last executing test programs:

5m1.478266143s ago: executing program 1 (id=223):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x53, [0x0, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xedf0, 0x2, 0x0, 0x903, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x1ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x80010, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x8000], [0x2, 0x0, 0x6, 0x0, 0xfffffffc, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0xffff, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x10, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0xfffffffe, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5)
ioctl$UI_DEV_CREATE(r1, 0x5501)
preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0)

5m1.395474552s ago: executing program 1 (id=225):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0xe0)

5m1.302894454s ago: executing program 1 (id=226):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000280)={0x18, r1, 0x3, 0x0, &(0x7f0000000100)=[{0x0, 0x5}, {0x8, 0x8001}, {0x6, 0x7}]})

5m1.24543561s ago: executing program 1 (id=229):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f0000000280)={[{@nodiscard}, {@nocheckpoint_merge}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@errors_remount}, {@noflush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@alloc_mode_def}, {@compress_cache}, {@fastboot}, {@noinline_xattr}, {@grpjquota}, {@checkpoint_diasble}]}, 0x5, 0x550e, &(0x7f00000020c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000809, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]})

5m0.506067332s ago: executing program 1 (id=237):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000001a40)='./file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x12d7498, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}})
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

4m59.761840202s ago: executing program 1 (id=240):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80240, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TCFLSH(r0, 0x800455c9, 0x2)

4m59.664019296s ago: executing program 32 (id=240):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80240, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TCFLSH(r0, 0x800455c9, 0x2)

4m24.117321781s ago: executing program 0 (id=625):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x2, 0x5, 0x1, "bf631e4b"}})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)

4m24.046723844s ago: executing program 0 (id=628):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000600000061115f0000000000850000001e00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

4m24.046207102s ago: executing program 0 (id=629):
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="000014000a000100"], 0x30}}, 0x0)

4m23.977937544s ago: executing program 0 (id=631):
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x2000c10, &(0x7f0000000240)=ANY=[], 0x2, 0xa17, &(0x7f0000000280)="$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")
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x8840)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

4m23.837940817s ago: executing program 0 (id=635):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2002000, 0x0)

4m23.776059187s ago: executing program 0 (id=636):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = gettid()
timer_create(0x7, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
pipe(&(0x7f00000008c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x7, 0x9)
write$P9_RWRITE(r4, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00)
close(r3)

4m8.674278853s ago: executing program 33 (id=636):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = gettid()
timer_create(0x7, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
pipe(&(0x7f00000008c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x7, 0x9)
write$P9_RWRITE(r4, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00)
close(r3)

3m26.023539686s ago: executing program 3 (id=1205):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_macvtap\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

3m25.872540937s ago: executing program 3 (id=1206):
r0 = socket$inet6(0xa, 0x3, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0xffffffffffffff0e, 0x10, 0x1}, 0x28)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x7c, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x20}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)

3m25.733384629s ago: executing program 3 (id=1208):
syz_mount_image$minix(&(0x7f0000000440), &(0x7f0000000280)='./control\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x5, 0x1d3, &(0x7f0000000d80)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, r0, 0x0, 0x276)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)

3m25.689749704s ago: executing program 3 (id=1209):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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")
ioperm(0x0, 0x7fff, 0x15f9)
r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ptrace(0x10, r0)
ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000740)={0x0, 0x96})

3m25.546736448s ago: executing program 3 (id=1210):
r0 = io_uring_setup(0x1694, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20)

3m25.462688331s ago: executing program 3 (id=1211):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0)

3m25.393660668s ago: executing program 34 (id=1211):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0)

2m47.207891607s ago: executing program 2 (id=1651):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b82, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x4000, 0x20002f7})
r1 = socket$inet(0x2, 0x80001, 0x84)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m47.126778371s ago: executing program 2 (id=1652):
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000010c0)="3aae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f71b77abd66b9a9128180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efaddf100a4a679c6221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b1951f9e8661475d5b22885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0344b46f86a44e96ee51abd2961430a844d5355394a8079b9f54a936d57a95be0d44a7a6c083916d20b7c324638bd247b19ae965fb4c8d58c081eb52132feb0cab59d08605119c46f6ac682bd24e3c1b853d941d63c212c54e30bb44b3510595f44b7e71e3cf805bade9fa9181c453d063de7463bad4883d3de993f001beb579fe974ab05c73a0aa2cdc8aad891208628a7d7056a3221225f60928abeebe1c041dcce4cd250687cbe40c4090e4af231e5219a865e1a313eb7367cb2fdbc8a6fcdee6f098eeb057ce4d5e610542aebcd6786527d0c870febc6a3b8c2d5ec0f222db9dfeafe6f1bd26d1ddfb93d62ba9c0cd939fca883cedf3303b611f1c3da9c414cec92969fbc69d7720c7c31dce5b4b0a4e6f48ecb90e11a2a803cc9c4ecef5c9d22a2a09fc84dd386e1f479b8a2bfa7ceebe54be7d061c61a38cd8fb2adb54aae7bc1be7cf48e000d0aa1fa65bc3851b5c6a4f00d5ea2a944454c6efabe22c640c0162d9b27ecbf2867aaff80327de8dd0f678280eee40d1e506dc3005918d5c961641585df570c858701617644b87f3b7f6677c668e345bc91", 0x487}, {&(0x7f00000002c0)="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", 0xfe}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)

2m47.047321492s ago: executing program 2 (id=1653):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

2m47.047013479s ago: executing program 2 (id=1654):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8)
pwrite64(r2, &(0x7f00000009c0)='\x00', 0x1, 0x8080ce1)
fallocate(r1, 0x3, 0x762, 0x8000c62)

2m46.952188006s ago: executing program 2 (id=1655):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})

2m46.01838146s ago: executing program 2 (id=1659):
r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000003080)={0x0, 0x0, 0x6, &(0x7f0000000040)={0x24, "f4e1a230be8f000000000b000000002000"}})

2m30.789315779s ago: executing program 35 (id=1659):
r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000003080)={0x0, 0x0, 0x6, &(0x7f0000000040)={0x24, "f4e1a230be8f000000000b000000002000"}})

1m36.365602285s ago: executing program 4 (id=2408):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x0, 0x0, 0x0, 0x1, 0xc0, 0x7}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000)

1m36.307094762s ago: executing program 4 (id=2409):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x0, r0})

1m35.436628702s ago: executing program 4 (id=2416):
socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
pipe2(&(0x7f0000000300), 0x4800)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$tipc(0x1e, 0x2, 0x0)
io_uring_setup(0x40b0, &(0x7f0000000200)={0x0, 0xcb46, 0x80, 0x1, 0x14c})
syz_open_dev$video4linux(&(0x7f00000060c0), 0x7, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

1m35.359667899s ago: executing program 4 (id=2418):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@quiet}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@fat=@flush}, {@shortname_winnt}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000a00)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

1m35.216781827s ago: executing program 4 (id=2421):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027bd700000000000040000000c00170002"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

1m34.803199698s ago: executing program 4 (id=2425):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)="f4f6011d3a", 0x2, 0xffffffffffffffff, 0x4}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100))

1m34.661582377s ago: executing program 36 (id=2425):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)="f4f6011d3a", 0x2, 0xffffffffffffffff, 0x4}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100))

715.113313ms ago: executing program 6 (id=3436):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)

649.852892ms ago: executing program 6 (id=3438):
socket(0x1, 0x3, 0xfe)

575.386857ms ago: executing program 6 (id=3440):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000100a01"], 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)

575.224972ms ago: executing program 5 (id=3441):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x8, 0x8, 0x0, 0x5, 0x800, 0x7, 0xfffa, 0xfc01, 0x1, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x8, 0x7f, 0x0, 0x0, 0x3, 0x97, 0x457f, 0x5, 0x5, 0x81, 0x1, 0x4, 0x8544, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x5, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x8, 0x6, 0x0, 0x8], 0x5})

512.221932ms ago: executing program 5 (id=3442):
r0 = socket(0x10, 0x80003, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0)

512.034013ms ago: executing program 6 (id=3443):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x7, 0x3, 0x0, 0x1, [@generic="ae3256"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

445.913368ms ago: executing program 6 (id=3447):
r0 = inotify_init1(0x80000)
inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726)
r1 = inotify_init()
r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x80000006)
utime(&(0x7f0000000000)='./file0\x00', 0x0)

380.760518ms ago: executing program 7 (id=3448):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000001c0)="0b0312002e0064000200475400f6", 0xe, 0x20000040, &(0x7f0000000140)={0x11, 0x7, r1, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14)

329.541867ms ago: executing program 7 (id=3449):
r0 = socket$inet(0x2, 0x3, 0x100)
bind$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10)

329.348404ms ago: executing program 5 (id=3450):
unshare(0x400)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f00000002c0)=0x20f)

329.265239ms ago: executing program 6 (id=3451):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read$midi(r0, &(0x7f00000012c0)=""/232, 0xe8)

252.389422ms ago: executing program 5 (id=3452):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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")
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

252.201461ms ago: executing program 7 (id=3453):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/263, 0x107}, {&(0x7f0000001f40)=""/4107, 0x100b}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000180)=""/187, 0xbb}, {&(0x7f0000000b40)=""/30, 0x1e}, {&(0x7f0000000c00)=""/120, 0x78}, {&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f00000009c0)=""/264, 0x108}, {&(0x7f0000000140)=""/16, 0x10}], 0xa}, 0x1008}], 0x1, 0x0, 0x0)

155.236751ms ago: executing program 7 (id=3454):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x61a41000)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4)

154.807925ms ago: executing program 5 (id=3455):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'trusted:'}, 0x20, 0xfffffffffffffffd)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

151.602915ms ago: executing program 7 (id=3456):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ff07000000000000000000008500000036000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

249.018µs ago: executing program 5 (id=3457):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x1b, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x3}, 0x5}, 0x1c)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_flowlabel\x00')
writev(r3, 0x0, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x32, &(0x7f00000010c0)={0x9, {{0xa, 0x4e04, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}}, {{0xa, 0x4e24, 0x4, @empty, 0xfffffff8}}}, 0x108)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0404f8ffffffffffffff503301"], 0xd)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xffffff2a, 0x0, <r5=>0x0})
io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f0000000480)={0x0, 0x7870, 0x2000, 0x0, 0x3cd}, 0x1)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r5})

0s ago: executing program 7 (id=3458):
gettid()
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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")
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000100), &(0x7f0000000300), 0x2, 0x1)

kernel console output (not intermixed with test programs):

? __pfx_filemap_fdatawrite+0x10/0x10
[  298.862423][ T9217]  ? do_raw_spin_unlock+0x4d/0x240
[  298.862442][ T9217]  f2fs_sync_dirty_inodes+0x31f/0x830
[  298.862468][ T9217]  f2fs_write_checkpoint+0x93e/0x2440
[  298.862481][ T9217]  ? __lock_acquire+0xab9/0xd20
[  298.862517][ T9217]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  298.862577][ T9217]  kill_f2fs_super+0x2cc/0x6d0
[  298.862596][ T9217]  ? __pfx_kill_f2fs_super+0x10/0x10
[  298.862625][ T9217]  ? shrinker_free+0x2ce/0x3e0
[  298.862640][ T9217]  deactivate_locked_super+0xbc/0x130
[  298.862658][ T9217]  cleanup_mnt+0x425/0x4c0
[  298.862673][ T9217]  ? lockdep_hardirqs_on+0x9c/0x150
[  298.862692][ T9217]  task_work_run+0x1d4/0x260
[  298.862710][ T9217]  ? __pfx_task_work_run+0x10/0x10
[  298.862723][ T9217]  ? __x64_sys_umount+0x122/0x160
[  298.862744][ T9217]  ? exit_to_user_mode_loop+0x40/0x130
[  298.862758][ T9217]  exit_to_user_mode_loop+0xe9/0x130
[  298.862770][ T9217]  do_syscall_64+0x2bd/0xfa0
[  298.862805][ T9217]  ? lockdep_hardirqs_on+0x9c/0x150
[  298.862819][ T9217]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.862831][ T9217]  ? exc_page_fault+0xab/0x100
[  298.862848][ T9217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.862858][ T9217] RIP: 0033:0x7f613bb90af7
[  298.862870][ T9217] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  298.862879][ T9217] RSP: 002b:00007ffe3d2d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  298.862892][ T9217] RAX: 0000000000000000 RBX: 00007f613bbee72f RCX: 00007f613bb90af7
[  298.862898][ T9217] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe3d2d8240
[  298.862901][   T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  298.862906][ T9217] RBP: 00007ffe3d2d8240 R08: 0000000000000000 R09: 0000000000000000
[  298.862913][ T9217] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe3d2d92d0
[  298.862920][ T9217] R13: 00007f613bbee72f R14: 0000000000048e7b R15: 00007ffe3d2d9310
[  298.862943][ T9217]  </TASK>
[  298.863701][ T9217] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  298.973790][   T12] bond1: (slave lo): failed to get link speed/duplex
[  299.033214][   T24] usb 7-1: Using ep0 maxpacket: 16
[  299.037843][   T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  299.051228][   T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  299.066109][   T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  299.075962][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=230
[  299.078771][   T24] usb 7-1: Product: syz
[  299.080023][   T24] usb 7-1: Manufacturer: syz
[  299.081718][   T24] usb 7-1: SerialNumber: syz
[  299.094490][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  299.200010][T12809] loop7: detected capacity change from 0 to 1024
[  299.210485][   T12] bond1: (slave lo): failed to get link speed/duplex
[  299.215026][T12809] EXT4-fs: Ignoring removed nomblk_io_submit option
[  299.235781][T12809] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.291100][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.421662][   T24] usb 7-1: 0:2 : does not exist
[  299.427212][   T24] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  299.438736][   T24] usb 7-1: USB disconnect, device number 11
[  299.477046][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  299.653226][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2522'.
[  299.662624][T12820] netlink: 'syz.7.2522': attribute type 20 has an invalid length.
[  299.710285][T12820] netlink: 'syz.7.2522': attribute type 21 has an invalid length.
[  300.001694][T12834] netlink: 'syz.6.2527': attribute type 1 has an invalid length.
[  300.005339][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2527'.
[  300.260743][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2535'.
[  300.889160][T12873] loop5: detected capacity change from 0 to 32768
[  300.896131][T12873] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  300.908013][T12873] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  300.916145][T12873] XFS (loop5): Starting recovery (logdev: internal)
[  300.931921][T12873] XFS (loop5): Ending recovery (logdev: internal)
[  300.961027][ T9217] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  301.345732][T12891] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  301.351979][T12891] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  301.569667][T12903] loop5: detected capacity change from 0 to 64
[  301.587645][T12903] syz.5.2555: attempt to access beyond end of device
[  301.587645][T12903] loop5: rw=0, sector=65534, nr_sectors = 2 limit=64
[  301.592764][T12903] buffer_io_error: 43 callbacks suppressed
[  301.592773][T12903] Buffer I/O error on dev loop5, logical block 32767, async page read
[  301.730677][T12911] loop5: detected capacity change from 0 to 1024
[  301.763397][ T1092] hfsplus: b-tree write err: -5, ino 4
[  301.808359][T12915] bridge2: entered promiscuous mode
[  301.947841][T12922] o2cb: This node has not been configured.
[  301.950790][T12922] o2cb: Cluster check failed. Fix errors before retrying.
[  301.955676][T12922] (syz.5.2564,12922,1):user_dlm_register:674 ERROR: status = -22
[  301.959092][T12922] (syz.5.2564,12922,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0"
[  302.089944][T12928] kAFS: No cell specified
[  302.275121][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2569'.
[  303.193717][ T5642] net_ratelimit: 33 callbacks suppressed
[  303.193823][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  303.276446][T12942] loop7: detected capacity change from 0 to 512
[  303.282705][T12942] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  303.303355][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  303.326409][T12942] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[  303.372545][T12942] EXT4-fs (loop7): 1 truncate cleaned up
[  303.385738][T12942] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.413299][   T12] bond1: (slave lo): failed to get link speed/duplex
[  303.475956][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.524777][   T13] bond1: (slave lo): failed to get link speed/duplex
[  303.633734][   T13] bond1: (slave lo): failed to get link speed/duplex
[  303.642608][T12959] loop7: detected capacity change from 0 to 256
[  303.671781][T12959] FAT-fs (loop7): Directory bread(block 64) failed
[  303.674406][T12959] FAT-fs (loop7): Directory bread(block 65) failed
[  303.676996][T12959] FAT-fs (loop7): Directory bread(block 66) failed
[  303.679474][T12959] FAT-fs (loop7): Directory bread(block 67) failed
[  303.681774][T12959] FAT-fs (loop7): Directory bread(block 68) failed
[  303.684773][T12959] FAT-fs (loop7): Directory bread(block 69) failed
[  303.686937][T12959] FAT-fs (loop7): Directory bread(block 70) failed
[  303.688870][T12959] FAT-fs (loop7): Directory bread(block 71) failed
[  303.690908][T12959] FAT-fs (loop7): Directory bread(block 72) failed
[  303.693833][T12959] FAT-fs (loop7): Directory bread(block 73) failed
[  303.753019][   T13] bond1: (slave lo): failed to get link speed/duplex
[  303.843261][T12967] loop7: detected capacity change from 0 to 2048
[  303.858676][T12967] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  303.863061][   T13] bond1: (slave lo): failed to get link speed/duplex
[  303.864596][T12967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  303.973260][   T12] bond1: (slave lo): failed to get link speed/duplex
[  303.977363][ T5201] Bluetooth: hci1: command 0x0406 tx timeout
[  304.083000][   T12] bond1: (slave lo): failed to get link speed/duplex
[  304.129287][T12973] loop7: detected capacity change from 0 to 40427
[  304.132521][T12973] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  304.136321][T12973] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  304.141112][T12973] F2FS-fs (loop7): invalid crc_offset: 33558524
[  304.180192][T12973] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  304.186622][T12973] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  304.189107][T12973] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  304.203140][   T12] bond1: (slave lo): failed to get link speed/duplex
[  304.206250][T12973] F2FS-fs (loop7): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix.
[  304.484626][T12981] loop7: detected capacity change from 0 to 512
[  304.504662][T12981] EXT4-fs (loop7): Test dummy encryption mode enabled
[  304.531400][T12981] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  304.543445][T12981] EXT4-fs (loop7): Errors on filesystem, clearing orphan list.
[  304.546523][T12981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.565950][T12981] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters
[  304.595601][T12981] EXT4-fs (loop7): Remounting filesystem read-only
[  304.646674][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.900870][T12998] loop7: detected capacity change from 0 to 8192
[  304.913024][T12998] FAT-fs (loop7): bogus logical sector size 516
[  304.923155][T12998] FAT-fs (loop7): Can't find a valid FAT filesystem
[  305.049928][T13007] loop5: detected capacity change from 0 to 736
[  305.096521][T12994] loop6: detected capacity change from 0 to 32768
[  305.135537][T13007] rock: directory entry would overflow storage
[  305.137393][T12994] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  305.137982][T13007] rock: sig=0x3b10, size=4, remaining=3
[  305.180962][T12994] XFS (loop6): Ending clean mount
[  305.224650][T10790] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  305.426323][T13035] loop5: detected capacity change from 0 to 128
[  305.429665][T13035] EXT4-fs: Ignoring removed nomblk_io_submit option
[  305.432742][T13035] EXT4-fs (loop5): Test dummy encryption mode enabled
[  305.467456][T13035] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  305.473402][T13035] ext4 filesystem being mounted at /527/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  305.497081][ T9217] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  305.640254][T13046] loop6: detected capacity change from 0 to 8
[  305.807420][T13054] loop6: detected capacity change from 0 to 1024
[  305.833324][T13054] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  305.850351][T13054] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  305.855925][T13054] jbd2_journal_init_inode: Cannot locate journal superblock
[  305.858502][T13054] EXT4-fs (loop6): Could not load journal inode
[  305.948461][T13052] loop5: detected capacity change from 0 to 32768
[  305.959058][T13052] (syz.5.2616,13052,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  305.965474][T13052] (syz.5.2616,13052,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  305.982448][T13052] JBD2: Ignoring recovery information on journal
[  306.016155][T13052] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  306.077252][ T9217] ocfs2: Unmounting device (7,5) on (node local)
[  306.097856][T13065] netlink: 'syz.7.2623': attribute type 1 has an invalid length.
[  306.193102][    T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  306.355321][    T9] usb 7-1: config 220 has an invalid descriptor of length 108, skipping remainder of the config
[  306.359379][    T9] usb 7-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[  306.363840][    T9] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  306.369447][    T9] usb 7-1: config 220 interface 0 has no altsetting 0
[  306.372087][    T9] usb 7-1: config 220 interface 1 has no altsetting 0
[  306.377449][    T9] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  306.380904][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.384749][    T9] usb 7-1: Product: syz
[  306.386830][    T9] usb 7-1: Manufacturer: syz
[  306.388707][    T9] usb 7-1: SerialNumber: syz
[  306.482984][ T5864] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  306.602665][    T9] usb 7-1: selecting invalid altsetting 0
[  306.613632][    T9] uvcvideo 7-1:220.0: probe with driver uvcvideo failed with error -22
[  306.617854][    T9] usb 7-1: selecting invalid altsetting 0
[  306.619816][    T9] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  306.624143][    T9] usb 7-1: USB disconnect, device number 12
[  306.632970][ T5864] usb 6-1: Using ep0 maxpacket: 8
[  306.639442][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  306.643260][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  306.646746][ T5864] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  306.650166][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.660542][ T5864] usb 6-1: config 0 descriptor??
[  306.665842][ T5864] hso 6-1:0.0: Can't find BULK IN endpoint
[  306.871062][ T5864] usb 6-1: USB disconnect, device number 21
[  307.214676][T13088] netlink: 'syz.7.2633': attribute type 1 has an invalid length.
[  307.217003][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2633'.
[  307.259081][T13090] loop7: detected capacity change from 0 to 512
[  307.285745][T13090] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  307.288906][T13090] System zones: 0-2, 18-18, 34-35
[  307.303857][T13090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.307710][T13090] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  307.339110][T13084] loop6: detected capacity change from 0 to 32768
[  307.355251][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.362919][   T34] audit: type=1800 audit(1764761906.069:434): pid=13084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2631" name="file1" dev="loop6" ino=4 res=0 errno=0
[  307.423234][T13084] syz.6.2631: attempt to access beyond end of device
[  307.423234][T13084] loop6: rw=34817, sector=4680064, nr_sectors = 120 limit=32768
[  307.449961][T13096] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2636'.
[  307.455432][  T117] blkno = 8ed30, nblocks = f
[  307.457267][  T117] ERROR: (device loop6): dbFree: block to be freed is outside the map
[  307.457267][  T117] 
[  307.463710][  T117] ERROR: (device loop6): remounting filesystem as read-only
[  307.500423][T13098] loop7: detected capacity change from 0 to 512
[  307.525613][T13098] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  307.547775][T13098] EXT4-fs (loop7): 1 truncate cleaned up
[  307.596122][T13098] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.610587][T13098] fscrypt (loop7, inode 18): Mutually exclusive encryption flags (0x18)
[  307.634072][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.856469][T13108] vlan0: entered promiscuous mode
[  308.169214][T13125] loop7: detected capacity change from 0 to 2048
[  308.201025][T13125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  308.212918][ T5815] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  308.259263][ T5642] net_ratelimit: 35 callbacks suppressed
[  308.259274][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  308.363543][ T5815] usb 7-1: Using ep0 maxpacket: 32
[  308.367050][ T5815] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  308.370202][ T5815] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  308.373087][    T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  308.373366][   T12] bond1: (slave lo): failed to get link speed/duplex
[  308.376345][ T5815] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  308.385534][ T5815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  308.388557][ T5815] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  308.391537][ T5815] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  308.400325][ T5815] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  308.403232][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.407496][ T5815] usb 7-1: config 0 descriptor??
[  308.483022][   T12] bond1: (slave lo): failed to get link speed/duplex
[  308.542965][    T9] usb 6-1: Using ep0 maxpacket: 8
[  308.548260][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  308.551364][    T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  308.554280][    T9] usb 6-1: config 1 has no interface number 1
[  308.556252][    T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  308.562093][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  308.564867][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.567290][    T9] usb 6-1: Product: syz
[  308.568801][    T9] usb 6-1: Manufacturer: syz
[  308.570237][    T9] usb 6-1: SerialNumber: syz
[  308.592917][   T12] bond1: (slave lo): failed to get link speed/duplex
[  308.615811][ T5815] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  308.703587][   T12] bond1: (slave lo): failed to get link speed/duplex
[  308.789645][    T9] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor
[  308.792088][    T9] usb 6-1: 2:1 : format type 33 is not supported yet
[  308.803204][    T9] usb 6-1: USB disconnect, device number 22
[  308.820472][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  308.828607][   T12] bond1: (slave lo): failed to get link speed/duplex
[  308.832314][ T5815] usb 7-1: USB disconnect, device number 13
[  308.841560][ T5815] usblp0: removed
[  308.933483][   T12] bond1: (slave lo): failed to get link speed/duplex
[  309.043273][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  309.163156][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  309.273083][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  309.422264][T13135] loop5: detected capacity change from 0 to 512
[  309.439625][T13135] EXT4-fs: Ignoring removed nobh option
[  309.457399][T13135] EXT4-fs (loop5): Test dummy encryption mode enabled
[  309.485443][T13135] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  309.488912][T13135] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2654: invalid indirect mapped block 2683928664 (level 1)
[  309.494029][T13135] EXT4-fs (loop5): Remounting filesystem read-only
[  309.498262][T13135] EXT4-fs (loop5): 1 truncate cleaned up
[  309.501008][T13135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.523147][ T9217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.663230][T13143] netlink: 'syz.6.2653': attribute type 12 has an invalid length.
[  309.982638][T13151] netlink: 'syz.5.2660': attribute type 3 has an invalid length.
[  310.231421][T13133] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  310.235336][T13133] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  310.246285][T13133] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  310.248849][T13133] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  310.257099][T13133] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  310.260360][T13133] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  310.262622][T13133] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  310.277309][T13133] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  310.626454][T13158] loop6: detected capacity change from 0 to 32768
[  310.631473][T13158] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2663 (13158)
[  310.643196][T13158] BTRFS info (device loop6): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  310.648031][T13158] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  310.675620][T13158] BTRFS info (device loop6): enabling ssd optimizations
[  310.679296][T13158] BTRFS info (device loop6): turning on async discard
[  310.682027][T13158] BTRFS info (device loop6): enabling free space tree
[  310.686610][T13158] BTRFS info (device loop6): use lzo compression, level 1
[  310.780892][T10790] BTRFS info (device loop6): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  310.926261][T13178] loop5: detected capacity change from 0 to 1024
[  310.958783][T13178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none.
[  311.035030][ T9217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  311.163452][    T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  311.313619][    T9] usb 7-1: Using ep0 maxpacket: 32
[  311.328792][    T9] usb 7-1: config 0 has an invalid interface number: 161 but max is 0
[  311.332115][    T9] usb 7-1: config 0 has no interface number 0
[  311.339942][    T9] usb 7-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=44.e9
[  311.343630][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.348007][    T9] usb 7-1: Product: syz
[  311.349762][    T9] usb 7-1: Manufacturer: syz
[  311.351586][    T9] usb 7-1: SerialNumber: syz
[  311.356172][    T9] usb 7-1: config 0 descriptor??
[  311.363172][ T5815] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  311.483179][ T5812] Bluetooth: hci1: command 0x0406 tx timeout
[  311.515543][ T5815] usb 6-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= d.df
[  311.519498][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.525035][ T5815] usb 6-1: config 0 descriptor??
[  311.529969][ T5815] gspca_main: benq-2.14.0 probing 04a5:3035
[  311.569482][  T795] usb 7-1: USB disconnect, device number 14
[  311.738942][ T5815] usb 6-1: USB disconnect, device number 23
[  312.284177][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout
[  312.286754][ T5201] Bluetooth: hci2: command 0x0c1a tx timeout
[  313.303438][ T5642] net_ratelimit: 36 callbacks suppressed
[  313.303451][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  313.413326][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  313.436510][T13227] loop6: detected capacity change from 0 to 1024
[  313.439313][T13227] EXT4-fs: Ignoring removed nomblk_io_submit option
[  313.442066][T13227] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  313.450607][T13227] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002]
[  313.453758][T13227] System zones: 0-1, 3-36
[  313.457632][T13227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.534610][T10790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.535898][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  313.563330][ T5812] Bluetooth: hci1: command 0x0406 tx timeout
[  313.594178][T13234] loop5: detected capacity change from 0 to 16
[  313.598745][T13234] erofs (device loop5): mounted with root inode @ nid 36.
[  313.621204][T13234] syz.5.2685: attempt to access beyond end of device
[  313.621204][T13234] loop5: rw=524288, sector=48, nr_sectors = 976 limit=16
[  313.626511][T13234] syz.5.2685: attempt to access beyond end of device
[  313.626511][T13234] loop5: rw=524288, sector=0, nr_sectors = 1024 limit=16
[  313.633532][T13234] syz.5.2685: attempt to access beyond end of device
[  313.633532][T13234] loop5: rw=524288, sector=0, nr_sectors = 560 limit=16
[  313.643153][   T13] bond1: (slave lo): failed to get link speed/duplex
[  313.752978][   T13] bond1: (slave lo): failed to get link speed/duplex
[  313.874296][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  313.985799][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  314.104151][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  314.202922][  T795] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  314.213802][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  314.324581][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  314.363703][ T5201] Bluetooth: hci2: command 0x0c1a tx timeout
[  314.366437][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout
[  314.415470][  T795] usb 6-1: unable to get BOS descriptor or descriptor too short
[  314.427773][  T795] usb 6-1: not running at top speed; connect to a high speed hub
[  314.438525][  T795] usb 6-1: config 4 has an invalid interface number: 147 but max is 0
[  314.440986][  T795] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  314.449779][  T795] usb 6-1: config 4 has no interface number 0
[  314.465556][  T795] usb 6-1: string descriptor 0 read error: -22
[  314.472323][  T795] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  314.480269][  T795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.530589][  T795] uvcvideo 6-1:4.147: Found UVC 0.00 device <unnamed> (04f2:b746)
[  314.544408][  T795] uvcvideo 6-1:4.147: No valid video chain found.
[  314.723665][ T5815] usb 6-1: USB disconnect, device number 24
[  314.882025][T13252] loop7: detected capacity change from 0 to 32768
[  314.907705][T13252] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  314.945604][T13252] XFS (loop7): Ending clean mount
[  314.985073][T12519] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  315.638312][T13288] netlink: 'syz.5.2706': attribute type 24 has an invalid length.
[  316.443646][   T24] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  316.452998][ T5201] Bluetooth: hci0: command 0x0c1a tx timeout
[  316.453025][   T55] Bluetooth: hci2: command 0x0c1a tx timeout
[  316.595409][   T24] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.598816][   T24] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.602409][   T24] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  316.607141][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  316.609339][   T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  316.612027][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.616573][   T24] usb 7-1: config 0 descriptor??
[  316.660748][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2716'.
[  316.708993][T13310] netlink: 'syz.5.2717': attribute type 5 has an invalid length.
[  316.950119][T13322] xt_nat: multiple ranges no longer supported
[  317.041185][   T24] magicmouse 0003:05AC:0265.001A: hidraw0: USB HID v0.09 Device [HID 05ac:0265] on usb-dummy_hcd.6-1/input0
[  317.045885][   T24] magicmouse 0003:05AC:0265.001A: magicmouse input not registered
[  317.051891][   T24] magicmouse 0003:05AC:0265.001A: probe with driver magicmouse failed with error -12
[  317.229190][   T24] usb 7-1: USB disconnect, device number 15
[  317.246671][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  318.193844][T13332] loop6: detected capacity change from 0 to 2048
[  318.198814][T13332] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  318.353021][   T13] net_ratelimit: 35 callbacks suppressed
[  318.353039][   T13] bond1: (slave lo): failed to get link speed/duplex
[  318.462991][   T12] bond1: (slave lo): failed to get link speed/duplex
[  318.523120][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout
[  318.572970][   T12] bond1: (slave lo): failed to get link speed/duplex
[  318.683160][   T13] bond1: (slave lo): failed to get link speed/duplex
[  318.793011][   T12] bond1: (slave lo): failed to get link speed/duplex
[  318.865178][T13339] netlink: 'syz.5.2729': attribute type 12 has an invalid length.
[  318.873408][T13339] netlink: 'syz.5.2729': attribute type 29 has an invalid length.
[  318.879039][T13339] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2729'.
[  318.883702][T13339] netlink: 'syz.5.2729': attribute type 1 has an invalid length.
[  318.886961][T13339] netlink: 'syz.5.2729': attribute type 2 has an invalid length.
[  318.902994][   T13] bond1: (slave lo): failed to get link speed/duplex
[  319.014694][   T12] bond1: (slave lo): failed to get link speed/duplex
[  319.127439][   T12] bond1: (slave lo): failed to get link speed/duplex
[  319.253642][   T13] bond1: (slave lo): failed to get link speed/duplex
[  319.362983][   T12] bond1: (slave lo): failed to get link speed/duplex
[  319.404950][T13380] binder: BC_ATTEMPT_ACQUIRE not supported
[  319.407364][T13380] binder: 13378:13380 ioctl c0306201 2000000001c0 returned -22
[  319.477759][T13392] loop7: detected capacity change from 0 to 65
[  319.502236][ T5812] Bluetooth: hci2: unexpected event for opcode 0x0c03
[  319.508354][T13392] BFS-fs: bfs_fill_super(): NOTE: filesystem loop7 was created with 512 inodes, the real maximum is 511, mounting anyway
[  319.614631][T13406] loop5: detected capacity change from 0 to 512
[  319.629588][T13403] afs: Unknown parameter 'dyn6'
[  319.663083][T13406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.672229][T13406] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  319.699037][ T9217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.109458][T13434] loop5: detected capacity change from 0 to 1024
[  320.149558][T13434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.180444][ T9217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.715331][T13455] sp0: Synchronizing with TNC
[  320.717976][T13455] sp0: Found TNC
[  321.906642][T13466] loop5: detected capacity change from 0 to 256
[  321.913782][T13466] exfat: Deprecated parameter 'utf8'
[  321.915850][T13466] exfat: Deprecated parameter 'utf8'
[  321.917885][T13466] exfat: Deprecated parameter 'utf8'
[  321.924117][T13466] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x743489c8, utbl_chksum : 0xe619d30d)
[  321.993241][T13472] loop5: detected capacity change from 0 to 4096
[  322.620717][T13486] loop6: detected capacity change from 0 to 2048
[  322.664010][T13486]  loop6: p1 < > p3
[  322.671832][T13486] loop6: p3 size 134217728 extends beyond EOD, truncated
[  323.283287][  T795] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  323.343158][   T33] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  323.410178][T13550] loop7: detected capacity change from 0 to 256
[  323.445770][  T795] usb 7-1: config 0 has an invalid interface number: 84 but max is 0
[  323.449084][  T795] usb 7-1: config 0 has an invalid interface number: 66 but max is 0
[  323.451964][  T795] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  323.455728][  T795] usb 7-1: config 0 has no interface number 0
[  323.458092][  T795] usb 7-1: config 0 has no interface number 1
[  323.461730][  T795] usb 7-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64
[  323.466136][   T12] net_ratelimit: 35 callbacks suppressed
[  323.466152][   T12] bond1: (slave lo): failed to get link speed/duplex
[  323.471336][  T795] usb 7-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  323.477149][  T795] usb 7-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30
[  323.481528][  T795] usb 7-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32
[  323.485927][  T795] usb 7-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2
[  323.491363][  T795] usb 7-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86
[  323.496190][   T33] usb 6-1: Using ep0 maxpacket: 16
[  323.498262][  T795] usb 7-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024
[  323.502626][  T795] usb 7-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024
[  323.507702][  T795] usb 7-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216
[  323.513880][  T795] usb 7-1: config 0 interface 66 has no altsetting 0
[  323.521489][   T33] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.525728][   T33] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.529296][   T33] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  323.535192][   T33] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  323.539799][   T33] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.544326][  T795] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[  323.547736][  T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.550745][  T795] usb 7-1: Product: syz
[  323.557676][  T795] usb 7-1: Manufacturer: syz
[  323.559343][  T795] usb 7-1: SerialNumber: syz
[  323.561235][   T33] usb 6-1: config 0 descriptor??
[  323.569210][  T795] usb 7-1: config 0 descriptor??
[  323.573440][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  323.573809][  T795] ljca 7-1:0.84: bulk endpoints not found
[  323.683415][   T12] bond1: (slave lo): failed to get link speed/duplex
[  323.791832][  T795] ljca 7-1:0.66: probe with driver ljca failed with error -71
[  323.803942][   T12] bond1: (slave lo): failed to get link speed/duplex
[  323.804862][  T795] usb 7-1: USB disconnect, device number 16
[  323.913485][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  323.996057][   T33] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001B/input/input20
[  324.017122][   T33] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  324.026975][   T12] bond1: (slave lo): failed to get link speed/duplex
[  324.132974][   T12] bond1: (slave lo): failed to get link speed/duplex
[  324.184924][ T5815] usb 6-1: USB disconnect, device number 25
[  324.244393][   T12] bond1: (slave lo): failed to get link speed/duplex
[  324.355524][   T12] bond1: (slave lo): failed to get link speed/duplex
[  324.473338][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  324.643010][ T5815] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  324.744868][T13608] loop5: detected capacity change from 0 to 512
[  324.756673][T13608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.762412][T13608] ext4 filesystem being mounted at /608/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  324.784647][T13608] EXT4-fs error (device loop5): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.5.2789: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  324.794099][T13608] EXT4-fs (loop5): Remounting filesystem read-only
[  324.805423][ T5815] usb 7-1: Using ep0 maxpacket: 8
[  324.809991][ T5815] usb 7-1: unable to get BOS descriptor or descriptor too short
[  324.820800][ T5815] usb 7-1: config 7 has an invalid interface number: 58 but max is 0
[  324.821744][ T9217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.824141][ T5815] usb 7-1: config 7 has no interface number 0
[  324.824179][ T5815] usb 7-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7
[  324.824197][ T5815] usb 7-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  324.824214][ T5815] usb 7-1: config 7 interface 58 has no altsetting 0
[  324.832092][ T5815] usb 7-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f
[  324.859047][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.864605][ T5815] usb 7-1: Product: syz
[  324.866184][ T5815] usb 7-1: Manufacturer: syz
[  324.873231][ T5815] usb 7-1: SerialNumber: syz
[  324.936153][T13621] loop5: detected capacity change from 0 to 512
[  324.939526][T13621] EXT4-fs: Ignoring removed oldalloc option
[  324.951419][T13621] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.2791: Parent and EA inode have the same ino 15
[  324.957695][T13621] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.2791: Parent and EA inode have the same ino 15
[  324.964459][T13621] EXT4-fs (loop5): 1 orphan inode deleted
[  324.971131][T13621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.984822][T13621] EXT4-fs warning (device loop5): __ext4_unlink:3278: inode #15: comm syz.5.2791: Deleting file 'file1' with no links
[  325.018841][ T9217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.110839][ T5815] usb 7-1: USB disconnect, device number 17
[  325.636442][T13646] loop5: detected capacity change from 0 to 131072
[  325.639580][T13646] F2FS-fs (loop5): QUOTA feature is enabled, so ignore qf_name
[  325.643647][T13646] F2FS-fs (loop5): invalid crc value
[  325.672355][T13646] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  325.676113][T13646] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  326.037085][T13678] CIFS mount error: No usable UNC path provided in device string!
[  326.037085][T13678] 
[  326.041105][T13678] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  326.148676][T13690] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2806'.
[  326.275951][T13702] comedi comedi1: adq12b: I/O port conflict (0x42f00,16)
[  326.500206][T13725] binder: 13724:13725 ioctl c0306201 200000000640 returned -22
[  326.533059][   T33] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  326.585034][T13731] loop7: detected capacity change from 0 to 512
[  326.594228][T13731] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  326.612214][T13731] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  326.613371][  T795] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  326.638030][T12519] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  326.688059][T13741] bond0: option ad_select: unable to set because the bond device is up
[  326.695595][   T33] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  326.703890][   T33] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  326.715747][   T33] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  326.719437][   T33] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.773042][  T795] usb 7-1: Using ep0 maxpacket: 16
[  326.776164][  T795] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  326.778776][  T795] usb 7-1: config 0 has no interface number 0
[  326.784660][  T795] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  326.788543][  T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.791209][  T795] usb 7-1: Product: syz
[  326.792501][  T795] usb 7-1: Manufacturer: syz
[  326.794673][  T795] usb 7-1: SerialNumber: syz
[  326.798056][  T795] usb 7-1: config 0 descriptor??
[  326.807064][  T795] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  326.937149][   T33] usb 6-1: usb_control_msg returned -32
[  326.938916][   T33] usbtmc 6-1:16.0: can't read capabilities
[  327.008370][  T795] gspca_spca1528: reg_w err -71
[  327.032984][  T795] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71
[  327.039363][  T795] usb 7-1: USB disconnect, device number 18
[  327.498217][ T5815] usb 6-1: USB disconnect, device number 26
[  327.605192][T13789] tc_dump_action: action bad kind
[  327.773049][T13797] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[  328.483194][ T5642] net_ratelimit: 35 callbacks suppressed
[  328.483225][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  328.593083][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  328.704756][   T13] bond1: (slave lo): failed to get link speed/duplex
[  328.812964][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  328.914940][T13861] loop6: detected capacity change from 0 to 65536
[  328.935449][   T13] bond1: (slave lo): failed to get link speed/duplex
[  328.938420][T13861] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  328.941291][T13861] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  328.951613][ T5820] udevd[5820]: symlink '../../loop6' '/dev/disk/by-uuid/9b7348e5-2fa0-41a5-9526-c53a678b01f3.tmp-b7:6' failed: Read-only file system
[  328.970655][T13861] XFS (loop6): Ending clean mount
[  328.975642][T13861] XFS (loop6): Quotacheck needed: Please wait.
[  328.984865][   T26] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  328.990622][   T26] XFS (loop6): Unmount and run xfs_repair
[  328.992740][   T26] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  328.995557][   T26] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  328.999394][   T26] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  329.003246][   T26] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04  ................
[  329.006120][   T26] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  329.009422][   T26] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  329.012398][   T26] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  329.016200][   T26] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  329.019076][   T26] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  329.022560][   T26] XFS (loop6): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  329.031847][T13861] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  329.054375][   T13] bond1: (slave lo): failed to get link speed/duplex
[  329.059812][T10790] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  329.064690][T10790] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair.
[  329.168101][   T13] bond1: (slave lo): failed to get link speed/duplex
[  329.312990][   T13] bond1: (slave lo): failed to get link speed/duplex
[  329.423063][   T13] bond1: (slave lo): failed to get link speed/duplex
[  329.533226][   T12] bond1: (slave lo): failed to get link speed/duplex
[  329.548878][T13899] loop6: detected capacity change from 0 to 2048
[  329.555460][T13899] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  329.564568][ T5820] udevd[5820]: symlink '../../loop6' '/dev/disk/by-label/LinuxUDF.tmp-b7:6' failed: Read-only file system
[  329.569351][T13899] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  329.570576][ T5820] udevd[5820]: symlink '../../loop6' '/dev/disk/by-uuid/1234567812345678.tmp-b7:6' failed: Read-only file system
[  329.592489][   T34] audit: type=1800 audit(1764761928.299:435): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2842" name="file1" dev="loop6" ino=1346 res=0 errno=0
[  330.103957][T13922] loop7: detected capacity change from 0 to 8
[  330.170067][T13933] loop5: detected capacity change from 0 to 1024
[  330.178505][T13935] binder: 13934:13935 unknown command 0
[  330.185861][ T8029] udevd[8029]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system
[  330.190932][ T8029] udevd[8029]: symlink '../../loop5' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:5' failed: Read-only file system
[  330.198309][T13935] binder: 13934:13935 ioctl c0306201 200000000080 returned -22
[  330.210700][ T8029] udevd[8029]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system
[  330.215991][ T8029] udevd[8029]: symlink '../../loop5' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:5' failed: Read-only file system
[  330.220952][T13933] hfsplus: keylen 65060 too large
[  330.221026][T13933] hfsplus: xattr search failed
[  330.503092][  T795] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  330.714334][  T795] usb 6-1: not running at top speed; connect to a high speed hub
[  330.718907][  T795] usb 6-1: config 186 has an invalid interface number: 40 but max is 0
[  330.722245][  T795] usb 6-1: config 186 has no interface number 0
[  330.725678][  T795] usb 6-1: config 186 interface 40 has no altsetting 0
[  330.730651][  T795] usb 6-1: New USB device found, idVendor=03eb, idProduct=21fe, bcdDevice=73.53
[  330.734366][  T795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.737510][  T795] usb 6-1: Product: syz
[  330.739273][  T795] usb 6-1: Manufacturer: syz
[  330.741718][  T795] usb 6-1: SerialNumber: syz
[  330.918356][T13958] loop6: detected capacity change from 0 to 1024
[  330.930126][ T8029] udevd[8029]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  330.936982][ T8029] udevd[8029]: symlink '../../loop6' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:6' failed: Read-only file system
[  330.957388][T13958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  330.962269][T13958] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.962345][  T795] igorplugusb 6-1:186.40: endpoint incorrect
[  330.975734][T13958] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.2854: Freeing blocks not in datazone - block = 0, count = 16
[  330.976792][  T795] usb 6-1: USB disconnect, device number 27
[  330.981347][T13958] EXT4-fs (loop6): Remounting filesystem read-only
[  331.025721][T10790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  331.092160][T13979] loop6: detected capacity change from 0 to 128
[  331.102388][T13979] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  331.104485][ T5820] udevd[5820]: symlink '../../loop6' '/dev/disk/by-uuid/d98c317bda8c317b.tmp-b7:6' failed: Read-only file system
[  331.224760][T13997] debugfs: 'ttyS3' already exists in 'caif_serial'
[  331.535592][T14028] loop5: detected capacity change from 0 to 512
[  331.538874][T14028] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  331.541638][T14028] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  331.550596][T14032] loop6: detected capacity change from 0 to 8
[  331.559581][T14028] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  331.562132][T14028] System zones: 0-2, 18-18, 34-34
[  331.567520][T14028] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2865: iget: bad i_size value: 360287970189639680
[  331.577267][T14028] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2865: couldn't read orphan inode 15 (err -117)
[  331.585377][T14028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.616452][ T9217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.717754][T14055] loop6: detected capacity change from 0 to 4096
[  331.735053][T14055] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  331.738312][T14055] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  331.741817][T14055] ntfs3(loop6): ino=5, mi_enum_attr
[  331.878558][T14072] loop6: detected capacity change from 0 to 2048
[  331.883856][ T5815] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  331.891172][T14072] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  331.892749][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2875'.
[  332.045635][ T5815] usb 6-1: config 0 has an invalid interface number: 48 but max is 0
[  332.048851][ T5815] usb 6-1: config 0 has no interface number 0
[  332.060152][ T5815] usb 6-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  332.073175][ T5815] usb 6-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  332.078662][ T5815] usb 6-1: config 0 interface 48 has no altsetting 0
[  332.089111][ T5815] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  332.092710][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.096149][ T5815] usb 6-1: Product: syz
[  332.097438][ T5815] usb 6-1: Manufacturer: syz
[  332.098889][ T5815] usb 6-1: SerialNumber: syz
[  332.101993][ T5815] usb 6-1: config 0 descriptor??
[  332.355366][ T5815] usb 6-1: USB disconnect, device number 28
[  333.238922][T14128] loop6: detected capacity change from 0 to 8192
[  333.294408][T14128]  loop6: p1 p2 p3 p4
[  333.295976][T14128] loop6: partition table partially beyond EOD, truncated
[  333.298983][T14128] loop6: p1 size 3523149824 extends beyond EOD, truncated
[  333.305826][T14128] loop6: p2 start 4293394688 is beyond EOD, truncated
[  333.308359][T14128] loop6: p3 start 150994944 is beyond EOD, truncated
[  333.310888][T14128] loop6: p4 size 50331648 extends beyond EOD, truncated
[  333.363254][ T5815] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  333.467001][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2889'.
[  333.470675][T14144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2889'.
[  333.513150][ T5815] usb 6-1: Using ep0 maxpacket: 8
[  333.518455][ T5815] usb 6-1: config 2 has an invalid interface number: 31 but max is 0
[  333.521762][ T5815] usb 6-1: config 2 has no interface number 0
[  333.524238][   T12] net_ratelimit: 34 callbacks suppressed
[  333.524248][   T12] bond1: (slave lo): failed to get link speed/duplex
[  333.529989][ T5815] usb 6-1: config 2 interface 31 has no altsetting 0
[  333.534697][ T5815] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  333.537513][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.540270][ T5815] usb 6-1: Product: syz
[  333.541730][ T5815] usb 6-1: Manufacturer: syz
[  333.543864][ T5815] usb 6-1: SerialNumber: syz
[  333.560169][ T5815] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22
[  333.633106][   T13] bond1: (slave lo): failed to get link speed/duplex
[  333.743088][   T13] bond1: (slave lo): failed to get link speed/duplex
[  333.764059][ T5815] usb 6-1: USB disconnect, device number 29
[  333.863386][   T12] bond1: (slave lo): failed to get link speed/duplex
[  333.973258][   T12] bond1: (slave lo): failed to get link speed/duplex
[  334.083138][   T12] bond1: (slave lo): failed to get link speed/duplex
[  334.206838][   T12] bond1: (slave lo): failed to get link speed/duplex
[  334.312055][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2891'.
[  334.325898][   T12] bond1: (slave lo): failed to get link speed/duplex
[  334.433084][   T12] bond1: (slave lo): failed to get link speed/duplex
[  334.498251][T14167] loop5: detected capacity change from 0 to 32768
[  334.512946][  T795] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  334.516160][ T5820] udevd[5820]: symlink '../../loop5' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:5' failed: Read-only file system
[  334.542116][ T5820] udevd[5820]: symlink '../../loop5' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:5' failed: Read-only file system
[  334.603062][   T12] bond1: (slave lo): failed to get link speed/duplex
[  334.666216][  T795] usb 7-1: Using ep0 maxpacket: 16
[  334.670203][  T795] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  334.675158][  T795] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  334.678592][  T795] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  334.684329][  T795] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  334.687401][  T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.689949][  T795] usb 7-1: Product: syz
[  334.693686][  T795] usb 7-1: Manufacturer: syz
[  334.699902][  T795] usb 7-1: SerialNumber: syz
[  334.858487][T14183] loop5: detected capacity change from 0 to 32768
[  334.880289][T14183] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  334.887492][ T8029] udevd[8029]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system
[  334.906671][T14183] OCFS2: ERROR (device loop5): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = 
[  334.912053][T14183] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  334.915670][  T795] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[  334.917792][T14183] OCFS2: File system is now read-only.
[  334.917860][T14183] (syz.5.2895,14183,0):ocfs2_find_entry_id:407 ERROR: status = -30
[  334.926304][  T795] cdc_ncm 7-1:1.0: bind() failure
[  334.930424][ T9217] ocfs2: Unmounting device (7,5) on (node local)
[  334.957629][  T795] usb 7-1: USB disconnect, device number 19
[  335.151200][T14209] could not allocate digest TFM handle cryptd(blake2b-160)
[  335.280373][ T5815] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  335.297220][ T5815] hid-generic 0000:0000:0000.001C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  335.418312][T14275] loop7: detected capacity change from 0 to 1024
[  335.434754][T14275] EXT4-fs: Ignoring removed nomblk_io_submit option
[  335.451892][ T5820] udevd[5820]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  335.475950][T14275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.488989][ T5820] udevd[5820]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  335.581878][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.181565][T14315] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  336.667824][T14318] loop6: detected capacity change from 0 to 131072
[  336.682242][T14318] F2FS-fs (loop6): invalid crc value
[  336.731289][ T5820] udevd[5820]: symlink '../../loop6' '/dev/disk/by-uuid/7d96804d-fc78-4d0a-0000-00000000002c.tmp-b7:6' failed: Read-only file system
[  336.737668][T14318] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  336.747511][ T5820] udevd[5820]: symlink '../../loop6' '/dev/disk/by-uuid/7d96804d-fc78-4d0a-0000-00000000002c.tmp-b7:6' failed: Read-only file system
[  336.752608][T14318] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  336.792930][   T34] audit: type=1800 audit(1764761935.489:436): pid=14318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2918" name="file1" dev="loop6" ino=7 res=0 errno=0
[  336.944798][T14327] loop5: detected capacity change from 0 to 32768
[  336.956522][ T5820] udevd[5820]: symlink '../../loop5' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:5' failed: Read-only file system
[  336.976149][T14327] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  336.993888][T14327] XFS (loop5): Ending clean mount
[  337.011558][ T9217] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  337.296043][T14352] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  337.300183][ T5642] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  337.304803][ T5642] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  337.308321][ T5642] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  337.311776][ T5642] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  337.398408][T14367] netlink: 'syz.6.2925': attribute type 23 has an invalid length.
[  337.715617][T14390] autofs4:pid:14390:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2147483646), cmd(0xc0189375)
[  337.720228][T14390] autofs4:pid:14390:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[  337.745461][T14377] loop5: detected capacity change from 0 to 32768
[  337.775014][ T5820] udevd[5820]: symlink '../../loop5' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:5' failed: Read-only file system
[  337.780728][T14377] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  337.796281][T14377] XFS (loop5): Ending clean mount
[  337.801372][ T5820] udevd[5820]: symlink '../../loop5' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:5' failed: Read-only file system
[  337.805071][T14377] XFS (loop5): Quotacheck needed: Please wait.
[  337.859729][T14377] XFS (loop5): Quotacheck: Done.
[  337.894771][T14414] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2936'.
[  337.897696][T14414] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2936'.
[  337.925549][T14416] loop6: detected capacity change from 0 to 512
[  337.941278][ T9217] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  337.965706][T14416] EXT4-fs: Ignoring removed oldalloc option
[  337.967920][T14416] EXT4-fs: Ignoring removed bh option
[  337.980052][T14421] loop7: detected capacity change from 0 to 1024
[  338.000462][T14416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002]
[  338.003181][T14416] System zones: 1-12
[  338.007526][T14416] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.2938: corrupted in-inode xattr: e_value size too large
[  338.026350][T14416] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2938: couldn't read orphan inode 15 (err -117)
[  338.060069][T14416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.088077][T14421] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none.
[  338.149498][T10790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.196708][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  338.396647][T14455] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2943'.
[  338.483620][ T5815] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  338.558021][   T33] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  338.563268][ T5642] net_ratelimit: 32 callbacks suppressed
[  338.563350][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  338.642726][ T5815] usb 6-1: config 0 has no interfaces?
[  338.648581][ T5815] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  338.651762][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.666131][ T5815] usb 6-1: config 0 descriptor??
[  338.673625][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  338.719388][   T33] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  338.728587][   T33] usb 7-1: Dual-Role OTG device on HNP port
[  338.730912][   T33] usb 7-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1
[  338.734104][   T33] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.736784][   T33] usb 7-1: Product: syz
[  338.738244][   T33] usb 7-1: Manufacturer: syz
[  338.740387][   T33] usb 7-1: SerialNumber: syz
[  338.759417][   T33] usb 7-1: config 0 descriptor??
[  338.778251][   T33] usb_ehset_test 7-1:0.0: probe with driver usb_ehset_test failed with error -32
[  338.784420][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  338.906573][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  338.935302][   T33] usb 6-1: USB disconnect, device number 30
[  339.000492][ T5877] usb 7-1: USB disconnect, device number 20
[  339.013566][   T13] bond1: (slave lo): failed to get link speed/duplex
[  339.123092][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  339.236609][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  339.346962][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  339.453981][   T13] bond1: (slave lo): failed to get link speed/duplex
[  339.567297][   T13] bond1: (slave lo): failed to get link speed/duplex
[  340.045988][T14520] cgroup: name respecified
[  340.103800][T14487] loop6: detected capacity change from 0 to 32768
[  340.168381][ T5820] udevd[5820]: symlink '../../loop6' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:6' failed: Read-only file system
[  340.173950][T14487] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  340.185135][ T5820] udevd[5820]: symlink '../../loop6' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:6' failed: Read-only file system
[  340.610225][T14487] XFS (loop6): Ending clean mount
[  340.615906][T14487] XFS (loop6): Quotacheck needed: Please wait.
[  340.651609][T14487] XFS (loop6): Quotacheck: Done.
[  340.690370][T10790] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  340.756427][    C1] hpet: Lost 1 RTC interrupts
[  341.025892][T14561] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2964'.
[  341.372996][ T5877] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  341.525567][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.528551][ T5877] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  341.531296][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.535076][ T5877] usb 6-1: config 0 descriptor??
[  341.951658][ T5877] lg-g15 0003:046D:C222.001D: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0
[  342.128124][   T34] audit: type=1800 audit(1764761940.839:437): pid=14615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.2979" name="/" dev="anon_inodefs" ino=34586 res=0 errno=0
[  342.282541][  T795] usb 6-1: USB disconnect, device number 31
[  342.344705][T14621] loop6: detected capacity change from 0 to 32768
[  342.347690][T14621] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2981 (14621)
[  342.356567][ T5820] udevd[5820]: symlink '../../loop6' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:6' failed: Read-only file system
[  342.361723][T14621] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  342.365356][T14621] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  342.416655][T14621] BTRFS info (device loop6): enabling ssd optimizations
[  342.419007][T14621] BTRFS info (device loop6): turning on async discard
[  342.421119][T14621] BTRFS info (device loop6): enabling free space tree
[  342.435930][T10790] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  342.665450][T14655] loop6: detected capacity change from 0 to 256
[  342.948565][T14686] loop6: detected capacity change from 0 to 1024
[  342.952006][T14686] EXT4-fs: Ignoring removed bh option
[  342.955688][T14688] input input23: cannot allocate more than FF_MAX_EFFECTS effects
[  342.959114][T14686] EXT4-fs: inline encryption not supported
[  342.966417][ T8029] udevd[8029]: symlink '../../loop6' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:6' failed: Read-only file system
[  342.973335][T14686] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  342.980677][T14686] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  342.997465][T14686] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.2989: lblock 2 mapped to illegal pblock 2 (length 1)
[  343.008310][T14686] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  343.012045][T14686] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2989: lblock 0 mapped to illegal pblock 48 (length 1)
[  343.018251][T14686] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  343.022611][T14686] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2989: Failed to acquire dquot type 0
[  343.026794][T14686] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  343.029867][T14686] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2989: mark_inode_dirty error
[  343.035425][T14686] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  343.039902][T14686] EXT4-fs (loop6): 1 orphan inode deleted
[  343.043629][T11341] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  343.052361][T14686] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.057293][T11341] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  343.063375][T11341] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u10:13: Failed to release dquot type 0
[  343.112993][T10790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.120748][T10790] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  343.138695][T10790] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  343.146803][T10790] EXT4-fs error (device loop6): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  343.181435][ T5812] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  343.382208][T14727] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3001'.
[  343.386815][T14727] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3001'.
[  343.422018][T14731] loop5: detected capacity change from 0 to 128
[  343.438394][T14731] EXT4-fs (loop5): Test dummy encryption mode enabled
[  343.440354][ T8029] udevd[8029]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system
[  343.444239][T14736] loop6: detected capacity change from 0 to 512
[  343.453430][T14731] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0082]
[  343.456125][T14731] System zones: 1-3, 19-19, 35-36
[  343.461135][T14739] loop7: detected capacity change from 0 to 256
[  343.464954][T14731] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  343.467167][ T5820] udevd[5820]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  343.470084][T14731] ext4 filesystem being mounted at /666/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.484979][T14739] exfat: Deprecated parameter 'utf8'
[  343.487121][T14739] exfat: Deprecated parameter 'utf8'
[  343.489225][T14739] exfat: Deprecated parameter 'utf8'
[  343.497463][T14731] EXT4-fs warning (device loop5): verify_group_input:156: Last group not full
[  343.506626][T14736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.507326][T14739] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  343.510624][T14736] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  343.537060][ T9217] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  343.566078][   T34] audit: type=1800 audit(1764761942.238:438): pid=14736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3004" name="file2" dev="loop6" ino=16 res=0 errno=0
[  343.696718][   T13] net_ratelimit: 36 callbacks suppressed
[  343.696737][   T13] bond1: (slave lo): failed to get link speed/duplex
[  343.822968][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  343.826659][T10790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.939915][   T13] bond1: (slave lo): failed to get link speed/duplex
[  344.057925][   T13] bond1: (slave lo): failed to get link speed/duplex
[  344.121389][ T5877] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  344.174737][   T13] bond1: (slave lo): failed to get link speed/duplex
[  344.292321][ T5877] usb 7-1: Using ep0 maxpacket: 32
[  344.294169][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  344.297647][ T5877] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  344.304006][ T5877] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  344.307423][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.309931][ T5877] usb 7-1: Product: syz
[  344.311214][ T5877] usb 7-1: Manufacturer: syz
[  344.312809][ T5877] usb 7-1: SerialNumber: syz
[  344.320895][ T5877] usb 7-1: config 0 descriptor??
[  344.326214][T14771] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  344.333721][ T5877] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  344.410247][   T13] bond1: (slave lo): failed to get link speed/duplex
[  344.538383][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  344.552698][ T5877] usb 7-1: USB disconnect, device number 21
[  344.660294][   T13] bond1: (slave lo): failed to get link speed/duplex
[  344.775226][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  344.778774][T14822] loop5: detected capacity change from 0 to 1024
[  344.791197][ T5820] udevd[5820]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system
[  344.799864][T14822] syz.5.3016: attempt to access beyond end of device
[  344.799864][T14822] loop5: rw=0, sector=917504, nr_sectors = 2 limit=1024
[  344.800555][ T5820] udevd[5820]: symlink '../../loop5' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:5' failed: Read-only file system
[  344.806897][T14822] Buffer I/O error on dev loop5, logical block 458752, async page read
[  344.807119][T14822] syz.5.3016: attempt to access beyond end of device
[  344.807119][T14822] loop5: rw=0, sector=917504, nr_sectors = 2 limit=1024
[  344.807136][T14822] Buffer I/O error on dev loop5, logical block 458752, async page read
[  345.045560][T14828] loop5: detected capacity change from 0 to 32768
[  345.052053][T14828] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  345.056168][ T5820] udevd[5820]: symlink '../../loop5' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:5' failed: Read-only file system
[  345.069024][T14828] XFS (loop5): Ending clean mount
[  345.073482][T14828] XFS (loop5): Quotacheck needed: Please wait.
[  345.121695][T14828] XFS (loop5): Quotacheck: Done.
[  345.154740][ T9217] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  345.431341][T14892] loop5: detected capacity change from 0 to 1024
[  345.442581][ T5820] udevd[5820]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system
[  345.446761][ T5820] udevd[5820]: symlink '../../loop5' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:5' failed: Read-only file system
[  345.537315][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3025'.
[  345.552441][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3025'.
[  345.556872][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3025'.
[  345.560401][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3025'.
[  345.992573][T14937] loop5: detected capacity change from 0 to 32768
[  345.998041][T14937] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  346.006953][T14937] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  346.026143][ T5820] udevd[5820]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system
[  346.053959][ T5820] udevd[5820]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system
[  346.113955][ T9217] ocfs2: Unmounting device (7,5) on (node local)
[  346.228457][T14956] loop5: detected capacity change from 0 to 16
[  346.232955][T14956] erofs (device loop5): mounted with root inode @ nid 36.
[  346.234908][ T5820] udevd[5820]: symlink '../../loop5' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:5' failed: Read-only file system
[  346.251609][ T5820] udevd[5820]: symlink '../../loop5' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:5' failed: Read-only file system
[  346.367226][ T5877] usb 7-1: new full-speed USB device number 22 using dummy_hcd
[  346.531135][ T5877] usb 7-1: unable to get BOS descriptor or descriptor too short
[  346.536520][ T5877] usb 7-1: not running at top speed; connect to a high speed hub
[  346.549835][ T5877] usb 7-1: config 0 has an invalid interface number: 254 but max is 0
[  346.552508][ T5877] usb 7-1: config 0 has no interface number 0
[  346.554408][ T5877] usb 7-1: config 0 interface 254 has no altsetting 0
[  346.566753][ T5877] usb 7-1: New USB device found, idVendor=0421, idProduct=74b0, bcdDevice=b6.8f
[  346.573384][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.580280][ T5877] usb 7-1: Product: syz
[  346.583133][ T5877] usb 7-1: Manufacturer: syz
[  346.585478][ T5877] usb 7-1: SerialNumber: syz
[  346.593520][ T5877] usb 7-1: config 0 descriptor??
[  346.604778][ T5877] cdc_phonet 7-1:0.254: probe with driver cdc_phonet failed with error -22
[  346.674711][T15100] ramfs: Bad value for 'mode'
[  346.824551][ T5877] usb 7-1: USB disconnect, device number 22
[  347.000068][T15111] loop5: detected capacity change from 0 to 32768
[  347.010085][T15111] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  347.023450][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:5' failed: Read-only file system
[  347.031353][T15111] XFS (loop5): Ending clean mount
[  347.038142][T15111] XFS (loop5): Quotacheck needed: Please wait.
[  347.074206][T15111] XFS (loop5): Quotacheck: Done.
[  347.106244][ T9217] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  348.628220][T15181] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT'
[  348.633128][T15181] ALSA: mixer_oss: invalid index 1374389
[  349.127358][   T13] net_ratelimit: 35 callbacks suppressed
[  349.127378][   T13] bond1: (slave lo): failed to get link speed/duplex
[  349.255910][   T13] bond1: (slave lo): failed to get link speed/duplex
[  349.372481][   T13] bond1: (slave lo): failed to get link speed/duplex
[  349.511553][   T12] bond1: (slave lo): failed to get link speed/duplex
[  349.639859][   T13] bond1: (slave lo): failed to get link speed/duplex
[  349.768222][   T12] bond1: (slave lo): failed to get link speed/duplex
[  349.886030][   T13] bond1: (slave lo): failed to get link speed/duplex
[  350.002114][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3073'.
[  350.025149][   T13] bond1: (slave lo): failed to get link speed/duplex
[  350.125656][T15211] loop5: detected capacity change from 0 to 1024
[  350.146518][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system
[  350.152264][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-uuid/ba2f0001-879f-3637-907a-ce8b5cb07bf2.tmp-b7:5' failed: Read-only file system
[  350.165195][   T13] bond1: (slave lo): failed to get link speed/duplex
[  350.189315][T11343] hfsplus: b-tree write err: -5, ino 4
[  350.282140][   T12] bond1: (slave lo): failed to get link speed/duplex
[  350.385502][T15222] loop5: detected capacity change from 0 to 32768
[  350.390247][T15222] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3078 (15222)
[  350.399508][ T5877] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  350.403259][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:5' failed: Read-only file system
[  350.412324][T15222] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  350.416398][T15222] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  350.439350][T15222] BTRFS info (device loop5): turning off barriers
[  350.441407][T15222] BTRFS info (device loop5): enabling free space tree
[  350.447706][T15222] BTRFS info (device loop5): use zstd compression, level 3
[  350.530480][ T9217] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  350.603847][ T5877] usb 7-1: Using ep0 maxpacket: 8
[  350.614461][ T5877] usb 7-1: config 0 has an invalid interface number: 74 but max is 0
[  350.619555][ T5877] usb 7-1: config 0 has no interface number 0
[  350.644018][ T5877] usb 7-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=e2.e8
[  350.664976][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.677829][ T5877] usb 7-1: Product: syz
[  350.679822][ T5877] usb 7-1: Manufacturer: syz
[  350.681715][ T5877] usb 7-1: SerialNumber: syz
[  350.690951][ T5877] usb 7-1: config 0 descriptor??
[  350.899675][T15261] netlink: 'syz.7.3082': attribute type 1 has an invalid length.
[  350.902555][T15261] netlink: 'syz.7.3082': attribute type 3 has an invalid length.
[  350.905078][T15261] netlink: 'syz.7.3082': attribute type 7 has an invalid length.
[  350.907575][T15261] netlink: 'syz.7.3082': attribute type 8 has an invalid length.
[  350.911051][T15261] netlink: 184 bytes leftover after parsing attributes in process `syz.7.3082'.
[  350.925730][ T5877] usb 7-1: NDI device with a latency value of 1
[  350.926265][T15261] NCSI netlink: No device for ifindex 131092
[  350.929458][ T5877] ftdi_sio 7-1:0.74: FTDI USB Serial Device converter detected
[  350.936271][ T5877] ftdi_sio ttyUSB0: unknown device type: 0xe2e8
[  350.942434][ T5877] usb 7-1: USB disconnect, device number 23
[  350.954791][ T5877] ftdi_sio 7-1:0.74: device disconnected
[  350.973115][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3084'.
[  351.022867][T15280] CUSE: DEVNAME unspecified
[  351.621125][T15302] loop7: detected capacity change from 0 to 32768
[  351.624505][T15302] BTRFS warning: excessive commit interval 2147, use with care
[  351.632366][T15302] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3091 (15302)
[  351.653104][T15302] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  351.655620][ T6483] udevd[6483]: symlink '../../loop7' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:7' failed: Read-only file system
[  351.659180][T15302] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  351.762100][T15302] BTRFS info (device loop7): enabling ssd optimizations
[  351.764271][T15302] BTRFS info (device loop7): turning off barriers
[  351.765596][ T6483] udevd[6483]: symlink '../../loop7' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:7' failed: Read-only file system
[  351.766245][T15302] BTRFS info (device loop7): turning on async discard
[  351.766255][T15302] BTRFS info (device loop7): enabling free space tree
[  351.766261][T15302] BTRFS info (device loop7): enabling auto defrag
[  351.766268][T15302] BTRFS info (device loop7): use zlib compression, level 3
[  351.852213][T12519] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  351.969622][T15320] loop6: detected capacity change from 0 to 40427
[  351.975118][T15320] F2FS-fs: heap/no_heap options were deprecated
[  351.982722][T15320] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64)
[  351.992575][T15320] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  352.013390][T14982] udevd[14982]: symlink '../../loop6' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:6' failed: Read-only file system
[  352.019095][T15320] F2FS-fs (loop6): Image doesn't support compression
[  352.029543][T15320] F2FS-fs (loop6): invalid crc value
[  352.116577][T15320] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  352.121542][T15320] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30
[  352.124913][T15320] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  352.167883][ T5201] Bluetooth: hci0: unexpected event for opcode 0x0c26
[  352.358135][T15349] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3101'.
[  352.874685][T15389] loop6: detected capacity change from 0 to 32768
[  352.891278][T15389] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3109 (15389)
[  352.897533][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:6' failed: Read-only file system
[  352.914480][T15389] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  352.917894][T15389] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  353.033486][T15389] BTRFS info (device loop6): enabling ssd optimizations
[  353.036433][T15389] BTRFS info (device loop6): turning on async discard
[  353.039253][T15389] BTRFS info (device loop6): enabling free space tree
[  353.409861][T10790] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  353.848264][T15424] loop5: detected capacity change from 0 to 4096
[  353.854237][T15424] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  353.866348][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  353.871463][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:5' failed: Read-only file system
[  353.900326][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  353.904654][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:5' failed: Read-only file system
[  354.095714][T15427] loop6: detected capacity change from 0 to 32768
[  354.110255][T15427] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  354.114090][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:6' failed: Read-only file system
[  354.134141][T15427] XFS (loop6): Ending clean mount
[  354.137100][T15427] XFS (loop6): Quotacheck needed: Please wait.
[  354.144687][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:6' failed: Read-only file system
[  354.180539][T15427] XFS (loop6): Quotacheck: Done.
[  354.219013][T10790] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  354.347579][ T5878] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  354.495667][ T5642] net_ratelimit: 34 callbacks suppressed
[  354.495681][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  354.510016][ T5878] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  354.514078][ T5878] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  354.527125][ T5878] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  354.531927][ T5878] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  354.534876][ T5878] usb 6-1: Manufacturer: syz
[  354.545983][ T5878] usb 6-1: config 0 descriptor??
[  354.558115][ T5878] igorplugusb 6-1:0.0: incorrect number of endpoints
[  354.613300][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  354.731204][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  354.775915][ T5877] usb 6-1: USB disconnect, device number 32
[  354.849234][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  354.966133][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  355.083948][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  355.201401][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  355.319655][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  355.448378][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  355.575422][   T13] bond1: (slave lo): failed to get link speed/duplex
[  355.697114][T15505] loop5: detected capacity change from 0 to 4096
[  355.701225][T15505] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  355.732826][T15505] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  356.180318][T15548] loop5: detected capacity change from 0 to 256
[  356.197007][T15548] exfat: Deprecated parameter 'namecase'
[  356.224500][T15548] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  356.362574][T15569] netlink: 'syz.5.3148': attribute type 5 has an invalid length.
[  356.680281][T15581] loop5: detected capacity change from 0 to 32768
[  356.688567][T15581] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3152 (15581)
[  356.707010][T15581] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  356.712047][T15581] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  356.777324][T15606] can0: slcan on ttyS3.
[  356.806099][T15581] BTRFS info (device loop5): enabling ssd optimizations
[  356.816344][T15581] BTRFS info (device loop5): turning on async discard
[  356.818660][T15581] BTRFS info (device loop5): enabling free space tree
[  356.846659][ T9217] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  356.861918][T15606] can0 (unregistered): slcan off ttyS3.
[  357.414903][T15671] loop6: detected capacity change from 0 to 512
[  357.418256][T15671] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  357.430783][T15671] EXT4-fs (loop6): 1 truncate cleaned up
[  357.433528][T15671] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  357.433686][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  357.475830][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  357.486618][T15672] loop5: detected capacity change from 0 to 4096
[  357.492034][T15678] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.3172: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  357.525986][T15678] EXT4-fs (loop6): Remounting filesystem read-only
[  357.541596][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  357.550040][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:5' failed: Read-only file system
[  357.574361][T10790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.583016][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  357.606442][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:5' failed: Read-only file system
[  357.657487][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  357.730299][T15695] loop5: detected capacity change from 0 to 256
[  357.746484][T15695] exfat: Deprecated parameter 'utf8'
[  357.762875][T15695] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d)
[  357.777931][T15699] loop6: detected capacity change from 0 to 4096
[  357.799142][T15699] NILFS (loop6): mounting unchecked fs
[  357.802287][T15699] NILFS (loop6): recovery required for readonly filesystem
[  357.804826][T15699] NILFS (loop6): write access will be enabled during recovery
[  357.809169][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:6' failed: Read-only file system
[  357.820355][T15699] NILFS (loop6): invalid segment: Checksum error in segment payload
[  357.827524][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:6' failed: Read-only file system
[  357.830516][T15699] NILFS (loop6): trying rollback from an earlier position
[  357.847259][T15699] NILFS (loop6): norecovery option specified, skipping roll-forward recovery
[  357.852602][T15699] NILFS (loop6): The specified checkpoint is not a snapshot (checkpoint number=2)
[  357.983850][T15718] loop6: detected capacity change from 0 to 1024
[  358.000333][T15715] loop5: detected capacity change from 0 to 4096
[  358.001074][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:6' failed: Read-only file system
[  359.705486][T15810] loop6: detected capacity change from 0 to 512
[  359.908218][   T13] net_ratelimit: 34 callbacks suppressed
[  359.908230][   T13] bond1: (slave lo): failed to get link speed/duplex
[  360.027292][   T13] bond1: (slave lo): failed to get link speed/duplex
[  360.145297][   T13] bond1: (slave lo): failed to get link speed/duplex
[  360.192283][T15821] CUSE: info not properly terminated
[  360.265666][   T13] bond1: (slave lo): failed to get link speed/duplex
[  360.393375][   T13] bond1: (slave lo): failed to get link speed/duplex
[  360.517062][   T13] bond1: (slave lo): failed to get link speed/duplex
[  360.602840][  T795] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  360.636197][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  360.653107][T15833] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  360.657787][T15833] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  360.752349][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  360.762850][  T795] usb 6-1: Using ep0 maxpacket: 16
[  360.768965][  T795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.777252][  T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  360.780610][  T795] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  360.788770][  T795] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  360.791542][  T795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.794081][  T795] usb 6-1: Product: syz
[  360.796087][  T795] usb 6-1: Manufacturer: syz
[  360.797759][  T795] usb 6-1: SerialNumber: syz
[  360.800450][  T795] usb 6-1: config 0 descriptor??
[  360.804883][  T795] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  360.807302][  T795] gspca_stv06xx: st6422 sensor detected
[  360.869893][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  360.943397][T15846] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3211'.
[  360.987575][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  361.064369][T15836] loop7: detected capacity change from 0 to 40427
[  361.086129][  T795] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71
[  361.093481][T15836] F2FS-fs (loop7): invalid crc value
[  361.142217][  T795] usb 6-1: USB disconnect, device number 33
[  361.208151][T15836] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  361.212852][T15836] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  362.000552][T15866] loop7: detected capacity change from 0 to 4096
[  362.378165][T15876] loop6: detected capacity change from 0 to 32768
[  362.384683][T15876] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3215 (15876)
[  362.407030][T15876] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  362.417052][T15876] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  362.524341][T15876] BTRFS info (device loop6): enabling ssd optimizations
[  362.527056][T15876] BTRFS info (device loop6): turning on async discard
[  362.548949][T15876] BTRFS info (device loop6): enabling free space tree
[  362.606244][T10790] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  362.795553][T15930] loop6: detected capacity change from 0 to 256
[  362.868220][T15930] FAT-fs (loop6): codepage cp86 not found
[  362.932592][T15924] loop7: detected capacity change from 0 to 40427
[  362.951197][ T6483] udevd[6483]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system
[  362.956577][T15924] F2FS-fs (loop7): invalid crc value
[  362.989364][T15924] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  362.992678][T15924] F2FS-fs (loop7): Start checkpoint disabled!
[  362.998482][T15924] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  363.002007][T15924] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  363.042949][T11341] kworker/u10:13: attempt to access beyond end of device
[  363.042949][T11341] loop7: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  363.050566][T11341] kworker/u10:13: attempt to access beyond end of device
[  363.050566][T11341] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  363.055944][T11341] CPU: 1 UID: 0 PID: 11341 Comm: kworker/u10:13 Not tainted syzkaller #0 PREEMPT(full) 
[  363.055956][T11341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  363.055961][T11341] Workqueue: writeback wb_workfn (flush-7:7)
[  363.055976][T11341] Call Trace:
[  363.055979][T11341]  <TASK>
[  363.055984][T11341]  dump_stack_lvl+0x189/0x250
[  363.055997][T11341]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.056007][T11341]  ? __pfx_queue_work_on+0x10/0x10
[  363.056016][T11341]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  363.056027][T11341]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  363.056041][T11341]  f2fs_handle_critical_error+0x37c/0x540
[  363.056056][T11341]  f2fs_write_end_io+0x886/0xb60
[  363.056072][T11341]  __submit_merged_bio+0x27a/0x6a0
[  363.056085][T11341]  __submit_merged_write_cond+0x255/0x530
[  363.056099][T11341]  f2fs_write_data_pages+0x261d/0x3000
[  363.056121][T11341]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  363.056134][T11341]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  363.056157][T11341]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  363.056169][T11341]  ? trace_f2fs_writepages+0x7f/0x200
[  363.056181][T11341]  ? f2fs_write_node_pages+0x478/0x6e0
[  363.056193][T11341]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  363.056205][T11341]  ? __lock_acquire+0xab9/0xd20
[  363.056216][T11341]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  363.056224][T11341]  do_writepages+0x32e/0x550
[  363.056236][T11341]  ? reacquire_held_locks+0x127/0x1d0
[  363.056244][T11341]  ? writeback_sb_inodes+0x384/0x1010
[  363.056258][T11341]  __writeback_single_inode+0x145/0xff0
[  363.056268][T11341]  ? do_raw_spin_unlock+0x4d/0x240
[  363.056279][T11341]  writeback_sb_inodes+0x6c7/0x1010
[  363.056301][T11341]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  363.056329][T11341]  ? rcu_is_watching+0x15/0xb0
[  363.056343][T11341]  wb_writeback+0x43b/0xaf0
[  363.056356][T11341]  ? queue_io+0x371/0x590
[  363.056367][T11341]  ? __pfx_wb_writeback+0x10/0x10
[  363.056381][T11341]  ? _raw_spin_unlock_irq+0x23/0x50
[  363.056392][T11341]  wb_workfn+0x409/0xef0
[  363.056408][T11341]  ? __pfx_wb_workfn+0x10/0x10
[  363.056418][T11341]  ? __lock_acquire+0xab9/0xd20
[  363.056430][T11341]  ? process_scheduled_works+0x9ef/0x17b0
[  363.056441][T11341]  ? _raw_spin_unlock_irq+0x23/0x50
[  363.056449][T11341]  ? process_scheduled_works+0x9ef/0x17b0
[  363.056456][T11341]  ? process_scheduled_works+0x9ef/0x17b0
[  363.056464][T11341]  process_scheduled_works+0xae1/0x17b0
[  363.056485][T11341]  ? __pfx_process_scheduled_works+0x10/0x10
[  363.056500][T11341]  worker_thread+0x8a0/0xda0
[  363.056520][T11341]  kthread+0x711/0x8a0
[  363.056531][T11341]  ? __pfx_worker_thread+0x10/0x10
[  363.056539][T11341]  ? __pfx_kthread+0x10/0x10
[  363.056548][T11341]  ? _raw_spin_unlock_irq+0x23/0x50
[  363.056557][T11341]  ? lockdep_hardirqs_on+0x9c/0x150
[  363.056566][T11341]  ? __pfx_kthread+0x10/0x10
[  363.056576][T11341]  ret_from_fork+0x4bc/0x870
[  363.056585][T11341]  ? __pfx_ret_from_fork+0x10/0x10
[  363.056595][T11341]  ? __switch_to_asm+0x39/0x70
[  363.056601][T11341]  ? __switch_to_asm+0x33/0x70
[  363.056606][T11341]  ? __pfx_kthread+0x10/0x10
[  363.056615][T11341]  ret_from_fork_asm+0x1a/0x30
[  363.056629][T11341]  </TASK>
[  363.056632][T11341] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  363.173559][T15950] loop6: detected capacity change from 0 to 512
[  363.186457][T15950] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3229: couldn't read orphan inode 26 (err -116)
[  363.186845][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  363.191319][T15950] EXT4-fs (loop6): Remounting filesystem read-only
[  363.203152][T15950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.207083][T15950] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.218197][T15950] EXT4-fs (loop6): shut down requested (2)
[  363.225734][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  363.256962][T10790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.295403][T15949] loop5: detected capacity change from 0 to 32768
[  363.314078][T15949] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3230 (15949)
[  363.327796][T14982] udevd[14982]: symlink '../../loop5' '/dev/disk/by-uuid/c6b85f58-0c7e-41ca-a553-c8d9f94f6663.tmp-b7:5' failed: Read-only file system
[  363.343926][T15949] BTRFS info (device loop5): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  363.347501][T15949] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  363.358954][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3232'.
[  363.373556][T15967] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3232'.
[  363.462614][T15949] BTRFS info (device loop5): enabling ssd optimizations
[  363.482116][T15949] BTRFS info (device loop5): turning on async discard
[  363.485070][T15949] BTRFS info (device loop5): enabling free space tree
[  363.487456][T15949] BTRFS info (device loop5): use lzo compression, level 1
[  363.628601][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-uuid/c6b85f58-0c7e-41ca-a553-c8d9f94f6663.tmp-b7:5' failed: Read-only file system
[  363.785110][T16008] netlink: 'syz.6.3238': attribute type 1 has an invalid length.
[  363.803409][T16008] netlink: 'syz.6.3238': attribute type 2 has an invalid length.
[  363.971227][T16017] loop6: detected capacity change from 0 to 4096
[  363.978166][T16017] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  363.987182][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  363.992031][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:6' failed: Read-only file system
[  364.053128][ T9217] BTRFS info (device loop5): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  364.287226][  T796] IPVS: starting estimator thread 0...
[  364.392282][T16030] IPVS: using max 86 ests per chain, 206400 per kthread
[  364.544296][T16035] loop5: detected capacity change from 0 to 512
[  364.550778][T16035] EXT4-fs (loop5): Test dummy encryption mode enabled
[  364.556147][T16035] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.556777][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  364.566036][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-uuid/00000005-0000-0000-0000-000000000000.tmp-b7:5' failed: Read-only file system
[  364.573548][T16035] EXT4-fs error (device loop5): htree_dirblock_to_tree:1051: inode #2: comm syz.5.3244: Directory hole found for htree leaf block 0
[  364.581463][T16035] EXT4-fs (loop5): Remounting filesystem read-only
[  364.584765][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  364.599001][ T9217] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  365.015761][T16065] loop5: detected capacity change from 0 to 1024
[  365.044410][T16065] hfsplus: keylen 65060 too large
[  365.249207][T16084] loop6: detected capacity change from 0 to 1024
[  365.258217][T16084] hfsplus: failed to load root directory
[  365.351430][   T12] net_ratelimit: 35 callbacks suppressed
[  365.354045][   T12] bond1: (slave lo): failed to get link speed/duplex
[  365.481559][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  365.608022][   T12] bond1: (slave lo): failed to get link speed/duplex
[  365.725483][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  365.843663][   T12] bond1: (slave lo): failed to get link speed/duplex
[  365.960753][   T12] bond1: (slave lo): failed to get link speed/duplex
[  366.078445][   T12] bond1: (slave lo): failed to get link speed/duplex
[  366.157179][T16099] loop5: detected capacity change from 0 to 4096
[  366.161562][T16099] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  366.185827][T16099] ntfs3(loop5): ino=1a, mi_enum_attr
[  366.188656][T16099] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  366.191945][T16099] ntfs3(loop5): ino=1a, mi_enum_attr
[  366.193898][T16099] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  366.196575][   T12] bond1: (slave lo): failed to get link speed/duplex
[  366.245584][T16105] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3260'.
[  366.277652][T16108] loop5: detected capacity change from 0 to 64
[  366.291894][T16108] Trying to free block not in datazone
[  366.314502][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  366.419220][T16124] netlink: 'syz.5.3264': attribute type 3 has an invalid length.
[  366.427981][T16118] syzkaller0: entered promiscuous mode
[  366.430163][T16118] syzkaller0: entered allmulticast mode
[  366.485836][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  366.510914][T16132] loop5: detected capacity change from 0 to 1024
[  366.636069][T16145] loop5: detected capacity change from 0 to 1024
[  366.685491][ T7541] hfsplus: b-tree write err: -5, ino 4
[  366.720534][T16151] netlink: 'syz.5.3270': attribute type 9 has an invalid length.
[  367.138961][T16181] loop5: detected capacity change from 0 to 256
[  367.142676][T16181] exfat: Deprecated parameter 'utf8'
[  367.145003][T16181] exfat: Deprecated parameter 'namecase'
[  367.155282][T16181] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d)
[  367.171546][   T34] audit: type=1804 audit(1764761964.313:439): pid=16181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3278" name="/newroot/772/file0/file1" dev="loop5" ino=1048701 res=1 errno=0
[  367.252580][T16193] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  367.454761][T16214] loop6: detected capacity change from 0 to 128
[  367.466804][T16214] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  367.475274][T16214] ext4 filesystem being mounted at /503/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  367.614991][T16211] loop5: detected capacity change from 0 to 32768
[  367.633348][T16211] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  367.644327][T16211] XFS (loop5): Ending clean mount
[  367.753549][ T9217] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  368.414647][T10790] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  369.043442][T16248] netlink: 'syz.5.3290': attribute type 3 has an invalid length.
[  369.053069][T16248] netlink: 'syz.5.3290': attribute type 1 has an invalid length.
[  369.056208][T16248] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3290'.
[  369.059239][T16248] NCSI netlink: No device for ifindex 0
[  369.613249][T16251] loop5: detected capacity change from 0 to 32768
[  369.618544][T16251] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3291 (16251)
[  369.638848][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-uuid/5e4b7888-5e56-43f0-8345-635ad0fd87c6.tmp-b7:5' failed: Read-only file system
[  369.663292][T16251] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  369.667382][T16251] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  369.727624][T16251] BTRFS info (device loop5): enabling ssd optimizations
[  369.730440][T16251] BTRFS info (device loop5): turning on async discard
[  369.733066][T16251] BTRFS info (device loop5): enabling free space tree
[  369.835291][ T9217] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  370.460794][T16299] fuse: root generation should be zero
[  370.672133][T16335] loop6: detected capacity change from 0 to 2048
[  370.678498][T16335] udf: Bad value for 'session'
[  370.687237][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-label/LinuxUDF.tmp-b7:6' failed: Read-only file system
[  370.691685][T16335] lo: entered allmulticast mode
[  370.694952][T16333] lo: left allmulticast mode
[  370.707519][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-uuid/1234567812345678.tmp-b7:6' failed: Read-only file system
[  370.720283][ T5642] net_ratelimit: 32 callbacks suppressed
[  370.720298][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  370.721215][  T795] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  370.789009][T16350] loop6: detected capacity change from 0 to 512
[  370.797685][T16350] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  370.803902][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  370.809931][T16350] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended
[  370.814118][T16350] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.3313: inode #15: comm syz.6.3313: iget: illegal inode #
[  370.819075][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  370.820113][T16350] EXT4-fs (loop6): Remounting filesystem read-only
[  370.826697][T16350] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.837803][   T13] bond1: (slave lo): failed to get link speed/duplex
[  370.862984][T10790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.903211][  T795] usb 6-1: Using ep0 maxpacket: 16
[  370.909770][  T795] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  370.915089][  T795] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  370.918645][  T795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.925287][  T795] usb 6-1: config 0 descriptor??
[  370.955742][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  370.969878][T16364] loop6: detected capacity change from 0 to 8192
[  371.073610][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  371.162543][T16375] netlink: 'syz.6.3317': attribute type 6 has an invalid length.
[  371.165967][T16375] netlink: 'syz.6.3317': attribute type 6 has an invalid length.
[  371.190880][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  371.308407][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  371.425981][   T13] bond1: (slave lo): failed to get link speed/duplex
[  371.458888][ T5878] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  371.543663][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  371.579865][  T795] hid-led 0003:1D34:000A.001E: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.5-1/input0
[  371.596627][  T795] hid-led 0003:1D34:000A.001E: Dream Cheeky Webmail Notifier initialized
[  371.621313][ T5878] usb 7-1: config 8 has an invalid interface number: 102 but max is 0
[  371.624716][ T5878] usb 7-1: config 8 has no interface number 0
[  371.627170][ T5878] usb 7-1: config 8 interface 102 altsetting 127 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  371.633817][ T5878] usb 7-1: config 8 interface 102 has no altsetting 0
[  371.636585][ T5878] usb 7-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=c7.ae
[  371.639483][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.648938][ T5878] r8152-cfgselector 7-1: Unknown version 0x0000
[  371.672024][   T13] bond1: (slave lo): failed to get link speed/duplex
[  371.790847][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  371.798423][  T795] usb 6-1: USB disconnect, device number 34
[  371.874738][ T5878] r8152-cfgselector 7-1: string descriptor 0 read error: -71
[  371.884226][ T5878] r8152 7-1:8.102: Expected endpoints are not found
[  371.890960][ T5878] r8152-cfgselector 7-1: USB disconnect, device number 24
[  372.383699][T16415] loop5: detected capacity change from 0 to 256
[  372.405964][T16415] FAT-fs (loop5): Directory bread(block 64) failed
[  372.408597][T16415] FAT-fs (loop5): Directory bread(block 65) failed
[  372.421163][T16415] FAT-fs (loop5): Directory bread(block 66) failed
[  372.424238][T16415] FAT-fs (loop5): Directory bread(block 67) failed
[  372.428039][T16415] FAT-fs (loop5): Directory bread(block 68) failed
[  372.431752][T16415] FAT-fs (loop5): Directory bread(block 69) failed
[  372.440710][T16415] FAT-fs (loop5): Directory bread(block 70) failed
[  372.444314][T16415] FAT-fs (loop5): Directory bread(block 71) failed
[  372.448094][T16415] FAT-fs (loop5): Directory bread(block 72) failed
[  372.450528][T16415] FAT-fs (loop5): Directory bread(block 73) failed
[  373.439669][T16444] loop5: detected capacity change from 0 to 131072
[  373.443649][T16444] F2FS-fs (loop5): invalid crc value
[  373.508459][T16444] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  373.515501][T16444] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  373.524045][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-uuid/7d96804d-fc78-4d0a-0000-00000000002c.tmp-b7:5' failed: Read-only file system
[  373.547939][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-uuid/7d96804d-fc78-4d0a-0000-00000000002c.tmp-b7:5' failed: Read-only file system
[  374.550646][T16477] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.863837][T16477] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.039973][T16477] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.133682][T16477] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.322119][   T13] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.350475][   T13] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.392494][ T5642] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.401915][ T5642] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.132391][ T5642] net_ratelimit: 33 callbacks suppressed
[  376.132408][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  376.242558][T16527] trusted_key: syz.6.3346 sent an empty control message without MSG_MORE.
[  376.249952][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  376.367977][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  376.485189][   T12] bond1: (slave lo): failed to get link speed/duplex
[  376.615768][   T12] bond1: (slave lo): failed to get link speed/duplex
[  376.741859][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  376.860757][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  376.870472][T16546] netlink: 'syz.5.3352': attribute type 25 has an invalid length.
[  376.873798][T16546] netlink: 'syz.5.3352': attribute type 7 has an invalid length.
[  376.981891][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  377.094923][   T12] bond1: (slave lo): failed to get link speed/duplex
[  377.216669][   T12] bond1: (slave lo): failed to get link speed/duplex
[  377.276388][ T5878] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  377.338399][T16569] loop6: detected capacity change from 0 to 2048
[  377.343325][T16569] EXT4-fs: Ignoring removed mblk_io_submit option
[  377.361163][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  377.377286][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  377.384633][T16569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.406210][T16569] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3359: bg 0: block 234: padding at end of block bitmap is not set
[  377.420613][T16569] EXT4-fs (loop6): Remounting filesystem read-only
[  377.422947][T16569] overlayfs: failed to verify upper root origin
[  377.451859][ T5878] usb 6-1: Using ep0 maxpacket: 32
[  377.455034][ T5878] usb 6-1: config 8 has an invalid interface number: 123 but max is 0
[  377.458605][ T5878] usb 6-1: config 8 has no interface number 0
[  377.460992][ T5878] usb 6-1: config 8 interface 123 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  377.464751][ T5878] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=ed.e7
[  377.467764][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.471988][T10790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.580833][T16590] loop6: detected capacity change from 0 to 8
[  377.602362][T16590] SQUASHFS error: Unable to read directory block [629:46]
[  377.683756][T16601] loop7: detected capacity change from 0 to 2048
[  377.699891][T16601] UDF-fs: warning (device loop7): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[  377.704883][T14982] udevd[14982]: symlink '../../loop7' '/dev/disk/by-label/LinuxUDF.tmp-b7:7' failed: Read-only file system
[  377.710203][T14982] udevd[14982]: symlink '../../loop7' '/dev/disk/by-uuid/1234567812345678.tmp-b7:7' failed: Read-only file system
[  377.714342][ T5878] usb 6-1: string descriptor 0 read error: -71
[  377.720936][ T5878] kvaser_usb 6-1:8.123: error -ENODEV: Cannot get usb endpoint(s)
[  377.726436][T16601] UDF-fs: error (device loop7): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (4 > 0)
[  377.730162][ T5878] usb 6-1: USB disconnect, device number 35
[  377.731038][T16601] UDF-fs: Scanning with blocksize 512 failed
[  377.739200][T16601] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  377.742591][T16601] UDF-fs: Scanning with blocksize 1024 failed
[  377.747848][T16601] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  377.750916][T16601] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  377.753341][T16601] UDF-fs: Scanning with blocksize 2048 failed
[  377.756033][T16601] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  377.760855][T16601] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512
[  377.764269][T16601] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  377.766653][T16601] UDF-fs: Scanning with blocksize 4096 failed
[  377.769273][T16601] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1)
[  377.831532][T16617] loop7: detected capacity change from 0 to 8
[  377.844890][T16617] squashfs image failed sanity check
[  377.914152][T16626] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  377.922862][T16603] loop6: detected capacity change from 0 to 32768
[  377.923156][T16626] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  377.925935][T16603] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3368 (16603)
[  377.940681][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:6' failed: Read-only file system
[  377.958427][T16603] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  377.966426][T16603] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  378.030310][T16651] syz.7.3374 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  378.092774][ T6483] udevd[6483]: symlink '../../loop6' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:6' failed: Read-only file system
[  378.123270][T16603] BTRFS info (device loop6): enabling ssd optimizations
[  378.130345][T16603] BTRFS info (device loop6): turning on async discard
[  378.133432][T16603] BTRFS info (device loop6): enabling free space tree
[  378.184175][T10790] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  378.235826][T16672] loop7: detected capacity change from 0 to 16
[  378.331636][T16680] netlink: 'syz.5.3380': attribute type 1 has an invalid length.
[  378.483834][T16692] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3383'.
[  378.800806][T16708] syzkaller1: entered promiscuous mode
[  378.803443][T16708] syzkaller1: entered allmulticast mode
[  379.005326][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3389'.
[  379.010818][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3389'.
[  379.487976][T16738] loop5: detected capacity change from 0 to 1024
[  379.520278][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system
[  379.531352][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-uuid/089c13f9-048e-3b03-bec8-871ac2c5bf93.tmp-b7:5' failed: Read-only file system
[  379.553931][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system
[  379.563209][ T6483] udevd[6483]: symlink '../../loop5' '/dev/disk/by-uuid/089c13f9-048e-3b03-bec8-871ac2c5bf93.tmp-b7:5' failed: Read-only file system
[  379.752582][T16754] loop6: detected capacity change from 0 to 512
[  379.758677][T16754] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  379.769260][T16754] EXT4-fs (loop6): 1 orphan inode deleted
[  379.771179][T16754] EXT4-fs (loop6): 1 truncate cleaned up
[  379.773861][T16754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.787042][T16754] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  379.799854][T16754] EXT4-fs (loop6): Remounting filesystem read-only
[  379.825801][T10790] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.953604][T16771] loop6: detected capacity change from 0 to 512
[  379.972411][T16771] EXT4-fs: user quota file already specified
[  380.135803][T16764] loop7: detected capacity change from 0 to 32768
[  380.159082][T16764] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  380.185430][T16764] XFS (loop7): Ending clean mount
[  380.219001][T12519] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  380.337335][ T5877] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  380.506879][ T5877] usb 7-1: Using ep0 maxpacket: 16
[  380.517577][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  380.522971][ T5877] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  380.545310][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.561879][ T5877] usb 7-1: config 0 descriptor??
[  380.779292][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3413'.
[  380.882719][T16829] loop5: detected capacity change from 0 to 16
[  380.893031][T16829] erofs (device loop5): mounted with root inode @ nid 36.
[  381.015022][ T5877] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  381.165264][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  381.227270][T16835] loop5: detected capacity change from 0 to 32768
[  381.252966][T16835] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  381.282188][T16835] XFS (loop5): Ending clean mount
[  381.315248][ T9217] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  381.463868][ T5877] usb 7-1: USB disconnect, device number 25
[  381.501197][ T5642] net_ratelimit: 35 callbacks suppressed
[  381.501208][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  381.580379][T16872] loop5: detected capacity change from 0 to 164
[  381.590027][T16872] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  381.619421][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  382.049254][   T12] bond1: (slave lo): failed to get link speed/duplex
[  382.165613][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  382.293130][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  382.410745][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  382.490188][T16893] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  382.542084][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  382.667882][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  382.810755][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  382.976976][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  383.201739][T16955] syz_tun: entered allmulticast mode
[  383.216792][T16954] syz_tun: left allmulticast mode
[  383.223862][T16958] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3440'.
[  383.500519][T16994] loop5: detected capacity change from 0 to 512
[  383.538652][ T5261] udevd[5261]: worker [6483] terminated by signal 33 (Unknown signal 33)
[  383.542511][T16994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.549567][ T5261] udevd[5261]: worker [6483] failed while handling '/devices/virtual/block/loop5'
[  383.558659][T16994] ext4 filesystem being mounted at /824/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  383.600206][T14982] udevd[14982]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  383.610818][ T9217] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.713561][T17012] trusted_key: encrypted_key: keylen parameter is missing
[  383.762398][T17015] loop5: detected capacity change from 0 to 1024
[  383.814090][T14982] udevd[14982]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system
[  383.821226][T14982] udevd[14982]: symlink '../../loop5' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:5' failed: Read-only file system
[  383.848957][T17019] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  383.854415][T14982] udevd[14982]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system
[  383.859268][T14982] udevd[14982]: symlink '../../loop5' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:5' failed: Read-only file system
[  384.368143][T17021] loop7: detected capacity change from 0 to 32768
[  384.418400][T17021] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode.
[  384.448136][T14982] udevd[14982]: symlink '../../loop7' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:7' failed: Read-only file system
[  384.479877][T17021] 
[  384.480712][T17021] ======================================================
[  384.483309][T17021] WARNING: possible circular locking dependency detected
[  384.486092][T17021] syzkaller #0 Not tainted
[  384.487916][T17021] ------------------------------------------------------
[  384.490680][T17021] syz.7.3458/17021 is trying to acquire lock:
[  384.492955][T17021] ffff8881bef05240 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_xattr_set+0xadd/0x11f0
[  384.497331][T17021] 
[  384.497331][T17021] but task is already holding lock:
[  384.499940][T17021] ffff8881bef06c78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  384.503855][T17021] 
[  384.503855][T17021] which lock already depends on the new lock.
[  384.503855][T17021] 
[  384.507220][T17021] 
[  384.507220][T17021] the existing dependency chain (in reverse order) is:
[  384.510151][T17021] 
[  384.510151][T17021] -> #2 (&oi->ip_xattr_sem){++++}-{4:4}:
[  384.512599][T17021]        lock_acquire+0x120/0x360
[  384.514177][T17021]        down_read+0x46/0x2e0
[  384.515612][T17021]        ocfs2_init_acl+0x2f9/0x720
[  384.517231][T17021]        ocfs2_mknod+0x1321/0x2050
[  384.518893][T17021]        ocfs2_create+0x1a5/0x440
[  384.520477][T17021]        path_openat+0x14f4/0x3830
[  384.522169][T17021]        do_filp_open+0x1fa/0x410
[  384.523849][T17021]        do_sys_openat2+0x121/0x1c0
[  384.525498][T17021]        __x64_sys_open+0x11e/0x150
[  384.527196][T17021]        do_syscall_64+0xfa/0xfa0
[  384.528845][T17021]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.531022][T17021] 
[  384.531022][T17021] -> #1 (jbd2_handle){++++}-{0:0}:
[  384.533450][T17021]        lock_acquire+0x120/0x360
[  384.535163][T17021]        jbd2_journal_lock_updates+0xaa/0x360
[  384.537150][T17021]        __ocfs2_flush_truncate_log+0x2ba/0x10e0
[  384.538991][T17021]        ocfs2_flush_truncate_log+0x4f/0x70
[  384.540739][T17021]        ocfs2_sync_fs+0x116/0x310
[  384.542522][T17021]        sync_filesystem+0x1cf/0x230
[  384.544122][T17021]        generic_shutdown_super+0x6f/0x2c0
[  384.545851][T17021]        kill_block_super+0x44/0x90
[  384.547421][T17021]        deactivate_locked_super+0xbc/0x130
[  384.549251][T17021]        cleanup_mnt+0x425/0x4c0
[  384.550794][T17021]        task_work_run+0x1d4/0x260
[  384.552371][T17021]        exit_to_user_mode_loop+0xe9/0x130
[  384.554122][T17021]        do_syscall_64+0x2bd/0xfa0
[  384.555730][T17021]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.557728][T17021] 
[  384.557728][T17021] -> #0 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}:
[  384.561035][T17021]        validate_chain+0xb9b/0x2140
[  384.562666][T17021]        __lock_acquire+0xab9/0xd20
[  384.564278][T17021]        lock_acquire+0x120/0x360
[  384.565844][T17021]        down_write+0x96/0x1f0
[  384.567334][T17021]        ocfs2_xattr_set+0xadd/0x11f0
[  384.568956][T17021]        __vfs_setxattr+0x43c/0x480
[  384.570658][T17021]        __vfs_setxattr_noperm+0x12d/0x660
[  384.572524][T17021]        vfs_setxattr+0x16b/0x2f0
[  384.574184][T17021]        file_setxattr+0x1da/0x2b0
[  384.575930][T17021]        path_setxattrat+0x327/0x3a0
[  384.577956][T17021]        __x64_sys_fsetxattr+0xbc/0xe0
[  384.579949][T17021]        do_syscall_64+0xfa/0xfa0
[  384.581880][T17021]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.584382][T17021] 
[  384.584382][T17021] other info that might help us debug this:
[  384.584382][T17021] 
[  384.588288][T17021] Chain exists of:
[  384.588288][T17021]   &ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  384.588288][T17021] 
[  384.593940][T17021]  Possible unsafe locking scenario:
[  384.593940][T17021] 
[  384.596275][T17021]        CPU0                    CPU1
[  384.597948][T17021]        ----                    ----
[  384.599645][T17021]   lock(&oi->ip_xattr_sem);
[  384.601206][T17021]                                lock(jbd2_handle);
[  384.603367][T17021]                                lock(&oi->ip_xattr_sem);
[  384.605709][T17021]   lock(&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]);
[  384.608048][T17021] 
[  384.608048][T17021]  *** DEADLOCK ***
[  384.608048][T17021] 
[  384.610544][T17021] 3 locks held by syz.7.3458/17021:
[  384.612099][T17021]  #0: ffff888104b82420 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write_file+0x60/0x200
[  384.614964][T17021]  #1: ffff8881bef06f40 (&sb->s_type->i_mutex_key#30){+.+.}-{4:4}, at: vfs_setxattr+0x144/0x2f0
[  384.618328][T17021]  #2: ffff8881bef06c78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  384.621905][T17021] 
[  384.621905][T17021] stack backtrace:
[  384.623894][T17021] CPU: 1 UID: 0 PID: 17021 Comm: syz.7.3458 Not tainted syzkaller #0 PREEMPT(full) 
[  384.623906][T17021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  384.623911][T17021] Call Trace:
[  384.623917][T17021]  <TASK>
[  384.623921][T17021]  dump_stack_lvl+0x189/0x250
[  384.623935][T17021]  ? __pfx_dump_stack_lvl+0x10/0x10
[  384.623945][T17021]  ? __pfx__printk+0x10/0x10
[  384.623954][T17021]  ? print_lock_name+0xde/0x100
[  384.623961][T17021]  print_circular_bug+0x2ee/0x310
[  384.623971][T17021]  check_noncircular+0x134/0x160
[  384.623981][T17021]  validate_chain+0xb9b/0x2140
[  384.623990][T17021]  ? preempt_schedule_irq+0xde/0x150
[  384.624000][T17021]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  384.624009][T17021]  ? look_up_lock_class+0x74/0x170
[  384.624018][T17021]  ? register_lock_class+0x51/0x320
[  384.624025][T17021]  __lock_acquire+0xab9/0xd20
[  384.624032][T17021]  ? ocfs2_xattr_set+0xadd/0x11f0
[  384.624041][T17021]  lock_acquire+0x120/0x360
[  384.624047][T17021]  ? ocfs2_xattr_set+0xadd/0x11f0
[  384.624056][T17021]  ? ocfs2_xattr_block_find+0x153/0x4c0
[  384.624065][T17021]  down_write+0x96/0x1f0
[  384.624071][T17021]  ? ocfs2_xattr_set+0xadd/0x11f0
[  384.624079][T17021]  ? __pfx_down_write+0x10/0x10
[  384.624085][T17021]  ? ocfs2_xattr_ibody_find+0xcb/0x7c0
[  384.624093][T17021]  ? __kmalloc_cache_noprof+0x3e2/0x700
[  384.624105][T17021]  ocfs2_xattr_set+0xadd/0x11f0
[  384.624119][T17021]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  384.624126][T17021]  ? kernel_text_address+0xa5/0xe0
[  384.624139][T17021]  ? stack_depot_save_flags+0x40/0x860
[  384.624147][T17021]  ? posix_xattr_acl+0x93/0xc0
[  384.624156][T17021]  ? evm_protect_xattr+0x4d4/0xa90
[  384.624164][T17021]  ? __pfx_evm_protect_xattr+0x10/0x10
[  384.624171][T17021]  ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10
[  384.624181][T17021]  __vfs_setxattr+0x43c/0x480
[  384.624190][T17021]  __vfs_setxattr_noperm+0x12d/0x660
[  384.624198][T17021]  vfs_setxattr+0x16b/0x2f0
[  384.624205][T17021]  ? __pfx_vfs_setxattr+0x10/0x10
[  384.624211][T17021]  ? sb_start_write+0x114/0x1c0
[  384.624219][T17021]  ? mnt_want_write_file+0x164/0x200
[  384.624227][T17021]  file_setxattr+0x1da/0x2b0
[  384.624234][T17021]  path_setxattrat+0x327/0x3a0
[  384.624243][T17021]  ? __pfx_path_setxattrat+0x10/0x10
[  384.624250][T17021]  ? do_futex+0x333/0x420
[  384.624264][T17021]  __x64_sys_fsetxattr+0xbc/0xe0
[  384.624271][T17021]  do_syscall_64+0xfa/0xfa0
[  384.624281][T17021]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.624287][T17021]  ? asm_sysvec_call_function_single+0x1a/0x20
[  384.624295][T17021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.624302][T17021] RIP: 0033:0x7f8351b8f7c9
[  384.624310][T17021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  384.624317][T17021] RSP: 002b:00007f8352ac9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  384.624325][T17021] RAX: ffffffffffffffda RBX: 00007f8351de5fa0 RCX: 00007f8351b8f7c9
[  384.624331][T17021] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000000000000004
[  384.624335][T17021] RBP: 00007f8351bf297f R08: 0000000000000001 R09: 0000000000000000
[  384.624340][T17021] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  384.624344][T17021] R13: 00007f8351de6038 R14: 00007f8351de5fa0 R15: 00007fffb1b70cf8
[  384.624351][T17021]  </TASK>
[  384.637620][T14982] udevd[14982]: symlink '../../loop7' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:7' failed: Read-only file system
[  384.639293][    C1] hpet: Lost 9 RTC interrupts
[  384.746768][    C1] hpet: Lost 6 RTC interrupts
[  384.874005][T12519] ocfs2: Unmounting device (7,7) on (node local)
[  385.406556][   T26] hfsplus: b-tree write err: -5, ino 4
[  386.035613][ T5201] Bluetooth: hci1: command 0x0406 tx timeout
[  386.902333][ T5642] net_ratelimit: 29 callbacks suppressed
[  386.902352][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  387.030274][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  387.148278][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  387.265592][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  387.383548][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  387.511573][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  387.629200][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  387.746875][   T12] bond1: (slave lo): failed to get link speed/duplex
[  387.875179][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  387.992822][ T5642] bond1: (slave lo): failed to get link speed/duplex
[  392.313693][   T13] net_ratelimit: 35 callbacks suppressed
[  392.313711][   T13] bond1: (slave lo): failed to get link speed/duplex
[  392.431393][   T13] bond1: (slave lo): failed to get link speed/duplex
[  392.549086][   T13] bond1: (slave lo): failed to get link speed/duplex
[  392.666755][   T13] bond1: (slave lo): failed to get link speed/duplex
[  392.784245][   T13] bond1: (slave lo): failed to get link speed/duplex
[  392.902000][   T13] bond1: (slave lo): failed to get link speed/duplex
[  393.019651][   T13] bond1: (slave lo): failed to get link speed/duplex
[  393.137380][   T13] bond1: (slave lo): failed to get link speed/duplex
[  393.265547][   T13] bond1: (slave lo): failed to get link speed/duplex
[  393.383182][   T13] bond1: (slave lo): failed to get link speed/duplex
