last executing test programs:

3m22.913857173s ago: executing program 2 (id=96):
syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x10000, &(0x7f0000000280)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@bsdgroups}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x46e, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvTLctBbRV8QcIWkUj8UdLy8+DF4wmHjQx0QPGU20LQRaqtCZCiFYPeDQk3o1H/wVPejHGk4lXvRsSYriAJiZjZna2XZbdwtKli+znk0z73s6bvvedmbf7Zt5OA+hb4/mPJGJrRPweEaO17PUFxmu/rl05P/v3lfOzSWTZ238lRbmrV87P1ovWt9tSy2RZmR9uUe+F9yJmqtX5M2V+cunUh5OLZ8+9dOLUzPH54/Onpw8f3r9v19DB6QNdiTOP6+qOTxd2bn/93Ytvzh69+H6W5e3dWq5vjKNLRsZre7elZ7tcWa/d15BOKj1sCB0ZiIj8cA0W/X80BmJkZd1ovPZF661GNq6BwB2TZVnW6vO5tJwB97Aket0CoDfqH/T59W992aChx13h8pGIjw7V4r9WLrU1lUjLMoNN17fdNB4RR5f/+SZfopP7EJvuUIMAgHveD0ci4sVW4780Hmkod38kEcu19AMR8WBEPBQR2yLi4Yii7KMR8ViH9TfPkFw//hnO23Hp9iK7Nfn47+Vybmtl/PdvVsRfGhsoc/kYcCwGk2MnqvN7i30SsScGh/P81Bp1/Pjqb1+1W9c4/suXvP76WLAmvVRpukE3N7M0s86wV1z+PGJHpSn+QhL1aZwkIrZHxI6O/vLqFcaJ57/b2a7UzeNfQxfmmbJvI56rHf/laIq/Lmk7Pzl16OD0gclNUZ3fO1k/K270y68X3mpX/7ri74L8+G9uPv8LK/GPJZsiFs+eO1nM1y5G8wzxTV3448u21zS3e/4PJe8U6aHytU9mlpbOTEUMJW/c+Pr06rZlvtIY/57dreJPi/e4erSPR0R+Eu+KiCci4smy7U9FxNMRsXuN+H9+5ZkPOo9/jbvyXZTHP3ez4x+Nx7/zxMDJn77vPP66/PjvL1J7ynnHW3n/W21FjDW/0phYx64DAACA/420+A58kk6spNN0YqL2Hf5tsTmtLiwuvXBs4ePTc7Xvyo/FYFq/0zXacD90qkiv5qeb8vvK+8ZfD4wU+YnZhepcr4OHPrelTf/P/TnQ69YBd5zntaB/6f/Qv/R/6F/6P/Qv/R/6V6v+/1kP2gFsPJ//0L/0f+hf+j/0L/0f+lLbh/fTdT3y35VEEhG9q11i7USknW9ViZ62OWn7byDOnjs5clfs1RaJSvs2dycx3HJVr9+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuuO/AAAA//9l3OXU")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

3m21.790378533s ago: executing program 2 (id=101):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0xffffffffffffff10, &(0x7f00000002c0)=[{&(0x7f00000023c0)=""/37, 0x30}], 0x1}, 0x7}], 0x1, 0x400001a2, 0x0)

3m21.44601076s ago: executing program 2 (id=103):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0)
sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)

3m20.938859625s ago: executing program 2 (id=108):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00')

3m20.703370155s ago: executing program 2 (id=109):
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f00000001c0), 0x37)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000580)=0x5, 0x4)

3m19.769326772s ago: executing program 2 (id=111):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082)

3m19.138060648s ago: executing program 32 (id=111):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082)

3m0.113466088s ago: executing program 3 (id=206):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x0, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xf, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x8, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x8, 0x8, 0x752, 0x0, 0x800003, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x40000084, 0x100, 0x5, 0x252, 0x0, 0xb, 0x5, 0x20006, 0x5, 0x2, 0x6, 0x2, 0x9, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x800401, 0x400066cf, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
r0 = socket(0x2, 0x3, 0x8)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

2m59.92157296s ago: executing program 3 (id=208):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0xffff45fc}, 0x10)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

2m59.68430555s ago: executing program 3 (id=212):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000000), 0x4, 0x987f, &(0x7f00000133c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

2m58.703328695s ago: executing program 3 (id=222):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$eJzs3V9oXNl9B/DfmStZY22aaLOJN2mz6UBKYpTa+F9sBZcgZxW1AccbIit0n6LRHzvDyiMjyY03bYPakhb6ErovpS9FNF1ayEPpQ7ePVZotJJRCCXlIHwqCJss+9EEPgdKWjcK9c0Ya2fJau15ZsvfzMePvnTu/OzrnntGdO6AzNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiM9+7tKp0+mgWwEAPExXJr506myKgYNuBwDw8Fz1+R8AAAAAAAAAAAAAAA67FEUcixSDr2ykqep+R/1yq33r9uTY+O6bHU2RohZFVV/e6qfPnD33qfMXRrr55tu/0z4cz01cvdR4duHGzcW5paW52cZkuzWzMDu352d40O3vNFztgMaNF27NXru21Dhz8uyOh28PvTbwxLGhixdOnB/p1k6OjY9P9NT09b/tn36Xe83wOBJFNCPFG0Ovp2ZE1OLB98V9Xjv77WjVieGqE5Nj41VH5lvN9nL5YKrlqlpEo2ej0e4+eghj8UBGI1bK5pcNHi67N3Gzudicnp9rfLG5uNxabi20U63T2rI/jajFSIpYjYj1XSb59kcRH40UL53aSNMRUXT3wyericH3b09tH/q4B2U7G/0Rq7VHYMwOsYEo4kqk+Nmrx2Om3Gf5Fh+P+EKZr0S8XOZnIlL5wjgX8VOTxR8bfVHEv0WKhbSRZqvjQfe4cvnLjc+3ry301HaPK4/8+8PDdMiPTfUoYro64m+kt3+yAwAAAAAAAAAAAAAAAMA77WgU8e1I8UfP/E41rziqeenvuzjynud/s3fO+NP3eZ6y9mRErNT2Nie3P08dTrXy3z50jD2pRxHfyPP//uCgGwMAAAAAAAAAAAAAAAAAAPCuVsTzkeIrJ46n1aiu/XskqmuKt9rXG1eb0/Odq8J2r/3bvWb65ubmZiN1cjTnVM6VnKs513Ku54xa3j7naM6pnCs5V3Ou5VzPGUXePudozqmcKzlXc67lXM8ZfXn7nKM5p3Ku5FzNuZZzPWcckmv3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TmpRxM8jxbe+tpEiRcRoxFR0cm3goFsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJTqqYiTkWLt+Xp1f7UWcTUifr65udm9RcRGmQ/qoPsKAAAAAAAAAAAAAAAAAAAAh1Yq4mOR4qn/20iNiLg99NrAE8eGLl44cX6kiCJSWdJb/9zE1UuNZxdu3FycW1qam21MtlszC7Nze/1x9cut9q3bk2Pj+9KZ+zq6z+0/Wn924eaLi63rX13e9fHB+qXppeXF5szuD8fRqEVM9a4Zrho8OTZeNXq+1WxXm6baPRpYixjda2cAAAAAAAAAAAAAAAAAAAA4NAZTEZ+LFD/5z3OpO2+8rzPn/5c694qt2pd/b/u7AObvyK7e7w/Yy3Laa0OHq4n3jcmx8fGJntV9/XeXlm1KqYinI8UnXvpQNR8+xeCuc+PLuveWdTfO5bqhXynrVnZU1Ycnx8YbVxbaJy7Nzy/MNJeb0/NzjYmbzZn8xQEre+0GAAAAAAAAAAAAAAAAAAAA7GYwFfGjSPHff/vvqXvd+Tz/v69zr2f+/29UU+gr9bQzt1Rz+99bze3vLL/v4sjgR5+51/r9mP9ftimlIr4ZKc7+6EPV9fS78/+n7qgt6/4kUrz+zEdyXe1IWdfsdqfzjNda83Onytq/jBS/+ka3Nqra67n2qe3a02Xt0Ujx5xs7a7+aaz+wXXumrD0eKb73X7vXfnC79mxZ+5NI8Y9/0+jWDpa1v5trj23XnpxZmJ+9324tx/87keKvr/xW6vb5nuPf8/0PK3fklrvG/M2X36nxH+pZt5LH9Y/z+DfvM/7nI8V36h/JdZ19P50ff7L6f3v8PxEp/uNfd9Zey7Xv3649vdduHbRy/L8dKb77Fz/e6nMe//74+/+N7RHfOf6/3Lczt14lBzT+T/asG8rtmnnru+NdZ+nFr7/QnJ+fW7RgwYKFrYWDPjLxMJTv/38aKf7/WJG65zH5/f89nXvb53//843t9/+Ld+SWA3r/f3/Puov5rKW/L6K+fONm/9MR9aUXv36idaN5fe76XPvM6VOf/vT506dOn+8/0j25217a8757HJTj/4NI8cO/++HW55it87/K7uf/g3fklgMa/6d6+7TjvGbPu+JdqRz/v4oUT372x1ufN3eO/87z/+7n/+Mf25lbv38HNP4f6Fk3lNvVeov7AgAAAAAAAAAA4FEymIr4s0jx23/466k7h2gvf/83e0duOaC//zrWs272Ic1r2PNOBgA4RMrzvw9Gin/a/P7WXO6d53/xa93a3vO/ezkM1/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBHXYoifj9SDL6ykdYGyvsd9cut9q3bk2Pju292NEWKWhRVfXmrnz5z9tynzl8Y6eabb/9O+3A8N3H1UuPZhRs3F+eWluZmG5Pt1szC7Nyen+FBt7/TcLUDGjdeuDV77dpS48zJszsevj302sATx4YuXjhxfqRTO9CYHBsfn+ip6et/2z/9Luke649EEd+PFG8MvZ6+OxBRiwffF/d57ey3o1UnhqtOTI6NVx2ZbzXby+WDqZarahGNno1Gu/soj9t+jsUDGY1YKZtfNni47N7EzeZic3p+rvHF5uJya7m10E61TmvL/jSiFiMpYjUi1gfufrr+KOKbkeKlUxvpnwciiu5++OSViS+dOnv/9tT2oY97ULaz0R+xWnsExuwQG4gi/iFS/OzV4/G9gYi+6Nzi4xFfKPOViJfL/ExEKl8Y5yJ+usvriEdTXxRxLlIspI306kB5POgeVy5/ufH59rWFntruceWRf394mA75sakeRfygOuJvpH/xew0AAAAAAAAAAAAAAABwiBSxGim+cuJ4quYHb80pbrWvN642p+c70/q6c/+6c6Y3Nzc3G6mTozmncq7kXM25lnM9Z9Ty9jlHc07lXMm5mnMt53rOKPL2OUdzTuVcybmacy3nes7oy9vnHM05lXMl52rOtZzrOeOQzN0DAAAAAAAAAAAAAAAAAAAeL7Uoqqu4f+trG2lzoHN96ano5JrrgT72fhEAAP//gMd2Mw==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3800009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m57.342251254s ago: executing program 3 (id=233):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0xfffffffe, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x10000000, 0xaa, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)

2m56.764093581s ago: executing program 3 (id=237):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000f80)="4f7d669ddbee291bffe1f05ba4ddbda9", 0x10}, {&(0x7f0000000080)="b097daea750d345cb5c6b2c996201d5e", 0x10}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

2m56.258687956s ago: executing program 33 (id=237):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000f80)="4f7d669ddbee291bffe1f05ba4ddbda9", 0x10}, {&(0x7f0000000080)="b097daea750d345cb5c6b2c996201d5e", 0x10}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

1m13.991083876s ago: executing program 4 (id=684):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m13.311496s ago: executing program 4 (id=687):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="40001d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000280)=ANY=[])

1m10.803053852s ago: executing program 4 (id=709):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={<r1=>0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000180)=0xc)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200008c6, &(0x7f0000000c40)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61736b3d309a02003030303030303030303135322c696f63686172e8ffffff69736f383835392d312c6769643d00000000000000", @ANYRES16=r3, @ANYRES16, @ANYRESDEC=r1, @ANYRESHEX=r0], 0x81, 0x14ff, &(0x7f0000002a80)="$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")
setresuid(0x0, 0xee00, 0x0)
lchown(&(0x7f0000000080)='./file1\x00', 0x0, 0xffffffffffffffff)

1m10.491685595s ago: executing program 4 (id=711):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)

1m10.232168258s ago: executing program 4 (id=713):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x6, 0x4}, 0x8)

1m9.822320487s ago: executing program 4 (id=715):
r0 = syz_usbip_server_init(0x1)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902"], 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0)
write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0xff2f)

1m8.988951307s ago: executing program 34 (id=715):
r0 = syz_usbip_server_init(0x1)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902"], 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0)
write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0xff2f)

3.503657641s ago: executing program 0 (id=1081):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x4, r2})

3.296205625s ago: executing program 6 (id=1083):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'sed\x00', 0x22, 0x660f537f, 0x6d}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x1, 0x1}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

3.135583553s ago: executing program 0 (id=1085):
r0 = shmget$private(0x0, 0x400000, 0x100, &(0x7f0000c00000/0x400000)=nil)
r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
shmdt(r1)

3.108560418s ago: executing program 6 (id=1086):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x40000098, 0x0, 0x1}]})

2.942966185s ago: executing program 0 (id=1088):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1)
open_by_handle_at(r0, &(0x7f00000003c0)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x13, "ec22762e30f1622777da7d1752774be8"}}}, 0x200000)

2.864049908s ago: executing program 0 (id=1089):
syz_mount_image$ocfs2(&(0x7f0000000100), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@localflocks}, {@resv_level}, {@err_ro}, {@coherency_buffered}, {@heartbeat_none}, {@err_cont}, {@coherency_buffered}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@err_ro}, {@nouser_xattr}, {@localalloc={'localalloc', 0x3d, 0x3ff}}]}, 0x18, 0x448c, &(0x7f0000008980)="$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")
r0 = open(&(0x7f0000000140)='.\x00', 0x48100, 0x6)
getdents(r0, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

2.784003482s ago: executing program 6 (id=1090):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0xffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080))
wait4(r1, 0x0, 0x8, 0x0)

2.535363274s ago: executing program 1 (id=1091):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000340)={[{@grpjquota}, {@bsdgroups}, {}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@block_validity}]}, 0xfc, 0x574, &(0x7f0000001980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

2.114859175s ago: executing program 5 (id=1092):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c)

1.939905374s ago: executing program 0 (id=1093):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x100004, @loopback, 0xffff}, 0x1c)
ppoll(&(0x7f00000000c0)=[{r0, 0x5028}], 0x1, 0x0, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2800)
sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x3fb0}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000340)="1d", 0x1}], 0x1}}], 0x1, 0x8000)

1.939385394s ago: executing program 1 (id=1094):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)

1.877678115s ago: executing program 6 (id=1095):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={<r2=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x0, {0x0, 0x1, 0x3}, 0x7c}, 0x18)

1.695332075s ago: executing program 5 (id=1096):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0x1, 0x2c3, &(0x7f0000000ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r0, &(0x7f0000000040), 0xe09)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)

1.628037586s ago: executing program 6 (id=1097):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000200), 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0x1)

1.342683254s ago: executing program 5 (id=1098):
openat$kvm(0xffffffffffffff9c, &(0x7f0000001bc0), 0x20840, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000440)={'veth1_to_batadv\x00', &(0x7f0000000140)=@ethtool_per_queue_op={0x4b, 0x1e, [0x7, 0x1, 0x5, 0x1, 0xdc3, 0x1, 0x9, 0xb, 0xe, 0xf, 0x10000, 0x80, 0x800, 0xd, 0x9, 0x8, 0x4, 0x6, 0x2, 0x6, 0x0, 0x13d9, 0x4265, 0x1f, 0x8, 0x3, 0xffffff9d, 0x7fffffff, 0x4, 0x58, 0x4, 0x91, 0x2, 0x6, 0x6, 0x3, 0x3545, 0x9, 0x9, 0xfffffffb, 0x0, 0x4, 0x5, 0x4, 0xe127, 0x4, 0xa, 0x6, 0x1, 0xb52, 0x6, 0x5e5, 0xb, 0x1, 0x4, 0x0, 0x7, 0x6, 0x2, 0x1, 0x81, 0x5, 0x10, 0x21f3, 0x8001, 0xf, 0xf414, 0x1, 0x1, 0x20000000, 0x7, 0x7fff, 0xa, 0x52d1, 0xbe53, 0x9, 0x3, 0x3, 0x168c, 0x5cf4, 0x401, 0x3, 0x300, 0x9, 0x2, 0xcf1, 0x8, 0x6, 0x0, 0x7f, 0xfffffffa, 0x9, 0x6, 0x7ff, 0x6, 0x7, 0xe, 0xfffffff8, 0x1e43, 0x2, 0x2, 0x6, 0x5, 0xde1d, 0x200, 0x101, 0x8, 0x6, 0x7, 0x7, 0x7, 0x6, 0x4bd, 0x5, 0x4, 0xf63e, 0x60, 0x80000001, 0x4, 0x80, 0xfffffffd, 0xffffffff, 0x2, 0xe, 0x9, 0x279, 0x8, 0x7]}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001300010028bd7000fbdbdf2507000000", @ANYRES32=r0, @ANYBLOB="021002000288050010001a"], 0x30}, 0x1, 0x0, 0x0, 0xc109c6e1914fa4e7}, 0x4000)

1.160838045s ago: executing program 5 (id=1099):
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4})
unshare(0x28040680)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff00, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x9, 0x3c5b, 0x80000001, 0x24, 0xd, 0x6, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x2000312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x3031d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xffe]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

992.014363ms ago: executing program 6 (id=1100):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000002c0)={[{@nodiscard}, {@nocheckpoint_merge}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@background_gc_off}, {@noflush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@grpjquota}, {@checkpoint_diasble}]}, 0x4, 0x5510, &(0x7f00000020c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x8)
fallocate(r1, 0x0, 0x0, 0x1000f4)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x0, 0x100000000000000})

991.503363ms ago: executing program 5 (id=1101):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

954.66875ms ago: executing program 5 (id=1102):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

881.326502ms ago: executing program 1 (id=1103):
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x8, &(0x7f0000002500)=ANY=[], 0x1, 0x1dd, &(0x7f00000002c0)="$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")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000250000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000300), 0x0}, 0x20)

567.079815ms ago: executing program 1 (id=1104):
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7001fe9bdf251300000008000300", @ANYRES32=r2, @ANYBLOB="040013000600b500660600000a0006000802110000010000060012008300e5002c0081"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814)

501.415496ms ago: executing program 0 (id=1105):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9)

243.914609ms ago: executing program 1 (id=1106):
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{}, {0x0, 0x3fffffff}}, 0x100)

0s ago: executing program 1 (id=1107):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=cp850,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',undelete,uid=', @ANYRESDEC=0x0, @ANYBLOB=',novrs,noadinicb,partition=00000000000000000000,undelete,\x00'], 0x1, 0xc32, &(0x7f0000001a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000b, 0x2013, r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

kernel console output (not intermixed with test programs):

expected cc 0x0c38 length: 249 > 2
[  221.578684][ T8278] loop1: detected capacity change from 0 to 256
[  221.600910][ T8278] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  221.759520][ T8278] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  222.008205][ T5768] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  222.165474][ T8288] loop1: detected capacity change from 0 to 512
[  222.217343][ T5768] usb 5-1: Using ep0 maxpacket: 8
[  222.249627][ T5768] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  222.280512][ T5768] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  222.321172][ T8277] loop5: detected capacity change from 0 to 32768
[  222.342596][ T8288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  222.362948][ T8277] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.586 (8277)
[  222.390907][ T8288] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  222.391508][ T5768] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  222.442073][ T8277] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  222.475875][ T8277] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  222.496416][ T8277] BTRFS info (device loop5): force clearing of disk cache
[  222.505497][ T8277] BTRFS info (device loop5): enabling auto defrag
[  222.506147][ T5768] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  222.552934][ T5768] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  222.573396][ T8277] BTRFS info (device loop5): enabling ssd optimizations
[  222.618804][ T5768] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  222.620472][ T8277] BTRFS info (device loop5): max_inline at 0
[  222.666851][ T5768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.686341][ T8277] BTRFS info (device loop5): enabling disk space caching
[  222.714083][ T8277] BTRFS info (device loop5): disk space caching is enabled
[  222.755214][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  222.931731][ T5768] usb 5-1: usb_control_msg returned -32
[  222.942289][ T8313] loop1: detected capacity change from 0 to 64
[  222.949012][ T5768] usbtmc 5-1:16.0: can't read capabilities
[  222.978683][ T8277] BTRFS info (device loop5): rebuilding free space tree
[  223.033236][ T8277] BTRFS info (device loop5): disabling free space tree
[  223.079840][ T8277] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  223.100553][ T8277] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  223.135701][ T8264] chnl_net:caif_netlink_parms(): no params data found
[  223.200423][ T5776] hfs: node 4:3 still has 1 user(s)!
[  223.307214][ T5782] Bluetooth: hci1: command tx timeout
[  223.621032][ T6749] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  223.725942][ T8264] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.733460][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.757442][ T8264] bridge_slave_0: entered allmulticast mode
[  223.778304][ T8264] bridge_slave_0: entered promiscuous mode
[  223.788490][ T8264] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.795873][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.811891][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/326.tmp-b7:5' failed: Read-only file system
[  223.828743][ T8264] bridge_slave_1: entered allmulticast mode
[  223.839597][ T8264] bridge_slave_1: entered promiscuous mode
[  223.877803][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/326.tmp-b7:5' failed: Read-only file system
[  224.174185][ T8264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.244674][ T1001] hsr_slave_0: left promiscuous mode
[  224.268411][ T1001] hsr_slave_1: left promiscuous mode
[  224.292547][ T1001] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.324297][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/330.tmp-b7:5' failed: Read-only file system
[  224.336670][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.365143][ T1001] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.396366][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.407327][ T1001] bridge_slave_1: left allmulticast mode
[  224.424132][ T1001] bridge_slave_1: left promiscuous mode
[  224.436603][ T1001] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.463861][ T1001] bridge_slave_0: left allmulticast mode
[  224.486352][ T1001] bridge_slave_0: left promiscuous mode
[  224.502550][ T1001] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.592522][ T1001] veth1_macvtap: left promiscuous mode
[  224.598634][ T1001] veth0_macvtap: left promiscuous mode
[  224.604726][ T1001] veth1_vlan: left promiscuous mode
[  224.627505][ T1001] veth0_vlan: left promiscuous mode
[  224.677002][ T8319] loop1: detected capacity change from 0 to 40427
[  224.699932][ T8319] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff
[  224.728318][ T8319] F2FS-fs (loop1): invalid crc value
[  224.770603][ T8319] F2FS-fs (loop1): Found nat_bits in checkpoint
[  224.815193][    T9] usb 5-1: USB disconnect, device number 6
[  224.925636][ T5785] udevd[5785]: symlink '../../loop4' '/dev/disk/by-diskseq/322.tmp-b7:4' failed: Read-only file system
[  224.987609][ T8319] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  225.094865][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/331.tmp-b7:1' failed: Read-only file system
[  225.099285][   T27] audit: type=1804 audit(2000000043.860:123): pid=8319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.593" name="/newroot/150/file1/file1" dev="loop1" ino=10 res=1 errno=0
[  225.152019][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system
[  225.189532][ T5893] udevd[5893]: symlink '../../loop4' '/dev/disk/by-diskseq/322.tmp-b7:4' failed: Read-only file system
[  225.262511][ T5776] syz-executor: attempt to access beyond end of device
[  225.262511][ T5776] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  225.333178][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  225.352261][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  225.386531][ T5782] Bluetooth: hci1: command tx timeout
[  225.475852][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/331.tmp-b7:1' failed: Read-only file system
[  225.529251][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system
[  225.566392][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  225.637610][ T8331] loop5: detected capacity change from 0 to 40427
[  225.682067][ T8331] F2FS-fs (loop5): invalid crc value
[  225.714512][ T8331] F2FS-fs (loop5): Found nat_bits in checkpoint
[  225.758698][    T9] usb 5-1: config 0 has no interfaces?
[  225.767638][    T9] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  225.800267][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.826336][    T9] usb 5-1: Product: syz
[  225.836346][    T9] usb 5-1: Manufacturer: syz
[  225.846285][    T9] usb 5-1: SerialNumber: syz
[  225.863825][    T9] usb 5-1: config 0 descriptor??
[  225.887340][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/332.tmp-b7:5' failed: Read-only file system
[  225.932824][ T8331] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  225.960956][ T8331] syz.5.594: attempt to access beyond end of device
[  225.960956][ T8331] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  225.979983][ T8331] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  226.147143][    T9] usb 5-1: USB disconnect, device number 7
[  226.979054][ T8367] kernel read not supported for file /file1 (pid: 8367 comm: syz.5.601)
[  226.996567][   T27] audit: type=1800 audit(2000000045.760:124): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.601" name="file1" dev="mqueue" ino=14028 res=0 errno=0
[  227.316009][ T1001] team0 (unregistering): Port device team_slave_1 removed
[  227.409662][ T1001] team0 (unregistering): Port device team_slave_0 removed
[  227.474526][ T5782] Bluetooth: hci1: command tx timeout
[  227.499996][ T1001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  227.585167][ T1001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  227.679275][ T8371] loop5: detected capacity change from 0 to 32768
[  227.693995][ T8371] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.603 (8371)
[  227.726141][ T8371] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  227.748839][ T8371] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  227.765075][ T8371] BTRFS info (device loop5): force clearing of disk cache
[  227.773101][ T8371] BTRFS info (device loop5): enabling auto defrag
[  227.779794][ T8371] BTRFS info (device loop5): enabling ssd optimizations
[  227.793065][ T8371] BTRFS info (device loop5): max_inline at 0
[  227.799597][ T8371] BTRFS info (device loop5): enabling disk space caching
[  227.806823][ T8371] BTRFS info (device loop5): disk space caching is enabled
[  228.021254][ T8371] BTRFS info (device loop5): rebuilding free space tree
[  228.070488][ T8371] BTRFS info (device loop5): disabling free space tree
[  228.077567][ T8371] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  228.106800][ T8371] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  228.414412][ T6749] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  228.634995][ T1001] bond0 (unregistering): Released all slaves
[  228.912958][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/335.tmp-b7:5' failed: Read-only file system
[  228.934514][ T8264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.976437][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/335.tmp-b7:5' failed: Read-only file system
[  229.005861][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/336.tmp-b7:5' failed: Read-only file system
[  229.066748][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.605'.
[  229.156922][ T8392] hsr_slave_0: left promiscuous mode
[  229.165661][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/333.tmp-b7:1' failed: Read-only file system
[  229.183513][ T8392] hsr_slave_1: left promiscuous mode
[  229.231894][ T5771] udevd[5771]: symlink '../../loop4' '/dev/disk/by-diskseq/322.tmp-b7:4' failed: Read-only file system
[  229.355925][ T8264] team0: Port device team_slave_0 added
[  229.388789][ T8264] team0: Port device team_slave_1 added
[  229.484366][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.506366][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.559177][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/336.tmp-b7:5' failed: Read-only file system
[  229.566415][ T5782] Bluetooth: hci1: command tx timeout
[  229.626363][ T8264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.644270][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.652019][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.678677][ T8264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.787863][ T8264] hsr_slave_0: entered promiscuous mode
[  229.814029][ T8264] hsr_slave_1: entered promiscuous mode
[  230.144291][ T8394] loop1: detected capacity change from 0 to 40427
[  230.179591][ T8394] F2FS-fs (loop1): invalid crc value
[  230.227763][ T8394] F2FS-fs (loop1): Found nat_bits in checkpoint
[  230.329452][ T8394] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  230.392757][ T8394] syz.1.606: attempt to access beyond end of device
[  230.392757][ T8394] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  230.442525][ T8396] loop4: detected capacity change from 0 to 32768
[  230.463879][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/337.tmp-b7:1' failed: Read-only file system
[  230.508264][ T8396] JBD2: Ignoring recovery information on journal
[  230.556111][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system
[  230.609764][ T5776] syz-executor: attempt to access beyond end of device
[  230.609764][ T5776] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  230.644010][ T8396] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  230.660974][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  230.763058][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/337.tmp-b7:1' failed: Read-only file system
[  230.776374][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system
[  231.126246][ T8421] input: syz0 as /devices/virtual/input/input7
[  231.252582][ T6247] ocfs2: Unmounting device (7,4) on (node local)
[  231.971732][ T8264] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  232.005340][ T8264] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  232.038961][ T8264] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  232.106039][ T8264] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  232.388733][ T8264] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.433041][ T8427] loop5: detected capacity change from 0 to 32768
[  232.477727][ T8264] 8021q: adding VLAN 0 to HW filter on device team0
[  232.490306][ T8427] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.613 (8427)
[  232.548055][ T8427] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  232.564688][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.572089][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.606773][ T8427] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  232.632949][ T8427] BTRFS info (device loop5): force clearing of disk cache
[  232.648964][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.656342][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.677675][ T8427] BTRFS info (device loop5): enabling auto defrag
[  232.684387][ T8427] BTRFS info (device loop5): enabling ssd optimizations
[  232.713055][ T8427] BTRFS info (device loop5): max_inline at 0
[  232.756924][ T8427] BTRFS info (device loop5): enabling disk space caching
[  232.773041][ T8427] BTRFS info (device loop5): disk space caching is enabled
[  232.885194][ T8264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  232.982679][ T8264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  233.043987][ T8427] BTRFS info (device loop5): rebuilding free space tree
[  233.052961][ T8459] loop4: detected capacity change from 0 to 128
[  233.147474][ T8430] loop1: detected capacity change from 0 to 40427
[  233.180142][ T8427] BTRFS info (device loop5): disabling free space tree
[  233.197669][ T8427] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  233.209299][ T8427] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  233.210415][ T8430] F2FS-fs (loop1): invalid crc value
[  233.231591][ T8459] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  233.290400][ T8459] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  233.331136][ T8430] F2FS-fs (loop1): Found nat_bits in checkpoint
[  233.340134][ T8459] fscrypt (loop4, inode 12): Unsupported encryption modes (contents 0, filenames 0)
[  233.510189][ T6247] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  233.572429][ T8430] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  233.827863][ T5776] syz-executor: attempt to access beyond end of device
[  233.827863][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  233.869375][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  233.902687][ T6749] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  234.049953][ T5785] udevd[5785]: symlink '../../loop4' '/dev/disk/by-diskseq/344.tmp-b7:4' failed: Read-only file system
[  234.112350][ T8264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.258131][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/343.tmp-b7:1' failed: Read-only file system
[  234.307993][ T8484] loop4: detected capacity change from 0 to 2048
[  234.326475][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system
[  234.354724][ T8264] veth0_vlan: entered promiscuous mode
[  234.422967][ T8264] veth1_vlan: entered promiscuous mode
[  234.503228][ T8484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.524609][ T5785] udevd[5785]: symlink '../../loop4' '/dev/disk/by-diskseq/345.tmp-b7:4' failed: Read-only file system
[  234.600243][ T8484] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.634147][ T8264] veth0_macvtap: entered promiscuous mode
[  234.645613][ T8264] veth1_macvtap: entered promiscuous mode
[  234.660420][ T5785] udevd[5785]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  234.675589][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.719186][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.748660][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/343.tmp-b7:1' failed: Read-only file system
[  234.767601][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.793857][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.820468][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/343.tmp-b7:1' failed: Read-only file system
[  234.852395][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.883425][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.934835][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.974656][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.004641][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/341.tmp-b7:5' failed: Read-only file system
[  235.026791][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.065041][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.107658][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/341.tmp-b7:5' failed: Read-only file system
[  235.115098][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.142050][ T8264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.166575][ T8264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.189222][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.215711][ T6247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.255375][ T8264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.313392][ T8264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.336520][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/347.tmp-b7:1' failed: Read-only file system
[  235.357834][ T8264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.401386][ T8264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.444498][ T8499] loop5: detected capacity change from 0 to 1024
[  235.746465][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.782871][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.891803][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.923828][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.954616][ T1083] hfsplus: b-tree write err: -5, ino 25
[  235.980287][ T1083] hfsplus: b-tree write err: -5, ino 4
[  236.005974][ T1083] hfsplus: b-tree write err: -5, ino 2
[  236.029840][ T1083] hfsplus: b-tree write err: -5, ino 26
[  236.806483][    T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  236.955768][ T8525] loop1: detected capacity change from 0 to 32768
[  236.972668][ T8525] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.628 (8525)
[  237.003496][    T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  237.028553][ T8525] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  237.056856][ T8525] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  237.066530][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.083757][ T8525] BTRFS info (device loop1): force clearing of disk cache
[  237.090607][    T9] usb 5-1: Product: syz
[  237.095311][    T9] usb 5-1: Manufacturer: syz
[  237.100394][    T9] usb 5-1: SerialNumber: syz
[  237.108525][    T9] usb 5-1: config 0 descriptor??
[  237.114062][ T8525] BTRFS info (device loop1): enabling auto defrag
[  237.125403][ T8525] BTRFS info (device loop1): enabling ssd optimizations
[  237.134361][ T8525] BTRFS info (device loop1): max_inline at 0
[  237.141736][ T8525] BTRFS info (device loop1): enabling disk space caching
[  237.149393][ T8525] BTRFS info (device loop1): disk space caching is enabled
[  237.327006][ T8525] BTRFS info (device loop1): rebuilding free space tree
[  237.353148][    T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  237.379376][ T8525] BTRFS info (device loop1): disabling free space tree
[  237.399828][ T8525] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  237.447375][ T8525] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  237.771215][    T9] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32
[  237.810998][    T9] usb 5-1: USB disconnect, device number 8
[  238.078603][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  238.234614][ T5771] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop1 scanned by udevd (5771)
[  238.379358][ T8577] sctp: [Deprecated]: syz.1.636 (pid 8577) Use of struct sctp_assoc_value in delayed_ack socket option.
[  238.379358][ T8577] Use struct sctp_sack_info instead
[  238.840949][ T8594] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.641'.
[  238.878565][ T8594] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  238.926358][ T8594] openvswitch: netlink: Message has 4 unknown bytes.
[  239.161813][ T5893] udevd[5893]: symlink '../../loop4' '/dev/disk/by-diskseq/348.tmp-b7:4' failed: Read-only file system
[  239.178985][ T8571] loop5: detected capacity change from 0 to 32768
[  239.347576][ T8571] find_entry called with index = 0
[  239.355055][ T8571] find_entry called with index = 0
[  239.418664][ T8571] read_mapping_page failed!
[  239.423344][ T8571] ERROR: (device loop5): txCommit: 
[  239.423344][ T8571] 
[  239.468199][ T5893] udevd[5893]: symlink '../../loop0' '/dev/disk/by-diskseq/308.tmp-b7:0' failed: Read-only file system
[  239.564457][ T5893] udevd[5893]: symlink '../../loop4' '/dev/disk/by-diskseq/348.tmp-b7:4' failed: Read-only file system
[  239.617369][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/351.tmp-b7:1' failed: Read-only file system
[  239.658308][ T5785] udevd[5785]: symlink '../../loop5' '/dev/disk/by-diskseq/353.tmp-b7:5' failed: Read-only file system
[  239.680865][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/351.tmp-b7:1' failed: Read-only file system
[  239.732153][ T5785] udevd[5785]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system
[  239.752522][ T5893] udevd[5893]: symlink '../../loop0' '/dev/disk/by-diskseq/308.tmp-b7:0' failed: Read-only file system
[  239.765979][ T8611] loop4: detected capacity change from 0 to 4096
[  239.782361][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/352.tmp-b7:1' failed: Read-only file system
[  239.797348][ T8611] EXT4-fs: inline encryption not supported
[  240.033011][ T8573] udevd[8573]: symlink '../../loop4' '/dev/disk/by-diskseq/354.tmp-b7:4' failed: Read-only file system
[  240.282528][ T8611] ext4: Unknown parameter 'nouser_xattr'
[  240.569221][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.651'.
[  240.626490][ T5834] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  240.746056][ T8609] loop1: detected capacity change from 0 to 32768
[  240.783540][ T8609] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  240.796986][ T8633] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  240.805402][ T8609] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  240.836331][ T5834] usb 6-1: Using ep0 maxpacket: 16
[  240.849927][ T8609] BTRFS info (device loop1): force clearing of disk cache
[  240.861239][ T5834] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  240.876636][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.893013][ T8609] BTRFS info (device loop1): enabling auto defrag
[  240.910135][ T5834] usb 6-1: config 0 descriptor??
[  240.915302][ T8609] BTRFS info (device loop1): enabling ssd optimizations
[  240.942868][ T8609] BTRFS info (device loop1): max_inline at 0
[  240.954167][ T5834] gspca_main: sonixj-2.14.0 probing 0471:0327
[  240.963120][ T8609] BTRFS info (device loop1): enabling disk space caching
[  240.983454][ T8609] BTRFS info (device loop1): disk space caching is enabled
[  241.156972][ T8609] BTRFS info (device loop1): rebuilding free space tree
[  241.242966][ T8609] BTRFS info (device loop1): disabling free space tree
[  241.256122][ T8656] netlink: 136 bytes leftover after parsing attributes in process `syz.4.655'.
[  241.286533][ T8609] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  241.317773][ T8609] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  241.523524][ T8658] loop0: detected capacity change from 0 to 512
[  241.595564][ T8658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.719126][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  241.740689][ T8658] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  241.930597][ T8264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.962822][ T5834] usb 6-1: USB disconnect, device number 5
[  242.266596][    T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  242.486274][    T8] usb 5-1: Using ep0 maxpacket: 16
[  242.498559][    T8] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  242.526543][    T8] usb 5-1: config 0 has no interface number 0
[  242.532750][    T8] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.579538][    T8] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  242.620277][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.649365][    T8] usb 5-1: config 0 descriptor??
[  242.897724][ T8674] loop1: detected capacity change from 0 to 32768
[  243.084338][    T8] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input2
[  243.512129][   T28] usb 5-1: USB disconnect, device number 9
[  243.717528][ T8697] Bluetooth: MGMT ver 1.22
[  243.899333][ T8686] loop1: detected capacity change from 0 to 32768
[  243.916878][ T5768] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  243.927637][ T8686] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.668 (8686)
[  243.958743][ T8686] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  243.976584][ T8686] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  243.993851][ T8686] BTRFS info (device loop1): force clearing of disk cache
[  244.004024][ T8686] BTRFS info (device loop1): enabling auto defrag
[  244.016331][ T8686] BTRFS info (device loop1): enabling ssd optimizations
[  244.034806][ T8686] BTRFS info (device loop1): max_inline at 0
[  244.065354][ T8686] BTRFS info (device loop1): enabling disk space caching
[  244.074192][ T8686] BTRFS info (device loop1): disk space caching is enabled
[  244.106520][ T5768] usb 6-1: Using ep0 maxpacket: 16
[  244.134766][ T5768] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.162818][ T5768] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  244.182569][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:1' failed: Read-only file system
[  244.208668][ T5768] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  244.224231][ T5768] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.232949][ T5768] usb 6-1: Product: syz
[  244.245868][ T5768] usb 6-1: Manufacturer: syz
[  244.251199][ T5768] usb 6-1: SerialNumber: syz
[  244.311715][ T8686] BTRFS info (device loop1): rebuilding free space tree
[  244.377360][ T8686] BTRFS info (device loop1): disabling free space tree
[  244.384649][ T8686] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  244.435653][ T5785] udevd[5785]: symlink '../../loop4' '/dev/disk/by-diskseq/356.tmp-b7:4' failed: Read-only file system
[  244.454854][ T8686] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  244.479432][ T8573] udevd[8573]: symlink '../../loop0' '/dev/disk/by-diskseq/359.tmp-b7:0' failed: Read-only file system
[  244.501430][ T5768] usb 6-1: 0:2 : does not exist
[  244.524109][ T5768] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  244.586696][ T5768] usb 6-1: USB disconnect, device number 6
[  244.690631][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  244.768878][ T5893] udevd[5893]: symlink '../../loop0' '/dev/disk/by-diskseq/359.tmp-b7:0' failed: Read-only file system
[  244.854503][ T5776] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  244.944232][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/363.tmp-b7:1' failed: Read-only file system
[  244.991306][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/363.tmp-b7:1' failed: Read-only file system
[  245.141609][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/355.tmp-b7:5' failed: Read-only file system
[  245.147320][   T28] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  245.178031][ T8724] loop4: detected capacity change from 0 to 32768
[  245.191203][ T8724] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.679 (8724)
[  245.212621][ T8724] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  245.249128][ T8724] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  245.260715][ T8724] BTRFS info (device loop4): using free space tree
[  245.398069][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/355.tmp-b7:5' failed: Read-only file system
[  245.416484][   T28] usb 1-1: Using ep0 maxpacket: 8
[  245.431858][   T28] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  245.450746][   T28] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  245.461925][ T5785] udevd[5785]: symlink '../../loop1' '/dev/disk/by-diskseq/364.tmp-b7:1' failed: Read-only file system
[  245.473348][   T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  245.488865][   T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  245.499062][   T28] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  245.514383][   T28] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  245.523719][   T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.554192][ T8724] BTRFS info (device loop4): enabling ssd optimizations
[  245.576315][ T8724] BTRFS info (device loop4): auto enabling async discard
[  245.619312][ T8747] netlink: 16 bytes leftover after parsing attributes in process `syz.5.683'.
[  245.752781][ T6247] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  245.766293][   T28] usb 1-1: usb_control_msg returned -32
[  245.771976][   T28] usbtmc 1-1:16.0: can't read capabilities
[  245.795801][ T8748] loop1: detected capacity change from 0 to 4096
[  246.816407][    T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  247.016335][    T8] usb 5-1: Using ep0 maxpacket: 16
[  247.031571][    T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  247.065987][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  247.088720][    T8] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  247.107709][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.115926][    T8] usb 5-1: Product: syz
[  247.125499][    T8] usb 5-1: Manufacturer: syz
[  247.130836][    T8] usb 5-1: SerialNumber: syz
[  247.153994][    T8] usb 5-1: config 0 descriptor??
[  247.254949][ T8777] loop1: detected capacity change from 0 to 4096
[  247.432330][    T8] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8
[  247.465074][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.696'.
[  247.475554][ T8780] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  247.485243][ T8780] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  247.725643][ T8785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.697'.
[  247.736542][ T8785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.697'.
[  247.786417][    T8] rc_core: IR keymap rc-imon-pad not found
[  247.799694][    T8] Registered IR keymap rc-empty
[  247.816470][    T8] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  247.856336][    T8] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  247.910403][    T8] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  247.925814][  T787] usb 1-1: USB disconnect, device number 7
[  247.961871][    T8] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9
[  248.007978][    T8] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:10> initialized
[  248.107055][ T5782] Bluetooth: hci0: command 0x0406 tx timeout
[  248.334609][    C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  248.335679][   T28] usb 5-1: USB disconnect, device number 10
[  248.514182][ T8783] loop5: detected capacity change from 0 to 32768
[  248.568160][ T8796] syzkaller1: entered promiscuous mode
[  248.597823][ T8796] syzkaller1: entered allmulticast mode
[  248.606452][ T8783] read_mapping_page failed!
[  248.611616][ T8783] ERROR: (device loop5): txCommit: 
[  248.611616][ T8783] 
[  249.081913][ T8805] loop4: detected capacity change from 0 to 256
[  249.147965][ T8805] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d)
[  249.245663][ T5893] udevd[5893]: symlink '../../loop4' '/dev/disk/by-diskseq/373.tmp-b7:4' failed: Read-only file system
[  249.297855][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/372.tmp-b7:5' failed: Read-only file system
[  249.298468][ T5893] udevd[5893]: symlink '../../loop4' '/dev/disk/by-uuid/1234-1234.tmp-b7:4' failed: Read-only file system
[  249.424408][ T5771] udevd[5771]: symlink '../../loop4' '/dev/disk/by-diskseq/373.tmp-b7:4' failed: Read-only file system
[  249.500977][ T5771] udevd[5771]: symlink '../../loop4' '/dev/disk/by-diskseq/373.tmp-b7:4' failed: Read-only file system
[  249.525930][ T5893] udevd[5893]: symlink '../../loop5' '/dev/disk/by-diskseq/372.tmp-b7:5' failed: Read-only file system
[  249.583160][ T5771] udevd[5771]: symlink '../../loop4' '/dev/disk/by-diskseq/373.tmp-b7:4' failed: Read-only file system
[  249.904037][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/372.tmp-b7:5' failed: Read-only file system
[  249.922605][ T8809] loop0: detected capacity change from 0 to 32768
[  249.950295][ T8809] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.710 (8809)
[  250.063422][ T8809] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.105615][ T8809] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  250.135713][ T5893] udevd[5893]: symlink '../../loop0' '/dev/disk/by-diskseq/375.tmp-b7:0' failed: Read-only file system
[  250.152622][ T8809] BTRFS info (device loop0): setting nodatasum
[  250.161980][ T8809] BTRFS info (device loop0): force zlib compression, level 3
[  250.175530][ T8809] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  250.198361][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/372.tmp-b7:5' failed: Read-only file system
[  250.216397][ T8807] loop1: detected capacity change from 0 to 40427
[  250.233975][ T8809] BTRFS info (device loop0): use lzo compression, level 0
[  250.241648][ T8809] BTRFS info (device loop0): turning on flush-on-commit
[  250.249619][ T8809] BTRFS info (device loop0): enabling auto defrag
[  250.257636][ T8809] BTRFS info (device loop0): max_inline at 4096
[  250.264386][ T8809] BTRFS info (device loop0): using free space tree
[  250.275305][ T8807] F2FS-fs (loop1): Found nat_bits in checkpoint
[  250.316783][ T1082] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.507018][ T8809] BTRFS info (device loop0): enabling ssd optimizations
[  250.544367][ T8807] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  250.639527][ T1082] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.820365][ T5776] syz-executor: attempt to access beyond end of device
[  250.820365][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  250.854845][ T1082] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.878109][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  250.905701][ T8264] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  251.059235][ T1082] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.867004][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  251.886794][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  251.910449][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  251.934524][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  251.945527][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  251.974360][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  252.859306][ T8884] Invalid argument reading file caps for ./file0
[  253.081223][ T8887] pim6reg: entered allmulticast mode
[  253.150656][ T8893] loop5: detected capacity change from 0 to 2048
[  253.162400][ T8887] pim6reg: left allmulticast mode
[  253.220023][ T8894] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  253.342362][ T8895] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12
[  253.379958][ T8895] Remounting filesystem read-only
[  253.549598][ T8895] NILFS (loop5): error -2 truncating bmap (ino=16)
[  253.710990][ T6749] NILFS (loop5): discard dirty page: offset=4096, ino=6
[  253.722106][ T6749] NILFS (loop5): discard dirty block: blocknr=39, size=1024
[  253.750143][ T6749] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  253.776668][ T6749] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  253.800351][ T6749] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  253.835288][ T6749] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  253.893410][ T8854] chnl_net:caif_netlink_parms(): no params data found
[  253.901679][ T6749] NILFS (loop5): discard dirty page: offset=0, ino=3
[  253.922340][ T6749] NILFS (loop5): discard dirty block: blocknr=42, size=1024
[  253.942313][ T6749] NILFS (loop5): discard dirty block: blocknr=43, size=1024
[  253.968043][ T6749] NILFS (loop5): discard dirty block: blocknr=44, size=1024
[  253.986279][ T6749] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  254.003854][ T6749] NILFS (loop5): discard dirty page: offset=4096, ino=3
[  254.017091][ T6749] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  254.044948][ T6749] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  254.064605][ T6749] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  254.082756][ T6749] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  254.106506][ T5769] Bluetooth: hci0: command tx timeout
[  254.325334][ T5893] udevd[5893]: symlink '../../loop0' '/dev/disk/by-diskseq/377.tmp-b7:0' failed: Read-only file system
[  254.337228][   T27] audit: type=1326 audit(2000000073.090:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff32bd3db99 code=0x7ffc0000
[  254.401673][   T27] audit: type=1326 audit(2000000073.090:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff32bd3db99 code=0x7ffc0000
[  254.483788][   T27] audit: type=1326 audit(2000000073.090:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff32bd3db99 code=0x7ffc0000
[  254.558714][ T1082] hsr_slave_0: left promiscuous mode
[  254.581000][ T1082] hsr_slave_1: left promiscuous mode
[  254.595050][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.614632][   T27] audit: type=1326 audit(2000000073.090:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff32bd3db99 code=0x7ffc0000
[  254.618618][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.684006][   T27] audit: type=1326 audit(2000000073.090:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff32bd3db99 code=0x7ffc0000
[  254.707266][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.743528][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.747312][   T27] audit: type=1326 audit(2000000073.090:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff32bd3db99 code=0x7ffc0000
[  254.774098][ T1082] bridge_slave_1: left promiscuous mode
[  254.786864][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.844415][   T27] audit: type=1326 audit(2000000073.090:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff32bd3db99 code=0x7ffc0000
[  254.884010][ T1082] bridge_slave_0: left allmulticast mode
[  254.930233][ T1082] bridge_slave_0: left promiscuous mode
[  254.937257][   T27] audit: type=1326 audit(2000000073.090:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff32bd3db99 code=0x7ffc0000
[  254.949569][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.046785][   T27] audit: type=1326 audit(2000000073.090:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff32bd3db99 code=0x7ffc0000
[  255.084249][ T1082] veth1_macvtap: left promiscuous mode
[  255.096437][ T1082] veth0_macvtap: left promiscuous mode
[  255.108972][ T1082] veth1_vlan: left promiscuous mode
[  255.156443][ T1082] veth0_vlan: left promiscuous mode
[  255.166366][   T27] audit: type=1326 audit(2000000073.090:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8915 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff32bd3db99 code=0x7ffc0000
[  255.260885][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system
[  255.541390][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system
[  255.651556][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/378.tmp-b7:1' failed: Read-only file system
[  255.791364][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system
[  255.983422][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/378.tmp-b7:1' failed: Read-only file system
[  256.090596][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system
[  256.192214][ T5769] Bluetooth: hci0: command tx timeout
[  256.200424][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/378.tmp-b7:1' failed: Read-only file system
[  256.270501][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  256.282195][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  256.288984][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system
[  256.403409][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/378.tmp-b7:1' failed: Read-only file system
[  256.762187][ T8959] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22)
[  257.113402][ T1082] team0 (unregistering): Port device team_slave_1 removed
[  257.222142][ T1082] team0 (unregistering): Port device team_slave_0 removed
[  257.290460][ T1082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  257.357333][ T1082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.469778][ T5768] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  257.701977][ T5768] usb 2-1: Using ep0 maxpacket: 8
[  257.711171][ T5768] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  257.724322][ T5768] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  257.741500][ T5768] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  257.781281][ T5768] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  257.795343][ T5768] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  257.811528][ T5768] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  257.826440][ T5768] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  257.835959][ T5768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.004744][ T1082] bond0 (unregistering): Released all slaves
[  258.078604][ T5768] usb 2-1: usb_control_msg returned -32
[  258.086004][ T5768] usbtmc 2-1:16.0: can't read capabilities
[  258.266332][ T5769] Bluetooth: hci0: command tx timeout
[  258.477472][ T8854] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.518469][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.546164][ T8854] bridge_slave_0: entered allmulticast mode
[  258.554841][ T8854] bridge_slave_0: entered promiscuous mode
[  258.572305][ T8854] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.580090][ T8854] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.588528][ T8854] bridge_slave_1: entered allmulticast mode
[  258.598376][ T8854] bridge_slave_1: entered promiscuous mode
[  258.762740][ T8854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.810287][ T8854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.934840][ T8854] team0: Port device team_slave_0 added
[  258.982375][ T8854] team0: Port device team_slave_1 added
[  259.049741][ T8993] netlink: 428 bytes leftover after parsing attributes in process `syz.5.761'.
[  259.061251][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.078839][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.146415][ T8854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.177569][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.5.761'.
[  259.180981][ T8854] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.215930][ T8854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.274462][ T8854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.332857][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-diskseq/377.tmp-b7:0' failed: Read-only file system
[  259.371187][ T5893] udevd[5893]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system
[  259.507342][ T8854] hsr_slave_0: entered promiscuous mode
[  259.514606][ T8854] hsr_slave_1: entered promiscuous mode
[  259.530234][ T8854] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  259.543763][ T8854] Cannot create hsr debugfs directory
[  259.731398][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system
[  259.932273][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system
[  260.163160][ T9001] loop0: detected capacity change from 0 to 32768
[  260.172312][ T9001] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.764 (9001)
[  260.195829][ T9001] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  260.208361][ T9001] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  260.221913][ T8854] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  260.250388][ T9001] BTRFS info (device loop0): enabling disk space caching
[  260.257224][ T8854] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  260.278686][    T8] usb 2-1: USB disconnect, device number 10
[  260.299966][ T8854] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  260.320651][ T8854] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  260.325732][ T9001] BTRFS info (device loop0): force clearing of disk cache
[  260.346421][ T5769] Bluetooth: hci0: command tx timeout
[  260.357399][ T9001] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  260.378742][ T9001] BTRFS info (device loop0): use zstd compression, level 3
[  260.397115][ T9001] BTRFS info (device loop0): disk space caching is enabled
[  260.413675][ T5785] udevd[5785]: symlink '../../loop1' '/dev/disk/by-diskseq/378.tmp-b7:1' failed: Read-only file system
[  260.484666][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-diskseq/381.tmp-b7:0' failed: Read-only file system
[  260.558144][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-uuid/24c7a497-3402-47dd-bef8-82358f5f30e0.tmp-b7:0' failed: Read-only file system
[  260.596540][ T9001] BTRFS info (device loop0): enabling ssd optimizations
[  260.615489][ T9001] BTRFS info (device loop0): auto enabling async discard
[  260.652694][ T8854] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.672088][ T9001] BTRFS info (device loop0): rebuilding free space tree
[  260.713556][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/378.tmp-b7:1' failed: Read-only file system
[  260.730985][ T9001] BTRFS info (device loop0): disabling free space tree
[  260.743160][ T8854] 8021q: adding VLAN 0 to HW filter on device team0
[  260.753000][ T9001] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  260.829558][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.836470][ T9001] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  260.847237][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.951514][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/378.tmp-b7:1' failed: Read-only file system
[  261.008334][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.015644][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.033343][ T5785] udevd[5785]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system
[  261.197702][ T8264] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  262.114442][ T8854] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.536658][ T5834] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  262.746705][ T5834] usb 2-1: Using ep0 maxpacket: 32
[  262.774573][ T5834] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  262.807850][ T5834] usb 2-1: config 0 has no interface number 0
[  262.840526][ T5834] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  262.863455][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.886344][ T5834] usb 2-1: Product: syz
[  262.890615][ T5834] usb 2-1: Manufacturer: syz
[  262.922807][ T5834] usb 2-1: SerialNumber: syz
[  262.944986][ T5834] usb 2-1: config 0 descriptor??
[  262.965273][ T8854] veth0_vlan: entered promiscuous mode
[  262.976158][ T5834] smsc95xx v2.0.0
[  263.002417][ T8854] veth1_vlan: entered promiscuous mode
[  263.134375][ T8854] veth0_macvtap: entered promiscuous mode
[  263.169669][ T8854] veth1_macvtap: entered promiscuous mode
[  263.252269][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.263269][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.289379][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.303629][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.337228][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.355708][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.382161][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.445403][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.463859][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.532010][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.567547][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.604646][ T8854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.623916][ T8854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.656821][ T8854] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.701664][ T8854] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.721813][ T8854] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.735868][ T8854] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.756756][ T8854] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.813615][ T5834] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  263.916623][ T5836] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  263.945690][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.964990][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.015141][ T5834] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  264.038508][ T5834] smsc95xx: probe of 2-1:0.67 failed with error -71
[  264.055433][ T5834] usb 2-1: USB disconnect, device number 11
[  264.084253][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.102313][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.111701][ T5836] usb 1-1: Using ep0 maxpacket: 8
[  264.130480][ T5836] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  264.139457][ T5836] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  264.181561][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  264.214761][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  264.237311][ T5836] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  264.251667][ T5836] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  264.261290][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.362070][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system
[  264.403762][ T5785] udevd[5785]: symlink '../../loop6' '/dev/disk/by-diskseq/223.tmp-b7:6' failed: Read-only file system
[  264.532751][ T5836] usb 1-1: usb_control_msg returned -32
[  264.567767][ T5836] usbtmc 1-1:16.0: can't read capabilities
[  264.576925][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system
[  264.717387][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/378.tmp-b7:1' failed: Read-only file system
[  264.844734][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system
[  264.883712][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/378.tmp-b7:1' failed: Read-only file system
[  264.931078][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-diskseq/223.tmp-b7:6' failed: Read-only file system
[  265.088597][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system
[  265.143519][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/378.tmp-b7:1' failed: Read-only file system
[  265.215043][ T9147] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid'
[  265.215043][ T9147] 
[  265.343128][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-diskseq/223.tmp-b7:6' failed: Read-only file system
[  265.464263][ T9155] loop8: detected capacity change from 0 to 7
[  265.498054][ T9155] Dev loop8: unable to read RDB block 7
[  265.514215][ T9155]  loop8: unable to read partition table
[  265.524548][ T9155] loop8: partition table beyond EOD, truncated
[  265.559741][ T9155] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  265.724007][ T9162] loop1: detected capacity change from 0 to 1024
[  265.767555][ T9162] EXT4-fs: Ignoring removed bh option
[  265.807511][ T9162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.836112][ T9162] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  265.897045][ T9162] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.801: Freeing blocks not in datazone - block = 0, count = 16
[  266.015644][ T9169] syzkaller1: entered promiscuous mode
[  266.026026][ T9169] syzkaller1: entered allmulticast mode
[  266.082280][   T59] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm kworker/u4:4: bg 0: block 112: padding at end of block bitmap is not set
[  266.137517][   T59] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  266.154223][   T59] EXT4-fs (loop1): This should not happen!! Data will be lost
[  266.154223][   T59] 
[  266.164858][   T59] EXT4-fs (loop1): Total free blocks count 0
[  266.181472][   T59] EXT4-fs (loop1): Free/Dirty block details
[  266.196534][   T59] EXT4-fs (loop1): free_blocks=16
[  266.206887][   T59] EXT4-fs (loop1): dirty_blocks=16
[  266.218651][   T59] EXT4-fs (loop1): Block reservation details
[  266.233231][   T59] EXT4-fs (loop1): i_reserved_data_blocks=1
[  266.263155][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  266.347577][   T28] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  266.556420][   T28] usb 7-1: Using ep0 maxpacket: 8
[  266.567808][   T28] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  266.586427][   T28] usb 7-1: config 179 has no interface number 0
[  266.593083][   T28] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  266.612159][   T28] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  266.663449][   T28] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  266.698138][   T28] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  266.713391][ T5182] usb 1-1: USB disconnect, device number 8
[  266.778696][   T28] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  266.793090][ T9186] syzkaller1: entered promiscuous mode
[  266.817324][ T9186] syzkaller1: entered allmulticast mode
[  266.830487][   T28] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  266.840024][   T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.861034][ T9173] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  267.179818][   T28] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input10
[  267.316538][ T5182] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  267.328840][ T9202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.811'.
[  267.379777][ T9173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.387776][ T9202] (unnamed net_device) (uninitialized): option mode: invalid value (68)
[  267.439751][ T9173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.531260][    T8] usb 7-1: USB disconnect, device number 2
[  267.531266][    C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  267.531385][    C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  267.554567][    T8] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  267.563120][ T5182] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  267.591848][ T5182] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30
[  267.631118][ T5182] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  267.671446][ T9207] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  267.688530][ T5182] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  267.712881][ T5182] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.734759][ T5182] usb 1-1: Product: syz
[  267.761877][ T5182] usb 1-1: Manufacturer: syz
[  267.776257][ T5182] usb 1-1: SerialNumber: syz
[  267.798103][ T5182] cdc_ncm 1-1:1.0: skipping garbage
[  268.222856][ T9220] loop6: detected capacity change from 0 to 7
[  268.247363][    C0] blk_print_req_error: 18 callbacks suppressed
[  268.247382][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  268.262902][    C0] buffer_io_error: 12 callbacks suppressed
[  268.262918][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  268.309800][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  268.319373][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  268.329924][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  268.339385][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  268.350920][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  268.370593][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  268.380332][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  268.388782][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  268.398073][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  268.421280][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  268.430584][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  268.440886][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  268.450160][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  268.459750][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  268.469051][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  268.477982][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  268.487531][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  268.497214][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  268.515992][ T9220] ldm_validate_partition_table(): Disk read failed.
[  268.553676][ T9220] Dev loop6: unable to read RDB block 0
[  268.560263][ T9220]  loop6: unable to read partition table
[  268.605618][ T9220] loop6: partition table beyond EOD, truncated
[  268.614596][ T5782] Bluetooth: hci3: command 0x0406 tx timeout
[  268.632833][ T9220] loop_reread_partitions: partition scan of loop6 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ	œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5)
[  268.825482][ T5182] cdc_ncm 1-1:1.0: bind() failure
[  268.849761][ T5182] cdc_ncm: probe of 1-1:1.1 failed with error -71
[  268.869220][ T5182] cdc_mbim: probe of 1-1:1.1 failed with error -71
[  268.904372][ T5182] usbtest: probe of 1-1:1.1 failed with error -71
[  268.926704][ T5182] usb 1-1: USB disconnect, device number 9
[  269.016367][ T5836] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  269.206335][ T5836] usb 2-1: Using ep0 maxpacket: 32
[  269.220149][ T5836] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  269.236718][ T5836] usb 2-1: config 0 has no interface number 0
[  269.259344][ T5836] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  269.283719][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.304059][ T5836] usb 2-1: Product: syz
[  269.316092][ T5836] usb 2-1: Manufacturer: syz
[  269.326270][ T5836] usb 2-1: SerialNumber: syz
[  269.333735][ T5836] usb 2-1: config 0 descriptor??
[  269.359721][ T5836] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  269.438289][ T5893] udevd[5893]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system
[  269.495149][ T5893] udevd[5893]: symlink '../../loop0' '/dev/disk/by-diskseq/382.tmp-b7:0' failed: Read-only file system
[  269.571208][ T5836] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  269.607745][ T5836] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  269.723906][ T5893] udevd[5893]: symlink '../../loop6' '/dev/disk/by-diskseq/388.tmp-b7:6' failed: Read-only file system
[  269.850617][ T5893] udevd[5893]: symlink '../../loop0' '/dev/disk/by-diskseq/382.tmp-b7:0' failed: Read-only file system
[  269.954575][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/380.tmp-b7:5' failed: Read-only file system
[  270.010780][ T9260] loop0: detected capacity change from 0 to 1024
[  270.019071][ T5834] usb 2-1: USB disconnect, device number 12
[  270.026301][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  270.057855][ T9260] EXT4-fs: Ignoring removed bh option
[  270.080311][ T5834] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  270.103305][ T9265] loop5: detected capacity change from 0 to 256
[  270.121557][ T5834] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  270.157429][ T9260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.190516][ T5834] quatech2 2-1:0.51: device disconnected
[  270.234392][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-diskseq/389.tmp-b7:0' failed: Read-only file system
[  270.282593][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  270.304529][ T9265] FAT-fs (loop5): Directory bread(block 64) failed
[  270.312459][ T9265] FAT-fs (loop5): Directory bread(block 65) failed
[  270.325295][ T9265] FAT-fs (loop5): Directory bread(block 66) failed
[  270.349228][ T5893] udevd[5893]: symlink '../../loop5' '/dev/disk/by-diskseq/390.tmp-b7:5' failed: Read-only file system
[  270.378048][ T9265] FAT-fs (loop5): Directory bread(block 67) failed
[  270.416496][ T9265] FAT-fs (loop5): Directory bread(block 68) failed
[  270.433220][ T9265] FAT-fs (loop5): Directory bread(block 69) failed
[  270.442476][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-diskseq/389.tmp-b7:0' failed: Read-only file system
[  270.451567][ T9265] FAT-fs (loop5): Directory bread(block 70) failed
[  270.466101][ T8264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.482954][ T9265] FAT-fs (loop5): Directory bread(block 71) failed
[  270.493364][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  270.527048][ T9265] FAT-fs (loop5): Directory bread(block 72) failed
[  270.533675][ T9265] FAT-fs (loop5): Directory bread(block 73) failed
[  270.803645][ T9277] loop1: detected capacity change from 0 to 512
[  271.114528][ T9258] loop6: detected capacity change from 0 to 32768
[  271.150289][ T9283] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  271.174098][ T9258] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.829 (9258)
[  271.225712][ T9258] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  271.253233][ T9258] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  271.307133][ T9258] BTRFS info (device loop6): using free space tree
[  271.386855][   T28] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  271.464060][ T9258] BTRFS info (device loop6): enabling ssd optimizations
[  271.477022][ T9258] BTRFS info (device loop6): auto enabling async discard
[  271.613708][   T28] usb 6-1: Using ep0 maxpacket: 8
[  271.634436][   T28] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  271.672168][   T28] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  271.711758][   T28] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  271.733197][   T28] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  271.766047][   T28] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  271.814436][   T28] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  271.839604][ T8854] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  271.856287][   T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.025669][ T9315] loop0: detected capacity change from 0 to 256
[  272.116347][   T28] usb 6-1: usb_control_msg returned -32
[  272.122125][   T28] usbtmc 6-1:16.0: can't read capabilities
[  272.165851][ T9315] FAT-fs (loop0): Directory bread(block 64) failed
[  272.185215][ T9315] FAT-fs (loop0): Directory bread(block 65) failed
[  272.241470][ T9315] FAT-fs (loop0): Directory bread(block 66) failed
[  272.300994][ T9315] FAT-fs (loop0): Directory bread(block 67) failed
[  272.342407][ T9315] FAT-fs (loop0): Directory bread(block 68) failed
[  272.406573][ T9315] FAT-fs (loop0): Directory bread(block 69) failed
[  272.413331][ T9315] FAT-fs (loop0): Directory bread(block 70) failed
[  272.496290][ T9315] FAT-fs (loop0): Directory bread(block 71) failed
[  272.503048][ T9315] FAT-fs (loop0): Directory bread(block 72) failed
[  272.558940][ T9315] FAT-fs (loop0): Directory bread(block 73) failed
[  273.084011][   T27] kauditd_printk_skb: 173 callbacks suppressed
[  273.084028][   T27] audit: type=1326 audit(2000000091.850:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32bd9c819 code=0x7ffc0000
[  273.165879][   T27] audit: type=1326 audit(2000000091.850:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32bd9c819 code=0x7ffc0000
[  273.197521][   T27] audit: type=1326 audit(2000000091.910:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32bd9c819 code=0x7ffc0000
[  273.221415][   T27] audit: type=1326 audit(2000000091.920:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff32bd9c819 code=0x7ffc0000
[  273.252180][   T27] audit: type=1326 audit(2000000091.920:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32bd9c819 code=0x7ffc0000
[  273.300749][   T27] audit: type=1326 audit(2000000091.920:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32bd9c819 code=0x7ffc0000
[  273.378436][   T27] audit: type=1326 audit(2000000091.920:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32bd9c819 code=0x7ffc0000
[  273.448092][   T27] audit: type=1326 audit(2000000091.920:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32bd9c819 code=0x7ffc0000
[  273.511279][   T27] audit: type=1326 audit(2000000091.920:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32bd9c819 code=0x7ffc0000
[  273.539098][   T27] audit: type=1326 audit(2000000091.920:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff32bd9c819 code=0x7ffc0000
[  273.603943][ T9342] raw_sendmsg: syz.1.849 forgot to set AF_INET. Fix it!
[  274.176741][ T9348] loop0: detected capacity change from 0 to 32768
[  274.217001][ T9348] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.852 (9348)
[  274.355200][  T787] usb 6-1: USB disconnect, device number 7
[  274.490953][ T5785] udevd[5785]: symlink '../../loop5' '/dev/disk/by-diskseq/393.tmp-b7:5' failed: Read-only file system
[  274.623358][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/394.tmp-b7:1' failed: Read-only file system
[  274.660794][ T9348] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  274.671447][ T9348] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  274.680329][ T9348] BTRFS info (device loop0): using free space tree
[  274.700116][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-diskseq/399.tmp-b7:0' failed: Read-only file system
[  274.758318][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:0' failed: Read-only file system
[  274.882135][ T9346] loop6: detected capacity change from 0 to 131072
[  274.897916][ T9346] F2FS-fs (loop6): invalid crc value
[  274.922665][ T5893] udevd[5893]: symlink '../../loop5' '/dev/disk/by-diskseq/393.tmp-b7:5' failed: Read-only file system
[  274.971852][ T9346] F2FS-fs (loop6): Found nat_bits in checkpoint
[  274.991150][ T9348] BTRFS info (device loop0): enabling ssd optimizations
[  274.998451][ T9348] BTRFS info (device loop0): auto enabling async discard
[  275.051958][ T9346] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  275.138654][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/394.tmp-b7:1' failed: Read-only file system
[  275.151842][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.856'.
[  275.242051][ T9377] ipvlan2: entered allmulticast mode
[  275.296479][ T9377] syz_tun: entered allmulticast mode
[  275.347098][ T8264] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  275.388772][ T5785] udevd[5785]: symlink '../../loop6' '/dev/disk/by-diskseq/400.tmp-b7:6' failed: Read-only file system
[  275.421764][ T5785] udevd[5785]: symlink '../../loop6' '/dev/disk/by-uuid/0dc345c3-ee38-4114-bfc6-1d471003262c.tmp-b7:6' failed: Read-only file system
[  275.766732][ T5771] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (5771)
[  275.813102][ T5893] udevd[5893]: symlink '../../loop6' '/dev/disk/by-diskseq/400.tmp-b7:6' failed: Read-only file system
[  275.839569][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-diskseq/399.tmp-b7:0' failed: Read-only file system
[  275.964852][ T9386] loop5: detected capacity change from 0 to 512
[  276.017211][ T9386] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  276.060537][ T9386] EXT4-fs (loop5): 1 truncate cleaned up
[  276.114511][ T9386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.290715][ T5836] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  276.353171][ T6749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.496805][ T5836] usb 1-1: Using ep0 maxpacket: 16
[  276.517213][ T5836] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  276.545413][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.574761][ T5836] usb 1-1: Product: syz
[  276.599959][ T5836] usb 1-1: Manufacturer: syz
[  276.604651][ T5836] usb 1-1: SerialNumber: syz
[  276.618832][ T9379] loop1: detected capacity change from 0 to 32768
[  276.637898][ T5836] usb 1-1: config 0 descriptor??
[  276.657066][ T5836] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  276.696681][ T5836] usb 1-1: Detected FT-X
[  276.755896][ T9379] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  276.890123][ T5836] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  276.954161][ T9379] XFS (loop1): Ending clean mount
[  276.970362][ T9379] XFS (loop1): Quotacheck needed: Please wait.
[  277.098910][ T9379] XFS (loop1): Quotacheck: Done.
[  277.248288][ T5776] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  277.389940][ T5836] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  277.582935][    T8] usb 1-1: USB disconnect, device number 10
[  277.616530][    T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  277.643529][    T8] ftdi_sio 1-1:0.0: device disconnected
[  278.102476][ T9430] loop5: detected capacity change from 0 to 256
[  278.127486][ T9430] exfat: Deprecated parameter 'namecase'
[  278.186310][ T9430] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  278.210531][ T9420] loop6: detected capacity change from 0 to 32768
[  278.299599][ T9420] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  278.410120][ T9420] XFS (loop6): Ending clean mount
[  278.469617][ T9420] XFS (loop6): Quotacheck needed: Please wait.
[  278.624949][ T9420] XFS (loop6): Quotacheck: Done.
[  278.708624][ T9420] XFS (loop6): User initiated shutdown received.
[  278.715139][ T9420] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  278.766673][ T9420] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  278.901425][ T8854] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  279.521829][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-diskseq/410.tmp-b7:6' failed: Read-only file system
[  279.736175][ T9461] netlink: 16 bytes leftover after parsing attributes in process `syz.6.877'.
[  279.935044][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-diskseq/410.tmp-b7:6' failed: Read-only file system
[  280.362416][ T9457] loop0: detected capacity change from 0 to 131072
[  280.419750][ T9457] F2FS-fs (loop0): invalid crc value
[  280.434946][ T9457] F2FS-fs (loop0): Found nat_bits in checkpoint
[  280.499466][ T5893] udevd[5893]: symlink '../../loop6' '/dev/disk/by-diskseq/410.tmp-b7:6' failed: Read-only file system
[  280.531890][ T9457] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  280.557926][ T9457] F2FS-fs (loop0): lookup inode (7) has corrupted xattr
[  280.632136][    T8] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  280.679667][    T8] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  280.727191][ T9456] loop5: detected capacity change from 0 to 40427
[  280.776479][ T9456] F2FS-fs (loop5): heap/no_heap options were deprecated
[  280.816857][ T9456] F2FS-fs (loop5): build fault injection attr: rate: 19, type: 0x7ffff
[  280.825685][ T9456] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x77e8c
[  280.892066][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-diskseq/411.tmp-b7:0' failed: Read-only file system
[  280.936267][ T9456] F2FS-fs (loop5): invalid crc value
[  280.968746][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-uuid/7d96804d-fc78-4d7b-ba96-ee448261d02c.tmp-b7:0' failed: Read-only file system
[  281.016585][ T9456] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0
[  281.052728][ T5785] udevd[5785]: symlink '../../loop5' '/dev/disk/by-diskseq/412.tmp-b7:5' failed: Read-only file system
[  281.080051][ T9456] F2FS-fs (loop5): Found nat_bits in checkpoint
[  281.090607][ T9459] loop1: detected capacity change from 0 to 40427
[  281.103499][ T5785] udevd[5785]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system
[  281.157109][ T9459] F2FS-fs (loop1): invalid crc value
[  281.223382][ T9459] F2FS-fs (loop1): Found nat_bits in checkpoint
[  281.263194][ T9456] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650
[  281.362014][ T9484] 8021q: adding VLAN 0 to HW filter on device bond1
[  281.392681][    C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40
[  281.481873][ T9456] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  281.499251][ T5785] udevd[5785]: symlink '../../loop5' '/dev/disk/by-diskseq/412.tmp-b7:5' failed: Read-only file system
[  281.557797][ T5785] udevd[5785]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system
[  281.600769][ T9459] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  281.610333][ T9456] F2FS-fs (loop5): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910
[  281.647709][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/414.tmp-b7:1' failed: Read-only file system
[  281.747701][ T9493] syz.5.878: attempt to access beyond end of device
[  281.747701][ T9493] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  281.799192][ T5776] syz-executor: attempt to access beyond end of device
[  281.799192][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  281.836495][ T9493] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of f2fs_mpage_readpages+0x1cf6/0x1ea0
[  281.860849][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  281.891775][ T9493] syz.5.878: attempt to access beyond end of device
[  281.891775][ T9493] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  282.099979][ T6749] syz-executor: attempt to access beyond end of device
[  282.099979][ T6749] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  282.149588][ T6749] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  283.118520][ T9518] loop6: detected capacity change from 0 to 1024
[  283.323544][ T9518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  283.389712][ T9518] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.439531][ T9518] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: comm syz.6.895: lblock 0 mapped to illegal pblock 0 (length 1)
[  283.513832][ T9518] EXT4-fs (loop6): Remounting filesystem read-only
[  284.100937][ T8854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  284.540130][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/415.tmp-b7:1' failed: Read-only file system
[  284.620662][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-diskseq/413.tmp-b7:0' failed: Read-only file system
[  284.756356][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/415.tmp-b7:1' failed: Read-only file system
[  284.902421][ T9538] loop5: detected capacity change from 0 to 32768
[  284.935394][   T27] kauditd_printk_skb: 15 callbacks suppressed
[  284.935409][   T27] audit: type=1326 audit(2000000103.700:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9561 comm="syz.1.904" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff32bd9c819 code=0x0
[  285.020729][ T9538] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  285.214110][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/419.tmp-b7:5' failed: Read-only file system
[  285.244380][ T9538] XFS (loop5): Ending clean mount
[  285.266095][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:5' failed: Read-only file system
[  285.324673][ T5785] udevd[5785]: symlink '../../loop6' '/dev/disk/by-diskseq/418.tmp-b7:6' failed: Read-only file system
[  285.502182][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/419.tmp-b7:5' failed: Read-only file system
[  285.528324][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:5' failed: Read-only file system
[  285.621404][ T6749] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  285.775398][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/415.tmp-b7:1' failed: Read-only file system
[  285.792461][ T5893] udevd[5893]: symlink '../../loop5' '/dev/disk/by-diskseq/419.tmp-b7:5' failed: Read-only file system
[  286.132076][ T9596] veth0: entered allmulticast mode
[  286.167648][ T9598] netlink: 14 bytes leftover after parsing attributes in process `syz.5.906'.
[  286.400218][ T9604] netlink: 'syz.1.911': attribute type 1 has an invalid length.
[  286.411563][ T9604] netlink: 'syz.1.911': attribute type 2 has an invalid length.
[  286.715087][ T9618] netlink: 'syz.5.915': attribute type 11 has an invalid length.
[  286.808412][   T28] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  287.047045][   T28] usb 1-1: Using ep0 maxpacket: 16
[  287.059292][   T28] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  287.077679][   T28] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  287.097440][   T28] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  287.122708][   T28] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  287.136268][   T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.151840][   T28] usb 1-1: Product: syz
[  287.163671][   T28] usb 1-1: Manufacturer: syz
[  287.176378][   T28] usb 1-1: SerialNumber: syz
[  287.607531][   T28] usb 1-1: 0:2 : does not exist
[  288.222191][ T9638] loop6: detected capacity change from 0 to 40427
[  288.233511][ T9638] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  288.252940][ T9638] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  288.277019][ T9638] F2FS-fs (loop6): invalid crc value
[  288.326610][   T28] usb 1-1: USB disconnect, device number 11
[  288.591547][ T9638] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  288.608758][ T9638] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  288.658185][   T27] audit: type=1800 audit(2000000107.430:334): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.920" name="file1" dev="loop6" ino=10 res=0 errno=0
[  288.673518][ T9638] syz.6.920: attempt to access beyond end of device
[  288.673518][ T9638] loop6: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  288.756711][ T8854] syz-executor: attempt to access beyond end of device
[  288.756711][ T8854] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  288.786923][ T8854] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  289.315300][ T9656] loop5: detected capacity change from 0 to 40427
[  289.362493][ T9656] F2FS-fs (loop5): invalid crc value
[  289.398554][ T9656] F2FS-fs (loop5): Found nat_bits in checkpoint
[  289.740002][ T9656] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  289.773147][ T5893] udevd[5893]: symlink '../../loop6' '/dev/disk/by-diskseq/423.tmp-b7:6' failed: Read-only file system
[  289.810029][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/424.tmp-b7:5' failed: Read-only file system
[  289.882167][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system
[  290.048920][ T6749] syz-executor: attempt to access beyond end of device
[  290.048920][ T6749] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  290.119402][ T6749] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  290.168638][ T5834] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  290.313480][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/424.tmp-b7:5' failed: Read-only file system
[  290.386449][ T5834] usb 7-1: Using ep0 maxpacket: 32
[  290.405126][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/415.tmp-b7:1' failed: Read-only file system
[  290.456012][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.478109][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system
[  290.496906][ T9673] loop0: detected capacity change from 0 to 131072
[  290.525230][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.551454][ T9687] loop1: detected capacity change from 0 to 256
[  290.563146][ T5834] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  290.580720][ T9673] F2FS-fs (loop0): Found nat_bits in checkpoint
[  290.590441][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.638556][ T9687] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d)
[  290.676589][ T9673] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  290.682560][ T5834] usb 7-1: config 0 descriptor??
[  290.732155][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/426.tmp-b7:1' failed: Read-only file system
[  290.758444][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system
[  290.916109][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/426.tmp-b7:1' failed: Read-only file system
[  290.984671][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system
[  291.198562][ T5834] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[  291.245580][ T9697] netlink: 'syz.0.930': attribute type 10 has an invalid length.
[  291.335452][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.388842][ T5834] usb 7-1: USB disconnect, device number 3
[  291.439738][ T9697] bridge_slave_1: left allmulticast mode
[  291.466283][ T9697] bridge_slave_1: left promiscuous mode
[  291.472452][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.538625][ T9699] fido_id[9699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  291.578214][ T9697] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  292.392609][ T9723] input: syz0 as /devices/virtual/input/input11
[  292.606920][ T9701] loop1: detected capacity change from 0 to 32768
[  292.616311][   T28] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  292.630166][ T9701] XFS: attr2 mount option is deprecated.
[  292.710283][ T9701] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  292.779117][ T9701] XFS (loop1): Ending clean mount
[  292.806130][ T9701] XFS (loop1): Quotacheck needed: Please wait.
[  292.826093][   T28] usb 6-1: Using ep0 maxpacket: 16
[  292.863842][   T28] usb 6-1: config 0 has no interfaces?
[  292.883693][   T28] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  292.915323][   T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.967923][   T28] usb 6-1: config 0 descriptor??
[  293.065315][ T9701] XFS (loop1): Quotacheck: Done.
[  293.190045][    T8] usb 6-1: USB disconnect, device number 8
[  293.313501][ T5776] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  293.949231][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.945'.
[  293.971388][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.945'.
[  294.842654][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/431.tmp-b7:1' failed: Read-only file system
[  294.952104][ T5893] udevd[5893]: symlink '../../loop0' '/dev/disk/by-diskseq/429.tmp-b7:0' failed: Read-only file system
[  295.355888][ T9766] loop6: detected capacity change from 0 to 131072
[  295.365299][ T9766] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0)
[  295.373681][ T9766] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  295.383120][ T9766] F2FS-fs (loop6): invalid crc value
[  295.449337][ T9766] F2FS-fs (loop6): Found nat_bits in checkpoint
[  295.536796][ T9766] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  295.543949][ T9766] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  295.575331][   T27] audit: type=1800 audit(2000000114.340:335): pid=9766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.947" name="file2" dev="loop6" ino=8 res=0 errno=0
[  295.781894][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-diskseq/432.tmp-b7:6' failed: Read-only file system
[  295.815726][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-uuid/1cfefce0-b2cb-4c1d-89df-92d67f97f153.tmp-b7:6' failed: Read-only file system
[  296.171961][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-diskseq/432.tmp-b7:6' failed: Read-only file system
[  296.223372][ T9772] loop5: detected capacity change from 0 to 40427
[  296.242135][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-uuid/1cfefce0-b2cb-4c1d-89df-92d67f97f153.tmp-b7:6' failed: Read-only file system
[  296.293408][ T9772] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  296.327668][ T9772] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  296.384778][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-diskseq/432.tmp-b7:6' failed: Read-only file system
[  296.387668][ T9772] F2FS-fs (loop5): Found nat_bits in checkpoint
[  296.471811][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-diskseq/432.tmp-b7:6' failed: Read-only file system
[  296.580433][ T9779] loop1: detected capacity change from 0 to 40427
[  296.626093][ T5893] udevd[5893]: symlink '../../loop5' '/dev/disk/by-diskseq/433.tmp-b7:5' failed: Read-only file system
[  296.643947][ T9779] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  296.665809][ T9779] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  296.684984][ T9782] loop0: detected capacity change from 0 to 40427
[  296.693331][ T5893] udevd[5893]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system
[  296.724008][ T9779] F2FS-fs (loop1): invalid crc value
[  296.754858][ T9779] F2FS-fs (loop1): Found nat_bits in checkpoint
[  296.765341][ T9782] F2FS-fs (loop0): invalid crc value
[  296.805089][ T9782] F2FS-fs (loop0): Found nat_bits in checkpoint
[  296.812513][ T9772] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  296.854608][ T9772] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  296.990527][ T9779] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  297.010050][ T9779] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  297.036103][ T9782] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  297.348212][   T42] kworker/u4:2: attempt to access beyond end of device
[  297.348212][   T42] loop5: rw=1, sector=45096, nr_sectors = 32 limit=40427
[  297.417626][ T8264] syz-executor: attempt to access beyond end of device
[  297.417626][ T8264] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  297.486395][ T8264] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  298.115334][ T9813] netlink: 35284 bytes leftover after parsing attributes in process `syz.6.953'.
[  298.143396][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.6.953'.
[  298.441146][ T9821] input: syz0 as /devices/virtual/input/input12
[  298.617883][   T28] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  298.823893][   T28] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  298.858649][   T28] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  298.877241][ T9833] loop0: detected capacity change from 0 to 2048
[  298.884185][   T28] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.897558][   T28] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  298.925871][   T28] usb 7-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  298.947013][   T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.970158][ T9838] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  298.992439][   T28] usb 7-1: config 0 descriptor??
[  299.217783][   T28] usbhid 7-1:0.0: can't add hid device: -71
[  299.232069][   T28] usbhid: probe of 7-1:0.0 failed with error -71
[  299.262107][   T28] usb 7-1: USB disconnect, device number 4
[  299.816614][   T28] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  299.925282][ T9850] loop5: detected capacity change from 0 to 8192
[  299.947957][ T9850] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  299.970081][ T9850] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  299.982685][ T9850] REISERFS (device loop5): using ordered data mode
[  300.000676][ T9850] reiserfs: using flush barriers
[  300.017199][ T9850] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  300.027281][   T28] usb 7-1: Using ep0 maxpacket: 32
[  300.038683][ T9850] REISERFS (device loop5): checking transaction log (loop5)
[  300.105294][   T28] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  300.146478][   T28] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.176333][   T28] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.188554][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/442.tmp-b7:5' failed: Read-only file system
[  300.207686][   T28] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  300.240413][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  300.252050][   T28] usb 7-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  300.264083][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-uuid/12312308-1233-1233-120e-1234134124cd.tmp-b7:5' failed: Read-only file system
[  300.278653][   T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.317521][   T28] usb 7-1: config 0 descriptor??
[  300.342712][ T9850] REISERFS (device loop5): Using r5 hash to sort names
[  300.355915][ T9850] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  300.422427][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/438.tmp-b7:1' failed: Read-only file system
[  300.541838][ T5771] udevd[5771]: symlink '../../loop1' '/dev/disk/by-diskseq/438.tmp-b7:1' failed: Read-only file system
[  300.678726][ T5893] udevd[5893]: symlink '../../loop5' '/dev/disk/by-diskseq/442.tmp-b7:5' failed: Read-only file system
[  300.708778][ T5893] udevd[5893]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  300.738697][   T28] betop 0003:20BC:5500.000D: unbalanced collection at end of report description
[  300.754445][ T5893] udevd[5893]: symlink '../../loop5' '/dev/disk/by-uuid/12312308-1233-1233-120e-1234134124cd.tmp-b7:5' failed: Read-only file system
[  300.759520][   T28] betop 0003:20BC:5500.000D: parse failed
[  300.785280][ T9858] loop6: detected capacity change from 0 to 8
[  300.792370][ T9848] loop0: detected capacity change from 0 to 32768
[  300.808760][ T9848] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.969 (9848)
[  300.827543][   T28] betop: probe of 0003:20BC:5500.000D failed with error -22
[  300.882096][ T9848] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  300.887857][ T9859] loop6: detected capacity change from 8 to 7
[  300.898907][ T9848] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  300.898957][ T9848] BTRFS info (device loop0): enabling disk space caching
[  300.898976][ T9848] BTRFS info (device loop0): force clearing of disk cache
[  300.923515][ T9848] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  300.933811][ T9848] BTRFS info (device loop0): use zstd compression, level 3
[  300.949997][   T28] usb 7-1: USB disconnect, device number 5
[  300.970186][ T9859] Dev loop6: unable to read RDB block 7
[  300.976081][ T9848] BTRFS info (device loop0): disk space caching is enabled
[  300.994670][ T9859]  loop6: unable to read partition table
[  301.028757][ T9859] loop6: partition table beyond EOD, truncated
[  301.040287][ T5785] udevd[5785]: symlink '../../loop6' '/dev/disk/by-diskseq/443.tmp-b7:6' failed: Read-only file system
[  301.051995][ T9859] loop_reread_partitions: partition scan of loop6 (°´[{BÑ·�¶žMܾ`*ÎîZ´Ç5�¡]�z(¿Ťî4+hGËpX��„Ïgm
[  301.051995][ T9859] ü òæôØ.BÊL_seÔ) failed (rc=-5)
[  301.087025][ T9858] loop6: detected capacity change from 7 to 0
[  301.099949][ T5893] udevd[5893]: symlink '../../loop5' '/dev/disk/by-diskseq/442.tmp-b7:5' failed: Read-only file system
[  301.177048][ T9848] BTRFS info (device loop0): enabling ssd optimizations
[  301.205422][ T9848] BTRFS info (device loop0): auto enabling async discard
[  301.218037][ T9848] BTRFS info (device loop0): rebuilding free space tree
[  301.250250][ T9848] BTRFS info (device loop0): disabling free space tree
[  301.259249][ T9848] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  301.272910][ T9848] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  301.700687][ T9882] loop1: detected capacity change from 0 to 256
[  301.735664][ T8264] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  302.115133][ T5771] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop0 scanned by udevd (5771)
[  303.145013][ T9899] loop5: detected capacity change from 0 to 32768
[  303.265730][ T9899] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  303.518184][ T9927] netlink: 16 bytes leftover after parsing attributes in process `syz.6.989'.
[  303.529274][ T9927] netem: incorrect gi model size
[  303.535409][ T9927] netem: change failed
[  303.550999][ T9899] XFS (loop5): Ending clean mount
[  303.586754][   T27] audit: type=1800 audit(2000000122.360:336): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.981" name="file1" dev="loop5" ino=6150 res=0 errno=0
[  303.655702][   T27] audit: type=1800 audit(2000000122.420:337): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.981" name="file1" dev="loop5" ino=6150 res=0 errno=0
[  303.884586][ T6749] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  303.948125][ T9935] netlink: 'syz.6.994': attribute type 4 has an invalid length.
[  303.955884][ T9935] netlink: 32 bytes leftover after parsing attributes in process `syz.6.994'.
[  304.219927][ T9937] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  304.516471][ T5834] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  304.584110][ T9941] loop6: detected capacity change from 0 to 4096
[  304.663548][ T9941] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  304.719276][ T5834] usb 2-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config
[  304.755166][ T5834] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  304.785441][ T5834] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  304.803350][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.812265][ T5834] usb 2-1: Product: syz
[  304.822334][ T5834] usb 2-1: Manufacturer: syz
[  304.830814][ T5834] usb 2-1: SerialNumber: syz
[  305.058656][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  305.077456][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.102873][ T5834] cdc_ether: probe of 2-1:1.0 failed with error -22
[  305.127817][ T5834] usb 2-1: USB disconnect, device number 13
[  305.209389][ T5893] udevd[5893]: symlink '../../loop6' '/dev/disk/by-diskseq/453.tmp-b7:6' failed: Read-only file system
[  305.336543][ T5785] udevd[5785]: symlink '../../loop6' '/dev/disk/by-diskseq/453.tmp-b7:6' failed: Read-only file system
[  305.474512][ T9949] loop5: detected capacity change from 0 to 40427
[  305.487934][ T9949] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  305.504967][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-diskseq/453.tmp-b7:6' failed: Read-only file system
[  305.524057][ T9949] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  305.554719][ T9949] F2FS-fs (loop5): invalid crc value
[  305.601502][ T9958] loop6: detected capacity change from 0 to 2048
[  305.666073][ T9958] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  305.715317][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-diskseq/455.tmp-b7:6' failed: Read-only file system
[  305.717526][ T5834] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  305.735243][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-label/LinuxUDF.tmp-b7:6' failed: Read-only file system
[  305.749074][ T5893] udevd[5893]: symlink '../../loop5' '/dev/disk/by-diskseq/454.tmp-b7:5' failed: Read-only file system
[  305.764698][ T9958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  305.778653][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-uuid/1234567812345678.tmp-b7:6' failed: Read-only file system
[  305.803438][ T5893] udevd[5893]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system
[  305.811348][    C1] hrtimer: interrupt took 277365 ns
[  305.825869][ T9949] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  305.834490][ T9949] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  305.887286][ T5785] udevd[5785]: symlink '../../loop0' '/dev/disk/by-diskseq/449.tmp-b7:0' failed: Read-only file system
[  305.968645][ T5893] udevd[5893]: symlink '../../loop6' '/dev/disk/by-diskseq/455.tmp-b7:6' failed: Read-only file system
[  306.005394][ T5834] usb 2-1: config index 0 descriptor too short (expected 301, got 72)
[  306.026384][ T5834] usb 2-1: config 16 has an invalid descriptor of length 114, skipping remainder of the config
[  306.058045][ T5834] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  306.079705][ T5834] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64
[  306.096391][ T5834] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24939, setting to 64
[  306.109349][ T5834] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  306.118697][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.149211][ T9939] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  306.361582][ T5834] usb 2-1: usb_control_msg returned -71
[  306.391191][ T5834] usbtmc 2-1:16.0: can't read capabilities
[  306.441612][ T5834] usb 2-1: USB disconnect, device number 14
[  306.996422][ T5836] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  307.223001][ T5836] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  307.236897][ T5836] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  307.247627][ T5836] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  307.248535][ T9997] comedi comedi0: Minor 7 could not be opened
[  307.257313][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  307.275558][ T5836] usb 6-1: SerialNumber: syz
[  307.497855][ T5836] usb 6-1: 0:2 : does not exist
[  307.526701][ T5836] usb 6-1: USB disconnect, device number 9
[  307.716423][   T28] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  307.929808][   T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.946302][   T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.966815][   T28] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  307.990508][   T28] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  308.011400][   T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.041371][   T28] usb 1-1: config 0 descriptor??
[  308.493433][   T28] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  308.528962][   T28] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  308.703164][   T28] usb 1-1: USB disconnect, device number 12
[  308.729179][T10019] fido_id[10019]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  308.858106][T10023] loop6: detected capacity change from 0 to 1764
[  309.175965][T10032] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1030'.
[  309.350031][T10036] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  309.504935][T10034] loop0: detected capacity change from 0 to 4096
[  309.713733][T10027] loop1: detected capacity change from 0 to 40427
[  309.724814][T10027] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  309.746271][T10027] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  309.792291][T10027] F2FS-fs (loop1): invalid crc value
[  309.842165][T10027] F2FS-fs (loop1): Found nat_bits in checkpoint
[  310.036056][T10027] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  310.068760][T10027] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  310.163663][T10027] syz.1.1029: attempt to access beyond end of device
[  310.163663][T10027] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  310.181891][T10048] syzkaller1: entered promiscuous mode
[  310.196462][T10048] syzkaller1: entered allmulticast mode
[  310.263085][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/461.tmp-b7:1' failed: Read-only file system
[  310.297919][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system
[  310.341780][T10027] syz.1.1029: attempt to access beyond end of device
[  310.341780][T10027] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  310.368331][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/457.tmp-b7:5' failed: Read-only file system
[  310.389687][T10027] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  310.402916][T10027] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  310.484487][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-diskseq/462.tmp-b7:0' failed: Read-only file system
[  310.601163][T10038] loop6: detected capacity change from 0 to 32768
[  310.634686][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-diskseq/462.tmp-b7:0' failed: Read-only file system
[  310.755821][T10038] JBD2: Ignoring recovery information on journal
[  310.833598][ T5785] udevd[5785]: symlink '../../loop5' '/dev/disk/by-diskseq/457.tmp-b7:5' failed: Read-only file system
[  310.938175][T10038] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  311.010509][ T5893] udevd[5893]: symlink '../../loop6' '/dev/disk/by-diskseq/463.tmp-b7:6' failed: Read-only file system
[  311.044443][ T5893] udevd[5893]: symlink '../../loop6' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:6' failed: Read-only file system
[  311.151602][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/461.tmp-b7:1' failed: Read-only file system
[  311.218654][ T8854] ocfs2: Unmounting device (7,6) on (node local)
[  311.235615][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/461.tmp-b7:1' failed: Read-only file system
[  311.465139][T10058] loop0: detected capacity change from 0 to 32768
[  311.530270][T10058] JBD2: Ignoring recovery information on journal
[  311.745720][T10058] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  312.030716][T10058] overlayfs: upper fs does not support tmpfile.
[  312.119601][T10058] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  312.233445][T10058] overlayfs: upper fs missing required features.
[  312.417125][ T8264] ocfs2: Unmounting device (7,0) on (node local)
[  312.510493][T10093] loop6: detected capacity change from 0 to 1024
[  312.541981][T10093] EXT4-fs: Ignoring removed bh option
[  312.607306][T10093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.696626][ T5834] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  312.797865][ T8854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.819126][    C0] vkms_vblank_simulate: vblank timer overrun
[  312.944979][ T5834] usb 2-1: Using ep0 maxpacket: 32
[  312.965593][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  312.990093][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58409, setting to 1024
[  313.009992][ T5834] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  313.023478][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.040348][ T5834] usb 2-1: config 0 descriptor??
[  313.054128][T10092] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  313.096879][ T5834] hub 2-1:0.0: USB hub found
[  313.260337][T10115] loop0: detected capacity change from 0 to 512
[  313.300051][ T5834] hub 2-1:0.0: 1 port detected
[  313.613981][T10120] loop0: detected capacity change from 0 to 256
[  313.686450][ T5836] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  313.695856][T10120] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d)
[  313.896275][ T5836] usb 6-1: Using ep0 maxpacket: 32
[  313.905303][ T5836] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  313.930491][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.957955][ T5836] usb 6-1: config 0 descriptor??
[  313.984801][ T5836] gspca_main: sunplus-2.14.0 probing 041e:400b
[  314.170503][  T787] usb 2-1: reset high-speed USB device number 15 using dummy_hcd
[  314.744325][T10131] pim6reg1: entered promiscuous mode
[  314.758173][T10131] pim6reg1: entered allmulticast mode
[  314.785771][T10133] loop1: detected capacity change from 0 to 512
[  314.998504][ T5836] gspca_sunplus: reg_w_riv err -71
[  315.003989][ T5836] sunplus: probe of 6-1:0.0 failed with error -71
[  315.035294][ T5836] usb 6-1: USB disconnect, device number 10
[  315.035768][ T5834] usb 2-1: USB disconnect, device number 15
[  315.275234][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-diskseq/473.tmp-b7:0' failed: Read-only file system
[  315.322955][T10146] Bluetooth: MGMT ver 1.22
[  315.327898][T10146] Bluetooth: hci2: invalid length 1, exp 2 for type 6
[  315.381482][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-diskseq/469.tmp-b7:6' failed: Read-only file system
[  315.432983][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-diskseq/473.tmp-b7:0' failed: Read-only file system
[  315.542088][ T5771] udevd[5771]: symlink '../../loop0' '/dev/disk/by-diskseq/473.tmp-b7:0' failed: Read-only file system
[  315.605517][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/457.tmp-b7:5' failed: Read-only file system
[  315.678836][T10154] loop2: detected capacity change from 0 to 7
[  315.697619][T10154] Dev loop2: unable to read RDB block 7
[  315.703820][T10154]  loop2: AHDI p1 p2 p3 p4
[  315.726349][T10154] loop2: partition table partially beyond EOD, truncated
[  315.733779][T10154] loop2: p1 start 1601398130 is beyond EOD, truncated
[  315.746400][T10154] loop2: p2 start 1702059890 is beyond EOD, truncated
[  315.766443][T10154] loop2: p3 size 4261412863 extends beyond EOD, truncated
[  315.781171][ T5893] udevd[5893]: symlink '../../loop0' '/dev/disk/by-diskseq/473.tmp-b7:0' failed: Read-only file system
[  315.826125][T10156] loop0: detected capacity change from 0 to 128
[  315.834220][T10156] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  315.860912][ T5771] udevd[5771]: symlink '../../loop2' '/dev/disk/by-diskseq/476.tmp-b7:2' failed: Read-only file system
[  315.869130][T10156] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  315.938065][ T5771] udevd[5771]: symlink '../../loop2' '/dev/disk/by-diskseq/476.tmp-b7:2' failed: Read-only file system
[  316.029472][ T5771] udevd[5771]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  316.042970][ T5785] udevd[5785]: symlink '../../loop5' '/dev/disk/by-diskseq/457.tmp-b7:5' failed: Read-only file system
[  316.216446][   T11] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  316.544755][    T8] IPVS: starting estimator thread 0...
[  316.672215][T10171] IPVS: using max 18 ests per chain, 43200 per kthread
[  317.299774][T10194] loop1: detected capacity change from 0 to 1024
[  317.353864][T10194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.378727][T10188] loop0: detected capacity change from 0 to 32768
[  317.409947][T10194] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  317.440523][T10194] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  317.454197][T10194] EXT4-fs (loop1): This should not happen!! Data will be lost
[  317.454197][T10194] 
[  317.468154][T10194] EXT4-fs (loop1): Total free blocks count 0
[  317.494604][T10188] JBD2: Ignoring recovery information on journal
[  317.510448][T10194] EXT4-fs (loop1): Free/Dirty block details
[  317.536461][T10194] EXT4-fs (loop1): free_blocks=68451041280
[  317.543498][T10194] EXT4-fs (loop1): dirty_blocks=80
[  317.550679][T10194] EXT4-fs (loop1): Block reservation details
[  317.557719][T10188] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  317.602424][T10194] EXT4-fs (loop1): i_reserved_data_blocks=13
[  317.668729][T10193] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28
[  317.712080][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.727110][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  317.849757][ T8264] ocfs2: Unmounting device (7,0) on (node local)
[  318.150834][T10208] loop5: detected capacity change from 0 to 128
[  318.175672][T10208] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  318.240227][T10208] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  318.412751][   T11] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  318.984728][T10226] loop1: detected capacity change from 0 to 16
[  319.022334][T10226] erofs: (device loop1): mounted with root inode @ nid 36.
[  319.299669][T10230] netlink: 'syz.1.1104': attribute type 1 has an invalid length.
[  319.328884][T10230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1104'.
[  319.365320][T10230] netlink: 'syz.1.1104': attribute type 1 has an invalid length.
[  319.383717][T10230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1104'.
[  319.435180][T10224] loop5: detected capacity change from 0 to 32768
[  319.454120][T10224] (syz.5.1102,10224,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  319.481394][T10224] (syz.5.1102,10224,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  319.585009][T10224] JBD2: Ignoring recovery information on journal
[  319.665841][T10224] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  319.855737][T10238] loop1: detected capacity change from 0 to 2048
[  319.928280][T10238] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  319.967674][T10224] 
[  319.970084][T10224] ======================================================
[  319.977145][T10224] WARNING: possible circular locking dependency detected
[  319.984309][T10224] syzkaller #0 Not tainted
[  319.988776][T10224] ------------------------------------------------------
[  319.995832][T10224] syz.5.1102/10224 is trying to acquire lock:
[  320.002028][T10224] ffff8880540ca378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770
[  320.011424][T10224] 
[  320.011424][T10224] but task is already holding lock:
[  320.013840][   T27] audit: type=1800 audit(2000000138.740:338): pid=10238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1107" name="file2" dev="loop1" ino=1347 res=0 errno=0
[  320.018813][T10224] ffff88805fbc4ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0
[  320.050177][T10224] 
[  320.050177][T10224] which lock already depends on the new lock.
[  320.050177][T10224] 
[  320.060638][T10224] 
[  320.060638][T10224] the existing dependency chain (in reverse order) is:
[  320.069700][T10224] 
[  320.069700][T10224] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  320.078288][T10224]        down_read+0x46/0x2e0
[  320.083033][T10224]        ocfs2_start_trans+0x3a8/0x6f0
[  320.088609][T10224]        ocfs2_mknod+0xf1d/0x2300
[  320.093721][T10224]        ocfs2_create+0x196/0x430
[  320.098774][T10224]        path_openat+0x12a0/0x3230
[  320.103922][T10224]        do_filp_open+0x1f5/0x430
[  320.108967][T10224]        do_sys_openat2+0x134/0x1d0
[  320.114193][T10224]        __x64_sys_openat+0x139/0x160
[  320.119593][T10224]        do_syscall_64+0x55/0xa0
[  320.124586][T10224]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  320.131028][T10224] 
[  320.131028][T10224] -> #1 (sb_internal#6){.+.+}-{0:0}:
[  320.138625][T10224]        ocfs2_start_trans+0x2a9/0x6f0
[  320.144112][T10224]        ocfs2_xattr_set+0xeb7/0x13e0
[  320.149516][T10224]        __vfs_removexattr+0x425/0x460
[  320.155022][T10224]        __vfs_removexattr_locked+0x1e8/0x230
[  320.161122][T10224]        vfs_removexattr+0x81/0x1b0
[  320.166374][T10224]        ovl_get_workdir+0xd6c/0x17c0
[  320.171782][T10224]        ovl_fill_super+0x13ff/0x3620
[  320.177186][T10224]        get_tree_nodev+0xb5/0x140
[  320.182496][T10224]        vfs_get_tree+0x8c/0x280
[  320.187648][T10224]        do_new_mount+0x24b/0xa40
[  320.192698][T10224]        __se_sys_mount+0x2e7/0x3d0
[  320.198002][T10224]        do_syscall_64+0x55/0xa0
[  320.202964][T10224]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  320.209413][T10224] 
[  320.209413][T10224] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}:
[  320.217286][T10224]        __lock_acquire+0x2df1/0x7d40
[  320.222856][T10224]        lock_acquire+0x19e/0x420
[  320.227949][T10224]        down_read+0x46/0x2e0
[  320.232649][T10224]        ocfs2_init_acl+0x30a/0x770
[  320.238138][T10224]        ocfs2_mknod+0x140f/0x2300
[  320.243275][T10224]        ocfs2_mkdir+0x196/0x430
[  320.248255][T10224]        vfs_mkdir+0x296/0x440
[  320.253041][T10224]        do_mkdirat+0x1dc/0x450
[  320.257915][T10224]        __x64_sys_mkdirat+0x89/0xa0
[  320.263269][T10224]        do_syscall_64+0x55/0xa0
[  320.268486][T10224]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  320.275150][T10224] 
[  320.275150][T10224] other info that might help us debug this:
[  320.275150][T10224] 
[  320.285867][T10224] Chain exists of:
[  320.285867][T10224]   &oi->ip_xattr_sem --> sb_internal#6 --> &journal->j_trans_barrier
[  320.285867][T10224] 
[  320.300207][T10224]  Possible unsafe locking scenario:
[  320.300207][T10224] 
[  320.308529][T10224]        CPU0                    CPU1
[  320.313988][T10224]        ----                    ----
[  320.319509][T10224]   rlock(&journal->j_trans_barrier);
[  320.325030][T10224]                                lock(sb_internal#6);
[  320.332101][T10224]                                lock(&journal->j_trans_barrier);
[  320.340389][T10224]   rlock(&oi->ip_xattr_sem);
[  320.345201][T10224] 
[  320.345201][T10224]  *** DEADLOCK ***
[  320.345201][T10224] 
[  320.353887][T10224] 8 locks held by syz.5.1102/10224:
[  320.359233][T10224]  #0: ffff88802674e418 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  320.368528][T10224]  #1: ffff8880540ca658 (&type->i_mutex_dir_key#15/1){+.+.}-{3:3}, at: filename_create+0x20c/0x480
[  320.380459][T10224]  #2: ffff88805c609818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  320.394926][T10224]  #3: ffff88805c60d118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  320.409119][T10224]  #4: ffff88805c60df58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2600
[  320.423457][T10224]  #5: ffff88802674e608 (sb_internal#6){.+.+}-{0:0}, at: ocfs2_mknod+0xf1d/0x2300
[  320.432729][T10224]  #6: ffff88805fbc4ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0
[  320.443467][T10224]  #7: ffff888069b08990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f7a/0x21c0
[  320.453442][T10224] 
[  320.453442][T10224] stack backtrace:
[  320.459378][T10224] CPU: 0 PID: 10224 Comm: syz.5.1102 Not tainted syzkaller #0
[  320.466885][T10224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  320.477011][T10224] Call Trace:
[  320.480350][T10224]  <TASK>
[  320.483444][T10224]  dump_stack_lvl+0x18c/0x250
[  320.488204][T10224]  ? load_image+0x420/0x420
[  320.492862][T10224]  ? show_regs_print_info+0x20/0x20
[  320.498110][T10224]  ? print_circular_bug+0x12b/0x1a0
[  320.503346][T10224]  check_noncircular+0x2fc/0x400
[  320.508499][T10224]  ? print_deadlock_bug+0x5d0/0x5d0
[  320.514352][T10224]  ? _find_first_zero_bit+0xd3/0x100
[  320.519691][T10224]  ? add_lock_to_list+0x191/0x280
[  320.524838][T10224]  __lock_acquire+0x2df1/0x7d40
[  320.529733][T10224]  ? verify_lock_unused+0x140/0x140
[  320.534964][T10224]  ? __find_get_block+0xd67/0xeb0
[  320.540212][T10224]  ? verify_lock_unused+0x140/0x140
[  320.545469][T10224]  lock_acquire+0x19e/0x420
[  320.550006][T10224]  ? ocfs2_init_acl+0x30a/0x770
[  320.554902][T10224]  ? jbd2_journal_dirty_metadata+0x71e/0xc20
[  320.560918][T10224]  ? __might_sleep+0xe0/0xe0
[  320.565547][T10224]  ? read_lock_is_recursive+0x20/0x20
[  320.571038][T10224]  ? do_raw_spin_unlock+0x121/0x230
[  320.576270][T10224]  ? _raw_spin_unlock+0x28/0x40
[  320.581262][T10224]  down_read+0x46/0x2e0
[  320.585541][T10224]  ? ocfs2_init_acl+0x30a/0x770
[  320.590442][T10224]  ocfs2_init_acl+0x30a/0x770
[  320.595172][T10224]  ? ocfs2_acl_chmod+0x330/0x330
[  320.600349][T10224]  ? dquot_alloc_inode+0x8ac/0xa40
[  320.605529][T10224]  ? ocfs2_journal_access+0x40/0x40
[  320.610758][T10224]  ? ocfs2_block_signals+0x9b/0xe0
[  320.615907][T10224]  ? ocfs2_metadata_cache_get_super+0x46/0x90
[  320.622117][T10224]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  320.627898][T10224]  ocfs2_mknod+0x140f/0x2300
[  320.632526][T10224]  ? ocfs2_mkdir+0x430/0x430
[  320.637153][T10224]  ? verify_lock_unused+0x140/0x140
[  320.642491][T10224]  ? ocfs2_inode_lock_tracker+0x437/0x700
[  320.648653][T10224]  ? __lock_acquire+0x7d40/0x7d40
[  320.653713][T10224]  ? do_raw_spin_lock+0x11f/0x2c0
[  320.658832][T10224]  ? ocfs2_inode_unlock_tracker+0x270/0x2e0
[  320.664782][T10224]  ? __lock_acquire+0x7d40/0x7d40
[  320.669838][T10224]  ? __rwlock_init+0x150/0x150
[  320.674638][T10224]  ? do_raw_spin_unlock+0x121/0x230
[  320.679893][T10224]  ? put_pid+0xde/0x120
[  320.684086][T10224]  ocfs2_mkdir+0x196/0x430
[  320.688541][T10224]  ? make_kgid+0x660/0x660
[  320.692987][T10224]  ? apparmor_path_mkdir+0x1b0/0x230
[  320.699261][T10224]  ? ocfs2_symlink+0x2700/0x2700
[  320.704324][T10224]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  320.709467][T10224]  ? inode_permission+0xf3/0x480
[  320.714542][T10224]  ? bpf_lsm_inode_mkdir+0x9/0x10
[  320.719596][T10224]  ? security_inode_mkdir+0xb7/0x100
[  320.724971][T10224]  vfs_mkdir+0x296/0x440
[  320.729355][T10224]  do_mkdirat+0x1dc/0x450
[  320.733734][T10224]  ? vfs_mkdir+0x440/0x440
[  320.738186][T10224]  __x64_sys_mkdirat+0x89/0xa0
[  320.742980][T10224]  do_syscall_64+0x55/0xa0
[  320.747424][T10224]  ? clear_bhb_loop+0x40/0x90
[  320.752152][T10224]  ? clear_bhb_loop+0x40/0x90
[  320.756864][T10224]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  320.762792][T10224] RIP: 0033:0x7f5e88f9c819
[  320.767251][T10224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  320.787168][T10224] RSP: 002b:00007f5e89ec0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  320.795644][T10224] RAX: ffffffffffffffda RBX: 00007f5e89215fa0 RCX: 00007f5e88f9c819
[  320.803656][T10224] RDX: 00000000000001c0 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  320.811815][T10224] RBP: 00007f5e89032c91 R08: 0000000000000000 R09: 0000000000000000
[  320.819821][T10224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.827913][T10224] R13: 00007f5e89216038 R14: 00007f5e89215fa0 R15: 00007ffd0665cef8
[  320.835957][T10224]  </TASK>
[  320.861271][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-diskseq/488.tmp-b7:5' failed: Read-only file system
[  320.892570][ T5771] udevd[5771]: symlink '../../loop5' '/dev/disk/by-uuid/9357e9d7-5182-4c22-8242-b9b0d0fb6750.tmp-b7:5' failed: Read-only file system
[  320.912220][T10228] loop6: detected capacity change from 0 to 40427
[  320.927511][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/489.tmp-b7:1' failed: Read-only file system
[  320.982602][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-label/LinuxUDF.tmp-b7:1' failed: Read-only file system
[  321.017554][T10228] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7
[  321.043853][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-uuid/1234567812345678.tmp-b7:1' failed: Read-only file system
[  321.055491][T10228] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff
[  321.082150][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/489.tmp-b7:1' failed: Read-only file system
[  321.111695][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/489.tmp-b7:1' failed: Read-only file system
[  321.127667][T10228] F2FS-fs (loop6): Image doesn't support compression
[  321.142961][T10228] F2FS-fs (loop6): invalid crc value
[  321.155783][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/489.tmp-b7:1' failed: Read-only file system
[  321.199328][T10228] F2FS-fs (loop6): Found nat_bits in checkpoint
[  321.232142][ T5771] udevd[5771]: symlink '../../loop6' '/dev/disk/by-diskseq/490.tmp-b7:6' failed: Read-only file system
[  321.283069][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/491.tmp-b7:1' failed: Read-only file system
[  321.309730][T10228] F2FS-fs (loop6): Start checkpoint disabled!
[  321.317780][ T6749] ocfs2: Unmounting device (7,5) on (node local)
[  321.358438][T10228] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  321.534045][ T1082] F2FS-fs (loop6): inject checkpoint error in f2fs_balance_fs of __write_node_page+0xbe0/0x1a40
[  321.549028][ T1082] kworker/u4:6: attempt to access beyond end of device
[  321.549028][ T1082] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  321.571723][ T1082] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  321.579831][ T1082] F2FS-fs (loop6): Stopped filesystem due to reason: 1