last executing test programs:

3.519508587s ago: executing program 0 (id=1014):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a', @ANYRESHEX=r0], 0x0)

2.794824081s ago: executing program 2 (id=1020):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0)
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0)

2.50366178s ago: executing program 2 (id=1023):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000001c0), &(0x7f0000000240)=0x4)

2.003071396s ago: executing program 1 (id=1026):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_null}]})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1.884948039s ago: executing program 2 (id=1028):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x8000)

1.845467111s ago: executing program 0 (id=1029):
r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
readv(r0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x8000000, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x9, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x11fffc, 0x3, 0x101, 0x9, 0x80004, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x0, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1009, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x918)

1.627812588s ago: executing program 0 (id=1031):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x1, 0x5a2, &(0x7f00000003c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1.54027305s ago: executing program 3 (id=1032):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)

1.444444414s ago: executing program 2 (id=1033):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x9}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000480)=ANY=[], 0x8)
sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0)

1.388643186s ago: executing program 0 (id=1034):
r0 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x2f, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffe, 0x6, 0x0, 0x2, 0x0, 0xdb27, 0x0, 0x80, 0x5, 0xa000, 0xfff, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

1.284159379s ago: executing program 1 (id=1035):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x11)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x101042, 0x155)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

1.234674691s ago: executing program 0 (id=1036):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0))
ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={0x0, 0x2e})

977.263169ms ago: executing program 3 (id=1037):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000001c0), &(0x7f0000000240)=0x4)

969.733819ms ago: executing program 0 (id=1045):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x0, &(0x7f0000009780), 0x1, 0x9798, &(0x7f000000cd80)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2={0x2000000, [{0x0, 0x6}, {0x0, 0x5}]}, 0x14, 0x0)
listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)

648.380379ms ago: executing program 1 (id=1038):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1})

625.0314ms ago: executing program 2 (id=1039):
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00')
fchdir(r1)
landlock_restrict_self(r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)

465.980995ms ago: executing program 3 (id=1040):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x2000c850, 0x0, 0x0)

392.216927ms ago: executing program 2 (id=1041):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40011161, 0x0)

351.582719ms ago: executing program 1 (id=1042):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='-', @ANYRESHEX=r2], 0x27)

297.726081ms ago: executing program 3 (id=1043):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f00000004c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tw'], 0xa)

130.710256ms ago: executing program 1 (id=1044):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
pipe2(&(0x7f0000000040), 0x4880)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)

130.503546ms ago: executing program 3 (id=1046):
r0 = fanotify_init(0x1, 0x2)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x455, 0x40000008, r1, 0x0)
fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0)
fanotify_mark(r0, 0x80, 0x20, r1, 0x0)

8.68217ms ago: executing program 3 (id=1047):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002040)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000004e00)={0x0, 0x0, &(0x7f0000004dc0)={&(0x7f0000004d80)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x808)

0s ago: executing program 1 (id=1048):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f00000006c0)={[{@nojournal_checksum}, {@lazytime}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0x1, 0x551, &(0x7f0000000cc0)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x1261, 0x0)

kernel console output (not intermixed with test programs):

bread(block 73) failed
[  122.768168][   T28] audit: type=1326 audit(1779544414.192:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6503 comm="syz.2.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762879ce59 code=0x7ffc0000
[  122.944710][ T5779] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  123.326535][ T6534] loop1: detected capacity change from 0 to 128
[  123.563634][ T6541] syz.1.264: attempt to access beyond end of device
[  123.563634][ T6541] loop1: rw=2049, sector=145, nr_sectors = 376 limit=128
[  123.895299][ T1136] kworker/u4:5: attempt to access beyond end of device
[  123.895299][ T1136] loop1: rw=1, sector=521, nr_sectors = 520 limit=128
[  124.068081][ T5762] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  124.106226][ T6556] Illegal XDP return value 4294967274 on prog  (id 18) dev syz_tun, expect packet loss!
[  124.287452][ T5762] usb 3-1: Using ep0 maxpacket: 8
[  124.312131][ T5762] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  124.331004][ T5762] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  124.354968][ T5762] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  124.383802][ T5762] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  124.408273][ T5762] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  124.436212][ T5762] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  124.480908][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.716963][ T5762] usb 3-1: GET_CAPABILITIES returned 0
[  124.725489][ T5762] usbtmc 3-1:16.0: can't read capabilities
[  124.747422][  T786] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  124.955232][  T786] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  124.988410][  T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.018713][  T786] usb 1-1: Product: syz
[  125.022969][  T786] usb 1-1: Manufacturer: syz
[  125.035473][ T5812] usb 3-1: USB disconnect, device number 4
[  125.051779][  T786] usb 1-1: SerialNumber: syz
[  125.083418][  T786] usb 1-1: config 0 descriptor??
[  125.560694][  T786] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0)
[  125.589218][  T786] usb 1-1: Firmware version (0.0) predates our first public release.
[  125.617423][  T786] usb 1-1: Please update to version 0.2 or newer
[  125.769991][ T6587] loop1: detected capacity change from 0 to 64
[  125.819235][ T6587] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  125.873148][  T786] usb 1-1: USB disconnect, device number 4
[  126.403303][ T6603] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0
[  126.469631][ T6583] tipc: Started in network mode
[  126.474928][ T6583] tipc: Node identity 0101010101010101, cluster identity 4711
[  126.517414][ T6583] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  126.775051][ T6609] loop0: detected capacity change from 0 to 4096
[  127.029232][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'.
[  127.094595][ T6621] loop1: detected capacity change from 0 to 128
[  127.141140][   T28] kauditd_printk_skb: 14 callbacks suppressed
[  127.141156][   T28] audit: type=1800 audit(1779544419.342:28): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.292" name="file1" dev="loop0" ino=0 res=0 errno=0
[  127.555326][ T6623] loop3: detected capacity change from 0 to 8192
[  127.611254][ T6623] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  127.674614][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'.
[  128.420150][ T6650] loop1: detected capacity change from 0 to 2048
[  128.451902][ T6650] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.559078][ T6650] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24)
[  128.620319][ T6652] loop2: detected capacity change from 0 to 256
[  129.360053][ T6670] loop1: detected capacity change from 0 to 64
[  129.556811][ T6657] loop2: detected capacity change from 0 to 32768
[  129.632742][ T6657] JBD2: Ignoring recovery information on journal
[  129.744086][ T6657] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  130.068668][ T5776] ocfs2: Unmounting device (7,2) on (node local)
[  130.765994][ T6697] loop2: detected capacity change from 0 to 1024
[  130.866562][ T6697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  130.923155][ T6697] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.979054][ T6697] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.331: lblock 3 mapped to illegal pblock 3 (length 1)
[  131.014993][ T6697] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  131.089203][ T6697] EXT4-fs (loop2): This should not happen!! Data will be lost
[  131.089203][ T6697] 
[  131.132095][ T6708] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.331: Freeing blocks not in datazone - block = 3, count = 1
[  131.293654][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  131.516672][ T6721] loop2: detected capacity change from 0 to 512
[  131.575498][ T6721] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  131.602196][ T6721] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  131.682875][ T6721] EXT4-fs (loop2): 1 truncate cleaned up
[  131.703012][   T11] Bluetooth: hci4: Frame reassembly failed (-84)
[  131.731224][ T6721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.767895][ T6727] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2
[  131.873606][   T28] audit: type=1326 audit(1779544424.072:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.1.344" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff56319ce59 code=0x0
[  131.970198][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.984867][ T6715] loop0: detected capacity change from 0 to 32768
[  132.046069][ T6715] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  132.115285][ T6715] XFS (loop0): Ending clean mount
[  132.270317][ T5777] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  132.800692][ T6758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.351'.
[  132.850237][ T6760] loop1: detected capacity change from 0 to 2048
[  132.953289][ T6763] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  133.127165][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  133.134408][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  133.385124][ T6774] vlan2: entered allmulticast mode
[  133.421029][ T6774] syz_tun: entered allmulticast mode
[  133.481536][ T6777] loop0: detected capacity change from 0 to 1024
[  133.568778][ T6777] hfsplus: bad catalog entry type
[  133.631691][ T1136] hfsplus: b-tree write err: -5, ino 25
[  133.647653][ T1136] hfsplus: b-tree write err: -5, ino 4
[  133.658313][ T1136] hfsplus: b-tree write err: -5, ino 2
[  133.664616][ T1136] hfsplus: b-tree write err: -5, ino 26
[  133.757559][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  133.948090][ T6784] loop0: detected capacity change from 0 to 2048
[  134.086969][ T6784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.211803][ T6784] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  134.257915][ T6784] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28
[  134.271044][ T6802] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  134.319466][ T6802] EXT4-fs (loop0): This should not happen!! Data will be lost
[  134.319466][ T6802] 
[  134.344297][ T6784] EXT4-fs (loop0): This should not happen!! Data will be lost
[  134.344297][ T6784] 
[  134.377947][ T6802] EXT4-fs (loop0): Total free blocks count 0
[  134.384018][ T6802] EXT4-fs (loop0): Free/Dirty block details
[  134.421877][ T6784] EXT4-fs (loop0): Total free blocks count 0
[  134.446154][ T6784] EXT4-fs (loop0): Free/Dirty block details
[  134.477724][ T6802] EXT4-fs (loop0): free_blocks=66060288
[  134.958647][ T6794] loop3: detected capacity change from 0 to 32768
[  135.022008][ T6794] 
[  135.022008][ T6794]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.022008][ T6794] 
[  135.169185][ T6794] 
[  135.169185][ T6794]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.169185][ T6794] 
[  135.208923][ T6794] 
[  135.208923][ T6794]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.208923][ T6794] 
[  135.244917][ T6794] 
[  135.244917][ T6794]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.244917][ T6794] 
[  135.269147][ T6794] 
[  135.269147][ T6794]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.269147][ T6794] 
[  135.325043][  T111] 
[  135.325043][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.325043][  T111] 
[  135.365823][ T6826] 
[  135.365823][ T6826]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.365823][ T6826] 
[  135.418014][ T6826] 
[  135.418014][ T6826]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.418014][ T6826] 
[  135.435646][ T6826] 
[  135.435646][ T6826]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.435646][ T6826] 
[  135.487333][ T6826] 
[  135.487333][ T6826]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.487333][ T6826] 
[  135.515614][ T6826] 
[  135.515614][ T6826]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.515614][ T6826] 
[  135.579117][  T112] 
[  135.579117][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.579117][  T112] 
[  135.591931][ T6832] loop1: detected capacity change from 0 to 4096
[  135.699112][ T5779] 
[  135.699112][ T5779]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.699112][ T5779] 
[  135.744936][ T5779] 
[  135.744936][ T5779]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.744936][ T5779] 
[  135.894706][ T6840] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only
[  135.929331][ T6840] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  135.993283][ T6840] overlayfs: failed to get uuid (99/file2, err=-13); falling back to uuid=null.
[  136.125116][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'.
[  136.146494][ T6845] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  136.386937][ T6857] loop0: detected capacity change from 0 to 1024
[  137.070048][ T6878] loop1: detected capacity change from 0 to 164
[  137.110743][ T6876] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000)
[  137.568338][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'.
[  137.594198][ T6890] netlink: 56 bytes leftover after parsing attributes in process `syz.1.406'.
[  137.665546][   T28] audit: type=1326 audit(1779544429.862:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584679ce59 code=0x7ffc0000
[  137.747068][   T28] audit: type=1326 audit(1779544429.902:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584679ce59 code=0x7ffc0000
[  137.818324][   T28] audit: type=1326 audit(1779544429.902:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f584679ce59 code=0x7ffc0000
[  137.867575][ T6897] input: syz0 as /devices/virtual/input/input6
[  137.874653][   T28] audit: type=1326 audit(1779544429.902:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584679ce59 code=0x7ffc0000
[  137.916988][   T28] audit: type=1326 audit(1779544429.902:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584679ce59 code=0x7ffc0000
[  137.929758][ T6881] loop0: detected capacity change from 0 to 32768
[  137.949949][   T28] audit: type=1326 audit(1779544429.902:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f584679ce59 code=0x7ffc0000
[  137.978376][   T28] audit: type=1326 audit(1779544429.902:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584679ce59 code=0x7ffc0000
[  138.016524][   T28] audit: type=1326 audit(1779544429.912:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.3.407" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584679ce59 code=0x7ffc0000
[  138.397992][ T5814] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  138.579477][ T6906] loop2: detected capacity change from 0 to 8192
[  138.597448][ T5814] usb 4-1: Using ep0 maxpacket: 8
[  138.602723][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  138.608050][ T5814] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  138.639232][ T5814] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  138.674385][ T5814] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  138.690963][ T5814] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  138.705570][ T5814] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  138.737953][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.801125][    T9] usb 1-1: Using ep0 maxpacket: 8
[  138.810175][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  138.829986][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  138.846762][    T9] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  138.883246][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.922032][    T9] usb 1-1: config 0 descriptor??
[  138.983944][ T6910] loop2: detected capacity change from 0 to 1024
[  138.998376][ T5814] usb 4-1: GET_CAPABILITIES returned 0
[  139.017394][ T5814] usbtmc 4-1:16.0: can't read capabilities
[  139.051757][ T6910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none.
[  139.246462][ T5812] usb 4-1: USB disconnect, device number 3
[  139.295139][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  139.372358][    T9] saitek 0003:06A3:0621.0002: unexpected long global item
[  139.386070][    T9] saitek 0003:06A3:0621.0002: parse failed
[  139.395745][    T9] saitek: probe of 0003:06A3:0621.0002 failed with error -22
[  139.608588][ T5812] usb 1-1: USB disconnect, device number 5
[  140.057552][ T5814] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  140.258542][ T5814] usb 3-1: Using ep0 maxpacket: 8
[  140.285323][ T5814] usb 3-1: config index 0 descriptor too short (expected 5924, got 36)
[  140.316729][ T5814] usb 3-1: config 250 has an invalid interface number: 228 but max is -1
[  140.347381][ T5814] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  140.377983][ T5814] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0
[  140.387108][ T5814] usb 3-1: config 250 has no interface number 0
[  140.408644][ T5814] usb 3-1: config 250 interface 228 has no altsetting 0
[  140.427819][ T5814] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  140.453624][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  140.484548][ T5814] usb 3-1: Product: syz
[  140.489633][ T5814] usb 3-1: SerialNumber: syz
[  140.504890][ T5814] hub 3-1:250.228: bad descriptor, ignoring hub
[  140.531705][ T5814] hub: probe of 3-1:250.228 failed with error -5
[  141.046633][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'.
[  141.103995][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'.
[  141.163016][ T6951] loop1: detected capacity change from 0 to 512
[  141.233067][ T6951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.475683][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.527279][    C1] sched: RT throttling activated
[  141.586761][ T6956] loop3: detected capacity change from 0 to 2048
[  141.618241][ T6956] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  141.667130][ T6956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.769221][ T6941] loop0: detected capacity change from 0 to 131072
[  141.779098][ T6941] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  141.785888][ T6941] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  141.797779][ T6941] F2FS-fs (loop0): invalid crc value
[  141.829559][ T6941] F2FS-fs (loop0): Found nat_bits in checkpoint
[  141.916622][ T6941] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  141.924319][ T6941] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  142.060649][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'.
[  142.082670][ T5814] usb 3-1: reset high-speed USB device number 5 using dummy_hcd
[  142.225136][ T6966] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  142.267389][ T6966] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  142.364879][ T6964] team0: Port device team_slave_0 removed
[  142.967835][ T5814] usb 3-1: USB disconnect, device number 5
[  143.123397][ T6982] tap0: tun_chr_ioctl cmd 1074025677
[  143.140238][ T6982] tap0: linktype set to 0
[  143.471978][ T6991] loop3: detected capacity change from 0 to 256
[  143.496298][ T6991] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  144.054562][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.459'.
[  144.080578][ T7012] loop2: detected capacity change from 0 to 1024
[  144.576551][ T7025] loop2: detected capacity change from 0 to 64
[  145.137135][ T7044] loop1: detected capacity change from 0 to 1024
[  145.146199][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'.
[  145.519962][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'.
[  145.562147][   T27] kernel write not supported for file /245/clear_refs (pid: 27 comm: kworker/1:1)
[  145.657380][ T2131] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  145.718640][ T7065] loop0: detected capacity change from 0 to 16
[  145.759979][ T7065] erofs: (device loop0): mounted with root inode @ nid 36.
[  145.804450][   T28] audit: type=1800 audit(1779544438.002:38): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.483" name="file1" dev="loop0" ino=86 res=0 errno=0
[  145.867398][ T2131] usb 2-1: Using ep0 maxpacket: 16
[  145.896086][ T2131] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.935649][ T2131] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.964500][ T2131] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  145.979813][ T2131] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  145.992638][ T2131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.026206][ T2131] usb 2-1: config 0 descriptor??
[  146.056134][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'.
[  146.073561][ T7072] netlink: 'syz.0.487': attribute type 1 has an invalid length.
[  146.414474][ T7081] loop3: detected capacity change from 0 to 1024
[  146.431722][ T7081] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  146.462074][ T7081] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  146.478797][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.505579][ T2131] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max
[  146.529185][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.536497][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.549022][ T7081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.597408][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.604729][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.662590][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.707350][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.714677][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.776181][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.798097][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.805436][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.830732][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.838209][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.845503][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.858038][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.860238][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.880769][ T2131] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  146.950725][ T2131] microsoft 0003:045E:07DA.0003: implement() called with n (123) > 32! (kworker/1:2)
[  146.990314][ T2131] microsoft 0003:045E:07DA.0003: No inputs registered, leaving
[  147.049496][ T2131] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  147.798997][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  148.007423][    T9] usb 3-1: Using ep0 maxpacket: 16
[  148.050097][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  148.057574][ T2131] microsoft 0003:045E:07DA.0003: no inputs found
[  148.071941][    T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  148.159214][    T9] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  148.177314][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.225725][    T9] usb 3-1: Product: syz
[  148.253037][    T9] usb 3-1: Manufacturer: syz
[  148.272401][    T9] usb 3-1: SerialNumber: syz
[  148.283823][ T7097] loop3: detected capacity change from 0 to 131072
[  148.304235][ T2131] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway
[  148.346248][ T7097] F2FS-fs (loop3): Found nat_bits in checkpoint
[  148.410258][ T2131] usb 2-1: USB disconnect, device number 2
[  148.424468][ T7097] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  148.608569][ T7097] F2FS-fs (loop3): lookup inode (7) has corrupted xattr
[  148.620512][ T7097] F2FS-fs (loop3): lookup inode (7) has corrupted xattr
[  148.706913][    T9] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  148.738305][    T9] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  148.912899][ T7108] loop0: detected capacity change from 0 to 32768
[  148.928779][ T7108] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.500 (7108)
[  148.969645][ T7108] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  149.036269][ T7108] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  149.107447][ T7108] BTRFS info (device loop0): using free space tree
[  149.247685][ T7108] BTRFS info (device loop0): enabling ssd optimizations
[  149.275148][ T7108] BTRFS info (device loop0): auto enabling async discard
[  149.327520][    T9] usb 3-1: USB disconnect, device number 6
[  149.489214][ T6251] udevd[6251]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  149.911398][ T7134] loop1: detected capacity change from 0 to 4096
[  149.992360][ T5777] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.550476][ T7141] loop1: detected capacity change from 0 to 1024
[  150.584460][ T7141] EXT4-fs: Ignoring removed nomblk_io_submit option
[  150.718735][ T7141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  150.731226][ T7141] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.798727][ T7141] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.507: lblock 0 mapped to illegal pblock 0 (length 1)
[  150.825952][ T7141] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  150.840444][ T7141] EXT4-fs (loop1): This should not happen!! Data will be lost
[  150.840444][ T7141] 
[  150.902743][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  150.942569][ T7148] ax25_connect(): syz.0.508 uses autobind, please contact jreuter@yaina.de
[  151.112128][ T2131] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  151.317543][ T2131] usb 3-1: Using ep0 maxpacket: 16
[  151.334226][ T2131] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  151.363296][ T2131] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  151.418061][ T2131] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  151.459885][ T2131] usb 3-1: config 1 interface 0 has no altsetting 0
[  151.470361][ T2131] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40
[  151.483335][ T2131] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.492224][ T2131] usb 3-1: Product: syz
[  151.502377][ T2131] usb 3-1: Manufacturer: syz
[  151.507136][ T2131] usb 3-1: SerialNumber: syz
[  151.676349][ T7167] loop1: detected capacity change from 0 to 512
[  151.728159][ T7167] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.515: corrupted in-inode xattr: e_value out of bounds
[  151.756346][ T2131] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8
[  151.805894][ T7167] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.515: couldn't read orphan inode 15 (err -117)
[  151.849765][ T7167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.925970][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.992342][   T27] usb 3-1: USB disconnect, device number 7
[  152.011175][   T27] usblp0: removed
[  152.077887][ T2131] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  152.273339][ T2131] usb 4-1: Using ep0 maxpacket: 16
[  152.289859][ T2131] usb 4-1: unable to get BOS descriptor or descriptor too short
[  152.300450][ T2131] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  152.335397][ T2131] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  152.345118][ T2131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.353815][ T2131] usb 4-1: Product: syz
[  152.358104][ T2131] usb 4-1: Manufacturer: syz
[  152.362920][ T2131] usb 4-1: SerialNumber: syz
[  152.596202][ T5814] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  152.615082][ T2131] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  152.624873][ T2131] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  152.790682][ T5814] usb 2-1: Using ep0 maxpacket: 16
[  152.803510][ T5814] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.828727][ T5814] usb 2-1: config 0 interface 0 has no altsetting 0
[  152.835620][ T5814] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  152.851146][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.871039][ T5814] usb 2-1: config 0 descriptor??
[  153.069533][ T2131] usb 4-1: USB disconnect, device number 4
[  153.156500][ T6251] udevd[6251]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  153.354062][ T5814] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  153.737363][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  153.804448][ T5814] usb 2-1: USB disconnect, device number 3
[  153.929003][ T7210] loop2: detected capacity change from 0 to 512
[  153.936411][ T7210] EXT4-fs: Ignoring removed nobh option
[  153.957340][    T9] usb 1-1: Using ep0 maxpacket: 32
[  153.981909][    T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  153.991155][ T7212] cgroup: fork rejected by pids controller in /syz3
[  153.991509][    T9] usb 1-1: config 0 has no interface number 0
[  154.012389][    T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  154.024958][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.033632][    T9] usb 1-1: Product: syz
[  154.037911][    T9] usb 1-1: Manufacturer: syz
[  154.042551][    T9] usb 1-1: SerialNumber: syz
[  154.048020][ T7210] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  154.062128][    T9] usb 1-1: config 0 descriptor??
[  154.073620][ T7210] EXT4-fs (loop2): orphan cleanup on readonly fs
[  154.091370][    T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  154.115564][ T7210] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters
[  154.179222][ T7210] EXT4-fs (loop2): Remounting filesystem read-only
[  154.186607][ T7210] Quota error (device loop2): write_blk: dquota write failed
[  154.203085][ T7210] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  154.214045][ T7210] EXT4-fs (loop2): 1 truncate cleaned up
[  154.225819][ T7210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  154.333693][    T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  154.382774][    T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  154.598106][ T5814] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  154.771060][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  154.774385][ T2131] usb 1-1: USB disconnect, device number 6
[  154.794429][ T5814] usb 3-1: Using ep0 maxpacket: 16
[  154.816090][ T2131] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  154.845245][ T5814] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.873061][ T5814] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.888136][ T2131] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  154.908733][ T5814] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  154.923989][ T2131] quatech2 1-1:0.51: device disconnected
[  154.936679][ T5814] usb 3-1: config 0 interface 0 has no altsetting 0
[  154.944757][ T5814] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  154.954191][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.972921][ T5814] usb 3-1: config 0 descriptor??
[  155.034072][   T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.155466][   T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.263325][   T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.403035][   T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.724269][ T5814] usb 3-1: USB disconnect, device number 8
[  156.070301][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  156.083311][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  156.091988][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  156.105089][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  156.120833][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  156.129435][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  156.395652][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.495768][ T7250] Bluetooth: MGMT ver 1.22
[  156.862854][ T7259] loop0: detected capacity change from 0 to 4096
[  156.887373][ T7263] netlink: 'syz.2.551': attribute type 5 has an invalid length.
[  156.907463][ T7259] EXT4-fs (loop0): Test dummy encryption mode enabled
[  156.931181][ T7259] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[  156.945455][ T7263] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  156.954338][ T7263] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  156.963402][ T7263] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  156.972346][ T7263] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  156.981390][ T7259] System zones: 0-5
[  156.998774][ T7263] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.007843][ T7263] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.016775][ T7263] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.021903][ T7259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.028275][ T7263] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.256951][ T7259] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  157.362003][ T7259] EXT4-fs error (device loop0): __ext4_remount:6756: comm syz.0.549: Abort forced by user
[  157.403700][ T7259] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  157.576872][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.847910][ T7270] loop2: detected capacity change from 0 to 8192
[  157.887797][ T7270] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  157.954418][ T7270] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  157.965180][ T7270] REISERFS (device loop2): using journaled data mode
[  157.973237][ T7270] reiserfs: using flush barriers
[  157.999144][ T7270] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  158.020002][ T7270] REISERFS (device loop2): checking transaction log (loop2)
[  158.092783][ T7237] chnl_net:caif_netlink_parms(): no params data found
[  158.126773][ T7270] REISERFS (device loop2): Using r5 hash to sort names
[  158.173858][ T7270] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  158.201625][ T7270] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  158.237640][ T5775] Bluetooth: hci3: command tx timeout
[  158.540167][ T7237] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.559490][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.580512][ T7237] bridge_slave_0: entered allmulticast mode
[  158.598182][ T7237] bridge_slave_0: entered promiscuous mode
[  158.619808][ T7292] hsr0: entered promiscuous mode
[  158.627744][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'.
[  158.669564][ T7293] hsr_slave_0: left promiscuous mode
[  158.694125][ T7293] hsr_slave_1: left promiscuous mode
[  158.855121][ T7293] hsr0 (unregistering): left promiscuous mode
[  158.913210][ T7237] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.927407][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.948166][ T7237] bridge_slave_1: entered allmulticast mode
[  158.955679][ T7237] bridge_slave_1: entered promiscuous mode
[  159.320507][ T7237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  159.376200][ T7237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.522628][   T59] hsr_slave_0: left promiscuous mode
[  159.593986][ T7297] loop2: detected capacity change from 0 to 32768
[  159.621647][   T59] hsr_slave_1: left promiscuous mode
[  159.646939][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.658492][ T7297] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  159.699941][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.764982][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.799180][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.831133][   T59] bridge_slave_1: left allmulticast mode
[  159.857318][   T59] bridge_slave_1: left promiscuous mode
[  159.868189][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.878370][ T7297] (syz.2.555,7297,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  159.979270][   T59] bridge_slave_0: left allmulticast mode
[  159.985010][   T59] bridge_slave_0: left promiscuous mode
[  160.018174][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.086365][ T5776] ocfs2: Unmounting device (7,2) on (node local)
[  160.258249][   T59] veth1_macvtap: left promiscuous mode
[  160.264696][   T59] veth0_macvtap: left promiscuous mode
[  160.277623][   T59] veth1_vlan: left promiscuous mode
[  160.283402][   T59] veth0_vlan: left promiscuous mode
[  160.332136][ T5775] Bluetooth: hci3: command tx timeout
[  160.459594][ T7317] loop2: detected capacity change from 0 to 1024
[  160.615008][ T7317] hfsplus: xattr search failed
[  160.881685][ T7310] loop0: detected capacity change from 0 to 32768
[  160.988795][ T7322] loop2: detected capacity change from 0 to 2048
[  161.025872][ T7310] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  161.035796][ T7310] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  161.102307][ T7322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.172618][ T7322] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.243430][ T7310] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  161.261928][ T5762] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  161.271496][ T5762] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  161.332697][ T5762] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 61ms
[  161.349659][ T5762] gfs2: fsid=syz:syz.0: jid=0: Done
[  161.356545][ T7310] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  161.538741][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.848011][ T7310] gfs2: fsid=syz:syz.0: found 1 quota changes
[  161.963593][ T7310] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  161.963593][ T7310]   inode = 11 2339
[  161.963593][ T7310]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421
[  162.020225][ T7310] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  162.073042][ T7310] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:7310 [syz.0.560] gfs2_quota_sync+0x411/0x5a0
[  162.121453][ T7310] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  162.153034][ T7310] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  162.236385][ T7310] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  162.267543][ T7310] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  162.310659][ T7310] gfs2: fsid=syz:syz.0: File system withdrawn
[  162.316849][ T7310] CPU: 1 PID: 7310 Comm: syz.0.560 Not tainted syzkaller #0
[  162.324193][ T7310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  162.334352][ T7310] Call Trace:
[  162.337697][ T7310]  <TASK>
[  162.340692][ T7310]  dump_stack_lvl+0x18c/0x250
[  162.345444][ T7310]  ? kobject_uevent_env+0x363/0x8b0
[  162.350719][ T7310]  ? show_regs_print_info+0x20/0x20
[  162.355984][ T7310]  ? load_image+0x420/0x420
[  162.360547][ T7310]  ? kobject_uevent_env+0x363/0x8b0
[  162.365796][ T7310]  gfs2_withdraw+0xb24/0x13d0
[  162.370539][ T7310]  ? gfs2_lm+0x240/0x240
[  162.374824][ T7310]  ? gfs2_consist_inode_i+0xf5/0x110
[  162.380151][ T7310]  gfs2_inode_refresh+0xc50/0x1160
[  162.385355][ T7310]  ? gfs2_inode_metasync+0xf0/0xf0
[  162.390552][ T7310]  ? gfs2_glock_nq+0xd4f/0x1420
[  162.395492][ T7310]  gfs2_instantiate+0x162/0x220
[  162.400429][ T7310]  gfs2_glock_wait+0x1d4/0x2a0
[  162.405278][ T7310]  do_sync+0x4c6/0xe50
[  162.409414][ T7310]  ? gfs2_quota_sync+0x411/0x5a0
[  162.414428][ T7310]  ? bh_get+0x760/0x760
[  162.418659][ T7310]  ? gfs2_quota_sync+0x31a/0x5a0
[  162.423675][ T7310]  ? gfs2_quota_sync+0x411/0x5a0
[  162.428768][ T7310]  ? do_raw_spin_unlock+0x121/0x230
[  162.434063][ T7310]  ? do_raw_spin_unlock+0x121/0x230
[  162.439353][ T7310]  gfs2_quota_sync+0x411/0x5a0
[  162.444374][ T7310]  gfs2_sync_fs+0x4c/0xb0
[  162.448767][ T7310]  sync_filesystem+0xea/0x220
[  162.453490][ T7310]  gfs2_reconfigure+0xbb/0xb10
[  162.458320][ T7310]  reconfigure_super+0x21e/0x8a0
[  162.463313][ T7310]  path_mount+0xd2f/0xff0
[  162.467695][ T7310]  __se_sys_mount+0x2e7/0x3d0
[  162.472414][ T7310]  ? __x64_sys_mount+0xc0/0xc0
[  162.477213][ T7310]  ? lockdep_hardirqs_on+0x98/0x150
[  162.482445][ T7310]  ? __x64_sys_mount+0x20/0xc0
[  162.487237][ T7310]  do_syscall_64+0x55/0xb0
[  162.491690][ T7310]  ? clear_bhb_loop+0x40/0x90
[  162.496407][ T7310]  ? clear_bhb_loop+0x40/0x90
[  162.501132][ T7310]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  162.507059][ T7310] RIP: 0033:0x7f8a7b59ce59
[  162.511505][ T7310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  162.531143][ T7310] RSP: 002b:00007f8a7c376028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  162.539769][ T7310] RAX: ffffffffffffffda RBX: 00007f8a7b815fa0 RCX: 00007f8a7b59ce59
[  162.547772][ T7310] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000
[  162.555787][ T7310] RBP: 00007f8a7b632d6f R08: 0000000000000000 R09: 0000000000000000
[  162.563789][ T7310] R10: 0000000002390024 R11: 0000000000000246 R12: 0000000000000000
[  162.571791][ T7310] R13: 00007f8a7b816038 R14: 00007f8a7b815fa0 R15: 00007ffe347e1f58
[  162.579813][ T7310]  </TASK>
[  162.599235][ T5775] Bluetooth: hci3: command tx timeout
[  162.601056][ T7310] gfs2: unable to remount read-write
[  163.284250][   T59] team0 (unregistering): Port device team_slave_1 removed
[  163.448972][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.680693][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.862512][ T7348] loop2: detected capacity change from 0 to 4096
[  163.911637][ T7348] EXT4-fs (loop2): Test dummy encryption mode enabled
[  163.958376][ T7348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.225410][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.566910][ T7354] loop2: detected capacity change from 0 to 128
[  164.612818][ T7354] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  164.645465][ T5775] Bluetooth: hci3: command tx timeout
[  164.656633][ T7354] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  164.708306][ T7354] EXT4-fs (loop2): shut down requested (2)
[  164.823746][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  164.823902][   T59] bond0 (unregistering): Released all slaves
[  165.240412][ T7237] team0: Port device team_slave_0 added
[  165.278009][ T7237] team0: Port device team_slave_1 added
[  165.382366][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.407873][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.463897][ T7237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.478073][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.485090][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.523678][ T7237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.547306][ T7363] loop0: detected capacity change from 0 to 512
[  165.632763][ T7363] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.580: bad orphan inode 13
[  165.757640][ T7363] ext4_test_bit(bit=12, block=4) = 1
[  165.763034][ T7363] is_bad_inode(inode)=0
[  165.819650][ T7363] NEXT_ORPHAN(inode)=0
[  165.823851][ T7363] max_ino=32
[  165.827141][ T7363] i_nlink=1
[  165.871898][ T7237] hsr_slave_0: entered promiscuous mode
[  165.879116][ T7363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.911902][ T7237] hsr_slave_1: entered promiscuous mode
[  165.924471][ T7237] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.946997][ T7237] Cannot create hsr debugfs directory
[  166.004599][ T7363] EXT4-fs warning (device loop0): dx_probe:845: inode #2: comm syz.0.580: Hash code is SIPHASH, but hash not in dirent
[  166.077155][ T7363] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.580: Corrupt directory, running e2fsck is recommended
[  166.116638][ T7363] EXT4-fs warning (device loop0): dx_probe:845: inode #2: comm syz.0.580: Hash code is SIPHASH, but hash not in dirent
[  166.159150][ T7363] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.580: Corrupt directory, running e2fsck is recommended
[  166.222988][ T7363] syz.0.580 (pid 7363) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  166.255766][ T7363] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  166.396659][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.677545][ T5762] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  166.873398][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  166.902321][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64
[  166.946388][ T5762] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  166.980558][ T5762] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.07
[  166.990789][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.041509][ T5762] usb 2-1: config 0 descriptor??
[  167.070370][ T7382] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  167.518435][ T7237] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  167.543463][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x6
[  167.575763][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0xd
[  167.598259][ T7237] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  167.605162][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  167.622897][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  167.642997][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  167.651773][ T7237] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  167.667668][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  167.682619][ T7237] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  167.699940][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  167.745552][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  167.778661][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  167.786379][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  167.826440][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  167.843557][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  167.859673][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  167.899493][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  167.907158][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  167.960114][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  168.005504][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  168.038719][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  168.051428][ T7237] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.076366][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  168.103130][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  168.130168][ T5762] pantherlord 0003:0F30:0111.0006: unknown main item tag 0x0
[  168.157966][ T7237] 8021q: adding VLAN 0 to HW filter on device team0
[  168.180366][ T5762] pantherlord 0003:0F30:0111.0006: hidraw0: USB HID v0.09 Device [HID 0f30:0111] on usb-dummy_hcd.1-1/input0
[  168.209099][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.216334][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.267139][ T5762] pantherlord 0003:0F30:0111.0006: no output reports found
[  168.298661][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.305866][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.333806][ T5762] usb 2-1: USB disconnect, device number 4
[  168.519672][ T7419] fido_id[7419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  168.906360][ T7436] sctp: [Deprecated]: syz.2.597 (pid 7436) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.906360][ T7436] Use struct sctp_sack_info instead
[  168.979947][ T7442] sctp: [Deprecated]: syz.2.597 (pid 7442) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.979947][ T7442] Use struct sctp_sack_info instead
[  169.025208][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.599'.
[  169.273614][ T7237] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.470882][ T7237] veth0_vlan: entered promiscuous mode
[  169.521483][ T7237] veth1_vlan: entered promiscuous mode
[  169.603904][ T7237] veth0_macvtap: entered promiscuous mode
[  169.644933][ T7237] veth1_macvtap: entered promiscuous mode
[  169.692606][ T7460] loop1: detected capacity change from 0 to 1024
[  169.716858][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.747745][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.781740][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.817857][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.838874][ T7460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  169.847878][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.892992][ T7460] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.907597][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.919608][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.931493][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.942467][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.952707][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.970355][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.985353][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.996217][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.027020][ T7460] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm syz.1.604: lblock 8 mapped to illegal pblock 8 (length 8)
[  170.059044][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.125500][ T7237] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.135553][ T7460] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.604: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  170.188445][ T7237] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.209312][ T7237] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.223105][ T7237] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.281728][ T7472] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.604: lblock 0 mapped to illegal pblock 0 (length 1)
[  170.302598][ T7468] loop0: detected capacity change from 0 to 8192
[  170.371780][ T7472] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  170.380629][ T7468] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  170.397766][ T7472] EXT4-fs (loop1): This should not happen!! Data will be lost
[  170.397766][ T7472] 
[  170.487454][ T7468] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  170.517545][ T7468] REISERFS (device loop0): using ordered data mode
[  170.524148][ T7468] reiserfs: using flush barriers
[  170.543025][ T4047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.581589][ T4047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.592645][ T7468] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  170.653431][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  170.699855][ T7468] REISERFS (device loop0): checking transaction log (loop0)
[  170.734899][ T4047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.767313][ T4047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.803334][ T7468] REISERFS (device loop0): Using rupasov hash to sort names
[  170.835032][ T7468] REISERFS (device loop0): using 3.5.x disk format
[  170.860377][ T7468] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  170.910369][ T7468] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  170.925074][ T7468] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  170.941206][ T7468] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  170.960683][ T7468] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  171.131967][ T7468] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  171.154247][ T7468] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  171.216998][ T7468] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  171.496198][ T7493] loop3: detected capacity change from 0 to 4096
[  171.658527][ T7501] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  171.762730][   T28] audit: type=1800 audit(1779544463.952:39): pid=7493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.610" name="file1" dev="loop3" ino=15 res=0 errno=0
[  171.778255][ T2131] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  172.009272][ T2131] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.044351][ T2131] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  172.088516][ T2131] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  172.103573][ T2131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  172.130531][ T2131] usb 3-1: SerialNumber: syz
[  172.407795][ T2131] usb 3-1: 0:2 : does not exist
[  172.461986][ T2131] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  172.500605][ T2131] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  172.577530][ T2131] usb 3-1: 5:0: failed to get current value for ch 15 (-22)
[  172.634571][ T2131] usb 3-1: USB disconnect, device number 9
[  172.883737][ T6251] udevd[6251]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.134769][ T7530] loop1: detected capacity change from 0 to 1024
[  173.185885][ T7530] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  173.258797][ T7530] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  173.309660][ T7530] EXT4-fs (loop1): orphan cleanup on readonly fs
[  173.316875][ T7530] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.621: Freeing blocks not in datazone - block = 0, count = 4096
[  173.416250][ T7544] loop8: detected capacity change from 0 to 8
[  173.486122][ T7530] EXT4-fs (loop1): Remounting filesystem read-only
[  173.508073][ T7544] Dev loop8: unable to read RDB block 8
[  173.527016][ T7530] EXT4-fs (loop1): 1 orphan inode deleted
[  173.541723][ T7530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  173.570839][ T7544]  loop8: unable to read partition table
[  173.588188][ T7544] loop8: partition table beyond EOD, truncated
[  173.607151][ T7544] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– �) failed (rc=-5)
[  173.969328][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.206572][ T7566] loop3: detected capacity change from 0 to 256
[  175.101326][ T7595] dummy0: entered allmulticast mode
[  175.123859][ T7594] dummy0: left allmulticast mode
[  175.259924][ T7601] loop3: detected capacity change from 0 to 256
[  175.323709][ T7601] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  175.764542][ T7612] loop3: detected capacity change from 0 to 128
[  175.823930][ T7612] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  175.845387][ T7612] hpfs: filesystem error: improperly stopped
[  175.854007][ T7612] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  175.866550][ T7612] hpfs: You really don't want any checks? You are crazy...
[  175.875587][ T7612] hpfs: hpfs_map_sector(): read error
[  175.901607][ T7612] hpfs: code page support is disabled
[  175.920232][ T7612] hpfs: hpfs_map_4sectors(): unaligned read
[  175.953679][ T7612] hpfs: hpfs_map_4sectors(): unaligned read
[  175.969998][ T7612] hpfs: filesystem error: unable to find root dir
[  176.050859][ T7612] hpfs: hpfs_map_4sectors(): unaligned read
[  176.301224][ T7621] loop3: detected capacity change from 0 to 512
[  176.322553][ T7621] EXT4-fs: Ignoring removed bh option
[  176.390747][ T7621] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  176.480759][ T7621] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.655: corrupted in-inode xattr: e_value size too large
[  176.501651][ T7621] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.655: couldn't read orphan inode 15 (err -117)
[  176.553777][ T7629] syz.2.658 uses obsolete (PF_INET,SOCK_PACKET)
[  176.584455][ T7621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.721860][ T7237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.080123][ T7642] binder: 7641:7642 ioctl c0306201 200000000080 returned -14
[  177.142371][ T7644] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.667'.
[  177.433115][ T7654] sctp: [Deprecated]: syz.0.671 (pid 7654) Use of int in maxseg socket option.
[  177.433115][ T7654] Use struct sctp_assoc_value instead
[  177.784847][ T7666] hub 1-0:1.0: USB hub found
[  177.801209][ T7666] hub 1-0:1.0: 1 port detected
[  177.988963][ T7674] loop1: detected capacity change from 0 to 128
[  178.022857][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'.
[  178.857364][   T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  178.906878][ T7685] loop0: detected capacity change from 0 to 32768
[  178.965033][ T7685] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  179.039326][ T7685] XFS (loop0): Ending clean mount
[  179.062867][   T27] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  179.091822][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.112217][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.148425][ T7685] XFS (loop0): User initiated shutdown received.
[  179.154357][   T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  179.171738][ T7685] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497).  Shutting down filesystem.
[  179.203885][ T7685] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  179.211181][   T27] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  179.245674][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.281749][ T5777] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  179.285097][   T27] usb 4-1: config 0 descriptor??
[  179.497339][  T786] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  179.671240][ T7712] 9pnet: p9_errstr2errno: server reported unknown error 
[  179.720330][  T786] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  179.730803][  T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.753275][   T27] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd
[  179.768768][  T786] usb 3-1: config 0 descriptor??
[  179.778929][   T27] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  179.854056][   T27] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  179.904448][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'.
[  179.979909][ T7716] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  180.047481][  T786] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00
[  180.056005][  T786] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  180.123998][ T7719] block nbd1: NBD_DISCONNECT
[  180.166746][ T5812] usb 4-1: USB disconnect, device number 5
[  180.298637][  T786] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  180.306209][  T786] [drm] Initialized udl on minor 2
[  180.447908][  T786] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  180.475272][  T786] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  180.733664][   T27] usb 3-1: USB disconnect, device number 10
[  180.738813][ T5762] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  180.778483][ T5762] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  181.035268][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'.
[  181.095119][ T7741] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  181.104173][ T7741] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  181.110530][ T7744] input: syz0 as /devices/virtual/input/input9
[  181.113585][ T7741] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.129499][ T7741] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  181.337103][ T7747] loop3: detected capacity change from 0 to 1024
[  181.372543][ T7751] loop1: detected capacity change from 0 to 128
[  181.533451][ T7755] loop2: detected capacity change from 0 to 128
[  181.602766][ T7755] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  181.661335][ T7755] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.476717][ T7778] loop6: detected capacity change from 0 to 8
[  182.518878][ T7778] loop6: detected capacity change from 8 to 7
[  182.543165][ T7778] Dev loop6: unable to read RDB block 7
[  182.573497][ T7778]  loop6: unable to read partition table
[  182.582867][ T7778] loop6: partition table beyond EOD, truncated
[  182.594801][ T7778] loop_reread_partitions: partition scan of loop6 (°´[{BÑ·�¶žMܾ`*ÎîZ´Ç5�¡]�z(¿Ťî4+hGËpX��„Ïgm
[  182.594801][ T7778] ü òæôØ.BÊL_seÔ) failed (rc=-5)
[  182.687463][ T5137] Dev loop6: unable to read RDB block 7
[  182.703841][ T5137]  loop6: unable to read partition table
[  182.714190][ T5137] loop6: partition table beyond EOD, truncated
[  183.286704][ T7804] loop3: detected capacity change from 0 to 256
[  183.326126][ T7804] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  183.402740][   T28] audit: type=1800 audit(1779544475.602:40): pid=7804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.732" name="bus" dev="loop3" ino=1048611 res=0 errno=0
[  183.738260][ T7816] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  184.194963][ T7824] loop3: detected capacity change from 0 to 16
[  184.223718][ T7824] erofs: (device loop3): mounted with root inode @ nid 36.
[  184.621639][ T7830] loop9: detected capacity change from 0 to 1
[  184.654265][ T7830] Dev loop9: unable to read RDB block 1
[  184.683693][ T7830]  loop9: unable to read partition table
[  184.705332][ T7830] loop9: partition table beyond EOD, truncated
[  184.722400][ T7830] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  185.023417][ T7839] loop2: detected capacity change from 0 to 512
[  185.426892][ T7835] loop0: detected capacity change from 0 to 32768
[  185.459017][ T7833] loop3: detected capacity change from 0 to 32768
[  185.500601][ T7835] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  185.557542][ T7833] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  185.602341][ T7835] XFS (loop0): Ending clean mount
[  185.665874][ T7833] XFS (loop3): Ending clean mount
[  185.698018][ T5814] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 
[  185.722970][ T7833] XFS (loop3): Quotacheck needed: Please wait.
[  185.751696][ T5814] XFS (loop0): Unmount and run xfs_repair
[  185.776603][ T5814] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  185.808145][ T5814] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  185.835318][ T5814] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  185.850476][ T7833] XFS (loop3): Quotacheck: Done.
[  185.867372][ T5814] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  185.878469][ T5814] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  185.888253][ T5814] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  185.907455][ T5814] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  185.935934][ T5814] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  185.947789][ T5814] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  185.958322][ T7835] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74
[  186.028357][ T7835] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  186.066452][ T7835] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  186.137761][ T5777] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  186.268147][ T7862] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96
[  186.328200][ T7237] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  186.892942][ T7874] loop2: detected capacity change from 0 to 1024
[  187.082762][ T7874] hfsplus: catalog searching failed
[  187.104406][ T7881] sctp: [Deprecated]: syz.1.757 (pid 7881) Use of int in max_burst socket option.
[  187.104406][ T7881] Use struct sctp_assoc_value instead
[  187.204704][   T32] hfsplus: b-tree write err: -5, ino 3
[  187.243386][ T7883] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10
[  187.384733][ T7891] loop1: detected capacity change from 0 to 128
[  187.400737][ T7891] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  187.419321][ T7893] loop2: detected capacity change from 0 to 512
[  187.448743][ T7891] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.462560][ T7893] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  187.681889][   T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  188.083399][ T7907] loop1: detected capacity change from 0 to 2048
[  188.112326][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'.
[  188.171956][ T7907] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  188.227332][ T7907] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.509420][ T7918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.772'.
[  188.913414][ T7928] set_capacity_and_notify: 1 callbacks suppressed
[  188.913435][ T7928] loop2: detected capacity change from 0 to 256
[  188.988175][ T7928] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  189.047316][ T7928] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  189.093117][ T7928] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  189.224205][ T7928] exFAT-fs (loop2): error, found bogus dentry(18) beyond unused empty group(0) (start_clu : 5, cur_clu : 5)
[  189.251497][ T7928] exFAT-fs (loop2): Filesystem has been set read-only
[  189.347682][ T2131] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  189.448183][ T7923] loop3: detected capacity change from 0 to 40427
[  189.469660][ T7923] F2FS-fs (loop3): heap/no_heap options were deprecated
[  189.481922][ T7923] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff
[  189.493526][ T7923] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x77e8c
[  189.512340][ T7923] F2FS-fs (loop3): invalid crc value
[  189.525986][ T7923] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0
[  189.545705][ T7923] F2FS-fs (loop3): Found nat_bits in checkpoint
[  189.549360][ T2131] usb 2-1: Using ep0 maxpacket: 16
[  189.568309][ T2131] usb 2-1: config index 0 descriptor too short (expected 52, got 36)
[  189.588291][ T2131] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  189.615080][ T2131] usb 2-1: config 0 has no interface number 0
[  189.625267][ T2131] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  189.653223][ T7923] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650
[  189.667477][ T2131] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  189.704337][ T2131] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  189.715213][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40
[  189.746758][ T2131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.765541][ T2131] usb 2-1: Product: syz
[  189.777503][ T2131] usb 2-1: Manufacturer: syz
[  189.784109][ T2131] usb 2-1: SerialNumber: syz
[  189.800971][ T7923] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  189.816735][ T2131] usb 2-1: config 0 descriptor??
[  189.844067][ T7932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  189.862339][ T7932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  189.939441][ T7923] syz.3.775: attempt to access beyond end of device
[  189.939441][ T7923] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  190.015031][ T7923] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of f2fs_mknod+0x155/0x560
[  190.105258][ T7932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  190.121926][ T7932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  190.355915][ T7237] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0
[  190.384012][ T7237] F2FS-fs (loop3): invalid blkaddr: 1025, type: 10, run fsck to fix.
[  190.413753][ T7946] loop2: detected capacity change from 0 to 128
[  190.443775][ T7946] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  190.460143][ T7237] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0
[  190.477717][ T7237] F2FS-fs (loop3): invalid blkaddr: 514, type: 10, run fsck to fix.
[  190.491873][ T7946] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  190.541163][ T7237] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0
[  190.553900][ T7237] F2FS-fs (loop3): invalid blkaddr: 1026, type: 10, run fsck to fix.
[  190.564816][ T7941] loop0: detected capacity change from 0 to 32768
[  190.665143][ T7941] JBD2: Ignoring recovery information on journal
[  190.768263][ T2131] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  190.809128][ T2131] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  190.832125][ T7941] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  190.839673][ T7950] syz.2.785: attempt to access beyond end of device
[  190.839673][ T7950] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0
[  190.871108][ T2131] asix: probe of 2-1:0.251 failed with error -71
[  190.890943][ T2131] usb 2-1: USB disconnect, device number 5
[  190.896943][ T7950] hfs: can't find a HFS filesystem on dev nbd2
[  191.153973][ T7954] loop2: detected capacity change from 0 to 64
[  191.270786][ T5777] ocfs2: Unmounting device (7,0) on (node local)
[  191.980378][ T7976] loop0: detected capacity change from 0 to 128
[  192.595589][ T7993] loop3: detected capacity change from 0 to 512
[  192.632522][ T7993] EXT4-fs: Ignoring removed oldalloc option
[  192.687934][ T7993] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.804: invalid indirect mapped block 4294967295 (level 1)
[  192.726646][ T7993] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.804: invalid indirect mapped block 4294967295 (level 1)
[  192.744886][ T7993] EXT4-fs (loop3): 2 truncates cleaned up
[  192.755765][ T7993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.951417][ T7237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.025560][ T7981] loop2: detected capacity change from 0 to 32768
[  193.145794][ T7981] syz.2.801: attempt to access beyond end of device
[  193.145794][ T7981] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  193.241959][ T7981] lbmIODone: I/O error in JFS log
[  193.279694][ T7981] *** Log Format Error ! ***
[  193.284844][ T7981] lmLogInit: exit(-22)
[  193.322428][ T7981] lmLogOpen: exit(-22)
[  193.473940][ T8010] syz.2.801: attempt to access beyond end of device
[  193.473940][ T8010] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  193.546343][ T8010] lbmIODone: I/O error in JFS log
[  193.567314][ T8010] *** Log Format Error ! ***
[  193.587956][ T8010] lmLogInit: exit(-22)
[  193.618032][ T8010] lmLogOpen: exit(-22)
[  193.874280][ T8018] syz_tun: entered allmulticast mode
[  193.926871][ T8017] syz_tun: left allmulticast mode
[  194.101450][ T8024] loop1: detected capacity change from 0 to 1024
[  194.161249][ T8024] hfsplus: bad catalog entry type
[  194.237772][ T5814] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  194.261897][ T4047] hfsplus: b-tree write err: -5, ino 25
[  194.278151][ T4047] hfsplus: b-tree write err: -5, ino 4
[  194.283813][ T4047] hfsplus: b-tree write err: -5, ino 2
[  194.337940][ T4047] hfsplus: b-tree write err: -5, ino 26
[  194.437344][ T5814] usb 1-1: Using ep0 maxpacket: 16
[  194.450031][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.472675][ T5814] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  194.489834][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.533715][ T5814] usb 1-1: config 0 descriptor??
[  194.566219][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  194.573482][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  194.671556][ T8037] loop3: detected capacity change from 0 to 512
[  194.730417][ T8037] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.824: invalid block
[  194.760582][ T8037] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.824: invalid indirect mapped block 10 (level 1)
[  194.791479][ T8037] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.824: invalid indirect mapped block 8 (level 1)
[  194.826826][ T8037] EXT4-fs (loop3): 1 truncate cleaned up
[  194.834843][ T8037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.024082][ T5814] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0
[  195.044940][ T5814] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0
[  195.060436][ T5814] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0
[  195.069343][ T7237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.075941][ T5814] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0
[  195.089227][ T5814] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0
[  195.117803][ T5814] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  195.223468][    C1] usb 1-1: input irq status -75 received
[  195.500884][ T8055] loop1: detected capacity change from 0 to 512
[  195.519303][ T8055] EXT4-fs: Ignoring removed bh option
[  195.547607][ T8055] EXT4-fs (loop1): Test dummy encryption mode enabled
[  195.562796][ T8055] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  195.579207][ T5814] usb 1-1: USB disconnect, device number 7
[  195.609757][ T8055] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  195.655849][ T8055] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.831: inode has both inline data and extents flags
[  195.669917][ T8055] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.831: couldn't read orphan inode 15 (err -117)
[  195.691797][ T8055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.816875][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.255959][ T8074] loop0: detected capacity change from 0 to 64
[  196.313083][ T8074] Trying to free block not in datazone
[  196.427382][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  196.636650][    T9] usb 2-1: Using ep0 maxpacket: 8
[  196.656322][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  196.701630][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  196.727551][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  196.749936][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  196.767531][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  196.776696][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.028669][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  197.042560][    T9] usbtmc 2-1:16.0: can't read capabilities
[  197.285895][   T27] usb 2-1: USB disconnect, device number 6
[  197.313337][ T8092] loop3: detected capacity change from 0 to 4096
[  197.324366][ T8092] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  197.341380][ T8092] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  197.390354][ T8092] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  197.420988][ T8092] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  197.427406][ T8086] loop0: detected capacity change from 0 to 32768
[  197.459810][ T8092] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  197.489202][ T8092] ntfs: volume version 3.1.
[  197.503734][ T8086] JBD2: Ignoring recovery information on journal
[  197.510369][ T8092] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  197.525872][ T8092] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  197.551553][ T8092] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  197.584753][ T8092] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[  197.626662][ T8086] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  197.660740][ T8092] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2.
[  197.929176][ T8086] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature 
[  198.019524][ T8086] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  198.045988][ T8086] OCFS2: File system is now read-only.
[  198.082379][ T8086] (syz.0.841,8086,0):ocfs2_search_chain:1761 ERROR: status = -30
[  198.101057][ T8086] (syz.0.841,8086,0):ocfs2_search_chain:1871 ERROR: status = -30
[  198.110845][ T8086] (syz.0.841,8086,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  198.123208][ T8086] (syz.0.841,8086,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  198.132135][ T8086] (syz.0.841,8086,0):ocfs2_claim_metadata:2018 ERROR: status = -30
[  198.140662][ T8086] (syz.0.841,8086,0):ocfs2_claim_metadata:2031 ERROR: status = -30
[  198.149148][ T8086] (syz.0.841,8086,0):ocfs2_dx_dir_attach_index:2330 ERROR: status = -30
[  198.158224][ T8086] (syz.0.841,8086,0):ocfs2_expand_inline_dir:3023 ERROR: status = -30
[  198.166826][ T8086] (syz.0.841,8086,0):ocfs2_extend_dir:3205 ERROR: status = -30
[  198.175063][ T8086] (syz.0.841,8086,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30
[  198.192236][ T8086] (syz.0.841,8086,0):ocfs2_mknod:298 ERROR: status = -30
[  198.208242][ T8086] (syz.0.841,8086,0):ocfs2_mknod:502 ERROR: status = -30
[  198.215442][ T8086] (syz.0.841,8086,0):ocfs2_mkdir:659 ERROR: status = -30
[  198.365397][ T8110] loop1: detected capacity change from 0 to 4096
[  198.395703][ T8110] EXT4-fs: Ignoring removed orlov option
[  198.411922][ T8110] EXT4-fs (loop1): Test dummy encryption mode enabled
[  198.423620][ T5777] (syz-executor,5777,1):ocfs2_read_blocks:239 ERROR: status = -12
[  198.434785][ T5777] (syz-executor,5777,1):_ocfs2_free_suballoc_bits:2489 ERROR: status = -12
[  198.444217][ T5777] (syz-executor,5777,1):_ocfs2_free_clusters:2583 ERROR: status = -12
[  198.455244][ T5777] (syz-executor,5777,1):ocfs2_sync_local_to_main:1001 ERROR: status = -12
[  198.464254][ T5777] (syz-executor,5777,1):ocfs2_sync_local_to_main:1013 ERROR: status = -12
[  198.472942][ T5777] (syz-executor,5777,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -12
[  198.505356][ T8110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.549588][ T8116] TCP: MD5 Hash failed for (0.0.0.0, 20001)->(0.0.0.0, 20002) L3 index 0
[  198.583183][ T5777] ocfs2: Unmounting device (7,0) on (node local)
[  198.655835][ T8118] loop2: detected capacity change from 0 to 128
[  198.789050][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.984818][ T8122] loop1: detected capacity change from 0 to 1024
[  199.082472][ T8122] hfsplus: xattr search failed
[  199.257577][   T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  199.294190][ T8129] hsr0: entered promiscuous mode
[  199.324917][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'.
[  199.345543][ T8129] hsr_slave_0: left promiscuous mode
[  199.352168][ T8129] hsr_slave_1: left promiscuous mode
[  199.458179][   T27] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  199.478163][   T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  199.487147][   T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  199.505437][ T8129] hsr0 (unregistering): left promiscuous mode
[  199.520204][ T8134] netlink: 'syz.0.864': attribute type 10 has an invalid length.
[  199.528152][   T27] usb 3-1: config 0 interface 0 has no altsetting 0
[  199.547896][   T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  199.556880][   T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  199.582792][   T27] usb 3-1: config 0 interface 0 has no altsetting 0
[  199.599447][   T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  199.617325][   T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  199.637396][   T27] usb 3-1: config 0 interface 0 has no altsetting 0
[  199.648637][   T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  199.670248][   T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  199.688267][ T8134] veth0_vlan: left promiscuous mode
[  199.727324][   T27] usb 3-1: config 0 interface 0 has no altsetting 0
[  199.738871][ T8134] veth0_vlan: entered promiscuous mode
[  199.745284][   T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  199.786669][   T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  199.803743][ T8134] team0: Device veth0_vlan failed to register rx_handler
[  199.818303][   T27] usb 3-1: config 0 interface 0 has no altsetting 0
[  199.828624][   T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  199.843150][   T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  199.873804][   T27] usb 3-1: config 0 interface 0 has no altsetting 0
[  199.886692][   T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  199.911980][   T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  199.947432][   T27] usb 3-1: config 0 interface 0 has no altsetting 0
[  199.965748][   T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  199.987409][   T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  200.017375][   T27] usb 3-1: config 0 interface 0 has no altsetting 0
[  200.027174][   T27] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  200.046955][   T27] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  200.077703][   T27] usb 3-1: Product: syz
[  200.081977][   T27] usb 3-1: Manufacturer: syz
[  200.086630][   T27] usb 3-1: SerialNumber: syz
[  200.103598][   T27] usb 3-1: config 0 descriptor??
[  200.131822][   T27] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  200.398994][ T8139] loop0: detected capacity change from 0 to 64
[  200.447388][ T8139] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  200.649311][ T8131] loop3: detected capacity change from 0 to 32768
[  200.677989][ T8131] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  200.686304][ T8131] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  200.735399][ T8131] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  200.778255][   T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  200.785185][   T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  200.826070][   T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 40ms
[  200.850288][   T23] gfs2: fsid=syz:syz.0: jid=0: Done
[  200.855707][ T8131] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  201.085845][ T8131] gfs2: fsid=syz:syz.0: found 1 quota changes
[  201.182390][ T8131] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  201.182390][ T8131]   inode = 11 2339
[  201.182390][ T8131]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421
[  201.208756][ T8131] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  201.222740][ T8131] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:8131 [syz.3.862] gfs2_quota_sync+0x411/0x5a0
[  201.233053][ T8131] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  201.246293][ T8131] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  201.306789][ T8131] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  201.320834][ T8131] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  201.330845][ T8131] gfs2: fsid=syz:syz.0: File system withdrawn
[  201.354147][ T8131] CPU: 0 PID: 8131 Comm: syz.3.862 Not tainted syzkaller #0
[  201.361552][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  201.371663][ T8131] Call Trace:
[  201.374990][ T8131]  <TASK>
[  201.378058][ T8131]  dump_stack_lvl+0x18c/0x250
[  201.382794][ T8131]  ? kobject_uevent_env+0x363/0x8b0
[  201.388060][ T8131]  ? show_regs_print_info+0x20/0x20
[  201.393320][ T8131]  ? load_image+0x420/0x420
[  201.397877][ T8131]  ? kobject_uevent_env+0x363/0x8b0
[  201.403145][ T8131]  gfs2_withdraw+0xb24/0x13d0
[  201.407916][ T8131]  ? gfs2_lm+0x240/0x240
[  201.412419][ T8131]  ? gfs2_consist_inode_i+0xf5/0x110
[  201.417788][ T8131]  gfs2_inode_refresh+0xc50/0x1160
[  201.423080][ T8131]  ? gfs2_inode_metasync+0xf0/0xf0
[  201.428441][ T8131]  ? gfs2_glock_nq+0xd4f/0x1420
[  201.431038][ T8147] loop1: detected capacity change from 0 to 64
[  201.433343][ T8131]  gfs2_instantiate+0x162/0x220
[  201.444672][ T8131]  gfs2_glock_wait+0x1d4/0x2a0
[  201.449626][ T8131]  do_sync+0x4c6/0xe50
[  201.453950][ T8131]  ? gfs2_quota_sync+0x411/0x5a0
[  201.459065][ T8131]  ? bh_get+0x760/0x760
[  201.463299][ T8131]  ? gfs2_quota_sync+0x31a/0x5a0
[  201.468309][ T8131]  ? gfs2_quota_sync+0x411/0x5a0
[  201.473313][ T8131]  ? do_raw_spin_unlock+0x121/0x230
[  201.478588][ T8131]  ? do_raw_spin_unlock+0x121/0x230
[  201.483871][ T8131]  gfs2_quota_sync+0x411/0x5a0
[  201.488712][ T8131]  gfs2_sync_fs+0x4c/0xb0
[  201.493114][ T8131]  sync_filesystem+0xea/0x220
[  201.497902][ T8131]  gfs2_reconfigure+0xbb/0xb10
[  201.502746][ T8131]  reconfigure_super+0x21e/0x8a0
[  201.507756][ T8131]  path_mount+0xd2f/0xff0
[  201.512181][ T8131]  __se_sys_mount+0x2e7/0x3d0
[  201.517040][ T8131]  ? __x64_sys_mount+0xc0/0xc0
[  201.521878][ T8131]  ? lockdep_hardirqs_on+0x98/0x150
[  201.527218][ T8131]  ? __x64_sys_mount+0x20/0xc0
[  201.532051][ T8131]  do_syscall_64+0x55/0xb0
[  201.536525][ T8131]  ? clear_bhb_loop+0x40/0x90
[  201.541269][ T8131]  ? clear_bhb_loop+0x40/0x90
[  201.546031][ T8131]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  201.552046][ T8131] RIP: 0033:0x7ff0e559ce59
[  201.556522][ T8131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.576452][ T8131] RSP: 002b:00007ff0e37f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  201.584931][ T8131] RAX: ffffffffffffffda RBX: 00007ff0e5815fa0 RCX: 00007ff0e559ce59
[  201.593228][ T8131] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000
[  201.601271][ T8131] RBP: 00007ff0e5632d6f R08: 0000000000000000 R09: 0000000000000000
[  201.609582][ T8131] R10: 0000000002390024 R11: 0000000000000246 R12: 0000000000000000
[  201.617830][ T8131] R13: 00007ff0e5816038 R14: 00007ff0e5815fa0 R15: 00007ffcf89009c8
[  201.626090][ T8131]  </TASK>
[  201.648666][ T8131] gfs2: unable to remount read-write
[  202.034340][ T8150] loop3: detected capacity change from 0 to 2048
[  202.098793][ T8150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.145044][  T786] usb 3-1: USB disconnect, device number 11
[  202.159129][  T786] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  202.187992][ T8150] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.374859][ T8150] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.868: bg 0: block 345: padding at end of block bitmap is not set
[  202.406536][ T8157] loop2: detected capacity change from 0 to 128
[  202.420052][ T8148] loop0: detected capacity change from 0 to 32768
[  202.459715][ T8150] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  202.495899][ T8148] JFS: Invalid stbl[0] = -1 for inode 2, block = 0
[  202.505340][ T8150] EXT4-fs (loop3): This should not happen!! Data will be lost
[  202.505340][ T8150] 
[  202.694667][ T7237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.137802][  T786] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  203.362977][  T786] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  203.382117][  T786] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  203.413144][  T786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  203.454752][  T786] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  203.487369][  T786] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  203.519813][  T786] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  203.550462][  T786] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  203.568402][ T8159] loop1: detected capacity change from 0 to 40427
[  203.577613][  T786] usb 1-1: Product: syz
[  203.587569][  T786] usb 1-1: Manufacturer: syz
[  203.617756][ T8159] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff
[  203.646819][ T8159] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4
[  203.657645][  T786] cdc_wdm 1-1:1.0: skipping garbage
[  203.673238][  T786] cdc_wdm 1-1:1.0: skipping garbage
[  203.695691][  T786] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  203.713814][  T786] cdc_wdm 1-1:1.0: Unknown control protocol
[  203.725460][ T8159] F2FS-fs (loop1): invalid crc value
[  203.769442][ T8159] F2FS-fs (loop1): Found nat_bits in checkpoint
[  203.915572][ T8159] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0
[  204.017720][ T8161] loop2: detected capacity change from 0 to 32768
[  204.044413][ T8159] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  204.090150][ T8161] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  204.156732][ T8161] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  204.291367][ T8161] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  204.350092][ T8159] F2FS-fs (loop1): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x111c/0x40f0
[  204.377780][   T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  204.384651][   T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  204.488901][   T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 104ms
[  204.502785][   T23] gfs2: fsid=syz:syz.0: jid=0: Done
[  204.517495][ T8161] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  204.786479][ T8173] loop3: detected capacity change from 0 to 32768
[  204.874318][ T8161] gfs2: fsid=syz:syz.0: found 1 quota changes
[  204.879249][ T8173] JBD2: Ignoring recovery information on journal
[  204.955454][ T8161] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  204.955454][ T8161]   inode = 11 2339
[  204.955454][ T8161]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421
[  205.022417][ T8161] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  205.078938][ T8161] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:8161 [syz.2.881] gfs2_quota_sync+0x411/0x5a0
[  205.107850][ T8161] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  205.129222][ T8173] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  205.145622][ T8161] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  205.225446][ T8161] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  205.299689][ T8161] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  205.327486][ T8161] gfs2: fsid=syz:syz.0: File system withdrawn
[  205.333654][ T8161] CPU: 1 PID: 8161 Comm: syz.2.881 Not tainted syzkaller #0
[  205.340985][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  205.351080][ T8161] Call Trace:
[  205.354390][ T8161]  <TASK>
[  205.357358][ T8161]  dump_stack_lvl+0x18c/0x250
[  205.362089][ T8161]  ? kobject_uevent_env+0x363/0x8b0
[  205.367337][ T8161]  ? show_regs_print_info+0x20/0x20
[  205.372574][ T8161]  ? load_image+0x420/0x420
[  205.377127][ T8161]  ? kobject_uevent_env+0x363/0x8b0
[  205.382377][ T8161]  gfs2_withdraw+0xb24/0x13d0
[  205.387166][ T8161]  ? gfs2_lm+0x240/0x240
[  205.391474][ T8161]  ? gfs2_consist_inode_i+0xf5/0x110
[  205.396807][ T8161]  gfs2_inode_refresh+0xc50/0x1160
[  205.401964][ T8161]  ? gfs2_inode_metasync+0xf0/0xf0
[  205.407120][ T8161]  ? gfs2_glock_nq+0xd4f/0x1420
[  205.412024][ T8161]  gfs2_instantiate+0x162/0x220
[  205.416920][ T8161]  gfs2_glock_wait+0x1d4/0x2a0
[  205.421729][ T8161]  do_sync+0x4c6/0xe50
[  205.425841][ T8161]  ? gfs2_quota_sync+0x411/0x5a0
[  205.430812][ T8161]  ? bh_get+0x760/0x760
[  205.435001][ T8161]  ? gfs2_quota_sync+0x31a/0x5a0
[  205.439976][ T8161]  ? gfs2_quota_sync+0x411/0x5a0
[  205.444948][ T8161]  ? do_raw_spin_unlock+0x121/0x230
[  205.450212][ T8161]  ? do_raw_spin_unlock+0x121/0x230
[  205.455473][ T8161]  gfs2_quota_sync+0x411/0x5a0
[  205.460386][ T8161]  gfs2_sync_fs+0x4c/0xb0
[  205.464768][ T8161]  sync_filesystem+0xea/0x220
[  205.469484][ T8161]  gfs2_reconfigure+0xbb/0xb10
[  205.474303][ T8161]  reconfigure_super+0x21e/0x8a0
[  205.479304][ T8161]  path_mount+0xd2f/0xff0
[  205.483698][ T8161]  __se_sys_mount+0x2e7/0x3d0
[  205.488706][ T8161]  ? __x64_sys_mount+0xc0/0xc0
[  205.493871][ T8161]  ? lockdep_hardirqs_on+0x98/0x150
[  205.499152][ T8161]  ? __x64_sys_mount+0x20/0xc0
[  205.503961][ T8161]  do_syscall_64+0x55/0xb0
[  205.508410][ T8161]  ? clear_bhb_loop+0x40/0x90
[  205.513139][ T8161]  ? clear_bhb_loop+0x40/0x90
[  205.517896][ T8161]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  205.523832][ T8161] RIP: 0033:0x7f762879ce59
[  205.528278][ T8161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.548440][ T8161] RSP: 002b:00007f7629581028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  205.556893][ T8161] RAX: ffffffffffffffda RBX: 00007f7628a15fa0 RCX: 00007f762879ce59
[  205.564898][ T8161] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000
[  205.572907][ T8161] RBP: 00007f7628832d6f R08: 0000000000000000 R09: 0000000000000000
[  205.580920][ T8161] R10: 0000000002390024 R11: 0000000000000246 R12: 0000000000000000
[  205.588921][ T8161] R13: 00007f7628a16038 R14: 00007f7628a15fa0 R15: 00007ffc11e95808
[  205.596963][ T8161]  </TASK>
[  205.619721][ T8161] gfs2: unable to remount read-write
[  205.669551][ T8173] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  205.669743][ T8173] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  205.798919][ T8195] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  205.798957][ T8195] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  205.832433][ T8173] OCFS2: File system is now read-only.
[  205.886767][ T5762] usb 1-1: USB disconnect, device number 8
[  206.162878][ T7237] ocfs2: Unmounting device (7,3) on (node local)
[  206.365616][ T8208] loop1: detected capacity change from 0 to 512
[  206.432393][ T8208] EXT4-fs (loop1): 1 truncate cleaned up
[  206.448804][ T8208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.883040][ T5785] Bluetooth: hci1: command 0x0406 tx timeout
[  206.889247][ T5784] Bluetooth: hci2: command 0x0406 tx timeout
[  207.108408][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.260579][ T8229] loop1: detected capacity change from 0 to 128
[  207.274523][ T8228] loop3: detected capacity change from 0 to 16
[  207.290627][ T8228] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  207.572873][ T8233] loop0: detected capacity change from 0 to 4096
[  207.669043][ T8233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.126058][ T8238] loop1: detected capacity change from 0 to 32768
[  208.153935][ T8238] JBD2: Ignoring recovery information on journal
[  208.221726][ T8238] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  208.285777][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.435863][ T8243] loop3: detected capacity change from 0 to 512
[  208.481291][ T8243] EXT4-fs (loop3): 1 truncate cleaned up
[  208.536527][ T8243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.742182][ T5772] ocfs2: Unmounting device (7,1) on (node local)
[  208.953655][ T7237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.307502][ T5762] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  209.400639][ T8264] syz_tun: entered allmulticast mode
[  209.414544][ T8264] syz_tun: left allmulticast mode
[  209.516193][ T5762] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  209.525041][ T8266] loop0: detected capacity change from 0 to 1024
[  209.533420][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.560055][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.560397][ T8266] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  209.603992][ T5762] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  209.637371][ T5762] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  209.646506][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.669805][ T5762] usb 3-1: config 0 descriptor??
[  209.681684][ T8266] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.899: lblock 2 mapped to illegal pblock 2 (length 1)
[  209.701176][ T8266] __quota_error: 5 callbacks suppressed
[  209.701194][ T8266] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  209.717503][ T8266] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.899: lblock 0 mapped to illegal pblock 48 (length 1)
[  209.789738][ T8266] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  209.808770][ T8266] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.899: Failed to acquire dquot type 0
[  209.865462][ T8266] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5939: Corrupt filesystem
[  209.878207][ T8266] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.899: mark_inode_dirty error
[  209.902191][ T8266] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  209.914282][ T8266] EXT4-fs (loop0): 1 orphan inode deleted
[  209.945240][ T8266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.963836][   T11] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  210.008748][   T11] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  210.057438][   T11] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 0
[  210.113820][ T8266] EXT4-fs (loop0): shut down requested (2)
[  210.128894][ T5762] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd
[  210.173871][ T5762] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  210.241256][ T5762] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  210.301964][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.465361][ T5814] usb 3-1: USB disconnect, device number 12
[  210.480535][ T8278] fido_id[8278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  210.834167][ T8283] tipc: Started in network mode
[  210.847680][ T8283] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711
[  210.871857][ T8283] tipc: Enabled bearer <udp:syz1>, priority 10
[  210.923463][ T8272] loop3: detected capacity change from 0 to 40427
[  210.945845][ T8272] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  210.987580][ T8272] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  211.050736][ T8272] F2FS-fs (loop3): Found nat_bits in checkpoint
[  211.187378][ T8290] syz_tun: entered allmulticast mode
[  211.208760][ T8290] syz_tun: left allmulticast mode
[  211.246569][ T8272] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  211.266420][ T8272] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  211.502680][ T7237] syz-executor: attempt to access beyond end of device
[  211.502680][ T7237] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  211.551915][ T7237] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  211.991177][ T5762] tipc: Node number set to 4269801494
[  212.838483][ T8304] loop1: detected capacity change from 0 to 32768
[  212.886357][ T8309] loop0: detected capacity change from 0 to 32768
[  212.893568][ T8304] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  212.922479][ T8304] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  212.984396][ T8304] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  212.987886][ T8317] loop3: detected capacity change from 0 to 2048
[  212.999983][ T8317] EXT4-fs: Ignoring removed nomblk_io_submit option
[  213.024693][ T8309] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  213.061873][ T5762] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  213.079281][ T5762] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  213.105317][ T8317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.154169][ T5762] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 74ms
[  213.176823][ T5762] gfs2: fsid=syz:syz.0: jid=0: Done
[  213.247767][ T8304] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  213.277216][   T28] audit: type=1804 audit(1779544505.472:42): pid=8317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.917" name="/newroot/78/file1/bus" dev="loop3" ino=18 res=1 errno=0
[  213.374495][ T8309] XFS (loop0): Ending clean mount
[  213.586616][ T5777] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  213.667976][ T8304] gfs2: fsid=syz:syz.0: found 1 quota changes
[  213.679056][ T8317] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.917: bg 0: block 2: invalid block bitmap
[  213.703263][ T8317] EXT4-fs (loop3): Remounting filesystem read-only
[  213.779956][ T8304] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  213.779956][ T8304]   inode = 11 2339
[  213.779956][ T8304]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421
[  213.817343][ T8304] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  213.832489][ T8304] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:8304 [syz.1.913] gfs2_quota_sync+0x411/0x5a0
[  213.844204][ T8304] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  213.859701][ T8304] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  213.876481][ T8304] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  213.885630][ T8304] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  213.892525][ T7237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.903619][ T8304] gfs2: fsid=syz:syz.0: File system withdrawn
[  213.910477][ T8304] CPU: 0 PID: 8304 Comm: syz.1.913 Not tainted syzkaller #0
[  213.917841][ T8304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  213.927959][ T8304] Call Trace:
[  213.931321][ T8304]  <TASK>
[  213.934307][ T8304]  dump_stack_lvl+0x18c/0x250
[  213.939132][ T8304]  ? kobject_uevent_env+0x363/0x8b0
[  213.944398][ T8304]  ? show_regs_print_info+0x20/0x20
[  213.949666][ T8304]  ? load_image+0x420/0x420
[  213.954237][ T8304]  ? kobject_uevent_env+0x363/0x8b0
[  213.959599][ T8304]  gfs2_withdraw+0xb24/0x13d0
[  213.964370][ T8304]  ? gfs2_lm+0x240/0x240
[  213.968673][ T8304]  ? queue_delayed_work_on+0x114/0x200
[  213.974202][ T8304]  ? gfs2_consist_inode_i+0xf5/0x110
[  213.979553][ T8304]  gfs2_inode_refresh+0xc50/0x1160
[  213.984714][ T8304]  ? gfs2_inode_metasync+0xf0/0xf0
[  213.989864][ T8304]  ? gfs2_glock_nq+0xd4f/0x1420
[  213.994765][ T8304]  gfs2_instantiate+0x162/0x220
[  213.999666][ T8304]  gfs2_glock_wait+0x1d4/0x2a0
[  214.004474][ T8304]  do_sync+0x4c6/0xe50
[  214.008757][ T8304]  ? gfs2_quota_sync+0x411/0x5a0
[  214.013727][ T8304]  ? bh_get+0x760/0x760
[  214.017934][ T8304]  ? gfs2_quota_sync+0x31a/0x5a0
[  214.022906][ T8304]  ? gfs2_quota_sync+0x411/0x5a0
[  214.027891][ T8304]  ? do_raw_spin_unlock+0x121/0x230
[  214.033134][ T8304]  ? do_raw_spin_unlock+0x121/0x230
[  214.038370][ T8304]  gfs2_quota_sync+0x411/0x5a0
[  214.043171][ T8304]  gfs2_sync_fs+0x4c/0xb0
[  214.047533][ T8304]  sync_filesystem+0xea/0x220
[  214.052244][ T8304]  gfs2_reconfigure+0xbb/0xb10
[  214.057063][ T8304]  reconfigure_super+0x21e/0x8a0
[  214.062053][ T8304]  path_mount+0xd2f/0xff0
[  214.066615][ T8304]  __se_sys_mount+0x2e7/0x3d0
[  214.071346][ T8304]  ? __x64_sys_mount+0xc0/0xc0
[  214.076160][ T8304]  ? lockdep_hardirqs_on+0x98/0x150
[  214.081404][ T8304]  ? __x64_sys_mount+0x20/0xc0
[  214.086203][ T8304]  do_syscall_64+0x55/0xb0
[  214.090653][ T8304]  ? clear_bhb_loop+0x40/0x90
[  214.095368][ T8304]  ? clear_bhb_loop+0x40/0x90
[  214.100086][ T8304]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  214.106019][ T8304] RIP: 0033:0x7ff56319ce59
[  214.111593][ T8304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.131236][ T8304] RSP: 002b:00007ff5640b3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  214.139704][ T8304] RAX: ffffffffffffffda RBX: 00007ff563415fa0 RCX: 00007ff56319ce59
[  214.147721][ T8304] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000
[  214.155724][ T8304] RBP: 00007ff563232d6f R08: 0000000000000000 R09: 0000000000000000
[  214.164594][ T8304] R10: 0000000002390024 R11: 0000000000000246 R12: 0000000000000000
[  214.172597][ T8304] R13: 00007ff563416038 R14: 00007ff563415fa0 R15: 00007ffd891c0c88
[  214.180616][ T8304]  </TASK>
[  214.227675][ T8304] gfs2: unable to remount read-write
[  214.865918][ T8333] loop0: detected capacity change from 0 to 512
[  214.888514][ T8333] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  214.904660][ T8333] EXT4-fs (loop0): 1 truncate cleaned up
[  214.912410][ T8333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.954025][ T8333] EXT4-fs error (device loop0): ext4_xattr_block_find:1881: inode #15: comm syz.0.920: corrupted xattr block 33: invalid header
[  214.974584][ T8333] EXT4-fs (loop0): Remounting filesystem read-only
[  215.020669][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.522591][ T8356] loop1: detected capacity change from 0 to 256
[  216.876958][ T8401] loop0: detected capacity change from 0 to 256
[  216.919430][ T8401] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d)
[  217.189672][ T8407] loop0: detected capacity change from 0 to 128
[  217.258790][ T8407] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  217.345173][ T8407] ext4 filesystem being mounted at /227/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  217.376844][    C1] vkms_vblank_simulate: vblank timer overrun
[  217.567902][ T8407] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.953: Logical block already allocated
[  217.652425][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  218.060381][ T8434] dummy0: entered allmulticast mode
[  218.068581][ T8433] dummy0: left allmulticast mode
[  218.528523][  T786] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  218.729638][  T786] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[  218.744222][  T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.765899][  T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.786658][  T786] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  218.810038][  T786] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  218.827488][  T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.852002][  T786] usb 1-1: config 0 descriptor??
[  218.954457][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'.
[  219.069464][ T8463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.220839][ T8466] loop1: detected capacity change from 0 to 4096
[  219.310772][ T8466] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  219.335460][  T786] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd
[  219.353478][ T8470] loop3: detected capacity change from 0 to 256
[  219.356512][  T786] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  219.409411][ T8470] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  219.433905][  T786] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  219.481140][ T8466] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[  219.665241][   T28] audit: type=1800 audit(1779544511.862:43): pid=8473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.978" name="file1" dev="loop1" ino=30 res=0 errno=0
[  219.716273][ T8466] ntfs3: loop1: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size
[  219.765997][  T786] usb 1-1: USB disconnect, device number 9
[  220.380586][ T8492] ipvlan2: entered promiscuous mode
[  220.388539][ T8492] team0: Device ipvlan2 is up. Set it down before adding it as a team port
[  220.533288][ T8494] binder: binder_mmap: 8493 200000000000-200000b36000 bad vm_flags failed -1
[  220.643552][ T8496] loop1: detected capacity change from 0 to 4096
[  220.675154][ T8496] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  221.261118][ T8513] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.996'.
[  221.279355][ T8511] hub 1-0:1.0: USB hub found
[  221.312349][ T8511] hub 1-0:1.0: 1 port detected
[  221.340537][ T8517] loop3: detected capacity change from 0 to 256
[  221.355831][ T8517] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  221.770867][   T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  221.987409][   T23] usb 4-1: Using ep0 maxpacket: 16
[  222.007792][   T23] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  222.037326][   T23] usb 4-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config
[  222.057381][   T23] usb 4-1: config 0 has no interface number 0
[  222.090100][   T23] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  222.109877][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.127629][   T23] usb 4-1: Product: syz
[  222.131895][   T23] usb 4-1: Manufacturer: syz
[  222.136552][   T23] usb 4-1: SerialNumber: syz
[  222.161610][   T23] usb 4-1: config 0 descriptor??
[  222.315584][ T8524] loop1: detected capacity change from 0 to 32768
[  222.370829][ T8524] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  222.408798][   T23] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  222.415248][   T23] usb 4-1: No valid video chain found.
[  222.440387][   T23] usb 4-1: USB disconnect, device number 6
[  222.516233][ T8545] loop2: detected capacity change from 0 to 256
[  222.524728][ T8524] XFS (loop1): Ending clean mount
[  222.621756][ T8545] FAT-fs (loop2): Directory bread(block 64) failed
[  222.641615][ T8545] FAT-fs (loop2): Directory bread(block 65) failed
[  222.675583][ T8545] FAT-fs (loop2): Directory bread(block 66) failed
[  222.689130][ T8545] FAT-fs (loop2): Directory bread(block 67) failed
[  222.721069][ T8545] FAT-fs (loop2): Directory bread(block 68) failed
[  222.733759][ T8545] FAT-fs (loop2): Directory bread(block 69) failed
[  222.741323][ T8545] FAT-fs (loop2): Directory bread(block 70) failed
[  222.752167][ T8545] FAT-fs (loop2): Directory bread(block 71) failed
[  222.763621][ T5772] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  222.769940][ T8545] FAT-fs (loop2): Directory bread(block 72) failed
[  222.779301][ T8545] FAT-fs (loop2): Directory bread(block 73) failed
[  223.282214][ T8549] loop2: detected capacity change from 0 to 512
[  223.314440][ T8549] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  223.381201][ T8549] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c098, mo2=0002]
[  223.408912][ T8549] System zones: 0-2, 18-18, 34-35
[  223.461356][ T8549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.526999][ T8549] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  223.612707][ T8561] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  223.827541][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  223.929697][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.027335][    T9] usb 1-1: Using ep0 maxpacket: 16
[  224.045708][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.092255][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  224.114950][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  224.125881][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.146191][    T9] usb 1-1: Product: syz
[  224.149553][ T8571] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1018'.
[  224.166621][    T9] usb 1-1: Manufacturer: syz
[  224.176988][    T9] usb 1-1: SerialNumber: syz
[  224.352763][ T8576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  224.408020][ T8564] loop1: detected capacity change from 0 to 32768
[  224.447701][ T8564] JBD2: Ignoring recovery information on journal
[  224.448141][    T9] usb 1-1: 0:2 : does not exist
[  224.568470][    T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  224.596604][ T8564] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  224.661204][    T9] usb 1-1: USB disconnect, device number 10
[  224.786282][ T6247] udevd[6247]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  224.825779][ T8564] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  224.825818][ T8564] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  224.882275][ T8564] OCFS2: File system is now read-only.
[  224.905568][ T8564] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  224.905605][ T8564] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  225.078529][ T5772] ocfs2: Unmounting device (7,1) on (node local)
[  225.555952][ T8602] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  225.840195][ T8609] loop1: detected capacity change from 0 to 512
[  225.862839][ T8609] EXT4-fs: Ignoring removed i_version option
[  225.877450][ T8609] EXT4-fs: Ignoring removed bh option
[  225.928972][ T8609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.992136][ T8609] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.338965][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.540819][ T8622] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  227.112116][ T8638] loop1: detected capacity change from 0 to 1024
[  227.134234][ T8638] EXT4-fs: Ignoring removed bh option
[  227.177865][ T8638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none.
[  227.260280][ T8638] 
[  227.262691][ T8638] ======================================================
[  227.269747][ T8638] WARNING: possible circular locking dependency detected
[  227.276815][ T8638] syzkaller #0 Not tainted
[  227.281265][ T8638] ------------------------------------------------------
[  227.288314][ T8638] syz.1.1048/8638 is trying to acquire lock:
[  227.294353][ T8638] ffff88803112c0e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_lock+0x17f/0x3a0
[  227.303805][ T8638] 
[  227.303805][ T8638] but task is already holding lock:
[  227.311296][ T8638] ffff888020022f08 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x835/0x2570
[  227.321654][ T8638] 
[  227.321654][ T8638] which lock already depends on the new lock.
[  227.321654][ T8638] 
[  227.332108][ T8638] 
[  227.332108][ T8638] the existing dependency chain (in reverse order) is:
[  227.341166][ T8638] 
[  227.341166][ T8638] -> #4 (&bdev->bd_holder_lock){+.+.}-{3:3}:
[  227.349393][ T8638]        __mutex_lock+0x136/0xcc0
[  227.354465][ T8638]        bd_finish_claiming+0x22f/0x3f0
[  227.360073][ T8638]        blkdev_get_by_dev+0x45c/0x600
[  227.365590][ T8638]        bdev_open_by_dev+0x77/0x100
[  227.370935][ T8638]        setup_bdev_super+0x59/0x660
[  227.376254][ T8638]        mount_bdev+0x1d3/0x2d0
[  227.381131][ T8638]        legacy_get_tree+0xea/0x180
[  227.386385][ T8638]        vfs_get_tree+0x8c/0x280
[  227.391347][ T8638]        do_new_mount+0x24b/0xa40
[  227.396409][ T8638]        init_mount+0xde/0x130
[  227.401223][ T8638]        do_mount_root+0x97/0x230
[  227.406284][ T8638]        mount_root_generic+0x1a6/0x3e0
[  227.411851][ T8638]        prepare_namespace+0xc2/0x100
[  227.417246][ T8638]        kernel_init_freeable+0x42e/0x580
[  227.422994][ T8638]        kernel_init+0x1d/0x1c0
[  227.427880][ T8638]        ret_from_fork+0x48/0x80
[  227.432844][ T8638]        ret_from_fork_asm+0x11/0x20
[  227.438158][ T8638] 
[  227.438158][ T8638] -> #3 (bdev_lock){+.+.}-{3:3}:
[  227.445309][ T8638]        __mutex_lock+0x136/0xcc0
[  227.450354][ T8638]        bd_prepare_to_claim+0x1c0/0x490
[  227.456013][ T8638]        truncate_bdev_range+0x4e/0x260
[  227.461585][ T8638]        blkdev_common_ioctl+0x1c6b/0x2570
[  227.467429][ T8638]        blkdev_ioctl+0x512/0x730
[  227.472492][ T8638]        __se_sys_ioctl+0xfd/0x170
[  227.477900][ T8638]        do_syscall_64+0x55/0xb0
[  227.482870][ T8638]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  227.489312][ T8638] 
[  227.489312][ T8638] -> #2 (mapping.invalidate_lock){++++}-{3:3}:
[  227.497684][ T8638]        down_write+0x97/0x200
[  227.502476][ T8638]        set_blocksize+0x247/0x4b0
[  227.507615][ T8638]        sb_min_blocksize+0xbe/0x190
[  227.512921][ T8638]        ext4_fill_super+0x6f0/0x67b0
[  227.518318][ T8638]        get_tree_bdev+0x3f3/0x520
[  227.523451][ T8638]        vfs_get_tree+0x8c/0x280
[  227.528407][ T8638]        do_new_mount+0x24b/0xa40
[  227.533458][ T8638]        init_mount+0xde/0x130
[  227.538249][ T8638]        do_mount_root+0x97/0x230
[  227.543298][ T8638]        mount_root_generic+0x1a6/0x3e0
[  227.548878][ T8638]        prepare_namespace+0xc2/0x100
[  227.554275][ T8638]        kernel_init_freeable+0x42e/0x580
[  227.560021][ T8638]        kernel_init+0x1d/0x1c0
[  227.564903][ T8638]        ret_from_fork+0x48/0x80
[  227.569965][ T8638]        ret_from_fork_asm+0x11/0x20
[  227.575325][ T8638] 
[  227.575325][ T8638] -> #1 (&sb->s_type->i_mutex_key#8){++++}-{3:3}:
[  227.583960][ T8638]        down_write+0x97/0x200
[  227.588840][ T8638]        set_blocksize+0x1ff/0x4b0
[  227.593973][ T8638]        sb_min_blocksize+0xbe/0x190
[  227.599327][ T8638]        ext4_fill_super+0x6f0/0x67b0
[  227.604726][ T8638]        get_tree_bdev+0x3f3/0x520
[  227.609868][ T8638]        vfs_get_tree+0x8c/0x280
[  227.614825][ T8638]        do_new_mount+0x24b/0xa40
[  227.619875][ T8638]        init_mount+0xde/0x130
[  227.624664][ T8638]        do_mount_root+0x97/0x230
[  227.629722][ T8638]        mount_root_generic+0x1a6/0x3e0
[  227.636003][ T8638]        prepare_namespace+0xc2/0x100
[  227.641408][ T8638]        kernel_init_freeable+0x42e/0x580
[  227.647158][ T8638]        kernel_init+0x1d/0x1c0
[  227.652039][ T8638]        ret_from_fork+0x48/0x80
[  227.657003][ T8638]        ret_from_fork_asm+0x11/0x20
[  227.662316][ T8638] 
[  227.662316][ T8638] -> #0 (&type->s_umount_key#32){++++}-{3:3}:
[  227.670610][ T8638]        __lock_acquire+0x2df1/0x7d40
[  227.676009][ T8638]        lock_acquire+0x19e/0x420
[  227.681057][ T8638]        down_read+0x46/0x2e0
[  227.692942][ T8638]        super_lock+0x17f/0x3a0
[  227.697857][ T8638]        fs_bdev_sync+0xa4/0x170
[  227.702831][ T8638]        blkdev_common_ioctl+0x8a6/0x2570
[  227.708601][ T8638]        blkdev_ioctl+0x512/0x730
[  227.713714][ T8638]        __se_sys_ioctl+0xfd/0x170
[  227.718893][ T8638]        do_syscall_64+0x55/0xb0
[  227.723872][ T8638]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  227.730325][ T8638] 
[  227.730325][ T8638] other info that might help us debug this:
[  227.730325][ T8638] 
[  227.740575][ T8638] Chain exists of:
[  227.740575][ T8638]   &type->s_umount_key#32 --> bdev_lock --> &bdev->bd_holder_lock
[  227.740575][ T8638] 
[  227.754264][ T8638]  Possible unsafe locking scenario:
[  227.754264][ T8638] 
[  227.761733][ T8638]        CPU0                    CPU1
[  227.767125][ T8638]        ----                    ----
[  227.772506][ T8638]   lock(&bdev->bd_holder_lock);
[  227.777478][ T8638]                                lock(bdev_lock);
[  227.783920][ T8638]                                lock(&bdev->bd_holder_lock);
[  227.791402][ T8638]   rlock(&type->s_umount_key#32);
[  227.796546][ T8638] 
[  227.796546][ T8638]  *** DEADLOCK ***
[  227.796546][ T8638] 
[  227.804711][ T8638] 1 lock held by syz.1.1048/8638:
[  227.809759][ T8638]  #0: ffff888020022f08 (&bdev->bd_holder_lock){+.+.}-{3:3}, at: blkdev_common_ioctl+0x835/0x2570
[  227.820425][ T8638] 
[  227.820425][ T8638] stack backtrace:
[  227.826336][ T8638] CPU: 1 PID: 8638 Comm: syz.1.1048 Not tainted syzkaller #0
[  227.833724][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  227.843884][ T8638] Call Trace:
[  227.847187][ T8638]  <TASK>
[  227.850149][ T8638]  dump_stack_lvl+0x18c/0x250
[  227.854855][ T8638]  ? load_image+0x420/0x420
[  227.859482][ T8638]  ? show_regs_print_info+0x20/0x20
[  227.864710][ T8638]  ? print_circular_bug+0x12b/0x1a0
[  227.872654][ T8638]  check_noncircular+0x2fc/0x400
[  227.877657][ T8638]  ? print_deadlock_bug+0x5d0/0x5d0
[  227.882899][ T8638]  ? lockdep_lock+0xf5/0x230
[  227.887529][ T8638]  ? _find_first_zero_bit+0xd3/0x100
[  227.892901][ T8638]  __lock_acquire+0x2df1/0x7d40
[  227.897813][ T8638]  ? verify_lock_unused+0x140/0x140
[  227.903054][ T8638]  ? stack_trace_save+0xaa/0x100
[  227.908027][ T8638]  ? stack_trace_snprint+0xf0/0xf0
[  227.913170][ T8638]  ? __stack_depot_save+0x1f/0x630
[  227.918309][ T8638]  ? do_syscall_64+0x55/0xb0
[  227.923019][ T8638]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  227.929121][ T8638]  lock_acquire+0x19e/0x420
[  227.933650][ T8638]  ? super_lock+0x17f/0x3a0
[  227.938181][ T8638]  ? __might_sleep+0xe0/0xe0
[  227.942800][ T8638]  ? __mutex_trylock_common+0x159/0x260
[  227.948374][ T8638]  ? read_lock_is_recursive+0x20/0x20
[  227.953773][ T8638]  ? trace_raw_output_contention_end+0xd0/0xd0
[  227.959958][ T8638]  down_read+0x46/0x2e0
[  227.964136][ T8638]  ? super_lock+0x17f/0x3a0
[  227.968660][ T8638]  super_lock+0x17f/0x3a0
[  227.973117][ T8638]  ? user_get_super+0x180/0x180
[  227.978017][ T8638]  ? mutex_lock_nested+0x20/0x20
[  227.982994][ T8638]  fs_bdev_sync+0xa4/0x170
[  227.987449][ T8638]  ? fs_bdev_mark_dead+0x1f0/0x1f0
[  227.992598][ T8638]  blkdev_common_ioctl+0x8a6/0x2570
[  227.997833][ T8638]  ? tomoyo_path_number_perm+0x5b4/0x620
[  228.003496][ T8638]  ? blkdev_bszset+0x1f0/0x1f0
[  228.008296][ T8638]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  228.013798][ T8638]  blkdev_ioctl+0x512/0x730
[  228.018335][ T8638]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  228.023828][ T8638]  ? bpf_lsm_file_ioctl+0x9/0x10
[  228.028802][ T8638]  ? security_file_ioctl+0x80/0xa0
[  228.033936][ T8638]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  228.039431][ T8638]  __se_sys_ioctl+0xfd/0x170
[  228.044048][ T8638]  do_syscall_64+0x55/0xb0
[  228.048590][ T8638]  ? clear_bhb_loop+0x40/0x90
[  228.053305][ T8638]  ? clear_bhb_loop+0x40/0x90
[  228.058013][ T8638]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.063931][ T8638] RIP: 0033:0x7ff56319ce59
[  228.068368][ T8638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.088004][ T8638] RSP: 002b:00007ff5640b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  228.096550][ T8638] RAX: ffffffffffffffda RBX: 00007ff563415fa0 RCX: 00007ff56319ce59
[  228.104573][ T8638] RDX: 0000000000000000 RSI: 0000000000001261 RDI: 0000000000000005
[  228.112603][ T8638] RBP: 00007ff563232d6f R08: 0000000000000000 R09: 0000000000000000
[  228.120618][ T8638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.128627][ T8638] R13: 00007ff563416038 R14: 00007ff563415fa0 R15: 00007ffd891c0c88
[  228.136652][ T8638]  </TASK>
[  228.160209][ T8645] loop3: detected capacity change from 0 to 512
[  228.168509][ T8645] EXT4-fs: Ignoring removed i_version option
[  228.175281][ T8645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  228.213911][ T8645] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1049: invalid indirect mapped block 4294967295 (level 1)
[  228.246698][ T8645] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1049: invalid indirect mapped block 4294967295 (level 1)
[  228.286178][ T8645] EXT4-fs (loop3): 2 truncates cleaned up
[  228.303717][ T8645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.361753][ T8645] EXT4-fs (loop3): shut down requested (1)
[  228.367524][   T28] audit: type=1800 audit(1779544520.562:44): pid=8645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1049" name="file1" dev="loop3" ino=15 res=0 errno=0
[  228.408783][ T7792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  228.413067][ T7237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.717770][   T32] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.728356][   T32] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.774461][   T32] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.785070][   T32] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.830505][   T32] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.842220][   T32] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.905984][   T32] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.919598][   T32] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.898345][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.905827][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.929600][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.937075][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.957989][   T32] bridge_slave_1: left allmulticast mode
[  229.963703][   T32] bridge_slave_1: left promiscuous mode
[  229.977732][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.986860][   T32] bridge_slave_0: left allmulticast mode
[  230.007397][   T32] bridge_slave_0: left promiscuous mode
[  230.013200][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.034755][   T32] veth1_macvtap: left promiscuous mode
[  230.047391][   T32] veth0_macvtap: left promiscuous mode
[  230.053070][   T32] veth1_vlan: left promiscuous mode
[  230.068824][   T32] veth0_vlan: left promiscuous mode
[  230.490594][   T32] team0 (unregistering): Port device team_slave_1 removed
[  230.541302][   T32] team0 (unregistering): Port device team_slave_0 removed
[  230.583551][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.629336][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.830548][   T32] bond0 (unregistering): Released all slaves