last executing test programs:

4m48.245217433s ago: executing program 2 (id=62):
r0 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100090a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000)

4m47.162311096s ago: executing program 2 (id=67):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x6, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x40000)

4m47.002864765s ago: executing program 2 (id=69):
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
splice(r1, 0x0, r0, 0x0, 0x40006, 0x6)

4m46.884848317s ago: executing program 2 (id=71):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1e5042, 0x1ff)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6)

4m46.526618761s ago: executing program 2 (id=75):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000180)={0xc, r1})
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x8000000000000400})
ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, r1, r1, 0x7ffffffffffffffe, 0xfffffffffffffffe})

4m46.253289703s ago: executing program 2 (id=77):
syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
r0 = syz_io_uring_setup(0x416d, &(0x7f00000010c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x59)

4m46.164842246s ago: executing program 32 (id=77):
syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
r0 = syz_io_uring_setup(0x416d, &(0x7f00000010c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x59)

2m38.98080044s ago: executing program 0 (id=1345):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x20000000)

2m36.805203132s ago: executing program 0 (id=1370):
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)

2m35.291882641s ago: executing program 3 (id=1380):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4)

2m35.224333345s ago: executing program 3 (id=1382):
syz_usb_connect(0x5, 0x3f, &(0x7f0000000680)=ANY=[@ANYBLOB="12010002f638d408f01002204ddc0102030109022d00010b06800809045f40030a00004009050d02000202040c09050808400001c60d090582"], 0x0)

2m34.194899713s ago: executing program 0 (id=1386):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
setitimer(0x1, 0x0, 0x0)

2m34.194582359s ago: executing program 0 (id=1387):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0x5, 0x800, 0x200000004, 0x4000000, 0x100000000000001, 0x2, 0x40408405})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r0, 0x0, 0xee01)
rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

2m33.792238184s ago: executing program 3 (id=1389):
syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00')
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101442, 0xcd)

2m33.642268213s ago: executing program 3 (id=1390):
mkdir(&(0x7f0000005740)='./file0\x00', 0x3b)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])

2m33.625234909s ago: executing program 0 (id=1392):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)

2m33.492231244s ago: executing program 3 (id=1394):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet(0x2, 0xa, 0x7)

2m33.262498564s ago: executing program 0 (id=1396):
r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x8000)
ioctl$NBD_DO_IT(r0, 0xab03)

2m33.145382004s ago: executing program 3 (id=1397):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x8, 0xfdfffff4, 0x238d117e436b3550, 0x2, 0x6, 0x1, 0x1, 0xc00, 0x0, 0x20, 0xfff}}, 0x50)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000)

2m32.983336328s ago: executing program 33 (id=1397):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x8, 0xfdfffff4, 0x238d117e436b3550, 0x2, 0x6, 0x1, 0x1, 0xc00, 0x0, 0x20, 0xfff}}, 0x50)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000)

2m18.193101798s ago: executing program 34 (id=1396):
r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x8000)
ioctl$NBD_DO_IT(r0, 0xab03)

1m15.03325712s ago: executing program 5 (id=2218):
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8})
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m14.903100054s ago: executing program 5 (id=2221):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xf)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))

1m12.684295878s ago: executing program 5 (id=2239):
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000c000300010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m12.602838183s ago: executing program 5 (id=2241):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000bc0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00')
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

1m12.381988159s ago: executing program 5 (id=2242):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0))

1m12.013892737s ago: executing program 5 (id=2245):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0xe3}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m11.733823271s ago: executing program 35 (id=2245):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0xe3}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

56.321743082s ago: executing program 1 (id=2358):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==")
mknod$loop(0x0, 0xebcb071e61ca3e30, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000000), 0x0, 0x0, 0x1)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0xe0000000)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

55.874889876s ago: executing program 1 (id=2359):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r0, 0x81000000)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x4, "918f446fbbf40ee3471a6d21e4d8fe776803781b7b2cc877dfb4b877b8568c22ef8a7d645317e4e8398d5fed7a0eeb9f7dc33259b276838c4e51be32acaf52de", {0x9, 0x8}})

55.441225556s ago: executing program 1 (id=2360):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f00000002c0)="10eba9fdb4cbab48929e1af15100"/28, 0x1c}], 0x2)

54.990892808s ago: executing program 1 (id=2362):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x3800813, &(0x7f0000000480)={[{@cruft}, {@map_acorn}, {@unhide}, {@nojoliet}, {@nojoliet}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x3}}, {@nocompress}, {@overriderock}, {}, {@block={'block', 0x3d, 0x200}}, {}, {@overriderock}, {@nojoliet}, {@map_acorn}]}, 0x1, 0xa61, &(0x7f0000001cc0)="$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")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

54.671121252s ago: executing program 1 (id=2366):
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_score_adj\x00')
writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)='2', 0x1}, {0x0, 0x300}], 0x2)

54.328821104s ago: executing program 1 (id=2370):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

53.67591883s ago: executing program 36 (id=2370):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

1.849870356s ago: executing program 7 (id=2850):
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x808000, &(0x7f00000002c0)=ANY=[@ANYBLOB="00cd067ca5fe94f358a97d3799d10d6a0f0d49553970899fa347aa76be1b2509f63779954a38f01042f578e036051ee7d6d1fb7e07c209e650464433ce970000000900000014c931bb00000000", @ANYRESOCT=0x0], 0x1, 0xa0, &(0x7f0000000000)="$eJzs17GJAlEUBdC7s8vuGjgNGNiBNdiKGGpmpAhWZCuWIIgVmInJyDgziHagngP/Py43fcnbXbaDlEm1Saoni+VqNpk3f/p5MA7voEjyl+Q/ybBs8u+tObRbkOxP62n36ubr3DUAAMArKTKqx3cbj/fmJ0mvvQOaBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCJrgEAAP//sjg1uA==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
open(&(0x7f00000043c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8001, 0x110)

1.849658368s ago: executing program 7 (id=2851):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc3}, 0x90)

1.757264498s ago: executing program 7 (id=2852):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

1.708608671s ago: executing program 7 (id=2853):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.642948239s ago: executing program 7 (id=2854):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, 0x4000})

1.587965241s ago: executing program 7 (id=2856):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5a4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "1552c10d"}]}}, 0x0}, 0x0)

630.564376ms ago: executing program 6 (id=2877):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
sendfile(r0, r0, 0x0, 0x40008)

582.823075ms ago: executing program 6 (id=2878):
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000070a01"], 0x14}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000008060000"], 0xfdef)

449.251164ms ago: executing program 6 (id=2881):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$dri(0x0, 0x3ffffffffffffffd, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2], [0x810003], [0x5, 0x7fff, 0xffffffff, 0x46], [0x0, 0x0, 0x4, 0xfffffffffffffffe]})

380.401901ms ago: executing program 6 (id=2882):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})

380.253911ms ago: executing program 6 (id=2883):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030400000000fedbdf2500000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e00", @ANYRES32, @ANYBLOB="050001"], 0x44}}, 0x0)

288.294557ms ago: executing program 6 (id=2884):
socket(0x10, 0x803, 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
close(0x3)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)

288.154832ms ago: executing program 4 (id=2885):
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x6}, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)

180.279885ms ago: executing program 4 (id=2886):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000100)=0x1, 0x4)

179.993879ms ago: executing program 4 (id=2887):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x818}, 0x20004000)

130.713695ms ago: executing program 4 (id=2888):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xc, 0xac, &(0x7f0000000100)="$eJzs0jFqwzAUBuBnY7cdu3foDXwHn6BnMB3tzZNLJ9+nlyh07RFygwxZsygYyUP2QAh8H0hPP/8ikP7PP2+xRryvESmlJu2aSPPyNQ7TvLTjMEVEG3+RVWU+Bw+uLs/ZR/4DWz72uatKfzh9f+4rNx+/eT7d7+IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEPV63Wuo+vK8WXbLgEAAP//2Bwh+A==")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

70.282114ms ago: executing program 4 (id=2889):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x0)

0s ago: executing program 4 (id=2890):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38)

kernel console output (not intermixed with test programs):

: 'syz.5.2154': attribute type 4 has an invalid length.
[  284.889576][T11663] loop5: detected capacity change from 0 to 164
[  284.918080][T11134] udevd[11134]: symlink '../../loop5' '/dev/disk/by-label/CDROM.tmp-b7:5' failed: Read-only file system
[  284.945018][T11134] udevd[11134]: symlink '../../loop5' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:5' failed: Read-only file system
[  285.088130][T11134] udevd[11134]: symlink '../../loop5' '/dev/disk/by-label/CDROM.tmp-b7:5' failed: Read-only file system
[  285.117808][T11134] udevd[11134]: symlink '../../loop5' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:5' failed: Read-only file system
[  285.666628][T11683] loop4: detected capacity change from 0 to 512
[  285.681470][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  285.687275][T11683] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  285.702779][T11683] EXT4-fs (loop4): 1 truncate cleaned up
[  285.710849][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  285.718337][T11683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.760963][ T9610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.792991][T11679] loop5: detected capacity change from 0 to 32768
[  285.818066][T11679] ialloc: diAlloc returned -5!
[  285.826545][T11679] ialloc: diAlloc returned -5!
[  286.044821][T11693] bond0: option mode: unable to set because the bond device has slaves
[  286.115307][T11697] loop5: detected capacity change from 0 to 128
[  286.489972][T11701] loop5: detected capacity change from 0 to 32768
[  286.522496][T11701] (syz.5.2175,11701,0):ocfs2_initialize_super:2087 ERROR: couldn't mount because of unsupported optional features (4).
[  286.540184][T11701] (syz.5.2175,11701,0):ocfs2_fill_super:1177 ERROR: status = -22
[  287.039911][T11718] loop5: detected capacity change from 0 to 16
[  287.046685][T11718] erofs (device loop5): EXPERIMENTAL 48-bit layout support in use. Use at your own risk!
[  287.051727][T11718] erofs (device loop5): unsupported i_format 65280 of nid 255
[  287.366291][T11714] loop4: detected capacity change from 0 to 32768
[  287.376017][T11714] (syz.4.2182,11714,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: directory entry overrun - offset=88, inode=69, rec_len=32800, name_len=8
[  287.387783][T11714] (syz.4.2182,11714,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  287.391643][T11714] (syz.4.2182,11714,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs?
[  287.391667][T11714] (syz.4.2182,11714,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  287.402098][T11714] (syz.4.2182,11714,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  287.407249][T11714] (syz.4.2182,11714,1):ocfs2_fill_super:1177 ERROR: status = -22
[  287.721281][   T33] audit: type=1326 audit(2000000312.815:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11735 comm="syz.5.2192" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f852078ebe9 code=0x0
[  287.838364][T11740] openvswitch: netlink: Multiple metadata blocks provided
[  287.986372][T11738] loop4: detected capacity change from 0 to 32768
[  287.996792][T11738] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2193 (11738)
[  288.021580][T11738] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  288.025778][T11738] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  288.145962][T11738] BTRFS info (device loop4): enabling ssd optimizations
[  288.149122][T11738] BTRFS info (device loop4): enabling free space tree
[  288.225890][ T9610] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  288.327684][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:4' failed: Read-only file system
[  288.998638][T11803] program syz.5.2215 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  289.067054][T11806] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2219'.
[  289.238357][   T54] Bluetooth: hci4: unexpected event 0x0f length: 0 < 4
[  289.247734][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2222'.
[  289.360592][T11818] loop1: detected capacity change from 0 to 1024
[  289.374859][T11818] syz.1.2224: attempt to access beyond end of device
[  289.374859][T11818] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  289.390111][T11134] udevd[11134]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system
[  289.398043][T11134] udevd[11134]: symlink '../../loop1' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:1' failed: Read-only file system
[  289.526698][T11821] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2225'.
[  290.010397][T11837] loop1: detected capacity change from 0 to 256
[  290.013971][T11837] exfat: Deprecated parameter 'namecase'
[  290.016480][T11837] exfat: Deprecated parameter 'utf8'
[  290.018932][T11837] exFAT-fs (loop1): bogus fat length
[  290.021141][T11837] exFAT-fs (loop1): failed to read boot sector
[  290.025416][T11837] exFAT-fs (loop1): failed to recognize exfat type
[  290.221461][T11841] loop1: detected capacity change from 0 to 32768
[  290.226167][T11841] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2234 (11841)
[  290.239173][T11134] udevd[11134]: symlink '../../loop1' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:1' failed: Read-only file system
[  290.240365][T11841] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  290.247902][T11841] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  290.355192][T11841] BTRFS info (device loop1): enabling ssd optimizations
[  290.358758][T11841] BTRFS info (device loop1): enabling free space tree
[  290.513641][T11134] udevd[11134]: symlink '../../loop1' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:1' failed: Read-only file system
[  290.566382][ T5878] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  290.960263][T11861] loop4: detected capacity change from 0 to 40427
[  290.986044][T11861] F2FS-fs (loop4): invalid crc value
[  290.997567][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  291.025759][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  291.036769][ T5846] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  291.086236][T11861] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  291.115997][T11861] F2FS-fs (loop4): Start checkpoint disabled!
[  291.131587][T11861] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  291.294705][   T54] Bluetooth: hci4: command 0x1003 tx timeout
[  291.297862][ T5236] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  291.307533][T11868] loop1: detected capacity change from 0 to 256
[  291.367046][T11861] syz.4.2236: attempt to access beyond end of device
[  291.367046][T11861] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  291.428764][T11868] FAT-fs (loop1): Directory bread(block 64) failed
[  291.441937][T11868] FAT-fs (loop1): Directory bread(block 65) failed
[  291.450134][T11868] FAT-fs (loop1): Directory bread(block 66) failed
[  291.456709][T11868] FAT-fs (loop1): Directory bread(block 67) failed
[  291.461473][T11868] FAT-fs (loop1): Directory bread(block 68) failed
[  291.464252][T11868] FAT-fs (loop1): Directory bread(block 69) failed
[  291.467159][T11868] FAT-fs (loop1): Directory bread(block 70) failed
[  291.469992][T11868] FAT-fs (loop1): Directory bread(block 71) failed
[  291.473229][T11868] FAT-fs (loop1): Directory bread(block 72) failed
[  291.475928][T11868] FAT-fs (loop1): Directory bread(block 73) failed
[  291.491726][   T29] kworker/u9:1: attempt to access beyond end of device
[  291.491726][   T29] loop4: rw=1, sector=45104, nr_sectors = 64 limit=40427
[  291.504286][T11868] syz.1.2238: attempt to access beyond end of device
[  291.504286][T11868] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256
[  291.528408][   T29] kworker/u9:1: attempt to access beyond end of device
[  291.528408][   T29] loop4: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  291.536123][   T29] CPU: 0 UID: 0 PID: 29 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  291.536142][   T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  291.536150][   T29] Workqueue: writeback wb_workfn (flush-7:4)
[  291.536172][   T29] Call Trace:
[  291.536177][   T29]  <TASK>
[  291.536182][   T29]  dump_stack_lvl+0x189/0x250
[  291.536202][   T29]  ? __pfx_dump_stack_lvl+0x10/0x10
[  291.536217][   T29]  ? __pfx_queue_work_on+0x10/0x10
[  291.536230][   T29]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  291.536244][   T29]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  291.536269][   T29]  f2fs_handle_critical_error+0x37c/0x540
[  291.536293][   T29]  f2fs_write_end_io+0x886/0xb60
[  291.536344][   T29]  __submit_merged_bio+0x27a/0x6a0
[  291.536368][   T29]  __submit_merged_write_cond+0x255/0x530
[  291.536390][   T29]  f2fs_write_data_pages+0x261d/0x3000
[  291.536436][   T29]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  291.536466][   T29]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  291.536514][   T29]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  291.536542][   T29]  ? trace_f2fs_writepages+0x7f/0x200
[  291.536560][   T29]  ? f2fs_write_node_pages+0x478/0x6e0
[  291.536579][   T29]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  291.536609][   T29]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  291.536627][   T29]  do_writepages+0x32e/0x550
[  291.536648][   T29]  ? reacquire_held_locks+0x127/0x1d0
[  291.536661][   T29]  ? writeback_sb_inodes+0x384/0x1010
[  291.536683][   T29]  __writeback_single_inode+0x145/0xff0
[  291.536698][   T29]  ? do_raw_spin_unlock+0x4d/0x240
[  291.536716][   T29]  writeback_sb_inodes+0x6c7/0x1010
[  291.536753][   T29]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  291.536801][   T29]  ? rcu_is_watching+0x15/0xb0
[  291.536823][   T29]  wb_writeback+0x43b/0xaf0
[  291.536846][   T29]  ? queue_io+0x331/0x590
[  291.536864][   T29]  ? __pfx_wb_writeback+0x10/0x10
[  291.536885][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  291.536906][   T29]  wb_workfn+0x409/0xef0
[  291.536932][   T29]  ? __pfx_wb_workfn+0x10/0x10
[  291.536949][   T29]  ? __lock_acquire+0xab9/0xd20
[  291.536974][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[  291.536992][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  291.537007][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[  291.537016][   T29]  ? process_scheduled_works+0x9ef/0x17b0
[  291.537029][   T29]  process_scheduled_works+0xae1/0x17b0
[  291.537067][   T29]  ? __pfx_process_scheduled_works+0x10/0x10
[  291.537093][   T29]  worker_thread+0x8a0/0xda0
[  291.537129][   T29]  kthread+0x711/0x8a0
[  291.537146][   T29]  ? __pfx_worker_thread+0x10/0x10
[  291.537159][   T29]  ? __pfx_kthread+0x10/0x10
[  291.537174][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  291.537189][   T29]  ? lockdep_hardirqs_on+0x9c/0x150
[  291.537204][   T29]  ? __pfx_kthread+0x10/0x10
[  291.537218][   T29]  ret_from_fork+0x3fc/0x770
[  291.537234][   T29]  ? __pfx_ret_from_fork+0x10/0x10
[  291.537251][   T29]  ? __switch_to_asm+0x39/0x70
[  291.537265][   T29]  ? __switch_to_asm+0x33/0x70
[  291.537278][   T29]  ? __pfx_kthread+0x10/0x10
[  291.537293][   T29]  ret_from_fork_asm+0x1a/0x30
[  291.537346][   T29]  </TASK>
[  291.537352][   T29] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  292.173490][ T5878] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.284265][ T5878] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.366563][ T5878] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.454441][ T5878] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.839598][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  292.847088][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  292.854252][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  292.874172][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  292.889844][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  293.276139][ T5878] bond0 (unregistering): Released all slaves
[  293.785088][T11907] loop4: detected capacity change from 0 to 256
[  293.794662][T11907] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  293.803920][T11907] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  293.814690][T11907] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  293.914965][T11910] loop4: detected capacity change from 0 to 1024
[  293.964196][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  293.985812][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/89204a28-3dc1-3311-9d08-7ea374525680.tmp-b7:4' failed: Read-only file system
[  294.026080][ T5878] hsr_slave_0: left promiscuous mode
[  294.037341][ T5878] 0: left promiscuous mode
[  294.067766][ T5878] veth1_macvtap: left promiscuous mode
[  294.072462][ T5878] veth0_macvtap: left promiscuous mode
[  294.075079][ T5878] veth1_vlan: left promiscuous mode
[  294.077460][ T5878] veth0_vlan: left promiscuous mode
[  294.983895][ T5236] Bluetooth: hci3: command tx timeout
[  295.374090][T11889] chnl_net:caif_netlink_parms(): no params data found
[  295.652678][T11889] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.655620][T11889] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.662256][T11889] bridge_slave_0: entered allmulticast mode
[  295.677790][T11889] bridge_slave_0: entered promiscuous mode
[  295.683821][T11889] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.687249][T11889] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.711903][   T24] iguanair 2-1:0.255: failed to get version
[  295.715471][   T24] iguanair 2-1:0.255: probe with driver iguanair failed with error -110
[  295.718753][T11889] bridge_slave_1: entered allmulticast mode
[  295.720138][T11889] bridge_slave_1: entered promiscuous mode
[  295.740420][ T7688] udevd[7688]: setting mode of /dev/bus/usb/002/046 to 020664 failed: Read-only file system
[  295.744617][   T24] usb 2-1: USB disconnect, device number 46
[  295.747705][ T7688] udevd[7688]: setting owner of /dev/bus/usb/002/046 to uid=0, gid=0 failed: Read-only file system
[  295.787295][T11134] udevd[11134]: symlink '../bus/usb/002/046' '/dev/char/189:173.tmp-c189:173' failed: Read-only file system
[  295.832048][T11134] udevd[11134]: symlink '../bus/usb/002/046' '/dev/char/189:173.tmp-c189:173' failed: Read-only file system
[  295.841681][T11889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.857099][T11889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.896559][T11889] team0: Port device team_slave_0 added
[  295.906075][T11889] team0: Port device team_slave_1 added
[  295.977572][T11889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.989330][T11889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.011013][T11889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.026986][T11889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.031038][T11889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.042492][T11889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.146622][T11889] hsr_slave_0: entered promiscuous mode
[  296.150408][T11889] hsr_slave_1: entered promiscuous mode
[  296.159517][T11889] debugfs: 'hsr0' already exists in 'hsr'
[  296.162980][T11889] Cannot create hsr debugfs directory
[  296.377775][T11944] loop1: detected capacity change from 0 to 512
[  296.402346][T11134] udevd[11134]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  296.419947][T11944] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2263: corrupted inode contents
[  296.434304][T11944] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.2263: mark_inode_dirty error
[  296.446498][T11944] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2263: corrupted inode contents
[  296.459397][T11944] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.2263: mark_inode_dirty error
[  296.488293][T11944] Quota error (device loop1): write_blk: dquota write failed
[  296.494920][T11944] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  296.502562][T11944] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2263: Failed to acquire dquot type 0
[  296.515375][T11944] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2263: corrupted inode contents
[  296.528733][T11944] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.2263: mark_inode_dirty error
[  296.535483][T11944] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2263: corrupted inode contents
[  296.556296][T11944] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2263: mark_inode_dirty error
[  296.576626][T11944] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2263: corrupted inode contents
[  296.595420][T11944] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  296.608700][T11944] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2263: corrupted inode contents
[  296.629689][T11944] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.2263: mark_inode_dirty error
[  296.660118][T11944] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  296.685356][T11944] EXT4-fs (loop1): 1 truncate cleaned up
[  296.691532][T11889] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  296.696480][T11944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.704692][T11944] ext4 filesystem being mounted at /786/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.711724][T11889] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  296.751841][T11889] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  296.764415][T11889] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  296.772379][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.787661][T11962] loop4: detected capacity change from 0 to 2048
[  296.804841][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  296.811203][T11962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.849401][ T7688] udevd[7688]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  296.859481][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  297.016149][T11889] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.047983][ T5236] Bluetooth: hci3: command tx timeout
[  297.055309][T11889] 8021q: adding VLAN 0 to HW filter on device team0
[  297.082751][ T1227] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.085394][ T1227] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.135870][T11984] ip6tnl1: entered promiscuous mode
[  297.160848][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.163524][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.191971][T11986] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2271'.
[  297.254958][T11988] loop1: detected capacity change from 0 to 256
[  297.255878][T11889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  297.277372][T11988] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  297.289184][T11988] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  297.303636][T11988] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  297.513516][T11889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.515863][ T9610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.520777][T11996] loop1: detected capacity change from 0 to 512
[  297.541359][T11996] EXT4-fs: Ignoring removed mblk_io_submit option
[  297.562627][T11996] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  297.578826][T11996] EXT4-fs (loop1): orphan cleanup on readonly fs
[  297.584683][T11996] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  297.614157][T11996] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  297.644063][T11996] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  297.670584][T11996] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2274: bg 0: block 40: padding at end of block bitmap is not set
[  297.685323][T11996] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  297.698135][T11996] EXT4-fs (loop1): 1 truncate cleaned up
[  297.701757][T11996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  297.748646][T11889] veth0_vlan: entered promiscuous mode
[  297.761561][T11889] veth1_vlan: entered promiscuous mode
[  297.762652][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.793760][T11889] veth0_macvtap: entered promiscuous mode
[  297.799367][T11889] veth1_macvtap: entered promiscuous mode
[  297.808822][T11889] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.816804][T11889] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.834827][ T5878] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.846967][ T5878] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.859622][ T5878] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.863163][ T5878] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.033689][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.037058][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.081136][  T793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.095191][  T793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.249581][ T5900] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  298.276320][T12032] loop4: detected capacity change from 0 to 512
[  298.292612][T12032] EXT4-fs (loop4): invalid inodes per group: 100663328
[  298.292612][T12032] 
[  298.430698][ T5900] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  298.434551][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.437808][ T5900] usb 2-1: Product: syz
[  298.439507][ T5900] usb 2-1: Manufacturer: syz
[  298.441429][ T5900] usb 2-1: SerialNumber: syz
[  298.444883][ T5900] usb 2-1: config 0 descriptor??
[  298.449417][ T5900] hub 2-1:0.0: bad descriptor, ignoring hub
[  298.452033][ T5900] hub 2-1:0.0: probe with driver hub failed with error -5
[  298.455207][ T5900] f81232 2-1:0.0: f81534a converter detected
[  298.656393][ T5900] f81534a ttyUSB0: f81232_set_register failed status: -71
[  298.660953][ T5900] f81534a ttyUSB0: probe with driver f81534a failed with error -5
[  298.689156][ T5900] usb 2-1: USB disconnect, device number 47
[  298.693157][ T5900] f81232 2-1:0.0: device disconnected
[  299.137049][ T5236] Bluetooth: hci3: command tx timeout
[  299.537308][ T8548] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  299.687594][ T8548] usb 5-1: Using ep0 maxpacket: 16
[  299.692482][ T8548] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  299.695459][ T8548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.698812][ T8548] usb 5-1: Product: syz
[  299.700195][ T8548] usb 5-1: Manufacturer: syz
[  299.701750][ T8548] usb 5-1: SerialNumber: syz
[  299.705477][ T8548] usb 5-1: config 0 descriptor??
[  299.710929][ T8548] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  299.714666][ T8548] usb 5-1: Detected FT-X
[  299.776558][ T5900] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  299.916797][ T8548] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  299.929709][ T5900] usb 2-1: config 0 has too many interfaces: 33, using maximum allowed: 32
[  299.932798][ T5900] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  299.936591][ T5900] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 33
[  299.940556][ T5900] usb 2-1: New USB device found, idVendor=1039, idProduct=12b6, bcdDevice=af.00
[  299.943752][ T5900] usb 2-1: New USB device strings: Mfr=99, Product=0, SerialNumber=0
[  299.946792][ T5900] usb 2-1: Manufacturer: syz
[  299.949767][ T5900] usb 2-1: config 0 descriptor??
[  300.161102][ T5900] usb 2-1: USB disconnect, device number 48
[  300.328411][ T8548] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  300.527343][ T5900] usb 5-1: USB disconnect, device number 15
[  300.542848][ T5900] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  300.548534][ T5900] ftdi_sio 5-1:0.0: device disconnected
[  301.216093][ T5236] Bluetooth: hci3: command tx timeout
[  301.233522][T12071] loop6: detected capacity change from 0 to 256
[  301.272948][T12071] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[  301.501526][T12087] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2312'.
[  301.504798][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2312'.
[  301.676754][ T5900] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  301.835812][ T5900] usb 5-1: Using ep0 maxpacket: 8
[  301.839450][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  301.843873][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  301.850565][ T5900] usb 5-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06
[  301.853585][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.855650][ T8548] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  301.856565][ T5900] usb 5-1: Product: syz
[  301.861067][ T5900] usb 5-1: Manufacturer: syz
[  301.862799][ T5900] usb 5-1: SerialNumber: syz
[  301.866170][ T5900] usb 5-1: config 0 descriptor??
[  302.005475][ T8548] usb 2-1: Using ep0 maxpacket: 16
[  302.009433][ T8548] usb 2-1: config 3 has an invalid interface number: 155 but max is 0
[  302.012077][ T8548] usb 2-1: config 3 has an invalid interface association descriptor of length 3, skipping
[  302.017505][ T8548] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  302.021490][ T8548] usb 2-1: config 3 has no interface number 0
[  302.023931][ T8548] usb 2-1: config 3 interface 155 has no altsetting 0
[  302.029045][ T8548] usb 2-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c
[  302.032901][ T8548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.036897][ T8548] usb 2-1: Product: syz
[  302.038612][ T8548] usb 2-1: Manufacturer: syz
[  302.040793][ T8548] usb 2-1: SerialNumber: syz
[  302.092418][ T5900] usb 5-1: USB disconnect, device number 16
[  302.105510][T11134] udevd[11134]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  302.250955][ T8548] usb 2-1: Found UVC 0.00 device syz (05a9:264a)
[  302.253914][ T8548] usb 2-1: No valid video chain found.
[  302.258943][ T8548] usb 2-1: USB disconnect, device number 49
[  303.071573][T12120] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  303.499632][T12123] loop1: detected capacity change from 0 to 1024
[  303.511548][T12123] hfsplus: bad catalog entry type
[  303.556099][T12127] geneve3: entered promiscuous mode
[  303.557730][T12127] geneve3: entered allmulticast mode
[  303.575134][T12120] loop4: detected capacity change from 0 to 32768
[  303.604128][ T7688] udevd[7688]: symlink '../../loop4' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:4' failed: Read-only file system
[  303.625899][T12120] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  303.659240][T12120] XFS (loop4): Ending clean mount
[  303.698265][T12138] netlink: 'syz.1.2330': attribute type 6 has an invalid length.
[  303.701605][T12138] netlink: 'syz.1.2330': attribute type 7 has an invalid length.
[  303.706866][T12138] netlink: 'syz.1.2330': attribute type 8 has an invalid length.
[  303.974560][ T8548] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  304.124638][ T8548] usb 2-1: Using ep0 maxpacket: 16
[  304.129105][ T8548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.133687][ T8548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.138092][ T8548] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  304.143314][ T8548] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00
[  304.147092][ T8548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.152668][ T8548] usb 2-1: config 0 descriptor??
[  304.332259][ T9610] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  304.512047][T12145] loop4: detected capacity change from 0 to 8
[  304.518798][T12145] Filesystem uses "unknown" compression. This is not supported
[  304.586772][ T8548] ryos 0003:1E7D:31CE.0017: item 0 4 0 11 parsing failed
[  304.590065][ T8548] ryos 0003:1E7D:31CE.0017: parse failed
[  304.592333][ T8548] ryos 0003:1E7D:31CE.0017: probe with driver ryos failed with error -22
[  304.599263][  T792] IPVS: starting estimator thread 0...
[  304.663750][T12153] loop6: detected capacity change from 0 to 1024
[  304.680599][T11134] udevd[11134]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  304.680945][T12153] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.695080][T12148] IPVS: using max 81 ests per chain, 194400 per kthread
[  304.695992][T11134] udevd[11134]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  304.749528][T11889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.795325][  T792] usb 2-1: USB disconnect, device number 50
[  305.093973][T12162] loop6: detected capacity change from 0 to 32768
[  305.109645][T12162] MetaData crosses page boundary!!
[  305.115627][T12162] lblock = 621d00, size  = 28672
[  305.117801][T12162] CPU: 1 UID: 0 PID: 12162 Comm: syz.6.2338 Not tainted syzkaller #0 PREEMPT(full) 
[  305.117817][T12162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  305.117824][T12162] Call Trace:
[  305.117829][T12162]  <TASK>
[  305.117835][T12162]  dump_stack_lvl+0x189/0x250
[  305.117856][T12162]  ? __pfx_dump_stack_lvl+0x10/0x10
[  305.117871][T12162]  ? __pfx__printk+0x10/0x10
[  305.117898][T12162]  __get_metapage+0x9ea/0xde0
[  305.117921][T12162]  dtSearch+0x591/0x21b0
[  305.117962][T12162]  jfs_lookup+0x155/0x380
[  305.117982][T12162]  ? __pfx_jfs_lookup+0x10/0x10
[  305.118014][T12162]  ? __pfx_apparmor_path_mknod+0x10/0x10
[  305.118029][T12162]  ? make_vfsuid+0x49/0xa0
[  305.118043][T12162]  ? generic_permission+0x2e5/0x690
[  305.118061][T12162]  ? inode_permission+0x149/0x470
[  305.118071][T12162]  ? bpf_lsm_path_mknod+0x9/0x20
[  305.118082][T12162]  ? bpf_lsm_inode_create+0x9/0x20
[  305.118101][T12162]  path_openat+0x1101/0x3830
[  305.118114][T12162]  ? arch_stack_walk+0xfc/0x150
[  305.118153][T12162]  ? __pfx_path_openat+0x10/0x10
[  305.118164][T12162]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.118214][T12162]  do_filp_open+0x1fa/0x410
[  305.118229][T12162]  ? __lock_acquire+0xab9/0xd20
[  305.118249][T12162]  ? __pfx_do_filp_open+0x10/0x10
[  305.118281][T12162]  ? _raw_spin_unlock+0x28/0x50
[  305.118297][T12162]  ? alloc_fd+0x64c/0x6c0
[  305.118321][T12162]  do_sys_openat2+0x121/0x1c0
[  305.118334][T12162]  ? __se_sys_futex+0x36f/0x400
[  305.118348][T12162]  ? __pfx_do_sys_openat2+0x10/0x10
[  305.118367][T12162]  ? rcu_is_watching+0x15/0xb0
[  305.118381][T12162]  __x64_sys_openat+0x138/0x170
[  305.118398][T12162]  do_syscall_64+0xfa/0x3b0
[  305.118408][T12162]  ? lockdep_hardirqs_on+0x9c/0x150
[  305.118433][T12162]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.118444][T12162]  ? exc_page_fault+0x9f/0xf0
[  305.118463][T12162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.118474][T12162] RIP: 0033:0x7f5b3518ebe9
[  305.118486][T12162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.118496][T12162] RSP: 002b:00007f5b36005038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  305.118510][T12162] RAX: ffffffffffffffda RBX: 00007f5b353c5fa0 RCX: 00007f5b3518ebe9
[  305.118519][T12162] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  305.118527][T12162] RBP: 00007f5b35211e19 R08: 0000000000000000 R09: 0000000000000000
[  305.118534][T12162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  305.118541][T12162] R13: 00007f5b353c6038 R14: 00007f5b353c5fa0 R15: 00007fff5f07f528
[  305.118561][T12162]  </TASK>
[  305.118567][T12162] bread failed!
[  305.132782][T11134] udevd[11134]: symlink '../../loop6' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:6' failed: Read-only file system
[  305.139687][T12162] jfs_lookup: dtSearch returned -5
[  305.157572][T11134] udevd[11134]: symlink '../../loop6' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:6' failed: Read-only file system
[  305.778627][T12160] syz.4.2337 (12160): drop_caches: 2
[  305.793546][ T8548] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  305.841339][T12176] loop4: detected capacity change from 0 to 16
[  305.854577][T12176] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  305.855851][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-label/Compressed.tmp-b7:4' failed: Read-only file system
[  305.871384][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-label/Compressed.tmp-b7:4' failed: Read-only file system
[  305.882823][T12178] loop4: detected capacity change from 0 to 16
[  305.890036][T12178] erofs (device loop4): mounted with root inode @ nid 36.
[  305.895735][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/de08ee7d-c14c-4657-8f5d-a5ca07e02e09.tmp-b7:4' failed: Read-only file system
[  305.898515][T12178] erofs (device loop4): readahead error at folio 2 @ nid 89
[  305.906673][T12178] erofs (device loop4): readahead error at folio 1 @ nid 89
[  305.909708][T12178] erofs (device loop4): readahead error at folio 0 @ nid 89
[  305.912671][T12178] erofs (device loop4): read error -117 @ 0 of nid 89
[  305.915248][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/de08ee7d-c14c-4657-8f5d-a5ca07e02e09.tmp-b7:4' failed: Read-only file system
[  305.945400][ T8548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  305.958042][ T8548] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00
[  305.962020][ T8548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.972403][ T8548] usb 2-1: config 0 descriptor??
[  306.124979][T12186] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2350'.
[  306.400727][ T8548] logitech 0003:046D:C295.0018: unbalanced delimiter at end of report description
[  306.407670][ T8548] logitech 0003:046D:C295.0018: parse failed
[  306.410400][ T8548] logitech 0003:046D:C295.0018: probe with driver logitech failed with error -22
[  306.598333][ T8548] usb 2-1: USB disconnect, device number 51
[  307.141339][T12188] loop4: detected capacity change from 0 to 262144
[  307.145448][T12188] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2351 (12188)
[  307.153282][T12188] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  307.158218][T12188] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  307.202089][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/7e32c2af-f87a-45a1-bcba-64dea7c56a53.tmp-b7:4' failed: Read-only file system
[  307.290965][T12188] BTRFS info (device loop4): enabling ssd optimizations
[  307.293764][T12188] BTRFS info (device loop4): using spread ssd allocation scheme
[  307.297188][T12188] BTRFS info (device loop4): enabling free space tree
[  307.326077][T12188] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4)
[  307.360077][ T9610] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  307.460849][T12216] ptrace attach of "/syz-executor exec"[5846] was attempted by "/syz-executor exec"[12216]
[  307.906655][T12225] loop1: detected capacity change from 0 to 128
[  307.947730][ T7688] udevd[7688]: symlink '../../loop1' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:1' failed: Read-only file system
[  307.954963][T12225] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  307.978766][T12225] ext4 filesystem being mounted at /825/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  307.985122][ T7688] udevd[7688]: symlink '../../loop1' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:1' failed: Read-only file system
[  308.268910][ T5846] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  308.484062][   T97] block nbd0: Possible stuck request ffff888020678000: control (read@0,1024B). Runtime 180 seconds
[  308.489929][   T97] block nbd0: Possible stuck request ffff888020678200: control (read@1024,1024B). Runtime 180 seconds
[  308.495479][   T97] block nbd0: Possible stuck request ffff888020678400: control (read@2048,1024B). Runtime 180 seconds
[  308.500483][   T97] block nbd0: Possible stuck request ffff888020678600: control (read@3072,1024B). Runtime 180 seconds
[  309.271399][T12239] loop1: detected capacity change from 0 to 1764
[  309.274317][T12243] loop4: detected capacity change from 0 to 2048
[  309.279464][T12243] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  309.302052][T12243] NILFS (loop4): mounting unchecked fs
[  309.313784][T12243] NILFS (loop4): recovery complete
[  309.350129][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:4' failed: Read-only file system
[  309.363956][T12245] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  309.375914][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:4' failed: Read-only file system
[  309.407367][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:4' failed: Read-only file system
[  309.437316][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:4' failed: Read-only file system
[  309.450180][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:4' failed: Read-only file system
[  309.473559][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:4' failed: Read-only file system
[  310.629982][T12268] loop6: detected capacity change from 0 to 32768
[  310.659819][T12268] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2371 (12268)
[  310.717272][T12268] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  310.717513][T11134] udevd[11134]: symlink '../../loop6' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:6' failed: Read-only file system
[  310.720454][T12268] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  310.728179][T12268] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  310.853914][T12268] BTRFS info (device loop6): rebuilding free space tree
[  310.887593][T12268] BTRFS info (device loop6): disabling free space tree
[  310.890022][T12268] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  310.911101][T12268] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  310.924349][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  310.932392][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  310.936822][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  310.943222][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  310.947222][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  310.965828][T12268] BTRFS info (device loop6): setting nodatasum
[  310.977503][T12268] BTRFS info (device loop6): setting nodatacow
[  310.986455][T12268] BTRFS info (device loop6): enabling ssd optimizations
[  311.001668][T12268] BTRFS info (device loop6): turning on flush-on-commit
[  311.009116][T12268] BTRFS info (device loop6): enabling disk space caching
[  311.032509][T12268] BTRFS info (device loop6): force clearing of disk cache
[  311.049423][T12268] BTRFS info (device loop6): enabling auto defrag
[  311.065367][T12268] BTRFS info (device loop6): doing ref verification
[  311.262233][T12268] loop6: detected capacity change from 32768 to 64
[  311.283288][ T1093] kworker/u10:7: attempt to access beyond end of device
[  311.283288][ T1093] loop6: rw=4097, sector=10496, nr_sectors = 8 limit=64
[  311.307471][ T1093] BTRFS error (device loop6): bdev /dev/loop6 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  311.330955][ T1093] kworker/u10:7: attempt to access beyond end of device
[  311.330955][ T1093] loop6: rw=4097, sector=10504, nr_sectors = 8 limit=64
[  311.336759][ T1093] BTRFS error (device loop6): bdev /dev/loop6 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[  311.359430][T12293] BTRFS error (device loop6 state A): Transaction aborted (error -5)
[  311.365072][T12293] BTRFS: error (device loop6 state A) in __btrfs_free_extent:3237: errno=-5 IO failure
[  311.370296][T12293] BTRFS info (device loop6 state EA): forced readonly
[  311.374310][T12293] BTRFS error (device loop6 state EA): failed to run delayed ref for logical 5255168 num_bytes 4096 type 176 action 2 ref_mod 1: -5
[  311.379703][T12293] BTRFS: error (device loop6 state EA) in btrfs_run_delayed_refs:2161: errno=-5 IO failure
[  311.385809][T12293] BTRFS warning (device loop6 state EA): Skipping commit of aborted transaction.
[  311.391226][T12293] BTRFS: error (device loop6 state EA) in cleanup_transaction:2023: errno=-5 IO failure
[  311.731941][T11889] BTRFS info (device loop6 state EA): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  311.787562][T12287] chnl_net:caif_netlink_parms(): no params data found
[  311.859344][T12300] netlink: 'syz.6.2374': attribute type 1 has an invalid length.
[  311.866261][T12300] netlink: 630 bytes leftover after parsing attributes in process `syz.6.2374'.
[  311.975644][T12287] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.983163][T12287] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.986805][T12287] bridge_slave_0: entered allmulticast mode
[  312.000582][T12287] bridge_slave_0: entered promiscuous mode
[  312.028173][T12287] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.032166][T12287] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.035159][T12287] bridge_slave_1: entered allmulticast mode
[  312.038842][T12287] bridge_slave_1: entered promiscuous mode
[  312.137418][T12287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.158193][T12287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.164982][T12311] loop4: detected capacity change from 0 to 256
[  312.170629][T12311] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  312.179327][T12311] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  312.217355][T12311] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  312.232147][T12287] team0: Port device team_slave_0 added
[  312.236514][T12287] team0: Port device team_slave_1 added
[  312.311033][T12287] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.314318][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.341305][T12287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.352251][T12287] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.356161][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.375007][T12287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.383313][T12315] loop4: detected capacity change from 0 to 512
[  312.390998][T12315] /dev/loop4: Can't open blockdev
[  312.398902][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  312.469235][T12287] hsr_slave_0: entered promiscuous mode
[  312.474168][T12287] hsr_slave_1: entered promiscuous mode
[  312.478520][T12287] debugfs: 'hsr0' already exists in 'hsr'
[  312.488462][T12287] Cannot create hsr debugfs directory
[  312.645208][T12323] loop4: detected capacity change from 0 to 4096
[  312.672099][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  312.677876][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:4' failed: Read-only file system
[  312.726278][T12287] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  312.740515][T12287] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  312.747111][T12287] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  312.756540][T12287] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  313.052187][ T5236] Bluetooth: hci0: command tx timeout
[  313.074865][T12287] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.092957][T12287] 8021q: adding VLAN 0 to HW filter on device team0
[  313.101727][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.104686][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.120364][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.123090][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.288229][T12287] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.495041][T12287] veth0_vlan: entered promiscuous mode
[  313.507336][T12287] veth1_vlan: entered promiscuous mode
[  313.565964][T12287] veth0_macvtap: entered promiscuous mode
[  313.575542][T12287] veth1_macvtap: entered promiscuous mode
[  313.589498][T12287] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.597905][T12287] batman_adv: batadv0: Interface activated: batadv_slave_1
[  313.613990][ T5878] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.617494][ T5878] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.641272][ T5878] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.648580][ T5878] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.747550][ T5226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.751830][ T5226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.786316][  T793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.788930][  T793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.040061][T12358] random: crng reseeded on system resumption
[  315.119080][ T5236] Bluetooth: hci0: command tx timeout
[  316.274146][T12392] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2405'.
[  316.648644][T12407] loop7: detected capacity change from 0 to 32768
[  316.665502][T11134] udevd[11134]: symlink '../../loop7' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:7' failed: Read-only file system
[  316.674507][T12407] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  316.698788][T12407] XFS (loop7): Ending clean mount
[  316.702575][T12407] XFS (loop7): Quotacheck needed: Please wait.
[  316.734937][T12417] loop4: detected capacity change from 0 to 1024
[  316.748897][T12407] XFS (loop7): Quotacheck: Done.
[  316.764344][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  316.780011][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:4' failed: Read-only file system
[  316.795176][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  316.795672][ T1098] hfsplus: b-tree write err: -5, ino 4
[  316.800836][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:4' failed: Read-only file system
[  316.801713][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  316.801763][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  316.864312][T12287] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  317.198558][ T5236] Bluetooth: hci0: command tx timeout
[  317.633869][T12422] loop4: detected capacity change from 0 to 40427
[  317.643156][T12422] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  317.646041][T12422] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  317.653957][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  317.668468][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  317.721169][T12422] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  317.725801][T12422] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  317.729015][T12422] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  317.751655][ T9610] syz-executor: attempt to access beyond end of device
[  317.751655][ T9610] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  317.758901][ T9610] CPU: 0 UID: 0 PID: 9610 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  317.758919][ T9610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  317.758927][ T9610] Call Trace:
[  317.758932][ T9610]  <TASK>
[  317.758937][ T9610]  dump_stack_lvl+0x189/0x250
[  317.758959][ T9610]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.758974][ T9610]  ? __pfx_queue_work_on+0x10/0x10
[  317.758985][ T9610]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  317.759009][ T9610]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  317.759033][ T9610]  f2fs_handle_critical_error+0x37c/0x540
[  317.759056][ T9610]  f2fs_write_end_io+0x886/0xb60
[  317.759105][ T9610]  __submit_merged_bio+0x27a/0x6a0
[  317.759128][ T9610]  __submit_merged_write_cond+0x255/0x530
[  317.759148][ T9610]  f2fs_write_data_pages+0x261d/0x3000
[  317.759190][ T9610]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  317.759244][ T9610]  ? folios_put_refs+0x559/0x640
[  317.759266][ T9610]  ? __pfx_folios_put_refs+0x10/0x10
[  317.759279][ T9610]  ? rcu_is_watching+0x15/0xb0
[  317.759296][ T9610]  ? __lock_acquire+0xab9/0xd20
[  317.759325][ T9610]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  317.759342][ T9610]  do_writepages+0x32e/0x550
[  317.759366][ T9610]  ? do_raw_spin_unlock+0x4d/0x240
[  317.759383][ T9610]  filemap_fdatawrite+0x199/0x240
[  317.759403][ T9610]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  317.759452][ T9610]  ? do_raw_spin_unlock+0x4d/0x240
[  317.759470][ T9610]  f2fs_sync_dirty_inodes+0x31f/0x830
[  317.759493][ T9610]  f2fs_write_checkpoint+0x95a/0x1df0
[  317.759542][ T9610]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  317.759586][ T9610]  ? call_rcu+0x6ff/0x9c0
[  317.759598][ T9610]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.759615][ T9610]  ? kill_f2fs_super+0x298/0x6c0
[  317.759630][ T9610]  kill_f2fs_super+0x2c3/0x6c0
[  317.759647][ T9610]  ? __pfx_kill_f2fs_super+0x10/0x10
[  317.759657][ T9610]  ? radix_tree_delete_item+0x2b6/0x400
[  317.759679][ T9610]  ? shrinker_free+0x2ce/0x3e0
[  317.759694][ T9610]  deactivate_locked_super+0xbc/0x130
[  317.759711][ T9610]  cleanup_mnt+0x425/0x4c0
[  317.759724][ T9610]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.759743][ T9610]  task_work_run+0x1d4/0x260
[  317.759761][ T9610]  ? __pfx_task_work_run+0x10/0x10
[  317.759775][ T9610]  ? __x64_sys_umount+0x122/0x160
[  317.759793][ T9610]  ? exit_to_user_mode_loop+0x40/0x110
[  317.759813][ T9610]  exit_to_user_mode_loop+0xec/0x110
[  317.759829][ T9610]  do_syscall_64+0x2bd/0x3b0
[  317.759839][ T9610]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.759875][ T9610]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.759887][ T9610]  ? exc_page_fault+0x9f/0xf0
[  317.759905][ T9610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.759916][ T9610] RIP: 0033:0x7f13e2b8ff17
[  317.759928][ T9610] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  317.759938][ T9610] RSP: 002b:00007ffc96663c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  317.759952][ T9610] RAX: 0000000000000000 RBX: 00007f13e2c11c05 RCX: 00007f13e2b8ff17
[  317.759960][ T9610] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc96663cc0
[  317.759967][ T9610] RBP: 00007ffc96663cc0 R08: 0000000000000000 R09: 0000000000000000
[  317.759974][ T9610] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc96664d50
[  317.759981][ T9610] R13: 00007f13e2c11c05 R14: 000000000004d901 R15: 00007ffc96664d90
[  317.760008][ T9610]  </TASK>
[  317.761276][ T9610] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  318.684523][T12456] loop7: detected capacity change from 0 to 32768
[  318.689520][T12456] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2429 (12456)
[  318.697201][T12456] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  318.701273][T12456] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  318.732318][T11134] udevd[11134]: symlink '../../loop7' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:7' failed: Read-only file system
[  318.836251][T12456] BTRFS info (device loop7): enabling ssd optimizations
[  318.840047][T12456] BTRFS info (device loop7): enabling free space tree
[  318.905047][T12287] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  319.002139][T11134] udevd[11134]: symlink '../../loop7' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:7' failed: Read-only file system
[  319.280206][ T5236] Bluetooth: hci0: command tx timeout
[  319.426585][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2440'.
[  320.374014][T12520] loop6: detected capacity change from 0 to 512
[  320.392255][T11134] udevd[11134]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  320.399241][T12520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.407880][T12520] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  320.420445][T11134] udevd[11134]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  320.429830][T12520] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2452: corrupted inode contents
[  320.441786][T12520] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2452: mark_inode_dirty error
[  320.447553][T12520] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2452: corrupted inode contents
[  320.452850][T12520] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2452: mark_inode_dirty error
[  320.496598][T11889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.636903][   T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  320.786169][   T10] usb 5-1: Using ep0 maxpacket: 16
[  320.792448][   T10] usb 5-1: config 0 has an invalid interface number: 126 but max is 0
[  320.795824][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  320.800415][   T10] usb 5-1: config 0 has no interface number 0
[  320.803097][   T10] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  320.808664][   T10] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  320.813531][   T10] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  320.818526][   T10] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147
[  320.822855][   T10] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  320.833253][   T10] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  320.837323][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.843008][   T10] usb 5-1: config 0 descriptor??
[  320.845820][T12522] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  320.852209][T12522] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  320.858310][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  321.059151][   T10] usb 5-1: USB disconnect, device number 17
[  321.619272][T12529] loop4: detected capacity change from 0 to 4096
[  321.623240][T12529] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  321.629786][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  321.635234][T11134] udevd[11134]: symlink '../../loop4' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:4' failed: Read-only file system
[  321.661563][T12529] ntfs3(loop4): ino=0, attr_set_size
[  321.663626][T12529] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  321.670465][T12529] ntfs3(loop4): ino=0, attr_set_size
[  321.674288][T12529] ntfs3(loop4): ino=0, attr_set_size
[  321.681087][T12529] ntfs3(loop4): ino=0, attr_set_size
[  323.410426][T12564] Invalid source name
[  323.967227][   T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  324.186764][   T10] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[  324.190768][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.202405][   T10] usb 5-1: Product: syz
[  324.206670][   T10] usb 5-1: Manufacturer: syz
[  324.208863][   T10] usb 5-1: SerialNumber: syz
[  324.217632][   T10] usb 5-1: config 0 descriptor??
[  324.246555][   T10] usb 5-1: interface 1 not found
[  324.360172][T12573] syz.6.2472 (12573): drop_caches: 2
[  324.911521][T12578] vcan0: tx drop: invalid da for name 0xfffffffffffffffc
[  325.079753][T12582] loop7: detected capacity change from 0 to 32768
[  325.103210][T12582] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  325.122247][T11134] udevd[11134]: symlink '../../loop7' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:7' failed: Read-only file system
[  325.128295][   T33] audit: type=1800 audit(2000000350.244:64): pid=12582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2476" name="file1" dev="loop7" ino=17058 res=0 errno=0
[  325.158887][T11134] udevd[11134]: symlink '../../loop7' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:7' failed: Read-only file system
[  325.164852][T12287] ocfs2: Unmounting device (7,7) on (node local)
[  325.466794][T12593] input: syz1 as /devices/virtual/input/input25
[  325.471132][T12593] input: failed to attach handler leds to device input25, error: -6
[  325.521801][T12595] loop7: detected capacity change from 0 to 1024
[  325.548589][T11134] udevd[11134]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  325.560829][T11134] udevd[11134]: symlink '../../loop7' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:7' failed: Read-only file system
[  325.575810][T11134] udevd[11134]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  325.580738][T11134] udevd[11134]: symlink '../../loop7' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:7' failed: Read-only file system
[  325.660667][T12597] loop7: detected capacity change from 0 to 512
[  325.669189][T12597] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  325.679844][T11134] udevd[11134]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  325.696853][T12597] EXT4-fs (loop7): 1 truncate cleaned up
[  325.705541][T12597] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.708167][T11134] udevd[11134]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  325.737847][T11134] udevd[11134]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  325.767873][T12287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.777280][T11134] udevd[11134]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  326.158311][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802d747400: rx timeout, send abort
[  326.165348][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802d747400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  326.371857][T12610] netlink: 'syz.6.2487': attribute type 10 has an invalid length.
[  326.379280][T12610] syz_tun: entered promiscuous mode
[  326.389828][T12610] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  326.462583][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2488'.
[  326.467561][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2488'.
[  326.699498][ T5879] usb 5-1: USB disconnect, device number 18
[  326.875841][T12626] loop6: detected capacity change from 0 to 32768
[  326.885909][T12626] (syz.6.2496,12626,0):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=7, slot=0
[  326.898806][T12626] (syz.6.2496,12626,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  326.903055][T12626] (syz.6.2496,12626,0):ocfs2_mount_volume:1758 ERROR: status = -22
[  326.909240][T12626] (syz.6.2496,12626,0):ocfs2_fill_super:1177 ERROR: status = -22
[  327.072464][T12643] netlink: 'syz.6.2503': attribute type 3 has an invalid length.
[  327.078037][T12643] netlink: 'syz.6.2503': attribute type 1 has an invalid length.
[  327.081326][T12643] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2503'.
[  327.087757][T12643] NCSI netlink: No device for ifindex 33022
[  327.424159][T12661] loop6: detected capacity change from 0 to 512
[  327.428212][T12661] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  327.440681][T12661] EXT4-fs (loop6): 1 truncate cleaned up
[  327.449599][T12661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.460507][   T33] audit: type=1800 audit(2000000352.575:65): pid=12661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2512" name="file1" dev="loop6" ino=15 res=0 errno=0
[  327.489049][T12651] loop4: detected capacity change from 0 to 32768
[  327.526540][T11889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.562724][   T33] audit: type=1800 audit(2000000352.675:66): pid=12651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2507" name="file1" dev="loop4" ino=4 res=0 errno=0
[  327.580910][T12664] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2513'.
[  327.754740][T12675] sock: sock_set_timeout: `syz.6.2518' (pid 12675) tries to set negative timeout
[  329.059006][T12709] loop7: detected capacity change from 0 to 32768
[  329.084428][T12709] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  329.130369][T12709] XFS (loop7): Ending clean mount
[  329.137392][T12709] XFS (loop7): Quotacheck needed: Please wait.
[  329.198811][T12709] XFS (loop7): Quotacheck: Done.
[  329.206224][T12719] loop4: detected capacity change from 0 to 16
[  329.225913][T12719] erofs (device loop4): mounted with root inode @ nid 36.
[  329.247357][T12719] overlayfs: failed to get redirect (-117)
[  329.277401][T12287] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  329.450647][T12725] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  329.452747][T12725] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  329.461769][T12725] vhci_hcd vhci_hcd.0: Device attached
[  329.471507][T12726] vhci_hcd: connection closed
[  329.475795][   T12] vhci_hcd: stop threads
[  329.479557][   T12] vhci_hcd: release socket
[  329.481473][   T12] vhci_hcd: disconnect device
[  330.012811][   T33] audit: type=1326 audit(2000000355.126:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12732 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2b8ebe9 code=0x7ffc0000
[  330.024453][   T33] audit: type=1326 audit(2000000355.126:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12732 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2b8ebe9 code=0x7ffc0000
[  330.036030][   T33] audit: type=1326 audit(2000000355.136:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12732 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13e2b8ebe9 code=0x7ffc0000
[  330.044436][   T33] audit: type=1326 audit(2000000355.136:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12732 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2b8ebe9 code=0x7ffc0000
[  330.053667][   T33] audit: type=1326 audit(2000000355.136:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12732 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2b8ebe9 code=0x7ffc0000
[  330.064226][   T33] audit: type=1326 audit(2000000355.156:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12732 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f13e2b8ebe9 code=0x7ffc0000
[  330.076806][   T33] audit: type=1326 audit(2000000355.156:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12732 comm="syz.4.2540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13e2b8ebe9 code=0x7ffc0000
[  330.897161][T12745] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2546'.
[  330.904174][T12745] netlink: 'syz.4.2546': attribute type 1 has an invalid length.
[  330.909215][T12745] netlink: 'syz.4.2546': attribute type 2 has an invalid length.
[  330.914801][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2546'.
[  331.792459][T12753] loop6: detected capacity change from 0 to 32768
[  331.796422][T12753] XFS: ikeep mount option is deprecated.
[  331.802300][T12753] XFS: ikeep mount option is deprecated.
[  331.805382][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:6' failed: Read-only file system
[  331.808166][T12753] XFS: noikeep mount option is deprecated.
[  331.835749][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:6' failed: Read-only file system
[  331.859082][T12753] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  331.912119][T12753] XFS (loop6): Ending clean mount
[  331.995211][T11889] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  332.247308][T12763] loop4: detected capacity change from 0 to 32768
[  332.267191][T12763] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  332.282468][ T7688] udevd[7688]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system
[  332.285902][T12763] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  332.300888][ T7688] udevd[7688]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system
[  332.346747][ T9610] ocfs2: Unmounting device (7,4) on (node local)
[  332.539488][T12777] loop7: detected capacity change from 0 to 64
[  332.690091][  T792] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  332.854005][  T792] usb 5-1: unable to get BOS descriptor or descriptor too short
[  332.858366][  T792] usb 5-1: config 13 has an invalid interface number: 50 but max is 3
[  332.863250][  T792] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  332.867536][  T792] usb 5-1: config 13 has 1 interface, different from the descriptor's value: 4
[  332.871858][  T792] usb 5-1: config 13 has no interface number 0
[  332.875009][  T792] usb 5-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  332.880315][  T792] usb 5-1: config 13 interface 50 has no altsetting 0
[  332.885507][  T792] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8
[  332.889421][  T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.893452][  T792] usb 5-1: Product: syz
[  332.895222][  T792] usb 5-1: Manufacturer: syz
[  332.897277][  T792] usb 5-1: SerialNumber: syz
[  333.136833][  T792] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  333.145072][   T12] usb 5-1: Failed to submit usb control message: -71
[  333.145520][  T792] usb 5-1: USB disconnect, device number 19
[  333.148226][   T12] usb 5-1: unable to send the bmi data to the device: -71
[  333.148273][   T12] usb 5-1: unable to get target info from device
[  333.164583][   T12] usb 5-1: could not get target info (-71)
[  333.167524][   T12] usb 5-1: could not probe fw (-71)
[  333.277665][T12788] loop6: detected capacity change from 0 to 128
[  333.286796][T12788] affs: No valid root block on device loop6
[  333.498502][T12796] loop6: detected capacity change from 0 to 8
[  333.505963][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2561'.
[  333.524824][T12796] SQUASHFS error: Failed to read block 0x2d7: -5
[  333.529633][T12796] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  333.703280][T12799] veth0_to_team: entered promiscuous mode
[  333.705641][T12799] veth0_to_team: entered allmulticast mode
[  333.795838][T12800] loop7: detected capacity change from 0 to 32768
[  333.889700][T12800] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  333.889720][T12800]   allowing incompatible features above 0.0: (unknown version)
[  333.889728][T12800]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  333.907627][T12800] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  333.911149][T12800] bcachefs (loop7): recovering from clean shutdown, journal seq 10
[  333.916376][T12800] bcachefs (loop7): Version upgrade required:
[  333.916376][T12800] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  333.916376][T12800] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  333.916376][T12800]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  333.948658][T12800] bcachefs (loop7): dropping and reconstructing all alloc info
[  333.963547][T12800] bcachefs (loop7): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870913:U32_MAX len 0 ver 0: (unpack error)
[  333.963605][T12800]   invalid variable length fields, deleting
[  333.980042][T12800] bcachefs (loop7): accounting_read... done
[  334.000872][T12800] bcachefs (loop7): alloc_read... done
[  334.003996][T12800] bcachefs (loop7): snapshots_read...
[  334.004865][T12816] loop6: detected capacity change from 0 to 128
[  334.004876][T12800]  done
[  334.004884][T12800] bcachefs (loop7): check_allocations... done
[  334.041727][T12800] bcachefs (loop7): going read-write
[  334.114586][T12800] bcachefs (loop7): Fixed errors, running fsck a second time to verify fs is clean
[  334.122510][T12800] bcachefs (loop7): done starting filesystem
[  334.128140][ T5226] bcachefs (loop7): bucket incorrectly unset in freespace btree
[  334.128185][ T5226]   u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing
[  334.223489][T12800] bcachefs (loop7): dirent to missing inode:
[  334.223547][T12800]   u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg
[  334.223556][T12800]   emergency read only at seq 12
[  334.236492][  T792] bcachefs (loop7): going read-only
[  334.238843][  T792] bcachefs (loop7): finished waiting for writes to stop
[  334.281866][  T792] bcachefs (loop7): flushing journal and stopping allocators, journal seq 12
[  334.289999][  T792] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 12
[  334.317530][  T792] bcachefs (loop7): unclean shutdown complete, journal seq 12
[  334.348053][T12287] bcachefs (loop7): shutting down
[  334.348321][  T792] bcachefs (loop7): done going read-only, filesystem not clean
[  334.360416][T12828] loop4: detected capacity change from 0 to 256
[  334.400150][T12828] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x200c26b4, utbl_chksum : 0xe619d30d)
[  334.407982][T12287] bcachefs (loop7): shutdown complete
[  334.575223][T12830] loop6: detected capacity change from 0 to 4096
[  334.614395][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  334.625406][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:6' failed: Read-only file system
[  334.632991][T12834] loop4: detected capacity change from 0 to 8
[  334.651401][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  334.656714][T12834] SQUASHFS error: lzo decompression failed, data probably corrupt
[  334.662073][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:6' failed: Read-only file system
[  334.669389][T12834] SQUASHFS error: Failed to read block 0x1b2: -5
[  334.672771][T12834] SQUASHFS error: Unable to read metadata cache entry [1b0]
[  334.675851][T12834] SQUASHFS error: Unable to read inode 0x11f
[  334.784652][T12838] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  334.935868][T12836] loop6: detected capacity change from 0 to 32768
[  334.957313][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:6' failed: Read-only file system
[  334.969113][T12836] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  335.012411][T11889] ocfs2: Unmounting device (7,6) on (node local)
[  335.398764][  T792] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  335.558941][  T792] usb 5-1: Using ep0 maxpacket: 32
[  335.563088][  T792] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  335.566607][  T792] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  335.578662][  T792] usb 5-1: config 0 has no interface number 0
[  335.583672][  T792] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[  335.587522][  T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.598664][  T792] usb 5-1: Product: syz
[  335.600463][  T792] usb 5-1: Manufacturer: syz
[  335.602480][  T792] usb 5-1: SerialNumber: syz
[  335.618747][  T792] usb 5-1: config 0 descriptor??
[  335.623447][  T792] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  335.628353][  T792] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26
[  335.671091][T12864] netlink: 'syz.7.2573': attribute type 29 has an invalid length.
[  335.826999][ T5314] usb 5-1: USB disconnect, device number 20
[  336.750525][T12897] loop4: detected capacity change from 0 to 512
[  336.760004][T12897] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  336.765028][ T7688] udevd[7688]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  336.775649][T12897] EXT4-fs (loop4): 1 truncate cleaned up
[  336.778291][T12897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  336.791795][T12897] EXT4-fs warning (device loop4): ext4_group_add:1736: No reserved GDT blocks, can't resize
[  336.814518][ T9610] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.077577][  T792] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  338.239594][  T792] usb 5-1: unable to get BOS descriptor or descriptor too short
[  338.243014][  T792] usb 5-1: not running at top speed; connect to a high speed hub
[  338.247296][  T792] usb 5-1: config 253 has an invalid interface number: 153 but max is 0
[  338.250575][  T792] usb 5-1: config 253 has no interface number 0
[  338.255429][  T792] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=56.96
[  338.259610][  T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.264531][  T792] usb 5-1: Product: syz
[  338.266177][  T792] usb 5-1: Manufacturer: syz
[  338.268120][  T792] usb 5-1: SerialNumber: syz
[  338.393226][T12915] loop6: detected capacity change from 0 to 512
[  338.402523][T12915] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  338.409945][ T6098] udevd[6098]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  338.415133][T12915] EXT4-fs (loop6): 1 truncate cleaned up
[  338.419395][T12915] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.438658][ T6098] udevd[6098]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  338.466994][T11889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.494594][  T792] usbhid 5-1:253.153: couldn't find an input interrupt endpoint
[  338.504689][  T792] usb 5-1: USB disconnect, device number 21
[  338.545095][T12919] netlink: 'syz.6.2612': attribute type 1 has an invalid length.
[  338.551320][   T97] block nbd0: Possible stuck request ffff888020678000: control (read@0,1024B). Runtime 210 seconds
[  338.555776][   T97] block nbd0: Possible stuck request ffff888020678200: control (read@1024,1024B). Runtime 210 seconds
[  338.557855][T12919] netlink: 396 bytes leftover after parsing attributes in process `syz.6.2612'.
[  338.560647][   T97] block nbd0: Possible stuck request ffff888020678400: control (read@2048,1024B). Runtime 210 seconds
[  338.569334][   T97] block nbd0: Possible stuck request ffff888020678600: control (read@3072,1024B). Runtime 210 seconds
[  338.616725][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2614'.
[  338.619996][T12923] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  338.653724][T12923] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.858982][T12930] Bluetooth: MGMT ver 1.23
[  339.024821][T12932] loop6: detected capacity change from 0 to 40427
[  339.031126][T12932] F2FS-fs (loop6): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  339.034284][T12932] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  339.037737][T12932] F2FS-fs (loop6): build fault injection type: 0x6
[  339.041761][T12932] F2FS-fs (loop6): invalid crc value
[  339.069428][T12932] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  339.073368][T12932] F2FS-fs (loop6): Start checkpoint disabled!
[  339.079753][T12932] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  339.082181][T12932] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  339.087959][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:6' failed: Read-only file system
[  339.132041][T12938] loop4: detected capacity change from 0 to 16
[  339.142956][T12938] erofs (device loop4): mounted with root inode @ nid 36.
[  339.160686][ T7688] udevd[7688]: symlink '../../loop4' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:4' failed: Read-only file system
[  339.269155][ T7688] udevd[7688]: symlink '../../loop4' '/dev/disk/by-uuid/dc990305-0000-0000-0000-00c46e0e7dba.tmp-b7:4' failed: Read-only file system
[  339.535560][T12943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2622'.
[  339.864803][T12945] loop4: detected capacity change from 0 to 4096
[  339.911839][ T7688] udevd[7688]: symlink '../../loop4' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:4' failed: Read-only file system
[  339.921548][T12948] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  339.948992][ T7688] udevd[7688]: symlink '../../loop4' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:4' failed: Read-only file system
[  340.587378][ T1098] kworker/u10:8: attempt to access beyond end of device
[  340.587378][ T1098] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  340.592697][ T1098] CPU: 0 UID: 0 PID: 1098 Comm: kworker/u10:8 Not tainted syzkaller #0 PREEMPT(full) 
[  340.592713][ T1098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  340.592721][ T1098] Workqueue: writeback wb_workfn (flush-7:6)
[  340.592740][ T1098] Call Trace:
[  340.592744][ T1098]  <TASK>
[  340.592749][ T1098]  dump_stack_lvl+0x189/0x250
[  340.592769][ T1098]  ? __pfx_dump_stack_lvl+0x10/0x10
[  340.592784][ T1098]  ? __pfx_queue_work_on+0x10/0x10
[  340.592796][ T1098]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  340.592812][ T1098]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  340.592838][ T1098]  f2fs_handle_critical_error+0x37c/0x540
[  340.592859][ T1098]  f2fs_write_end_io+0x886/0xb60
[  340.592908][ T1098]  __submit_merged_bio+0x27a/0x6a0
[  340.592928][ T1098]  __submit_merged_write_cond+0x255/0x530
[  340.592947][ T1098]  f2fs_write_data_pages+0x261d/0x3000
[  340.592962][ T1098]  ? ktime_get+0x3e/0x1f0
[  340.593001][ T1098]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  340.593071][ T1098]  ? __pfx___calc_delta+0x10/0x10
[  340.593094][ T1098]  ? __lock_acquire+0xab9/0xd20
[  340.593119][ T1098]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  340.593134][ T1098]  do_writepages+0x32e/0x550
[  340.593150][ T1098]  ? reacquire_held_locks+0x127/0x1d0
[  340.593160][ T1098]  ? writeback_sb_inodes+0x384/0x1010
[  340.593181][ T1098]  __writeback_single_inode+0x145/0xff0
[  340.593197][ T1098]  ? do_raw_spin_unlock+0x4d/0x240
[  340.593215][ T1098]  writeback_sb_inodes+0x6c7/0x1010
[  340.593248][ T1098]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  340.593290][ T1098]  ? rcu_is_watching+0x15/0xb0
[  340.593310][ T1098]  wb_writeback+0x43b/0xaf0
[  340.593329][ T1098]  ? queue_io+0x331/0x590
[  340.593344][ T1098]  ? __pfx_wb_writeback+0x10/0x10
[  340.593367][ T1098]  ? _raw_spin_unlock_irq+0x23/0x50
[  340.593387][ T1098]  wb_workfn+0x409/0xef0
[  340.593412][ T1098]  ? __pfx_wb_workfn+0x10/0x10
[  340.593429][ T1098]  ? __lock_acquire+0xab9/0xd20
[  340.593453][ T1098]  ? process_scheduled_works+0x9ef/0x17b0
[  340.593470][ T1098]  ? _raw_spin_unlock_irq+0x23/0x50
[  340.593482][ T1098]  ? process_scheduled_works+0x9ef/0x17b0
[  340.593492][ T1098]  ? process_scheduled_works+0x9ef/0x17b0
[  340.593504][ T1098]  process_scheduled_works+0xae1/0x17b0
[  340.593540][ T1098]  ? __pfx_process_scheduled_works+0x10/0x10
[  340.593567][ T1098]  worker_thread+0x8a0/0xda0
[  340.593601][ T1098]  kthread+0x711/0x8a0
[  340.593620][ T1098]  ? __pfx_worker_thread+0x10/0x10
[  340.593631][ T1098]  ? __pfx_kthread+0x10/0x10
[  340.593647][ T1098]  ? _raw_spin_unlock_irq+0x23/0x50
[  340.593661][ T1098]  ? lockdep_hardirqs_on+0x9c/0x150
[  340.593676][ T1098]  ? __pfx_kthread+0x10/0x10
[  340.593690][ T1098]  ret_from_fork+0x3fc/0x770
[  340.593703][ T1098]  ? __pfx_ret_from_fork+0x10/0x10
[  340.593719][ T1098]  ? __switch_to_asm+0x39/0x70
[  340.593730][ T1098]  ? __switch_to_asm+0x33/0x70
[  340.593742][ T1098]  ? __pfx_kthread+0x10/0x10
[  340.593759][ T1098]  ret_from_fork_asm+0x1a/0x30
[  340.593784][ T1098]  </TASK>
[  340.593789][ T1098] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  341.036512][  T792] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  341.233754][  T792] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  341.237423][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.251840][  T792] usb 5-1: config 0 descriptor??
[  341.505081][   T10] usb 5-1: USB disconnect, device number 22
[  342.577550][   T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  342.776592][   T10] usb 5-1: Using ep0 maxpacket: 32
[  342.781736][   T10] usb 5-1: config 9 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7
[  342.786306][   T10] usb 5-1: config 9 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  342.790216][   T10] usb 5-1: config 9 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  342.797714][   T10] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  342.801482][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.804731][   T10] usb 5-1: Product: syz
[  342.806685][   T10] usb 5-1: Manufacturer: syz
[  342.808686][   T10] usb 5-1: SerialNumber: syz
[  343.004163][T12978] loop7: detected capacity change from 0 to 128
[  343.019572][T12978] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  343.027145][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:7' failed: Read-only file system
[  343.032614][T12978] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  343.053602][  T792] usb 5-1: USB disconnect, device number 23
[  343.112458][T12287] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  343.200534][T12984] netlink: 'syz.6.2637': attribute type 3 has an invalid length.
[  343.223210][T12986] program syz.7.2638 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  344.167905][T13007] o2cb: This node has not been configured.
[  344.170612][T13007] o2cb: Cluster check failed. Fix errors before retrying.
[  344.173798][T13007] (syz.6.2644,13007,1):user_dlm_register:674 ERROR: status = -22
[  344.177150][T13007] (syz.6.2644,13007,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[  344.416407][T13010] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  344.418502][T13010] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  344.422036][T13010] vhci_hcd vhci_hcd.0: Device attached
[  344.462945][T13010] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10)
[  344.465218][T13010] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  344.472008][T13010] vhci_hcd vhci_hcd.0: Device attached
[  344.476910][T13010] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  344.495923][T13010] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15)
[  344.498625][T13010] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  344.508713][T13010] vhci_hcd vhci_hcd.0: Device attached
[  344.518310][T13010] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17)
[  344.521166][T13010] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  344.528662][T13010] vhci_hcd vhci_hcd.0: Device attached
[  344.550440][T13010] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(19)
[  344.553356][T13010] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  344.572616][T13010] vhci_hcd vhci_hcd.0: Device attached
[  344.589332][T13010] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  344.604308][  T792] vhci_hcd: vhci_device speed not set
[  344.613331][T13010] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  344.626459][T13010] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  344.647166][T13014] vhci_hcd: connection closed
[  344.647279][T13024] vhci_hcd: connection closed
[  344.649053][T13019] vhci_hcd: connection closed
[  344.649506][T13022] vhci_hcd: connection closed
[  344.653548][   T12] vhci_hcd: stop threads
[  344.656592][   T12] vhci_hcd: release socket
[  344.659087][   T12] vhci_hcd: disconnect device
[  344.660723][   T12] vhci_hcd: stop threads
[  344.662105][   T12] vhci_hcd: release socket
[  344.664575][T13012] vhci_hcd: connection closed
[  344.668674][   T12] vhci_hcd: disconnect device
[  344.674640][  T792] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  344.677381][   T12] vhci_hcd: stop threads
[  344.679098][   T12] vhci_hcd: release socket
[  344.680451][T13013] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  344.680692][   T12] vhci_hcd: disconnect device
[  344.690388][   T12] vhci_hcd: stop threads
[  344.692204][   T12] vhci_hcd: release socket
[  344.695522][   T12] vhci_hcd: disconnect device
[  344.697511][   T12] vhci_hcd: stop threads
[  344.699128][   T12] vhci_hcd: release socket
[  344.700973][   T12] vhci_hcd: disconnect device
[  344.846590][T13036] overlayfs: failed to get index nlink (file2/file1, err=-61)
[  345.278543][T13052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2663'.
[  345.285047][T13048] loop7: detected capacity change from 0 to 32768
[  345.305872][T13048] XFS (loop7): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  345.315969][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-uuid/9f91832a-3b79-45c3-9d6d-ed0bc7357fe4.tmp-b7:7' failed: Read-only file system
[  345.338284][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-uuid/9f91832a-3b79-45c3-9d6d-ed0bc7357fe4.tmp-b7:7' failed: Read-only file system
[  345.369953][T13048] XFS (loop7): Starting recovery (logdev: internal)
[  345.428166][T13048] XFS (loop7): Ending recovery (logdev: internal)
[  345.518601][T12287] XFS (loop7): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  345.980743][T13083] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2674'.
[  346.060669][T13088] netlink: 848 bytes leftover after parsing attributes in process `syz.7.2677'.
[  346.096857][T13091] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2678'.
[  346.270395][T13104] netem: incorrect gi model size
[  346.277211][T13104] netem: change failed
[  346.305043][T13106] loop6: detected capacity change from 0 to 512
[  346.311026][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  346.321891][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-uuid/00800000-0000-0000-0000-000000000000.tmp-b7:6' failed: Read-only file system
[  346.327759][T13106] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  346.368385][T11889] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  346.602945][T13113] loop6: detected capacity change from 0 to 512
[  346.611107][T13113] EXT4-fs (loop6): external journal device major/minor numbers have changed
[  346.619411][T13113] EXT4-fs (loop6): failed to open journal device unknown-block(8,1) -16
[  346.629441][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-label/\x86\x5b.tmp-b7:6' failed: Read-only file system
[  346.876474][T13121] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.220871][T13127] loop7: detected capacity change from 0 to 32768
[  347.226382][T13127] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section replicas: no devices in entry sb: 33/0 []
[  347.226382][T13127] replicas (size 24):
[  347.226382][T13127] btree: 0/1 [2] sb: 33/0 [] (unknown data_type 144): 56/184 [0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 0 0 0 0 0 0 0 0 2 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 16 0]
[  347.226382][T13127] 
[  347.252584][T13127] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  347.496267][T13136] loop7: detected capacity change from 0 to 32768
[  347.501620][T13136] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2699 (13136)
[  347.523311][   T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  347.538576][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:7' failed: Read-only file system
[  347.538975][T13136] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  347.549079][T13136] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  347.620067][T13136] BTRFS info (device loop7): enabling ssd optimizations
[  347.625634][T13136] BTRFS info (device loop7): enabling free space tree
[  347.647213][T12287] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  347.675716][   T10] usb 5-1: Using ep0 maxpacket: 16
[  347.694461][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:7' failed: Read-only file system
[  347.706360][   T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  347.710158][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.728548][   T10] usb 5-1: Product: syz
[  347.730375][   T10] usb 5-1: Manufacturer: syz
[  347.732425][   T10] usb 5-1: SerialNumber: syz
[  347.741738][   T10] r8152-cfgselector 5-1: Unknown version 0x0000
[  347.745363][   T10] r8152-cfgselector 5-1: config 0 descriptor??
[  347.937453][T13157] netlink: 'syz.7.2701': attribute type 1 has an invalid length.
[  348.142553][ T5853] Bluetooth: hci0: command 0x0405 tx timeout
[  348.155736][ T5900] r8152-cfgselector 5-1: USB disconnect, device number 24
[  348.685319][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2704'.
[  348.759180][T13167] program syz.4.2706 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  349.582106][ T5853] Bluetooth: hci2: command 0x0406 tx timeout
[  349.666701][T13190] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  349.787242][T13198] loop6: detected capacity change from 0 to 512
[  349.794315][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  349.803926][T13198] EXT4-fs: Ignoring removed orlov option
[  349.811823][  T792] vhci_hcd: vhci_device speed not set
[  349.813779][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  349.823330][T13198] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.2721: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 3, max 1(4), depth 0(0)
[  349.830762][T13198] EXT4-fs (loop6): Remounting filesystem read-only
[  349.834407][T13198] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  349.841744][T13198] EXT4-fs (loop6): mount failed
[  349.977097][T13214] cgroup: fork rejected by pids controller in /syz4
[  350.443240][T13231] block nbd6: NBD_DISCONNECT
[  350.572337][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  350.577416][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  350.583070][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  350.587296][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  350.608034][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  350.739368][T13237] loop6: detected capacity change from 0 to 40427
[  350.743304][T13237] F2FS-fs: heap/no_heap options were deprecated
[  350.755039][T13237] F2FS-fs (loop6): invalid crc value
[  350.756849][T13237] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  350.797416][T13237] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  350.801686][T13237] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  350.856236][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:6' failed: Read-only file system
[  350.883673][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:6' failed: Read-only file system
[  350.894865][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.908993][T13234] chnl_net:caif_netlink_parms(): no params data found
[  351.020223][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.141357][T13234] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.144558][T13234] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.147677][T13234] bridge_slave_0: entered allmulticast mode
[  351.152089][T13234] bridge_slave_0: entered promiscuous mode
[  351.156718][T13234] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.159762][T13234] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.163140][T13234] bridge_slave_1: entered allmulticast mode
[  351.167034][T13234] bridge_slave_1: entered promiscuous mode
[  351.224911][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.264520][T13234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.276506][T13234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.335277][T13246] loop7: detected capacity change from 0 to 65536
[  351.353352][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.367939][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-uuid/d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2.tmp-b7:7' failed: Read-only file system
[  351.379101][T13234] team0: Port device team_slave_0 added
[  351.384411][T13234] team0: Port device team_slave_1 added
[  351.394194][T13246] XFS (loop7): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  351.407550][T13246] XFS (loop7): Ending clean mount
[  351.421428][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-uuid/d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2.tmp-b7:7' failed: Read-only file system
[  351.427061][T13246] XFS (loop7): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 
[  351.432092][T13246] XFS (loop7): Unmount and run xfs_repair
[  351.434509][T13246] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  351.437456][T13246] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be  XAFL.........]F.
[  351.441422][T13246] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00  ................
[  351.445121][T13246] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06  5.\%............
[  351.448670][T13246] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff  ................
[  351.452367][T13246] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  351.455862][T13246] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  351.459423][T13246] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  351.463121][T13246] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  351.466893][T13246] XFS (loop7): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74
[  351.471885][T13246] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  351.478816][T13246] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  351.516123][T13234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.523311][T12287] XFS (loop7): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  351.530317][T13234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.552963][T13234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.559013][T13234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.564589][T13234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.576055][T13234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.735140][T13234] hsr_slave_0: entered promiscuous mode
[  351.738505][T13234] hsr_slave_1: entered promiscuous mode
[  351.754729][T13234] debugfs: 'hsr0' already exists in 'hsr'
[  351.757265][T13234] Cannot create hsr debugfs directory
[  351.850051][T13260] loop7: detected capacity change from 0 to 512
[  351.873892][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  351.906331][T13260] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.2741: casefold flag without casefold feature
[  351.914368][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  351.924932][T13260] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2741: couldn't read orphan inode 15 (err -117)
[  351.938303][T13260] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.029646][T13264] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2742'.
[  352.038600][   T12] bridge_slave_1: left allmulticast mode
[  352.041152][   T12] bridge_slave_1: left promiscuous mode
[  352.041299][T12287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.045154][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.541868][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  352.548799][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  352.552723][   T12] bond0 (unregistering): Released all slaves
[  352.584532][T13265] bridge1: port 1(veth3) entered blocking state
[  352.586891][T13265] bridge1: port 1(veth3) entered disabled state
[  352.589329][T13265] veth3: entered allmulticast mode
[  352.598078][T13265] veth3: entered promiscuous mode
[  352.646861][T13268] bridge1: port 2(veth0_to_bond) entered blocking state
[  352.649503][T13268] bridge1: port 2(veth0_to_bond) entered disabled state
[  352.652488][T13268] veth0_to_bond: entered allmulticast mode
[  352.655535][T13268] veth0_to_bond: entered promiscuous mode
[  352.700612][ T5853] Bluetooth: hci2: command tx timeout
[  352.945672][   T12] hsr_slave_0: left promiscuous mode
[  352.948664][   T12] hsr_slave_1: left promiscuous mode
[  352.955397][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.958466][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  352.963246][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  352.966320][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.983587][   T12] veth1_macvtap: left promiscuous mode
[  352.985878][   T12] veth0_macvtap: left promiscuous mode
[  353.348476][T13291] loop6: detected capacity change from 0 to 4096
[  353.352093][T13291] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  353.366641][T13291] ntfs3(loop6): ino=4, mi_enum_attr
[  353.368443][T13291] ntfs3(loop6): ino=4, Correct links count -> 2.
[  353.370950][T13291] ntfs3(loop6): Failed to load $AttrDef (-22)
[  353.380472][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  353.391384][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:6' failed: Read-only file system
[  353.506326][T13293] loop6: detected capacity change from 0 to 512
[  353.525755][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  353.534832][T13293] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  353.541130][T13293] EXT4-fs (loop6): 1 truncate cleaned up
[  353.544832][T13293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.607391][   T12] team0 (unregistering): Port device team_slave_1 removed
[  353.644046][T11889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.693079][   T12] team0 (unregistering): Port device team_slave_0 removed
[  354.636078][   T12] IPVS: stop unused estimator thread 0...
[  354.651007][T13234] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  354.657360][T13234] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  354.671023][T13234] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  354.681181][T13234] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  354.745679][T13234] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.762746][T13234] 8021q: adding VLAN 0 to HW filter on device team0
[  354.771895][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.774509][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.780345][ T5853] Bluetooth: hci2: command tx timeout
[  354.791655][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.794004][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.899700][T13234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.044309][T13234] veth0_vlan: entered promiscuous mode
[  355.055457][T13234] veth1_vlan: entered promiscuous mode
[  355.083274][T13234] veth0_macvtap: entered promiscuous mode
[  355.090692][T13234] veth1_macvtap: entered promiscuous mode
[  355.105983][T13234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.117362][T13234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.127333][ T5893] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.131871][ T5893] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.143505][ T5893] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.147580][ T5893] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.226738][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.231033][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.260219][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.264560][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.351540][T13339] loop4: detected capacity change from 0 to 4096
[  355.355509][T13339] ntfs3(loop4): Primary boot: invalid sectors per cluster 4294967274.
[  355.364910][T13339] ntfs3(loop4): try to read out of volume at offset 0x1ffe00
[  355.708881][   T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  355.846424][T13346] loop7: detected capacity change from 0 to 512
[  355.853713][T13346] EXT4-fs: Ignoring removed mblk_io_submit option
[  355.856054][T13346] EXT4-fs: inline encryption not supported
[  355.858207][T13346] EXT4-fs: Ignoring removed mblk_io_submit option
[  355.859261][   T24] usb 5-1: Using ep0 maxpacket: 32
[  355.863979][T13346] EXT4-fs (loop7): Test dummy encryption mode enabled
[  355.864802][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  355.866983][T13346] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  355.879400][   T24] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  355.882592][   T24] usb 5-1: config 0 has no interface number 0
[  355.885272][   T24] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  355.892543][T13346] EXT4-fs (loop7): 1 truncate cleaned up
[  355.896447][T13346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.902053][   T24] usb 5-1: config 0 interface 85 has no altsetting 0
[  355.907603][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  355.911529][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.915315][   T24] usb 5-1: Product: syz
[  355.917333][   T24] usb 5-1: Manufacturer: syz
[  355.919711][   T24] usb 5-1: SerialNumber: syz
[  355.925113][   T24] usb 5-1: config 0 descriptor??
[  356.068076][T13346] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  356.555453][T12287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.600308][T13355] loop7: detected capacity change from 0 to 1024
[  356.607359][ T6098] udevd[6098]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  356.614273][T13355] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  356.617614][T13355] EXT4-fs (loop7): group descriptors corrupted!
[  356.640659][T13355] tmpfs: Bad value for 'mpol'
[  356.686347][   T24] appletouch 5-1:0.85: Geyser mode initialized.
[  356.692245][   T24] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input27
[  356.858582][ T5853] Bluetooth: hci2: command tx timeout
[  357.032331][T13362] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  357.579223][T13365] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2763'.
[  357.658911][T13367] loop7: detected capacity change from 0 to 2048
[  357.674002][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:7' failed: Read-only file system
[  357.682788][T13370] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  357.697002][T13370] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  357.701055][T13370] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4)
[  357.701921][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:7' failed: Read-only file system
[  357.705079][T13370] Remounting filesystem read-only
[  357.732416][T12287] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer
[  358.229130][T13378] loop6: detected capacity change from 0 to 40427
[  358.240226][T13378] F2FS-fs (loop6): invalid crc value
[  358.256349][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:6' failed: Read-only file system
[  358.290586][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:6' failed: Read-only file system
[  358.313470][T13378] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  358.318824][T13378] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  358.402303][T11889] syz-executor: attempt to access beyond end of device
[  358.402303][T11889] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  358.411089][T11889] CPU: 0 UID: 0 PID: 11889 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  358.411109][T11889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  358.411116][T11889] Call Trace:
[  358.411121][T11889]  <TASK>
[  358.411127][T11889]  dump_stack_lvl+0x189/0x250
[  358.411148][T11889]  ? __pfx_dump_stack_lvl+0x10/0x10
[  358.411163][T11889]  ? __pfx_queue_work_on+0x10/0x10
[  358.411175][T11889]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  358.411192][T11889]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  358.411216][T11889]  f2fs_handle_critical_error+0x37c/0x540
[  358.411240][T11889]  f2fs_write_end_io+0x886/0xb60
[  358.411267][T11889]  __submit_merged_bio+0x27a/0x6a0
[  358.411288][T11889]  __submit_merged_write_cond+0x255/0x530
[  358.411310][T11889]  f2fs_write_data_pages+0x261d/0x3000
[  358.411355][T11889]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  358.411409][T11889]  ? __mod_zone_page_state+0xd7/0x140
[  358.411438][T11889]  ? folios_put_refs+0x560/0x640
[  358.411462][T11889]  ? __lock_acquire+0xab9/0xd20
[  358.411488][T11889]  ? do_raw_spin_lock+0x121/0x290
[  358.411510][T11889]  ? do_raw_spin_unlock+0x4d/0x240
[  358.411524][T11889]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  358.411541][T11889]  do_writepages+0x32e/0x550
[  358.411575][T11889]  ? do_raw_spin_unlock+0x4d/0x240
[  358.411593][T11889]  filemap_fdatawrite+0x199/0x240
[  358.411610][T11889]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  358.411667][T11889]  ? do_raw_spin_unlock+0x4d/0x240
[  358.411685][T11889]  f2fs_sync_dirty_inodes+0x31f/0x830
[  358.411710][T11889]  f2fs_write_checkpoint+0x95a/0x1df0
[  358.411771][T11889]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  358.411843][T11889]  ? kill_f2fs_super+0x298/0x6c0
[  358.411863][T11889]  kill_f2fs_super+0x2c3/0x6c0
[  358.411881][T11889]  ? __pfx_kill_f2fs_super+0x10/0x10
[  358.411891][T11889]  ? radix_tree_delete_item+0x2b6/0x400
[  358.411914][T11889]  ? shrinker_free+0x2ce/0x3e0
[  358.411930][T11889]  deactivate_locked_super+0xbc/0x130
[  358.411947][T11889]  cleanup_mnt+0x425/0x4c0
[  358.411969][T11889]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.411990][T11889]  task_work_run+0x1d4/0x260
[  358.412009][T11889]  ? __pfx_task_work_run+0x10/0x10
[  358.412022][T11889]  ? __x64_sys_umount+0x122/0x160
[  358.412042][T11889]  ? exit_to_user_mode_loop+0x40/0x110
[  358.412062][T11889]  exit_to_user_mode_loop+0xec/0x110
[  358.412080][T11889]  do_syscall_64+0x2bd/0x3b0
[  358.412090][T11889]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.412106][T11889]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.412118][T11889]  ? exc_page_fault+0x9f/0xf0
[  358.412137][T11889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.412148][T11889] RIP: 0033:0x7f5b3518ff17
[  358.412161][T11889] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  358.412171][T11889] RSP: 002b:00007fff5f07e7b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  358.412184][T11889] RAX: 0000000000000000 RBX: 00007f5b35211c05 RCX: 00007f5b3518ff17
[  358.412192][T11889] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5f07e870
[  358.412199][T11889] RBP: 00007fff5f07e870 R08: 0000000000000000 R09: 0000000000000000
[  358.412206][T11889] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff5f07f900
[  358.412213][T11889] R13: 00007f5b35211c05 R14: 00000000000577c6 R15: 00007fff5f07f940
[  358.412236][T11889]  </TASK>
[  358.413274][T11889] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  358.490554][T13387] loop7: detected capacity change from 0 to 32768
[  358.510217][ T5314] usb 5-1: USB disconnect, device number 25
[  358.568656][T13387] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry journal: 1/3 [0 1 4]
[  358.568656][T13387] replicas_v0 (size 24):
[  358.568656][T13387] btree: 1 [0] journal: 3 [0 4 1]
[  358.568656][T13387] 
[  358.581806][T13387] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  358.685959][T13395] openvswitch: netlink: Multiple metadata blocks provided
[  358.712015][ T5314] appletouch 5-1:0.85: input: appletouch disconnected
[  358.745311][T13397] loop7: detected capacity change from 0 to 16
[  358.760387][T13397] erofs (device loop7): blkszbits 0 isn't supported
[  358.897594][T13407] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2780'.
[  358.950040][ T5853] Bluetooth: hci2: command tx timeout
[  359.069819][T13418] loop6: detected capacity change from 0 to 1024
[  359.089639][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system
[  359.120784][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:6' failed: Read-only file system
[  359.179880][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system
[  359.191228][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:6' failed: Read-only file system
[  359.347792][  T793] hfsplus: b-tree write err: -5, ino 8
[  359.505794][T13443] loop6: detected capacity change from 0 to 64
[  359.510100][T13441] loop7: detected capacity change from 0 to 2048
[  359.518074][T13441] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  359.523125][T13443] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing
[  359.536166][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  359.536181][   T33] audit: type=1800 audit(2000000384.661:75): pid=13441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2796" name="file1" dev="loop7" ino=1367 res=0 errno=0
[  359.650572][T13447] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2798'.
[  359.655130][T13447] netem: unknown loss type 12
[  359.660350][T13447] netem: change failed
[  360.377222][T13468] netlink: 10 bytes leftover after parsing attributes in process `syz.7.2807'.
[  360.584843][T13480] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.2813'.
[  360.829303][T13498] loop4: detected capacity change from 0 to 512
[  360.846684][T13498] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  360.859407][T13498] EXT4-fs (loop4): 1 truncate cleaned up
[  360.867198][T13498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.918395][T13234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.115131][T13515] loop7: detected capacity change from 0 to 16
[  361.126489][T13515] erofs (device loop7): invalid checksum 0x7ae79e26, 0xf8c4b9bf expected
[  361.226334][   T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  361.379432][T13530] loop7: detected capacity change from 0 to 4096
[  361.395787][   T10] usb 5-1: Using ep0 maxpacket: 32
[  361.412342][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  361.421970][   T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  361.424883][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.438357][   T10] usb 5-1: config 0 descriptor??
[  361.438493][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  361.453322][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:7' failed: Read-only file system
[  361.502720][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  361.509892][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:7' failed: Read-only file system
[  361.622567][T13539] input: syz1 as /devices/virtual/input/input28
[  361.830511][T13549] loop7: detected capacity change from 0 to 1024
[  361.835047][T13549] EXT4-fs: Ignoring removed nobh option
[  361.843228][T13549] EXT4-fs: Ignoring removed bh option
[  361.846893][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  361.859110][   T10] corsair-psu 0003:1B1C:1C09.0019: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0
[  361.862151][ T7688] udevd[7688]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  361.881196][T13549] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  361.901171][T12287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.152971][T13568] batadv_slave_0: entered promiscuous mode
[  362.159729][T13568] batadv_slave_0: left promiscuous mode
[  362.238654][T13570] loop7: detected capacity change from 0 to 64
[  362.458495][   T10] corsair-psu 0003:1B1C:1C09.0019: unable to initialize device (-71)
[  362.478647][   T10] corsair-psu 0003:1B1C:1C09.0019: probe with driver corsair-psu failed with error -71
[  362.505399][   T10] usb 5-1: USB disconnect, device number 26
[  362.650631][T13590] loop6: detected capacity change from 0 to 2048
[  362.660492][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-label/LinuxUDF.tmp-b7:6' failed: Read-only file system
[  362.660541][T13590] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  362.664870][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-uuid/1234567812345678.tmp-b7:6' failed: Read-only file system
[  362.861000][T13600] loop6: detected capacity change from 0 to 512
[  362.869723][T13600] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  362.872996][T13600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002]
[  362.873283][ T7688] udevd[7688]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  362.878825][T13600] System zones: 1-12
[  362.883275][T13600] EXT4-fs (loop6): Can't support bigalloc feature without extents feature
[  362.883275][T13600] 
[  362.888060][T13600] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features
[  362.892894][T13600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  362.909456][T13600] EXT4-fs (loop6): Can't support bigalloc feature without extents feature
[  362.909456][T13600] 
[  362.944176][T11889] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.099563][T13609] loop4: detected capacity change from 0 to 2048
[  363.109102][T13609] EXT4-fs: Ignoring removed orlov option
[  363.109992][ T7688] udevd[7688]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  363.139951][T13609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  363.146143][T13609] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.197389][T13234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.234672][T13618] loop6: detected capacity change from 0 to 8
[  363.270447][T13618] SQUASHFS error: xz decompression failed, data probably corrupt
[  363.273580][T13618] SQUASHFS error: Failed to read block 0x108: -5
[  363.289527][T13618] SQUASHFS error: Unable to read metadata cache entry [106]
[  363.292849][T13618] SQUASHFS error: Unable to read inode 0x0
[  363.759766][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2883'.
[  363.762928][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2883'.
[  363.771815][T13636] loop4: detected capacity change from 0 to 32768
[  363.960176][T13652] loop4: detected capacity change from 0 to 65
[  363.977309][T13652] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  364.036450][T13654] netlink: 'syz.4.2889': attribute type 5 has an invalid length.
[  364.784772][   T34] INFO: task syz.0.1396:9601 blocked for more than 143 seconds.
[  364.789629][   T34]       Not tainted syzkaller #0
[  364.792488][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  364.798112][   T34] task:syz.0.1396      state:D stack:28328 pid:9601  tgid:9600  ppid:5847   task_flags:0x400040 flags:0x00004004
[  364.803312][   T34] Call Trace:
[  364.804905][   T34]  <TASK>
[  364.806300][   T34]  __schedule+0x1798/0x4cc0
[  364.808442][   T34]  ? security_file_open+0xb1/0x270
[  364.810815][   T34]  ? __lock_acquire+0xab9/0xd20
[  364.813095][   T34]  ? __lock_acquire+0xab9/0xd20
[  364.815459][   T34]  ? __pfx___schedule+0x10/0x10
[  364.817776][   T34]  ? schedule+0x91/0x360
[  364.819789][   T34]  schedule+0x165/0x360
[  364.821731][   T34]  schedule_preempt_disabled+0x13/0x30
[  364.824179][   T34]  __mutex_lock+0x7e6/0x1350
[  364.826383][   T34]  ? __mutex_lock+0x5bb/0x1350
[  364.828656][   T34]  ? bdev_open+0xe0/0xd30
[  364.830659][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  364.832935][   T34]  ? wait_on_inode+0xc0/0x230
[  364.835362][   T34]  ? kobject_get_unless_zero+0x161/0x1f0
[  364.837894][   T34]  ? disk_block_events+0xab/0x120
[  364.840231][   T34]  ? bdev_open+0xaf/0xd30
[  364.842171][   T34]  bdev_open+0xe0/0xd30
[  364.844118][   T34]  blkdev_open+0x3a8/0x510
[  364.846157][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  364.848472][   T34]  do_dentry_open+0x953/0x13f0
[  364.850697][   T34]  vfs_open+0x3b/0x340
[  364.852619][   T34]  ? path_openat+0x2ecd/0x3830
[  364.854921][   T34]  path_openat+0x2ee5/0x3830
[  364.857058][   T34]  ? arch_stack_walk+0xfc/0x150
[  364.859257][   T34]  ? stack_depot_save_flags+0x40/0x860
[  364.861697][   T34]  ? __pfx_path_openat+0x10/0x10
[  364.863990][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.866684][   T34]  do_filp_open+0x1fa/0x410
[  364.868704][   T34]  ? __lock_acquire+0xab9/0xd20
[  364.870985][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  364.873321][   T34]  ? _raw_spin_unlock+0x28/0x50
[  364.876325][   T34]  ? alloc_fd+0x64c/0x6c0
[  364.878252][   T34]  do_sys_openat2+0x121/0x1c0
[  364.880281][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  364.882979][   T34]  ? exc_page_fault+0x76/0xf0
[  364.885083][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  364.887277][   T34]  __x64_sys_openat+0x138/0x170
[  364.889321][   T34]  do_syscall_64+0xfa/0x3b0
[  364.891229][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.893547][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.896272][   T34]  ? exc_page_fault+0x9f/0xf0
[  364.898333][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.901368][   T34] RIP: 0033:0x7f090898d550
[  364.903348][   T34] RSP: 002b:00007f09097cab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  364.907727][   T34] RAX: ffffffffffffffda RBX: 0000000000008000 RCX: 00007f090898d550
[  364.911527][   T34] RDX: 0000000000008000 RSI: 00007f09097cac10 RDI: 00000000ffffff9c
[  364.914972][   T34] RBP: 00007f09097cac10 R08: 0000000000000000 R09: 0000000000000000
[  364.918331][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[  364.921716][   T34] R13: 00007f0908bc6038 R14: 00007f0908bc5fa0 R15: 00007ffde9eb8588
[  364.925147][   T34]  </TASK>
[  364.926570][   T34] 
[  364.926570][   T34] Showing all locks held in the system:
[  364.930034][   T34] 3 locks held by kworker/u8:0/12:
[  364.932215][   T34] 1 lock held by khungtaskd/34:
[  364.934626][   T34]  #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  364.938963][   T34] 2 locks held by kworker/0:3/5314:
[  364.941389][   T34]  #0: ffff88804b039f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  364.945732][   T34]  #1: ffff88804b024008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  364.949585][   T34] 2 locks held by getty/5673:
[  364.951878][   T34]  #0: ffff8880216e10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  364.956210][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  364.960574][   T34] 1 lock held by udevd/6109:
[  364.962653][   T34]  #0: ffff8881097d3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  364.968760][   T34] 1 lock held by syz.0.1396/9601:
[  364.972041][   T34]  #0: ffff8881097d3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  364.976012][   T34] 
[  364.977062][   T34] =============================================
[  364.977062][   T34] 
[  364.980589][   T34] NMI backtrace for cpu 1
[  364.980602][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  364.980615][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  364.980622][   T34] Call Trace:
[  364.980628][   T34]  <TASK>
[  364.980633][   T34]  dump_stack_lvl+0x189/0x250
[  364.980650][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  364.980688][   T34]  ? __pfx__printk+0x10/0x10
[  364.980712][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  364.980730][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  364.980745][   T34]  ? __pfx__printk+0x10/0x10
[  364.980764][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  364.980784][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  364.980800][   T34]  watchdog+0xf93/0xfe0
[  364.980820][   T34]  ? watchdog+0x1de/0xfe0
[  364.980839][   T34]  kthread+0x711/0x8a0
[  364.980856][   T34]  ? __pfx_watchdog+0x10/0x10
[  364.980871][   T34]  ? __pfx_kthread+0x10/0x10
[  364.980886][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  364.980902][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.980917][   T34]  ? __pfx_kthread+0x10/0x10
[  364.980932][   T34]  ret_from_fork+0x3fc/0x770
[  364.980952][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  364.980967][   T34]  ? __switch_to_asm+0x39/0x70
[  364.980981][   T34]  ? __switch_to_asm+0x33/0x70
[  364.980995][   T34]  ? __pfx_kthread+0x10/0x10
[  364.981009][   T34]  ret_from_fork_asm+0x1a/0x30
[  364.981033][   T34]  </TASK>
[  364.981039][   T34] Sending NMI from CPU 1 to CPUs 0:
[  365.043650][    C0] NMI backtrace for cpu 0
[  365.043689][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  365.043703][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  365.043709][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  365.043729][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 67 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  365.043738][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  365.043749][    C0] RAX: 624cd94a51c53a00 RBX: ffffffff819683c8 RCX: 624cd94a51c53a00
[  365.043759][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b8241 RDI: ffffffff8be33880
[  365.043766][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  365.043772][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa39030
[  365.043779][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  365.043786][    C0] FS:  0000000000000000(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  365.043813][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  365.043822][    C0] CR2: 00007fffef2b2f38 CR3: 000000010bfaa000 CR4: 00000000000006f0
[  365.043854][    C0] Call Trace:
[  365.043862][    C0]  <TASK>
[  365.043866][    C0]  default_idle+0x13/0x20
[  365.043877][    C0]  default_idle_call+0x74/0xb0
[  365.043889][    C0]  do_idle+0x1e8/0x510
[  365.043902][    C0]  ? __pfx_do_idle+0x10/0x10
[  365.043916][    C0]  cpu_startup_entry+0x44/0x60
[  365.043926][    C0]  rest_init+0x2de/0x300
[  365.043937][    C0]  start_kernel+0x3a9/0x410
[  365.043953][    C0]  x86_64_start_reservations+0x24/0x30
[  365.043964][    C0]  x86_64_start_kernel+0x143/0x1c0
[  365.043973][    C0]  common_startup_64+0x13e/0x147
[  365.043992][    C0]  </TASK>
[  365.044601][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  365.044614][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  365.044629][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  365.044636][   T34] Call Trace:
[  365.044643][   T34]  <TASK>
[  365.044649][   T34]  dump_stack_lvl+0x99/0x250
[  365.044698][   T34]  ? __asan_memcpy+0x40/0x70
[  365.044713][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  365.044727][   T34]  ? __pfx__printk+0x10/0x10
[  365.044751][   T34]  vpanic+0x281/0x750
[  365.044768][   T34]  ? __pfx_vpanic+0x10/0x10
[  365.044781][   T34]  ? preempt_schedule+0xae/0xc0
[  365.044799][   T34]  ? preempt_schedule_common+0x83/0xd0
[  365.044819][   T34]  panic+0xb9/0xc0
[  365.044832][   T34]  ? __pfx_panic+0x10/0x10
[  365.044847][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  365.044869][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  365.044886][   T34]  watchdog+0xfd2/0xfe0
[  365.044906][   T34]  ? watchdog+0x1de/0xfe0
[  365.044925][   T34]  kthread+0x711/0x8a0
[  365.044943][   T34]  ? __pfx_watchdog+0x10/0x10
[  365.044964][   T34]  ? __pfx_kthread+0x10/0x10
[  365.044979][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  365.044993][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  365.045008][   T34]  ? __pfx_kthread+0x10/0x10
[  365.045023][   T34]  ret_from_fork+0x3fc/0x770
[  365.045038][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  365.045054][   T34]  ? __switch_to_asm+0x39/0x70
[  365.045068][   T34]  ? __switch_to_asm+0x33/0x70
[  365.045083][   T34]  ? __pfx_kthread+0x10/0x10
[  365.045097][   T34]  ret_from_fork_asm+0x1a/0x30
[  365.045122][   T34]  </TASK>
[  365.181802][   T34] Kernel Offset: disabled
[  365.183593][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:46:19  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000001 RCX=624cd94a51c53a00 RDX=0000000000010000
RSI=ffffffff8dba7696 RDI=ffffffff8be33880 RBP=00000000ffffffff RSP=ffffc90000007c18
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000000f7c
R12=0000000000000046 R13=ffffffff8de95100 R14=ffff88804b039f98 R15=0000000000000001
RIP=ffffffff8b79cbfb RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000404030 CR3=000000003d71e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9108597498 00007f9108597470 XMM03=00007f91085974a8 00007f91085974a0
XMM04=00007f91090fd100 00007f9108597460 XMM05=00007f9108597478 00007f91085974c0
XMM06=00007f91085974b8 00007f91085974b0 XMM07=00007f91085974a8 00007f91085974a0
XMM08=0000000000000000 00007f9108412ee7 XMM09=0000000000000000 00007f9108412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff8881088d0237 R9 =1ffff1102111a046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8c1 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc7b3acb150 CR3=000000012e122000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f5b35212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
