last executing test programs:

10m26.170021822s ago: executing program 32 (id=138):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200010, &(0x7f0000000100)=ANY=[], 0xfd, 0x669, &(0x7f0000000140)="$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")
mount(0x0, &(0x7f00000007c0)='.\x00', 0x0, 0x2200020, 0x0)

9m17.2992596s ago: executing program 2 (id=773):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0)
sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x14, r1, 0xf81, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010)

9m17.164680663s ago: executing program 2 (id=775):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)

9m17.050601566s ago: executing program 2 (id=779):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
getdents(r0, &(0x7f0000000100)=""/40, 0x28)
getdents(r0, 0xffffffffffffffff, 0x5a)

9m16.959520348s ago: executing program 2 (id=780):
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00')
getdents64(r0, &(0x7f0000000300)=""/4096, 0x1000)
getdents64(r0, &(0x7f0000000040)=""/189, 0xbd)

9m16.723168554s ago: executing program 2 (id=785):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

9m16.628715816s ago: executing program 2 (id=788):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/2}], 0x2d)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x12cc11, 0x0)

9m1.459513428s ago: executing program 33 (id=788):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/2}], 0x2d)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x12cc11, 0x0)

8m18.51055642s ago: executing program 0 (id=1176):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000))
fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x2, 0x1, 0x8000003ff, 0x8})

8m18.320204955s ago: executing program 0 (id=1179):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

8m18.14547446s ago: executing program 0 (id=1189):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)

8m17.973661364s ago: executing program 0 (id=1186):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000180)='./file0\x00', 0x200010, &(0x7f00000008c0)=ANY=[], 0x1, 0xf43, &(0x7f0000002140)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

8m17.177972073s ago: executing program 0 (id=1201):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d2", 0x9}], 0x1}, 0x200a4800)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000), 0xc)

8m16.750987134s ago: executing program 0 (id=1197):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@errors_remount}, {@usrquota}, {@usrquota}, {@errors_continue}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2c, 0x62d7, &(0x7f0000021240)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)

8m16.322408254s ago: executing program 34 (id=1197):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@errors_remount}, {@usrquota}, {@usrquota}, {@errors_continue}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2c, 0x62d7, &(0x7f0000021240)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)

5m51.727691238s ago: executing program 3 (id=2503):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="347a696b918264f5000dbcce11976ecdd820faee329291adc38390f3eb9d6b8ff66a879339d960dfd44ec5", 0x2b}, {&(0x7f0000002900)="83d29f3ac04c4ca069de4e30267ea22c35622cd81485b99043d2e171c8fb2f8fe4f26c5d316ce7e91dbce694afc717cffdfb8832ea82b5f8de449f5cc2eb03bd27617855f88769abe71bd55949285c709577abd160726e6ba7022cd93530b6cc5dfad01db1a49c3b637f7c4e8752310cef9d2b21f56111ad01775cb2a6b84c96af7bc484e1914da8a6c77f725655640b8a623203a726db5b5aa000fdd01d25304c862ac8d53c50e118192dd9d698ae8faff0f1e9cbff7cbe072737c17edc7088a2249ad0a7306d172b63c1adeda0216e50bab6cee522b35ede8d5563799cc58dc1a5e1a80205a0220e7e96c8263f383a9eae03aebff6758e71b228f8f87acfa1b1de30e6a7b72b5628a2422e0818efa9b1798c61717340e5060d311901b4c374190951c4fca1b64a4166cc67c4e766a419c0ff024ba82776b6587dd3e23b077056d0354b10bc1f33a6c1fec01c9a0342ccde24b64cad6c570b6fd6cc7d2258246cc9f2153cf2f5d260a810e8a747c82499361bcb0ce3362de826030c4272ef9d9be607b3b52e3a728cd5c52116076c0eeab0e20a70c30662b943164031c22387f492a467f9b1ee1ad4855b478e02bc036c7cf4bd648d42b39c1384ec5d55ab5efe152d29d71e6c44bb80ff881a3d61a3c151d7c80a1eee73dd140f3e02ba980fa753ba559288669f20ddd1ddb1f2e2dedd9acabaafc412c086bf471afa4cd79db85b6ae892a0cbc7fb5add8cfbe8de26d47f80761440c88d0b741a0cd5f3712e59cf3970f5d175c94d81a4688e9755ae9124cac20afe0684eedef5d53cf7b1dd3adb57b1aa7d80ba7ba25bc96bf27627fb30aa49898ea9d10e2146936f3e8586156c18e502984dd53659a0fc4b204e8d8798a1069af68238a54219d8e3d7d6ac1706944d37f4cc54e9cfbab3d45a42ed982418f2366a2619b72b32870c1ac4936f6305da92da6eed7e8e9d5f688e33b8fea06305da681c951d015f917844ce19fe3c99a56200c8a53218610b3e8e629afb2937238ae9cc6ebb1732a54167d3101e86d6b95958c6943b5d87659466c52272d957627b6ee3c14021daa2fbd6232f6408639ff7ffa62bd9b3991eb2a8dc868daa4435e70f5ed3ef321b5b696c71804b6f4f27a68157f4f1cd2107acf662c1e90f9e1e92a9305457a3e41d045424165473cccdc8aa20140285a61b1575324f8c3d8917a8200cf26ca39b54433b9428052b175101b5e5d27350504fac5fe83700a1cd8a59437e53e36772a1b10e946897d95d9ea85140c49f71a9dec04a7cf06d1609dff55f6a83ad66a29deedbca99bdce7029af569ecddab5eb4e22105d917194195287fe32795d545b1b81c0b3a082f0b5a0f7cf3a7c3e2dea07d9406968501907a689992eb1cc3625a47e2e2bfe8003ddec52c55c5843803849acae76bec00191477c60bb80d8519db928b7eebab5164151136988b8479b6868a4b7da8fab59c6c72c39b2423e5da0f6745d07da9cbbd31c5454531953eebb3699ca0f33d222385a4694f53409000c24c144060a15a46530a6f949503128819510e73201b11e2e7b91da6aa7d34a9fa167ec12ebabf6251cb773e7074c4930973d216169a786a12c92c943f1468d5c26421e8e41063911c35bce0dccd487d0013807bd268c619b679caed52fa2b2e70448e85c6eea649447e6d67127b6ccc5c8b45c751ae62608300e906402c5ca6817fab85827acef21495b8da79772fd8a7a1cebd4d468d3fd51a63bd04e3a3824f750977a08e0bf5806cddeb0ed806fe4663f9a55ed178087e9f9fec01bc42299f5135778de1383750845637141e521c6db2321ea4d390f75b105475b70ed5a181c1cb930ffa5b9a62de1ad72d1d8cc45fe28c8f5dfe55ba069de85d7f80304d3de5e0620c20f308693fc9d6cda2ebaa9dc92b30d2931919165a08b866778e46d06e09f8abb89720bcb7c6b3416970914bd267b3806435a6d69524a43739f95f02c0d2c1547d63968a59a03aea2acd9f7ae48ade9be34be6895091da5e07750a458a46c8b226470b8a5d5555c1e1199582e6311bdc2d8b449b05d5b08c0b3f355dc70d46967868ac25d7349258d08f1e2b919af9d2a9bfc4070f5bb75de9714cb14d3606928b7d0469f03b5d038e51495c29fa2d73ea7516836c6175ba05b9779c35b9f05d99a7e2324d7d4c95ad89293c2a569f546b9c86fc42a55c002b37a3b1862225364aa8e6b9033c5fafcf2de10b913ecf4ad3dd3a3ad062116da21f2d4eb87c1f6a6ab1c8044e80db0d57906e1c030236279068f69cf40aa142a9b2f4bf058f26e8d01832f4a8d5879401c8f25be1a4a27420225db746f3445c3c1f0d0dcea602e7b44a1fb63ddb0511d0f5b690c8061802f9bc5f49f3e6413e274cf1152f4dca31ec734cb8d564e23aff61cb5d5ff9eb6dc538df14eb6bc875ed02fc8d4c03e7c64962354ea17496df36baa197294e4bb70b4d0bb599a95ab8e358f930e4be3f38e71295966b31449b7e5d0258e6fa26d36fc3fa048d80a72f7c447b0fd5f4d7807e13c994f0c383f116c205f2d20d1b9eb00a3ae31b53c", 0x716}], 0x2, 0x0, 0x0, 0x24008842}], 0x1, 0x2044011)

5m51.486018714s ago: executing program 3 (id=2505):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80080a, &(0x7f00000002c0)={[{@errors_remount}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x7d8, &(0x7f0000000900)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa0000, 0xc)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000001a80)={0x1, 0xfffffffffffffffc, 0x4, 0x7})

5m51.039375245s ago: executing program 3 (id=2510):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0)
landlock_restrict_self(r1, 0x0)
migrate_pages(r0, 0x81, 0x0, 0x0)

5m50.565104136s ago: executing program 3 (id=2515):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='profile\x00', 0xfef)

5m50.316772912s ago: executing program 3 (id=2517):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mknodat(r1, &(0x7f0000000000)='./file1\x00', 0x2, 0x3)

5m50.150321787s ago: executing program 3 (id=2519):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x200})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})

5m35.072950756s ago: executing program 35 (id=2519):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x200})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})

4m10.85484719s ago: executing program 6 (id=3460):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)

4m10.678134534s ago: executing program 6 (id=3463):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)

4m10.519270768s ago: executing program 6 (id=3465):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]})
close(0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
getpriority(0x1, 0x0)

4m10.248074305s ago: executing program 6 (id=3469):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x400008, 0x4)
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000540)="$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")
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040))

4m9.295062479s ago: executing program 6 (id=3476):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4)

4m8.4111161s ago: executing program 6 (id=3481):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, &(0x7f0000000080)={r1, 0x0, r0, 0xf3, 0x80000})

4m7.920233942s ago: executing program 36 (id=3481):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, &(0x7f0000000080)={r1, 0x0, r0, 0xf3, 0x80000})

4m2.970068383s ago: executing program 7 (id=3509):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x20001, 0x0)

4m2.462423706s ago: executing program 7 (id=3511):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
timerfd_settime(0xffffffffffffffff, 0x7, 0x0, 0x0)

4m1.520611649s ago: executing program 7 (id=3514):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0x38, r1, 0x87898b830c7bd19d, 0x3, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffff0, 0x67}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008080}, 0x20008000)

4m0.815841267s ago: executing program 7 (id=3516):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xdd}}, {@nojournal_checksum}, {@acl}, {@errors_remount}]}, 0x1, 0x4d4, &(0x7f0000000a00)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

4m0.364650478s ago: executing program 7 (id=3518):
r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xc3)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x23)

3m59.498749229s ago: executing program 7 (id=3522):
syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="170ae11f6fe9bab3f0ab797f1eec2c308c47ccf9510a98013053ad64c2a1184e15", @ANYRES16, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT, @ANYRES16, @ANYRES64=0x0, @ANYRES16, @ANYRESHEX], 0x1, 0x712, &(0x7f0000001240)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)

3m59.066686709s ago: executing program 37 (id=3522):
syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="170ae11f6fe9bab3f0ab797f1eec2c308c47ccf9510a98013053ad64c2a1184e15", @ANYRES16, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT, @ANYRES16, @ANYRES64=0x0, @ANYRES16, @ANYRESHEX], 0x1, 0x712, &(0x7f0000001240)="$eJzs3UtsHGcdAPD/rNfr3SClTptHQZVqNVJBRCR2LAfMhYAQ8qFCVTlwthKnsbJxKttFToSIW+DOgROncvCt4oDKPRKcqSqhXn3gUAmpl3KxuBjN7Mw+7NmH42fb3y+amW++13zzn5d3V9EE8LW1cC2qzyKJhWtvbKTr21uzzbGt2Ym8uBkRtYioRFRbi0hWIiu9nU/xzTQzr5/02UwSy/NvffrF9met1Wo+ZfWTAe3K1PZnbeZTTEXEWL7cb7xPjx/t3XxPf3f69jeqzh6mAbtaBC7+dKhe4dB299lsl334r2w+qPlBrlvg7Ekf6umFPFZ2PU9GnIuIekTrqb8Zt9ptvsw2T3sAAAAAcFCNkrzq4CYv7MRObMT54xoSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBV1vf8/yd/vn6WnIine/1/LarTUTnWwfZW9CLHXJxOt5bPjHwwAAAAAAAAAHLtXd2InNuJ8sb6bZL/5v5b/7p/6Rrwba7EUq3E9NmIx1mM9VmMmIia7OqptLK6vr85kLSMuDmh5Mz4uaXmz/xhvH/E+AwAAAAAAAMAZVx9S/mB8f977sdD5/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6CJGKstcimi0V6MirViKgX9TYjPo6I2umO9kCSssxnJz8OAAAAOJR672pSH6HNC09jJzbifLG+m2Sf+S9nn5fr8W6sxHosx3o0Yynu5p+h00/9le2t2eb21uzDdNrf748/P9DQsx6j9d1D+ZZfzmo04l4sZznX404ksZup5L28vL01my4flo/rvXRMyY9yA0Yz1pW+m86ufJSl/9D7LUL1QLv4nCp9Syaz0vF2RKbzsaUtLhQRKI/E0KNTHbilmai0v/m52L2V/RHpifnu0yJ34MbfO7enVuk3N6dibyRuRqV9hC4PjnnEt//24S/vN1ce3L+3du3s7FKpp0Nr7I3EbFckrnyFIjHcdBaJS+31hfhZ/CKuxecTb8ZqLMevYjHWY2mqKF/Mz+d0Pjk4Up+c6157c9QRte5fZWOaip4xxVT8NEstxmvZMT0fy5HEo4hYilvZv5sx074bdI7wpcHjzq76ygh32tj5b+sWHnH1O1lGO0zR6N/qL6NG4mik97oLXXHtvudOZmWtnH+/n54NnSi9WBql4lk3+vOoS/VbeSLt4bcDnw8nrTsSxVOiGN1L/c6XVkj/vJvO15orD1bvL74z4vZez5fpdfT7Azwljj9i6RF+Mer5zl3I5kl2TU1nZS+1n7C98arlv7gU49xbdqndrnWl/jwexd2eK/X7MRdzMZ/VvpzVHt/3xErLrrR76r2Hp2XpX1rV9g873X9vPYpm6+8hAM62c989V2v8p/HPxgeN3zXuN96o/2TiBxOv1GL8H+M/rE6PvV55JflrfBC/6Xz+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnt/a4ycPFpvNpdXyRKW8KBncarHZfuPbgDo9iSR/Vc4IlZO1x092h3Y4ODGRD+8ArSqjRezAieJtjV1FYxFRUnnq6Da6L/G/1uu4djs59eF7WoRkhE0k+wKeNn7uMRdb7uSMD221O14a1WNMTB2iebU3pzhhu+oc6OzNEo2y49XnZGsOuXGMHcHNBzhVN9YfvnNj7fGT7y0/XHx76e2llfG5ufnp+blbszfuLTeXplvzrgYn8vJb4CR0/znRVouIV4e3HfCiVgAAAAAAAAAAAOAYncT/hTjtfQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+3BauRfVZJDEzfX06Xd/emm2mU5Hu1KxGRCUikl9HJH+PuB2tKSa7ukv6beePy/NvffrF9medvqpF/UrEZt92o9nMp5iKiLF8eVT93RneX62TnCgpTtqRSQN2tQhc/XCDhEP7fwAAAP//fu31Ow==")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)

3m28.385252922s ago: executing program 4 (id=3723):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
mount$tmpfs(0x0, 0x0, 0x0, 0x20024, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000100))

3m28.186931926s ago: executing program 4 (id=3725):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040)
read$FUSE(r0, &(0x7f0000002840)={0x2020}, 0x2020)

3m27.935518382s ago: executing program 4 (id=3730):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', <r1=>0x0})
sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @multicast1}}}], 0x20}}], 0x1, 0x24040080)

3m27.763568086s ago: executing program 4 (id=3732):
syz_mount_image$udf(&(0x7f0000000340), &(0x7f0000000a00)='./file0\x00', 0x2000002, &(0x7f0000000a40)=ANY=[@ANYBLOB='volume=00000000000000000062,gid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0xc32, &(0x7f0000000b80)="$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")
mount$overlay(0x0, &(0x7f00000022c0)='./file0\x00', &(0x7f0000002300), 0x0, &(0x7f0000002340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000002380)='./file0\x00', 0x141104, 0x1aa)
getdents64(r0, 0x0, 0x0)

3m27.274971109s ago: executing program 4 (id=3737):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c840}, 0x840)

3m26.739741602s ago: executing program 4 (id=3740):
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xa})
r0 = add_key$user(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000300)='\x00', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/67, 0x43, 0x0)

3m26.059684768s ago: executing program 38 (id=3740):
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xa})
r0 = add_key$user(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000300)='\x00', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/67, 0x43, 0x0)

1m43.194925s ago: executing program 9 (id=4160):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000000)={0x3ff, {{0xa, 0x4, 0x0, @mcast2, 0xffff56a6}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xa}}}, 0x108)
socket(0x11, 0x4, 0x2)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040aaaaaaafb129249b8dc83"], 0xd)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e131d"], 0x16)

1m42.413292268s ago: executing program 5 (id=4161):
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40)

1m38.166487173s ago: executing program 8 (id=4162):
unshare(0x400)
syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = eventfd2(0x1, 0x800)
close_range(r0, r0, 0x6)

1m33.76596816s ago: executing program 1 (id=4163):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000100), 0x6e2, 0x20480)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffffffff80000001)

1m32.031150543s ago: executing program 9 (id=4164):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xff000000, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00'}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844)

1m31.280786181s ago: executing program 5 (id=4165):
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000001740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa0880c, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x5, 0x2ea, &(0x7f0000000500)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='127.0.0.1:/\x00', 0x1ff)
r0 = open(&(0x7f0000001540)='.\x00', 0x8000, 0x50)
getdents64(r0, &(0x7f0000001580)=""/116, 0x74)

1m23.389997535s ago: executing program 8 (id=4166):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r1=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r2})

1m22.101999766s ago: executing program 1 (id=4167):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000740)={0xf, 0x8, 0xfa00, {r2, 0xa}}, 0x10)

1m20.764144529s ago: executing program 9 (id=4168):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x1400c, &(0x7f00000001c0)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000200)="$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")
unshare(0x40400)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000001540)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0xfffffffffffffffe, 0x0, 0x5})

1m17.810676411s ago: executing program 5 (id=4169):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="2e003300d0000000ffffffffffff08021100000050505050505020000004"], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846)

1m12.748640836s ago: executing program 8 (id=4170):
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e1d, 0x1005, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x9, 0x8, 0x3, 0xc, 0x81, 0xff, 0x101}, {0xb, 0x4d, 0x3, 0x4}, 0x85, 0x6e6bba, 0x1, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x6c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x1}}, 0xe8)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000001280), 0x6)

1m10.54120274s ago: executing program 1 (id=4171):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000006a0000850000000500000095"], 0x0, 0x7, 0x0, 0x0, 0x100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

1m8.06105844s ago: executing program 9 (id=4172):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)

1m4.870874969s ago: executing program 5 (id=4173):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x5, 0x4)
write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24)
recvmsg$inet_nvme(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x40000120)

1m1.590068059s ago: executing program 8 (id=4174):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x27, 0xe, 0x0, &(0x7f0000000880)="f8c348cc51da29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)

58.624770412s ago: executing program 1 (id=4175):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45)
write$cgroup_type(r0, &(0x7f0000000700), 0x9)

54.61148642s ago: executing program 9 (id=4176):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xff, 0x30, 0xfff, 0x3}, &(0x7f0000000300)=0x18)

53.580283176s ago: executing program 5 (id=4177):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0)

49.814140028s ago: executing program 8 (id=4178):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000540)={[{@stripe={'stripe', 0x3d, 0x10000}}, {@noinit_itable}, {@nombcache}, {@dioread_lock}, {@errors_remount}, {@nodiscard}, {@block_validity}, {@user_xattr}]}, 0x5, 0x4bf, &(0x7f0000000a00)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x21, 0x0, 0x0)
quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

47.157747953s ago: executing program 1 (id=4179):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x30}}, 0x0)

40.892484097s ago: executing program 5 (id=4180):
mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="9d", 0x1}], 0x1)

40.219838784s ago: executing program 9 (id=4181):
timer_settime(0x0, 0x0, 0x0, 0x0)
capset(0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0xc0000000000000)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x249, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0xe5f}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)

37.51363336s ago: executing program 8 (id=4182):
chdir(&(0x7f0000000080)='./cgroup\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000000)=""/49, 0x31)
getdents(r0, 0xfffffffffffffffd, 0x58)

32.305544007s ago: executing program 1 (id=4183):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xfffffffc, @empty, 0x4}, 0x1c)
syz_emit_ethernet(0x84, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "00ea00", 0x4e, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[], {0x4e1d, 0x4e20, 0x4e, 0x0, @opaque="72df0703defbfa8e1d726bd99b86bf6e5d494c52721c6c54f30a2512465e17a7b2bbca988343726678c65f9be69f166a850ea8c61df7acb211aceab9d2bc49e5e4239b82bf22"}}}}}}, 0x0)
readv(r0, &(0x7f0000002680)=[{&(0x7f0000000140)=""/19, 0x13}, {0x0, 0x26}, {&(0x7f0000000380)=""/100, 0x64}], 0x3)

19.617035038s ago: executing program 39 (id=4180):
mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="9d", 0x1}], 0x1)

15.05880835s ago: executing program 40 (id=4182):
chdir(&(0x7f0000000080)='./cgroup\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000000)=""/49, 0x31)
getdents(r0, 0xfffffffffffffffd, 0x58)

8.342116765s ago: executing program 41 (id=4181):
timer_settime(0x0, 0x0, 0x0, 0x0)
capset(0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0xc0000000000000)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x249, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0xe5f}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)

0s ago: executing program 42 (id=4183):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xfffffffc, @empty, 0x4}, 0x1c)
syz_emit_ethernet(0x84, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "00ea00", 0x4e, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[], {0x4e1d, 0x4e20, 0x4e, 0x0, @opaque="72df0703defbfa8e1d726bd99b86bf6e5d494c52721c6c54f30a2512465e17a7b2bbca988343726678c65f9be69f166a850ea8c61df7acb211aceab9d2bc49e5e4239b82bf22"}}}}}}, 0x0)
readv(r0, &(0x7f0000002680)=[{&(0x7f0000000140)=""/19, 0x13}, {0x0, 0x26}, {&(0x7f0000000380)=""/100, 0x64}], 0x3)

kernel console output (not intermixed with test programs):

ad
[  471.274832][T15055] hpfs: filesystem error: unable to find root dir
[  471.574665][T15071] loop7: detected capacity change from 0 to 2048
[  471.649235][T15071] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  471.722046][T15080] loop4: detected capacity change from 0 to 2048
[  471.756263][T15080] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  471.802634][T15080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  471.949081][T13357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.994287][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3335'.
[  472.019982][T15084] gretap0: entered promiscuous mode
[  472.037709][T15084] macvlan2: entered allmulticast mode
[  472.043205][T15084] gretap0: entered allmulticast mode
[  472.321162][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3339'.
[  472.495027][T15096] loop7: detected capacity change from 0 to 4096
[  472.604731][T15096] ntfs: volume version 3.1.
[  472.652772][T15077] loop6: detected capacity change from 0 to 32768
[  472.953815][T15100] loop5: detected capacity change from 0 to 8192
[  473.002189][T15100] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  473.039129][T15100] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  473.051256][T15100] REISERFS (device loop5): using ordered data mode
[  473.058215][T15100] reiserfs: using flush barriers
[  473.066491][T15100] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  473.084018][T15100] REISERFS (device loop5): checking transaction log (loop5)
[  473.122546][T15100] REISERFS (device loop5): Using tea hash to sort names
[  473.137867][T15100] REISERFS (device loop5): using 3.5.x disk format
[  473.305659][   T27] audit: type=1326 audit(1792030708.941:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15108 comm="syz.6.3346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaa39e559 code=0x7ffc0000
[  473.343338][T15113] loop4: detected capacity change from 0 to 512
[  473.378993][   T27] audit: type=1326 audit(1792030708.951:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15108 comm="syz.6.3346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaa39e559 code=0x7ffc0000
[  473.415852][T15113] EXT4-fs (loop4): 1 truncate cleaned up
[  473.428197][   T27] audit: type=1326 audit(1792030708.961:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15108 comm="syz.6.3346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaa39e559 code=0x7ffc0000
[  473.454213][   T27] audit: type=1326 audit(1792030708.961:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15108 comm="syz.6.3346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaa39e559 code=0x7ffc0000
[  473.454401][T15113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  473.565409][   T27] audit: type=1326 audit(1792030708.991:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15108 comm="syz.6.3346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7feaaa39e559 code=0x7ffc0000
[  473.677618][   T27] audit: type=1326 audit(1792030708.991:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15108 comm="syz.6.3346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaa39e559 code=0x7ffc0000
[  473.765549][   T27] audit: type=1326 audit(1792030708.991:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15108 comm="syz.6.3346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaa39e559 code=0x7ffc0000
[  473.817332][T15118] erofs: (device loop6): mounted with root inode @ nid 36.
[  473.842338][   T27] audit: type=1326 audit(1792030709.061:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15108 comm="syz.6.3346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaa39e559 code=0x7ffc0000
[  473.908775][ T6251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.922413][   T27] audit: type=1326 audit(1792030709.061:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15108 comm="syz.6.3346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaaa39e559 code=0x7ffc0000
[  473.948101][   T27] audit: type=1326 audit(1792030709.061:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15108 comm="syz.6.3346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feaaa39e559 code=0x7ffc0000
[  474.884358][T15146] input: syz1 as /devices/virtual/input/input36
[  474.946636][T15151] netlink: 19 bytes leftover after parsing attributes in process `syz.7.3363'.
[  475.201780][T15159] set_capacity_and_notify: 3 callbacks suppressed
[  475.201797][T15159] loop7: detected capacity change from 0 to 512
[  475.256196][T15159] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  475.265341][T15159] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities
[  475.288035][T15161] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only
[  475.307514][T15161] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  475.336589][T15161] overlayfs: failed to get uuid (608/file2, err=-13); falling back to uuid=null.
[  475.348700][T15165] loop6: detected capacity change from 0 to 256
[  475.801124][T15178] loop6: detected capacity change from 0 to 512
[  475.865624][T15178] EXT4-fs (loop6): 1 truncate cleaned up
[  475.884659][T15178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  475.937668][T15183] loop4: detected capacity change from 0 to 1024
[  475.945486][T15183] EXT4-fs: Ignoring removed nobh option
[  475.966210][T15183] EXT4-fs: Ignoring removed bh option
[  476.042356][T15183] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  476.093268][ T9535] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.140597][T15183] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  476.162363][T15183] System zones: 0-1, 3-12
[  476.186889][T15183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  476.445164][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3380'.
[  476.685426][ T6251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.908297][T15198] loop4: detected capacity change from 0 to 2048
[  476.988905][T15198] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  477.050172][T15201] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  477.159626][T15205] loop7: detected capacity change from 0 to 512
[  477.191159][T15205] EXT4-fs: inline encryption not supported
[  477.253544][T15205] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended
[  477.341241][T15205] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.3385: corrupted inode contents
[  477.395906][T15205] EXT4-fs (loop7): Remounting filesystem read-only
[  477.402858][T15205] EXT4-fs (loop7): 1 orphan inode deleted
[  477.412807][T15205] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  477.484197][T15212] kAFS: bad VL server IP address
[  477.539103][T15214] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3389'.
[  477.892481][T15230] loop5: detected capacity change from 0 to 512
[  478.276911][   T56] Bluetooth: hci2: Frame reassembly failed (-84)
[  478.302454][   T42] Bluetooth: hci2: Frame reassembly failed (-84)
[  478.321328][T15241] loop6: detected capacity change from 0 to 16
[  478.330594][T15241] erofs: Bad value for 'cache_strategy'
[  478.433954][T15243] loop6: detected capacity change from 0 to 64
[  478.962471][T15262] phram: not enough arguments
[  479.165788][T15270] loop6: detected capacity change from 0 to 256
[  479.175892][T15270] exfat: Deprecated parameter 'utf8'
[  479.188981][T15270] exfat: Deprecated parameter 'utf8'
[  479.213265][T15270] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  479.622115][T15284] gre0: Caught tx_queue_len zero misconfig
[  479.879924][T15291] lo: Caught tx_queue_len zero misconfig
[  480.174559][T13357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.326244][ T5085] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  480.333539][ T5791] Bluetooth: hci2: command 0x1003 tx timeout
[  480.435914][T15295] set_capacity_and_notify: 1 callbacks suppressed
[  480.435926][T15295] loop4: detected capacity change from 0 to 40427
[  480.518159][T15295] F2FS-fs (loop4): invalid crc value
[  480.564584][T15295] F2FS-fs (loop4): Found nat_bits in checkpoint
[  480.755420][T15295] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  480.989571][ T6251] syz-executor: attempt to access beyond end of device
[  480.989571][ T6251] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  481.022018][T15313] loop7: detected capacity change from 0 to 8192
[  481.056117][ T6251] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  481.447875][T15326] loop6: detected capacity change from 0 to 2048
[  481.501047][T15326] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  482.442360][T15347] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  483.422604][T15370] loop5: detected capacity change from 0 to 6
[  483.464623][T15370]  loop5: [POWERTEC] p1 p2 p3
[  483.482138][T15370] loop5: p1 start 2738982409 is beyond EOD, truncated
[  483.506421][T15370] loop5: p2 start 3318134482 is beyond EOD, truncated
[  483.513381][T15370] loop5: p3 start 3832978868 is beyond EOD, truncated
[  483.594541][   T27] kauditd_printk_skb: 9 callbacks suppressed
[  483.594556][   T27] audit: type=1326 audit(1792030719.241:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.7.3464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  483.720418][   T27] audit: type=1326 audit(1792030719.241:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.7.3464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  483.771637][   T27] audit: type=1326 audit(1792030719.271:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.7.3464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  483.836115][   T27] audit: type=1326 audit(1792030719.281:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.7.3464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  483.894610][T15384] loop7: detected capacity change from 0 to 1024
[  483.901191][   T27] audit: type=1326 audit(1792030719.281:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.7.3464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  483.945751][   T27] audit: type=1326 audit(1792030719.281:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.7.3464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  484.018098][T15386] loop6: detected capacity change from 0 to 512
[  484.055181][   T27] audit: type=1326 audit(1792030719.281:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.7.3464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  484.100751][T15386] EXT4-fs: Ignoring removed nomblk_io_submit option
[  484.113045][T15386] EXT4-fs: Ignoring removed nomblk_io_submit option
[  484.124571][   T27] audit: type=1326 audit(1792030719.281:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.7.3464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  484.179905][T15386] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  484.287875][   T27] audit: type=1326 audit(1792030719.281:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.7.3464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  484.327115][T15391] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  484.356384][   T27] audit: type=1326 audit(1792030719.281:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15375 comm="syz.7.3464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  484.377081][T15386] EXT4-fs (loop6): 1 truncate cleaned up
[  484.449784][T15386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  484.477332][T15394] loop4: detected capacity change from 0 to 164
[  484.518388][T15394] Unable to read rock-ridge attributes
[  484.552524][T15394] Unable to read rock-ridge attributes
[  484.582956][T15396] loop7: detected capacity change from 0 to 128
[  484.887865][ T9535] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[  484.902930][T15401] loop4: detected capacity change from 0 to 2048
[  484.969248][T15401] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  484.988106][ T9535] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[  485.060570][ T9535] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[  485.224367][T13255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.353920][ T5838] infiniband s`z1: ib_query_port failed (-19)
[  485.641908][T15410] format_corename failed
[  485.676014][T15410] Aborting core
[  485.863909][T15405] loop7: detected capacity change from 0 to 32768
[  485.876897][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.099238][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.310486][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.473152][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.119106][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  487.146465][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  487.159202][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  487.181587][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  487.196350][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  487.204087][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  487.575324][T15440] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[  487.726098][T15429] rxe_eth0 speed is unknown, defaulting to 1000
[  488.404798][T15462] loop5: detected capacity change from 0 to 4096
[  488.500644][T15464] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  488.867732][T15474] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  489.294046][ T5791] Bluetooth: hci0: command tx timeout
[  489.311620][T15429] chnl_net:caif_netlink_parms(): no params data found
[  489.326846][T15485] loop4: detected capacity change from 0 to 4096
[  489.434662][T15485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  489.484851][   T12] hsr_slave_0: left promiscuous mode
[  489.496652][   T12] hsr_slave_1: left promiscuous mode
[  489.505273][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  489.513860][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  489.522692][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.542712][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.562262][   T12] bridge_slave_1: left allmulticast mode
[  489.568855][   T12] bridge_slave_1: left promiscuous mode
[  489.578650][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.599974][   T12] bridge_slave_0: left allmulticast mode
[  489.605697][   T12] bridge_slave_0: left promiscuous mode
[  489.643717][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.753047][   T12] veth1_macvtap: left promiscuous mode
[  489.776354][   T12] veth0_macvtap: left promiscuous mode
[  489.782100][   T12] veth1_vlan: left promiscuous mode
[  489.806828][   T12] veth0_vlan: left promiscuous mode
[  490.344905][ T6251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.505459][T15501] format_corename failed
[  490.513341][T15501] Aborting core
[  490.924456][   T27] kauditd_printk_skb: 9 callbacks suppressed
[  490.924471][   T27] audit: type=1326 audit(1792030726.571:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.7.3508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  490.954680][T15507] loop4: detected capacity change from 0 to 512
[  490.970947][   T27] audit: type=1326 audit(1792030726.611:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.7.3508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  491.034162][   T27] audit: type=1326 audit(1792030726.621:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.7.3508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  491.082506][T15507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  491.105473][T15507] ext4 filesystem being mounted at /866/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  491.123957][   T27] audit: type=1326 audit(1792030726.621:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.7.3508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  491.148675][   T27] audit: type=1326 audit(1792030726.621:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.7.3508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  491.173803][   T27] audit: type=1326 audit(1792030726.621:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.7.3508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  491.198306][   T27] audit: type=1326 audit(1792030726.621:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.7.3508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  491.232615][   T27] audit: type=1326 audit(1792030726.651:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.7.3508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4863d9e559 code=0x7ffc0000
[  491.273496][   T27] audit: type=1326 audit(1792030726.651:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.7.3508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4863d5ed8e code=0x7ffc0000
[  491.299720][   T27] audit: type=1326 audit(1792030726.651:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.7.3508" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4863d9f857 code=0x7ffc0000
[  491.375893][ T5791] Bluetooth: hci0: command tx timeout
[  491.434432][T15507] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #12: comm syz.4.3507: invalid size
[  491.607636][ T6251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.026476][   T12] team0 (unregistering): Port device team_slave_1 removed
[  492.146873][   T12] team0 (unregistering): Port device team_slave_0 removed
[  492.240079][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  492.331271][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  493.018317][   T12] bond0 (unregistering): Released all slaves
[  493.287459][T15429] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.320564][T15429] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.335224][T15532] loop7: detected capacity change from 0 to 512
[  493.352707][T15429] bridge_slave_0: entered allmulticast mode
[  493.366860][T15429] bridge_slave_0: entered promiscuous mode
[  493.381840][T15429] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.420171][T15532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  493.446628][T15429] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.448923][ T5791] Bluetooth: hci0: command tx timeout
[  493.471518][T15429] bridge_slave_1: entered allmulticast mode
[  493.496255][T15532] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  493.508849][T15429] bridge_slave_1: entered promiscuous mode
[  493.672248][T15429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  493.718674][T15429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  493.767589][T13357] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz-executor: Failed to acquire dquot type 1
[  493.811838][T15540] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  493.821132][T15540] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  493.829931][T13357] EXT4-fs (loop7): Remounting filesystem read-only
[  493.836579][T15540] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  493.836665][T15540] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  493.943822][T15429] team0: Port device team_slave_0 added
[  493.976888][T15429] team0: Port device team_slave_1 added
[  494.080157][T15429] batman_adv: batadv0: Adding interface: batadv_slave_0
[  494.104813][   T12] IPVS: stop unused estimator thread 0...
[  494.116356][T15429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.159089][T15429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  494.331472][T15429] batman_adv: batadv0: Adding interface: batadv_slave_1
[  494.349299][T15429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.404757][T15429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  494.425687][T14299] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.694256][ T1129] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.811687][T15429] hsr_slave_0: entered promiscuous mode
[  494.848848][T15429] hsr_slave_1: entered promiscuous mode
[  494.872751][T15429] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  494.892330][T15429] Cannot create hsr debugfs directory
[  494.944054][ T1129] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.084302][ T1129] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.308494][ T1129] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.437907][T15568] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3527'.
[  495.460808][T15568] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3527'.
[  495.491732][T15568] netlink: 'syz.5.3527': attribute type 6 has an invalid length.
[  495.526287][T15568] netlink: 'syz.5.3527': attribute type 5 has an invalid length.
[  495.534479][ T5791] Bluetooth: hci0: command tx timeout
[  495.546290][T15568] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3527'.
[  495.888021][T15577] loop4: detected capacity change from 0 to 512
[  496.006745][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  496.030262][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  496.046504][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  496.066959][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  496.078032][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  496.089250][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  496.368287][T15429] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  496.430865][T15429] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  496.500045][T15429] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  496.515199][T15429] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  496.560882][T15579] rxe_eth0 speed is unknown, defaulting to 1000
[  496.848917][T15603] loop5: detected capacity change from 0 to 256
[  496.919612][T15603] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  497.153703][T15606] FAT-fs (loop5): error, invalid FAT chain (i_pos 196, last_block 8200)
[  497.164138][T15606] FAT-fs (loop5): Filesystem has been set read-only
[  497.491509][T15612] loop4: detected capacity change from 0 to 16
[  497.512906][T15612] erofs: (device loop4): mounted with root inode @ nid 36.
[  497.753593][T15429] 8021q: adding VLAN 0 to HW filter on device bond0
[  498.087180][T15429] 8021q: adding VLAN 0 to HW filter on device team0
[  498.166455][ T5791] Bluetooth: hci2: command tx timeout
[  498.324510][T15639] loop5: detected capacity change from 0 to 256
[  498.344420][T15579] chnl_net:caif_netlink_parms(): no params data found
[  498.414629][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.421915][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  498.639466][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.646813][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  499.078705][T15660] loop5: detected capacity change from 0 to 512
[  499.196710][T15660] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.3552: inode has both inline data and extents flags
[  499.249627][ T1129] hsr_slave_0: left promiscuous mode
[  499.257056][T15660] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.3552: couldn't read orphan inode 15 (err -117)
[  499.274809][ T1129] hsr_slave_1: left promiscuous mode
[  499.281902][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  499.285246][T15660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  499.305753][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0
[  499.315113][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  499.324241][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1
[  499.333626][ T1129] bridge_slave_1: left allmulticast mode
[  499.339903][ T1129] bridge_slave_1: left promiscuous mode
[  499.345708][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.390392][ T1129] bridge_slave_0: left allmulticast mode
[  499.396379][ T1129] bridge_slave_0: left promiscuous mode
[  499.411707][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.467045][T15660] EXT4-fs warning (device loop5): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed
[  499.531001][ T1129] veth1_macvtap: left promiscuous mode
[  499.542597][ T1129] veth0_macvtap: left promiscuous mode
[  499.551042][ T1129] veth1_vlan: left promiscuous mode
[  499.551714][ T8495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.566314][ T1129] veth0_vlan: left promiscuous mode
[  499.963270][T15672] ieee802154 phy0 wpan0: encryption failed: -22
[  500.246099][ T5085] Bluetooth: hci2: command tx timeout
[  500.417987][T15676] loop4: detected capacity change from 0 to 256
[  500.427974][T15676] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  500.619608][T15677] FAT-fs (loop4): error, invalid FAT chain (i_pos 196, last_block 8200)
[  500.639357][T15677] FAT-fs (loop4): Filesystem has been set read-only
[  501.032979][T15681] loop4: detected capacity change from 0 to 512
[  501.122066][T15681] EXT4-fs (loop4): 1 truncate cleaned up
[  501.138023][T15681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  501.174931][T15681] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3560: invalid indirect mapped block 234881024 (level 0)
[  501.249697][T15681] EXT4-fs (loop4): Remounting filesystem read-only
[  501.294945][ T1129] team0 (unregistering): Port device team_slave_1 removed
[  501.301079][ T6251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.465372][ T1129] team0 (unregistering): Port device team_slave_0 removed
[  501.579425][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  501.632591][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  501.642648][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  501.645165][T15689] loop4: detected capacity change from 0 to 1024
[  501.684447][ T2322] pvrusb2: request_firmware fatal error with code=-110
[  501.739132][ T2322] pvrusb2: Failure uploading firmware1
[  501.749017][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  501.765982][ T2322] pvrusb2: Device initialization was not successful.
[  501.772722][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  501.806711][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  501.825251][ T5762] pvrusb2: Device being rendered inoperable
[  502.330210][ T5085] Bluetooth: hci2: command tx timeout
[  502.610041][ T1129] bond0 (unregistering): Released all slaves
[  502.722393][T15579] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.732756][T15579] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.746638][T15579] bridge_slave_0: entered allmulticast mode
[  502.754166][T15579] bridge_slave_0: entered promiscuous mode
[  502.781454][T15579] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.788904][T15579] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.796818][T15579] bridge_slave_1: entered allmulticast mode
[  502.804625][T15579] bridge_slave_1: entered promiscuous mode
[  502.903449][T15579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  502.953578][T15579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  503.083493][T15579] team0: Port device team_slave_0 added
[  503.126699][T15579] team0: Port device team_slave_1 added
[  503.197824][T15697] loop5: detected capacity change from 0 to 1024
[  503.271600][T15579] batman_adv: batadv0: Adding interface: batadv_slave_0
[  503.286254][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  503.321784][T15697] hfsplus: invalid btree flag
[  503.346444][T15697] hfsplus: failed to load catalog file
[  503.387091][T15579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.442454][T15579] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.481867][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  503.566133][T15579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.695630][ T1129] IPVS: stop unused estimator thread 0...
[  503.722180][T15579] hsr_slave_0: entered promiscuous mode
[  503.766720][T15579] hsr_slave_1: entered promiscuous mode
[  503.773754][T15579] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  503.782144][T15579] Cannot create hsr debugfs directory
[  503.892571][T15714] loop4: detected capacity change from 0 to 128
[  503.969783][T15429] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.413751][ T5085] Bluetooth: hci2: command tx timeout
[  504.865059][T15579] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  504.912537][T15579] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  504.956366][T15579] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  504.983864][T15579] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  505.204339][T15429] veth0_vlan: entered promiscuous mode
[  505.297995][T15429] veth1_vlan: entered promiscuous mode
[  505.403215][T15429] veth0_macvtap: entered promiscuous mode
[  505.452504][T15429] veth1_macvtap: entered promiscuous mode
[  505.529730][T15429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.583666][T15429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.606635][T15429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.636431][T15429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.663388][T15429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  505.681170][T15429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.701009][T15429] batman_adv: batadv0: Interface activated: batadv_slave_0
[  505.738856][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3584'.
[  505.745184][T15429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.786570][T15429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.806112][T15429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.817188][T15429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.828284][T15429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  505.839275][T15429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.852328][T15429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  505.865621][T15429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  505.884456][T15429] batman_adv: batadv0: Interface activated: batadv_slave_1
[  505.901574][T15579] 8021q: adding VLAN 0 to HW filter on device bond0
[  505.924011][T15429] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  505.934365][T15429] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  505.944125][T15429] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  505.954549][T15429] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  506.013545][T15579] 8021q: adding VLAN 0 to HW filter on device team0
[  506.069798][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.077042][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  506.125651][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.132912][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  506.426826][T15579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  506.497061][ T5085] Bluetooth: hci2: command tx timeout
[  506.576211][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.584126][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.683355][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.705531][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.216758][T15579] 8021q: adding VLAN 0 to HW filter on device batadv0
[  508.202985][T15579] veth0_vlan: entered promiscuous mode
[  508.244988][T15579] veth1_vlan: entered promiscuous mode
[  508.361622][T15579] veth0_macvtap: entered promiscuous mode
[  508.389987][T15579] veth1_macvtap: entered promiscuous mode
[  508.439215][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  508.464054][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.486892][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  508.521793][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.543084][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  508.564400][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.586624][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  508.606280][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.656810][T15843] loop8: detected capacity change from 0 to 4096
[  508.665774][T15579] batman_adv: batadv0: Interface activated: batadv_slave_0
[  508.707947][T15843] ntfs3: loop8: Different NTFS sector size (4096) and media sector size (512).
[  508.728870][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  508.758216][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.789021][T15843] ntfs3: loop8: ino=19, mi_enum_attr
[  508.794606][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  508.806165][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.817393][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  508.843596][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.868992][T15843] ntfs3: loop8: failed to convert "c46c" to cp850
[  508.882073][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  508.894793][T15843] ntfs3: loop8: ino=20, mi_enum_attr
[  508.911084][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.942933][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  508.989082][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  509.011944][T15579] batman_adv: batadv0: Interface activated: batadv_slave_1
[  509.118606][T15579] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  509.160689][T15579] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  509.203457][T15579] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  509.232946][T15579] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  509.538648][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.581033][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.667700][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.675727][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.985719][T15871] loop5: detected capacity change from 0 to 2048
[  510.021009][T15871] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  510.058350][T15871] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  510.367205][ T5837] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  510.593106][ T5837] usb 5-1: config 0 has no interfaces?
[  510.606338][ T5837] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  510.634512][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.672414][ T5837] usb 5-1: config 0 descriptor??
[  510.935696][ T5837] usb 5-1: USB disconnect, device number 15
[  511.153562][T15907] loop5: detected capacity change from 0 to 512
[  511.253757][T15907] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3623: invalid indirect mapped block 10 (level 1)
[  511.321640][T15907] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3623: invalid indirect mapped block 8 (level 1)
[  511.373298][T15907] EXT4-fs (loop5): 1 truncate cleaned up
[  511.392301][T15907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  511.518045][T15907] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters
[  511.705788][ T8495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.280685][T15936] loop4: detected capacity change from 0 to 256
[  512.646767][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  512.720292][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3635'.
[  512.866199][    T9] usb 5-1: Using ep0 maxpacket: 16
[  512.879632][T15954] loop5: detected capacity change from 0 to 128
[  512.899733][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  512.918107][T15954] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  512.926267][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  512.977251][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  513.026445][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  513.050553][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  513.118665][    T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  513.149548][    T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  513.177566][    T9] usb 5-1: Manufacturer: syz
[  513.195112][    T9] usb 5-1: config 0 descriptor??
[  513.319583][ T3479] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  513.596435][    T9] rc_core: IR keymap rc-hauppauge not found
[  513.604620][    T9] Registered IR keymap rc-empty
[  513.640315][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  513.698869][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  513.757815][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  514.090739][T15984] loop5: detected capacity change from 0 to 32768
[  514.116426][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input37
[  514.149024][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  514.171771][T15984] JBD2: Ignoring recovery information on journal
[  514.227148][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  514.296091][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  514.305635][T15984] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  514.365350][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  514.442850][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  514.495730][T15984] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (3298534883402, expected 74)
[  514.518150][T15984] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  514.528225][T15984] OCFS2: File system is now read-only.
[  514.533772][T15984] (syz.5.3645,15984,0):ocfs2_search_chain:1783 ERROR: status = -30
[  514.541925][T15984] (syz.5.3645,15984,0):ocfs2_search_chain:1893 ERROR: status = -30
[  514.551027][T15984] (syz.5.3645,15984,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  514.559740][T15984] (syz.5.3645,15984,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  514.568736][T15984] (syz.5.3645,15984,0):ocfs2_claim_new_inode:2248 ERROR: status = -30
[  514.577053][T15984] (syz.5.3645,15984,0):ocfs2_claim_new_inode:2263 ERROR: status = -30
[  514.585286][T15984] (syz.5.3645,15984,0):ocfs2_mknod_locked:641 ERROR: status = -30
[  514.593294][T15984] (syz.5.3645,15984,0):ocfs2_symlink:1946 ERROR: status = -30
[  514.602006][T15990] loop8: detected capacity change from 0 to 8192
[  514.602294][T15984] (syz.5.3645,15984,0):ocfs2_symlink:2070 ERROR: status = -30
[  514.626129][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  514.656568][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  514.688283][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  514.720495][T15990] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  514.735200][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  514.773075][T15990] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal
[  514.797867][    T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  514.841627][T15990] REISERFS (device loop8): using ordered data mode
[  514.862351][    T9] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  514.869881][T15990] reiserfs: using flush barriers
[  514.877684][ T8495] ocfs2: Unmounting device (7,5) on (node local)
[  514.892891][T15990] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  514.909432][    T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  514.996983][    T9] usb 5-1: USB disconnect, device number 16
[  515.013860][T15990] REISERFS (device loop8): checking transaction log (loop8)
[  515.378295][T15990] REISERFS (device loop8): Using tea hash to sort names
[  515.417490][T15990] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage.
[  516.181371][T16035] loop8: detected capacity change from 0 to 1024
[  516.303222][T16035] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  516.383978][T16043] loop4: detected capacity change from 0 to 512
[  516.457960][T16043] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  516.598245][T16043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.645235][T16043] ext4 filesystem being mounted at /921/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  516.759065][ T6251] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.190378][T16066] <
[  517.424349][T16072] loop4: detected capacity change from 0 to 2048
[  517.484101][T16076] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  518.090058][T16090] loop8: detected capacity change from 0 to 256
[  518.406224][ T5838] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  518.622916][ T5838] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.656073][ T5838] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  518.695385][ T5838] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  518.722527][ T5838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.754883][ T5838] usb 10-1: config 0 descriptor??
[  519.211957][ T5838] hid-led 0003:1D34:000A.001A: unknown main item tag 0x0
[  519.242567][ T5838] hid-led 0003:1D34:000A.001A: unknown main item tag 0x0
[  519.261946][ T5838] hid-led 0003:1D34:000A.001A: unknown main item tag 0x0
[  519.265281][T16085] loop4: detected capacity change from 0 to 40427
[  519.329757][T16085] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288)
[  519.373022][T16085] F2FS-fs (loop4): invalid crc value
[  519.403162][ T5838] hid-led 0003:1D34:000A.001A: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.9-1/input0
[  519.440090][T16085] F2FS-fs (loop4): Found nat_bits in checkpoint
[  519.500964][ T5838] hid-led 0003:1D34:000A.001A: Dream Cheeky Webmail Notifier initialized
[  519.626467][ T5837] usb 10-1: USB disconnect, device number 2
[  519.718849][T16085] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  519.755031][T16119] fido_id[16119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  519.931267][T16085] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0
[  520.004496][T16130] f2fs_ckpt-7:4: attempt to access beyond end of device
[  520.004496][T16130] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  520.026597][T16130] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  520.277481][T16135] loop8: detected capacity change from 0 to 128
[  520.319945][T16135] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  520.497063][T16138] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  520.563393][T16117] loop5: detected capacity change from 0 to 32768
[  520.609676][T16135] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  520.731876][T16143] Bluetooth: hci3: Frame reassembly failed (-84)
[  520.745279][   T49] Bluetooth: hci3: Frame reassembly failed (-84)
[  520.819757][T16117] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  520.973555][T16117] XFS (loop5): Ending clean mount
[  521.012475][T16117] XFS (loop5): Quotacheck needed: Please wait.
[  521.164750][T16117] XFS (loop5): Quotacheck: Done.
[  521.531387][T16166] zero sized request
[  522.020583][T16186] input: syz0 as /devices/virtual/input/input38
[  522.334495][ T8495] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  522.609919][    C1] vkms_vblank_simulate: vblank timer overrun
[  522.807354][ T5085] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  522.972039][   T27] kauditd_printk_skb: 14 callbacks suppressed
[  522.972053][   T27] audit: type=1326 audit(1792030758.621:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16193 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe884f9e559 code=0x7ffc0000
[  523.090797][   T27] audit: type=1326 audit(1792030758.651:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16193 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe884f9e559 code=0x7ffc0000
[  523.181800][   T27] audit: type=1326 audit(1792030758.651:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16193 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe884f9e559 code=0x7ffc0000
[  523.286199][   T27] audit: type=1326 audit(1792030758.661:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16193 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe884f9e559 code=0x7ffc0000
[  523.355699][   T27] audit: type=1326 audit(1792030758.661:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16193 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe884f9e559 code=0x7ffc0000
[  523.432211][   T27] audit: type=1326 audit(1792030758.661:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16193 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe884f9e559 code=0x7ffc0000
[  523.517974][   T27] audit: type=1326 audit(1792030758.661:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16193 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe884f3f8d9 code=0x7ffc0000
[  523.580160][   T27] audit: type=1326 audit(1792030758.661:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16193 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe884f9e559 code=0x7ffc0000
[  523.637533][   T27] audit: type=1326 audit(1792030758.661:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16193 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe884f9e559 code=0x7ffc0000
[  523.661756][    C1] vkms_vblank_simulate: vblank timer overrun
[  523.673945][   T27] audit: type=1326 audit(1792030758.661:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16193 comm="syz.5.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe884f9e559 code=0x7ffc0000
[  523.698106][    C1] vkms_vblank_simulate: vblank timer overrun
[  523.932712][T16213] vivid-000: disconnect
[  523.958647][T16213] vivid-000: reconnect
[  524.216265][ T5838] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  524.254281][T16226] loop5: detected capacity change from 0 to 1024
[  524.306216][T16226] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  524.436048][ T5838] usb 9-1: Using ep0 maxpacket: 32
[  524.459792][ T5838] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  524.498489][ T5838] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  524.517653][ T5838] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  524.536569][ T5838] usb 9-1: Product: syz
[  524.541164][ T5838] usb 9-1: Manufacturer: syz
[  524.545806][ T5838] usb 9-1: SerialNumber: syz
[  524.607316][ T5838] usb 9-1: config 0 descriptor??
[  524.635763][T16215] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  524.655156][ T5838] hub 9-1:0.0: bad descriptor, ignoring hub
[  524.680802][ T5838] hub: probe of 9-1:0.0 failed with error -5
[  525.459473][ T5837] usb 9-1: USB disconnect, device number 2
[  525.769670][T16271] sctp: [Deprecated]: syz.5.3722 (pid 16271) Use of struct sctp_assoc_value in delayed_ack socket option.
[  525.769670][T16271] Use struct sctp_sack_info instead
[  526.452565][T16297] tap0: tun_chr_ioctl cmd 1074025677
[  526.474911][T16298] loop4: detected capacity change from 0 to 2048
[  526.496333][T16297] tap0: linktype set to 6
[  526.573137][T16298] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  526.793668][ T6251] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh
[  526.836815][ T6251] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh
[  527.210030][T16314] loop9: detected capacity change from 0 to 128
[  527.796293][T16291] loop5: detected capacity change from 0 to 40427
[  527.811659][T16291] F2FS-fs (loop5): Invalid log blocks per segment (1)
[  527.831969][ T3479] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.843546][T16291] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  527.906326][T16291] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7
[  527.915208][T16291] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff
[  527.968394][T16291] F2FS-fs (loop5): Image doesn't support compression
[  527.986798][T16291] F2FS-fs (loop5): invalid crc value
[  528.014638][T16291] F2FS-fs (loop5): Found nat_bits in checkpoint
[  528.164144][T16291] F2FS-fs (loop5): Start checkpoint disabled!
[  528.236257][T16322] phram: illegal start address
[  528.242746][ T3479] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.294615][T16291] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  528.316070][T16291] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  528.459681][T16327] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  528.512551][T16327] CPU: 1 PID: 16327 Comm: syz.8.3743 Not tainted syzkaller #0
[  528.520112][T16327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  528.530246][T16327] Call Trace:
[  528.533579][T16327]  <TASK>
[  528.536559][T16327]  dump_stack_lvl+0x18c/0x250
[  528.541306][T16327]  ? show_regs_print_info+0x20/0x20
[  528.546573][T16327]  ? load_image+0x420/0x420
[  528.551154][T16327]  sysfs_create_dir_ns+0x26e/0x2a0
[  528.556588][T16327]  ? __lock_acquire+0x7eb0/0x7eb0
[  528.561675][T16327]  ? sysfs_warn_dup+0xa0/0xa0
[  528.566424][T16327]  ? rcu_is_watching+0x15/0xb0
[  528.571262][T16327]  ? do_raw_spin_unlock+0x121/0x230
[  528.576537][T16327]  kobject_add_internal+0x617/0xc90
[  528.581814][T16327]  kobject_add+0x164/0x240
[  528.586306][T16327]  ? kobject_init+0x1d0/0x1d0
[  528.591087][T16327]  ? get_device_parent+0x366/0x390
[  528.596290][T16327]  device_add+0x3fa/0xc40
[  528.600725][T16327]  tty_register_device_attr+0x428/0x990
[  528.606369][T16327]  ? tty_register_device+0x30/0x30
[  528.611570][T16327]  ? tty_port_init+0x132/0x1a0
[  528.616399][T16327]  ? gsm_dlci_alloc+0x32a/0x630
[  528.621337][T16327]  ? __might_fault+0xaa/0x120
[  528.626106][T16327]  gsm_activate_mux+0x110/0x2a0
[  528.631035][T16327]  gsmld_ioctl+0x12ca/0x1900
[  528.635757][T16327]  ? gsmld_write+0x120/0x120
[  528.640432][T16327]  ? __init_ldsem+0x150/0x150
[  528.645175][T16327]  ? __fget_files+0x28/0x460
[  528.649843][T16327]  ? gsmld_write+0x120/0x120
[  528.654507][T16327]  tty_ioctl+0x9b5/0xdc0
[  528.658819][T16327]  ? tty_get_icount+0xb0/0xb0
[  528.663558][T16327]  __se_sys_ioctl+0xfd/0x170
[  528.668205][T16327]  do_syscall_64+0x55/0xb0
[  528.672659][T16327]  ? clear_bhb_loop+0x40/0x90
[  528.677375][T16327]  ? clear_bhb_loop+0x40/0x90
[  528.682094][T16327]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  528.688041][T16327] RIP: 0033:0x7f92c019e559
[  528.692489][T16327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  528.712138][T16327] RSP: 002b:00007f92c108d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  528.720605][T16327] RAX: ffffffffffffffda RBX: 00007f92c0426090 RCX: 00007f92c019e559
[  528.728616][T16327] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003
[  528.736629][T16327] RBP: 00007f92c02358b0 R08: 0000000000000000 R09: 0000000000000000
[  528.744642][T16327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  528.752649][T16327] R13: 00007f92c0426128 R14: 00007f92c0426090 R15: 00007fff29382e88
[  528.760679][T16327]  </TASK>
[  528.811322][ T3479] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.825761][T16327] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  528.855286][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3744'.
[  528.876611][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3744'.
[  528.901079][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3744'.
[  528.974483][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3744'.
[  529.019233][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3744'.
[  529.076490][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3744'.
[  529.085844][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3744'.
[  529.163945][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3744'.
[  529.183272][   T42] kworker/u4:2: attempt to access beyond end of device
[  529.183272][   T42] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  529.218543][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3744'.
[  529.236425][   T42] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  529.243389][   T42] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  529.276252][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3744'.
[  529.302234][T16331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  529.345011][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  529.371117][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  529.404856][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  529.417906][ T3479] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.436959][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  529.451283][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  529.459502][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  529.783491][T16337] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  529.785062][T16332] rxe_eth0 speed is unknown, defaulting to 1000
[  529.851727][   T12] rtrs_client L2024: <s+>: CM error (CM event: address error, err: -19)
[  529.897743][T16337] rtrs_client L2626: <s+>: init_conns() failed: err=-113 path=<invalid address family>@ip:27.0.0.1 [:0]
[  530.355608][T16342] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  530.813117][T16352] loop9: detected capacity change from 0 to 1024
[  530.842063][T16352] EXT4-fs: Ignoring removed oldalloc option
[  530.857376][T16352] EXT4-fs: Ignoring removed orlov option
[  530.940699][T16352] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  530.963760][T16355] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47
[  530.968188][T16352] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  531.014332][T16360] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  531.117536][T16352] EXT4-fs error (device loop9): ext4_free_blocks:6694: comm syz.9.3749: Freeing blocks not in datazone - block = 0, count = 16
[  531.312293][ T1129] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  531.349708][ T1129] EXT4-fs (loop9): This should not happen!! Data will be lost
[  531.349708][ T1129] 
[  531.371966][ T1129] EXT4-fs (loop9): Total free blocks count 0
[  531.387580][ T1129] EXT4-fs (loop9): Free/Dirty block details
[  531.393696][ T1129] EXT4-fs (loop9): free_blocks=16
[  531.403846][ T1129] EXT4-fs (loop9): dirty_blocks=16
[  531.413983][ T1129] EXT4-fs (loop9): Block reservation details
[  531.422003][ T1129] EXT4-fs (loop9): i_reserved_data_blocks=1
[  531.432230][T15579] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  531.606451][ T5085] Bluetooth: hci1: command tx timeout
[  532.034404][T16387] vcan0: tx address claim with dlc 0
[  532.265722][T16332] chnl_net:caif_netlink_parms(): no params data found
[  532.528350][T16401] loop8: detected capacity change from 0 to 512
[  532.565240][T16403] loop5: detected capacity change from 0 to 512
[  532.573436][T16403] EXT4-fs: Ignoring removed nomblk_io_submit option
[  532.592161][T16403] EXT4-fs: Ignoring removed mblk_io_submit option
[  532.674370][T16403] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  532.684191][ T3479] dvmrp12 (unregistering): left allmulticast mode
[  532.716261][T16403] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  532.742020][T16403] EXT4-fs (loop5): 1 truncate cleaned up
[  532.750603][T16403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  532.786009][T16401] EXT4-fs error (device loop8): ext4_orphan_get:1408: inode #15: comm syz.8.3763: iget: bad i_size value: 38620345925642
[  532.800326][T16403] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #2: block 4: comm syz.5.3762: lblock 0 mapped to illegal pblock 4 (length 1)
[  532.838362][T16403] EXT4-fs (loop5): Remounting filesystem read-only
[  532.854724][T16401] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.3763: couldn't read orphan inode 15 (err -117)
[  532.882126][T16412] loop9: detected capacity change from 0 to 512
[  532.909963][T16401] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  532.970306][T16401] EXT4-fs error (device loop8): ext4_validate_block_bitmap:430: comm syz.8.3763: bg 0: block 5: invalid block bitmap
[  532.995467][ T8495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.026446][T16401] EXT4-fs error (device loop8) in ext4_setattr:5695: error 28
[  533.069070][T16412] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002]
[  533.149821][T16412] System zones: 0-2, 18-18, 34-34
[  533.236373][T16412] EXT4-fs (loop9): 1 orphan inode deleted
[  533.267889][T16412] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.312634][T15429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.326997][T16412] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  533.376919][T16332] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.384186][T16332] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.433598][T16332] bridge_slave_0: entered allmulticast mode
[  533.461464][T16332] bridge_slave_0: entered promiscuous mode
[  533.479733][T16332] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.497529][T16332] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.504904][T16332] bridge_slave_1: entered allmulticast mode
[  533.556348][T16332] bridge_slave_1: entered promiscuous mode
[  533.686964][ T5085] Bluetooth: hci1: command tx timeout
[  533.739648][T15579] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.767674][T16332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  533.780827][T16332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  533.969344][T16332] team0: Port device team_slave_0 added
[  534.038590][T16332] team0: Port device team_slave_1 added
[  534.304408][T16446] loop9: detected capacity change from 0 to 8
[  534.381786][T16446] SQUASHFS error: Unknown LZ4 version
[  534.416010][T16446] squashfs image failed sanity check
[  534.426767][T16332] batman_adv: batadv0: Adding interface: batadv_slave_0
[  534.453397][T16332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  534.511064][T16332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  534.533907][T16453] loop5: detected capacity change from 0 to 64
[  534.645093][ T3479] hsr_slave_0: left promiscuous mode
[  534.674050][ T3479] hsr_slave_1: left promiscuous mode
[  534.726597][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  534.734144][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_0
[  534.808009][ T3479] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  534.815555][ T3479] batman_adv: batadv0: Removing interface: batadv_slave_1
[  534.845580][ T3479] batman_adv: batadv0: Interface deactivated: ipvlan2
[  534.854079][ T3479] batman_adv: batadv0: Removing interface: ipvlan2
[  534.885310][ T3479] bridge_slave_1: left allmulticast mode
[  534.925514][ T3479] bridge_slave_1: left promiscuous mode
[  534.955384][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.029857][ T3479] bridge_slave_0: left allmulticast mode
[  535.035695][ T3479] bridge_slave_0: left promiscuous mode
[  535.058845][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.244334][ T3479] veth1_macvtap: left promiscuous mode
[  535.250147][ T3479] veth0_macvtap: left promiscuous mode
[  535.766536][ T5085] Bluetooth: hci1: command tx timeout
[  536.703684][ T3479] team0 (unregistering): Port device team_slave_1 removed
[  536.796164][ T3479] team0 (unregistering): Port device team_slave_0 removed
[  536.870306][    C1] vkms_vblank_simulate: vblank timer overrun
[  536.898119][ T3479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  536.999540][ T3479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  537.690983][ T3479] smc: removing net device team0 with user defined pnetid SYZ2
[  537.759634][ T3479] bond0 (unregistering): Released all slaves
[  537.861763][ T5085] Bluetooth: hci1: command tx timeout
[  537.912528][T16332] batman_adv: batadv0: Adding interface: batadv_slave_1
[  537.920999][T16332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  537.948571][T16332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  538.169500][T16332] hsr_slave_0: entered promiscuous mode
[  538.235174][T16332] hsr_slave_1: entered promiscuous mode
[  538.245626][T16332] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  538.286148][T16332] Cannot create hsr debugfs directory
[  539.351860][ T3479] IPVS: stop unused estimator thread 0...
[  539.920326][T16525] loop5: detected capacity change from 0 to 32768
[  539.950062][T16525] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  540.000127][T16525] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  540.034651][T16525] BTRFS info (device loop5): using free space tree
[  540.214395][T16525] BTRFS info (device loop5): enabling ssd optimizations
[  540.251721][T16525] BTRFS info (device loop5): auto enabling async discard
[  540.783515][ T8495] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  540.816046][T16574] i2c i2c-0: delete_device: Can't parse I2C address
[  541.293964][T16332] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  541.379571][T16332] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  541.441854][T16332] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  541.462920][T16332] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  541.550232][T16580] loop8: detected capacity change from 0 to 8192
[  541.859484][T16332] 8021q: adding VLAN 0 to HW filter on device bond0
[  541.973456][T16332] 8021q: adding VLAN 0 to HW filter on device team0
[  542.048660][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.055882][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  542.118705][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.126010][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  542.153539][T16597] program syz.5.3807 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  542.196292][ T5837] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  542.416106][ T5837] usb 9-1: Using ep0 maxpacket: 8
[  542.437597][ T5837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  542.479748][ T5837] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  542.511278][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.555867][ T5837] usb 9-1: config 0 descriptor??
[  542.826500][ T5837] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  543.062082][T16332] 8021q: adding VLAN 0 to HW filter on device batadv0
[  543.088433][ T5839] usb 9-1: USB disconnect, device number 3
[  543.205463][T16332] veth0_vlan: entered promiscuous mode
[  543.242471][T16332] veth1_vlan: entered promiscuous mode
[  543.303174][T16332] veth0_macvtap: entered promiscuous mode
[  543.343956][T16332] veth1_macvtap: entered promiscuous mode
[  543.405142][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.416774][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.428308][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.456104][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.477783][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.504374][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.526940][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.544862][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.567816][T16332] batman_adv: batadv0: Interface activated: batadv_slave_0
[  543.629442][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.671824][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.702361][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.738355][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.749739][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.761476][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.772358][T16332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.784277][T16332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.810568][T16332] batman_adv: batadv0: Interface activated: batadv_slave_1
[  543.865164][T16332] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  543.885361][T16332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  543.908105][T16332] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  543.921929][T16332] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  544.306109][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.314102][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.337859][T16648] loop9: detected capacity change from 0 to 256
[  544.393212][T16648] ip_tables: iptables: counters copy to user failed while replacing table
[  544.480461][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.548646][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.917162][T16669] __nla_validate_parse: 9 callbacks suppressed
[  544.917179][T16669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3825'.
[  545.386207][T16687] input: syz0 as /devices/virtual/input/input39
[  545.406487][ T5085] Bluetooth: hci4: unexpected event 0x04 length: 4 < 10
[  545.826088][T12858] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  545.834542][T16671] loop9: detected capacity change from 0 to 32768
[  545.884511][T16671] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  545.968114][T16671] XFS (loop9): Ending clean mount
[  546.070630][T12858] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  546.093633][T16713] loop8: detected capacity change from 0 to 128
[  546.112050][T16713] ext2: Unknown parameter 'fsuuid'
[  546.116544][T12858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.167004][T12858] usb 2-1: Product: syz
[  546.171270][T12858] usb 2-1: Manufacturer: syz
[  546.175999][T16594] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  546.192152][T12858] usb 2-1: SerialNumber: syz
[  546.214731][T12858] usb 2-1: config 0 descriptor??
[  546.237950][T16715] bonding: no command found in bonding_masters - use +ifname or -ifname
[  546.264651][T12858] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  546.330275][T15579] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  547.002343][T16731] loop8: detected capacity change from 0 to 1024
[  547.073908][T12858] gspca_stk1135: reg_w 0x5 err -71
[  547.092029][T12858] gspca_stk1135: serial bus timeout: status=0x00
[  547.105800][T12858] gspca_stk1135: Sensor write failed
[  547.124199][T12858] gspca_stk1135: serial bus timeout: status=0x00
[  547.148651][T12858] gspca_stk1135: Sensor write failed
[  547.173506][T12858] gspca_stk1135: serial bus timeout: status=0x00
[  547.193141][T12858] gspca_stk1135: Sensor read failed
[  547.218339][T12858] gspca_stk1135: serial bus timeout: status=0x00
[  547.241337][ T1129] hfsplus: b-tree write err: -5, ino 25
[  547.247953][T12858] gspca_stk1135: Sensor read failed
[  547.253606][ T1129] hfsplus: b-tree write err: -5, ino 4
[  547.259846][T12858] gspca_stk1135: Detected sensor type unknown (0x0)
[  547.269381][ T1129] hfsplus: b-tree write err: -5, ino 2
[  547.275426][T12858] gspca_stk1135: serial bus timeout: status=0x00
[  547.282953][T12858] gspca_stk1135: Sensor read failed
[  547.291044][T12858] gspca_stk1135: serial bus timeout: status=0x00
[  547.309459][T12858] gspca_stk1135: Sensor read failed
[  547.334235][T12858] gspca_stk1135: serial bus timeout: status=0x00
[  547.352810][T12858] gspca_stk1135: Sensor write failed
[  547.379047][T12858] gspca_stk1135: serial bus timeout: status=0x00
[  547.387639][T12858] gspca_stk1135: Sensor write failed
[  547.393145][T12858] stk1135: probe of 2-1:0.0 failed with error -71
[  547.417536][T12858] usb 2-1: USB disconnect, device number 3
[  547.806193][ T5762] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  548.005560][ T5762] usb 9-1: too many configurations: 181, using maximum allowed: 8
[  548.034244][ T5762] usb 9-1: unable to read config index 0 descriptor/start: -71
[  548.055989][ T5762] usb 9-1: can't read configurations, error -71
[  548.495664][T16775] block2mtd: device name too long
[  548.817970][ T5791] Bluetooth: hci1: command tx timeout
[  548.888537][T16784] pimreg: tun_chr_ioctl cmd 2148553947
[  549.400517][T16803] loop8: detected capacity change from 0 to 256
[  549.454270][T16803] exfat: Deprecated parameter 'utf8'
[  549.476083][T16803] exfat: Deprecated parameter 'namecase'
[  549.492270][T16803] exfat: Deprecated parameter 'namecase'
[  549.526455][T16803] exfat: Deprecated parameter 'utf8'
[  549.602109][T16803] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  550.032477][T16798] loop1: detected capacity change from 0 to 32768
[  550.068854][T16798] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.3859 (16798)
[  550.149059][T16798] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  550.191960][T16798] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  550.206463][T16798] BTRFS info (device loop1): turning on flush-on-commit
[  550.213525][T16798] BTRFS info (device loop1): using free space tree
[  550.413996][T16798] BTRFS info (device loop1): enabling ssd optimizations
[  550.421423][T16798] BTRFS info (device loop1): auto enabling async discard
[  550.889560][T16852] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3866'.
[  550.973239][T16332] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  551.140052][T16857] loop9: detected capacity change from 0 to 164
[  551.202914][T16857] isofs: Unable to find the ".." directory for NFS.
[  551.386305][T16529] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 10 /dev/loop1 scanned by udevd (16529)
[  551.650255][T16870] loop5: detected capacity change from 0 to 2048
[  551.721184][T16870]  loop5: p1 p2 p3
[  551.721184][T16870]  p1: <netbsd:bad subpartition - ignored
[  551.721184][T16870]  p5 (ignored 240 more) >
[  551.766113][T16870] loop5: partition table partially beyond EOD, truncated
[  551.784870][T16870] loop5: p1 size 16777216 extends beyond EOD, truncated
[  551.826806][T16870] loop5: p2 size 458752 extends beyond EOD, truncated
[  551.850434][T16870] loop5: p3 start 3036741376 is beyond EOD, truncated
[  552.469013][T16541] udevd[16541]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  552.489099][T16594] udevd[16594]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  553.102489][T16898] loop1: detected capacity change from 0 to 512
[  553.193015][T16898] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  553.270059][T16898] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.3880: bad orphan inode 131083
[  553.317116][T16898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  553.781608][T16883] loop5: detected capacity change from 0 to 40427
[  553.809480][T16907] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3881'.
[  553.834315][T16883] F2FS-fs (loop5): invalid crc value
[  553.850144][T16883] F2FS-fs (loop5): Found nat_bits in checkpoint
[  554.014004][T16883] F2FS-fs (loop5): Start checkpoint disabled!
[  554.107035][T16883] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  554.591971][   T49] kworker/u4:3: attempt to access beyond end of device
[  554.591971][   T49] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  554.646207][   T49] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  554.839147][T16332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  555.113730][T16911] loop9: detected capacity change from 0 to 32768
[  555.318012][T16911] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  555.823717][T15579] ocfs2: Unmounting device (7,9) on (node local)
[  555.929813][T16945] loop8: detected capacity change from 0 to 128
[  556.002316][T16945] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  556.107265][T16945] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  556.216824][T16945] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:406: inode #2: comm syz.8.3890: No space for directory leaf checksum. Please run e2fsck -D.
[  556.258361][ T1190] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  556.296069][T16945] EXT4-fs error (device loop8): __ext4_find_entry:1698: inode #2: comm syz.8.3890: checksumming directory block 0
[  556.457869][T15429] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  556.494776][ T1190] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  556.511910][ T1190] usb 2-1: config 0 has no interface number 0
[  556.567835][ T1190] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  556.608341][ T1190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.635310][ T1190] usb 2-1: Product: syz
[  556.661649][ T1190] usb 2-1: Manufacturer: syz
[  556.676028][ T1190] usb 2-1: SerialNumber: syz
[  556.684814][ T1190] usb 2-1: config 0 descriptor??
[  556.856152][    T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  556.913529][ T1190] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  556.948605][ T1190] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  556.974495][ T1190] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  556.986362][ T1190] usb 2-1: media controller created
[  557.027854][T16950] loop9: detected capacity change from 0 to 32768
[  557.064318][ T1190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  557.079815][    T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  557.084663][T16950] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 10
[  557.118813][    T9] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  557.181252][    T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  557.196086][ T1190] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  557.212284][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  557.269069][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  557.322567][ T1190] usb 2-1: USB disconnect, device number 4
[  557.333436][    T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  557.376047][    T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  557.411931][    T9] usb 9-1: Product: syz
[  557.418924][T16594] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 10
[  557.434075][    T9] usb 9-1: Manufacturer: syz
[  557.472352][    T9] cdc_wdm 9-1:1.0: skipping garbage
[  557.500716][    T9] cdc_wdm 9-1:1.0: skipping garbage
[  557.518263][    T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  557.546547][    T9] cdc_wdm 9-1:1.0: Unknown control protocol
[  558.000301][    T9] usb 9-1: USB disconnect, device number 6
[  558.293668][T16971] loop1: detected capacity change from 0 to 4096
[  558.344540][T16971] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  558.423051][T16971] ntfs3: loop1: ino=3, ntfs_set_state failed, -22.
[  558.441959][T16971] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[  558.594943][T16971] ntfs3: loop1: ino=1c, mi_enum_attr
[  558.679537][T16988] loop5: detected capacity change from 0 to 256
[  558.759345][   T49] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22.
[  558.795106][T16332] ntfs3: loop1: ino=3, ntfs_set_state failed, -22.
[  558.834934][T16332] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  558.866947][T16332] ntfs3: loop1: ino=3, ntfs_set_state failed, -22.
[  558.875222][   T49] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22.
[  558.960752][T16994] loop9: detected capacity change from 0 to 2048
[  559.068581][T16998] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  559.885626][T17026] loop5: detected capacity change from 0 to 1024
[  559.903603][T17026] EXT4-fs: Ignoring removed bh option
[  559.937667][T17026] EXT4-fs: Ignoring removed oldalloc option
[  559.943730][T17026] EXT4-fs: Ignoring removed nobh option
[  560.017854][T17026] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  560.050059][T17026] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block
[  560.050059][T17026] 
[  560.667273][T17011] loop9: detected capacity change from 0 to 32768
[  560.689054][T15976] IPVS: starting estimator thread 0...
[  560.752252][T17011] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  560.786200][T17051] IPVS: using max 16 ests per chain, 38400 per kthread
[  560.926035][T17011] XFS (loop9): Ending clean mount
[  561.017564][T17068] bond0: option slaves: interface -b does not exist!
[  561.170870][T15579] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  561.236879][T17073] netlink: 'syz.5.3930': attribute type 1 has an invalid length.
[  561.244696][T17073] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3930'.
[  562.145620][T17056] loop8: detected capacity change from 0 to 40427
[  562.187990][T17056] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x7ffff
[  562.224799][T17056] F2FS-fs (loop8): invalid crc value
[  562.262085][T17056] F2FS-fs (loop8): Found nat_bits in checkpoint
[  562.459655][T17056] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  562.604392][T17110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3940'.
[  563.054736][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  563.066068][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  563.794865][T17140] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  563.854755][T17119] loop1: detected capacity change from 0 to 32768
[  563.966928][T17119] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  564.080614][T17119] XFS (loop1): Ending clean mount
[  564.329371][T16332] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  564.886857][T17173] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3958'.
[  565.100785][T17143] loop8: detected capacity change from 0 to 32768
[  565.120323][T17143] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.3951 (17143)
[  565.235496][T17183] loop1: detected capacity change from 0 to 164
[  565.269196][T17143] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  565.285868][T17183] rock: directory entry would overflow storage
[  565.310475][T17143] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[  565.335375][T17143] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  565.337011][T17183] rock: sig=0x4543, size=28, remaining=18
[  565.410567][T17143] BTRFS info (device loop8): use zstd compression, level 3
[  565.443521][T17143] BTRFS info (device loop8): using free space tree
[  565.521344][T17181] loop9: detected capacity change from 0 to 8192
[  565.591811][T17181] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  565.713471][T17143] BTRFS info (device loop8): enabling ssd optimizations
[  565.720695][T17143] BTRFS info (device loop8): auto enabling async discard
[  566.656577][T15429] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  566.701304][T17220] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3967'.
[  566.791376][T17220] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  567.746072][ T5863] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  567.938647][ T5863] usb 6-1: Using ep0 maxpacket: 32
[  567.965399][T17258] loop8: detected capacity change from 0 to 512
[  567.971587][ T5863] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  568.004287][ T5863] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  568.048659][ T5863] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  568.066417][ T5863] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  568.086200][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  568.094630][ T5863] usb 6-1: Product: syz
[  568.106092][ T5863] usb 6-1: Manufacturer: syz
[  568.112481][T17258] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  568.116187][ T5863] usb 6-1: SerialNumber: syz
[  568.159809][ T5863] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input40
[  568.196161][T17258] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  568.382315][T17258] EXT4-fs error (device loop8): ext4_xattr_block_find:1881: inode #12: comm syz.8.3979: corrupted xattr block 6: invalid header
[  568.495565][T17258] EXT4-fs (loop8): Remounting filesystem read-only
[  568.536247][T12858] usb 6-1: USB disconnect, device number 18
[  568.643218][T12858] appletouch 6-1:1.0: input: appletouch disconnected
[  568.669441][ T1129] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  568.686360][T15429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.703933][T17279] loop1: detected capacity change from 0 to 256
[  568.712505][ T1129] __quota_error: 5 callbacks suppressed
[  568.712521][ T1129] Quota error (device loop8): write_blk: dquota write failed
[  568.735875][T17279] exfat: Deprecated parameter 'namecase'
[  568.754492][ T1129] Quota error (device loop8): free_dqentry: Can't write quota data block 5
[  568.760483][T17279] exfat: Deprecated parameter 'utf8'
[  568.817190][T17279] exfat: Deprecated parameter 'namecase'
[  568.833562][T17279] exfat: Deprecated parameter 'namecase'
[  568.932701][T17279] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d)
[  569.618393][T17307] loop8: detected capacity change from 0 to 16
[  569.660608][T17307] erofs: (device loop8): mounted with root inode @ nid 36.
[  570.038522][T17314] ip_tables: iptables: counters copy to user failed while replacing table
[  571.401053][T17359] loop8: detected capacity change from 0 to 128
[  571.429062][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4009'.
[  571.510684][T17365] Bluetooth: MGMT ver 1.22
[  572.149073][T17384] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4019'.
[  572.818779][T17411] loop9: detected capacity change from 0 to 512
[  572.846981][T17411] EXT4-fs: Ignoring removed orlov option
[  572.972333][T17411] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  573.012275][T17417] loop1: detected capacity change from 0 to 512
[  573.047784][T17411] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  573.097244][T17417] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  573.161236][T17417] EXT4-fs (loop1): orphan cleanup on readonly fs
[  573.213479][T17417] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.4028: bad orphan inode 15
[  573.263603][T15579] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  573.273673][T17417] ext4_test_bit(bit=14, block=18) = 1
[  573.289261][T17417] is_bad_inode(inode)=0
[  573.293500][T17417] NEXT_ORPHAN(inode)=1023
[  573.306728][T17417] max_ino=32
[  573.310013][T17417] i_nlink=0
[  573.325339][T17417] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2974: inode #15: comm syz.1.4028: corrupted xattr block 19: e_value size too large
[  573.370534][T17417] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[  573.392257][T17417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  573.544918][T17433] loop5: detected capacity change from 0 to 1024
[  573.838883][T16332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.234381][T17451] loop5: detected capacity change from 0 to 2048
[  574.310488][T17451] EXT4-fs error (device loop5): ext4_ext_check_inode:532: inode #2: comm syz.5.4039: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  574.432467][T17451] EXT4-fs (loop5): get root inode failed
[  574.471695][T17451] EXT4-fs (loop5): mount failed
[  575.203506][T17485] loop5: detected capacity change from 0 to 1024
[  576.077161][T17502] loop5: detected capacity change from 0 to 4096
[  576.127311][T17506] loop8: detected capacity change from 0 to 512
[  576.156226][T17502] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[  576.177180][T17506] EXT4-fs: Ignoring removed nomblk_io_submit option
[  576.216756][T17502] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  576.264195][T17502] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  576.309719][T17502] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  576.340940][T17506] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  576.376213][T17506] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  576.389142][T17502] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  576.479614][T17502] ntfs: volume version 3.1.
[  576.542194][T17502] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  576.585267][T17502] ntfs: (device loop5): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  576.608555][T15429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.630661][T17502] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  576.695998][T17502] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  576.719628][T17502] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  576.943596][T17492] loop1: detected capacity change from 0 to 40427
[  577.016980][T17492] F2FS-fs (loop1): invalid crc value
[  577.089451][T17492] F2FS-fs (loop1): Found nat_bits in checkpoint
[  577.272649][T17492] F2FS-fs (loop1): Start checkpoint disabled!
[  577.366893][T17492] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  577.895149][ T3479] kworker/u4:8: attempt to access beyond end of device
[  577.895149][ T3479] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  577.946374][ T3479] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  577.953670][ T3479] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  578.097007][T17551] netlink: 'syz.8.4068': attribute type 3 has an invalid length.
[  578.374039][T17561] input: syz1 as /devices/virtual/input/input41
[  579.361703][T17596] loop8: detected capacity change from 0 to 512
[  579.410500][T17596] EXT4-fs (loop8): Test dummy encryption mode enabled
[  579.527429][T17596] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  579.799621][T15429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.065648][T17622] loop1: detected capacity change from 0 to 512
[  580.137511][T17622] EXT4-fs (loop1): orphan cleanup on readonly fs
[  580.162243][T17622] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #15: comm syz.1.4088: corrupted inode contents
[  580.281723][T17622] EXT4-fs (loop1): Remounting filesystem read-only
[  580.290487][T17628] loop9: detected capacity change from 0 to 256
[  580.302220][T17628] exfat: Deprecated parameter 'utf8'
[  580.313060][T17622] EXT4-fs (loop1): 1 orphan inode deleted
[  580.324484][T17622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  580.337356][T17628] exfat: Deprecated parameter 'namecase'
[  580.343188][T17628] exfat: Deprecated parameter 'namecase'
[  580.367234][T17628] exfat: Deprecated parameter 'utf8'
[  580.414076][T17628] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  580.524496][T16332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  581.176759][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  581.176776][   T27] audit: type=1326 audit(1792030816.821:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17650 comm="syz.9.4096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271dd9e559 code=0x7ffc0000
[  581.246078][   T27] audit: type=1326 audit(1792030816.821:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17650 comm="syz.9.4096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271dd9e559 code=0x7ffc0000
[  581.309578][   T27] audit: type=1326 audit(1792030816.821:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17650 comm="syz.9.4096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271dd9e559 code=0x7ffc0000
[  581.344138][   T27] audit: type=1326 audit(1792030816.821:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17650 comm="syz.9.4096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271dd9e559 code=0x7ffc0000
[  581.418873][   T27] audit: type=1326 audit(1792030816.821:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17650 comm="syz.9.4096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f271dd9e559 code=0x7ffc0000
[  581.494571][   T27] audit: type=1326 audit(1792030816.931:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17650 comm="syz.9.4096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271dd9e559 code=0x7ffc0000
[  581.531702][   T27] audit: type=1326 audit(1792030816.931:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17650 comm="syz.9.4096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f271dd9e2c2 code=0x7ffc0000
[  581.568439][   T27] audit: type=1326 audit(1792030816.931:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17650 comm="syz.9.4096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f271dd9e357 code=0x7ffc0000
[  581.631367][   T27] audit: type=1326 audit(1792030816.931:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17650 comm="syz.9.4096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271dd9e559 code=0x7ffc0000
[  581.659580][   T27] audit: type=1326 audit(1792030816.931:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17650 comm="syz.9.4096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271dd9e559 code=0x7ffc0000
[  581.705767][T17662] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  581.806783][T15976] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  582.000269][T15976] usb 6-1: unable to get BOS descriptor or descriptor too short
[  582.026801][T15976] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  582.056107][T15976] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  582.076127][T15976] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  582.106091][T15976] usb 6-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  582.116147][T15976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.133763][T15976] usb 6-1: Product: syz
[  582.146060][T15976] usb 6-1: Manufacturer: syz
[  582.160760][T15976] usb 6-1: SerialNumber: syz
[  582.430101][T15976] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  582.464006][T15976] snd-usb-audio: probe of 6-1:1.1 failed with error -22
[  582.732201][T15976] snd-usb-audio: probe of 6-1:1.2 failed with error -22
[  582.770756][T15976] usb 6-1: USB disconnect, device number 19
[  582.889244][T16541] udevd[16541]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  583.228804][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4110'.
[  583.387712][T17685] loop9: detected capacity change from 0 to 40427
[  583.411367][T17704] loop5: detected capacity change from 0 to 512
[  583.430578][T17685] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  583.463780][T17685] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  583.507580][T17704] EXT4-fs (loop5): 1 truncate cleaned up
[  583.550497][T17685] F2FS-fs (loop9): invalid crc value
[  583.561359][T17704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  583.587980][T17693] loop1: detected capacity change from 0 to 32768
[  583.729294][T17704] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.4111: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  583.922150][ T8495] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.037008][T17685] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  584.063261][T17685] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  584.256196][T17685] F2FS-fs (loop9): Stopped filesystem due to reason: 0
[  584.545846][T17729] pimreg: tun_chr_ioctl cmd 1074025681
[  584.958234][T17742] loop1: detected capacity change from 0 to 512
[  585.042272][ T5791] Bluetooth: hci4: unexpected event for opcode 0x041b
[  585.212357][T17747] loop8: detected capacity change from 0 to 256
[  585.349502][T17747] FAT-fs (loop8): Directory bread(block 64) failed
[  585.386251][T17747] FAT-fs (loop8): Directory bread(block 65) failed
[  585.393079][T17747] FAT-fs (loop8): Directory bread(block 66) failed
[  585.406387][T17747] FAT-fs (loop8): Directory bread(block 67) failed
[  585.415259][T17747] FAT-fs (loop8): Directory bread(block 68) failed
[  585.456090][T17747] FAT-fs (loop8): Directory bread(block 69) failed
[  585.462828][T17747] FAT-fs (loop8): Directory bread(block 70) failed
[  585.496128][T17747] FAT-fs (loop8): Directory bread(block 71) failed
[  585.524751][T17747] FAT-fs (loop8): Directory bread(block 72) failed
[  585.539104][T17747] FAT-fs (loop8): Directory bread(block 73) failed
[  585.732185][T17747] syz.8.4124: attempt to access beyond end of device
[  585.732185][T17747] loop8: rw=2049, sector=1224, nr_sectors = 4 limit=256
[  585.776233][ T5791] Bluetooth: hci0: Zero size dump init pkt
[  586.175201][T17752] loop1: detected capacity change from 0 to 32768
[  586.236203][T17752] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.4125 (17752)
[  586.286579][T17752] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  586.345418][T17752] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  586.356954][T17752] BTRFS info (device loop1): disabling tree log
[  586.363293][T17752] BTRFS info (device loop1): using free space tree
[  586.460026][T17776] loop9: detected capacity change from 0 to 4096
[  586.599842][T17776] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  586.669760][T17752] BTRFS info (device loop1): enabling ssd optimizations
[  586.720469][T17752] BTRFS info (device loop1): auto enabling async discard
[  587.098390][T16332] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  587.207795][T15579] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.673539][T17824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4137'.
[  587.992043][T17835] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4143'.
[  588.099780][    C1] vkms_vblank_simulate: vblank timer overrun
[  598.589733][ T1190] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  599.018776][ T1190] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  599.081823][ T1190] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.506426][ T1190] usb 10-1: config 0 descriptor??
[  599.800926][ T1190] cp210x 10-1:0.0: cp210x converter detected
[  600.252028][ T5791] Bluetooth: hci1: command tx timeout
[  604.906779][ T1190] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -110
[  604.915144][ T1190] cp210x 10-1:0.0: querying part number failed
[  605.058647][ T1190] usb 10-1: cp210x converter now attached to ttyUSB0
[  606.757065][T14403] usb 10-1: USB disconnect, device number 3
[  607.202503][T14403] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  607.342881][T14403] cp210x 10-1:0.0: device disconnected
[  611.227643][ T5791] Bluetooth: hci0: command 0x0406 tx timeout
[  619.263582][T17874] loop8: detected capacity change from 0 to 512
[  620.311288][T17874] EXT4-fs: error -4 creating inode table initialization thread
[  620.483447][T17874] EXT4-fs (loop8): mount failed
[  621.451729][ T5791] Bluetooth: hci2: command 0x0406 tx timeout
[  624.550606][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  624.577873][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  638.101440][ T5085] Bluetooth: hci2: command 0x0406 tx timeout
[  648.855731][T17918] loop5: detected capacity change from 0 to 64
[  652.170054][ T5791] Bluetooth: hci1: command 0x0406 tx timeout
[  660.034703][T17931] loop9: detected capacity change from 0 to 512
[  660.588663][T17931] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  661.258931][T17931] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  661.362765][T17931] System zones: 1-12
[  661.609252][T17931] EXT4-fs: error -4 creating inode table initialization thread
[  661.766739][T17931] EXT4-fs (loop9): mount failed
[  686.021276][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  686.038858][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  690.897784][T17969] loop8: detected capacity change from 0 to 512
[  692.000648][T17969] EXT4-fs: error -4 creating inode table initialization thread
[  692.138618][T17969] EXT4-fs (loop8): mount failed
[  701.660995][T15976] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  707.417916][T15976] usb 10-1: unable to read config index 0 descriptor/all
[  707.425746][T15976] usb 10-1: can't read configurations, error -110
[  707.828497][T15976] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  708.147632][T15976] usb 10-1: device descriptor read/64, error -32
[  708.353560][T15976] usb usb10-port1: attempt power cycle
[  708.957067][T15976] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  709.100265][T15976] usb 10-1: device descriptor read/8, error -32
[  709.736586][T15976] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  709.888992][T15976] usb 10-1: device descriptor read/8, error -71
[  710.026577][T15976] usb usb10-port1: unable to enumerate USB device
[  747.571488][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  747.580554][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  758.215224][   T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  758.396175][   T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.840107][   T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  761.016658][   T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.835185][   T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  765.021928][   T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  765.593942][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  765.687708][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  765.813377][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  765.968728][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  766.087547][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  766.108849][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  767.487531][   T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  767.595505][   T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.249436][ T5791] Bluetooth: hci0: command tx timeout
[  770.356563][ T5791] Bluetooth: hci0: command tx timeout
[  771.336432][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  771.458600][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  771.499107][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  771.553813][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  771.657257][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  771.679637][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  772.345627][T18020] rxe_eth0 speed is unknown, defaulting to 1000
[  772.420717][ T5791] Bluetooth: hci0: command tx timeout
[  773.956484][ T5791] Bluetooth: hci1: command tx timeout
[  774.487370][ T5791] Bluetooth: hci0: command tx timeout
[  776.012518][ T5791] Bluetooth: hci1: command tx timeout
[  778.102699][ T5791] Bluetooth: hci1: command tx timeout
[  778.665781][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  778.728314][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  778.775393][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  778.834324][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  778.893962][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  778.949007][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  780.180833][ T5791] Bluetooth: hci1: command tx timeout
[  781.136569][ T5791] Bluetooth: hci2: command tx timeout
[  783.217281][ T5791] Bluetooth: hci2: command tx timeout
[  785.030362][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  785.141381][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  785.178392][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  785.286683][ T5782] Bluetooth: hci2: command tx timeout
[  785.301496][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  785.342420][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  785.390562][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  787.367123][ T5782] Bluetooth: hci2: command tx timeout
[  787.695792][ T5782] Bluetooth: hci3: command tx timeout
[  789.786728][ T5782] Bluetooth: hci3: command tx timeout
[  789.948644][   T49] gretap0 (unregistering): left allmulticast mode
[  791.855139][ T5782] Bluetooth: hci3: command tx timeout
[  792.186303][T18026] rxe_eth0 speed is unknown, defaulting to 1000
[  793.946973][ T5782] Bluetooth: hci3: command tx timeout
[  808.873901][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  808.899044][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  810.209367][T18030] rxe_eth0 speed is unknown, defaulting to 1000
[  823.793457][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  823.926501][ T5791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  823.960596][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  824.199331][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  824.231862][ T5791] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  824.244570][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  826.203607][T18034] rxe_eth0 speed is unknown, defaulting to 1000
[  826.698594][ T5791] Bluetooth: hci4: command tx timeout
[  828.726331][ T5791] Bluetooth: hci4: command tx timeout
[  829.655769][ T5782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  829.820404][ T5782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  829.841422][ T5782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  829.870347][ T5782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  829.958487][ T5782] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  829.980297][ T5782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  830.817335][ T5782] Bluetooth: hci4: command tx timeout
[  832.107885][ T5782] Bluetooth: hci5: command tx timeout
[  832.898315][ T5782] Bluetooth: hci4: command tx timeout
[  834.169712][ T5782] Bluetooth: hci5: command tx timeout
[  835.273051][ T5791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  835.346815][ T5791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  835.368038][ T5791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  835.472787][ T5791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  835.507665][ T5791] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  835.544874][ T5791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  836.257677][ T5791] Bluetooth: hci5: command tx timeout
[  837.768655][ T5791] Bluetooth: hci6: command tx timeout
[  838.327253][ T5791] Bluetooth: hci5: command tx timeout
[  839.848988][ T5791] Bluetooth: hci6: command tx timeout
[  841.154260][T18050] rxe_eth0 speed is unknown, defaulting to 1000
[  841.944601][ T5782] Bluetooth: hci6: command tx timeout
[  842.067700][ T5782] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  842.119092][ T5782] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  842.387849][ T5782] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  842.503378][ T5782] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  842.564660][ T5782] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  842.654811][ T5782] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  844.027452][ T5782] Bluetooth: hci6: command tx timeout
[  844.846324][ T5782] Bluetooth: hci7: command tx timeout
[  846.906860][ T5782] Bluetooth: hci7: command tx timeout
[  848.998280][ T5782] Bluetooth: hci7: command tx timeout
[  851.067770][ T5782] Bluetooth: hci7: command tx timeout
[  870.323846][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  870.338059][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  873.810225][   T49] hsr_slave_0: left promiscuous mode
[  874.057826][   T49] hsr_slave_1: left promiscuous mode
[  874.518614][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  874.577240][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  874.830069][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  874.927130][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  875.181062][   T49] bridge_slave_1: left allmulticast mode
[  875.277327][   T49] bridge_slave_1: left promiscuous mode
[  875.284607][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  875.765541][   T49] bridge_slave_0: left allmulticast mode
[  875.890037][   T49] bridge_slave_0: left promiscuous mode
[  875.937315][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  877.518651][   T49] veth1_macvtap: left promiscuous mode
[  877.626357][   T49] veth1_vlan: left promiscuous mode
[  877.633218][   T49] veth0_vlan: left promiscuous mode
[  889.522064][ T5791] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  889.622955][ T5791] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  889.660656][ T5791] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  889.688225][ T5791] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  889.721107][ T5791] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  889.742184][ T5791] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  892.018186][ T5782] Bluetooth: hci8: command tx timeout
[  892.816165][ T5782] Bluetooth: hci0: command 0x0406 tx timeout
[  894.086166][ T5791] Bluetooth: hci8: command tx timeout
[  894.561684][ T5782] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  894.708314][ T5782] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  894.736912][ T5782] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  894.814714][ T5782] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  894.931342][ T5782] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  894.945361][ T5782] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  896.180054][ T5782] Bluetooth: hci8: command tx timeout
[  897.299926][ T5782] Bluetooth: hci9: command tx timeout
[  897.949168][ T5782] Bluetooth: hci1: command 0x0406 tx timeout
[  898.256167][ T5791] Bluetooth: hci8: command tx timeout
[  899.378207][ T5791] Bluetooth: hci9: command tx timeout
[  900.173248][ T5782] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  900.209149][ T5782] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  900.229899][ T5782] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  900.303572][ T5782] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  900.359422][ T5782] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  900.417613][ T5782] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  901.461752][ T5791] Bluetooth: hci9: command tx timeout
[  902.652367][ T5791] Bluetooth: hci10: command tx timeout
[  903.098215][ T5791] Bluetooth: hci2: command 0x0406 tx timeout
[  903.537284][ T5782] Bluetooth: hci9: command tx timeout
[  904.737475][ T5782] Bluetooth: hci10: command tx timeout
[  905.398642][ T5791] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  905.471495][ T5791] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  905.504291][ T5791] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  905.656695][ T5791] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  905.683984][ T5791] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  905.707408][ T5791] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  906.866266][ T5782] Bluetooth: hci10: command tx timeout
[  907.937217][ T5782] Bluetooth: hci11: command tx timeout
[  908.180782][ T5782] Bluetooth: hci3: command 0x0406 tx timeout
[  908.886845][ T5791] Bluetooth: hci10: command tx timeout
[  909.219340][   T49] team0 (unregistering): Port device team_slave_1 removed
[  910.026814][ T5791] Bluetooth: hci11: command tx timeout
[  910.724734][   T49] team0 (unregistering): Port device team_slave_0 removed
[  912.099121][ T5791] Bluetooth: hci11: command tx timeout
[  912.652961][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  914.176810][ T5791] Bluetooth: hci11: command tx timeout
[  914.310297][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  928.755528][   T49] bond0 (unregistering): Released all slaves
[  931.730693][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  931.749884][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  933.444726][T18060] rxe_eth0 speed is unknown, defaulting to 1000
[  948.086258][   T49] IPVS: stop unused estimator thread 0...
[  949.101075][T18111] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  949.139569][T18111] Bluetooth: hci4: command 0x0406 tx timeout
[  949.237114][T18111] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  949.348178][T18111] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  949.496794][T18111] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  949.678712][ T5085] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  949.738553][ T5782] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  952.284447][ T5791] Bluetooth: hci12: command tx timeout
[  954.266111][ T5791] Bluetooth: hci5: command 0x0406 tx timeout
[  954.511482][ T5791] Bluetooth: hci12: command tx timeout
[  956.616016][ T5782] Bluetooth: hci12: command tx timeout
[  957.459950][ T5791] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  957.603361][ T5791] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  957.657868][ T5791] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  957.801491][ T5791] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  957.858849][ T5791] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  957.919163][ T5791] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  958.696112][ T5782] Bluetooth: hci12: command tx timeout
[  959.370080][ T5782] Bluetooth: hci6: command 0x0406 tx timeout
[  960.490413][ T5085] Bluetooth: hci13: command tx timeout
[  962.586720][ T5085] Bluetooth: hci13: command tx timeout
[  963.086723][T18056] rxe_eth0 speed is unknown, defaulting to 1000
[  964.726066][ T5085] Bluetooth: hci13: command tx timeout
[  965.569801][ T3529] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  966.816634][ T5085] Bluetooth: hci13: command tx timeout
[  969.627448][ T5085] Bluetooth: hci7: command 0x0406 tx timeout
[  969.805234][ T3529] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.479290][ T5085] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  975.616414][ T5085] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  975.687620][ T5085] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  975.735377][ T3529] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  975.769678][ T5085] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  975.850744][ T5085] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  975.907629][ T5085] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  978.417612][ T5085] Bluetooth: hci14: command tx timeout
[  980.312795][ T3529] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.497044][ T5085] Bluetooth: hci14: command tx timeout
[  982.594025][ T5085] Bluetooth: hci14: command tx timeout
[  983.535641][   T29] INFO: task syz-executor:18030 blocked for more than 143 seconds.
[  983.545068][   T29]       Not tainted syzkaller #0
[  983.718224][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  983.809326][   T29] task:syz-executor    state:D stack:24424 pid:18030 ppid:1      flags:0x00004006
[  983.936042][   T29] Call Trace:
[  983.939896][   T29]  <TASK>
[  983.943638][   T29]  __schedule+0x15ae/0x4660
[  984.096340][   T29]  ? ring_buffer_unlock_commit+0x476/0x5f0
[  984.103663][   T29]  ? asan.module_dtor+0x20/0x20
[  984.265361][   T29]  ? mark_lock+0x94/0x320
[  984.312683][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  984.387227][   T29]  ? rwsem_set_nonspinnable+0x120/0x120
[  984.393375][   T29]  schedule+0xbd/0x170
[  984.555925][   T29]  schedule_preempt_disabled+0x13/0x20
[  984.561786][   T29]  rwsem_down_write_slowpath+0xc3f/0x1020
[  984.668638][ T5085] Bluetooth: hci14: command tx timeout
[  984.787096][   T29]  ? rwsem_down_write_slowpath+0x81b/0x1020
[  984.793931][   T29]  ? rwsem_down_read_slowpath+0x880/0x880
[  984.896677][   T29]  ? read_lock_is_recursive+0x20/0x20
[  984.902554][   T29]  ? rdma_net_to_dev_net+0x23/0x230
[  985.017112][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  985.022734][   T29]  down_write+0x1b9/0x200
[  985.118763][   T29]  ? down_read_killable+0x340/0x340
[  985.124304][   T29]  ? rdma_net_to_dev_net+0x23/0x230
[  985.239113][   T29]  ? rdma_net_to_dev_net+0x23/0x230
[  985.245148][   T29]  ? rdma_net_to_dev_net+0x1ed/0x230
[  985.367997][   T29]  rdma_dev_exit_net+0x90/0x340
[  985.373513][   T29]  ? ppp_init_net+0x160/0x160
[  985.457194][   T29]  ? rdma_dev_init_net+0x280/0x280
[  985.463458][   T29]  setup_net+0x7e5/0xa20
[  985.576264][   T29]  ? copy_net_ns+0x530/0x530
[  985.581785][   T29]  ? copy_net_ns+0x347/0x530
[  985.706312][   T29]  ? down_read_killable+0x1d0/0x340
[  985.712319][   T29]  copy_net_ns+0x361/0x530
[  985.736905][   T29]  create_new_namespaces+0x3ce/0x700
[  985.743249][   T29]  unshare_nsproxy_namespaces+0x11a/0x160
[  985.775699][   T29]  ksys_unshare+0x4fa/0x8f0
[  985.783020][   T29]  ? sighand_ctor+0x50/0x50
[  985.867181][   T29]  ? lock_chain_count+0x20/0x20
[  985.872542][   T29]  ? syscall_enter_from_user_mode+0x25/0x80
[  985.973009][ T5782] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  985.994260][   T29]  __x64_sys_unshare+0x38/0x40
[  986.084449][ T5782] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  986.137888][   T29]  do_syscall_64+0x55/0xb0
[  986.143096][   T29]  ? clear_bhb_loop+0x40/0x90
[  986.248800][ T5782] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  986.343176][   T29]  ? clear_bhb_loop+0x40/0x90
[  986.368908][ T5782] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  986.386497][ T5782] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  986.416170][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  986.422720][   T29] RIP: 0033:0x7f685939f827
[  986.430392][ T5782] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  986.686062][   T29] RSP: 002b:00007ffffdeec1e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  986.694867][   T29] RAX: ffffffffffffffda RBX: 00007f6859625f40 RCX: 00007f685939f827
[  986.936938][   T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  986.945712][   T29] RBP: 00007f68596267b8 R08: 0000000000000000 R09: 0000000000000000
[  987.145877][   T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  987.154204][   T29] R13: 0000000000000003 R14: 00007ffffdeec428 R15: 0000000000000000
[  987.308067][   T29]  </TASK>
[  987.385922][   T29] 
[  987.385922][   T29] Showing all locks held in the system:
[  987.395652][   T29] 4 locks held by kworker/u4:1/12:
[  987.526219][   T29] 2 locks held by kworker/1:1/28:
[  987.533942][   T29] 1 lock held by khungtaskd/29:
[  987.638508][   T29]  #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  987.779073][   T29] 3 locks held by kworker/u4:3/49:
[  987.784644][   T29] 3 locks held by kworker/u4:4/56:
[  987.896759][   T29] 2 locks held by kworker/u4:6/1129:
[  987.946378][   T29] 5 locks held by kworker/u4:9/3529:
[  987.952208][   T29]  #0: ffff88801ae5d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  988.196374][   T29]  #1: ffffc9000c807d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  988.256674][   T29]  #2: ffffffff8f1c5810 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x140/0xb00
[  988.386182][   T29]  #3: ffff888024697250 (&devlink->lock_key#11){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0xee/0x360
[  988.526102][   T29]  #4: ffffffff8f1d2888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x88/0x240
[  988.646023][   T29] 4 locks held by udevd/5139:
[  988.651248][   T29] 2 locks held by getty/5528:
[  988.778590][ T5782] Bluetooth: hci8: command tx timeout
[  988.811230][   T29]  #0: ffff8880323910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  988.957210][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  989.109292][   T29] 2 locks held by kworker/0:6/5863:
[  989.114878][   T29]  #0: ffff888018872d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  989.265584][   T29]  #1: ffffc9000488fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  989.427036][   T29] 3 locks held by kworker/0:2/15976:
[  989.432587][   T29] 3 locks held by kworker/u4:10/17850:
[  989.546719][   T29] 3 locks held by kworker/u4:12/17903:
[  989.552681][   T29] 5 locks held by syz-executor/18020:
[  989.666055][   T29]  #0: ffff888063e5ce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x500
[  989.770152][   T29]  #1: ffff888063e5c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x552/0x1170
[  989.856612][   T29]  #2: ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0x99/0x220
[  989.956487][   T29]  #3: ffff888141f58b38 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x7b/0x630
[  990.085958][   T29]  #4: ffffffff8df37ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880
[  990.225917][   T29] 3 locks held by syz-executor/18026:
[  990.231763][   T29]  #0: ffff888055078e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x500
[  990.396069][   T29]  #1: ffff8880550780b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x552/0x1170
[  990.508756][   T29]  #2: ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0x99/0x220
[  990.635897][   T29] 2 locks held by syz-executor/18030:
[  990.641726][   T29] 2 locks held by syz-executor/18034:
[  990.756373][   T29]  #0: ffffffff8f1c5810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x347/0x530
[  990.816591][ T5782] Bluetooth: hci8: command tx timeout
[  990.865951][   T29]  #1: ffffffff8ef7d190 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_exit_net+0x90/0x340
[  990.988129][   T29] 2 locks held by syz-executor/18050:
[  990.994163][   T29]  #0: ffffffff8f1c5810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x347/0x530
[  991.130332][   T29]  #1: ffffffff8ef7d190 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_exit_net+0x90/0x340
[  991.257968][   T29] 2 locks held by syz-executor/18056:
[  991.264001][   T29]  #0: ffffffff8f1c5810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x347/0x530
[  991.376726][   T29]  #1: ffffffff8f1d2888 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x2d2/0x7c0
[  991.516507][   T29] 3 locks held by syz-executor/18060:
[  991.522520][   T29]  #0: ffffffff8f1c5810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x347/0x530
[  991.676202][   T29]  #1: ffffffff8f1d2888 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xd6/0x380
[  991.759666][   T29]  #2: ffffffff8df37ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880
[  991.878072][   T29] 4 locks held by syz-executor/18064:
[  991.884014][   T29]  #0: ffffffff8f1c5810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x347/0x530
[  992.035868][   T29]  #1: ffffffff8ef7cfd0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1a3/0x280
[  992.116952][   T29]  #2: ffffffff8ef7d190 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1db/0x280
[  992.193106][   T29]  #3: ffff88807d58cf80 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0xee/0x5c0
[  992.266560][   T29] 1 lock held by syz-executor/18106:
[  992.272510][   T29] 4 locks held by syz-executor/18110:
[  992.385883][   T29]  #0: ffffffff8f1c5810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x347/0x530
[  992.479458][   T29]  #1: ffffffff8ef7cfd0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1a3/0x280
[  992.557645][   T29]  #2: ffffffff8ef7d190 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1db/0x280
[  992.655981][   T29]  #3: ffff88807d58cf80 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0xee/0x5c0
[  992.758288][   T29] 6 locks held by syz-executor/18116:
[  992.764239][   T29]  #0: ffffffff8f1c5810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x347/0x530
[  992.876546][   T29]  #1: ffffffff8ef7cfd0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1a3/0x280
[  992.906279][ T5782] Bluetooth: hci8: command tx timeout
[  993.048925][   T29]  #2: ffffffff8ef7d190 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1db/0x280
[  993.137977][   T29]  #3: ffff88807d58cf80 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0xee/0x5c0
[  993.163810][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  993.176499][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  993.326379][   T29]  #4: ffff88807d58d1b0 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x78/0x2d0
[  993.445903][   T29]  #5: ffffffff8f1d2888 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x170/0x8d0
[  993.537665][   T29] 4 locks held by syz-executor/18123:
[  993.543752][   T29]  #0: ffffffff8f1c5810 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x347/0x530