiplipg3MbmaYGWaWmWVmm9lmrplr5pl5ZoFZYBaZRWaJWWKWmqUm2SSbZWaZSTHLzXKz0qw0q81qs9asNevNerPRbDSbzWaTYraZbWa72W52mp1mt9lt9pq9Zp/ZZ/ab/SbVpJoD5oA5aA6aQ+aQOWwOmyPmiDlqjppj5pg5bo6bE+aEOWVOmdPmtDljzphz5pw5b86bC+aCuWgupt32BSpQgQlMkCHIECQECUHmIHOQJcgSZAuyBbEgFuQIcgQ5g6uDXEHuIE+QN8gX5A8KBGFAgQ04iIKCQaEgHlwTFA6uDYoERYNiQfHABSWCksF1Qang+qB0cENQJrgxKBvcFJQLygcVgorBzUGl4JagcnBrUCW4LagaVAuqBzWC24OawR1BreDOoHZwV1AnuDuoG9wT1AvuDeoHDYKGwX1Bo+D+oHHQJGgaNAuaBy2Cln9qfu/P5H7Q9Qx7hYlh77BP+FzYN+wX9g8HhAPD58NB4Qvh4PDFcEg4NBwWvhQOD18OR4SvhCPDUeHo8NVwTDg2HBeODyeEE8Ok8LVwUvh6ODl8I5wSTg2nBdPDGeHMcFb4Zjg7nBPODd8K54XzwwXhwnBRuDhE/PFuPDl8N1wWvhemhMvDFeHKcFW4OlwTrg3XhevDDeHGcFO4ucygH3cNt4c7wp3hrnB3uCfcG34Q7gs/DPeHH4Wp4cfhgfBv4cHwk/BQ+Gl4OPwsPBJ+Hh4NvwiPhV+Gx8OvwhPhyUwQfh2eDr8Jz4Rnw3Pht+H58LvwQvh9eDH0aTf3aZd3MmQoA2WgBEqgzJSZslAWykbZKEYxykE5KCflpFyUi/JQHspH+agAFaA0TEwFqSDFKU6FqTAVoSJUjIqRI0clqSSVolJUmkpTGSpDZakslSNLFagC3Uw30y10C91Kt9JtdBtVo2pUg2oQYk2qRbWoNtWmOlSH6lJdqkf1qD7Vp4bUkBpRI2pMjakpNaXm1JxaUktqRa2oNbWmttSW2lE7ak/tqQN1oI7UkTpRJ+pMnakLdaGu1JW6UTfqTt2pB/WgntSTEimR+lAf6kt9qT/1p4E0kAbRIBpMg2kIDaFhNIyG03AaQSNoJI2i0fQqjaGxNI7G0wSaSEmURJNoEk2myTSFptA0mkYzaAbNolk0m2bTXJpL82geLaAFtIgW0RJaQktpKSVTMi2jZZRCKbSCVtAqWkVraA2to3W0gTbQJtpEW2gLbaNttJ22007aSbtpN+2lvbSP9tF+2k+plEoH6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2iU3SaTtMZOkPn6Bydp+/oAn1PF8lTgs1kM9srbBab1Waz2e2v4zw2r81n89sCNrS5bO5fxGStLWKL2mK2uHW2hC1pr/tNXM6WtxVsRXuzrWRvsZVtOZsJ/j6uae+wteydtra9y9awt/8irmPvtnXt/baebWLr22a2oW1hG9n7bWPbxDa1zWxz28K2sw/b9vYR28E+ajvax34TL7Xv2HV2vd1gN9p99kN7zn5rj9ov7Hn7ne1pe9mB9nk7yL5gB9sX7RA79JcxgB1tX7Vj7Fg7zo63E+zE38TT7HQ7w860s+ybdrad85t4iX3bzrPJdoFdaBfZxT/EaTUl23ftMvueTbHL7Qq70q6yq+0au/b/1rrSbrZb7Fa7135gt9sddqfdZXfbPT/Eaeex335kU+3H9oj93B60n9hD9pg9bD/7IU47v2P2S3vcfmVP2JP2lP3anrbf2DP27A/nn3buX9vv7UXrLTCyYs2GA87AGTmBM3FmvoKzcFbOxtk5xldyDr6Kc/LVnItzcx7Oy/k4PxfgkIktM0dckAtxnK/hwnwtF+GiXIyLs+MSXJKv41J8PZfmG7gM38hl+SYux+W5Alfkm7kS38KV+VauwrdxVa7G1bkG3841+Q6uxXdybb6L6/DdXJfv4Xp8L9fnBtyQ7+NGfD835ibclJtxc27BLfkBbsUPcmtuw235IW7HD3N7foQ78KPckR/jTvw4d+YnuAs/yV35Ke7GT3N3foZ78LPck3txIvfmPvwc9+V+3J8H8EB+ngfxCzyYX+QhPJSH8Us8nF/mEfwKj+RRPJpf5TE8lsfxeJ7AEzmJX+NJ/DpP5jd4Ck/laTydZ/BMnsVv8myew3P5LZ7H83kBL+RFvJiX8Nu8lN/hZH6Xl/F7nMLLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbexu/zdt7BO3kX7+Y9vJc/4H38Ie/njziVP+YD/Dc+yJ/wIf6UD/NnfIQ/56P8BR/jL/k4f8Un+CSf4q/5NH/DZ/gsn+Nv+Tx/xxf4e77IniHCSEU6MlEQZYgyRglRpihzdEWUJcoaZYuyR7HoyihHdFWUM7o6yhXljvJEeaN8Uf6oQBRGFNmIoygqGBWK4tE1UeHo2qhIVDQqFhWPXFQiKhldF5WKro9KRzdEZaIbo7LRTVG5qHxUIaoY3RxVim6JKke3RlWi26KqUbWoelQjuj2qGd0R1YrujGpHd0Wlo7ujutE9Ub3o3qh+1CBqGN0XNYrujxpHTaKmUbOoedQiahk9ELWKHoxaR22ittFDUbvo4ah99EjUIXo06hg9dml70eDHq+mvtidGvSP90xuyO/Wi+OL4kvjb8aXxd+LJ8Xfjy+LvxVPiy+Mr4ivjq+Kr42via+Pr4uvjG+Ib45vim+Nb4lvj3tfICA7THoTBuMBlcBldgsvkMrsrXBaX1WVz2V3MXelyuKtcTne1y+Vyuzwur8vn8rsCLnTkrGMXuYKukIu7a1xhd60r4oq6Yq64c66EK+lauJaupWvlHnStXRvX1j3kHnIPu4fdI+4R96jr6B5zndzjrrN7wnVxT7on3VOum3vadXfPuB7uWdfT9XKJLtH1cX1cX9fX9Xf93UA30A1yg9xgN9gNcUPcMDfMDXfD3Qg3wo10I91oN9qNcWPcODfOTXATXJJLcpPcJDfZTXZT3BQ3zU1zM9wMN8vNcrPdbDfXzXXz3Dy3wC1wi9wit8QtcUvdUpfskt0yt8yluBS3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t91tdzvdTrfb7XZ73V63z+1z+91+l+pS3QF3wB10B90h96k77D5zR9zn7qj7wh1zX7rj7it3wp10p9zX7rT7xp1xZ9059607775zF9z37qLzLin2WmxS7PXY5NgbsSmxqbFpsemxGbGZsVmxN2OzY3Nic2NvxebF5scWxBbGFsUWx5bE3o4tjb0TS469G1sWey+WElseWxFbGVsVWx3zPv/2yBf0hXzcX+ML+2t9EV/UF/PFvfMlfEl/nS/lr/el/Q2+jL/Rl/U3+XK+vK/gm/imvplv7lv4lv4B38o/6Fv7Nr6tf8i38w/79v4R38E/6jv6x3wn/7jv7J/wXfyTvqt/av5PP56+h3/W9/S9fKLv7fv453xf38/39wP8QP+8H+Rf8IP9i36IH+qH+Zf8cP+yH+Ff8SP9KD/av+rH+LF+nB/vJ/iJPsm/5if51/1k/4af4qf6aX66n+Fn+ln+TT/bz/Fz/Vt+np/vF/iFfpFf7Jf4t/1S/45P9u/6Zf49n+KX+xV+pV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mM8J2v8Pv9Lv8br/H7/Uf+H3+Q7/ff+RT/cf+gP+bP+g/8Yf8p/6w/8wf8Z/7o/4Lf8x/6Y/7r/wJf9Kf8l/70/4bf8af9ef8t/68/85f8N/7i/I3a0IIIYQQ/xT9B9t7/8469dNiAKAPAGTdkffwr3NuyvXjuJ/a1zEGAI/26trg56VBg8TExJ/2TdEQFFoIALFL8zPApXg5tIWHoQO0gVK/W18/VQH5V/mDv9uelj9+I0BmgEw/r0uAH+Jf5b/+H+Rv8vav8/+6/vhCgCKFLs1JO9DP8aX8pf9B/j3t/iB/pk+SAFr/3ZwscCm+lL8kPAiPQYdf7CmEEEIIIYQQQvyonzrf7Y+eb9Oez/OZS3MywqX4j57P/0DlP+MchBBCCCGEEEII8f/2xNPdH3mgQ4c2nf+bBxn/GmX8BQYIAH+BMmTw1x9c7t9MQgghhBBCiD/bpZv+y12JEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRfv37/yFM/dM7X+5zFEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIS63/xMAAP//gUVOqg==")
mount$afs(&(0x7f00000000c0)=@cell={0x5c, 'syz1:', 'syz0', '', 0x3c}, &(0x7f0000000140)='./file0\x00', 0x0, 0xb9544d, 0x0)

4m41.580509739s ago: executing program 1 (id=1463):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x4, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @remote}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x34}}, 0x8014)

4m41.19573732s ago: executing program 1 (id=1464):
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
fchown(r0, 0xee01, 0x0)

4m41.093785929s ago: executing program 1 (id=1465):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

4m40.810865755s ago: executing program 1 (id=1467):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x5, 0x2, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a44a, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})

4m25.727304338s ago: executing program 34 (id=1467):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x5, 0x2, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a44a, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})

3m40.773524781s ago: executing program 2 (id=1977):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000001340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c6c6f63616c666c6f636b732c696e6f646536342c67727071756f74612c6e6f61636c2c00c886311a565030e508d94320064423cc113a6d9f"], 0x1, 0x471e, &(0x7f00000047c0)="$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")
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x275a, 0x0)

3m38.327163719s ago: executing program 2 (id=2008):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000240)={@val={0x1c, 0x800}, @val={0x1, 0x4, 0x0, 0x2, 0x3d}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x3, 0x9, 0x51, 0x67, 0x0, 0xa, 0x21, 0x0, @empty, @remote}, {{0x4e24, 0x4e23, 0x4, 0x1, 0x9, 0x0, 0x0, 0x7, 0x1, 'Z|\a', 0x1, "ae8a4b"}, "4dba8f661490524a75ad1d9bef69419eb77135552b95dba9116258b53babb521e42cc2eaf9f305b13d6cb02184"}}}}, 0x5f)

3m37.136016294s ago: executing program 2 (id=2020):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xfffffffd})
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @can, @hci={0x1f, 0x1, 0x2}, @ax25={0x3, @null, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x101, 0x3})

3m36.828384143s ago: executing program 2 (id=2025):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
link(&(0x7f0000000040)='./file0/file0\x00', 0x0)

3m36.233529092s ago: executing program 2 (id=2030):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2e69a, 0x0, "000800fe630500000000000800001f00"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8)

3m35.289560721s ago: executing program 2 (id=2040):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b800800090000000900000009005e2a2d7a080009000000000024000b80080009e6ff0000000800090000000000080009000000000008"], 0x184}}, 0x0)

3m34.452608065s ago: executing program 35 (id=2040):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b800800090000000900000009005e2a2d7a080009000000000024000b80080009e6ff0000000800090000000000080009000000000008"], 0x184}}, 0x0)

2m21.927267069s ago: executing program 3 (id=2731):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x703c00, 0x80)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@random={'btrfs.', 'clear_refs\x00'}, 0x0, 0x0)

2m21.683254595s ago: executing program 3 (id=2733):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x51, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60010100001b8800fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22001b"], 0x0)

2m21.405695701s ago: executing program 3 (id=2734):
capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000240)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6)
ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0)

2m21.249639028s ago: executing program 3 (id=2735):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000380)=0x4, 0x4)
sendmmsg$inet6(r0, &(0x7f0000005480)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x9, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x884)

2m21.098487561s ago: executing program 3 (id=2736):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000140)='./bus\x00', 0x2008410, &(0x7f0000000000)=ANY=[], 0x1, 0x5585, &(0x7f000000b000)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)

2m19.722371668s ago: executing program 3 (id=2737):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m4.35404336s ago: executing program 36 (id=2737):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m4.094802772s ago: executing program 6 (id=2804):
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000800)=ANY=[], 0x1, 0x1df, &(0x7f00000002c0)="$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")
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x1)

2m3.336052759s ago: executing program 6 (id=2807):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)

2m2.59616536s ago: executing program 6 (id=2811):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2800000, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0)

2m1.181703774s ago: executing program 6 (id=2815):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x4b1, 0xfffffffffffefffd, 0x0, 0x0, 0x1004, 0x8, 0xffffffff, 0x3, 0x0, 0x3})

2m0.443449706s ago: executing program 6 (id=2820):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000440)={[{@type={'type', 0x3d, "699a1c87"}}, {@gid}, {}, {@uid}, {@force}, {@umask={'umask', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'cp932'}}, {@part={'part', 0x3d, 0xa}}, {@creator={'creator', 0x3d, "995d95f7"}}, {@nodecompose}]}, 0x47, 0x6f7, &(0x7f00000010c0)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREqhHyoUCQuvS6J01heu5HtIidCxAUKRzihHDgUIXPoCfWABOKAKGckJK4o90jcIw4smtmZ9f7Y693GP0n6PNJ4vpn5ft55O/Pt7myjDeAza/HtmNyOJBYvvLWVbj/YqTcf7NRXi3JETEVEKaLcXkWyFpF8EnE12kt8Lt2Zd5fsN84bD//0m/P3P6q3t8r5ktUvDWu3qzVkhO18idmImMjXYyrv19/1eHOgv3tjdZ104k4Tdq5IHJy01oDtcZqPcN8CT7p7EROTe+yvRZyKiOn8fUDks0PpmMM7dGPNcgAAAPBkmjiowvOP4lFsxczxhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPhqT9m4FJvpSK8mwkxe//V/J9qUrlhOMd7isHHP/g5jEFAgAAAAAAAABH4uP8i/uzj+JRbMVMsb+VZN/5v5ZtnM7+PhfvxUYsxXpcjK1oxGZsxnrMR0zOdHVY2Wpsbq7PD7b8daQtW63WvbzlQkTUBlouHMNJAwAAAAAAAMCz6yexGDMnHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRLIibaq2w5XZRrUSpHxHREVNJ62xF/KcpPuuqQY389xjgAAADghBQfjWeS/7ULrST7zP9y9rl/Ot6LtdiM5diMZizFjexZQPtTf+mf2/Xmg536aroMdvzt/4wVR9ZjREzE+/uMPJfVONNpsRjfje/HhZiNa7Eey/HDaMRmLMVsVNOTiEYkUau2n17Uijj3jvdqz9a1/tjO9m2/mkVSjZuxnMV2Ma5Xov3YJDuHdMxXu0b7YyWib8T30+wk38qNmKMbXf+9fpU/l8m1nh+xj6NRy858spORuTT3eTZeGJ77Ma+T/pHmo9R5BnV6d5R0s3+kIuc/GCfnp/J1muuf9+b8sI35KK0/EwtRyq++iJd7c377i/df7G385X/97dqt0trKrZsbF47wlB7H7EEVJotCfybqXZl4ZfjVl2eimWZie/RMTPbvmB615dGq5NnIpqIRZ8vvZKVGvNZ1Cb4bN2IpLsdczMeVmItvxELUO1dYupzpyWu5vtqbk+xeKw3Ob8OexJ77UlelXxxQ+XileXmhK6/dM10tO5bvufrLmOu6+l4cfvWN/SqQjv/5vJyO8dPOK86ToCcT+dxcRPfS8Ez8tpX+3Wiurazfatwecbzz+Tq9bT/onZt/N3rU/a/uhyG9XtIZt5xtZTmpFtdLeuylTrS9+ark37i025UGjp3pHKvFTCzH9/a9Uyv5e7jBntrHXuk+9u/dmbOSv78pjvW8y4l3o5m9C+lz4FQNwDE79fqpSvVh9R/VD6s/q96qvjX95tSVqS9UYvLv5T9P/KH0+9I3k9fjw/hxzJx0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CzYuHN3pdFsLq13CjHdv+dxC5V9xxpeiNKBdXaeG63DqEUMHyvJC5XDPfensVCNvj3FLyw9bs8fR8SQOpXHDj4Z+xobu5Dm4VA6LH44LdvTmhijeblotXedcmxMx0ojKe9xx03t3gVRW2k0/9vqaV6NrlsGeMZd2ly9fWnjzt2vLq823ll6Z2lt4crlK5frX5//2qWby82lufbfk44SOAobd+5OnHQMAAAAAAAAAAAAwHjy//t/81P/Y4byAXUq6xt7j3z2uE8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEotvh2T25HE/NzFuXT7wU69mS5FebdmOSJKEZH8KCL5JOJqtJeodXWX7DfOGw+jdP7+R/XdvspF/dKwdqPZzpeYjYiJfH2wqT26Gezveld/258qvKRzhmnCzhWJg5P2/wAAAP//vnbzsA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})

1m59.352012889s ago: executing program 6 (id=2824):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f00000002c0)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@gid_forget}, {@anchor={'anchor', 0x3d, 0x3}}, {@fileset={'fileset', 0x3d, 0x3ff}}, {@undelete}, {@gid}, {@mode={'mode', 0x3d, 0x9}}]}, 0x10, 0xc34, &(0x7f0000001080)="$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")
symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000280)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x500, 0x1e1)

1m44.016454906s ago: executing program 37 (id=2824):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f00000002c0)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@gid_forget}, {@anchor={'anchor', 0x3d, 0x3}}, {@fileset={'fileset', 0x3d, 0x3ff}}, {@undelete}, {@gid}, {@mode={'mode', 0x3d, 0x9}}]}, 0x10, 0xc34, &(0x7f0000001080)="$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")
symlink(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000280)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x500, 0x1e1)

1m21.00400365s ago: executing program 8 (id=2968):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0)

1m20.391823519s ago: executing program 8 (id=2971):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040010)

1m19.592414546s ago: executing program 8 (id=2975):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c00018009000100686173680000f1001c000280080002400000000c08000440fffffffa0800074000000001090001"], 0x84}, 0x1, 0x0, 0x0, 0x801}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe000078009106000000000000004a07"], 0xfe33)

1m18.836142088s ago: executing program 8 (id=2980):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
r1 = dup(r0)
write$FUSE_IOCTL(r1, &(0x7f0000002a00)={0x20, 0xffffffffffffffda, 0x0, {0x4, 0x0, 0xb883, 0x5}}, 0x20)

1m18.309049396s ago: executing program 8 (id=2983):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, r1, 0x801, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4a}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040)

1m17.779866347s ago: executing program 8 (id=2987):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000024c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x10000000000001}}], [], 0x6b}})

1m8.720380596s ago: executing program 4 (id=3023):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000200)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0xfffffffe}}], 0x30}], 0x1, 0x0)

1m8.400767321s ago: executing program 4 (id=3026):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
lseek(r0, 0xfffffffffffffffc, 0x2)

1m7.44362694s ago: executing program 4 (id=3030):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4084, &(0x7f00000001c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRESOCT, @ANYRES32, @ANYRESHEX], 0x11, 0x4427, &(0x7f0000004480)="$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")
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
open(0x0, 0x8000, 0x50)

1m6.095958562s ago: executing program 7 (id=3037):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x400000018f002, 0x0)
io_setup(0x3, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x7, 0x0, r0, 0x0, 0x0, 0x446, 0x0, 0x2}])

1m5.150909088s ago: executing program 7 (id=3041):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x3204400, &(0x7f0000000880)=ANY=[], 0x1, 0x282, &(0x7f0000000c00)="$eJzs281qE10cx/FfX56nb7aJVqutiH90o5uhjVcQSgtiQKmN+ALC1E40ZJqUTKhExHbn1q1XIBSX7gTxBrrxCly468ZlF+JIZ2KbtBGtoGOb72dz/uHML5yTcyacxczm7RdLpULgFNyaurtMvVK/tqS0utWjWFej7Y7q/9VsTZdHcx/P3bxz91o2l5uZM5vNzl/JmNnI+XePn76+8L42dOvNyNs+baTvb37OfNoY2xjf/Dr/qBhYMbBypWauLVQqNXfB92yxGJQcsxu+5waeFcuBV23pL/iV5eW6ueXF4cHlqhcE5pbrVvLqVqtYrVo396FbLJvjODY8KPxMfn1uzs0mPQr8WdVq1p2WNLGvJ7+eyIAAAECi2pz/1zj/dwrO/51g+/x/r3H/tuL8DwAAAAAAAAAAAAAAAAAAAADAYbAVhqkwDFPf2/+k6A2fsPF5QNKgpCFJxyQNSxqRlJKUlnRc0glJo5JOSjolaUzSaUlnJI03fVfSc8V+yaz/QJJTRhPu/87G+ne2phd3+6Wl5yv5lXzcxv3Zgory5WlSKX2J1rIhrmev5mYmLZLW2aXVRn51Jd/Tmp9SanvDtMtPxXlrzfdF+24nn1Fqe4PF2Zct+UzbfL8uXWzKO0rpwwNV5Gsx2pO7+WdTZtPXc3vyE9F1R51jO9qun+P8qD/OH2B/7Pl9ezXRm+zcIQX1JyXX970qBcVRKF7pnxjG4S+S/mfC37C76EmPBAAAAAAAAAAAAAAAAABwEL/7hGC4Gud/5eKk5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF7fAgAA//+tvV1C")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb)
write$P9_RUNLINKAT(r0, &(0x7f00000004c0)={0xfffffffffffffe15, 0x4d, 0x6}, 0x7395a0d2)

1m4.951392872s ago: executing program 4 (id=3043):
r0 = socket$inet6(0x10, 0x2, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10)
sendto$inet6(r0, &(0x7f0000000000)="1c0000002800050f0c1000000049b23e9b200a000835b3c000000001", 0x1c, 0x0, 0x0, 0x0)

1m3.542990711s ago: executing program 4 (id=3047):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000140)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@i_version}, {@user_xattr}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==")
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000540), 0x10000, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})

1m2.563974781s ago: executing program 38 (id=2987):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000024c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x10000000000001}}], [], 0x6b}})

1m2.533740133s ago: executing program 7 (id=3050):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)

1m2.14514443s ago: executing program 4 (id=3052):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0xe5, 0xa4, 0x40, 0x2770, 0x9052, 0x15f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x5c, 0xa}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0})

1m1.840458201s ago: executing program 7 (id=3054):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

1m1.246266698s ago: executing program 7 (id=3056):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "9d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

1m0.736375569s ago: executing program 7 (id=3058):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x603a53ca6eb25161)

45.551453641s ago: executing program 39 (id=3052):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0xe5, 0xa4, 0x40, 0x2770, 0x9052, 0x15f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x5c, 0xa}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0})

45.385561518s ago: executing program 40 (id=3058):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x603a53ca6eb25161)

17.988600503s ago: executing program 9 (id=3103):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b)
cachestat(r0, &(0x7f0000000040), &(0x7f0000000080), 0x0)

16.82360342s ago: executing program 9 (id=3104):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3000000}]}]}]}, 0x3c}}, 0x0)

16.338625763s ago: executing program 9 (id=3105):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x10003000)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

15.563810101s ago: executing program 9 (id=3106):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300004f000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

15.3927627s ago: executing program 9 (id=3107):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00')
lseek(r0, 0x96, 0x1)
lseek(r0, 0x1000000, 0x0)

15.150751396s ago: executing program 9 (id=3108):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x4305}, @val={0x3, 0x1, 0x0, 0x401, 0x2, 0x6}, @eth={@broadcast, @random="3ce5d7cb8553", @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0x2, "01"}}}}}}, 0x23)

0s ago: executing program 41 (id=3108):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x4305}, @val={0x3, 0x1, 0x0, 0x401, 0x2, 0x6}, @eth={@broadcast, @random="3ce5d7cb8553", @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0x2, "01"}}}}}}, 0x23)

kernel console output (not intermixed with test programs):

.028219][ T5951] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 526ms
[  377.065414][ T5951] gfs2: fsid=syz:syz.0: jid=0: Done
[  377.112764][T13034] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  377.246612][T13034] syz.4.2497: attempt to access beyond end of device
[  377.246612][T13034] loop4: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768
[  377.262204][T13034] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430
[  377.279059][T13034] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  377.298264][T13034] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  377.307738][T13034] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  377.316171][T13034] gfs2: fsid=syz:syz.0: File system withdrawn
[  377.322986][T13034] CPU: 0 UID: 0 PID: 13034 Comm: syz.4.2497 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  377.323021][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  377.323037][T13034] Call Trace:
[  377.323047][T13034]  <TASK>
[  377.323057][T13034]  dump_stack_lvl+0x189/0x250
[  377.323097][T13034]  ? __pfx_dump_stack_lvl+0x10/0x10
[  377.323130][T13034]  ? __pfx__printk+0x10/0x10
[  377.323168][T13034]  ? kobject_uevent_env+0x36b/0x8c0
[  377.323213][T13034]  gfs2_withdraw+0x111e/0x14f0
[  377.323270][T13034]  ? __pfx_gfs2_withdraw+0x10/0x10
[  377.323306][T13034]  ? __pfx_gfs2_lm+0x10/0x10
[  377.323340][T13034]  ? __bh_read+0xa7/0x1c0
[  377.323370][T13034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.323401][T13034]  ? __bh_read+0x102/0x1c0
[  377.323430][T13034]  gfs2_meta_check_ii+0x67/0x80
[  377.323469][T13034]  gfs2_quota_init+0xf96/0x1230
[  377.323497][T13034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.323527][T13034]  ? __lock_acquire+0xab9/0xd20
[  377.323592][T13034]  ? __pfx_gfs2_quota_init+0x10/0x10
[  377.323619][T13034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.323650][T13034]  ? __pfx_wake_up_bit+0x10/0x10
[  377.323686][T13034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.323725][T13034]  ? inode_go_inval+0x259/0x2c0
[  377.323761][T13034]  gfs2_make_fs_rw+0x181/0x2b0
[  377.323804][T13034]  gfs2_fill_super+0x1a91/0x20e0
[  377.323859][T13034]  ? __pfx_gfs2_fill_super+0x10/0x10
[  377.323893][T13034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.323927][T13034]  ? init_locking+0xb8/0x210
[  377.323959][T13034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.323988][T13034]  ? sb_set_blocksize+0x104/0x180
[  377.324016][T13034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.324044][T13034]  ? setup_bdev_super+0x4c1/0x5b0
[  377.324080][T13034]  get_tree_bdev_flags+0x40e/0x4d0
[  377.324111][T13034]  ? __pfx_gfs2_fill_super+0x10/0x10
[  377.324147][T13034]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  377.324180][T13034]  ? rcu_is_watching+0x15/0xb0
[  377.324219][T13034]  gfs2_get_tree+0x51/0x1e0
[  377.324259][T13034]  vfs_get_tree+0x92/0x2b0
[  377.324294][T13034]  do_new_mount+0x24a/0xa40
[  377.324339][T13034]  __se_sys_mount+0x317/0x410
[  377.324383][T13034]  ? __pfx___se_sys_mount+0x10/0x10
[  377.324415][T13034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.324454][T13034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.324483][T13034]  ? __x64_sys_mount+0x20/0xc0
[  377.324522][T13034]  do_syscall_64+0xfa/0x3b0
[  377.324546][T13034]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.324601][T13034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.324626][T13034]  ? srso_alias_return_thunk+0x5/0xfbef5
[  377.324656][T13034]  ? exc_page_fault+0x9f/0xf0
[  377.324700][T13034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.324724][T13034] RIP: 0033:0x7f08b55900ca
[  377.324747][T13034] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  377.324768][T13034] RSP: 002b:00007f08b63f6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  377.324795][T13034] RAX: ffffffffffffffda RBX: 00007f08b63f6ef0 RCX: 00007f08b55900ca
[  377.324814][T13034] RDX: 0000200000000240 RSI: 0000200000000000 RDI: 00007f08b63f6eb0
[  377.324833][T13034] RBP: 0000200000000240 R08: 00007f08b63f6ef0 R09: 0000000001004c00
[  377.324851][T13034] R10: 0000000001004c00 R11: 0000000000000246 R12: 0000200000000000
[  377.324868][T13034] R13: 00007f08b63f6eb0 R14: 0000000000012616 R15: 0000200000000500
[  377.324907][T13034]  </TASK>
[  377.324971][T13034] gfs2: fsid=syz:syz.0: can't make FS RW: -5
[  377.660360][ T5944] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  377.826764][ T5944] usb 4-1: Using ep0 maxpacket: 16
[  377.860196][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  377.866673][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  377.888376][ T5944] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  377.958346][ T5944] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.005550][ T5944] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.072343][ T5944] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  378.137834][ T5944] usb 4-1: config 7 interface 0 has no altsetting 0
[  378.163921][ T5944] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  378.197593][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.247614][T13078] loop7: detected capacity change from 0 to 512
[  378.337144][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/743.tmp-b7:4' failed: Read-only file system
[  378.371839][T13078] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2516: bg 0: block 5: invalid block bitmap
[  378.438056][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/739.tmp-b7:8' failed: Read-only file system
[  378.469692][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/743.tmp-b7:4' failed: Read-only file system
[  378.480311][T13078] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  378.500129][ T7092] udevd[7092]: symlink '../../loop7' '/dev/disk/by-diskseq/746.tmp-b7:7' failed: Read-only file system
[  378.513149][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/745.tmp-b7:4' failed: Read-only file system
[  378.528920][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/745.tmp-b7:4' failed: Read-only file system
[  378.547356][T13078] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2516: invalid indirect mapped block 3 (level 2)
[  378.556921][ T7092] udevd[7092]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  378.598056][T13078] EXT4-fs (loop7): 2 truncates cleaned up
[  378.668389][T13044] udevd[13044]: symlink '../../loop8' '/dev/disk/by-diskseq/739.tmp-b7:8' failed: Read-only file system
[  378.671109][T13078] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.687818][ T5944] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.001F/input/input18
[  378.798491][T13089] loop8: detected capacity change from 0 to 128
[  378.809418][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/745.tmp-b7:4' failed: Read-only file system
[  378.825409][ T5944] kye 0003:0458:5010.001F: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0
[  378.875153][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  378.882751][T13089] FAT-fs (loop8): error, corrupted directory (invalid entries)
[  378.945473][T13089] FAT-fs (loop8): Filesystem has been set read-only
[  378.986019][T10251] udevd[10251]: symlink '../../loop8' '/dev/disk/by-diskseq/747.tmp-b7:8' failed: Read-only file system
[  379.007451][T13093] FAT-fs (loop8): error, corrupted directory (invalid entries)
[  379.046651][ T5944] usb 4-1: USB disconnect, device number 17
[  379.147680][ T7961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.194472][T13066] loop9: detected capacity change from 0 to 32768
[  379.227119][T13095] fido_id[13095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  379.792955][T13107] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  380.543168][T13135] loop8: detected capacity change from 0 to 2048
[  380.581616][T13135] EXT4-fs: Ignoring removed nomblk_io_submit option
[  380.639704][T13137] loop4: detected capacity change from 0 to 64
[  380.662486][T13137] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  380.702973][T13135] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.825770][T10582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.139264][T13155] program syz.6.2551 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  381.487729][T13165] gre1: entered promiscuous mode
[  381.518178][T13167] loop7: detected capacity change from 0 to 1024
[  381.685112][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2559'.
[  381.788323][ T1477] hfsplus: b-tree write err: -5, ino 4
[  382.011009][ T5951] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[  382.171456][T13191] loop4: detected capacity change from 0 to 1024
[  382.184358][ T5951] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  382.206520][ T5951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.273661][T13191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.303944][ T5951] usb 9-1: config 0 descriptor??
[  382.322188][T13198] loop9: detected capacity change from 0 to 4096
[  382.384773][ T5951] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  382.423872][T13191] EXT4-fs (loop4): Online resizing not supported with bigalloc
[  382.437086][T13202] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  382.607071][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.751737][ T5951] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  382.800943][ T5951] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  382.965854][ T5951] usb 9-1: USB disconnect, device number 5
[  383.548151][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/761.tmp-b7:4' failed: Read-only file system
[  383.605398][T13232] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.616409][ T6183] udevd[6183]: symlink '../../loop3' '/dev/disk/by-diskseq/744.tmp-b7:3' failed: Read-only file system
[  383.694173][T13044] udevd[13044]: symlink '../../loop8' '/dev/disk/by-diskseq/754.tmp-b7:8' failed: Read-only file system
[  383.756523][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/757.tmp-b7:7' failed: Read-only file system
[  383.843629][T13044] udevd[13044]: symlink '../../loop9' '/dev/disk/by-diskseq/760.tmp-b7:9' failed: Read-only file system
[  383.926048][ T6183] udevd[6183]: symlink '../../loop3' '/dev/disk/by-diskseq/744.tmp-b7:3' failed: Read-only file system
[  384.179457][T13044] udevd[13044]: symlink '../../loop3' '/dev/disk/by-diskseq/744.tmp-b7:3' failed: Read-only file system
[  384.347490][T13044] udevd[13044]: symlink '../../loop7' '/dev/disk/by-diskseq/757.tmp-b7:7' failed: Read-only file system
[  384.418289][ T6183] udevd[6183]: symlink '../../loop3' '/dev/disk/by-diskseq/744.tmp-b7:3' failed: Read-only file system
[  384.502806][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/761.tmp-b7:4' failed: Read-only file system
[  384.937701][T13267] loop4: detected capacity change from 0 to 512
[  384.967068][T13267] EXT4-fs: Ignoring removed nomblk_io_submit option
[  385.005243][T13269] loop8: detected capacity change from 0 to 128
[  385.022842][T13247] loop9: detected capacity change from 0 to 32768
[  385.082388][T13247] ERROR: (device loop9): dtReadFirst: DT_GETPAGE: dtree page corrupt
[  385.082388][T13247] 
[  385.100733][T13247] ERROR: (device loop9): remounting filesystem as read-only
[  385.107863][T13267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.210415][T13267] ext4 filesystem being mounted at /420/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  385.292008][ T5951] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  385.369660][T13278] Bluetooth: MGMT ver 1.23
[  385.481464][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.498332][ T5951] usb 4-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 161, changing to 11
[  385.546360][ T5951] usb 4-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.581843][T13282] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2607'.
[  385.614036][ T5951] usb 4-1: config 0 interface 0 has no altsetting 0
[  385.634264][ T5951] usb 4-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice= 0.00
[  385.680927][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.733223][ T5951] usb 4-1: config 0 descriptor??
[  385.936512][ T5854] Bluetooth: hci3: unexpected event for opcode 0x2027
[  386.168852][ T5951] apple 0003:05AC:021B.0020: unbalanced collection at end of report description
[  386.217853][ T5951] apple 0003:05AC:021B.0020: parse failed
[  386.230072][ T5944] IPVS: starting estimator thread 0...
[  386.255534][ T5951] apple 0003:05AC:021B.0020: probe with driver apple failed with error -22
[  386.274846][T13297] loop8: detected capacity change from 0 to 1024
[  386.340396][T13300] IPVS: using max 24 ests per chain, 57600 per kthread
[  386.394824][T13297] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  386.410061][ T5944] usb 4-1: USB disconnect, device number 18
[  386.431317][T13297] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  386.664768][T10582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.697468][T13318] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2624'.
[  386.820361][ T5830] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  386.977514][T13328] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (2)
[  387.011139][ T5830] usb 8-1: Using ep0 maxpacket: 32
[  387.037399][ T5830] usb 8-1: config index 0 descriptor too short (expected 35577, got 27)
[  387.088909][ T5830] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  387.133490][ T5830] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92
[  387.163196][ T5830] usb 8-1: config 1 has no interface number 0
[  387.178948][ T5830] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  387.207379][ T5830] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  387.234609][T13329] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  387.298081][ T5830] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  387.328558][ T5830] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.379630][ T5830] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found
[  387.573961][ T5830] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached
[  387.605292][T13347] loop9: detected capacity change from 0 to 256
[  387.695538][T13347] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  387.833239][   T30] audit: type=1800 audit(1752723487.693:94): pid=13347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2636" name="file1" dev="loop9" ino=1048773 res=0 errno=0
[  387.833831][T13347] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  387.904800][T13354] loop8: detected capacity change from 0 to 256
[  387.933848][T13354] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  387.950401][T13347] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  387.981729][T13347] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  388.099432][ T5830] usb 8-1: USB disconnect, device number 14
[  388.107817][ T5830] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected
[  388.448926][T13365] loop4: detected capacity change from 0 to 512
[  388.455934][T13370] loop9: detected capacity change from 0 to 64
[  388.501469][   T30] audit: type=1800 audit(1752723488.353:95): pid=13370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2646" name="file1" dev="loop9" ino=5 res=0 errno=0
[  388.521823][    C1] vkms_vblank_simulate: vblank timer overrun
[  388.565566][T13365] EXT4-fs (loop4): orphan cleanup on readonly fs
[  388.565591][T13365] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  388.567457][T13365] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  388.580579][T13365] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2645: attempt to clear invalid blocks 2 len 1
[  388.670356][ T5830] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  388.724312][ T7092] udevd[7092]: symlink '../../loop4' '/dev/disk/by-diskseq/774.tmp-b7:4' failed: Read-only file system
[  388.742430][T13365] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2645: invalid indirect mapped block 1819239214 (level 0)
[  388.776861][ T6294] udevd[6294]: symlink '../../loop8' '/dev/disk/by-diskseq/772.tmp-b7:8' failed: Read-only file system
[  388.799964][T13365] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2645: invalid indirect mapped block 1819239214 (level 1)
[  388.803672][T13044] udevd[13044]: symlink '../../loop9' '/dev/disk/by-diskseq/770.tmp-b7:9' failed: Read-only file system
[  388.841886][ T5944] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  388.849116][ T7092] udevd[7092]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  388.866139][ T5830] usb 7-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1
[  388.885839][T13365] EXT4-fs (loop4): 1 truncate cleaned up
[  388.900552][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.907962][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/757.tmp-b7:7' failed: Read-only file system
[  388.921174][T13365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  388.952846][ T5830] usb 7-1: config 0 descriptor??
[  389.030412][ T5944] usb 4-1: Using ep0 maxpacket: 16
[  389.039506][ T5944] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  389.042295][T13044] udevd[13044]: symlink '../../loop9' '/dev/disk/by-diskseq/773.tmp-b7:9' failed: Read-only file system
[  389.054318][ T5830] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  389.064238][ T7092] udevd[7092]: symlink '../../loop4' '/dev/disk/by-diskseq/774.tmp-b7:4' failed: Read-only file system
[  389.070769][T13365] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  389.093304][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.128970][ T7092] udevd[7092]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  389.140275][ T5944] usb 4-1: Product: syz
[  389.147024][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/772.tmp-b7:8' failed: Read-only file system
[  389.161878][ T5944] usb 4-1: Manufacturer: syz
[  389.166494][ T5944] usb 4-1: SerialNumber: syz
[  389.171376][ T5830] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  389.176039][T13044] udevd[13044]: symlink '../../loop9' '/dev/disk/by-diskseq/775.tmp-b7:9' failed: Read-only file system
[  389.218350][T13365] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.2645: Abort forced by user
[  389.219368][ T5944] usb 4-1: config 0 descriptor??
[  389.245511][T13365] EXT4-fs (loop4): Remounting filesystem read-only
[  389.256813][T13365] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  389.299657][ T5830] usb 7-1: USB disconnect, device number 11
[  389.306723][T13387] loop9: detected capacity change from 0 to 1024
[  389.327146][ T5944] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  389.430708][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.631656][ T6000] usb 8-1: new full-speed USB device number 15 using dummy_hcd
[  389.731684][ T5944] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0
[  389.805334][ T6000] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  389.824241][ T6000] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.856235][ T6000] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  389.870935][T13397] block device autoloading is deprecated and will be removed.
[  389.890104][ T6000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.908972][T13397] syz.9.2660: attempt to access beyond end of device
[  389.908972][T13397] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  389.942302][ T5830] usb 4-1: USB disconnect, device number 19
[  389.997484][ T5830] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0
[  390.028518][ T6000] hub 8-1:4.0: USB hub found
[  390.044109][ T5830] visor 4-1:0.0: device disconnected
[  390.251748][ T6000] hub 8-1:4.0: 12 ports detected
[  390.486778][ T6000] usb 8-1: selecting invalid altsetting 1
[  390.998332][ T6000] hub 8-1:4.0: Using single TT (err -22)
[  391.135869][ T6000] hub 8-1:4.0: insufficient power available to use all downstream ports
[  392.037507][T13423] loop3: detected capacity change from 0 to 64
[  392.048946][T13401] loop4: detected capacity change from 0 to 32768
[  392.149640][T13423] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  392.332208][T13401] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  392.407102][   T30] audit: type=1800 audit(1752723492.233:96): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2671" name="file1" dev="loop3" ino=5 res=0 errno=0
[  392.446789][T13401] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  392.796213][T13401] XFS (loop4): Ending clean mount
[  392.949274][T13401] XFS (loop4): Quotacheck needed: Please wait.
[  393.190897][T13442] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  393.348412][T13401] XFS (loop4): Quotacheck: Done.
[  393.792574][ T5852] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  393.947250][ T6000] usb 8-1: USB disconnect, device number 15
[  394.042048][ T7092] udevd[7092]: symlink '../../loop9' '/dev/disk/by-diskseq/779.tmp-b7:9' failed: Read-only file system
[  394.088439][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/782.tmp-b7:4' failed: Read-only file system
[  394.207513][ T5873] udevd[5873]: symlink '../../loop8' '/dev/disk/by-diskseq/772.tmp-b7:8' failed: Read-only file system
[  394.221455][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system
[  394.446968][T13044] udevd[13044]: symlink '../../loop3' '/dev/disk/by-diskseq/783.tmp-b7:3' failed: Read-only file system
[  394.707872][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/782.tmp-b7:4' failed: Read-only file system
[  394.851154][T13459] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2685'.
[  394.990096][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/782.tmp-b7:4' failed: Read-only file system
[  395.048150][ T5873] udevd[5873]: symlink '../../loop8' '/dev/disk/by-diskseq/772.tmp-b7:8' failed: Read-only file system
[  395.107199][ T7092] udevd[7092]: symlink '../../loop9' '/dev/disk/by-diskseq/779.tmp-b7:9' failed: Read-only file system
[  395.347029][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/782.tmp-b7:4' failed: Read-only file system
[  396.352710][T13480] netlink: 'syz.8.2694': attribute type 61 has an invalid length.
[  397.194474][ T5951] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  397.317880][T13492] loop4: detected capacity change from 0 to 256
[  397.438593][ T5951] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  397.523094][ T5951] usb 9-1: config 0 interface 0 has no altsetting 0
[  397.612416][ T5951] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  397.708315][ T5951] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.767874][T13497] netlink: 'syz.3.2701': attribute type 3 has an invalid length.
[  397.814167][ T5951] usb 9-1: Product: syz
[  397.818366][ T5951] usb 9-1: Manufacturer: syz
[  397.913944][ T5951] usb 9-1: SerialNumber: syz
[  397.988988][ T5951] usb 9-1: config 0 descriptor??
[  398.102714][ T5951] usb 9-1: selecting invalid altsetting 0
[  398.471157][ T5951] usb 9-1: USB disconnect, device number 6
[  399.206343][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/779.tmp-b7:9' failed: Read-only file system
[  399.427191][T13044] udevd[13044]: symlink '../../loop7' '/dev/disk/by-diskseq/757.tmp-b7:7' failed: Read-only file system
[  399.614918][T13518] netlink: ct family unspecified
[  399.619927][T13518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.644222][T13044] udevd[13044]: symlink '../../loop8' '/dev/disk/by-diskseq/772.tmp-b7:8' failed: Read-only file system
[  399.757153][ T7092] udevd[7092]: symlink '../../loop4' '/dev/disk/by-diskseq/786.tmp-b7:4' failed: Read-only file system
[  399.776085][ T6183] udevd[6183]: symlink '../../loop3' '/dev/disk/by-diskseq/783.tmp-b7:3' failed: Read-only file system
[  399.966843][T13044] udevd[13044]: symlink '../../loop9' '/dev/disk/by-diskseq/779.tmp-b7:9' failed: Read-only file system
[  400.136812][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/772.tmp-b7:8' failed: Read-only file system
[  400.325914][T13533] loop8: detected capacity change from 0 to 164
[  400.407544][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/757.tmp-b7:7' failed: Read-only file system
[  400.451760][T13529] netlink: zone id is out of range
[  400.492328][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/786.tmp-b7:4' failed: Read-only file system
[  400.536185][T13529] netlink: zone id is out of range
[  400.604823][T13529] netlink: zone id is out of range
[  400.684660][T13533] iso9660: Corrupted directory entry in block 4 of inode 1792
[  400.694077][T13529] netlink: zone id is out of range
[  400.761641][T13529] netlink: zone id is out of range
[  400.823720][T13529] netlink: zone id is out of range
[  400.865595][T13044] udevd[13044]: symlink '../../loop3' '/dev/disk/by-diskseq/783.tmp-b7:3' failed: Read-only file system
[  400.911757][T13529] netlink: zone id is out of range
[  401.011849][T13529] netlink: zone id is out of range
[  401.199953][T13538] netlink: 'syz.3.2721': attribute type 29 has an invalid length.
[  401.340883][T13538] netlink: 'syz.3.2721': attribute type 29 has an invalid length.
[  401.359038][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2723'.
[  402.383522][T13556] netlink: 'syz.9.2729': attribute type 10 has an invalid length.
[  402.408927][T13555] loop7: detected capacity change from 0 to 256
[  404.104646][T13568] loop3: detected capacity change from 0 to 40427
[  404.125169][T13568] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  404.170441][T13568] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  404.215625][T13568] F2FS-fs (loop3): invalid crc value
[  404.381231][T13044] udevd[13044]: symlink '../../loop3' '/dev/disk/by-diskseq/790.tmp-b7:3' failed: Read-only file system
[  404.422676][T13044] udevd[13044]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system
[  404.517825][T13568] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  404.538102][T13568] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  404.633449][T13568] fscrypt (loop3, inode 3): Error -61 getting encryption context
[  404.719774][T13044] udevd[13044]: symlink '../../loop3' '/dev/disk/by-diskseq/790.tmp-b7:3' failed: Read-only file system
[  404.758432][T13044] udevd[13044]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system
[  407.013528][T13542] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  407.308327][T13542] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2723'.
[  407.426880][T13044] udevd[13044]: symlink '../../loop7' '/dev/disk/by-diskseq/789.tmp-b7:7' failed: Read-only file system
[  407.457693][T13556] team0: Device ipvlan1 failed to register rx_handler
[  407.599895][T13044] udevd[13044]: symlink '../../loop7' '/dev/disk/by-diskseq/789.tmp-b7:7' failed: Read-only file system
[  407.804770][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/786.tmp-b7:4' failed: Read-only file system
[  407.953993][T13044] udevd[13044]: symlink '../../loop7' '/dev/disk/by-diskseq/791.tmp-b7:7' failed: Read-only file system
[  408.056266][ T7092] udevd[7092]: symlink '../../loop8' '/dev/disk/by-diskseq/788.tmp-b7:8' failed: Read-only file system
[  408.175438][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/779.tmp-b7:9' failed: Read-only file system
[  408.376319][T13583] loop7: detected capacity change from 0 to 512
[  408.516509][T13583] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.530189][    C1] sched: DL replenish lagged too much
[  408.668384][T13583] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  408.682635][T13593] input input19: cannot allocate more than FF_MAX_EFFECTS effects
[  408.931345][T13583] EXT4-fs error (device loop7): ext4_get_first_dir_block:3547: inode #12: comm syz.7.2741: directory missing '..'
[  409.497195][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/786.tmp-b7:4' failed: Read-only file system
[  409.689655][T13044] udevd[13044]: symlink '../../loop9' '/dev/disk/by-diskseq/779.tmp-b7:9' failed: Read-only file system
[  409.902265][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/786.tmp-b7:4' failed: Read-only file system
[  410.074608][   T30] audit: type=1326 audit(1752723509.923:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.8.2748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0d38e929 code=0x7fc00000
[  410.194422][T13044] udevd[13044]: symlink '../../loop9' '/dev/disk/by-diskseq/779.tmp-b7:9' failed: Read-only file system
[  410.306880][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/786.tmp-b7:4' failed: Read-only file system
[  410.447206][T13044] udevd[13044]: symlink '../../loop8' '/dev/disk/by-diskseq/788.tmp-b7:8' failed: Read-only file system
[  410.533802][T13618] loop8: detected capacity change from 0 to 512
[  410.541150][T13619] loop4: detected capacity change from 0 to 1024
[  410.695171][T13618] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.737991][T13044] udevd[13044]: symlink '../../loop8' '/dev/disk/by-diskseq/794.tmp-b7:8' failed: Read-only file system
[  410.769279][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/793.tmp-b7:4' failed: Read-only file system
[  410.793357][T13618] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  410.847911][T13044] udevd[13044]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  410.873204][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  411.512922][T13622] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set
[  412.314645][T10582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.331550][ T1477] hfsplus: b-tree write err: -5, ino 4
[  412.381536][ T7961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.240002][T13631] loop8: detected capacity change from 0 to 4096
[  413.496060][T13631] NILFS (loop8): invalid segment: Checksum error in segment payload
[  413.560928][T13631] NILFS (loop8): trying rollback from an earlier position
[  413.743356][T13631] NILFS (loop8): recovery complete
[  413.808647][T13648] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  414.659698][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/795.tmp-b7:4' failed: Read-only file system
[  414.773799][T13657] CUSE: unknown device info "€"
[  414.778701][T13657] CUSE: unknown device info ""
[  414.859737][T13660] loop7: detected capacity change from 0 to 512
[  414.877783][ T7092] udevd[7092]: symlink '../../loop7' '/dev/disk/by-diskseq/797.tmp-b7:7' failed: Read-only file system
[  414.900979][T13657] CUSE: unknown device info "
"
[  414.905868][T13657] CUSE: unknown device info "€"
[  414.947211][T13044] udevd[13044]: symlink '../../loop8' '/dev/disk/by-diskseq/798.tmp-b7:8' failed: Read-only file system
[  414.997744][T13657] CUSE: zero length info key specified
[  415.066036][T13660] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  415.107785][T13044] udevd[13044]: symlink '../../loop8' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:8' failed: Read-only file system
[  415.174509][ T7092] udevd[7092]: symlink '../../loop4' '/dev/disk/by-diskseq/795.tmp-b7:4' failed: Read-only file system
[  415.217594][T13660] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  415.237146][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/799.tmp-b7:7' failed: Read-only file system
[  415.302984][T13660] System zones: 1-12
[  415.307421][T13660] EXT4-fs (loop7): orphan cleanup on readonly fs
[  415.368422][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  415.431916][T13660] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2773: invalid indirect mapped block 12 (level 1)
[  415.529813][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000000007.tmp-b7:7' failed: Read-only file system
[  415.589259][T13660] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2773: invalid indirect mapped block 2 (level 2)
[  415.663273][T13044] udevd[13044]: symlink '../../loop8' '/dev/disk/by-diskseq/798.tmp-b7:8' failed: Read-only file system
[  415.751700][T13660] EXT4-fs (loop7): 1 truncate cleaned up
[  415.846183][T13660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  415.885341][T13044] udevd[13044]: symlink '../../loop8' '/dev/disk/by-diskseq/798.tmp-b7:8' failed: Read-only file system
[  416.324045][ T7961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  416.581476][T13677] sctp: [Deprecated]: syz.6.2781 (pid 13677) Use of int in max_burst socket option.
[  416.581476][T13677] Use struct sctp_assoc_value instead
[  417.313050][T13685] loop4: detected capacity change from 0 to 2048
[  417.466473][T13685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  417.963067][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.471499][T13703] loop4: detected capacity change from 0 to 512
[  418.551085][T13703] EXT4-fs: Ignoring removed bh option
[  418.594645][T13703] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  418.767161][T13703] EXT4-fs (loop4): 1 truncate cleaned up
[  418.852818][T13703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  419.072768][   T30] audit: type=1800 audit(1752723518.933:98): pid=13703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2791" name="file2" dev="loop4" ino=16 res=0 errno=0
[  419.342139][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.715883][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/804.tmp-b7:4' failed: Read-only file system
[  419.857349][T13714] loop4: detected capacity change from 0 to 512
[  419.885634][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/779.tmp-b7:9' failed: Read-only file system
[  419.998021][ T7092] udevd[7092]: symlink '../../loop7' '/dev/disk/by-diskseq/801.tmp-b7:7' failed: Read-only file system
[  420.042400][T13714] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  420.161289][T13714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  420.169347][T13714] System zones: 1-12
[  420.306200][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/800.tmp-b7:8' failed: Read-only file system
[  420.339445][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/805.tmp-b7:4' failed: Read-only file system
[  420.361453][T13714] EXT4-fs (loop4): orphan cleanup on readonly fs
[  420.368129][T13714] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2796: invalid indirect mapped block 12 (level 1)
[  420.467155][ T7092] udevd[7092]: symlink '../../loop9' '/dev/disk/by-diskseq/779.tmp-b7:9' failed: Read-only file system
[  420.493828][T13722] loop7: detected capacity change from 0 to 128
[  420.574686][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  420.616284][T13714] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2796: invalid indirect mapped block 2 (level 2)
[  420.689798][T13722] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  420.762371][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000000007.tmp-b7:4' failed: Read-only file system
[  420.786402][T13714] EXT4-fs (loop4): 1 truncate cleaned up
[  420.819208][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/807.tmp-b7:7' failed: Read-only file system
[  420.858114][T13714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  420.902070][T13722] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  421.005560][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:7' failed: Read-only file system
[  421.445385][ T7961] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  421.483952][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  421.519514][T13733] loop9: detected capacity change from 0 to 1024
[  421.635503][T13733] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 ro without journal. Quota mode: writeback.
[  422.096776][T13733] EXT4-fs: Ignoring removed orlov option
[  422.295314][T13733] EXT4-fs error (device loop9): __ext4_remount:6736: comm syz.9.2806: Abort forced by user
[  422.447130][T13733] EXT4-fs (loop9): Remounting filesystem read-only
[  422.526323][T13733] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-001000000000 r/w.
[  422.660042][T13739] loop7: detected capacity change from 0 to 4096
[  422.767900][T13739] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  422.979828][T11937] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  423.154354][T13739] ntfs3(loop7): ino=19, mi_enum_attr
[  423.154406][T13739] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  423.347131][T13739] ntfs3(loop7): failed to convert "c46c" to iso8859-13
[  423.466269][T13739] ntfs3(loop7): ino=20, mi_enum_attr
[  424.020979][ T5951] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  424.089342][ T5867] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  424.222484][ T5867] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  424.239801][ T5951] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  424.239836][ T5951] usb 9-1: config 0 has no interface number 0
[  424.239886][ T5951] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  424.239914][ T5951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.244066][ T5951] usb 9-1: config 0 descriptor??
[  424.247892][ T5951] usb 9-1: selecting invalid altsetting 1
[  424.311510][ T5951] dvb_ttusb_budget: ttusb_init_controller: error
[  424.311531][ T5951] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  424.642061][ T5867] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  424.654567][ T5867] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  424.663854][ T5867] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  424.758120][ T7092] udevd[7092]: symlink '../../loop4' '/dev/disk/by-diskseq/810.tmp-b7:4' failed: Read-only file system
[  424.915588][T13044] udevd[13044]: symlink '../../loop9' '/dev/disk/by-diskseq/812.tmp-b7:9' failed: Read-only file system
[  425.021077][ T5951] DVB: Unable to find symbol cx22700_attach()
[  425.155602][ T7092] udevd[7092]: symlink '../../loop7' '/dev/disk/by-diskseq/813.tmp-b7:7' failed: Read-only file system
[  425.325464][T13044] udevd[13044]: symlink '../../loop8' '/dev/disk/by-diskseq/800.tmp-b7:8' failed: Read-only file system
[  425.621121][ T5951] DVB: Unable to find symbol tda10046_attach()
[  425.627327][ T5951] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  425.805685][ T5951] usb 9-1: USB disconnect, device number 7
[  425.885139][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/810.tmp-b7:4' failed: Read-only file system
[  426.013459][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/812.tmp-b7:9' failed: Read-only file system
[  426.047385][ T5873] udevd[5873]: symlink '../../loop7' '/dev/disk/by-diskseq/813.tmp-b7:7' failed: Read-only file system
[  426.438597][T13044] udevd[13044]: symlink '../../loop8' '/dev/disk/by-diskseq/800.tmp-b7:8' failed: Read-only file system
[  426.513925][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/813.tmp-b7:7' failed: Read-only file system
[  426.711485][ T5867] Bluetooth: hci6: command tx timeout
[  427.162287][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/810.tmp-b7:4' failed: Read-only file system
[  427.344381][T13796] loop8: detected capacity change from 0 to 1024
[  427.372505][T13794] loop4: detected capacity change from 0 to 2048
[  427.383954][T13798] loop9: detected capacity change from 0 to 64
[  427.488106][T13794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  427.697939][T13794] EXT4-fs error (device loop4): ext4_ext_precache:649: inode #2: comm syz.4.2832: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  427.961643][ T1477] hfsplus: b-tree write err: -5, ino 4
[  427.969794][T13794] EXT4-fs (loop4): Remounting filesystem read-only
[  428.523065][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.793324][ T5867] Bluetooth: hci6: command tx timeout
[  428.827947][T13759] chnl_net:caif_netlink_parms(): no params data found
[  429.116858][T13812] loop7: detected capacity change from 0 to 2048
[  429.367469][T13817] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  429.765960][T13044] udevd[13044]: symlink '../../loop7' '/dev/disk/by-diskseq/820.tmp-b7:7' failed: Read-only file system
[  429.897745][T13044] udevd[13044]: symlink '../../loop7' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:7' failed: Read-only file system
[  430.077199][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/818.tmp-b7:8' failed: Read-only file system
[  430.368672][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/817.tmp-b7:9' failed: Read-only file system
[  430.389819][T13044] udevd[13044]: symlink '../../loop7' '/dev/disk/by-diskseq/820.tmp-b7:7' failed: Read-only file system
[  430.421101][T13828] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2843'.
[  430.496544][ T7092] udevd[7092]: symlink '../../loop4' '/dev/disk/by-diskseq/819.tmp-b7:4' failed: Read-only file system
[  430.542795][T13759] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.549959][T13759] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.606656][T13044] udevd[13044]: symlink '../../loop7' '/dev/disk/by-diskseq/820.tmp-b7:7' failed: Read-only file system
[  430.711203][T13759] bridge_slave_0: entered allmulticast mode
[  430.783522][T13759] bridge_slave_0: entered promiscuous mode
[  430.838857][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/818.tmp-b7:8' failed: Read-only file system
[  430.879595][T13044] udevd[13044]: symlink '../../loop7' '/dev/disk/by-diskseq/820.tmp-b7:7' failed: Read-only file system
[  430.901865][ T5867] Bluetooth: hci6: command tx timeout
[  430.913722][T13759] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.021547][T13759] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.029176][T13759] bridge_slave_1: entered allmulticast mode
[  431.109234][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/819.tmp-b7:4' failed: Read-only file system
[  431.163117][T13759] bridge_slave_1: entered promiscuous mode
[  431.338860][T13831] loop9: detected capacity change from 0 to 8192
[  431.489720][T13834] loop8: detected capacity change from 0 to 4096
[  431.563877][T13831] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  431.719120][T13839] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  431.730630][   T30] audit: type=1800 audit(1752723531.571:99): pid=13831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2845" name="file1" dev="loop9" ino=1048778 res=0 errno=0
[  431.874033][T13759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  432.039564][T13759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.865230][T13852] loop8: detected capacity change from 0 to 256
[  432.951377][ T5867] Bluetooth: hci6: command tx timeout
[  433.081207][T13852] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xc5dfab67, utbl_chksum : 0xe619d30d)
[  433.322168][T13759] team0: Port device team_slave_0 added
[  433.441396][T13759] team0: Port device team_slave_1 added
[  433.808929][T13856] loop7: detected capacity change from 0 to 4096
[  434.098758][T13759] batman_adv: batadv0: Adding interface: batadv_slave_0
[  434.200261][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.546253][T13759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  434.714651][T13759] batman_adv: batadv0: Adding interface: batadv_slave_1
[  434.782159][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  434.916291][ T7092] udevd[7092]: symlink '../../loop7' '/dev/disk/by-diskseq/828.tmp-b7:7' failed: Read-only file system
[  435.006179][T13044] udevd[13044]: symlink '../../loop4' '/dev/disk/by-diskseq/819.tmp-b7:4' failed: Read-only file system
[  435.086007][ T7092] udevd[7092]: symlink '../../loop7' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:7' failed: Read-only file system
[  435.111563][T13759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  435.505660][T13044] udevd[13044]: symlink '../../loop8' '/dev/disk/by-diskseq/827.tmp-b7:8' failed: Read-only file system
[  435.586304][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/828.tmp-b7:7' failed: Read-only file system
[  435.655698][T13875] vlan4: entered promiscuous mode
[  435.705946][T13875] bridge0: entered promiscuous mode
[  435.735766][T13044] udevd[13044]: symlink '../../loop7' '/dev/disk/by-diskseq/828.tmp-b7:7' failed: Read-only file system
[  435.966990][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/827.tmp-b7:8' failed: Read-only file system
[  436.059428][T13044] udevd[13044]: symlink '../../loop7' '/dev/disk/by-diskseq/828.tmp-b7:7' failed: Read-only file system
[  436.119185][T13759] hsr_slave_0: entered promiscuous mode
[  436.215727][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/819.tmp-b7:4' failed: Read-only file system
[  436.242233][T13759] hsr_slave_1: entered promiscuous mode
[  436.248574][T13759] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  436.272942][T13881] loop7: detected capacity change from 0 to 512
[  436.411149][T13759] Cannot create hsr debugfs directory
[  436.494711][T13881] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  436.512358][T13884] [U] 	
[  436.563726][T13044] udevd[13044]: symlink '../../loop7' '/dev/disk/by-diskseq/829.tmp-b7:7' failed: Read-only file system
[  436.623481][T13881] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  437.073595][T13890] loop8: detected capacity change from 0 to 512
[  437.227531][ T7961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.831242][ T5933] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  439.083108][ T5933] usb 8-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  439.136408][ T5933] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.220921][ T5933] usb 8-1: Product: syz
[  439.258876][ T5933] usb 8-1: Manufacturer: syz
[  439.313833][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  439.328495][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  439.344515][ T5933] usb 8-1: SerialNumber: syz
[  439.421990][ T5933] usb 8-1: config 0 descriptor??
[  439.495735][ T5933] gm12u320 8-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[  439.614258][ T5933] gm12u320 8-1:0.0: probe with driver gm12u320 failed with error -5
[  439.695297][ T5933] usb-storage 8-1:0.0: USB Mass Storage device detected
[  439.840147][ T5933] usb-storage 8-1:0.0: device ignored
[  439.927688][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/833.tmp-b7:8' failed: Read-only file system
[  440.057500][ T7092] udevd[7092]: symlink '../../loop9' '/dev/disk/by-diskseq/824.tmp-b7:9' failed: Read-only file system
[  440.445698][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/824.tmp-b7:9' failed: Read-only file system
[  440.733500][ T7092] udevd[7092]: symlink '../../loop7' '/dev/disk/by-diskseq/832.tmp-b7:7' failed: Read-only file system
[  440.755973][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/833.tmp-b7:8' failed: Read-only file system
[  440.816778][ T7561] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.873074][T13921] sg_write: data in/out 16514940/4 bytes for SCSI command 0x1c-- guessing data in;
[  440.873074][T13921]    program syz.7.2884 not setting count and/or reply_len properly
[  441.106098][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/833.tmp-b7:8' failed: Read-only file system
[  441.246619][T13900] loop4: detected capacity change from 0 to 32768
[  441.366923][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/824.tmp-b7:9' failed: Read-only file system
[  441.491305][ T5873] udevd[5873]: symlink '../../loop7' '/dev/disk/by-diskseq/832.tmp-b7:7' failed: Read-only file system
[  441.766072][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/824.tmp-b7:9' failed: Read-only file system
[  441.906622][ T5873] udevd[5873]: symlink '../../loop8' '/dev/disk/by-diskseq/833.tmp-b7:8' failed: Read-only file system
[  442.045944][T13932] loop9: detected capacity change from 0 to 256
[  442.158514][T13932] exfat: Deprecated parameter 'namecase'
[  442.335385][T13932] exFAT-fs (loop9): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  443.617553][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  443.673526][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  443.689305][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  443.707179][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  443.716318][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  444.838378][T13931] loop8: detected capacity change from 0 to 32768
[  445.466372][ T7092] udevd[7092]: symlink '../../loop9' '/dev/disk/by-diskseq/837.tmp-b7:9' failed: Read-only file system
[  445.534477][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/838.tmp-b7:8' failed: Read-only file system
[  445.636397][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:8' failed: Read-only file system
[  445.751057][ T5854] Bluetooth: hci2: command tx timeout
[  445.789567][T13944] chnl_net:caif_netlink_parms(): no params data found
[  445.977433][ T7092] udevd[7092]: symlink '../../loop9' '/dev/disk/by-diskseq/837.tmp-b7:9' failed: Read-only file system
[  446.488493][ T7092] udevd[7092]: symlink '../../loop9' '/dev/disk/by-diskseq/837.tmp-b7:9' failed: Read-only file system
[  446.614617][T13972] loop9: detected capacity change from 0 to 256
[  446.876668][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/838.tmp-b7:8' failed: Read-only file system
[  446.947681][ T7092] udevd[7092]: symlink '../../loop9' '/dev/disk/by-diskseq/840.tmp-b7:9' failed: Read-only file system
[  447.068271][ T5873] udevd[5873]: symlink '../../loop7' '/dev/disk/by-diskseq/832.tmp-b7:7' failed: Read-only file system
[  447.097531][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/838.tmp-b7:8' failed: Read-only file system
[  447.256770][T13944] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.308022][T13944] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.319541][ T7092] udevd[7092]: symlink '../../loop9' '/dev/disk/by-diskseq/840.tmp-b7:9' failed: Read-only file system
[  447.403706][T13944] bridge_slave_0: entered allmulticast mode
[  447.455308][T13944] bridge_slave_0: entered promiscuous mode
[  447.544481][T13944] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.563692][T13978] loop9: detected capacity change from 0 to 1024
[  447.612087][T13944] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.674636][T13978] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  447.697873][T13944] bridge_slave_1: entered allmulticast mode
[  447.774466][T13944] bridge_slave_1: entered promiscuous mode
[  447.831985][ T5854] Bluetooth: hci2: command tx timeout
[  448.305855][T11937] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.369714][T13944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.525539][T13944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.246874][T13944] team0: Port device team_slave_0 added
[  449.363270][T13944] team0: Port device team_slave_1 added
[  449.915586][ T5867] Bluetooth: hci2: command tx timeout
[  449.998587][T13944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  450.059882][T13944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  450.331179][T13944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  450.426305][T14007] netlink: 'syz.9.2918': attribute type 2 has an invalid length.
[  450.454405][T13944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  450.471379][T14007] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2918'.
[  450.490377][T13944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  450.544957][T13985] loop7: detected capacity change from 0 to 32768
[  450.621082][T13985] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2909 (13985)
[  450.730144][T13944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  450.838059][T13985] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  450.925288][T13985] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  451.032113][T13985] BTRFS info (device loop7): using free-space-tree
[  451.085531][ T7092] udevd[7092]: symlink '../../loop4' '/dev/disk/by-diskseq/836.tmp-b7:4' failed: Read-only file system
[  451.102525][T13985] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  451.103178][T13985] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  451.155559][ T5873] udevd[5873]: symlink '../../loop9' '/dev/disk/by-diskseq/843.tmp-b7:9' failed: Read-only file system
[  451.196007][ T6294] udevd[6294]: symlink '../../loop8' '/dev/disk/by-diskseq/839.tmp-b7:8' failed: Read-only file system
[  451.283380][T13985] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  451.283805][T13985] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  451.376613][T13985] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  451.479002][ T7092] udevd[7092]: symlink '../../loop4' '/dev/disk/by-diskseq/836.tmp-b7:4' failed: Read-only file system
[  451.543010][T13985] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  451.561359][T13985] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  451.578125][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/844.tmp-b7:7' failed: Read-only file system
[  451.654207][ T5867] Bluetooth: hci0: command 0x0406 tx timeout
[  451.682761][ T5873] udevd[5873]: symlink '../../loop8' '/dev/disk/by-diskseq/839.tmp-b7:8' failed: Read-only file system
[  451.695086][T13985] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  451.695483][T13985] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  451.791685][T13985] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  451.842769][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-uuid/14d642db-7b15-43e4-81e6-4b8fac6a25f8.tmp-b7:7' failed: Read-only file system
[  451.876017][T14028] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2924'.
[  451.886384][T13985] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  451.886810][T13985] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  451.955027][T13985] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  451.994650][ T5854] Bluetooth: hci2: command tx timeout
[  452.122073][T13985] BTRFS error (device loop7): open_ctree failed: -12
[  452.221325][T13944] hsr_slave_0: entered promiscuous mode
[  452.314536][T13944] hsr_slave_1: entered promiscuous mode
[  452.401188][ T7092] udevd[7092]: symlink '../../loop9' '/dev/disk/by-diskseq/843.tmp-b7:9' failed: Read-only file system
[  452.413157][T13944] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  452.481125][T13944] Cannot create hsr debugfs directory
[  453.275824][ T7092] udevd[7092]: symlink '../../loop9' '/dev/disk/by-diskseq/843.tmp-b7:9' failed: Read-only file system
[  453.827924][ T7092] udevd[7092]: symlink '../../loop9' '/dev/disk/by-diskseq/843.tmp-b7:9' failed: Read-only file system
[  454.059270][T14041] loop7: detected capacity change from 0 to 4096
[  454.189300][T14041] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512).
[  454.314296][T14041] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[  455.105112][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2931'.
[  455.176364][T14052] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2931'.
[  456.137340][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/836.tmp-b7:4' failed: Read-only file system
[  456.182330][T14059] loop9: detected capacity change from 0 to 64
[  456.361158][T14061] loop4: detected capacity change from 0 to 1024
[  456.412777][T14061] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  456.469527][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/848.tmp-b7:9' failed: Read-only file system
[  456.495696][ T7092] udevd[7092]: symlink '../../loop8' '/dev/disk/by-diskseq/839.tmp-b7:8' failed: Read-only file system
[  456.526120][T14061] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  456.581361][T14061] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  456.606126][ T5873] udevd[5873]: symlink '../../loop7' '/dev/disk/by-diskseq/847.tmp-b7:7' failed: Read-only file system
[  456.657724][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-label/untitled.tmp-b7:9' failed: Read-only file system
[  456.713995][ T5867] Bluetooth: hci4: command 0x0405 tx timeout
[  456.723902][T14061] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.2935: unexpected bad inode w/o EXT4_IGET_BAD
[  456.855281][T14061] EXT4-fs (loop4): no journal found
[  456.877682][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/848.tmp-b7:9' failed: Read-only file system
[  456.932872][ T6294] udevd[6294]: symlink '../../loop4' '/dev/disk/by-diskseq/849.tmp-b7:4' failed: Read-only file system
[  456.944512][T14061] EXT4-fs (loop4): can't get journal size
[  456.966186][ T7092] udevd[7092]: symlink '../../loop7' '/dev/disk/by-diskseq/847.tmp-b7:7' failed: Read-only file system
[  457.014661][T14061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  457.074488][ T6294] udevd[6294]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  457.150105][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/848.tmp-b7:9' failed: Read-only file system
[  457.526341][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.614665][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2946'.
[  458.681065][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2946'.
[  458.753991][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2946'.
[  458.978498][T14063] loop8: detected capacity change from 0 to 32768
[  459.229018][T14063] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  459.320990][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.350016][T14063] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop8": -EINTR
[  459.351480][T14063] XFS (loop8): log mount failed
[  460.527994][T14109] loop7: detected capacity change from 0 to 1024
[  460.866176][ T3534] hfsplus: b-tree write err: -5, ino 4
[  461.219971][ T7092] udevd[7092]: symlink '../../loop7' '/dev/disk/by-diskseq/854.tmp-b7:7' failed: Read-only file system
[  461.245631][T14115] loop8: detected capacity change from 0 to 256
[  461.453181][ T7092] udevd[7092]: symlink '../../loop7' '/dev/disk/by-diskseq/854.tmp-b7:7' failed: Read-only file system
[  461.523747][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/856.tmp-b7:8' failed: Read-only file system
[  461.589154][T14100] loop9: detected capacity change from 0 to 32768
[  461.676134][T14100] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2950 (14100)
[  461.862873][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/856.tmp-b7:8' failed: Read-only file system
[  461.875883][T14100] BTRFS info (device loop9): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  461.924970][T14100] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  462.015467][T14100] BTRFS info (device loop9): using free-space-tree
[  462.039163][ T5873] udevd[5873]: symlink '../../loop7' '/dev/disk/by-diskseq/855.tmp-b7:7' failed: Read-only file system
[  462.089104][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/856.tmp-b7:8' failed: Read-only file system
[  462.234881][ T7092] udevd[7092]: symlink '../../loop9' '/dev/disk/by-diskseq/857.tmp-b7:9' failed: Read-only file system
[  462.269716][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/856.tmp-b7:8' failed: Read-only file system
[  462.347352][ T7092] udevd[7092]: symlink '../../loop9' '/dev/disk/by-uuid/a6a605fc-d5f1-4e66-8595-3726e2b761d6.tmp-b7:9' failed: Read-only file system
[  462.504826][ T6183] udevd[6183]: symlink '../../loop8' '/dev/disk/by-diskseq/858.tmp-b7:8' failed: Read-only file system
[  462.656619][T11937] BTRFS info (device loop9): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  463.831331][   T30] audit: type=1326 audit(1752723563.681:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.9.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  463.948485][T14147] loop7: detected capacity change from 0 to 8192
[  464.062591][   T30] audit: type=1326 audit(1752723563.681:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.9.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  464.340946][   T30] audit: type=1326 audit(1752723563.731:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.9.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  464.549159][   T30] audit: type=1326 audit(1752723563.731:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.9.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  464.578770][T14160] netlink: 'syz.9.2972': attribute type 27 has an invalid length.
[  464.801312][   T30] audit: type=1326 audit(1752723563.741:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.9.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  465.101048][   T30] audit: type=1326 audit(1752723563.741:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.9.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  465.321080][   T30] audit: type=1326 audit(1752723563.741:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.9.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  465.560952][   T30] audit: type=1326 audit(1752723563.741:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.9.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  466.032458][T14178] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2981'.
[  466.241401][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/860.tmp-b7:9' failed: Read-only file system
[  466.309618][ T7092] udevd[7092]: symlink '../../loop8' '/dev/disk/by-diskseq/858.tmp-b7:8' failed: Read-only file system
[  466.501462][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/851.tmp-b7:4' failed: Read-only file system
[  466.665771][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/861.tmp-b7:7' failed: Read-only file system
[  466.828724][ T7092] udevd[7092]: symlink '../../loop8' '/dev/disk/by-diskseq/858.tmp-b7:8' failed: Read-only file system
[  467.323752][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/861.tmp-b7:7' failed: Read-only file system
[  467.522139][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/860.tmp-b7:9' failed: Read-only file system
[  467.784100][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/861.tmp-b7:7' failed: Read-only file system
[  467.895603][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/851.tmp-b7:4' failed: Read-only file system
[  468.013361][ T7092] udevd[7092]: symlink '../../loop9' '/dev/disk/by-diskseq/860.tmp-b7:9' failed: Read-only file system
[  469.140581][ T5951] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  469.321893][ T5951] usb 10-1: Using ep0 maxpacket: 16
[  469.344319][ T5951] usb 10-1: config 0 has an invalid interface number: 105 but max is 0
[  469.370014][ T5951] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  469.389668][ T5951] usb 10-1: config 0 has no interface number 0
[  469.413644][ T5951] usb 10-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  469.436880][ T5951] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.449153][ T5951] usb 10-1: Product: syz
[  469.459920][ T5951] usb 10-1: Manufacturer: syz
[  469.467901][ T5951] usb 10-1: SerialNumber: syz
[  469.499000][ T5951] usb 10-1: config 0 descriptor??
[  469.736730][ T5951] usb 10-1: Found UVC 0.00 device syz (046d:08d3)
[  469.751104][ T5951] usb 10-1: No valid video chain found.
[  469.979085][ T5951] usb 10-1: USB disconnect, device number 4
[  470.969093][T14226] loop9: detected capacity change from 0 to 4096
[  471.287039][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/862.tmp-b7:9' failed: Read-only file system
[  471.335459][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system
[  471.383571][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:9' failed: Read-only file system
[  471.542107][ T6183] udevd[6183]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system
[  471.566411][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/862.tmp-b7:9' failed: Read-only file system
[  471.638274][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/862.tmp-b7:9' failed: Read-only file system
[  471.682410][ T5951] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  471.861128][ T5951] usb 10-1: Using ep0 maxpacket: 32
[  471.873603][ T5951] usb 10-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  471.931938][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/861.tmp-b7:7' failed: Read-only file system
[  471.972614][ T5951] usb 10-1: config 0 interface 0 has no altsetting 0
[  471.979370][ T5951] usb 10-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  472.085376][ T5951] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.098549][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/851.tmp-b7:4' failed: Read-only file system
[  472.161991][ T5951] usb 10-1: config 0 descriptor??
[  472.309442][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/861.tmp-b7:7' failed: Read-only file system
[  472.437190][T14231] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3006'.
[  472.522800][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/851.tmp-b7:4' failed: Read-only file system
[  472.555162][ T5951] usbhid 10-1:0.0: can't add hid device: -71
[  472.555289][ T5951] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  472.580764][ T5951] usb 10-1: USB disconnect, device number 5
[  473.059789][T14243] loop7: detected capacity change from 0 to 128
[  473.124347][T14243] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  473.217779][T14243] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  473.484344][T14247] loop9: detected capacity change from 0 to 2048
[  473.499465][ T7961] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  473.616749][T14248] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  474.381029][ T5951] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  474.541006][ T5951] usb 10-1: Using ep0 maxpacket: 8
[  474.573277][ T5951] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.619919][ T5951] usb 10-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00
[  474.651160][ T5951] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.691163][ T5951] usb 10-1: config 0 descriptor??
[  475.158771][ T5951] hid (null): invalid report_size -1281265923
[  475.199440][ T5951] uclogic 0003:28BD:0075.0021: interface is invalid, ignoring
[  475.397403][ T5951] usb 10-1: USB disconnect, device number 6
[  475.596445][T14265] tmpfs: Cannot enable quota on remount
[  476.306586][T14275] loop4: detected capacity change from 0 to 512
[  476.419417][T14275] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[  476.481424][T14275] System zones: 1-12
[  476.485851][T14275] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.3026: Directory hole found for htree index block 0
[  476.503038][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/868.tmp-b7:4' failed: Read-only file system
[  476.591099][T14275] EXT4-fs (loop4): Remounting filesystem read-only
[  476.625380][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  476.648541][ T7092] udevd[7092]: symlink '../../loop7' '/dev/disk/by-diskseq/866.tmp-b7:7' failed: Read-only file system
[  476.660911][T14275] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[  476.669166][T14275] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  476.747604][T14275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  476.804313][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/868.tmp-b7:4' failed: Read-only file system
[  476.828789][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  477.068637][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.265859][ T6183] udevd[6183]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  477.345588][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/868.tmp-b7:4' failed: Read-only file system
[  477.432142][ T7092] udevd[7092]: symlink '../../loop7' '/dev/disk/by-diskseq/866.tmp-b7:7' failed: Read-only file system
[  477.517902][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/868.tmp-b7:4' failed: Read-only file system
[  477.656172][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/869.tmp-b7:4' failed: Read-only file system
[  478.868409][T14286] loop4: detected capacity change from 0 to 32768
[  478.959131][T14286] JBD2: Ignoring recovery information on journal
[  479.126860][T14286] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  479.506161][T14312] loop7: detected capacity change from 0 to 128
[  479.601752][ T5852] ocfs2: Unmounting device (7,4) on (node local)
[  479.685023][   T30] audit: type=1800 audit(1752723579.541:108): pid=14312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3041" name="file1" dev="loop7" ino=1048782 res=0 errno=0
[  479.903367][T14312] syz.7.3041: attempt to access beyond end of device
[  479.903367][T14312] loop7: rw=2049, sector=129, nr_sectors = 1 limit=128
[  480.001756][T14312] Buffer I/O error on dev loop7, logical block 129, lost async page write
[  480.051121][T14312] syz.7.3041: attempt to access beyond end of device
[  480.051121][T14312] loop7: rw=2049, sector=130, nr_sectors = 1 limit=128
[  480.121025][T14312] Buffer I/O error on dev loop7, logical block 130, lost async page write
[  480.158154][T14312] syz.7.3041: attempt to access beyond end of device
[  480.158154][T14312] loop7: rw=2049, sector=139, nr_sectors = 1 limit=128
[  480.232790][T14312] Buffer I/O error on dev loop7, logical block 139, lost async page write
[  480.271468][T14312] syz.7.3041: attempt to access beyond end of device
[  480.271468][T14312] loop7: rw=2049, sector=140, nr_sectors = 1 limit=128
[  480.401590][T14312] Buffer I/O error on dev loop7, logical block 140, lost async page write
[  480.509417][T14312] syz.7.3041: attempt to access beyond end of device
[  480.509417][T14312] loop7: rw=2049, sector=141, nr_sectors = 1 limit=128
[  480.598398][T14312] Buffer I/O error on dev loop7, logical block 141, lost async page write
[  480.671173][T14312] syz.7.3041: attempt to access beyond end of device
[  480.671173][T14312] loop7: rw=2049, sector=142, nr_sectors = 1 limit=128
[  480.708627][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3043'.
[  480.739108][T14312] Buffer I/O error on dev loop7, logical block 142, lost async page write
[  480.799731][T14312] syz.7.3041: attempt to access beyond end of device
[  480.799731][T14312] loop7: rw=2049, sector=143, nr_sectors = 1 limit=128
[  480.883718][T14312] Buffer I/O error on dev loop7, logical block 143, lost async page write
[  480.980545][T14312] syz.7.3041: attempt to access beyond end of device
[  480.980545][T14312] loop7: rw=2049, sector=144, nr_sectors = 1 limit=128
[  481.037598][   T30] audit: type=1326 audit(1752723580.881:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.9.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  481.101248][T14312] Buffer I/O error on dev loop7, logical block 144, lost async page write
[  481.152345][T14312] syz.7.3041: attempt to access beyond end of device
[  481.152345][T14312] loop7: rw=2049, sector=147, nr_sectors = 1 limit=128
[  481.206530][T14325] loop4: detected capacity change from 0 to 512
[  481.220062][   T30] audit: type=1326 audit(1752723580.881:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.9.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  481.265360][T14312] Buffer I/O error on dev loop7, logical block 147, lost async page write
[  481.293705][T14325] EXT4-fs: Ignoring removed i_version option
[  481.337588][T14312] syz.7.3041: attempt to access beyond end of device
[  481.337588][T14312] loop7: rw=2049, sector=148, nr_sectors = 1 limit=128
[  481.388558][T14325] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  481.411744][   T30] audit: type=1326 audit(1752723580.921:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.9.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  481.461742][T14312] Buffer I/O error on dev loop7, logical block 148, lost async page write
[  481.538130][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/873.tmp-b7:4' failed: Read-only file system
[  481.600123][   T30] audit: type=1326 audit(1752723580.921:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.9.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  481.625224][T14325] EXT4-fs (loop4): 1 truncate cleaned up
[  481.644808][T14325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  481.696638][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  481.788239][   T30] audit: type=1326 audit(1752723580.921:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.9.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  481.981509][ T7092] udevd[7092]: symlink '../../loop7' '/dev/disk/by-diskseq/871.tmp-b7:7' failed: Read-only file system
[  482.061043][   T30] audit: type=1326 audit(1752723580.931:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.9.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  482.137485][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-diskseq/873.tmp-b7:4' failed: Read-only file system
[  482.189689][ T7092] udevd[7092]: symlink '../../loop7' '/dev/disk/by-diskseq/871.tmp-b7:7' failed: Read-only file system
[  482.304705][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  482.329006][   T30] audit: type=1326 audit(1752723580.931:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.9.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  482.384061][ T5852] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /505/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  482.530266][   T30] audit: type=1326 audit(1752723580.931:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14322 comm="syz.9.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388138e929 code=0x7ffc0000
[  482.601755][ T5852] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  482.704187][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/874.tmp-b7:7' failed: Read-only file system
[  482.818032][ T5852] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /505/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  482.976323][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  482.986376][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  482.997401][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  483.007795][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  483.022531][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  483.053494][ T5852] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  483.294793][ T5852] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /505/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  483.316154][    C0] vkms_vblank_simulate: vblank timer overrun
[  483.378248][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/874.tmp-b7:7' failed: Read-only file system
[  483.522525][ T5852] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  483.673401][ T5852] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /505/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  483.824059][ T6183] udevd[6183]: symlink '../../loop7' '/dev/disk/by-diskseq/874.tmp-b7:7' failed: Read-only file system
[  483.869595][ T5852] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  484.013168][ T5852] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /505/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  484.171285][ T5852] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  484.685808][ T5854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  484.697277][ T5854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  484.707108][ T5854] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  484.717528][ T5854] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  484.747319][T14357] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  485.113893][T14338] chnl_net:caif_netlink_parms(): no params data found
[  485.191583][ T5867] Bluetooth: hci3: command tx timeout
[  486.317280][T14338] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.343139][T14338] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.365859][T14338] bridge_slave_0: entered allmulticast mode
[  486.379106][T14338] bridge_slave_0: entered promiscuous mode
[  486.418095][T14338] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.430035][T14338] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.448632][T14338] bridge_slave_1: entered allmulticast mode
[  486.466902][T14338] bridge_slave_1: entered promiscuous mode
[  486.530836][ T5930] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  486.731248][ T5930] usb 10-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  486.758769][ T5930] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.792867][ T5867] Bluetooth: hci7: command tx timeout
[  486.799796][ T5930] usb 10-1: Product: syz
[  486.830671][ T5930] usb 10-1: Manufacturer: syz
[  486.835390][ T5930] usb 10-1: SerialNumber: syz
[  486.858979][T14338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  486.902156][ T5930] usb 10-1: config 0 descriptor??
[  486.939072][T14338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.125998][ T5930] usb 10-1: f81604_read: reg: 105 failed: -EREMOTEIO
[  487.148288][T14354] chnl_net:caif_netlink_parms(): no params data found
[  487.161304][ T5930] f81604 10-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO
[  487.181085][ T5930] f81604 10-1:0.0: probe with driver f81604 failed with error -121
[  487.271448][ T5867] Bluetooth: hci3: command tx timeout
[  487.387493][T14338] team0: Port device team_slave_0 added
[  487.438353][T14338] team0: Port device team_slave_1 added
[  487.895659][T14338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  487.918341][T14338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  487.957715][T14338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  488.015401][T14338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  488.033371][T14338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.072921][T14338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  488.871880][T14357] Bluetooth: hci7: command tx timeout
[  489.351747][T14357] Bluetooth: hci3: command tx timeout
[  489.373156][ T5951] usb 10-1: USB disconnect, device number 7
[  490.951028][T14357] Bluetooth: hci7: command tx timeout
[  491.431302][T14357] Bluetooth: hci3: command tx timeout
[  493.031869][ T5867] Bluetooth: hci7: command tx timeout
[  496.203679][T14354] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.228820][T14354] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.263192][T14354] bridge_slave_0: entered allmulticast mode
[  496.284530][T14354] bridge_slave_0: entered promiscuous mode
[  496.303238][T14354] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.331521][T14354] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.346939][T14354] bridge_slave_1: entered allmulticast mode
[  496.358688][T14354] bridge_slave_1: entered promiscuous mode
[  496.389325][T14338] hsr_slave_0: entered promiscuous mode
[  496.407716][T14338] hsr_slave_1: entered promiscuous mode
[  496.419626][T14338] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  496.441910][T14338] Cannot create hsr debugfs directory
[  496.491157][ T5930] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  496.661360][ T5930] usb 10-1: Using ep0 maxpacket: 8
[  496.671959][ T5930] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[  496.691755][ T5930] usb 10-1: config 179 has no interface number 0
[  496.698608][ T5930] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  496.732295][ T5930] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  496.781218][ T5930] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[  496.798901][T14354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.822511][ T5930] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024
[  496.843945][T14354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.862844][ T5930] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  496.917440][ T5930] usb 10-1: config 179 interface 65 has no altsetting 0
[  496.939443][ T5930] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  496.968069][ T5930] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.084515][ T5930] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input21
[  497.383934][T14354] team0: Port device team_slave_0 added
[  497.436615][ T5930] usb 10-1: USB disconnect, device number 8
[  497.442871][    C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  497.616353][T14354] team0: Port device team_slave_1 added
[  497.876696][T14354] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.912303][T14354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  498.040667][T14354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  498.241708][T14354] batman_adv: batadv0: Adding interface: batadv_slave_1
[  498.248691][T14354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  498.401536][T14354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  498.787903][T14354] hsr_slave_0: entered promiscuous mode
[  498.821972][T14354] hsr_slave_1: entered promiscuous mode
[  498.828659][T14354] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  498.873802][T14354] Cannot create hsr debugfs directory
[  500.672900][ T5867] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  500.691718][ T5867] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  500.702880][ T5867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  500.722479][ T5867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  500.732571][ T5867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  500.740047][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  500.763173][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  500.939608][T14357] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  500.962863][T14357] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  500.972089][T14357] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  500.981346][T14357] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  501.021209][T14357] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  501.946861][T14390] loop9: detected capacity change from 0 to 32768
[  502.068703][T14390] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3072 (14390)
[  502.236126][T14390] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  502.321384][T14390] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  502.401220][T14390] BTRFS info (device loop9): using free-space-tree
[  502.467035][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/875.tmp-b7:9' failed: Read-only file system
[  502.579208][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-uuid/14d642db-7b15-43e4-81e6-4b8fac6a25f8.tmp-b7:9' failed: Read-only file system
[  502.871433][ T5867] Bluetooth: hci5: command tx timeout
[  502.904227][T14357] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  502.914835][T14357] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  502.932106][T14357] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  502.941300][T14357] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  502.948985][T14357] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  503.038308][T14391] chnl_net:caif_netlink_parms(): no params data found
[  503.113649][T14357] Bluetooth: hci8: command tx timeout
[  503.269997][T11937] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  503.741688][T14393] chnl_net:caif_netlink_parms(): no params data found
[  504.083513][T14426] loop9: detected capacity change from 0 to 64
[  504.583470][T14391] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.613542][T14391] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.645400][T14391] bridge_slave_0: entered allmulticast mode
[  504.674840][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/875.tmp-b7:9' failed: Read-only file system
[  504.689568][T14391] bridge_slave_0: entered promiscuous mode
[  504.799480][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/875.tmp-b7:9' failed: Read-only file system
[  504.882050][T14391] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.889288][T14391] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.928346][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/877.tmp-b7:9' failed: Read-only file system
[  504.960019][T14357] Bluetooth: hci5: command tx timeout
[  504.977338][T14391] bridge_slave_1: entered allmulticast mode
[  505.003862][T14391] bridge_slave_1: entered promiscuous mode
[  505.034294][T14357] Bluetooth: hci9: command tx timeout
[  505.059049][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/877.tmp-b7:9' failed: Read-only file system
[  505.169429][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/877.tmp-b7:9' failed: Read-only file system
[  505.191442][T14357] Bluetooth: hci8: command tx timeout
[  505.302180][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/877.tmp-b7:9' failed: Read-only file system
[  505.378785][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/878.tmp-b7:9' failed: Read-only file system
[  505.587037][T14391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  505.752551][T14393] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.764743][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/878.tmp-b7:9' failed: Read-only file system
[  505.777014][T14393] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.808337][T14393] bridge_slave_0: entered allmulticast mode
[  505.851155][T14393] bridge_slave_0: entered promiscuous mode
[  505.906929][T14391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  506.008257][T14393] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.030037][T14393] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.055947][T14393] bridge_slave_1: entered allmulticast mode
[  506.073922][T14393] bridge_slave_1: entered promiscuous mode
[  506.121230][ T5857] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  506.282976][ T5857] usb 10-1: Using ep0 maxpacket: 8
[  506.308975][ T5857] usb 10-1: config 0 has an invalid interface number: 31 but max is 0
[  506.336718][ T5857] usb 10-1: config 0 has no interface number 0
[  506.366870][ T5857] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  506.393365][ T5857] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.413084][ T5857] usb 10-1: Product: syz
[  506.417358][ T5857] usb 10-1: Manufacturer: syz
[  506.436541][ T5857] usb 10-1: SerialNumber: syz
[  506.488656][ T5857] usb 10-1: config 0 descriptor??
[  506.642005][T14391] team0: Port device team_slave_0 added
[  506.654935][T14393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  506.735354][T14391] team0: Port device team_slave_1 added
[  506.745832][ T5857] usb 10-1: Found UVC 0.04 device syz (046d:08c3)
[  506.765583][ T5857] usb 10-1: No valid video chain found.
[  506.782718][T14393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  506.989346][ T5857] usb 10-1: USB disconnect, device number 9
[  507.031037][T14357] Bluetooth: hci5: command tx timeout
[  507.112501][T14357] Bluetooth: hci9: command tx timeout
[  507.279286][T14357] Bluetooth: hci8: command tx timeout
[  507.463002][T14393] team0: Port device team_slave_0 added
[  507.644523][T14391] batman_adv: batadv0: Adding interface: batadv_slave_0
[  507.673506][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/878.tmp-b7:9' failed: Read-only file system
[  507.711498][T14391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  507.825046][T14391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  507.877548][T14393] team0: Port device team_slave_1 added
[  507.957028][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/878.tmp-b7:9' failed: Read-only file system
[  508.088810][T14391] batman_adv: batadv0: Adding interface: batadv_slave_1
[  508.131769][T14391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  508.169612][T14443] loop9: detected capacity change from 0 to 1024
[  508.193190][T14443] EXT4-fs: Ignoring removed nobh option
[  508.226251][T14443] EXT4-fs: Ignoring removed bh option
[  508.267639][T14391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  508.285998][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/879.tmp-b7:9' failed: Read-only file system
[  508.323544][T14443] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  508.374234][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system
[  508.543613][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/879.tmp-b7:9' failed: Read-only file system
[  508.558073][T14393] batman_adv: batadv0: Adding interface: batadv_slave_0
[  508.581638][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  508.619975][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system
[  508.653647][T11937] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.686516][T14393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  508.753555][T14417] chnl_net:caif_netlink_parms(): no params data found
[  508.829038][ T6183] udevd[6183]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:9' failed: Read-only file system
[  508.843182][T14393] batman_adv: batadv0: Adding interface: batadv_slave_1
[  508.850132][T14393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  508.929946][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/879.tmp-b7:9' failed: Read-only file system
[  508.988696][T14393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.018720][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/879.tmp-b7:9' failed: Read-only file system
[  509.106707][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/880.tmp-b7:9' failed: Read-only file system
[  509.125175][T14357] Bluetooth: hci5: command tx timeout
[  509.196326][T14357] Bluetooth: hci9: command tx timeout
[  509.351003][T14357] Bluetooth: hci8: command tx timeout
[  509.585387][T14391] hsr_slave_0: entered promiscuous mode
[  509.624128][T14391] hsr_slave_1: entered promiscuous mode
[  509.637074][T14391] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  509.683855][T14391] Cannot create hsr debugfs directory
[  509.931485][T14393] hsr_slave_0: entered promiscuous mode
[  509.950815][T14393] hsr_slave_1: entered promiscuous mode
[  509.959144][T14393] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  509.985316][T14393] Cannot create hsr debugfs directory
[  511.103527][T14417] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.130932][T14417] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.161608][T14417] bridge_slave_0: entered allmulticast mode
[  511.193993][T14417] bridge_slave_0: entered promiscuous mode
[  511.229137][T14417] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.262364][T14417] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.272394][T14357] Bluetooth: hci9: command tx timeout
[  511.295631][T14417] bridge_slave_1: entered allmulticast mode
[  511.324563][T14417] bridge_slave_1: entered promiscuous mode
[  511.689014][T14417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  511.735456][T14417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  511.753135][T14463] loop9: detected capacity change from 0 to 32768
[  511.811115][T14463] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3086 (14463)
[  511.951002][T14463] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  511.976496][T14463] BTRFS info (device loop9): using sha256 (sha256-x86_64) checksum algorithm
[  512.016280][T14463] BTRFS info (device loop9): using free-space-tree
[  512.191727][T14463] BTRFS info (device loop9): rebuilding free space tree
[  512.451550][T14463] btrfs: Unexpected value for 'norecovery'
[  512.626812][T11937] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  512.743816][T14417] team0: Port device team_slave_0 added
[  512.939356][T14417] team0: Port device team_slave_1 added
[  513.392571][T14417] batman_adv: batadv0: Adding interface: batadv_slave_0
[  513.399571][T14417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  513.567603][T14417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  513.673256][T14417] batman_adv: batadv0: Adding interface: batadv_slave_1
[  513.707275][T14417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  513.751541][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/881.tmp-b7:9' failed: Read-only file system
[  513.836587][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/881.tmp-b7:9' failed: Read-only file system
[  513.877055][T14417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  513.956007][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/881.tmp-b7:9' failed: Read-only file system
[  514.066837][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/882.tmp-b7:9' failed: Read-only file system
[  514.309951][T14417] hsr_slave_0: entered promiscuous mode
[  514.351562][T14417] hsr_slave_1: entered promiscuous mode
[  514.380663][T14417] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  514.388245][T14417] Cannot create hsr debugfs directory
[  515.119777][T14487] loop9: detected capacity change from 0 to 32768
[  515.232717][T14487] read_mapping_page failed!
[  515.237683][T14487] jfs_create: dtInsert returned -EIO
[  515.259930][T14487] ERROR: (device loop9): jfs_create: 
[  515.259930][T14487] 
[  515.293881][T14487] ERROR: (device loop9): remounting filesystem as read-only
[  515.342380][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/883.tmp-b7:9' failed: Read-only file system
[  515.394500][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:9' failed: Read-only file system
[  515.582019][  T111] read_mapping_page failed!
[  516.192267][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/883.tmp-b7:9' failed: Read-only file system
[  516.258682][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/883.tmp-b7:9' failed: Read-only file system
[  516.363219][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/884.tmp-b7:9' failed: Read-only file system
[  516.748691][ T6183] udevd[6183]: symlink '../../loop9' '/dev/disk/by-diskseq/884.tmp-b7:9' failed: Read-only file system
[  517.524050][T14491] loop9: detected capacity change from 0 to 32768
[  517.612576][   T30] audit: type=1800 audit(1752723617.471:117): pid=14491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3092" name="file2" dev="loop9" ino=5 res=0 errno=0
[  518.097571][ T5933] usb 8-1: USB disconnect, device number 16
[  523.710144][T14493] udevd[14493]: symlink '../../loop9' '/dev/disk/by-diskseq/885.tmp-b7:9' failed: Read-only file system
[  523.816851][T14493] udevd[14493]: symlink '../../loop9' '/dev/disk/by-diskseq/885.tmp-b7:9' failed: Read-only file system
[  523.890087][T14493] udevd[14493]: symlink '../../loop9' '/dev/disk/by-diskseq/886.tmp-b7:9' failed: Read-only file system
[  524.345921][T14493] udevd[14493]: symlink '../../loop9' '/dev/disk/by-diskseq/886.tmp-b7:9' failed: Read-only file system
[  524.568866][T14493] udevd[14493]: symlink '../../loop9' '/dev/disk/by-diskseq/886.tmp-b7:9' failed: Read-only file system
[  524.775161][T14493] udevd[14493]: symlink '../../loop9' '/dev/disk/by-diskseq/886.tmp-b7:9' failed: Read-only file system
[  525.107500][T14502] udevd[14502]: symlink '../../loop9' '/dev/disk/by-diskseq/886.tmp-b7:9' failed: Read-only file system
[  525.454481][T14504] udevd[14504]: symlink '../../loop9' '/dev/disk/by-diskseq/886.tmp-b7:9' failed: Read-only file system
[  525.636210][T14504] udevd[14504]: symlink '../../loop9' '/dev/disk/by-diskseq/886.tmp-b7:9' failed: Read-only file system
[  525.836393][T14504] udevd[14504]: symlink '../../loop9' '/dev/disk/by-diskseq/886.tmp-b7:9' failed: Read-only file system
[  526.337226][T14517] loop9: detected capacity change from 0 to 256
[  528.939891][T14504] udevd[14504]: symlink '../../loop9' '/dev/disk/by-diskseq/888.tmp-b7:9' failed: Read-only file system
[  529.162612][T14504] udevd[14504]: symlink '../../loop9' '/dev/disk/by-diskseq/888.tmp-b7:9' failed: Read-only file system
[  529.407539][T14504] udevd[14504]: symlink '../../loop9' '/dev/disk/by-diskseq/888.tmp-b7:9' failed: Read-only file system
[  542.107119][ T5867] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  542.118339][ T5867] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  542.131489][ T5867] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  542.139617][ T5867] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  542.151875][ T5867] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  543.033197][T14533] chnl_net:caif_netlink_parms(): no params data found
[  543.495091][T14357] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  543.505807][T14357] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  543.516508][T14357] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  543.533284][T14357] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  543.544703][T14357] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  544.045579][T14533] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.061232][T14533] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.068787][T14533] bridge_slave_0: entered allmulticast mode
[  544.093322][T14533] bridge_slave_0: entered promiscuous mode
[  544.205320][T14533] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.225124][T14533] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.234929][ T5867] Bluetooth: hci10: command tx timeout
[  544.264004][T14533] bridge_slave_1: entered allmulticast mode
[  544.283652][T14533] bridge_slave_1: entered promiscuous mode
[  544.559338][T14533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  544.657586][T14533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  545.035623][T14533] team0: Port device team_slave_0 added
[  545.076571][T14533] team0: Port device team_slave_1 added
[  545.529047][T14533] batman_adv: batadv0: Adding interface: batadv_slave_0
[  545.561306][T14533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  545.598092][ T5867] Bluetooth: hci11: command tx timeout
[  545.648970][T14357] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  545.663606][T14357] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  545.675476][T14357] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  545.684104][T14357] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  545.692939][T14357] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  545.760092][T14533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  545.802214][T14533] batman_adv: batadv0: Adding interface: batadv_slave_1
[  545.809179][T14533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  545.943266][T14533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  546.047389][T14541] chnl_net:caif_netlink_parms(): no params data found
[  546.311728][T14357] Bluetooth: hci10: command tx timeout
[  546.337341][T14533] hsr_slave_0: entered promiscuous mode
[  546.356655][T14533] hsr_slave_1: entered promiscuous mode
[  546.377919][T14533] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  546.411218][T14533] Cannot create hsr debugfs directory
[  547.099551][T14541] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.121524][T14541] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.128777][T14541] bridge_slave_0: entered allmulticast mode
[  547.157266][T14541] bridge_slave_0: entered promiscuous mode
[  547.252561][T14541] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.259743][T14541] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.298708][T14541] bridge_slave_1: entered allmulticast mode
[  547.314340][T14541] bridge_slave_1: entered promiscuous mode
[  547.565669][T14541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  547.614763][T14541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  547.671205][T14357] Bluetooth: hci11: command tx timeout
[  547.751026][T14357] Bluetooth: hci12: command tx timeout
[  548.054229][T14541] team0: Port device team_slave_0 added
[  548.112412][T14541] team0: Port device team_slave_1 added
[  548.395593][T14357] Bluetooth: hci10: command tx timeout
[  548.667292][T14549] chnl_net:caif_netlink_parms(): no params data found
[  548.704636][T14541] batman_adv: batadv0: Adding interface: batadv_slave_0
[  548.729642][T14541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  548.777349][T14541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  548.846058][T14541] batman_adv: batadv0: Adding interface: batadv_slave_1
[  548.869976][T14541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  548.963935][T14541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  549.397388][T14541] hsr_slave_0: entered promiscuous mode
[  549.414062][T14541] hsr_slave_1: entered promiscuous mode
[  549.441332][T14541] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  549.448916][T14541] Cannot create hsr debugfs directory
[  549.751746][T14357] Bluetooth: hci11: command tx timeout
[  549.831772][T14357] Bluetooth: hci12: command tx timeout
[  550.035558][T14549] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.054812][T14549] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.073229][T14549] bridge_slave_0: entered allmulticast mode
[  550.092817][T14549] bridge_slave_0: entered promiscuous mode
[  550.139209][T14549] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.163261][T14549] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.178988][T14549] bridge_slave_1: entered allmulticast mode
[  550.203188][T14549] bridge_slave_1: entered promiscuous mode
[  550.473451][T14357] Bluetooth: hci10: command tx timeout
[  550.487692][T14549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.628057][T14549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.979590][T14549] team0: Port device team_slave_0 added
[  551.001715][T14549] team0: Port device team_slave_1 added
[  551.236124][T14549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  551.261443][T14549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.326839][T14549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  551.355529][T14549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.371374][T14549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.426411][T14549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  551.703333][T14549] hsr_slave_0: entered promiscuous mode
[  551.722068][T14549] hsr_slave_1: entered promiscuous mode
[  551.736070][T14549] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  551.761172][T14549] Cannot create hsr debugfs directory
[  551.838265][T14357] Bluetooth: hci11: command tx timeout
[  551.913712][T14357] Bluetooth: hci12: command tx timeout
[  553.991796][T14357] Bluetooth: hci12: command tx timeout
[  559.118975][T14357] Bluetooth: hci6: command 0x0406 tx timeout
[  560.918903][T14341] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  560.934380][T14341] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  560.942564][T14341] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  560.962067][T14341] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  560.971685][T14341] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  561.184227][ T5854] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  561.194590][ T5854] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  561.203768][ T5854] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  561.218047][ T5854] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  561.228163][ T5854] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  562.168558][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  562.175653][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  562.354117][T14564] chnl_net:caif_netlink_parms(): no params data found
[  562.779228][T14570] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  562.794675][T14570] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  562.803711][T14570] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  562.813602][T14570] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  562.822969][T14570] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  563.068686][T14568] chnl_net:caif_netlink_parms(): no params data found
[  563.622145][T14564] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.629306][T14564] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.655267][T14564] bridge_slave_0: entered allmulticast mode
[  563.673549][T14564] bridge_slave_0: entered promiscuous mode
[  563.798893][T14564] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.824324][T14564] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.840482][T14564] bridge_slave_1: entered allmulticast mode
[  563.861295][T14564] bridge_slave_1: entered promiscuous mode
[  564.871960][ T5867] Bluetooth: hci15: command tx timeout
[  564.973658][T14568] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.991654][T14568] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.999253][T14568] bridge_slave_0: entered allmulticast mode
[  565.034269][ T5867] Bluetooth: hci14: command tx timeout
[  565.042016][T14570] Bluetooth: hci13: command tx timeout
[  565.051365][T14568] bridge_slave_0: entered promiscuous mode
[  565.168045][T14564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  565.209414][T14568] bridge0: port 2(bridge_slave_1) entered blocking state
[  565.234981][T14568] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.257727][T14568] bridge_slave_1: entered allmulticast mode
[  565.283471][T14568] bridge_slave_1: entered promiscuous mode
[  565.402700][T14564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  565.792291][T14568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  565.843501][T14564] team0: Port device team_slave_0 added
[  565.866296][T14564] team0: Port device team_slave_1 added
[  565.886355][T14568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  566.291058][T14564] batman_adv: batadv0: Adding interface: batadv_slave_0
[  566.298047][T14564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  566.359618][T14564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  566.403426][T14564] batman_adv: batadv0: Adding interface: batadv_slave_1
[  566.424120][T14564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  566.491387][T14564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  566.762953][T14564] hsr_slave_0: entered promiscuous mode
[  566.784294][T14564] hsr_slave_1: entered promiscuous mode
[  566.801538][T14564] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  566.809108][T14564] Cannot create hsr debugfs directory
[  566.951548][ T5867] Bluetooth: hci15: command tx timeout
[  567.114355][ T5867] Bluetooth: hci14: command tx timeout
[  567.119896][ T5867] Bluetooth: hci13: command tx timeout
[  569.031148][ T5867] Bluetooth: hci15: command tx timeout
[  569.191973][ T5867] Bluetooth: hci13: command tx timeout
[  569.197518][ T5867] Bluetooth: hci14: command tx timeout
[  569.949811][T14568] team0: Port device team_slave_0 added
[  570.245573][T14568] team0: Port device team_slave_1 added
[  570.459433][T14568] batman_adv: batadv0: Adding interface: batadv_slave_0
[  570.480032][T14568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  570.521499][T14568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  570.567887][T14568] batman_adv: batadv0: Adding interface: batadv_slave_1
[  570.591332][T14568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  570.641221][T14568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  570.988305][T14568] hsr_slave_0: entered promiscuous mode
[  571.016037][T14568] hsr_slave_1: entered promiscuous mode
[  571.032197][T14568] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  571.039766][T14568] Cannot create hsr debugfs directory
[  571.114703][ T5867] Bluetooth: hci15: command tx timeout
[  571.271221][ T5867] Bluetooth: hci14: command tx timeout
[  571.278072][T14570] Bluetooth: hci13: command tx timeout
[  571.424911][T14578] chnl_net:caif_netlink_parms(): no params data found
[  572.079189][T14578] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.101619][T14578] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.108936][T14578] bridge_slave_0: entered allmulticast mode
[  572.143804][T14578] bridge_slave_0: entered promiscuous mode
[  572.172653][T14578] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.191653][T14578] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.211189][T14578] bridge_slave_1: entered allmulticast mode
[  572.227084][T14578] bridge_slave_1: entered promiscuous mode
[  572.465216][T14578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  572.505065][T14578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  572.744046][T14578] team0: Port device team_slave_0 added
[  572.774889][T14578] team0: Port device team_slave_1 added
[  573.032438][T14578] batman_adv: batadv0: Adding interface: batadv_slave_0
[  573.039498][T14578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.089162][T14578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  573.131957][T14578] batman_adv: batadv0: Adding interface: batadv_slave_1
[  573.138932][T14578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  573.196748][T14578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  573.692639][T14578] hsr_slave_0: entered promiscuous mode
[  573.711686][T14578] hsr_slave_1: entered promiscuous mode
[  573.721789][T14578] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  573.729356][T14578] Cannot create hsr debugfs directory
[  574.471350][T14570] Bluetooth: hci2: command 0x0406 tx timeout
[  598.632045][   T31] INFO: task syz-executor:13944 blocked for more than 143 seconds.
[  598.639992][   T31]       Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  598.683838][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  598.726139][   T31] task:syz-executor    state:D stack:21928 pid:13944 tgid:13944 ppid:1      task_flags:0x400140 flags:0x00004004
[  598.788718][   T31] Call Trace:
[  598.802945][   T31]  <TASK>
[  598.805907][   T31]  __schedule+0x16f5/0x4d00
[  598.908993][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  599.008665][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  599.081569][   T31]  ? __lock_acquire+0xab9/0xd20
[  599.086488][   T31]  ? schedule+0x165/0x360
[  599.112511][   T31]  ? __pfx___schedule+0x10/0x10
[  599.117426][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  599.171571][   T31]  ? schedule+0x91/0x360
[  599.175888][   T31]  schedule+0x165/0x360
[  599.180080][   T31]  schedule_preempt_disabled+0x13/0x30
[  599.257427][   T31]  __mutex_lock+0x724/0xe80
[  599.275577][   T31]  ? __mutex_lock+0x51b/0xe80
[  599.323606][   T31]  ? del_device_store+0xd1/0x360
[  599.328597][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  599.381473][   T31]  ? __lock_acquire+0xab9/0xd20
[  599.386373][   T31]  ? sysfs_file_kobj+0x1a/0x230
[  599.454606][   T31]  del_device_store+0xd1/0x360
[  599.459430][   T31]  ? sysfs_file_kobj+0x1a/0x230
[  599.511409][   T31]  ? __pfx_del_device_store+0x10/0x10
[  599.516824][   T31]  ? sysfs_file_kobj+0x1e4/0x230
[  599.571310][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  599.576994][   T31]  ? sysfs_kf_write+0x166/0x260
[  599.631275][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  599.661096][   T31]  ? __pfx_sysfs_kf_write+0x10/0x10
[  599.666336][   T31]  kernfs_fop_write_iter+0x378/0x4f0
[  599.719344][   T31]  vfs_write+0x54b/0xa90
[  599.751296][   T31]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  599.757162][   T31]  ? __pfx_vfs_write+0x10/0x10
[  599.808912][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  599.831733][   T31]  ? kmem_cache_free+0x18f/0x400
[  599.836720][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  599.880500][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  599.886183][   T31]  ksys_write+0x145/0x250
[  599.928707][   T31]  ? __pfx_ksys_write+0x10/0x10
[  599.961206][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  599.966890][   T31]  ? do_syscall_64+0xbe/0x3b0
[  600.011656][   T31]  do_syscall_64+0xfa/0x3b0
[  600.016204][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  600.044169][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.061209][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  600.066883][   T31]  ? exc_page_fault+0x9f/0xf0
[  600.081336][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.087259][   T31] RIP: 0033:0x7f49ba38d3df
[  600.114707][   T31] RSP: 002b:00007ffd8e6c0350 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  600.141548][   T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f49ba38d3df
[  600.161748][   T31] RDX: 0000000000000001 RSI: 00007ffd8e6c03a0 RDI: 0000000000000005
[  600.169747][   T31] RBP: 00007f49ba411ef5 R08: 0000000000000000 R09: 00007ffd8e6c01a7
[  600.204122][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  600.226834][   T31] R13: 00007ffd8e6c03a0 R14: 00007f49bb0e4620 R15: 0000000000000003
[  600.252809][   T31]  </TASK>
[  600.255956][   T31] 
[  600.255956][   T31] Showing all locks held in the system:
[  600.281453][   T31] 1 lock held by khungtaskd/31:
[  600.286331][   T31]  #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  600.308710][   T31] 2 locks held by kworker/u8:2/36:
[  600.392942][   T31] 2 locks held by kworker/1:1/43:
[  600.398012][   T31] 6 locks held by kworker/u8:3/49:
[  600.414280][   T31]  #0: ffff88801b2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  600.450004][   T31]  #1: ffffc90000b97bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  600.472260][   T31]  #2: ffffffff8f510e10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  600.500494][   T31]  #3: ffff888059fb30e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0
[  600.521486][   T31]  #4: ffff888059fb4250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0
[  600.549828][   T31]  #5: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  600.570945][   T31] 3 locks held by kworker/u8:8/3534:
[  600.576247][   T31]  #0: ffff88801a481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  600.610966][   T31]  #1: ffffc9000c5f7bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  600.640126][   T31]  #2: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  600.671167][   T31] 2 locks held by getty/5603:
[  600.675874][   T31]  #0: ffff8880310270a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  600.707132][   T31]  #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  600.739344][   T31] 4 locks held by kworker/1:6/5999:
[  600.749724][   T31] 1 lock held by syz.4.2193/12315:
[  600.764171][   T31]  #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  600.790666][   T31] 7 locks held by syz-executor/13759:
[  600.796059][   T31]  #0: ffff888023c0a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  600.831452][   T31]  #1: ffff8880534cec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  600.851246][   T31]  #2: ffff88802768f5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  600.881094][   T31]  #3: ffffffff8edab1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  600.901058][   T31]  #4: ffff888059f860e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0
[  600.931278][   T31]  #5: ffff888059f87250 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[  600.951941][   T31]  #6: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  600.981721][   T31] 4 locks held by syz-executor/13944:
[  600.987118][   T31]  #0: ffff888023c0a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  601.011750][   T31]  #1: ffff888054ebf488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  601.037252][   T31]  #2: ffff88802768f5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  601.068966][   T31]  #3: ffffffff8edab1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  601.090266][   T31] 1 lock held by syz.8.2987/14191:
[  601.095404][   T31]  #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  601.132303][   T31] 4 locks held by syz-executor/14338:
[  601.137715][   T31]  #0: ffff888023c0a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  601.170923][   T31]  #1: ffff8880555c4488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  601.193064][   T31]  #2: ffff88802768f5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  601.221795][   T31]  #3: ffffffff8edab1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  601.242181][   T31] 1 lock held by syz.7.3058/14349:
[  601.247315][   T31]  #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  601.281607][   T31] 4 locks held by syz-executor/14354:
[  601.287018][   T31]  #0: ffff888023c0a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  601.311649][   T31]  #1: ffff88804dd6bc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  601.337884][   T31]  #2: ffff88802768f5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  601.361269][   T31]  #3: ffffffff8edab1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  601.391042][   T31] 4 locks held by syz-executor/14391:
[  601.396447][   T31]  #0: ffff888023c0a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  601.426523][   T31]  #1: ffff88803d7c8888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  601.451048][   T31]  #2: ffff88802768f5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  601.476181][   T31]  #3: ffffffff8edab1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  601.511748][   T31] 4 locks held by syz-executor/14393:
[  601.517154][   T31]  #0: ffff888023c0a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  601.541188][   T31]  #1: ffff88803d97c888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  601.567620][   T31]  #2: ffff88802768f5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  601.592686][   T31]  #3: ffffffff8edab1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  601.623946][   T31] 4 locks held by syz-executor/14417:
[  601.629346][   T31]  #0: ffff888023c0a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  601.659120][   T31]  #1: ffff88803e766488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  601.681240][   T31]  #2: ffff88802768f5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  601.703002][   T31]  #3: ffffffff8edab1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  601.739988][   T31] 1 lock held by syz.9.3108/14530:
[  601.751487][   T31]  #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  601.771110][   T31] 4 locks held by syz-executor/14533:
[  601.776502][   T31]  #0: ffff888023c0a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  601.803324][   T31]  #1: ffff888064de1c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  601.840965][   T31]  #2: ffff88802768f5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  601.858588][   T31]  #3: ffffffff8edab1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  601.887071][   T31] 4 locks held by syz-executor/14541:
[  601.901063][   T31]  #0: ffff888023c0a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  601.910118][   T31]  #1: ffff88808b42bc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  601.960544][   T31]  #2: ffff88802768f5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  601.981147][   T31]  #3: ffffffff8edab1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  602.001677][   T31] 4 locks held by syz-executor/14549:
[  602.007069][   T31]  #0: ffff888023c0a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  602.034629][   T31]  #1: ffff888055575888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  602.061585][   T31]  #2: ffff88802768f5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  602.091700][   T31]  #3: ffffffff8edab1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  602.119309][   T31] 4 locks held by syz-executor/14564:
[  602.132828][   T31]  #0: ffff888023c0a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  602.153605][   T31]  #1: ffff88808bcdfc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  602.181481][   T31]  #2: ffff88802768f5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  602.211263][   T31]  #3: ffffffff8edab1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  602.231758][   T31] 4 locks held by syz-executor/14568:
[  602.237153][   T31]  #0: ffff888023c0a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  602.276686][   T31]  #1: ffff888097fe4488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  602.301568][   T31]  #2: ffff88802768f5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  602.322757][   T31]  #3: ffffffff8edab1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  602.352735][   T31] 4 locks held by syz-executor/14578:
[  602.358136][   T31]  #0: ffff888023c0a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[  602.392013][   T31]  #1: ffff88809892cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[  602.421536][   T31]  #2: ffff88802768f5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[  602.441025][   T31]  #3: ffffffff8edab1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360
[  602.462798][   T31] 
[  602.465144][   T31] =============================================
[  602.465144][   T31] 
[  602.501058][   T31] NMI backtrace for cpu 0
[  602.501079][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  602.501110][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  602.501126][   T31] Call Trace:
[  602.501136][   T31]  <TASK>
[  602.501147][   T31]  dump_stack_lvl+0x189/0x250
[  602.501182][   T31]  ? __wake_up_klogd+0xd9/0x110
[  602.501220][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.501254][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  602.501286][   T31]  ? __pfx__printk+0x10/0x10
[  602.501338][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  602.501379][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  602.501411][   T31]  ? _printk+0xcf/0x120
[  602.501453][   T31]  ? __pfx__printk+0x10/0x10
[  602.501492][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  602.501522][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  602.501561][   T31]  watchdog+0xfee/0x1030
[  602.501594][   T31]  ? watchdog+0x1de/0x1030
[  602.501629][   T31]  kthread+0x711/0x8a0
[  602.501671][   T31]  ? __pfx_watchdog+0x10/0x10
[  602.501693][   T31]  ? __pfx_kthread+0x10/0x10
[  602.501727][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.501762][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  602.501799][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.501828][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  602.501867][   T31]  ? __pfx_kthread+0x10/0x10
[  602.501906][   T31]  ret_from_fork+0x3fc/0x770
[  602.501937][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  602.501973][   T31]  ? __switch_to_asm+0x39/0x70
[  602.502006][   T31]  ? __switch_to_asm+0x33/0x70
[  602.502040][   T31]  ? __pfx_kthread+0x10/0x10
[  602.502079][   T31]  ret_from_fork_asm+0x1a/0x30
[  602.502132][   T31]  </TASK>
[  602.502143][   T31] Sending NMI from CPU 0 to CPUs 1:
[  602.692183][    C1] NMI backtrace for cpu 1
[  602.692204][    C1] CPU: 1 UID: 0 PID: 5999 Comm: kworker/1:6 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  602.692232][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  602.692248][    C1] Workqueue: events_power_efficient neigh_periodic_work
[  602.692278][    C1] RIP: 0010:lock_release+0xc3/0x3e0
[  602.692305][    C1] Code: 02 00 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 48 8b 5c 24 20 fa 48 c7 c7 4f c6 9a 8d e8 54 16 d1 09 65 ff 05 3d 43 02 11 <c7> 44 24 20 01 00 00 00 83 3d 1e da 03 0e 00 0f 84 96 01 00 00 41
[  602.692325][    C1] RSP: 0018:ffffc90000a07650 EFLAGS: 00000002
[  602.692344][    C1] RAX: 0000000000000001 RBX: 0000000000000202 RCX: a571c21608ec2300
[  602.692360][    C1] RDX: ffffc90000a07701 RSI: ffffffff8d9ac64f RDI: ffffffff8be29d80
[  602.692378][    C1] RBP: dffffc0000000000 R08: ffffc9000435fc70 R09: ffffc90000a077d8
[  602.692396][    C1] R10: dffffc0000000000 R11: fffff52000140efd R12: ffffc9000435fc80
[  602.692414][    C1] R13: ffffffff8172aae5 R14: ffffffff8e13f0e0 R15: ffff88801c315a00
[  602.692434][    C1] FS:  0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000
[  602.692452][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  602.692468][    C1] CR2: 00007f70829b7bac CR3: 000000000df38000 CR4: 0000000000350ef0
[  602.692486][    C1] Call Trace:
[  602.692494][    C1]  <IRQ>
[  602.692503][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.692530][    C1]  ? deref_stack_reg+0x19f/0x230
[  602.692561][    C1]  ? unwind_next_frame+0xa5/0x2390
[  602.692588][    C1]  unwind_next_frame+0x19a9/0x2390
[  602.692619][    C1]  ? unwind_next_frame+0xa5/0x2390
[  602.692645][    C1]  ? process_scheduled_works+0xae1/0x17b0
[  602.692675][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  602.692709][    C1]  arch_stack_walk+0x11c/0x150
[  602.692741][    C1]  ? worker_thread+0x8a0/0xda0
[  602.692771][    C1]  stack_trace_save+0x9c/0xe0
[  602.692802][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  602.692845][    C1]  kasan_save_track+0x3e/0x80
[  602.692869][    C1]  ? kasan_save_track+0x3e/0x80
[  602.692893][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  602.692917][    C1]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  602.692945][    C1]  ? ref_tracker_alloc+0x133/0x460
[  602.692979][    C1]  ? dst_init+0xd9/0x450
[  602.693009][    C1]  ? dst_alloc+0x12a/0x170
[  602.693040][    C1]  ? ip_route_output_key_hash_rcu+0x1482/0x23a0
[  602.693077][    C1]  ? ip_route_output_key_hash+0x1b9/0x2e0
[  602.693111][    C1]  ? ip_route_output_flow+0x2a/0x150
[  602.693142][    C1]  ? ip_route_me_harder+0x6b9/0xfe0
[  602.693162][    C1]  ? synproxy_send_tcp+0x359/0x6c0
[  602.693189][    C1]  ? synproxy_send_client_synack+0x8bb/0xe20
[  602.693216][    C1]  ? nft_synproxy_eval_v4+0x36e/0x560
[  602.693249][    C1]  ? nft_synproxy_do_eval+0x345/0x570
[  602.693282][    C1]  ? nft_do_chain+0x40c/0x1920
[  602.693312][    C1]  ? nft_do_chain_inet+0x25d/0x340
[  602.693343][    C1]  ? nf_hook_slow+0xc5/0x220
[  602.693368][    C1]  ? NF_HOOK+0x206/0x3a0
[  602.693392][    C1]  ? NF_HOOK+0x30c/0x3a0
[  602.693417][    C1]  ? __netif_receive_skb+0x143/0x380
[  602.693437][    C1]  ? process_backlog+0x60e/0x14f0
[  602.693461][    C1]  ? __napi_poll+0xc7/0x480
[  602.693480][    C1]  ? net_rx_action+0x707/0xe30
[  602.693504][    C1]  ? handle_softirqs+0x286/0x870
[  602.693528][    C1]  ? do_softirq+0xec/0x180
[  602.693551][    C1]  ? __local_bh_enable_ip+0x17d/0x1c0
[  602.693576][    C1]  ? neigh_periodic_work+0xb41/0xd60
[  602.693617][    C1]  ? process_scheduled_works+0xae1/0x17b0
[  602.693660][    C1]  ? nft_do_chain+0x40c/0x1920
[  602.693693][    C1]  __kasan_kmalloc+0x93/0xb0
[  602.693720][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  602.693747][    C1]  ? ref_tracker_alloc+0x133/0x460
[  602.693785][    C1]  ref_tracker_alloc+0x133/0x460
[  602.693822][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  602.693872][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.693899][    C1]  ? rcu_is_watching+0x15/0xb0
[  602.693928][    C1]  dst_init+0xd9/0x450
[  602.693961][    C1]  dst_alloc+0x12a/0x170
[  602.693995][    C1]  ip_route_output_key_hash_rcu+0x1482/0x23a0
[  602.694038][    C1]  ? ip_route_output_key_hash+0xde/0x2e0
[  602.694074][    C1]  ip_route_output_key_hash+0x1b9/0x2e0
[  602.694108][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.694135][    C1]  ? __lock_acquire+0xab9/0xd20
[  602.694158][    C1]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  602.694198][    C1]  ? ip_route_me_harder+0x494/0xfe0
[  602.694223][    C1]  ip_route_output_flow+0x2a/0x150
[  602.694254][    C1]  ? ip_route_me_harder+0x6a7/0xfe0
[  602.694277][    C1]  ip_route_me_harder+0x6b9/0xfe0
[  602.694304][    C1]  ? __pfx_ip_route_me_harder+0x10/0x10
[  602.694338][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.694368][    C1]  synproxy_send_tcp+0x359/0x6c0
[  602.694401][    C1]  synproxy_send_client_synack+0x8bb/0xe20
[  602.694438][    C1]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  602.694466][    C1]  ? nft_jhash_init+0x128/0x660
[  602.694495][    C1]  ? synproxy_pernet+0x45/0x270
[  602.694529][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.694558][    C1]  nft_synproxy_eval_v4+0x36e/0x560
[  602.694596][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  602.694629][    C1]  ? nf_conntrack_in+0xa24/0x1600
[  602.694662][    C1]  ? nf_ip_checksum+0x13c/0x510
[  602.694697][    C1]  nft_synproxy_do_eval+0x345/0x570
[  602.694735][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  602.694775][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.694805][    C1]  nft_do_chain+0x40c/0x1920
[  602.694842][    C1]  ? call_rcu+0x6ff/0x9c0
[  602.694869][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.694895][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  602.694936][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  602.694991][    C1]  nft_do_chain_inet+0x25d/0x340
[  602.695024][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  602.695057][    C1]  ? ipt_do_table+0x2a3/0x1640
[  602.695085][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.695111][    C1]  ? nf_nat_ipv4_local_in+0x223/0x720
[  602.695137][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  602.695171][    C1]  nf_hook_slow+0xc5/0x220
[  602.695200][    C1]  NF_HOOK+0x206/0x3a0
[  602.695225][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.695253][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  602.695280][    C1]  ? NF_HOOK+0x9a/0x3a0
[  602.695305][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  602.695330][    C1]  ? ip_rcv_finish_core+0xda3/0x1c00
[  602.695359][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  602.695388][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.695414][    C1]  ? skb_dst+0x4f/0xd0
[  602.695440][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.695466][    C1]  ? ip_local_deliver+0x12a/0x1b0
[  602.695495][    C1]  NF_HOOK+0x30c/0x3a0
[  602.695522][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  602.695549][    C1]  ? NF_HOOK+0x9a/0x3a0
[  602.695574][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  602.695599][    C1]  ? ip_rcv_core+0x7f7/0xd00
[  602.695627][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  602.695659][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  602.695684][    C1]  __netif_receive_skb+0x143/0x380
[  602.695708][    C1]  ? process_backlog+0x2d5/0x14f0
[  602.695735][    C1]  process_backlog+0x60e/0x14f0
[  602.695758][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.695785][    C1]  ? __lock_acquire+0xab9/0xd20
[  602.695815][    C1]  ? __pfx_process_backlog+0x10/0x10
[  602.695850][    C1]  __napi_poll+0xc7/0x480
[  602.695870][    C1]  ? net_rx_action+0x46d/0xe30
[  602.695897][    C1]  net_rx_action+0x707/0xe30
[  602.695920][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  602.695956][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.695990][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  602.696035][    C1]  handle_softirqs+0x286/0x870
[  602.696064][    C1]  ? do_softirq+0xec/0x180
[  602.696092][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  602.696122][    C1]  ? neigh_periodic_work+0xb41/0xd60
[  602.696147][    C1]  do_softirq+0xec/0x180
[  602.696171][    C1]  </IRQ>
[  602.696180][    C1]  <TASK>
[  602.696189][    C1]  ? __pfx_do_softirq+0x10/0x10
[  602.696219][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.696246][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  602.696269][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  602.696295][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  602.696322][    C1]  ? neigh_periodic_work+0xb41/0xd60
[  602.696348][    C1]  ? neigh_periodic_work+0xb41/0xd60
[  602.696374][    C1]  neigh_periodic_work+0xb41/0xd60
[  602.696403][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  602.696430][    C1]  process_scheduled_works+0xae1/0x17b0
[  602.696473][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  602.696504][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.696535][    C1]  worker_thread+0x8a0/0xda0
[  602.696577][    C1]  kthread+0x711/0x8a0
[  602.696611][    C1]  ? __pfx_worker_thread+0x10/0x10
[  602.696638][    C1]  ? __pfx_kthread+0x10/0x10
[  602.696668][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.696696][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  602.696728][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  602.696755][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  602.696789][    C1]  ? __pfx_kthread+0x10/0x10
[  602.696822][    C1]  ret_from_fork+0x3fc/0x770
[  602.696854][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  602.696881][    C1]  ? __switch_to_asm+0x39/0x70
[  602.696912][    C1]  ? __switch_to_asm+0x33/0x70
[  602.696942][    C1]  ? __pfx_kthread+0x10/0x10
[  602.696974][    C1]  ret_from_fork_asm+0x1a/0x30
[  602.697015][    C1]  </TASK>
[  603.778380][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  603.785285][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) 
[  603.797104][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  603.807168][   T31] Call Trace:
[  603.810456][   T31]  <TASK>
[  603.813394][   T31]  dump_stack_lvl+0x99/0x250
[  603.818009][   T31]  ? __asan_memcpy+0x40/0x70
[  603.822619][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  603.827846][   T31]  ? __pfx__printk+0x10/0x10
[  603.832471][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  603.838130][   T31]  panic+0x2db/0x790
[  603.842047][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  603.847701][   T31]  ? __pfx_panic+0x10/0x10
[  603.852135][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  603.857788][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  603.863626][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  603.869275][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  603.874658][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  603.880844][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  603.886497][   T31]  watchdog+0x102d/0x1030
[  603.890928][   T31]  ? watchdog+0x1de/0x1030
[  603.895368][   T31]  kthread+0x711/0x8a0
[  603.899465][   T31]  ? __pfx_watchdog+0x10/0x10
[  603.904151][   T31]  ? __pfx_kthread+0x10/0x10
[  603.908763][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  603.914419][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  603.919644][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  603.925295][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  603.930521][   T31]  ? __pfx_kthread+0x10/0x10
[  603.935138][   T31]  ret_from_fork+0x3fc/0x770
[  603.939753][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  603.944891][   T31]  ? __switch_to_asm+0x39/0x70
[  603.949676][   T31]  ? __switch_to_asm+0x33/0x70
[  603.954461][   T31]  ? __pfx_kthread+0x10/0x10
[  603.959076][   T31]  ret_from_fork_asm+0x1a/0x30
[  603.963881][   T31]  </TASK>
[  603.967097][   T31] Kernel Offset: disabled
[  603.971420][   T31] Rebooting in 86400 seconds..