last executing test programs:

2m58.670636132s ago: executing program 2 (id=1408):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file1\x00', 0x8, &(0x7f0000002500)=ANY=[], 0x1, 0x1e2, &(0x7f0000000100)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
pread64(r0, &(0x7f0000000600)=""/4099, 0xfdef, 0x110)

2m58.267422815s ago: executing program 2 (id=1414):
unshare(0x20000680)
r0 = socket(0x22, 0x2, 0x4)
bind$bt_hci(r0, &(0x7f0000001200)={0x1f, 0x3}, 0x6)

2m57.904411332s ago: executing program 2 (id=1418):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x2)
syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff0f0009240202000000000007240100000110090582"], 0x0)

2m55.665659436s ago: executing program 2 (id=1438):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000002c0)={[{@noquota}, {@sysvgroups}, {@noblock_validity}, {@noload}, {@nombcache}, {@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000001f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x923004, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

2m54.775595079s ago: executing program 2 (id=1446):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2d51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x40, 0x31, 0x6, {0x6, 0x11, "197f14f7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2m53.972078098s ago: executing program 2 (id=1457):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2, 0x0, 0x101, 0xeffffffd}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000520015ffffff7f00000000000a"], 0x18}}, 0x0)

2m53.58536354s ago: executing program 32 (id=1457):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2, 0x0, 0x101, 0xeffffffd}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000520015ffffff7f00000000000a"], 0x18}}, 0x0)

1m29.753980458s ago: executing program 0 (id=2403):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r1, 0x1}, &(0x7f00000001c0)=0x8)

1m29.282737998s ago: executing program 0 (id=2408):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff01000000000000000000000000000101"], 0x90)

1m28.754234546s ago: executing program 0 (id=2414):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xd77, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x1, 0x0, 0x0, "6191440132bb112240fcbcc3fa9d0431575f8614db538ce09c50eecf6ac579e8e83b944b666113f3afed71231e6653a1e899f17b33515bb07c9a1ed652a2159b"}}, 0x80}}, 0x4004044)

1m28.258899045s ago: executing program 0 (id=2420):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000600)={[{@nogrpid}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@nombcache}, {@orlov}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00')
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

1m26.773682031s ago: executing program 0 (id=2436):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18)
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {}, 0xff}, 0x18)

1m23.232120745s ago: executing program 0 (id=2475):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2, 0x8, 0x5, 0x4, 0x1, 0x7fffffff}, &(0x7f0000000080)=0x14)

1m22.743028676s ago: executing program 33 (id=2475):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2, 0x8, 0x5, 0x4, 0x1, 0x7fffffff}, &(0x7f0000000080)=0x14)

1m8.168194104s ago: executing program 7 (id=2476):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x101, @private0, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000240)='B', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8)

1m7.943375806s ago: executing program 7 (id=2578):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r2, r0}, 0xc)

1m7.796079916s ago: executing program 7 (id=2579):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000440)=0x900000, 0x12)

1m7.630611012s ago: executing program 7 (id=2580):
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f0000000640)="$eJzslr+PEkEUx78zu1nAaEwsbSwkUQuX3UWNjYk0VhYm/iAWJhJZCbJKAhRCYtC/wN7EwsLef8BE2/sjLtxV13DdNdfsZXZmd+cICxwcUNz7JDy+s8y8ffPe5A0gCOLCsr93NAqRj/RlFJFTzw+MdA7X5u/mD7/8f/qk+v3N753cyC5M8xmGi7/fBPCvYqCXrD29uqi+X4An+iU47ihdBYOt9FtwvFLaB8NrpT9oui3m2/b7ZuDb79pBXQhHGFcYT5jyZHzjbwx1LT6m/d7tD1q1IPA7axTz8jeucDzS4tPrZUNG62j5c8HhKl0Gw3OlHyIX50amRNv/dTP1b8zcv4V1Z0SEcoZV165klsoCsFwYAEsc/sRK28FXdWTXeYYyhIFIxBU9J8/GhnYhDvqcOTA3nlW2WjKXqcXfx3JN/CQcynE052qGw3C44CssLJONtD+Fvxhuaf1JtpIf0VUjSljq9gd3mx9rDb/hf/K88gPnnuPc90pRI5J2Rv8rRP3pUup/6p0ksJiFz7Ver+NKm4w9aad1XB71P47bN+VYFNea8JvXNFMfEyaY7L2tP5nREwRBbI8bYMehwoyFuk2g/dd9tsUYCYIgCIIgCIIgCIJYjZMAAAD//4U6Q1I=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file2\x00', 0x0, 0x0)

1m7.195042736s ago: executing program 7 (id=2585):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)

1m6.204694312s ago: executing program 7 (id=2597):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004dc193e3ec31becba459efff03d6e68d938564551748d5df1954e99ead2126b1d2e5477a17e875979d8861dced546210811094681847696c94fef8a12512b5d2fe37be747a2d4af8162b8a0fd57aabbd38b2da25987cabfad18db5c51b0d5d6fe7eb1f86c791b7521006ffcf2ce1867cfb872cf65adcad122c23f62fade220f385561a8a91ef27f62b816aec51072d272af2df270b654200000092c9f07f0f1c1f5a78605753e3793a4948da2d5cc323caf8318da94be4723ccf0ecfc49904"], 0x1, 0xa07, &(0x7f0000001540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
pwrite64(r0, &(0x7f0000000080)="8e", 0x1, 0x709c)
open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)

1m5.479854196s ago: executing program 34 (id=2597):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004dc193e3ec31becba459efff03d6e68d938564551748d5df1954e99ead2126b1d2e5477a17e875979d8861dced546210811094681847696c94fef8a12512b5d2fe37be747a2d4af8162b8a0fd57aabbd38b2da25987cabfad18db5c51b0d5d6fe7eb1f86c791b7521006ffcf2ce1867cfb872cf65adcad122c23f62fade220f385561a8a91ef27f62b816aec51072d272af2df270b654200000092c9f07f0f1c1f5a78605753e3793a4948da2d5cc323caf8318da94be4723ccf0ecfc49904"], 0x1, 0xa07, &(0x7f0000001540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
pwrite64(r0, &(0x7f0000000080)="8e", 0x1, 0x709c)
open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)

1m5.474105521s ago: executing program 1 (id=2600):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r1=>0x0})
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r1, 0x25, 0x2}, 0x14)

1m5.181471536s ago: executing program 1 (id=2607):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @private0, 0x1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)="b1", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000500)="a1", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="1a00000002000000", 0x8)

1m4.687222483s ago: executing program 1 (id=2613):
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8404, &(0x7f0000000540)=ANY=[], 0x1, 0x0, 0x0)
mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000500), 0x400, 0x0)
r0 = open$dir(&(0x7f0000000580)='./file0\x00', 0x10000, 0x10)
open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000020000"], 0x4000)

1m4.472881871s ago: executing program 1 (id=2617):
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f0000000640)="$eJzslr+PEkEUx78zu1nAaEwsbSwkUQuX3UWNjYk0VhYm/iAWJhJZCbJKAhRCYtC/wN7EwsLef8BE2/sjLtxV13DdNdfsZXZmd+cICxwcUNz7JDy+s8y8ffPe5A0gCOLCsr93NAqRj/RlFJFTzw+MdA7X5u/mD7/8f/qk+v3N753cyC5M8xmGi7/fBPCvYqCXrD29uqi+X4An+iU47ihdBYOt9FtwvFLaB8NrpT9oui3m2/b7ZuDb79pBXQhHGFcYT5jyZHzjbwx1LT6m/d7tD1q1IPA7axTz8jeucDzS4tPrZUNG62j5c8HhKl0Gw3OlHyIX50amRNv/dTP1b8zcv4V1Z0SEcoZV165klsoCsFwYAEsc/sRK28FXdWTXeYYyhIFIxBU9J8/GhnYhDvqcOTA3nlW2WjKXqcXfx3JN/CQcynE052qGw3C44CssLJONtD+Fvxhuaf1JtpIf0VUjSljq9gd3mx9rDb/hf/K88gPnnuPc90pRI5J2Rv8rRP3pUup/6p0ksJiFz7Ver+NKm4w9aad1XB71P47bN+VYFNea8JvXNFMfEyaY7L2tP5nREwRBbI8bYMehwoyFuk2g/dd9tsUYCYIgCIIgCIIgCIJYjZMAAAD//4U6Q1I=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file2\x00', 0x0, 0x0)

1m3.62464572s ago: executing program 1 (id=2621):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
exit(0x7)
unshare(0x22020600)
statx(r0, 0x0, 0x1000, 0x10, 0x0)

1m1.71189966s ago: executing program 1 (id=2634):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011})

1m0.896148941s ago: executing program 35 (id=2634):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011})

4.629275635s ago: executing program 9 (id=3033):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\x1f\t'}, 0x17, 0xfffffffffffffffd)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

4.480380783s ago: executing program 6 (id=3034):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @local}, 0x4, 0x0, 0x1, 0xa, 0xa, 0x3}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b32, &(0x7f0000000040))

4.248783012s ago: executing program 9 (id=3036):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0xfffffffa, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r0, 0x4)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3.904772928s ago: executing program 9 (id=3039):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3982, 0x0)
sendfile(r0, r1, 0x0, 0x40000010000b946)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000})

3.515682389s ago: executing program 5 (id=3040):
r0 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x82)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

3.327749294s ago: executing program 8 (id=3042):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x1, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000580)={[{@sb={'sb', 0x3d, 0x4}}, {@nouser_xattr}, {@resuid}, {@grpjquota}]}, 0x1, 0x783, &(0x7f0000001340)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x259fdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a, 0x2201}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)

3.079730517s ago: executing program 6 (id=3044):
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x11ee027, 0x0, 0x1, 0x0, &(0x7f00000004c0))
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x301095, 0x0)

3.076030066s ago: executing program 5 (id=3045):
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf}], 0x2c)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)

2.902587751s ago: executing program 5 (id=3046):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getpgid(0x0)

2.892581976s ago: executing program 6 (id=3047):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x8100, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000400))

2.45216785s ago: executing program 6 (id=3050):
syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2)
r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000017c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1.98241213s ago: executing program 6 (id=3053):
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4)

1.920765925s ago: executing program 4 (id=3055):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000000a00e8"], 0x30}}, 0x0)

1.786534848s ago: executing program 6 (id=3057):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0))
r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x718bb647156ec3b7)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0)

1.755361985s ago: executing program 4 (id=3058):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

1.581379095s ago: executing program 3 (id=3059):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0)
writev(r0, &(0x7f0000002380)=[{&(0x7f0000000000)="46cc3a", 0x3}], 0x1)

1.578850169s ago: executing program 8 (id=3060):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)

1.345133142s ago: executing program 3 (id=3061):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000000000000002400000000000000290000003200000000000000000000000000ffff7f000001", @ANYRES8], 0x40}}], 0x1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1.316174227s ago: executing program 5 (id=3062):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.301720868s ago: executing program 4 (id=3063):
open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}})

1.235978917s ago: executing program 8 (id=3064):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

1.070164914s ago: executing program 3 (id=3065):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
r1 = fanotify_init(0x20, 0x0)
r2 = dup(r0)
fanotify_mark(r1, 0x401, 0x1000, r2, 0x0)

1.012599371s ago: executing program 8 (id=3066):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="04004600050034006f000000080026"], 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

939.777754ms ago: executing program 9 (id=3067):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8140, 0x0)
preadv2(r0, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c)

828.597458ms ago: executing program 5 (id=3068):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x1489a, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

799.993364ms ago: executing program 3 (id=3069):
unshare(0x24020400)
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
pidfd_send_signal(r0, 0x3e, &(0x7f0000000080)={0x28, 0x8000, 0x44}, 0x0)

692.553564ms ago: executing program 4 (id=3070):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82100, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0xfff, 0xffffffff, 0x80000001, 0x7fffffff, 0x1b, "48b429d2ee13ed2ee2f41900"})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee0, 0x9, 0x7ffd, 0x90, "9900010000000000001300"})

674.609854ms ago: executing program 9 (id=3071):
r0 = io_uring_setup(0x25b4, &(0x7f00000002c0)={0x0, 0x1670, 0x400, 0x2, 0x170})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

546.577466ms ago: executing program 3 (id=3072):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1a0e24f397d9b9c)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x6}}], [], 0x6b}})

537.31521ms ago: executing program 8 (id=3073):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40)

529.61495ms ago: executing program 5 (id=3074):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)

499.604042ms ago: executing program 4 (id=3075):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x94, &(0x7f0000000100)=""/148}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, 0x94)

283.722969ms ago: executing program 4 (id=3076):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet(r0, &(0x7f00000025c0)=[{{&(0x7f0000004940)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000300)="93", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x9, @private=0xa010102}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x2, 0x41)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200), &(0x7f0000000280)=0x4)

191.221651ms ago: executing program 8 (id=3077):
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x287, &(0x7f0000001d00)="$eJzs3U1rE0Ecx/HfbJIm2lK3DyKIp2rBk/ThIl4KknfgxZOoTYRiqKAV1FP1LL4A730LvgCPnsSz4K0nX0BukZmdmE2ym01Dt5uk3w8kbLrzn53Jznbmv6WsAFxaD+t/TnZP7ctIJZUkPZACSTWpLOm6btTeHh4dHLWajVEVlVyEfRlFkWaozP5hMynUxrkIL7SfylqK/wz5qP3WcdFtQPHc1Z8gkKr+6nT7axfesnxc9kFv2mrrnZaLbgcAoFh+/g/8PL/k1+9BIG36ab9//p/xCbRddANy9j1jf2z+d1lWx9jze83t6uV7LoUrq+KDTnZPJ2nLgqKR1bfANFlZpWtLcOXFQat5b/9VqxHok/a8Sq/YuntvREO3q5vT2u2Pw1Vv+Nx0zPwyXtvZLLo+VGwfduLtjxVZO98jZjM/zE/zxIT6qsb/9V+5Y+xpcmcqHDhTUfu30mt0vVyQK5XSyxV3kJv+CN7IXpaUkpGoO6JWBk5gmNVOF7U6EBX1bjsjai0xaicjan0wqjea0yPzZr6Yx2ZDf/VN9dj6P7Df9qbGuTJtGVfSj4yR/Sm7kqGbT/wdoeNbiSWDSXuECXzWc93X8pv3H14+a7War+d2w16JU9CMqdroDoJpac/cbtgvuZCjd+edyetJ/9XBbfn50TvpZwxkEMwLu+4yUf4Xy1e23GLNvoX96/RqPLaTVXmsxu2U3GDVvV9Nz+D6GHfrYTHhr4vDRxyZc92+K90Z54iR0Ldz+uxNEmTq+qWn3P8HAAAAAAAAAAAAAAAAAACYNef3Lwc1pe0quo8AAAAAAAAAAAAAAAAAAAAAAMy6hOf/Vgt9/u8jRZ94/i+Qu38BAAD//0lmcxY=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xe, 0x11, r0, 0x0)
truncate(&(0x7f00000000c0)='./file1\x00', 0x8001)

138.824538ms ago: executing program 9 (id=3078):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="090000001b0000000800000040"], 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32], 0xffdd)

0s ago: executing program 3 (id=3079):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0)

kernel console output (not intermixed with test programs):

op1' '/dev/disk/by-diskseq/749.tmp-b7:1' failed: Read-only file system
[  303.125323][ T6164] udevd[6164]: symlink '../../loop0' '/dev/disk/by-diskseq/739.tmp-b7:0' failed: Read-only file system
[  303.127192][ T6165] udevd[6165]: symlink '../../loop3' '/dev/disk/by-diskseq/727.tmp-b7:3' failed: Read-only file system
[  303.213596][T11684] BTRFS info (device loop1): enabling ssd optimizations
[  303.245905][T11684] BTRFS info (device loop1): turning on async discard
[  303.252718][T11684] BTRFS info (device loop1): enabling free space tree
[  303.364182][ T5912] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  303.511970][T11742] loop0: detected capacity change from 0 to 1024
[  303.556017][ T5824] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  303.578724][ T5912] usb 4-1: config index 0 descriptor too short (expected 65343, got 72)
[  303.600898][ T5912] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  303.634319][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.684371][ T5912] usb 4-1: Product: syz
[  303.688606][ T5912] usb 4-1: Manufacturer: syz
[  303.693211][ T5912] usb 4-1: SerialNumber: syz
[  303.716166][ T5912] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  303.806602][ T1107] hfsplus: b-tree write err: -5, ino 25
[  303.812384][ T1107] hfsplus: b-tree write err: -5, ino 4
[  303.838918][ T5898] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  303.848838][ T1107] hfsplus: b-tree write err: -5, ino 2
[  304.215100][T11760] netlink: 'syz.5.2344': attribute type 1 has an invalid length.
[  304.241042][T11760] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.264977][ T5822] Bluetooth: hci2: command 0x2016 tx timeout
[  304.424577][ T5822] Bluetooth: hci3: command 0x0406 tx timeout
[  304.504124][ T5822] Bluetooth: hci4: command 0x0406 tx timeout
[  304.536777][T11762] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  304.643226][T11762] bond1 (unregistering): Released all slaves
[  304.689578][T11765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.692122][T11768] sctp: [Deprecated]: syz.5.2347 (pid 11768) Use of struct sctp_assoc_value in delayed_ack socket option.
[  304.692122][T11768] Use struct sctp_sack_info instead
[  304.718518][T11765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.745228][ T5822] Bluetooth: hci5: command 0x0405 tx timeout
[  304.849073][ T5822] Bluetooth: hci0: unexpected event for opcode 0x1004
[  304.914565][ T5898] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  304.934699][ T5898] ath9k_htc: Failed to initialize the device
[  304.976582][ T5898] usb 4-1: ath9k_htc: USB layer deinitialized
[  304.987321][ T5822] Bluetooth: hci1: command 0x0405 tx timeout
[  305.005813][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2350'.
[  305.023374][ T5826] usb 4-1: USB disconnect, device number 11
[  305.499051][T11786] loop0: detected capacity change from 0 to 128
[  305.572419][T11788] netlink: 'syz.5.2356': attribute type 13 has an invalid length.
[  305.609655][T11786] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  305.612858][T11788] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2356'.
[  305.632344][T11788] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  305.662551][T11793] loop1: detected capacity change from 0 to 64
[  305.679772][T11786] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.960431][ T5813] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  306.395497][T11818] netlink: 'syz.6.2370': attribute type 8 has an invalid length.
[  306.667638][T11824] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2373'.
[  306.702370][T11824] nbd: socks must be embedded in a SOCK_ITEM attr
[  306.763284][T11830] loop3: detected capacity change from 0 to 512
[  306.816582][T11830] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  306.834487][ T5822] Bluetooth: hci5: command 0x0405 tx timeout
[  306.866790][T11830] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2374: bg 0: block 104: invalid block bitmap
[  306.895918][T11830] loop3: lost filesystem error report for type 5 error -117
[  306.896883][T11830] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem
[  306.904253][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  306.904277][    C1] EXT4-fs (loop3): initial error at time 1771003582: ext4_validate_block_bitmap:432
[  306.904309][    C1] EXT4-fs (loop3): last error at time 1771003582: ext4_validate_block_bitmap:432
[  306.974534][T11832] mkiss: ax0: crc mode is auto.
[  307.009405][T11837] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  307.064001][ T5822] Bluetooth: hci1: command 0x0405 tx timeout
[  307.079585][T11830] loop3: lost filesystem error report for type 5 error -117
[  307.082348][T11830] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2374: invalid indirect mapped block 1 (level 1)
[  307.105887][T11830] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  307.118406][T11830] EXT4-fs (loop3): 1 truncate cleaned up
[  307.151228][T11830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.410349][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.537237][ T5877] udevd[5877]: symlink '../../loop4' '/dev/disk/by-diskseq/742.tmp-b7:4' failed: Read-only file system
[  307.623252][ T5877] udevd[5877]: symlink '../../loop1' '/dev/disk/by-diskseq/756.tmp-b7:1' failed: Read-only file system
[  307.664795][ T5951] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  307.679458][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-diskseq/758.tmp-b7:3' failed: Read-only file system
[  307.733803][T11854] loop1: detected capacity change from 0 to 256
[  307.758502][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/743.tmp-b7:6' failed: Read-only file system
[  307.792226][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-diskseq/758.tmp-b7:3' failed: Read-only file system
[  307.876787][ T5951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.888697][ T5877] udevd[5877]: symlink '../../loop3' '/dev/disk/by-diskseq/759.tmp-b7:3' failed: Read-only file system
[  307.909566][ T6116] udevd[6116]: symlink '../../loop4' '/dev/disk/by-diskseq/742.tmp-b7:4' failed: Read-only file system
[  307.936441][ T6454] udevd[6454]: symlink '../../loop1' '/dev/disk/by-diskseq/760.tmp-b7:1' failed: Read-only file system
[  307.948751][ T5951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.968754][ T5951] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  307.990629][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.008904][ T5877] udevd[5877]: symlink '../../loop1' '/dev/disk/by-diskseq/760.tmp-b7:1' failed: Read-only file system
[  308.093705][ T5877] udevd[5877]: symlink '../../loop1' '/dev/disk/by-diskseq/760.tmp-b7:1' failed: Read-only file system
[  308.117661][ T5951] usb 6-1: config 0 descriptor??
[  308.170902][T11868] loop6: detected capacity change from 0 to 8
[  308.597638][ T5951] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0
[  308.668177][ T5951] cp2112 0003:10C4:EA90.0027: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  308.707828][T11881] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2398'.
[  308.764273][ T5951] cp2112 0003:10C4:EA90.0027: Part Number: 0x0A Device Version: 0x24
[  308.960120][ T5951] cp2112 0003:10C4:EA90.0027: error requesting SMBus config
[  308.999877][ T5951] cp2112 0003:10C4:EA90.0027: probe with driver cp2112 failed with error -71
[  309.055396][ T5951] usb 6-1: USB disconnect, device number 12
[  309.361950][T11864] loop1: detected capacity change from 0 to 40427
[  309.388996][T11864] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  309.421978][T11864] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  309.500009][T11903] loop4: detected capacity change from 0 to 128
[  309.823018][T11864] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  309.911053][T11864] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  309.953989][T11864] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  310.098992][T11918] input: syz1 as /devices/virtual/input/input14
[  310.775549][T11934] loop0: detected capacity change from 0 to 512
[  310.803194][T11934] EXT4-fs: Ignoring removed nobh option
[  310.804538][T11936] loop6: detected capacity change from 0 to 512
[  310.852150][T11934] EXT4-fs: Ignoring removed orlov option
[  310.917783][T11936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.004043][T11934] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  311.116277][T11936] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  311.195593][T11947] Bluetooth: MGMT ver 1.23
[  311.301208][T11944] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  311.327072][T11934] EXT4-fs (loop0): 1 truncate cleaned up
[  311.371052][T11934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.521921][ T9513] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.766444][T11964] program syz.6.2429 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  311.799879][T11965] loop4: detected capacity change from 0 to 1024
[  311.938413][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'.
[  312.004228][T11965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.095194][   T30] audit: type=1800 audit(1771003587.283:1741): pid=11965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2431" name="file1" dev="loop4" ino=15 res=0 errno=0
[  312.146461][ T5813] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt.
[  312.386685][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.565117][ T5813] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[  312.617651][ T5877] udevd[5877]: symlink '../../loop4' '/dev/disk/by-diskseq/771.tmp-b7:4' failed: Read-only file system
[  312.670639][ T5813] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[  312.708604][ T5884] udevd[5884]: symlink '../../loop6' '/dev/disk/by-diskseq/770.tmp-b7:6' failed: Read-only file system
[  312.708655][ T6454] udevd[6454]: symlink '../../loop5' '/dev/disk/by-diskseq/750.tmp-b7:5' failed: Read-only file system
[  312.756367][ T6116] udevd[6116]: symlink '../../loop1' '/dev/disk/by-diskseq/767.tmp-b7:1' failed: Read-only file system
[  312.779290][ T5877] udevd[5877]: symlink '../../loop4' '/dev/disk/by-diskseq/772.tmp-b7:4' failed: Read-only file system
[  312.897149][T11994] loop1: detected capacity change from 0 to 16
[  312.933589][ T6116] udevd[6116]: symlink '../../loop6' '/dev/disk/by-diskseq/770.tmp-b7:6' failed: Read-only file system
[  312.946923][T11994] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  312.960845][T11996] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2445'.
[  312.993658][T11996] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2445'.
[  313.015773][ T5877] udevd[5877]: symlink '../../loop1' '/dev/disk/by-diskseq/767.tmp-b7:1' failed: Read-only file system
[  313.028614][ T6454] udevd[6454]: symlink '../../loop5' '/dev/disk/by-diskseq/750.tmp-b7:5' failed: Read-only file system
[  313.078792][ T5877] udevd[5877]: symlink '../../loop1' '/dev/disk/by-label/Compressed.tmp-b7:1' failed: Read-only file system
[  313.215675][T11971] loop3: detected capacity change from 0 to 32768
[  313.239486][ T6116] udevd[6116]: symlink '../../loop4' '/dev/disk/by-diskseq/772.tmp-b7:4' failed: Read-only file system
[  313.274790][T11971] JBD2: Ignoring recovery information on journal
[  313.318458][T11870] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.429520][T12009] loop6: detected capacity change from 0 to 128
[  313.577112][T11971] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  314.094627][ T5825] ocfs2: Unmounting device (7,3) on (node local)
[  314.228683][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.613380][T12033] loop1: detected capacity change from 0 to 512
[  314.666467][T12036] loop4: detected capacity change from 0 to 128
[  314.678004][T12033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.726091][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.752568][T12036] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  314.952000][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.974004][T12036] hpfs: filesystem error: improperly stopped
[  314.980025][T12036] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  315.038406][T12036] hpfs: You really don't want any checks? You are crazy...
[  315.079553][T12036] hpfs: hpfs_map_sector(): read error
[  315.116532][T12036] hpfs: code page support is disabled
[  315.143548][T12036] hpfs: hpfs_map_4sectors(): unaligned read
[  315.175394][T12036] hpfs: hpfs_map_4sectors(): unaligned read
[  315.184237][T12036] hpfs: filesystem error: unable to find root dir
[  315.390472][T12060] loop6: detected capacity change from 0 to 256
[  315.402329][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.441218][T12060] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  315.660976][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.971394][T12053] loop5: detected capacity change from 0 to 32768
[  315.988242][   T49] bridge_slave_1: left allmulticast mode
[  315.994538][   T49] bridge_slave_1: left promiscuous mode
[  316.009207][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.047729][   T49] bridge_slave_0: left allmulticast mode
[  316.060089][T12053] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  316.079723][   T49] bridge_slave_0: left promiscuous mode
[  316.085847][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.148088][T12053] XFS (loop5): Ending clean mount
[  316.310531][ T5134] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  316.332507][ T5134] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  316.348426][ T5134] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  316.362592][ T5820] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  316.378576][ T5134] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  316.394166][ T5134] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  317.224273][ T5828] Bluetooth: hci0: command 0x1003 tx timeout
[  317.236393][ T5822] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  317.475050][T12108] loop4: detected capacity change from 0 to 64
[  317.590546][T12111] loop6: detected capacity change from 0 to 1024
[  317.612884][T12113] loop3: detected capacity change from 0 to 256
[  317.620938][T12111] EXT4-fs: Ignoring removed orlov option
[  317.650356][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  317.664371][T12113] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3967cd3a, utbl_chksum : 0xe619d30d)
[  317.680027][ T6454] udevd[6454]: symlink '../../loop4' '/dev/disk/by-diskseq/787.tmp-b7:4' failed: Read-only file system
[  317.706186][T12111] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.774767][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  317.779634][T12113] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff)
[  317.831564][   T49] bond0 (unregistering): Released all slaves
[  317.856637][   T49] bond1 (unregistering): Released all slaves
[  317.871555][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-diskseq/789.tmp-b7:3' failed: Read-only file system
[  317.911231][ T6454] udevd[6454]: symlink '../../loop4' '/dev/disk/by-diskseq/787.tmp-b7:4' failed: Read-only file system
[  317.929129][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/788.tmp-b7:6' failed: Read-only file system
[  317.946333][T12111] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.2486: unexpected EA_INODE flag
[  317.964065][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-uuid/1234-1234.tmp-b7:3' failed: Read-only file system
[  317.972214][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  318.010876][ T6454] udevd[6454]: symlink '../../loop4' '/dev/disk/by-diskseq/787.tmp-b7:4' failed: Read-only file system
[  318.112054][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-diskseq/789.tmp-b7:3' failed: Read-only file system
[  318.165548][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/788.tmp-b7:6' failed: Read-only file system
[  318.173283][ T9513] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.185674][ T6454] udevd[6454]: symlink '../../loop4' '/dev/disk/by-diskseq/787.tmp-b7:4' failed: Read-only file system
[  318.355325][T12103] loop5: detected capacity change from 0 to 32768
[  318.412720][T12103] JBD2: Ignoring recovery information on journal
[  318.425296][ T5898] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  318.510302][ T5822] Bluetooth: hci6: command tx timeout
[  318.624340][T12103] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  318.635682][ T5898] usb 5-1: Using ep0 maxpacket: 8
[  318.661151][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  318.714076][ T5898] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  318.723419][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.765181][ T5898] usb 5-1: config 0 descriptor??
[  319.068480][ T5898] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  319.219313][ T5820] ocfs2: Unmounting device (7,5) on (node local)
[  319.286598][  T788] usb 5-1: USB disconnect, device number 15
[  319.444693][T12156] netlink: 'syz.5.2494': attribute type 1 has an invalid length.
[  319.452535][T12156] netlink: 'syz.5.2494': attribute type 2 has an invalid length.
[  319.539034][T12156] netlink: 'syz.5.2494': attribute type 1 has an invalid length.
[  319.588993][T12156] netlink: 'syz.5.2494': attribute type 3 has an invalid length.
[  319.616865][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2494'.
[  319.699197][   T49] hsr_slave_0: left promiscuous mode
[  319.724323][   T49] hsr_slave_1: left promiscuous mode
[  319.743156][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  319.751953][T12166] loop6: detected capacity change from 0 to 128
[  319.774886][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  319.811151][   T30] audit: type=1800 audit(1771003595.023:1742): pid=12166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2500" name="file1" dev="loop6" ino=1048816 res=0 errno=0
[  319.870604][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  319.934083][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  320.028613][   T49] veth1_macvtap: left promiscuous mode
[  320.052727][   T49] veth0_macvtap: left promiscuous mode
[  320.070046][   T49] veth1_vlan: left promiscuous mode
[  320.087835][   T49] veth0_vlan: left promiscuous mode
[  320.119529][T12177] loop4: detected capacity change from 0 to 256
[  320.172855][T12177] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x8978cc48, utbl_chksum : 0xe619d30d)
[  320.266060][   T30] audit: type=1800 audit(1771003595.483:1743): pid=12177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2504" name="file2" dev="loop4" ino=1048818 res=0 errno=0
[  320.371508][T12183] loop6: detected capacity change from 0 to 512
[  320.392791][T12183] EXT4-fs: Ignoring removed oldalloc option
[  320.476665][T12183] EXT4-fs (loop6): 1 truncate cleaned up
[  320.496433][T12183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.552933][T12183] EXT4-fs (loop6): Online resizing not supported with sparse_super2
[  320.577226][ T5941] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  320.594715][ T5822] Bluetooth: hci6: command tx timeout
[  320.662332][ T9513] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.705927][T12189] netlink: 'syz.4.2509': attribute type 2 has an invalid length.
[  320.735986][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  320.748637][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  320.802205][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  320.847024][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  320.882925][ T5941] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  320.900961][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.918331][ T5941] usb 4-1: Product: syz
[  320.927025][   T49] team0 (unregistering): Port device team_slave_1 removed
[  320.934480][ T5941] usb 4-1: Manufacturer: syz
[  320.939133][ T5941] usb 4-1: SerialNumber: syz
[  320.957781][ T5941] usb 4-1: config 0 descriptor??
[  320.974813][   T49] team0 (unregistering): Port device team_slave_0 removed
[  321.193817][ T5941] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  321.203323][T12082] chnl_net:caif_netlink_parms(): no params data found
[  321.298129][ T1079] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  321.354542][   T58] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  321.374358][   T58] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  321.463640][ T5941] usb 4-1: USB disconnect, device number 12
[  321.508655][   T58] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  321.535978][T12199] loop5: detected capacity change from 0 to 2048
[  321.629503][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  321.642032][T12206] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  321.768876][T12199] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12
[  321.816360][T12199] Remounting filesystem read-only
[  321.899939][T12082] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.934154][T12082] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.965617][T12082] bridge_slave_0: entered allmulticast mode
[  322.005660][T12082] bridge_slave_0: entered promiscuous mode
[  322.038245][T12082] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.082683][T12082] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.134809][T12082] bridge_slave_1: entered allmulticast mode
[  322.191806][T12082] bridge_slave_1: entered promiscuous mode
[  322.238755][T12226] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  322.416151][T12082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.480214][T12082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.664009][ T5822] Bluetooth: hci6: command tx timeout
[  322.723287][T12082] team0: Port device team_slave_0 added
[  322.734467][ T5877] udevd[5877]: symlink '../../loop3' '/dev/disk/by-diskseq/791.tmp-b7:3' failed: Read-only file system
[  322.772564][ T6116] udevd[6116]: symlink '../../loop6' '/dev/disk/by-diskseq/800.tmp-b7:6' failed: Read-only file system
[  322.806682][T12082] team0: Port device team_slave_1 added
[  322.931618][T12082] batman_adv: batadv0: Adding interface: batadv_slave_0
[  322.964939][T12082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.052696][T12082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.083436][T12212] loop4: detected capacity change from 0 to 32768
[  323.162858][T12082] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.175579][T12212] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2519 (12212)
[  323.206484][T12082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.217128][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/800.tmp-b7:6' failed: Read-only file system
[  323.273664][T12212] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  323.315049][T12212] BTRFS info (device loop4): using sha256 checksum algorithm
[  323.374020][T12082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.400967][ T5877] udevd[5877]: symlink '../../loop5' '/dev/disk/by-diskseq/802.tmp-b7:5' failed: Read-only file system
[  323.436089][ T6454] udevd[6454]: symlink '../../loop1' '/dev/disk/by-diskseq/781.tmp-b7:1' failed: Read-only file system
[  323.563818][ T6116] udevd[6116]: symlink '../../loop4' '/dev/disk/by-diskseq/803.tmp-b7:4' failed: Read-only file system
[  323.745385][T12212] BTRFS info (device loop4): enabling ssd optimizations
[  323.765381][T12082] hsr_slave_0: entered promiscuous mode
[  323.778066][T12212] BTRFS info (device loop4): turning on async discard
[  323.785157][T12212] BTRFS info (device loop4): enabling free space tree
[  323.794268][T12082] hsr_slave_1: entered promiscuous mode
[  323.868075][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/800.tmp-b7:6' failed: Read-only file system
[  323.893214][ T6454] udevd[6454]: symlink '../../loop3' '/dev/disk/by-diskseq/791.tmp-b7:3' failed: Read-only file system
[  323.902389][T12273] loop6: detected capacity change from 0 to 16
[  323.923861][ T6165] udevd[6165]: symlink '../../loop5' '/dev/disk/by-diskseq/802.tmp-b7:5' failed: Read-only file system
[  323.964521][ T5884] udevd[5884]: symlink '../../loop1' '/dev/disk/by-diskseq/781.tmp-b7:1' failed: Read-only file system
[  324.008868][T12273] erofs (device loop6): mounted with root inode @ nid 36.
[  324.095628][ T5831] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  324.753104][ T5822] Bluetooth: hci6: command tx timeout
[  325.113812][T12082] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  325.182542][T12082] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  325.239324][T12274] loop3: detected capacity change from 0 to 32768
[  325.250863][T12276] loop1: detected capacity change from 0 to 32768
[  325.264171][T12082] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  325.316639][T12274] JBD2: Ignoring recovery information on journal
[  325.375743][T12082] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  325.392670][T12301] loop4: detected capacity change from 0 to 4096
[  325.480069][T12301] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  325.508019][T12274] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  325.552511][T12276] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  325.824993][T12082] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.932399][T12276] XFS (loop1): Ending clean mount
[  325.971222][T12082] 8021q: adding VLAN 0 to HW filter on device team0
[  326.036536][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.043724][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.211749][ T5825] ocfs2: Unmounting device (7,3) on (node local)
[  326.273762][ T5824] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.291461][T12328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  326.402073][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.409285][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.580563][T12329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  326.630318][T12291] loop6: detected capacity change from 0 to 32768
[  326.803971][T12291] XFS (loop6): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  327.149319][T12356] loop5: detected capacity change from 0 to 1024
[  327.177750][T12356] EXT4-fs: inline encryption not supported
[  327.227975][T12291] XFS (loop6): Starting recovery (logdev: internal)
[  327.305317][T12356] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.314690][T12291] XFS (loop6): Ending recovery (logdev: internal)
[  327.351709][ T5951] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  327.447725][T12356] EXT4-fs error (device loop5): mb_free_blocks:2047: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt.
[  327.464644][T12366] loop4: detected capacity change from 0 to 2048
[  327.494309][T12356] EXT4-fs (loop5): Remounting filesystem read-only
[  327.533846][T12368] EXT4-fs (loop5): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 15; err -30
[  327.541140][T12366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.564448][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  327.580244][ T5951] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0
[  327.581983][ T9513] XFS (loop6): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  327.608226][ T5951] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25
[  327.617774][T12366] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  327.669464][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.713176][ T5951] usb 2-1: Product: syz
[  327.757366][T12082] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.763191][ T5951] usb 2-1: Manufacturer: syz
[  327.772987][ T5877] udevd[5877]: symlink '../../loop4' '/dev/disk/by-diskseq/815.tmp-b7:4' failed: Read-only file system
[  327.776645][ T6116] udevd[6116]: symlink '../../loop6' '/dev/disk/by-diskseq/813.tmp-b7:6' failed: Read-only file system
[  327.784408][ T5951] usb 2-1: SerialNumber: syz
[  327.834323][ T5820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.866908][ T5877] udevd[5877]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  327.871885][ T6116] udevd[6116]: symlink '../../loop6' '/dev/disk/by-diskseq/816.tmp-b7:6' failed: Read-only file system
[  327.880017][ T5951] usb 2-1: config 0 descriptor??
[  327.985433][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.996679][ T5951] aircable 2-1:0.0: aircable converter detected
[  328.008060][ T5951] usb 2-1: aircable converter now attached to ttyUSB0
[  328.018267][ T5884] udevd[5884]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  328.092031][ T5884] udevd[5884]: symlink '../../loop5' '/dev/disk/by-diskseq/814.tmp-b7:5' failed: Read-only file system
[  328.142321][T12379] loop5: detected capacity change from 0 to 128
[  328.291500][ T6116] udevd[6116]: symlink '../../loop5' '/dev/disk/by-diskseq/814.tmp-b7:5' failed: Read-only file system
[  328.376628][ T6116] udevd[6116]: symlink '../../loop5' '/dev/disk/by-label/SYZKALLER.tmp-b7:5' failed: Read-only file system
[  328.387432][ T6454] udevd[6454]: symlink '../../loop3' '/dev/disk/by-diskseq/811.tmp-b7:3' failed: Read-only file system
[  328.407789][ T5877] udevd[5877]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  328.489119][ T5912] usb 2-1: USB disconnect, device number 14
[  328.516856][ T5912] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0
[  328.525657][ T5912] aircable 2-1:0.0: device disconnected
[  328.629658][T12392] loop5: detected capacity change from 0 to 16
[  328.644489][T12387] loop4: detected capacity change from 0 to 4096
[  328.690603][T12387] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  328.714852][T12392] erofs (device loop5): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  328.759959][T12392] erofs (device loop5): mounted with root inode @ nid 36.
[  328.816881][T12392] syz.5.2558: attempt to access beyond end of device
[  328.816881][T12392] loop5: rw=0, sector=301994239, nr_sectors = 1 limit=16
[  328.843407][T12396] loop6: detected capacity change from 0 to 1024
[  328.896206][T12387] ntfs3(loop4): ino=19, mi_enum_attr
[  328.922202][T12392] erofs (device loop5): read error -5 @ 0 of nid 36
[  328.923163][T12387] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  328.946763][T12082] veth0_vlan: entered promiscuous mode
[  328.987873][T12399] syz.5.2558: attempt to access beyond end of device
[  328.987873][T12399] loop5: rw=0, sector=301994239, nr_sectors = 1 limit=16
[  329.043916][T12399] erofs (device loop5): read error -5 @ 0 of nid 36
[  329.058865][T12387] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  329.076230][T12082] veth1_vlan: entered promiscuous mode
[  329.148670][T12387] ntfs3(loop4): failed to convert "c46c" to cp874
[  329.233609][T12387] ntfs3(loop4): ino=20, mi_enum_attr
[  329.281484][T12082] veth0_macvtap: entered promiscuous mode
[  329.332658][T12082] veth1_macvtap: entered promiscuous mode
[  329.378761][T12406] loop5: detected capacity change from 0 to 512
[  329.467914][T12082] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.523152][T12082] batman_adv: batadv0: Interface activated: batadv_slave_1
[  329.536899][T12406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  329.675928][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.684973][T12406] ext4 filesystem being mounted at /442/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  329.741520][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.750295][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.860463][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  329.932972][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'.
[  329.973555][ T5820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.999861][T12421] hsr0: entered promiscuous mode
[  330.066200][T12421] macvlan2: entered allmulticast mode
[  330.085930][T12421] hsr0: entered allmulticast mode
[  330.096581][T12421] hsr_slave_0: entered allmulticast mode
[  330.139146][T12421] hsr_slave_1: entered allmulticast mode
[  330.172969][T12426] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2572'.
[  330.213875][T12426] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2572'.
[  330.272927][  T788] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  330.289493][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.329175][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.433623][  T788] usb 4-1: Using ep0 maxpacket: 32
[  330.446413][  T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.464398][  T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.477399][  T788] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  330.479676][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.488420][  T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.517637][  T788] usb 4-1: config 0 descriptor??
[  330.524017][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.707060][T12436] sctp: [Deprecated]: syz.7.2476 (pid 12436) Use of struct sctp_assoc_value in delayed_ack socket option.
[  330.707060][T12436] Use struct sctp_sack_info instead
[  330.745711][  T788] usbhid 4-1:0.0: can't add hid device: -71
[  330.753913][  T788] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  330.770547][   T30] audit: type=1326 audit(1771004373.956:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12437 comm="syz.1.2577" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc85bd9bf79 code=0x0
[  330.778311][  T788] usb 4-1: USB disconnect, device number 13
[  331.036132][T12429] loop6: detected capacity change from 0 to 32768
[  331.077536][T12429] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  331.206636][T12429] XFS (loop6): Ending clean mount
[  331.232309][T12454] loop7: detected capacity change from 0 to 16
[  331.238676][T12429] XFS (loop6): Quotacheck needed: Please wait.
[  331.260189][T12454] erofs (device loop7): mounted with root inode @ nid 36.
[  331.286811][T12454] erofs (device loop7): readahead error at folio 2 @ nid 89
[  331.297282][T12454] syz.7.2580: attempt to access beyond end of device
[  331.297282][T12454] loop7: rw=524288, sector=524296, nr_sectors = 8 limit=16
[  331.336056][T12454] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  331.387670][T12454] erofs (device loop7): read error -117 @ 0 of nid 89
[  331.395673][T12429] XFS (loop6): Quotacheck: Done.
[  331.449010][   T30] audit: type=1800 audit(1771004374.623:1745): pid=12454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2580" name="file2" dev="overlay" ino=89 res=0 errno=0
[  331.502881][ T9513] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  331.688862][T12458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2582'.
[  331.711767][T12458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2582'.
[  331.764116][T12082] erofs (device loop7): invalid fast symlink size 39 @ nid 83
[  331.806982][T12082] erofs (device loop7): invalid fast symlink size 39 @ nid 83
[  332.255531][T12472] program syz.1.2589 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  332.810757][T12493] loop6: detected capacity change from 0 to 256
[  332.878064][T12493] exfat: Deprecated parameter 'utf8'
[  332.921434][T12493] exfat: Deprecated parameter 'namecase'
[  332.981656][ T6116] udevd[6116]: symlink '../../loop5' '/dev/disk/by-diskseq/828.tmp-b7:5' failed: Read-only file system
[  332.995227][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/832.tmp-b7:6' failed: Read-only file system
[  333.027765][ T6454] udevd[6454]: symlink '../../loop3' '/dev/disk/by-diskseq/811.tmp-b7:3' failed: Read-only file system
[  333.046969][T12493] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  333.061470][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-uuid/1234-1234.tmp-b7:6' failed: Read-only file system
[  333.088022][   T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.126608][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/832.tmp-b7:6' failed: Read-only file system
[  333.141847][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-uuid/1234-1234.tmp-b7:6' failed: Read-only file system
[  333.239014][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/832.tmp-b7:6' failed: Read-only file system
[  333.277262][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/832.tmp-b7:6' failed: Read-only file system
[  333.304304][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/833.tmp-b7:6' failed: Read-only file system
[  333.409944][ T5877] udevd[5877]: symlink '../../loop1' '/dev/disk/by-diskseq/812.tmp-b7:1' failed: Read-only file system
[  333.489020][   T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.737346][   T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.813210][T12517] loop3: detected capacity change from 0 to 256
[  333.832184][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  333.842270][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  333.863697][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  333.872453][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  333.882900][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  334.074699][   T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.333904][T12531] loop6: detected capacity change from 0 to 128
[  334.381164][T12531] FAT-fs (loop6): bogus number of FAT structure
[  334.395414][T12531] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  334.408894][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2615'.
[  334.431758][T12531] FAT-fs (loop6): Can't find a valid FAT filesystem
[  334.498137][ T5898] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  334.506041][T12537] loop1: detected capacity change from 0 to 16
[  334.602537][T12537] erofs (device loop1): mounted with root inode @ nid 36.
[  334.708784][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short
[  334.750531][T12537] erofs (device loop1): readahead error at folio 2 @ nid 89
[  334.774598][ T5898] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  334.841017][ T5898] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  334.859557][T12537] syz.1.2617: attempt to access beyond end of device
[  334.859557][T12537] loop1: rw=524288, sector=524296, nr_sectors = 8 limit=16
[  334.885245][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.912062][   T36] bridge_slave_1: left allmulticast mode
[  334.919864][ T5898] usb 4-1: Product: syz
[  334.924048][ T5898] usb 4-1: Manufacturer: syz
[  334.933313][   T36] bridge_slave_1: left promiscuous mode
[  334.939221][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.947075][ T5898] usb 4-1: SerialNumber: syz
[  334.960322][T12537] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  335.003521][   T36] bridge_slave_0: left allmulticast mode
[  335.009241][   T36] bridge_slave_0: left promiscuous mode
[  335.010404][T12537] erofs (device loop1): read error -117 @ 0 of nid 89
[  335.015891][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.066055][   T30] audit: type=1800 audit(1771004378.240:1746): pid=12537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2617" name="file2" dev="overlay" ino=89 res=0 errno=0
[  335.211270][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  335.386738][ T5824] erofs (device loop1): invalid fast symlink size 39 @ nid 83
[  335.452823][ T5824] erofs (device loop1): invalid fast symlink size 39 @ nid 83
[  335.482955][T12531] loop6: detected capacity change from 0 to 32768
[  335.496888][T12531] xfs: Bad value for 'logbsize'
[  335.753168][   T30] audit: type=1326 audit(1771004378.908:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ce39bf79 code=0x7ffc0000
[  335.779554][ T5898] usb 4-1: reset high-speed USB device number 14 using dummy_hcd
[  335.856379][   T30] audit: type=1326 audit(1771004378.918:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa8ce39bf79 code=0x7ffc0000
[  335.975142][   T30] audit: type=1326 audit(1771004378.918:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ce39bf79 code=0x7ffc0000
[  335.997753][ T5822] Bluetooth: hci0: command tx timeout
[  336.025387][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short
[  336.091365][ T5898] usb 4-1: device firmware changed
[  336.097434][   T30] audit: type=1326 audit(1771004378.918:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ce39bf79 code=0x7ffc0000
[  336.172131][ T5898] usb 4-1: USB disconnect, device number 14
[  336.198116][   T30] audit: type=1326 audit(1771004378.918:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8ce39bf79 code=0x7ffc0000
[  336.296970][   T30] audit: type=1326 audit(1771004378.918:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ce39bf79 code=0x7ffc0000
[  336.359960][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  336.384975][   T30] audit: type=1326 audit(1771004378.918:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ce39bf79 code=0x7ffc0000
[  336.455818][   T30] audit: type=1326 audit(1771004378.918:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fa8ce39bf79 code=0x7ffc0000
[  336.465553][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  336.506769][T12565] loop6: detected capacity change from 0 to 8192
[  336.551309][   T36] bond0 (unregistering): Released all slaves
[  336.563933][   T30] audit: type=1326 audit(1771004378.918:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ce39bf79 code=0x7ffc0000
[  336.621636][T12565] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  336.652182][   T30] audit: type=1326 audit(1771004378.918:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.4.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ce39bf79 code=0x7ffc0000
[  336.911125][ T5822] Bluetooth: hci5: unexpected event for opcode 0x204e
[  336.987984][T12582] loop4: detected capacity change from 0 to 1024
[  337.064536][T12582] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  337.151171][T12582] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869)
[  337.213667][T12582] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  337.265639][T12582] EXT4-fs (loop4): filesystem has both journal inode and journal device!
[  337.462963][T12516] chnl_net:caif_netlink_parms(): no params data found
[  337.897588][T12586] loop5: detected capacity change from 0 to 32768
[  338.034374][T12586] 
[  338.034374][T12586]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  338.034374][T12586] 
[  338.092205][ T5822] Bluetooth: hci0: command tx timeout
[  338.141251][T12586] 
[  338.141251][T12586]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  338.141251][T12586] 
[  338.148697][ T5877] udevd[5877]: symlink '../../loop5' '/dev/disk/by-diskseq/845.tmp-b7:5' failed: Read-only file system
[  338.166707][T12609] ERROR: (device loop5): diWrite: ixpxd invalid
[  338.166707][T12609] 
[  338.183385][   T36] hsr_slave_0: left promiscuous mode
[  338.196251][ T5877] udevd[5877]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system
[  338.221443][T12609] ERROR: (device loop5): txCommit: 
[  338.221443][T12609] 
[  338.227562][T12586] JFS: metapage_get_blocks failed
[  338.244089][T12609] ERROR: (device loop5): diFree: invalid inoext
[  338.244089][T12609] 
[  338.245626][   T36] hsr_slave_1: left promiscuous mode
[  338.298851][T12586] 
[  338.298851][T12586]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  338.298851][T12586] 
[  338.310518][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  338.360846][ T6116] udevd[6116]: symlink '../../loop4' '/dev/disk/by-diskseq/843.tmp-b7:4' failed: Read-only file system
[  338.361553][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.425640][T12586] 
[  338.425640][T12586]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  338.425640][T12586] 
[  338.447320][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  338.471976][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.555657][   T36] veth1_macvtap: left promiscuous mode
[  338.561189][   T36] veth0_macvtap: left promiscuous mode
[  338.561638][ T5877] udevd[5877]: symlink '../../loop5' '/dev/disk/by-diskseq/845.tmp-b7:5' failed: Read-only file system
[  338.567060][T12586] 
[  338.567060][T12586]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  338.567060][T12586] 
[  338.622479][   T36] veth1_vlan: left promiscuous mode
[  338.627885][   T36] veth0_vlan: left promiscuous mode
[  338.674258][ T5877] udevd[5877]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system
[  338.704851][T12586] 
[  338.704851][T12586]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  338.704851][T12586] 
[  338.718419][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-diskseq/835.tmp-b7:3' failed: Read-only file system
[  338.766486][ T6454] udevd[6454]: symlink '../../loop4' '/dev/disk/by-diskseq/843.tmp-b7:4' failed: Read-only file system
[  338.777387][ T5884] udevd[5884]: symlink '../../loop6' '/dev/disk/by-diskseq/844.tmp-b7:6' failed: Read-only file system
[  338.853726][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  338.874118][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  338.885973][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  338.905189][ T1089] ERROR: (device loop5): diWrite: ixpxd invalid
[  338.905189][ T1089] 
[  338.935074][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  338.958707][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  338.976435][ T1089] ERROR: (device loop5): txCommit: 
[  338.976435][ T1089] 
[  338.996137][ T1089] jfs_write_inode: jfs_commit_inode failed!
[  339.000076][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/844.tmp-b7:6' failed: Read-only file system
[  339.009889][ T5820] 
[  339.009889][ T5820]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  339.009889][ T5820] 
[  339.026279][ T5820] 
[  339.026279][ T5820]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  339.026279][ T5820] 
[  339.124643][ T5877] udevd[5877]: symlink '../../loop5' '/dev/disk/by-diskseq/845.tmp-b7:5' failed: Read-only file system
[  339.673518][   T36] team0 (unregistering): Port device team_slave_1 removed
[  339.738394][   T36] team0 (unregistering): Port device team_slave_0 removed
[  340.168472][ T5828] Bluetooth: hci0: command tx timeout
[  340.168666][T12516] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.223965][T12516] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.247318][T12516] bridge_slave_0: entered allmulticast mode
[  340.267873][T12516] bridge_slave_0: entered promiscuous mode
[  340.334483][T12516] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.350971][T12516] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.387910][T12516] bridge_slave_1: entered allmulticast mode
[  340.404509][T12516] bridge_slave_1: entered promiscuous mode
[  340.636915][T12516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.666894][T12516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.803517][T12516] team0: Port device team_slave_0 added
[  340.901522][T12516] team0: Port device team_slave_1 added
[  341.135156][ T5828] Bluetooth: hci3: command tx timeout
[  341.168156][T12516] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.195895][T12516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  341.342102][T12516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.394016][T12516] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.417631][T12516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  341.499612][T12516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.627267][T12677] loop5: detected capacity change from 0 to 256
[  341.720606][T12516] hsr_slave_0: entered promiscuous mode
[  341.729530][T12516] hsr_slave_1: entered promiscuous mode
[  341.799396][T12677] syz.5.2659: attempt to access beyond end of device
[  341.799396][T12677] loop5: rw=2049, sector=256, nr_sectors = 40 limit=256
[  341.841659][T12681] loop6: detected capacity change from 0 to 128
[  341.970999][   T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.022410][   T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.037395][ T5826] kernel read not supported for file /dsp (pid: 5826 comm: kworker/0:3)
[  342.194389][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2662'.
[  342.255608][ T5828] Bluetooth: hci0: command tx timeout
[  342.357054][T12624] chnl_net:caif_netlink_parms(): no params data found
[  342.495195][   T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.519289][   T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.770785][T12701] loop5: detected capacity change from 0 to 256
[  342.899473][   T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  342.967301][   T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.095687][T12686] loop6: detected capacity change from 0 to 32768
[  343.110975][T12706] loop3: detected capacity change from 0 to 4096
[  343.142688][T12706] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  343.200410][T12686] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  343.218097][ T5828] Bluetooth: hci3: command tx timeout
[  343.246122][ T6454] udevd[6454]: symlink '../../loop5' '/dev/disk/by-diskseq/852.tmp-b7:5' failed: Read-only file system
[  343.297147][T12693] loop4: detected capacity change from 0 to 32768
[  343.297440][T12706] ntfs3(loop3): ino=0, mi_enum_attr
[  343.360893][T12693] (syz.4.2665,12693,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  343.384100][   T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  343.398143][T12686] XFS (loop6): Ending clean mount
[  343.398976][   T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.449005][T12686] XFS (loop6): Quotacheck needed: Please wait.
[  343.465610][T12693] (syz.4.2665,12693,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  343.513541][ T5877] udevd[5877]: symlink '../../loop3' '/dev/disk/by-diskseq/854.tmp-b7:3' failed: Read-only file system
[  343.524865][T12686] XFS (loop6): Quotacheck: Done.
[  343.537536][T12706] ntfs3(loop3): ino=0, mi_enum_attr
[  343.588968][ T5877] udevd[5877]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  343.590682][ T6116] udevd[6116]: symlink '../../loop6' '/dev/disk/by-diskseq/853.tmp-b7:6' failed: Read-only file system
[  343.612458][T12706] ntfs3(loop3): Failed to load $MFT (-2).
[  343.614160][ T5884] udevd[5884]: symlink '../../loop5' '/dev/disk/by-diskseq/852.tmp-b7:5' failed: Read-only file system
[  343.650656][T12693] JBD2: Ignoring recovery information on journal
[  343.677707][ T6454] udevd[6454]: symlink '../../loop4' '/dev/disk/by-diskseq/855.tmp-b7:4' failed: Read-only file system
[  343.692009][ T6116] udevd[6116]: symlink '../../loop6' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:6' failed: Read-only file system
[  343.712690][ T5877] udevd[5877]: symlink '../../loop3' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:3' failed: Read-only file system
[  343.721430][ T6454] udevd[6454]: symlink '../../loop4' '/dev/disk/by-uuid/9357e9d7-5182-4c22-8242-b9b0d0fb6750.tmp-b7:4' failed: Read-only file system
[  343.880956][T12693] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  343.885421][ T6454] udevd[6454]: symlink '../../loop4' '/dev/disk/by-diskseq/855.tmp-b7:4' failed: Read-only file system
[  343.913102][T12730] netlink: 'syz.5.2672': attribute type 5 has an invalid length.
[  343.936415][ T9513] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  344.279409][ T5831] ocfs2: Unmounting device (7,4) on (node local)
[  344.325280][T12624] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.353050][T12624] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.360414][T12624] bridge_slave_0: entered allmulticast mode
[  344.452618][T12624] bridge_slave_0: entered promiscuous mode
[  344.523447][T12624] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.530607][T12624] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.610667][T12624] bridge_slave_1: entered allmulticast mode
[  344.650645][T12624] bridge_slave_1: entered promiscuous mode
[  344.861402][T12624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.910587][T12624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.021476][   T36] bridge_slave_1: left allmulticast mode
[  345.036121][   T36] bridge_slave_1: left promiscuous mode
[  345.047921][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.091301][   T36] bridge_slave_0: left allmulticast mode
[  345.106058][   T36] bridge_slave_0: left promiscuous mode
[  345.111935][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.311119][ T5828] Bluetooth: hci3: command tx timeout
[  345.697200][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  345.751148][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  345.779860][   T36] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  345.801034][   T36] bond0 (unregistering): Released all slaves
[  345.882615][T12624] team0: Port device team_slave_0 added
[  345.937688][T12624] team0: Port device team_slave_1 added
[  345.987323][   T36] tipc: Disabling bearer <eth:macvlan1>
[  346.011631][   T36] tipc: Left network mode
[  346.158053][T12624] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.187472][T12624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  346.254027][T12624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.302343][T12624] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.302551][T12790] loop3: detected capacity change from 0 to 128
[  346.310374][T12624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  346.343623][T12624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.394302][T12790] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  346.468824][T12790] hpfs: filesystem error: improperly stopped
[  346.474870][T12790] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  346.492373][   T30] audit: type=1326 audit(1771004389.621:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12793 comm="syz.5.2687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d6679bf79 code=0x0
[  346.501485][T12790] hpfs: You really don't want any checks? You are crazy...
[  346.525360][T12790] hpfs: hpfs_map_sector(): read error
[  346.550492][T12790] hpfs: code page support is disabled
[  346.557648][T12790] hpfs: hpfs_map_4sectors(): unaligned read
[  346.565221][T12516] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  346.573815][T12790] hpfs: hpfs_map_4sectors(): unaligned read
[  346.592675][T12790] hpfs: filesystem error: unable to find root dir
[  346.675311][T12516] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  346.768157][T12800] loop3: detected capacity change from 0 to 256
[  346.819478][T12800] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  346.845859][T12516] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  346.867761][T12800] exFAT-fs (loop3): valid_size(150994954) is greater than size(10)
[  346.886432][   T30] audit: type=1800 audit(1771004390.020:1758): pid=12800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2688" name="file1" dev="loop3" ino=1048839 res=0 errno=0
[  346.955943][T12516] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  347.014880][T12624] hsr_slave_0: entered promiscuous mode
[  347.039029][T12624] hsr_slave_1: entered promiscuous mode
[  347.060141][T12624] debugfs: 'hsr0' already exists in 'hsr'
[  347.085403][T12624] Cannot create hsr debugfs directory
[  347.134442][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  347.146067][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  347.163636][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  347.181498][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  347.229066][   T36] hsr0: left allmulticast mode
[  347.234837][   T36] macsec0: left allmulticast mode
[  347.241150][   T36] veth1_macvtap: left allmulticast mode
[  347.252754][   T36] veth1_macvtap: left promiscuous mode
[  347.258360][   T36] veth0_macvtap: left promiscuous mode
[  347.267532][   T36] veth1_vlan: left allmulticast mode
[  347.273319][   T36] veth1_vlan: left promiscuous mode
[  347.278799][   T36] veth0_vlan: left promiscuous mode
[  347.314245][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  347.315496][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.355403][T12815] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  347.370944][T12815] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  347.397017][ T5828] Bluetooth: hci3: command tx timeout
[  347.406458][T12815] overlayfs: conflicting lowerdir path
[  347.547904][T12820] loop3: detected capacity change from 0 to 512
[  347.575910][T12820] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2693: inode has both inline data and extents flags
[  347.590480][T12820] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  347.592352][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  347.608138][    C1] EXT4-fs (loop3): initial error at time 1771004390: ext4_orphan_get:1391: inode 15
[  347.617569][    C1] EXT4-fs (loop3): last error at time 1771004390: ext4_orphan_get:1391: inode 15
[  347.625254][T12820] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2693: couldn't read orphan inode 15 (err -117)
[  347.639093][T12820] loop3: lost filesystem error report for type 5 error -117
[  347.658293][T12820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.687729][T12820] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #2: comm syz.3.2693: invalid size
[  347.740927][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.923229][   T36] team0 (unregistering): Port device team_slave_1 removed
[  347.943002][   T36] team0 (unregistering): Port device team_slave_0 removed
[  348.036249][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2696'.
[  348.274448][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-diskseq/864.tmp-b7:3' failed: Read-only file system
[  348.301886][ T6454] udevd[6454]: symlink '../../loop6' '/dev/disk/by-diskseq/857.tmp-b7:6' failed: Read-only file system
[  348.341487][ T5877] udevd[5877]: symlink '../../loop5' '/dev/disk/by-diskseq/852.tmp-b7:5' failed: Read-only file system
[  348.410148][T12836] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2699'.
[  348.513811][ T5877] udevd[5877]: symlink '../../loop3' '/dev/disk/by-diskseq/864.tmp-b7:3' failed: Read-only file system
[  348.604516][ T5877] udevd[5877]: symlink '../../loop4' '/dev/disk/by-diskseq/858.tmp-b7:4' failed: Read-only file system
[  348.631779][ T6116] udevd[6116]: symlink '../../loop6' '/dev/disk/by-diskseq/857.tmp-b7:6' failed: Read-only file system
[  348.705043][ T5877] udevd[5877]: symlink '../../loop5' '/dev/disk/by-diskseq/852.tmp-b7:5' failed: Read-only file system
[  348.772163][ T5877] udevd[5877]: symlink '../../loop3' '/dev/disk/by-diskseq/864.tmp-b7:3' failed: Read-only file system
[  348.864047][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/857.tmp-b7:6' failed: Read-only file system
[  348.993229][ T5877] udevd[5877]: symlink '../../loop4' '/dev/disk/by-diskseq/858.tmp-b7:4' failed: Read-only file system
[  349.474917][T12862] loop5: detected capacity change from 0 to 32768
[  349.544506][T12862] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  349.553774][T12862] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  349.576393][T12516] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.637834][T12862] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  349.657460][ T5826] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  349.658241][T12516] 8021q: adding VLAN 0 to HW filter on device team0
[  349.680913][ T5826] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  349.889359][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.896604][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.985617][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.992932][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.048819][ T5826] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 366ms
[  350.097583][ T5826] gfs2: fsid=syz:syz.0: jid=0: Done
[  350.105376][T12862] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  350.362292][T12624] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  350.411826][T12624] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  350.491008][T12624] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  350.540761][T12624] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  350.698349][T12862] gfs2: fsid=syz:syz.0: found 1 quota changes
[  351.243033][T12624] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.298590][T12624] 8021q: adding VLAN 0 to HW filter on device team0
[  351.339187][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.346384][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.447306][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.454545][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.811952][T12516] 8021q: adding VLAN 0 to HW filter on device batadv0
[  352.197420][ T5898] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  352.370849][ T5898] usb 5-1: Using ep0 maxpacket: 8
[  352.427833][ T5898] usb 5-1: config 0 has an invalid interface number: 56 but max is 0
[  352.436480][ T5898] usb 5-1: config 0 has no interface number 0
[  352.475339][T12624] 8021q: adding VLAN 0 to HW filter on device batadv0
[  352.526223][ T5898] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  352.562171][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.617891][ T5898] usb 5-1: Product: syz
[  352.658582][ T5898] usb 5-1: Manufacturer: syz
[  352.663238][ T5898] usb 5-1: SerialNumber: syz
[  352.712720][ T5898] usb 5-1: config 0 descriptor??
[  352.744576][ T5898] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  352.789327][ T5898] pctv452e: pctv452e_power_ctrl: 1
[  352.789327][ T5898] 
[  352.820535][ T5898] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  352.820535][ T5898] 
[  352.853241][ T5898] dvb-usb: bulk message failed: -22 (5/0)
[  352.885328][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  352.980222][ T5898] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  352.988728][ T5898] usb 5-1: media controller created
[  353.045228][ T5898] dvb-usb: bulk message failed: -22 (8/0)
[  353.072155][ T5898] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  353.102257][ T5898] dvb-usb: MAC address reading failed.
[  353.183499][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  353.208738][T12977] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.217842][T12977] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.269783][T12516] veth0_vlan: entered promiscuous mode
[  353.334299][ T6116] udevd[6116]: symlink '../../loop6' '/dev/disk/by-diskseq/857.tmp-b7:6' failed: Read-only file system
[  353.341682][T12516] veth1_vlan: entered promiscuous mode
[  353.430326][ T5898] DVB: Unable to find symbol stb0899_attach()
[  353.461047][ T5898] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  353.488181][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-diskseq/864.tmp-b7:3' failed: Read-only file system
[  353.528886][T12516] veth0_macvtap: entered promiscuous mode
[  353.571742][T12516] veth1_macvtap: entered promiscuous mode
[  353.622331][ T5898] rc_core: IR keymap rc-tt-1500 not found
[  353.628266][ T5898] Registered IR keymap rc-empty
[  353.680442][ T5898] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  353.703815][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-diskseq/864.tmp-b7:3' failed: Read-only file system
[  353.723118][ T5898] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input15
[  353.743377][ T6454] udevd[6454]: symlink '../../loop4' '/dev/disk/by-diskseq/858.tmp-b7:4' failed: Read-only file system
[  353.759223][ T5898] dvb-usb: schedule remote query interval to 100 msecs.
[  353.769200][ T5898] pctv452e: pctv452e_power_ctrl: 0
[  353.769200][ T5898] 
[  353.849352][ T5898] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  353.870411][T12516] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.872700][ T5898] usb 5-1: USB disconnect, device number 16
[  353.885799][   T29] dvb-usb: bulk message failed: -22 (4/0)
[  353.894573][   T29] dvb-usb: error -22 while querying for an remote control event.
[  353.961015][T12516] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.083249][ T6116] udevd[6116]: symlink '../../loop5' '/dev/disk/by-diskseq/866.tmp-b7:5' failed: Read-only file system
[  354.139779][ T1079] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.161786][T12624] veth0_vlan: entered promiscuous mode
[  354.180973][ T5898] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  354.186998][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-diskseq/864.tmp-b7:3' failed: Read-only file system
[  354.296578][ T1079] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.300324][ T6454] udevd[6454]: symlink '../../loop5' '/dev/disk/by-diskseq/866.tmp-b7:5' failed: Read-only file system
[  354.325920][ T1079] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.373078][T12624] veth1_vlan: entered promiscuous mode
[  354.406069][ T1079] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.457343][ T5877] udevd[5877]: symlink '../../loop3' '/dev/disk/by-diskseq/864.tmp-b7:3' failed: Read-only file system
[  354.618353][T12624] veth0_macvtap: entered promiscuous mode
[  354.637844][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.667121][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.708871][T12624] veth1_macvtap: entered promiscuous mode
[  354.739709][ T5877] udevd[5877]: symlink '../../loop3' '/dev/disk/by-diskseq/864.tmp-b7:3' failed: Read-only file system
[  354.796154][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.805122][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.856658][T12624] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.913730][T12624] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.980217][ T1079] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.996194][ T1079] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.038960][ T1079] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.040040][T12990] loop4: detected capacity change from 0 to 32768
[  355.063059][ T5877] udevd[5877]: symlink '../../loop8' '/dev/disk/by-diskseq/695.tmp-b7:8' failed: Read-only file system
[  355.104500][ T1079] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.148010][T12990] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  355.186474][T13020] xt_hashlimit: size too large, truncated to 1048576
[  355.239353][T12990] XFS (loop4): Ending clean mount
[  355.411688][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.453737][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.602511][ T5831] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  355.690426][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.702517][T13001] loop5: detected capacity change from 0 to 40427
[  355.780300][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.831017][T13001] F2FS-fs (loop5): invalid crc value
[  356.295760][T13001] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  356.456772][T13001] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  356.617698][   T30] audit: type=1800 audit(1771004399.720:1759): pid=13001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2743" name="file1" dev="loop5" ino=10 res=0 errno=0
[  356.746848][T13053] loop6: detected capacity change from 0 to 128
[  356.810319][ T5820] syz-executor: attempt to access beyond end of device
[  356.810319][ T5820] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  356.871435][T13053] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  356.900934][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  356.900976][ T5820] Tainted: [L]=SOFTLOCKUP
[  356.900986][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  356.901002][ T5820] Call Trace:
[  356.901013][ T5820]  <TASK>
[  356.901024][ T5820]  dump_stack_lvl+0xe8/0x150
[  356.901069][ T5820]  f2fs_handle_critical_error+0x37c/0x540
[  356.901110][ T5820]  f2fs_write_end_io+0xc1d/0xfd0
[  356.901165][ T5820]  __submit_merged_bio+0x256/0x650
[  356.901203][ T5820]  __submit_merged_write_cond+0x269/0x530
[  356.901258][ T5820]  f2fs_write_data_pages+0x280b/0x3360
[  356.901340][ T5820]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  356.901393][ T5820]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.901425][ T5820]  ? css_rstat_updated+0x23a/0x530
[  356.901498][ T5820]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.901528][ T5820]  ? rcu_is_watching+0x15/0xb0
[  356.901565][ T5820]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.901594][ T5820]  ? __lock_acquire+0x6b5/0x2cf0
[  356.901644][ T5820]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.901674][ T5820]  ? __lock_acquire+0x6b5/0x2cf0
[  356.901714][ T5820]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.901744][ T5820]  ? do_raw_spin_lock+0x12b/0x2f0
[  356.901799][ T5820]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.901835][ T5820]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.901864][ T5820]  ? do_raw_spin_unlock+0xf5/0x210
[  356.901902][ T5820]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  356.901934][ T5820]  do_writepages+0x32e/0x550
[  356.901967][ T5820]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.901999][ T5820]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.902032][ T5820]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.902061][ T5820]  ? do_raw_spin_unlock+0xf5/0x210
[  356.902107][ T5820]  filemap_fdatawrite+0x1e9/0x2f0
[  356.902144][ T5820]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  356.902227][ T5820]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.902261][ T5820]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.902298][ T5820]  ? do_raw_spin_unlock+0xf5/0x210
[  356.902345][ T5820]  f2fs_sync_dirty_inodes+0x30e/0x810
[  356.902400][ T5820]  f2fs_write_checkpoint+0x9c6/0x2490
[  356.902477][ T5820]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  356.902509][ T5820]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.902615][ T5820]  kill_f2fs_super+0x308/0x710
[  356.902659][ T5820]  ? __pfx_kill_f2fs_super+0x10/0x10
[  356.902724][ T5820]  deactivate_locked_super+0xbc/0x130
[  356.902770][ T5820]  cleanup_mnt+0x437/0x4d0
[  356.902808][ T5820]  ? _raw_spin_unlock_irq+0x23/0x50
[  356.902844][ T5820]  task_work_run+0x1d9/0x270
[  356.902892][ T5820]  ? __pfx_task_work_run+0x10/0x10
[  356.902934][ T5820]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.902978][ T5820]  exit_to_user_mode_loop+0xed/0x480
[  356.903006][ T5820]  ? srso_alias_return_thunk+0x5/0xfbef5
[  356.903036][ T5820]  ? rcu_is_watching+0x15/0xb0
[  356.903073][ T5820]  do_syscall_64+0x32d/0xf80
[  356.903107][ T5820]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.903133][ T5820]  ? trace_irq_disable+0x37/0x100
[  356.903174][ T5820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.903200][ T5820] RIP: 0033:0x7f5d6679d1d7
[  356.903223][ T5820] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  356.903244][ T5820] RSP: 002b:00007ffec19f3808 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  356.903271][ T5820] RAX: 0000000000000000 RBX: 00007f5d66831c3b RCX: 00007f5d6679d1d7
[  356.903289][ T5820] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec19f38c0
[  356.903305][ T5820] RBP: 00007ffec19f38c0 R08: 00007ffec19f48c0 R09: 00000000ffffffff
[  356.903324][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec19f4950
[  356.903340][ T5820] R13: 00007f5d66831c3b R14: 00000000000570be R15: 00007ffec19f4990
[  356.903385][ T5820]  </TASK>
[  357.535918][ T5820] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  357.547155][T13053] hpfs: filesystem error: improperly stopped
[  357.659404][T13053] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  357.668075][T13053] hpfs: You really don't want any checks? You are crazy...
[  357.684271][T13053] hpfs: hpfs_map_sector(): read error
[  357.693315][T13053] hpfs: code page support is disabled
[  357.699297][T13053] hpfs: hpfs_map_4sectors(): unaligned read
[  357.705413][T13053] hpfs: hpfs_map_4sectors(): unaligned read
[  357.711509][T13053] hpfs: filesystem error: unable to find root dir
[  357.982349][T13071] netlink: 'syz.9.2757': attribute type 3 has an invalid length.
[  358.020606][T13071] netlink: 'syz.9.2757': attribute type 3 has an invalid length.
[  358.227486][T13079] tipc: Started in network mode
[  358.232400][T13079] tipc: Node identity ac14140f, cluster identity 4711
[  358.278018][T13079] tipc: New replicast peer: 255.255.255.255
[  358.315930][T13079] tipc: Enabled bearer <udp:syz2>, priority 10
[  358.369543][T13079] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2759'.
[  358.403091][ T5877] udevd[5877]: symlink '../../loop4' '/dev/disk/by-diskseq/869.tmp-b7:4' failed: Read-only file system
[  358.409997][T13079] tipc: Disabling bearer <udp:syz2>
[  358.564040][ T5877] udevd[5877]: symlink '../../loop3' '/dev/disk/by-diskseq/864.tmp-b7:3' failed: Read-only file system
[  358.703111][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/871.tmp-b7:6' failed: Read-only file system
[  358.812003][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-diskseq/864.tmp-b7:3' failed: Read-only file system
[  358.880486][ T5877] udevd[5877]: symlink '../../loop4' '/dev/disk/by-diskseq/869.tmp-b7:4' failed: Read-only file system
[  358.978212][T13099] loop4: detected capacity change from 0 to 64
[  359.001160][ T6116] udevd[6116]: symlink '../../loop6' '/dev/disk/by-diskseq/871.tmp-b7:6' failed: Read-only file system
[  359.076198][ T5877] udevd[5877]: symlink '../../loop4' '/dev/disk/by-diskseq/873.tmp-b7:4' failed: Read-only file system
[  359.130599][ T6116] udevd[6116]: symlink '../../loop8' '/dev/disk/by-diskseq/695.tmp-b7:8' failed: Read-only file system
[  359.130973][ T5877] udevd[5877]: symlink '../../loop4' '/dev/disk/by-label/unt.tmp-b7:4' failed: Read-only file system
[  359.220243][ T6454] udevd[6454]: symlink '../../loop3' '/dev/disk/by-diskseq/864.tmp-b7:3' failed: Read-only file system
[  359.297819][T13103] team0: No ports can be present during mode change
[  359.713440][T13082] loop9: detected capacity change from 0 to 32768
[  360.445173][T13145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2786'.
[  360.530823][T13145] netlink: 'syz.4.2786': attribute type 2 has an invalid length.
[  360.933723][T13158] bridge_slave_0: default FDB implementation only supports local addresses
[  360.984325][T13163] loop3: detected capacity change from 0 to 8
[  361.029267][T13130] loop8: detected capacity change from 0 to 32768
[  361.065154][T13130] xfs: Deprecated parameter 'noikeep'
[  361.070626][T13130] XFS: noikeep mount option is deprecated.
[  361.164421][T13130] XFS (loop8): DAX unsupported by block device. Turning off DAX.
[  361.204542][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2792'.
[  361.217790][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2792'.
[  361.234983][T13130] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  361.405092][T13130] XFS (loop8): Ending clean mount
[  361.487879][T13130] XFS (loop8): Quotacheck needed: Please wait.
[  361.542900][T13184] loop5: detected capacity change from 0 to 4096
[  361.595986][T13184] EXT4-fs (loop5): Test dummy encryption mode enabled
[  361.621549][T13130] XFS (loop8): Quotacheck: Done.
[  361.625391][T13184] EXT4-fs (loop5): DAX unsupported by block device.
[  361.991190][T13196] loop4: detected capacity change from 0 to 2048
[  362.001476][T12516] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  362.223603][T13205] loop5: detected capacity change from 0 to 256
[  362.239531][T13203] loop3: detected capacity change from 0 to 1024
[  362.279643][T13203] EXT4-fs: inline encryption not supported
[  362.373297][T13203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.455517][T13205] FAT-fs (loop5): Directory bread(block 64) failed
[  362.510877][T13205] FAT-fs (loop5): Directory bread(block 65) failed
[  362.550689][T13205] FAT-fs (loop5): Directory bread(block 66) failed
[  362.557275][T13205] FAT-fs (loop5): Directory bread(block 67) failed
[  362.631418][T13205] FAT-fs (loop5): Directory bread(block 68) failed
[  362.638006][T13205] FAT-fs (loop5): Directory bread(block 69) failed
[  362.647097][T13215] netlink: 'syz.6.2806': attribute type 4 has an invalid length.
[  362.691029][   T12] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 15: block 145:freeing already freed block (bit 9); block bitmap corrupt.
[  362.698429][T13215] netlink: 'syz.6.2806': attribute type 8 has an invalid length.
[  362.772722][T13205] FAT-fs (loop5): Directory bread(block 70) failed
[  362.778050][   T12] EXT4-fs (loop3): Remounting filesystem read-only
[  362.787379][   T12] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:5039: inode #15: block 49: len 15: ext4_ext_map_blocks returned -30
[  362.815687][T13205] FAT-fs (loop5): Directory bread(block 71) failed
[  362.832810][T13205] FAT-fs (loop5): Directory bread(block 72) failed
[  362.868750][T13220] loop8: detected capacity change from 0 to 1024
[  362.890706][T13215] netlink: 212 bytes leftover after parsing attributes in process `syz.6.2806'.
[  362.911629][T13205] FAT-fs (loop5): Directory bread(block 73) failed
[  362.960569][T13220] EXT4-fs: Ignoring removed oldalloc option
[  362.966686][T13220] EXT4-fs: Ignoring removed orlov option
[  363.060375][T13220] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  363.120809][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.166370][T13220] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.364938][   T30] audit: type=1800 audit(1771004406.450:1760): pid=13220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2802" name="file1" dev="loop8" ino=15 res=0 errno=0
[  363.451665][T13220] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4224: comm syz.8.2802: Allocating blocks 449-513 which overlap fs metadata
[  363.562499][T13220] EXT4-fs (loop8): pa ffff88804da1d9f8: logic 256, phys. 385, len 8
[  363.571183][T13220] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5467: group 0, free 0, pa_free 4
[  363.596104][ T5877] udevd[5877]: symlink '../../loop5' '/dev/disk/by-diskseq/883.tmp-b7:5' failed: Read-only file system
[  363.627620][ T6116] udevd[6116]: symlink '../../loop6' '/dev/disk/by-diskseq/871.tmp-b7:6' failed: Read-only file system
[  363.746122][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-diskseq/888.tmp-b7:3' failed: Read-only file system
[  363.762219][ T5877] udevd[5877]: symlink '../../loop5' '/dev/disk/by-diskseq/883.tmp-b7:5' failed: Read-only file system
[  363.843211][ T6454] udevd[6454]: symlink '../../loop9' '/dev/disk/by-diskseq/876.tmp-b7:9' failed: Read-only file system
[  363.894727][T12516] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.910404][ T6116] udevd[6116]: symlink '../../loop6' '/dev/disk/by-diskseq/871.tmp-b7:6' failed: Read-only file system
[  363.954262][T13249] loop6: detected capacity change from 0 to 8
[  363.963212][ T5877] udevd[5877]: symlink '../../loop5' '/dev/disk/by-diskseq/889.tmp-b7:5' failed: Read-only file system
[  364.094661][ T6116] udevd[6116]: symlink '../../loop6' '/dev/disk/by-diskseq/890.tmp-b7:6' failed: Read-only file system
[  364.159168][ T5877] udevd[5877]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  364.191389][T13224] loop4: detected capacity change from 0 to 32768
[  364.235395][ T5877] udevd[5877]: symlink '../../loop8' '/dev/disk/by-diskseq/887.tmp-b7:8' failed: Read-only file system
[  364.290344][T13224] read_mapping_page failed!
[  364.325209][T13224] ERROR: (device loop4): txCommit: 
[  364.325209][T13224] 
[  364.821108][T13267] loop9: detected capacity change from 0 to 128
[  364.886175][T13267] FAT-fs (loop9): Directory bread(block 11554) failed
[  364.923943][T13267] FAT-fs (loop9): Directory bread(block 11555) failed
[  364.955964][T13267] FAT-fs (loop9): Directory bread(block 11556) failed
[  364.963320][T13267] FAT-fs (loop9): Directory bread(block 11557) failed
[  364.995010][T13267] FAT-fs (loop9): Directory bread(block 11558) failed
[  365.044290][T13267] FAT-fs (loop9): Directory bread(block 11559) failed
[  365.060634][T13267] FAT-fs (loop9): Directory bread(block 11560) failed
[  365.110277][T13267] FAT-fs (loop9): Directory bread(block 11561) failed
[  365.128362][T13267] FAT-fs (loop9): Directory bread(block 11562) failed
[  365.175615][T13267] FAT-fs (loop9): Directory bread(block 11563) failed
[  365.426508][ T5951] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  365.660838][ T5951] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  365.690881][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.719742][ T5951] usb 4-1: Product: syz
[  365.724040][ T5951] usb 4-1: Manufacturer: syz
[  365.791947][ T5951] usb 4-1: SerialNumber: syz
[  365.801437][ T5951] usb 4-1: config 0 descriptor??
[  365.865083][T13256] F2FS-fs: heap/no_heap options were deprecated
[  365.939703][T13256] F2FS-fs (loop8): build fault injection rate: 19
[  365.972645][T13256] F2FS-fs (loop8): build fault injection type: 0x77e8c
[  366.016756][T13263] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  366.036433][T13256] F2FS-fs (loop8): invalid crc value
[  366.114697][T13256] F2FS-fs (loop8): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21c/0xd60
[  366.281911][T13256] F2FS-fs (loop8): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x18f/0xaa0
[  366.405718][    C1] F2FS-fs (loop8): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  366.473752][T13291] set_capacity_and_notify: 2 callbacks suppressed
[  366.473776][T13291] loop4: detected capacity change from 0 to 65536
[  366.499350][ T5951] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  366.628579][T13291] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  366.645577][T13291] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  366.655901][T13307] loop9: detected capacity change from 0 to 2048
[  366.731660][T13291] XFS (loop4): Ending clean mount
[  366.802955][T13291] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x6 
[  366.818482][T13291] XFS (loop4): Unmount and run xfs_repair
[  366.824433][T13291] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  366.832207][T13291] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  366.841636][T13291] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[  366.850660][T13291] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  366.859568][T13291] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[  366.868692][T13291] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[  366.880087][T13291] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[  366.889345][T13291] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  366.898471][T13291] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  366.907487][T13291] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x6 len 2 error 74
[  366.926103][ T5951] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  366.941575][T13307] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  366.942279][T13291] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  366.965222][T13291] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  367.025317][ T5951] usb 4-1: USB disconnect, device number 15
[  367.118192][ T5831] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  367.127596][ T5820] ocfs2: Unmounting device (7,5) on (node local)
[  367.242679][T13256] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  367.652663][T13330] loop6: detected capacity change from 0 to 128
[  367.746530][T13330] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  367.827571][T13330] hpfs: filesystem error: improperly stopped
[  367.895225][T13330] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  367.926596][T13330] hpfs: You really don't want any checks? You are crazy...
[  368.010450][T13330] hpfs: hpfs_map_sector(): read error
[  368.071606][T13330] hpfs: code page support is disabled
[  368.104015][T13330] hpfs: hpfs_map_4sectors(): unaligned read
[  368.111878][T13330] hpfs: hpfs_map_4sectors(): unaligned read
[  368.174066][T13330] hpfs: filesystem error: unable to find root dir
[  368.318095][T13330] hpfs: hpfs_map_4sectors(): unaligned read
[  368.518374][T13352] loop3: detected capacity change from 0 to 64
[  368.634288][T13354] loop5: detected capacity change from 0 to 128
[  368.698091][T13352] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  leaving read-only.
[  368.739104][T13359] loop6: detected capacity change from 0 to 512
[  368.745507][   T30] audit: type=1800 audit(1771004411.805:1761): pid=13354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2851" name="file1" dev="loop5" ino=1048851 res=0 errno=0
[  368.833195][ T6454] udevd[6454]: symlink '../../loop3' '/dev/disk/by-diskseq/906.tmp-b7:3' failed: Read-only file system
[  368.847225][ T5884] udevd[5884]: symlink '../../loop9' '/dev/disk/by-diskseq/902.tmp-b7:9' failed: Read-only file system
[  368.883243][ T6116] udevd[6116]: symlink '../../loop4' '/dev/disk/by-diskseq/899.tmp-b7:4' failed: Read-only file system
[  368.904876][ T6165] udevd[6165]: symlink '../../loop5' '/dev/disk/by-diskseq/908.tmp-b7:5' failed: Read-only file system
[  368.960143][ T6454] udevd[6454]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system
[  368.984381][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/903.tmp-b7:6' failed: Read-only file system
[  368.993332][ T6116] udevd[6116]: symlink '../../loop4' '/dev/disk/by-diskseq/899.tmp-b7:4' failed: Read-only file system
[  369.035695][ T6454] udevd[6454]: symlink '../../loop3' '/dev/disk/by-uuid/c5790787-4d45-3ec3-bf90-ba1d5c611373.tmp-b7:3' failed: Read-only file system
[  369.051592][ T5884] udevd[5884]: symlink '../../loop5' '/dev/disk/by-diskseq/908.tmp-b7:5' failed: Read-only file system
[  369.130193][ T6165] udevd[6165]: symlink '../../loop9' '/dev/disk/by-diskseq/902.tmp-b7:9' failed: Read-only file system
[  369.280931][T13374] loop9: detected capacity change from 0 to 512
[  369.326019][T13375] program syz.6.2857 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  369.475734][T13382] loop8: detected capacity change from 0 to 256
[  369.516042][T13374] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.587805][T13384] Failed to get privilege flags for destination (handle=0x2:0x0)
[  369.614760][T13374] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  369.785312][ T5828] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  369.794946][ T5828] Bluetooth: hci3: Injecting HCI hardware error event
[  369.806586][ T5828] Bluetooth: hci3: hardware error 0x00
[  369.953270][T12624] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.169412][T13401] netlink: 'syz.6.2868': attribute type 1 has an invalid length.
[  370.220154][T13401] netlink: 'syz.6.2868': attribute type 7 has an invalid length.
[  370.228031][T13401] netlink: 'syz.6.2868': attribute type 8 has an invalid length.
[  370.284070][T13401] netlink: 208 bytes leftover after parsing attributes in process `syz.6.2868'.
[  370.743077][T13418] loop3: detected capacity change from 0 to 1024
[  371.349103][T13406] loop9: detected capacity change from 0 to 32768
[  371.401765][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  372.024329][ T5828] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  372.105662][T13441] loop6: detected capacity change from 0 to 4096
[  372.124673][T13441] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  372.183825][T13441] ntfs3(loop6): ino=1a, mi_enum_attr
[  372.195456][T13441] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  372.222528][T13441] ntfs3(loop6): ino=1a, mi_enum_attr
[  372.231031][T13441] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[  372.283042][T13446] loop8: detected capacity change from 0 to 4096
[  372.333356][T13446] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[  373.374511][T13029] hfsplus: b-tree write err: -5, ino 8
[  373.624267][T13452] netlink: 'syz.3.2879': attribute type 9 has an invalid length.
[  373.709887][T13452] bond_slave_0: entered promiscuous mode
[  373.716274][T13452] bond_slave_1: entered promiscuous mode
[  373.722067][T13452] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  373.774291][T13452] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  373.850484][ T6116] udevd[6116]: symlink '../../loop8' '/dev/disk/by-diskseq/920.tmp-b7:8' failed: Read-only file system
[  373.900827][ T5877] udevd[5877]: symlink '../../loop3' '/dev/disk/by-diskseq/917.tmp-b7:3' failed: Read-only file system
[  373.933120][ T6454] udevd[6454]: symlink '../../loop9' '/dev/disk/by-diskseq/918.tmp-b7:9' failed: Read-only file system
[  373.976563][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-diskseq/922.tmp-b7:3' failed: Read-only file system
[  374.003611][ T5877] udevd[5877]: symlink '../../loop8' '/dev/disk/by-diskseq/920.tmp-b7:8' failed: Read-only file system
[  374.033987][ T6454] udevd[6454]: symlink '../../loop9' '/dev/disk/by-diskseq/924.tmp-b7:9' failed: Read-only file system
[  374.064184][ T5884] udevd[5884]: symlink '../../loop4' '/dev/disk/by-diskseq/904.tmp-b7:4' failed: Read-only file system
[  374.107958][ T6116] udevd[6116]: symlink '../../loop6' '/dev/disk/by-diskseq/921.tmp-b7:6' failed: Read-only file system
[  374.115061][ T5877] udevd[5877]: symlink '../../loop8' '/dev/disk/by-diskseq/923.tmp-b7:8' failed: Read-only file system
[  374.218031][ T6454] udevd[6454]: symlink '../../loop5' '/dev/disk/by-diskseq/912.tmp-b7:5' failed: Read-only file system
[  374.231714][T13466] loop6: detected capacity change from 0 to 1024
[  374.335364][T13466] hfsplus: xattr searching failed
[  374.557312][   T49] hfsplus: bad catalog file entry
[  374.574484][   T49] hfsplus: b-tree write err: -5, ino 3
[  374.968628][T13458] loop8: detected capacity change from 0 to 32768
[  374.986030][T13458] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2891 (13458)
[  375.047248][T13458] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  375.109060][T13458] BTRFS info (device loop8): using crc32c checksum algorithm
[  375.240402][T13458] BTRFS info (device loop8): enabling ssd optimizations
[  375.262749][T13458] BTRFS info (device loop8): turning on async discard
[  375.273235][T13458] BTRFS info (device loop8): enabling free space tree
[  375.288332][T13458] BTRFS info (device loop8): use lzo compression, level 1
[  375.336155][T13511] macvlan3: entered promiscuous mode
[  375.344244][T13511] bridge0: entered promiscuous mode
[  375.684977][T12516] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  375.791998][T13523] loop3: detected capacity change from 0 to 512
[  375.970483][T13523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.018491][T13523] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  376.090262][T13495] loop9: detected capacity change from 0 to 32768
[  376.194210][T13495] JBD2: Ignoring recovery information on journal
[  376.297529][T13495] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  376.437274][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  376.483628][T13486] loop4: detected capacity change from 0 to 32768
[  376.492911][T13495] OCFS2: ERROR (device loop9): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  376.493005][T13495] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  376.587552][T13547] OCFS2: ERROR (device loop9): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  376.587593][T13547] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  376.649640][T13486] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  376.684629][T13495] OCFS2: File system is now read-only.
[  376.713832][T13547] OCFS2: File system is now read-only.
[  376.934200][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.038444][T13486] XFS (loop4): Starting recovery (logdev: internal)
[  377.079478][T12624] ocfs2: Unmounting device (7,9) on (node local)
[  377.111882][T13486] XFS (loop4): Ending recovery (logdev: internal)
[  377.479814][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  377.494799][ T5831] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  377.582186][T13571] loop6: detected capacity change from 0 to 128
[  377.606285][T13566] loop3: detected capacity change from 0 to 4096
[  377.665399][T13571] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  377.910781][T13566] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  377.969141][T13566] ntfs3(loop3): Failed to load $Extend (-22).
[  378.012749][T13566] ntfs3(loop3): Failed to initialize $Extend.
[  378.521457][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  378.671817][T13595] loop9: detected capacity change from 0 to 64
[  378.713459][T13599] loop5: detected capacity change from 0 to 128
[  378.812928][T13595] hfs: request for non-existent node 393216 in B*Tree
[  378.820439][T13595] hfs: request for non-existent node 393216 in B*Tree
[  378.909017][ T5877] udevd[5877]: symlink '../../loop9' '/dev/disk/by-diskseq/939.tmp-b7:9' failed: Read-only file system
[  378.922031][T13595] hfs: request for non-existent node 393216 in B*Tree
[  378.928968][T13595] hfs: request for non-existent node 393216 in B*Tree
[  378.939845][ T6454] udevd[6454]: symlink '../../loop5' '/dev/disk/by-diskseq/940.tmp-b7:5' failed: Read-only file system
[  378.987869][ T6116] udevd[6116]: symlink '../../loop4' '/dev/disk/by-diskseq/936.tmp-b7:4' failed: Read-only file system
[  379.014707][ T6454] udevd[6454]: symlink '../../loop5' '/dev/disk/by-label/SYZKALLER.tmp-b7:5' failed: Read-only file system
[  379.048079][ T5877] udevd[5877]: symlink '../../loop9' '/dev/disk/by-label/untitled.tmp-b7:9' failed: Read-only file system
[  379.060554][ T5884] udevd[5884]: symlink '../../loop3' '/dev/disk/by-diskseq/938.tmp-b7:3' failed: Read-only file system
[  379.074806][T13603] hfs: request for non-existent node 393216 in B*Tree
[  379.100243][T13605] loop3: detected capacity change from 0 to 1024
[  379.102579][T13603] hfs: request for non-existent node 393216 in B*Tree
[  379.115568][ T6454] udevd[6454]: symlink '../../loop5' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:5' failed: Read-only file system
[  379.171618][T13607] loop4: detected capacity change from 0 to 2048
[  379.214860][T13605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  379.235094][ T5877] udevd[5877]: symlink '../../loop3' '/dev/disk/by-diskseq/941.tmp-b7:3' failed: Read-only file system
[  379.268176][ T6116] udevd[6116]: symlink '../../loop5' '/dev/disk/by-diskseq/940.tmp-b7:5' failed: Read-only file system
[  379.280808][T13607] EXT4-fs: Ignoring removed oldalloc option
[  379.286893][T13605] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  379.308557][T13578] loop8: detected capacity change from 0 to 32768
[  379.329486][T13578] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2927 (13578)
[  379.358230][ T5877] udevd[5877]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  379.430803][T13605] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.2934: lblock 0 mapped to illegal pblock 0 (length 1)
[  379.459035][T13578] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  379.469568][T13607] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  379.524173][T13578] BTRFS info (device loop8): using sha256 checksum algorithm
[  379.533765][T13607] System zones: 0-7
[  379.539562][   T49] hfs: request for non-existent node 393216 in B*Tree
[  379.539783][T13607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.559339][   T49] hfs: request for non-existent node 393216 in B*Tree
[  379.597261][T13605] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  379.686234][T13607] EXT4-fs error (device loop4): ext4_find_extent:941: inode #2: comm syz.4.2933: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  379.713799][T13605] EXT4-fs (loop3): This should not happen!! Data will be lost
[  379.713799][T13605] 
[  379.727391][T13622] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.2934: lblock 0 mapped to illegal pblock 0 (length 1)
[  379.753606][T13622] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.2934: lblock 0 mapped to illegal pblock 0 (length 1)
[  379.774051][T13622] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.2934: lblock 0 mapped to illegal pblock 0 (length 1)
[  379.804931][T13578] BTRFS info (device loop8): enabling ssd optimizations
[  379.811947][T13578] BTRFS info (device loop8): turning on async discard
[  379.821488][T13607] EXT4-fs (loop4): Remounting filesystem read-only
[  379.860197][T13578] BTRFS info (device loop8): enabling free space tree
[  379.870497][T13622] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: comm syz.3.2934: lblock 0 mapped to illegal pblock 0 (length 1)
[  379.971450][T13639] loop5: detected capacity change from 0 to 128
[  379.999083][T13585] loop6: detected capacity change from 0 to 32768
[  380.008942][T13639] EXT4-fs (loop5): Test dummy encryption mode enabled
[  380.061943][T13585] BTRFS info: device /dev/loop6 (7:6) using temp-fsid 6c338167-779c-4295-ac1b-559afb6964df
[  380.073381][T13639] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  380.103395][T13585] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2928 (13585)
[  380.126645][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.183259][T13639] ext4 filesystem being mounted at /514/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  380.198879][T13585] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  380.217202][T13585] BTRFS info (device loop6): using sha256 checksum algorithm
[  380.220510][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  380.322589][ T5820] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  380.502449][T13585] BTRFS info (device loop6): enabling ssd optimizations
[  380.560585][T13585] BTRFS info (device loop6): turning on async discard
[  380.624025][T13585] BTRFS info (device loop6): enabling free space tree
[  380.684991][T13665] dummy0: entered allmulticast mode
[  380.790395][T12516] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  380.828716][T13663] dummy0: left allmulticast mode
[  381.126306][T13679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2946'.
[  381.316793][ T1107] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared)
[  381.430643][ T9513] BTRFS info (device loop6): last unmount of filesystem 6c338167-779c-4295-ac1b-559afb6964df
[  381.558621][T13686] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  381.722213][T13694] Bluetooth: MGMT ver 1.23
[  381.726704][T13694] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  382.507363][T13717] loop9: detected capacity change from 0 to 512
[  382.564570][T13717] EXT4-fs (loop9): Test dummy encryption mode enabled
[  382.594882][T13717] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  382.712509][T13717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002]
[  382.720611][T13717] System zones: 1-12
[  382.802406][T13717] EXT4-fs (loop9): orphan cleanup on readonly fs
[  382.810383][T13717] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2960: bg 0: block 361: padding at end of block bitmap is not set
[  382.827632][T13717] loop9: lost filesystem error report for type 5 error -117
[  382.831834][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  382.845733][    C0] EXT4-fs (loop9): initial error at time 1771004425: ext4_validate_block_bitmap:441
[  382.855208][    C0] EXT4-fs (loop9): last error at time 1771004425: ext4_validate_block_bitmap:441
[  382.886531][T13717] EXT4-fs (loop9): Remounting filesystem read-only
[  383.089605][T13717] EXT4-fs (loop9): 1 truncate cleaned up
[  383.149428][T13717] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  383.252140][T13717] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.2960: error -117 reading directory block
[  383.291017][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  383.356368][T13733] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.2960: error -117 reading directory block
[  383.614657][T13740] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  383.662174][T13740] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  383.761541][T12624] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  383.994958][ T6454] udevd[6454]: symlink '../../loop3' '/dev/disk/by-diskseq/950.tmp-b7:3' failed: Read-only file system
[  384.031870][ T5877] udevd[5877]: symlink '../../loop9' '/dev/disk/by-diskseq/953.tmp-b7:9' failed: Read-only file system
[  384.104116][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2972'.
[  384.146847][ T6116] udevd[6116]: symlink '../../loop8' '/dev/disk/by-diskseq/952.tmp-b7:8' failed: Read-only file system
[  384.160722][ T5877] udevd[5877]: symlink '../../loop9' '/dev/disk/by-diskseq/954.tmp-b7:9' failed: Read-only file system
[  384.208975][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2972'.
[  384.410128][ T5877] udevd[5877]: symlink '../../loop9' '/dev/disk/by-diskseq/954.tmp-b7:9' failed: Read-only file system
[  384.463235][ T6116] udevd[6116]: symlink '../../loop8' '/dev/disk/by-diskseq/952.tmp-b7:8' failed: Read-only file system
[  384.505598][ T6454] udevd[6454]: symlink '../../loop3' '/dev/disk/by-diskseq/950.tmp-b7:3' failed: Read-only file system
[  384.601765][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/951.tmp-b7:6' failed: Read-only file system
[  384.674041][ T6116] udevd[6116]: symlink '../../loop5' '/dev/disk/by-diskseq/949.tmp-b7:5' failed: Read-only file system
[  384.690711][ T5877] udevd[5877]: symlink '../../loop9' '/dev/disk/by-diskseq/954.tmp-b7:9' failed: Read-only file system
[  384.832520][T13771] batman_adv: batadv0: Adding interface: ipvlan2
[  384.867215][T13771] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.926003][T13771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  384.999881][T13771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  385.022561][T13771] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  385.102788][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2980'.
[  386.469726][T13776] loop9: detected capacity change from 0 to 32768
[  386.609578][T13776] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  386.651661][T13791] loop6: detected capacity change from 0 to 32768
[  386.738043][T13776] XFS (loop9): Ending clean mount
[  386.824126][T13791] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  386.984966][T13841] comedi comedi0: comedi_bond: 3:2 3:3  attached, 16 channels from 2 devices
[  387.119896][T12624] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  387.473078][T13791] XFS (loop6): Ending clean mount
[  387.556619][T13791] XFS (loop6): Quotacheck needed: Please wait.
[  387.841909][T13791] XFS (loop6): Quotacheck: Done.
[  387.934444][T13807] loop5: detected capacity change from 0 to 32768
[  388.044811][T13807] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2990 (13807)
[  388.516018][T13807] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  388.516905][T13851] loop8: detected capacity change from 0 to 131072
[  388.561117][T13851] F2FS-fs (loop8): Wrong CP boundary, start(512) end(198144) blocks(1024)
[  388.569749][T13851] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock
[  388.580402][T13851] F2FS-fs (loop8): invalid crc value
[  388.601349][T13867] loop3: detected capacity change from 0 to 512
[  388.608132][T13807] BTRFS info (device loop5): using crc32c checksum algorithm
[  388.677540][T13867] EXT4-fs: Ignoring removed oldalloc option
[  388.719130][T13851] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  388.739004][ T9513] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  388.756749][T13851] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0
[  388.764218][T13851] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  388.863795][T13851] F2FS-fs (loop8): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:15366]
[  388.904231][T13807] BTRFS info (device loop5): enabling ssd optimizations
[  388.912860][T13867] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.3004: Parent and EA inode have the same ino 15
[  388.986674][T13807] BTRFS info (device loop5): turning on flush-on-commit
[  388.993675][T13807] BTRFS info (device loop5): enabling free space tree
[  389.020055][T13867] loop3: lost filesystem error report for type 5 error -117
[  389.022575][ T5884] udevd[5884]: symlink '../../loop6' '/dev/disk/by-diskseq/956.tmp-b7:6' failed: Read-only file system
[  389.026432][T13867] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.3004: Parent and EA inode have the same ino 15
[  389.030240][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  389.030261][    C1] EXT4-fs (loop3): initial error at time 1771004432: ext4_xattr_inode_iget:437
[  389.030290][    C1] EXT4-fs (loop3): last error at time 1771004432: ext4_xattr_inode_iget:437
[  389.109701][T13807] BTRFS info (device loop5): enabling auto defrag
[  389.126372][ T6454] udevd[6454]: symlink '../../loop3' '/dev/disk/by-diskseq/960.tmp-b7:3' failed: Read-only file system
[  389.140147][T13807] BTRFS info (device loop5): use lzo compression, level 1
[  389.141486][ T5884] udevd[5884]: symlink '../../loop6' '/dev/disk/by-diskseq/956.tmp-b7:6' failed: Read-only file system
[  389.179795][ T6454] udevd[6454]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  389.191395][T13807] BTRFS info (device loop5): max_inline set to 4096
[  389.208361][T13867] loop3: lost filesystem error report for type 5 error -117
[  389.272052][T13867] EXT4-fs (loop3): 1 orphan inode deleted
[  389.276400][ T5877] udevd[5877]: symlink '../../loop8' '/dev/disk/by-diskseq/959.tmp-b7:8' failed: Read-only file system
[  389.345488][ T6165] udevd[6165]: symlink '../../loop4' '/dev/disk/by-diskseq/948.tmp-b7:4' failed: Read-only file system
[  389.369996][ T5884] udevd[5884]: symlink '../../loop6' '/dev/disk/by-diskseq/961.tmp-b7:6' failed: Read-only file system
[  389.378921][T13867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  389.409000][ T5877] udevd[5877]: symlink '../../loop8' '/dev/disk/by-uuid/ae71b7fd-767a-4c88-a53b-ea5e39a5f101.tmp-b7:8' failed: Read-only file system
[  389.442083][ T5820] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  389.553149][ T6454] udevd[6454]: symlink '../../loop9' '/dev/disk/by-diskseq/958.tmp-b7:9' failed: Read-only file system
[  389.711630][ T6116] udevd[6116]: symlink '../../loop4' '/dev/disk/by-diskseq/948.tmp-b7:4' failed: Read-only file system
[  389.723686][T13867] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.3004: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  390.298901][T13912] loop9: detected capacity change from 0 to 256
[  390.513461][T13912] FAT-fs (loop9): Directory bread(block 64) failed
[  390.569762][T13912] FAT-fs (loop9): Directory bread(block 65) failed
[  390.610580][T13912] FAT-fs (loop9): Directory bread(block 66) failed
[  390.678312][T13912] FAT-fs (loop9): Directory bread(block 67) failed
[  390.736185][T13912] FAT-fs (loop9): Directory bread(block 68) failed
[  390.763500][T13912] FAT-fs (loop9): Directory bread(block 69) failed
[  390.770206][T13912] FAT-fs (loop9): Directory bread(block 70) failed
[  390.874222][T13912] FAT-fs (loop9): Directory bread(block 71) failed
[  390.908542][T13912] FAT-fs (loop9): Directory bread(block 72) failed
[  390.976533][T13912] FAT-fs (loop9): Directory bread(block 73) failed
[  391.197733][T13904] loop4: detected capacity change from 0 to 131072
[  391.262619][T13904] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  391.271776][T13904] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  391.283250][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.312045][T13904] F2FS-fs (loop4): invalid crc value
[  391.470309][T13904] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  391.526424][T13904] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  391.533960][T13904] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  392.244587][T13943] loop3: detected capacity change from 0 to 256
[  392.316916][T13943] exfat: Deprecated parameter 'namecase'
[  392.322700][T13943] exfat: Deprecated parameter 'utf8'
[  392.328532][T13945] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3019'.
[  392.446512][T13943] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  393.239183][T13932] loop6: detected capacity change from 0 to 32768
[  393.298017][T13964] lo: Caught tx_queue_len zero misconfig
[  393.303734][T13964] netem: incorrect ge model size
[  393.357407][T13964] netem: change failed
[  393.388690][T13932] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  393.473954][T13932] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  393.809925][T13932] XFS (loop6): Ending clean mount
[  393.835841][T13932] XFS (loop6): Quotacheck needed: Please wait.
[  394.023709][T13932] XFS (loop6): Quotacheck: Done.
[  394.157545][ T6116] udevd[6116]: symlink '../../loop5' '/dev/disk/by-diskseq/962.tmp-b7:5' failed: Read-only file system
[  394.222282][ T6454] udevd[6454]: symlink '../../loop3' '/dev/disk/by-diskseq/970.tmp-b7:3' failed: Read-only file system
[  394.240795][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/971.tmp-b7:6' failed: Read-only file system
[  394.304318][ T5884] udevd[5884]: symlink '../../loop9' '/dev/disk/by-diskseq/967.tmp-b7:9' failed: Read-only file system
[  394.340227][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:6' failed: Read-only file system
[  394.409164][ T9513] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  394.422561][T13995] loop3: detected capacity change from 0 to 1024
[  394.527899][ T5877] udevd[5877]: symlink '../../loop5' '/dev/disk/by-diskseq/962.tmp-b7:5' failed: Read-only file system
[  394.628424][T13995] hfsplus: b-tree write err: -5, ino 2
[  394.655609][T13995] hfsplus: bad catalog entry type
[  394.680901][ T5877] udevd[5877]: symlink '../../loop9' '/dev/disk/by-diskseq/967.tmp-b7:9' failed: Read-only file system
[  394.692839][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-diskseq/972.tmp-b7:3' failed: Read-only file system
[  394.744593][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system
[  394.786126][ T6116] udevd[6116]: symlink '../../loop3' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:3' failed: Read-only file system
[  394.867649][T14002] loop5: detected capacity change from 0 to 2048
[  394.894637][   T36] hfsplus: b-tree write err: -5, ino 25
[  394.945838][   T36] hfsplus: b-tree write err: -5, ino 4
[  395.013335][   T36] hfsplus: b-tree write err: -5, ino 2
[  395.018931][   T36] hfsplus: b-tree write err: -5, ino 26
[  395.048812][T14002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  395.320164][ T5820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.670588][T14028] loop3: detected capacity change from 0 to 1024
[  395.715651][T14028] hfsplus: b-tree write err: -5, ino 2
[  395.798767][T14028] hfsplus: bad catalog entry type
[  395.902738][ T5826] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  396.015975][   T12] hfsplus: b-tree write err: -5, ino 25
[  396.021734][   T12] hfsplus: b-tree write err: -5, ino 4
[  396.047942][   T12] hfsplus: b-tree write err: -5, ino 2
[  396.066732][   T12] hfsplus: b-tree write err: -5, ino 26
[  396.072778][ T5826] usb 9-1: Using ep0 maxpacket: 32
[  396.095495][T14037] loop6: detected capacity change from 0 to 256
[  396.108738][ T5826] usb 9-1: config 0 has an invalid interface number: 184 but max is 0
[  396.122871][ T5826] usb 9-1: config 0 has no interface number 0
[  396.129087][ T5826] usb 9-1: config 0 interface 184 has no altsetting 0
[  396.145483][ T5826] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  396.154894][ T5826] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.175131][ T5826] usb 9-1: Product: syz
[  396.179309][ T5826] usb 9-1: Manufacturer: syz
[  396.184370][ T5826] usb 9-1: SerialNumber: syz
[  396.199153][ T5826] usb 9-1: config 0 descriptor??
[  396.229030][ T5826] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  396.286396][ T5826] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -22
[  396.498928][T14029] loop8: detected capacity change from 0 to 2048
[  396.555270][T14029] ext4: Unknown parameter 'nouser_xattr'
[  396.640950][ T5826] usb 9-1: USB disconnect, device number 2
[  396.708161][T14047] erspan0: entered promiscuous mode
[  397.170072][T14060] netlink: 'syz.4.3058': attribute type 12 has an invalid length.
[  397.225308][T14060] netlink: 'syz.4.3058': attribute type 29 has an invalid length.
[  397.275458][T14060] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3058'.
[  397.359412][T14060] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3058'.
[  398.069809][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3066'.
[  398.136531][T14059] loop6: detected capacity change from 0 to 32768
[  398.197340][T14059] (syz.6.3057,14059,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  398.250388][T14059] (syz.6.3057,14059,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  398.395828][T14059] JBD2: Ignoring recovery information on journal
[  398.571935][T14059] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  398.789403][T14059] 
[  398.791794][T14059] ======================================================
[  398.798806][T14059] WARNING: possible circular locking dependency detected
[  398.805831][T14059] syzkaller #0 Tainted: G             L     
[  398.811802][T14059] ------------------------------------------------------
[  398.818807][T14059] syz.6.3057/14059 is trying to acquire lock:
[  398.824866][T14059] ffff888069b8a378 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2fd/0x7e0
[  398.834293][T14059] 
[  398.834293][T14059] but task is already holding lock:
[  398.841648][T14059] ffff8880680cbce8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700
[  398.851948][T14059] 
[  398.851948][T14059] which lock already depends on the new lock.
[  398.851948][T14059] 
[  398.862438][T14059] 
[  398.862438][T14059] the existing dependency chain (in reverse order) is:
[  398.871436][T14059] 
[  398.871436][T14059] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  398.879967][T14059]        down_read+0x47/0x2e0
[  398.884655][T14059]        ocfs2_start_trans+0x3ab/0x700
[  398.890114][T14059]        ocfs2_mknod+0xf31/0x2210
[  398.895133][T14059]        ocfs2_create+0x195/0x440
[  398.900149][T14059]        path_openat+0x1395/0x3860
[  398.905270][T14059]        do_file_open+0x23e/0x4a0
[  398.910310][T14059]        do_sys_openat2+0x113/0x200
[  398.915509][T14059]        __x64_sys_open+0x11e/0x150
[  398.920706][T14059]        do_syscall_64+0x14d/0xf80
[  398.926086][T14059]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.932489][T14059] 
[  398.932489][T14059] -> #2 (sb_internal#6){.+.+}-{0:0}:
[  398.939969][T14059]        ocfs2_start_trans+0x2ac/0x700
[  398.945421][T14059]        ocfs2_truncate_file+0x631/0x1480
[  398.951145][T14059]        ocfs2_setattr+0x15e5/0x1c70
[  398.956509][T14059]        notify_change+0xc1a/0xf40
[  398.961645][T14059]        do_truncate+0x1c2/0x250
[  398.966580][T14059]        path_openat+0x2f89/0x3860
[  398.971704][T14059]        do_file_open+0x23e/0x4a0
[  398.976864][T14059]        do_sys_openat2+0x113/0x200
[  398.982069][T14059]        __x64_sys_open+0x11e/0x150
[  398.987290][T14059]        do_syscall_64+0x14d/0xf80
[  398.992401][T14059]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.998808][T14059] 
[  398.998808][T14059] -> #1 (&oi->ip_alloc_sem){+.+.}-{4:4}:
[  399.006723][T14059]        down_write+0x96/0x200
[  399.011503][T14059]        ocfs2_try_remove_refcount_tree+0xb6/0x340
[  399.018008][T14059]        ocfs2_truncate_file+0xdf3/0x1480
[  399.023830][T14059]        ocfs2_setattr+0x15e5/0x1c70
[  399.029191][T14059]        notify_change+0xc1a/0xf40
[  399.034306][T14059]        do_truncate+0x1c2/0x250
[  399.039242][T14059]        path_openat+0x2f89/0x3860
[  399.044356][T14059]        do_file_open+0x23e/0x4a0
[  399.049382][T14059]        do_sys_openat2+0x113/0x200
[  399.054596][T14059]        __x64_sys_open+0x11e/0x150
[  399.059879][T14059]        do_syscall_64+0x14d/0xf80
[  399.065090][T14059]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.071520][T14059] 
[  399.071520][T14059] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  399.079389][T14059]        __lock_acquire+0x15a5/0x2cf0
[  399.084777][T14059]        lock_acquire+0x106/0x330
[  399.089802][T14059]        down_read+0x47/0x2e0
[  399.094657][T14059]        ocfs2_init_acl+0x2fd/0x7e0
[  399.099857][T14059]        ocfs2_mknod+0x1423/0x2210
[  399.104971][T14059]        ocfs2_mkdir+0x181/0x430
[  399.109911][T14059]        vfs_mkdir+0x413/0x630
[  399.114699][T14059]        filename_mkdirat+0x285/0x510
[  399.120085][T14059]        __se_sys_mkdirat+0x35/0x150
[  399.125377][T14059]        do_syscall_64+0x14d/0xf80
[  399.130491][T14059]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.136897][T14059] 
[  399.136897][T14059] other info that might help us debug this:
[  399.136897][T14059] 
[  399.147111][T14059] Chain exists of:
[  399.147111][T14059]   &oi->ip_xattr_sem --> sb_internal#6 --> &journal->j_trans_barrier
[  399.147111][T14059] 
[  399.161045][T14059]  Possible unsafe locking scenario:
[  399.161045][T14059] 
[  399.168511][T14059]        CPU0                    CPU1
[  399.173900][T14059]        ----                    ----
[  399.179252][T14059]   rlock(&journal->j_trans_barrier);
[  399.184675][T14059]                                lock(sb_internal#6);
[  399.191542][T14059]                                lock(&journal->j_trans_barrier);
[  399.199346][T14059]   rlock(&oi->ip_xattr_sem);
[  399.204027][T14059] 
[  399.204027][T14059]  *** DEADLOCK ***
[  399.204027][T14059] 
[  399.212161][T14059] 8 locks held by syz.6.3057/14059:
[  399.217346][T14059]  #0: ffff88802d4d8420 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  399.226637][T14059]  #1: ffff888069b8a640 (&type->i_mutex_dir_key#23/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[  399.237391][T14059]  #2: ffff888069b609c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16f/0x4790
[  399.251174][T14059]  #3: ffff888069b66d80 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16f/0x4790
[  399.265035][T14059]  #4: ffff888069be5f40 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x11f/0x25e0
[  399.279247][T14059]  #5: ffff88802d4d8610 (sb_internal#6){.+.+}-{0:0}, at: ocfs2_mknod+0xf31/0x2210
[  399.288517][T14059]  #6: ffff8880680cbce8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700
[  399.299258][T14059]  #7: ffff88807c126950 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x2054/0x2290
[  399.309135][T14059] 
[  399.309135][T14059] stack backtrace:
[  399.315025][T14059] CPU: 0 UID: 0 PID: 14059 Comm: syz.6.3057 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  399.315057][T14059] Tainted: [L]=SOFTLOCKUP
[  399.315065][T14059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  399.315079][T14059] Call Trace:
[  399.315090][T14059]  <TASK>
[  399.315100][T14059]  dump_stack_lvl+0xe8/0x150
[  399.315136][T14059]  print_circular_bug+0x2e1/0x300
[  399.315176][T14059]  check_noncircular+0x12e/0x150
[  399.315213][T14059]  __lock_acquire+0x15a5/0x2cf0
[  399.315257][T14059]  ? ocfs2_init_acl+0x2fd/0x7e0
[  399.315289][T14059]  lock_acquire+0x106/0x330
[  399.315316][T14059]  ? ocfs2_init_acl+0x2fd/0x7e0
[  399.315352][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.315390][T14059]  down_read+0x47/0x2e0
[  399.315426][T14059]  ? ocfs2_init_acl+0x2fd/0x7e0
[  399.315458][T14059]  ? ocfs2_init_acl+0x181/0x7e0
[  399.315492][T14059]  ocfs2_init_acl+0x2fd/0x7e0
[  399.315525][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.315559][T14059]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  399.315591][T14059]  ? dquot_alloc_inode+0x8ba/0xa50
[  399.315634][T14059]  ? __pfx_ocfs2_journal_dirty+0x10/0x10
[  399.315672][T14059]  ? ocfs2_block_signals+0x9a/0xe0
[  399.315703][T14059]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  399.315732][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.315764][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.315807][T14059]  ocfs2_mknod+0x1423/0x2210
[  399.315834][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.315870][T14059]  ? __pfx_ocfs2_mknod+0x10/0x10
[  399.315891][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.315920][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.315946][T14059]  ? do_raw_spin_unlock+0xf5/0x210
[  399.315982][T14059]  ? _raw_spin_unlock+0x28/0x50
[  399.316005][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316031][T14059]  ? ocfs2_inode_lock_full_nested+0xaec/0x1bd0
[  399.316068][T14059]  ? kasan_quarantine_put+0xbb/0x1f0
[  399.316100][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316129][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316155][T14059]  ? __lock_acquire+0x6b5/0x2cf0
[  399.316182][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316208][T14059]  ? do_raw_spin_lock+0x12b/0x2f0
[  399.316242][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316270][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316299][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316325][T14059]  ? do_raw_spin_unlock+0xf5/0x210
[  399.316362][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316388][T14059]  ? do_raw_spin_lock+0x12b/0x2f0
[  399.316424][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316451][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316479][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316506][T14059]  ? do_raw_spin_unlock+0xf5/0x210
[  399.316543][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316569][T14059]  ? put_pid+0xe9/0x130
[  399.316599][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316629][T14059]  ocfs2_mkdir+0x181/0x430
[  399.316652][T14059]  ? __pfx_from_kgid+0x10/0x10
[  399.316681][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316709][T14059]  ? __pfx_ocfs2_mkdir+0x10/0x10
[  399.316734][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316761][T14059]  ? inode_permission+0x346/0x5f0
[  399.316791][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316817][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316846][T14059]  vfs_mkdir+0x413/0x630
[  399.316884][T14059]  filename_mkdirat+0x285/0x510
[  399.316921][T14059]  ? __pfx_filename_mkdirat+0x10/0x10
[  399.316957][T14059]  ? srso_alias_return_thunk+0x5/0xfbef5
[  399.316983][T14059]  ? do_getname+0x151/0x250
[  399.317007][T14059]  __se_sys_mkdirat+0x35/0x150
[  399.317043][T14059]  do_syscall_64+0x14d/0xf80
[  399.317070][T14059]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.317092][T14059]  ? trace_irq_disable+0x37/0x100
[  399.317125][T14059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.317148][T14059] RIP: 0033:0x7f91b179ae57
[  399.317169][T14059] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  399.317188][T14059] RSP: 002b:00007f91b25e2e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  399.317210][T14059] RAX: ffffffffffffffda RBX: 00007f91b25e2ee0 RCX: 00007f91b179ae57
[  399.317227][T14059] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c
[  399.317242][T14059] RBP: 0000200000000040 R08: 00002000000007c0 R09: 0000000000000000
[  399.317257][T14059] R10: 0000200000000040 R11: 0000000000000246 R12: 0000200000000280
[  399.317272][T14059] R13: 00007f91b25e2ea0 R14: 0000000000000000 R15: 0000000000000000
[  399.317296][T14059]  </TASK>
[  399.773606][ T6116] udevd[6116]: symlink '../../loop9' '/dev/disk/by-diskseq/967.tmp-b7:9' failed: Read-only file system
[  399.807318][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-diskseq/983.tmp-b7:6' failed: Read-only file system
[  399.819538][ T5877] udevd[5877]: symlink '../../loop6' '/dev/disk/by-uuid/9357e9d7-5182-4c22-8242-b9b0d0fb6750.tmp-b7:6' failed: Read-only file system
[  399.870530][ T5877] udevd[5877]: symlink '../../loop3' '/dev/disk/by-diskseq/979.tmp-b7:3' failed: Read-only file system
[  399.872224][T14091] loop5: detected capacity change from 0 to 40427
[  399.900917][T14101] loop8: detected capacity change from 0 to 64
[  399.907273][T14100] sctp: [Deprecated]: syz.4.3076 (pid 14100) Use of int in maxseg socket option.
[  399.907273][T14100] Use struct sctp_assoc_value instead
[  399.972164][T14091] F2FS-fs (loop5): invalid crc value
[  399.986700][ T6116] udevd[6116]: symlink '../../loop8' '/dev/disk/by-diskseq/985.tmp-b7:8' failed: Read-only file system
[  399.989272][ T5877] udevd[5877]: symlink '../../loop5' '/dev/disk/by-diskseq/984.tmp-b7:5' failed: Read-only file system
[  400.011820][   T30] audit: type=1800 audit(1771004442.989:1762): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3077" name="file1" dev="loop8" ino=22 res=0 errno=0
[  400.012225][ T5877] udevd[5877]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system
[  400.071253][ T6116] udevd[6116]: symlink '../../loop8' '/dev/disk/by-label/untitled.tmp-b7:8' failed: Read-only file system
[  400.092054][ T5877] udevd[5877]: symlink '../../loop8' '/dev/disk/by-diskseq/985.tmp-b7:8' failed: Read-only file system
[  400.104243][ T5877] udevd[5877]: symlink '../../loop8' '/dev/disk/by-label/untitled.tmp-b7:8' failed: Read-only file system
[  400.125989][   T30] audit: type=1800 audit(1771004442.989:1763): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3077" name="file1" dev="loop8" ino=22 res=0 errno=0
[  400.172897][T14091] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  400.188774][T14091] F2FS-fs (loop5): Start checkpoint disabled!
[  400.198572][T14091] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  400.204494][ T9513] ocfs2: Unmounting device (7,6) on (node local)
[  400.216356][T14091] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  400.323501][ T1079] kworker/u8:5: attempt to access beyond end of device
[  400.323501][ T1079] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  400.352072][ T1079] CPU: 0 UID: 0 PID: 1079 Comm: kworker/u8:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  400.352117][ T1079] Tainted: [L]=SOFTLOCKUP
[  400.352126][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  400.352144][ T1079] Workqueue: writeback wb_workfn (flush-7:5)
[  400.352199][ T1079] Call Trace:
[  400.352209][ T1079]  <TASK>
[  400.352218][ T1079]  dump_stack_lvl+0xe8/0x150
[  400.352257][ T1079]  f2fs_handle_critical_error+0x37c/0x540
[  400.352288][ T1079]  f2fs_write_end_io+0xc1d/0xfd0
[  400.352332][ T1079]  __submit_merged_bio+0x256/0x650
[  400.352361][ T1079]  __submit_merged_write_cond+0x269/0x530
[  400.352411][ T1079]  f2fs_write_data_pages+0x280b/0x3360
[  400.352459][ T1079]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  400.352498][ T1079]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  400.352557][ T1079]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  400.352593][ T1079]  ? f2fs_write_node_pages+0x491/0x700
[  400.352638][ T1079]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  400.352677][ T1079]  ? do_raw_spin_lock+0x12b/0x2f0
[  400.352720][ T1079]  ? set_shrinker_bit+0x7c/0x350
[  400.352746][ T1079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.352777][ T1079]  ? rcu_is_watching+0x15/0xb0
[  400.352810][ T1079]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  400.352840][ T1079]  do_writepages+0x32e/0x550
[  400.352869][ T1079]  ? rcu_is_watching+0x15/0xb0
[  400.352903][ T1079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.352932][ T1079]  ? do_raw_spin_lock+0x12b/0x2f0
[  400.352972][ T1079]  __writeback_single_inode+0x133/0x1060
[  400.353000][ T1079]  ? do_raw_spin_unlock+0xf5/0x210
[  400.353042][ T1079]  writeback_sb_inodes+0x92e/0x1940
[  400.353070][ T1079]  ? ret_from_fork_asm+0x1a/0x30
[  400.353119][ T1079]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  400.353143][ T1079]  ? do_raw_spin_lock+0x12b/0x2f0
[  400.353213][ T1079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.353242][ T1079]  ? rcu_is_watching+0x15/0xb0
[  400.353272][ T1079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.353305][ T1079]  wb_writeback+0x445/0xad0
[  400.353330][ T1079]  ? queue_io+0x1e1/0x450
[  400.353357][ T1079]  ? __pfx_wb_writeback+0x10/0x10
[  400.353379][ T1079]  ? do_raw_spin_lock+0x12b/0x2f0
[  400.353420][ T1079]  ? rcu_is_watching+0x15/0xb0
[  400.353452][ T1079]  wb_workfn+0x3f8/0xef0
[  400.353485][ T1079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.353519][ T1079]  ? pick_next_task_fair+0x16d3/0x1710
[  400.353562][ T1079]  ? __pfx_wb_workfn+0x10/0x10
[  400.353597][ T1079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.353626][ T1079]  ? do_raw_spin_lock+0x12b/0x2f0
[  400.353661][ T1079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.353692][ T1079]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  400.353729][ T1079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.353757][ T1079]  ? rcu_is_watching+0x15/0xb0
[  400.353786][ T1079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.353815][ T1079]  ? rcu_is_watching+0x15/0xb0
[  400.353844][ T1079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.353883][ T1079]  ? lock_acquire+0x5f/0x330
[  400.353909][ T1079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.353940][ T1079]  ? rcu_is_watching+0x15/0xb0
[  400.353968][ T1079]  ? process_scheduled_works+0xa0f/0x17a0
[  400.353996][ T1079]  ? process_scheduled_works+0xa0f/0x17a0
[  400.354025][ T1079]  process_scheduled_works+0xaec/0x17a0
[  400.354067][ T1079]  ? __pfx_process_scheduled_works+0x10/0x10
[  400.354094][ T1079]  ? do_raw_spin_lock+0x12b/0x2f0
[  400.354133][ T1079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.354168][ T1079]  ? assign_work+0x3d5/0x5e0
[  400.354197][ T1079]  worker_thread+0xa50/0xfc0
[  400.354236][ T1079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.354269][ T1079]  kthread+0x388/0x470
[  400.354305][ T1079]  ? __pfx_worker_thread+0x10/0x10
[  400.354333][ T1079]  ? __pfx_kthread+0x10/0x10
[  400.354368][ T1079]  ret_from_fork+0x51e/0xb90
[  400.354399][ T1079]  ? __pfx_ret_from_fork+0x10/0x10
[  400.354439][ T1079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  400.354467][ T1079]  ? __switch_to+0xc7d/0x1400
[  400.354493][ T1079]  ? __pfx_kthread+0x10/0x10
[  400.354536][ T1079]  ret_from_fork_asm+0x1a/0x30
[  400.354583][ T1079]  </TASK>
[  400.354855][ T1079] F2FS-fs (loop5): Stopped filesystem due to reason: 3