last executing test programs:

17.615031398s ago: executing program 4 (id=5042):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @local}}, 0x0, 0x283}, 0x90)

17.614766229s ago: executing program 4 (id=5044):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001500)="01a2ad91001fa594", 0x8}], 0x1}}], 0x2, 0x4000)

17.53609132s ago: executing program 4 (id=5047):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xee, &(0x7f0000000000), &(0x7f0000000300)=0x4)

17.489473432s ago: executing program 4 (id=5050):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000540)={'nicvf0\x00', 0x7})

17.277098756s ago: executing program 4 (id=5059):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./file0\x00', 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x1, 0x105d6, &(0x7f0000010640)="$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")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)

16.984374384s ago: executing program 2 (id=5077):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x2, 0xa, 0x4, 0x20, 0x4, {}, {0x3, 0x2, 0x8, 0x78, 0x6, 0x4, "b368199a"}})

16.897185756s ago: executing program 0 (id=5080):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x0, 0x7, 0x7f})

16.897081876s ago: executing program 2 (id=5081):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x21c, 0x200000000000005, 0xe3, 0x2, 0xaf, 0xf777, 0x15, 0x2, 0x8})

16.875506006s ago: executing program 0 (id=5084):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)

16.861171916s ago: executing program 3 (id=5085):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0xffffffffffffffff, 0x112)

16.754082369s ago: executing program 0 (id=5086):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xf0, 0x12, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x3501, 0xa, 0x4, 0x18, 0x19}}, 0xf0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

16.753900799s ago: executing program 3 (id=5087):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

16.753762309s ago: executing program 2 (id=5088):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xf, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/46}, 0x20)

16.72541883s ago: executing program 0 (id=5089):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, 0x0)

16.7076124s ago: executing program 3 (id=5090):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0xffffffffffffffff)

16.665604351s ago: executing program 2 (id=5091):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711232000000000095000000000000006acf63e02a45955b0a2a004939308593d7735445320c7a34"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

16.648700381s ago: executing program 3 (id=5092):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x2f, 0x0, @val=@tracing={0x0, 0xfffffffffffffff9}}, 0x20)

16.577632714s ago: executing program 2 (id=5094):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x141200)
ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r0, 0x800a6f2f, &(0x7f0000000100))

16.577416233s ago: executing program 0 (id=5095):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x2)

16.575651403s ago: executing program 3 (id=5096):
syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000400)=ANY=[], 0x1, 0x15a, &(0x7f00000001c0)="$eJzs0M+LEnEYx/H3d+Y7WqRYZCBBKXSxJPAHdYtwIsmghKJLJ0GnEhQjobylRLcOQlcPy+51Wdi/QFcPi+Bedv+JvXhb2OMu3xndXXbZ/+B5XcTPPM/nGeb1i7204tyrduv7D6/T8eqpD5V3pY+Ho1HR5CHobl98Hg7mx0X4hmasYdGHOjCNOnxpND2r1m6a/4simHH3FiZ3gNjqnhvX9DXkCPbTj2Byz5+zuJp5BRx/774GNxZkWeCkcTPouxNkpu8IsEGp0PLYA5u/5UzyroLuMLO16byfz8pPn7z0/uVLg8eRhJ35Deu46sbu9OuBvdwyFea3kM8/L2RzFs/2/cLeAP0m8hM+K9Cmz2I+K78FEg/1J/ij4L9/a7GjosBk7bjSCp99694vOwUqOaxVE85GNX7bwk5rrqNXbyOEEEIIIYQQQgghhBBCCCGEEEJcdhoAAP//BA5Lvw==")
open$dir(&(0x7f0000001080)='./file1\x00', 0x111000, 0x102)

16.567875203s ago: executing program 2 (id=5097):
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000380))

16.339592609s ago: executing program 0 (id=5099):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
write$sndseq(r0, 0x0, 0x0)

16.29848309s ago: executing program 3 (id=5101):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000340))

16.148438154s ago: executing program 1 (id=5104):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x40003, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x37, 0x1, 0x1, "df00000011000000000000005cc7d019000000000000000000000000f57900", 0x20363159})

16.044853266s ago: executing program 1 (id=5105):
r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x401, 0x2400)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x1, 0x614, 0x4})

16.026231187s ago: executing program 1 (id=5106):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_delneigh={0x2c, 0x1e, 0x1, 0x70bd2d, 0x25dfdc00, {0x2}, [@NDA_NH_ID={0x8, 0xd, 0x2}, @NDA_DST_IPV4={0x8, 0x1, @loopback}]}, 0x2c}}, 0x2000d8d4)

16.003746987s ago: executing program 4 (id=5107):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x68, 0x15, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xd, 0x6, 0x10, 0x20, 0x0, 0x0, 0xfffffffd}}, {0x4}}]}]}, 0x68}}, 0x0)

15.933582229s ago: executing program 1 (id=5108):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x140, 0x7, 0x4, 0x8, 0x0, {0x2}, {}, {}, {0x0, 0xfffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x8, 0x3, 0x1ff, 0x3c, 0x963, 0x3, 0x53, 0x202, 0x1, 0xc})

15.933344218s ago: executing program 1 (id=5109):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'M', 0x3a, 'e', 0x3a, 'mnt', 0x3a, [0x50, 0x4f]}, 0x27)

15.902936429s ago: executing program 1 (id=5110):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000000000000000600142603600e120800110000810401040016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ed2f31b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

1.129016323s ago: executing program 32 (id=5099):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
write$sndseq(r0, 0x0, 0x0)

1.109965333s ago: executing program 33 (id=5097):
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000380))

1.098909373s ago: executing program 34 (id=5101):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000340))

80.694858ms ago: executing program 35 (id=5110):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000000000000000600142603600e120800110000810401040016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ed2f31b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

0s ago: executing program 36 (id=5107):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x68, 0x15, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xd, 0x6, 0x10, 0x20, 0x0, 0x0, 0xfffffffd}}, {0x4}}]}]}, 0x68}}, 0x0)

kernel console output (not intermixed with test programs):

844986, used: 2066844985; already mounted read-only
[   76.374152][ T9925] hpfs: filesystem error: improperly stopped
[   76.382036][ T9925] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   76.383410][ T9925] hpfs: You really don't want any checks? You are crazy...
[   76.385016][ T9925] hpfs: hpfs_map_sector(): read error
[   76.398746][ T9925] hpfs: code page support is disabled
[   76.408087][ T9925] hpfs: hpfs_map_4sectors(): unaligned read
[   76.417330][ T9925] hpfs: hpfs_map_4sectors(): unaligned read
[   76.418444][ T9925] hpfs: filesystem error: unable to find root dir
[   76.652626][ T9973] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.665326][ T9974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2525'.
[   76.669121][ T9973] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   76.812651][ T9997] loop2: detected capacity change from 0 to 64
[   76.882339][T10004] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[   76.942547][T10012] netlink: 'syz.0.2544': attribute type 1 has an invalid length.
[   77.036370][T10026] CIFS: iocharset name too long
[   77.112517][ T9995] loop3: detected capacity change from 0 to 32768
[   77.163007][T10048] delete_channel: no stack
[   77.211773][ T9995] XFS (loop3): Mounting V5 Filesystem
[   77.280512][ T9995] XFS (loop3): Ending clean mount
[   77.294394][T10066] netlink: 'syz.4.2564': attribute type 8 has an invalid length.
[   77.303690][T10066] netlink: 'syz.4.2564': attribute type 7 has an invalid length.
[   77.307657][T10065] loop0: detected capacity change from 0 to 4096
[   77.310348][T10065] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[   77.312636][ T4340] XFS (loop3): Unmounting Filesystem
[   77.559751][T10098] loop4: detected capacity change from 0 to 64
[   77.561735][T10094] siw: device registration error -23
[   77.716416][T10122] netlink: 'syz.0.2591': attribute type 10 has an invalid length.
[   77.964481][T10152] netlink: 'syz.2.2607': attribute type 1 has an invalid length.
[   77.978926][T10152] __nla_validate_parse: 3 callbacks suppressed
[   77.978942][T10152] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2607'.
[   78.007851][T10158] ieee802154 phy0 wpan0: encryption failed: -22
[   78.010236][T10160] xt_TCPMSS: Only works on TCP SYN packets
[   78.048962][T10166] netlink: 'syz.2.2613': attribute type 10 has an invalid length.
[   78.050367][T10166] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2613'.
[   78.074233][T10172] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[   78.075814][T10172] overlayfs: conflicting options: userxattr,redirect_dir=off
[   78.132887][T10179] loop3: detected capacity change from 0 to 1024
[   78.426582][T10220] netlink: 'syz.3.2641': attribute type 5 has an invalid length.
[   78.551789][T10241] netlink: 'syz.4.2650': attribute type 5 has an invalid length.
[   78.588346][T10249] loop2: detected capacity change from 0 to 64
[   78.593892][T10248] loop3: detected capacity change from 0 to 1024
[   78.665006][T10261] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   78.712299][T10268] bpf_jit: unknown opcode 06
[   78.770923][T10275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2667'.
[   79.022485][T10317] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2682'.
[   79.033593][T10321] loop4: detected capacity change from 0 to 1024
[   79.116303][T10332] TCP: TCP_TX_DELAY enabled
[   79.235304][T10346] device syz_tun left promiscuous mode
[   79.245230][T10346] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   79.281547][T10346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.354812][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2707'.
[   79.405052][T10368] cgroup: none used incorrectly
[   79.516361][T10392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2719'.
[   79.632139][T10410] binder: 10409:10410 got reply transaction with no transaction stack
[   79.636186][T10410] binder: 10409:10410 transaction reply to 0:0 failed 3/29201/-71, size 0-0 line 2963
[   79.639004][T10410] binder: 10409:10410 ioctl c0306201 200009c0 returned -14
[   79.720146][T10425] erofs: (device loop0): mounted with root inode @ nid 36.
[   79.732284][T10425] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36
[   79.734383][T10425] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36
[   79.736190][T10425] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[   79.884977][T10447] validate_nla: 2 callbacks suppressed
[   79.884990][T10447] netlink: 'syz.1.2740': attribute type 10 has an invalid length.
[   79.889214][T10447] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2740'.
[   79.913053][T10447] device veth0_vlan left promiscuous mode
[   80.011184][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2744'.
[   80.262517][T10440] XFS (loop3): Mounting V5 Filesystem
[   80.284991][T10440] XFS (loop3): Ending clean mount
[   80.286719][T10440] XFS (loop3): Quotacheck needed: Please wait.
[   80.326665][T10440] XFS (loop3): Quotacheck: Done.
[   80.370494][ T4340] XFS (loop3): Unmounting Filesystem
[   80.437842][T10492] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2756'.
[   80.483381][T10475] XFS (loop0): Mounting V5 Filesystem
[   80.537749][T10475] XFS (loop0): Ending clean mount
[   80.546519][T10475] XFS (loop0): Quotacheck needed: Please wait.
[   80.567998][T10475] XFS (loop0): Quotacheck: Done.
[   80.656628][ T4333] XFS (loop0): Unmounting Filesystem
[   80.691696][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2765'.
[   80.875720][T10539] netlink: 'syz.3.2775': attribute type 10 has an invalid length.
[   80.889542][T10539] device veth1_macvtap left promiscuous mode
[   80.963268][T10546] libceph: resolve '0.0' (ret=-3): failed
[   81.049551][T10562] device veth0_vlan left promiscuous mode
[   81.050663][T10562] device vlan0 entered promiscuous mode
[   81.051589][T10562] device veth0_vlan entered promiscuous mode
[   81.113555][T10574] set_capacity_and_notify: 3 callbacks suppressed
[   81.113564][T10574] loop0: detected capacity change from 0 to 128
[   81.154281][T10574] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   81.168074][T10581] loop1: detected capacity change from 0 to 2048
[   81.173752][T10574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   81.190712][T10581] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   81.443175][T10620] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   81.445692][T10620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.447071][T10620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.470010][T10620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.471663][T10620] device vlan0 left promiscuous mode
[   81.472601][T10620] device veth0_vlan left promiscuous mode
[   81.473698][T10620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.475074][T10620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   81.511349][T10620] device sit1 left promiscuous mode
[   81.512517][T10620] device ip6erspan0 left promiscuous mode
[   81.635630][T10647] loop3: detected capacity change from 0 to 1024
[   81.663298][T10647] hfsplus: Filesystem is marked locked, mounting read-only.
[   81.838227][T10631] loop4: detected capacity change from 0 to 32768
[   81.863152][T10631] __jfs_setxattr: xattr_size = 2175, new_size = 15199
[   81.881945][T10674] loop3: detected capacity change from 0 to 256
[   81.910011][T10674] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d)
[   81.930451][T10674] fuse: Bad value for 'fd'
[   82.125800][T10671] loop0: detected capacity change from 0 to 32768
[   82.152302][T10671] JBD2: Ignoring recovery information on journal
[   82.204815][T10671] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   82.211079][T10671] (syz.0.2839,10671,0):ocfs2_find_entry:1075 ERROR: status = -117
[   82.218372][T10671] (syz.0.2839,10671,0):ocfs2_find_entry:1075 ERROR: status = -117
[   82.224325][T10671] (syz.0.2839,10671,0):ocfs2_mknod:502 ERROR: status = -117
[   82.225512][T10671] (syz.0.2839,10671,0):ocfs2_create:676 ERROR: status = -117
[   82.251740][ T4333] ocfs2: Unmounting device (7,0) on (node local)
[   82.365754][T10701] loop3: detected capacity change from 0 to 32768
[   82.471451][T10701] XFS (loop3): Mounting V5 Filesystem
[   82.506135][T10701] XFS (loop3): Ending clean mount
[   82.588841][T10701] UBIFS error (pid: 10701): cannot open "./file0", error -22
[   82.597977][T10746] netlink: 'syz.4.2860': attribute type 26 has an invalid length.
[   82.632262][T10750] loop4: detected capacity change from 0 to 512
[   82.633813][T10750] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   82.662714][ T4340] XFS (loop3): Unmounting Filesystem
[   82.680490][T10750] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[   82.720695][T10760] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   82.722030][T10760] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   82.724068][T10760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.725518][T10760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.017631][T10791] loop3: detected capacity change from 0 to 4096
[   83.030211][T10791] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[   83.194511][T10821] loop2: detected capacity change from 0 to 256
[   83.232334][T10821] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d)
[   83.262213][T10821] fuse: Bad value for 'fd'
[   83.414136][T10850] __nla_validate_parse: 5 callbacks suppressed
[   83.414148][T10850] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2897'.
[   83.416907][T10850] netlink: 'syz.4.2897': attribute type 1 has an invalid length.
[   83.425336][ T1617] hfsplus: b-tree write err: -5, ino 25
[   83.426465][ T1617] hfsplus: b-tree write err: -5, ino 4
[   83.427489][ T1617] hfsplus: b-tree write err: -5, ino 2
[   83.487330][T10855] device geneve2 entered promiscuous mode
[   83.564462][T10868] xt_ecn: cannot match TCP bits for non-tcp packets
[   83.606441][ T4321] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   83.616741][T10864] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   83.620181][T10864] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[   83.621932][T10864] REISERFS (device loop3): using ordered data mode
[   83.623012][T10864] reiserfs: using flush barriers
[   83.633037][T10864] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   83.650882][T10864] REISERFS (device loop3): checking transaction log (loop3)
[   83.670380][T10864] REISERFS (device loop3): Using rupasov hash to sort names
[   83.680765][T10864] REISERFS (device loop3): using 3.5.x disk format
[   83.682857][T10864] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[   83.684852][T10864] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[   83.687209][T10864] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[   83.740798][T10864] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[   83.746630][T10864] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   83.810101][T10892] tmpfs: Bad value for 'mpol'
[   84.288130][T10968] device geneve3 entered promiscuous mode
[   84.349406][T10975] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[   84.353777][T10977] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   84.365514][T10977] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[   84.521329][T10999] EXT4-fs: Ignoring removed mblk_io_submit option
[   84.544204][T10999] EXT4-fs (loop1): Test dummy encryption mode enabled
[   84.559234][T10999] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   84.591071][T11012] ALSA: mixer_oss: invalid OSS volume '”'
[   84.607651][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   84.932120][T11057] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[   84.940129][T11058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.941537][T11058] IPv6: NLM_F_CREATE should be set when creating new route
[   84.942838][T11058] IPv6: NLM_F_CREATE should be set when creating new route
[   85.108713][T11077] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2995'.
[   85.110373][T11077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2995'.
[   85.111973][T11077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2995'.
[   85.140856][T11082] futex_wake_op: syz.2.2996 tries to shift op by 32; fix this program
[   85.228495][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3003'.
[   85.247153][T11096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3004'.
[   85.302772][T11101] erofs: (device loop0): mounted with root inode @ nid 36.
[   85.337381][T11108] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   85.545703][T11127] netlink: 'syz.2.3019': attribute type 15 has an invalid length.
[   85.557669][T11127] netlink: 'syz.2.3019': attribute type 7 has an invalid length.
[   85.563110][T11127] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3019'.
[   85.632847][T11114] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.3013 (11114)
[   85.643934][T11114] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   85.645749][T11114] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[   85.647138][T11114] BTRFS info (device loop4): enabling ssd optimizations
[   85.648219][T11114] BTRFS info (device loop4): not using ssd optimizations
[   85.661285][T11114] BTRFS info (device loop4): turning off barriers
[   85.662510][T11114] BTRFS info (device loop4): using free space tree
[   85.728170][T11149] AppArmor: change_hat: Invalid input ''
[   85.894088][T11162] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   85.979349][ T4337] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   86.037070][T11140] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[   86.038399][T11140] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   86.044961][T11140] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x3ffff
[   86.046479][T11140] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8
[   86.054127][T11140] F2FS-fs (loop2): invalid crc value
[   86.087557][T11140] F2FS-fs (loop2): Found nat_bits in checkpoint
[   86.114971][T11140] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   86.116650][T11140] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   86.126191][T11185] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   86.147379][T11189] Injecting memory failure for pfn 0x146dfe at process virtual address 0x20ffe000
[   86.162076][T11189] huge_memory: Called split_huge_page for huge zero page
[   86.163443][T11189] Memory failure: 0x146dfe: recovery action for unsplit thp: Ignored
[   86.182046][ T4336] syz-executor: attempt to access beyond end of device
[   86.182046][ T4336] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   86.347611][T11213] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3052'.
[   86.349394][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3052'.
[   86.374530][T11215] device bond1 entered promiscuous mode
[   86.375885][T11215] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.470090][T11234] set_capacity_and_notify: 11 callbacks suppressed
[   86.470099][T11234] loop0: detected capacity change from 0 to 164
[   86.492199][T11234] ISOFS: unable to read i-node block
[   86.493399][T11234] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   86.678762][T11251] netdevsim netdevsim4: loading /lib/firmware// failed with error -22
[   86.680149][T11251] netdevsim netdevsim4: Direct firmware load for / failed with error -22
[   86.686078][T11251] netdevsim netdevsim4: Falling back to sysfs fallback for: /
[   86.709984][T11255] loop3: detected capacity change from 0 to 64
[   86.821192][T11263] xt_HMARK: proto mask must be zero with L3 mode
[   86.946870][T11257] loop2: detected capacity change from 0 to 32768
[   86.955190][T11257] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3073 (11257)
[   86.972632][T11257] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.976297][T11257] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   86.993003][T11257] BTRFS info (device loop2): setting nodatasum
[   86.996477][T11257] BTRFS info (device loop2): force zlib compression, level 3
[   87.001150][T11257] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[   87.006992][T11257] BTRFS info (device loop2): use lzo compression, level 0
[   87.010616][T11257] BTRFS info (device loop2): turning on flush-on-commit
[   87.015522][T11257] BTRFS info (device loop2): enabling auto defrag
[   87.018964][T11257] BTRFS info (device loop2): max_inline at 4096
[   87.022431][T11257] BTRFS info (device loop2): using free space tree
[   87.116274][T11259] loop1: detected capacity change from 0 to 32768
[   87.125878][T11259] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   87.139967][T11259] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   87.160864][T11259] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[   87.162848][ T6670] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   87.164066][ T6670] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   87.166171][T11257] BTRFS info (device loop2): enabling ssd optimizations
[   87.202599][ T6670] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 38ms
[   87.208003][ T6670] gfs2: fsid=syz:syz.0: jid=0: Done
[   87.213352][T11259] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   87.305096][ T4336] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   87.390919][T11259] gfs2: fsid=syz:syz.0: found 1 quota changes
[   87.495943][ T4329] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[   87.514934][ T4329] CPU: 1 PID: 4329 Comm: syz-executor Not tainted syzkaller #0
[   87.516440][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   87.518369][ T4329] Call trace:
[   87.519002][ T4329]  dump_backtrace+0x1c4/0x1f0
[   87.519932][ T4329]  show_stack+0x2c/0x3c
[   87.520755][ T4329]  __dump_stack+0x30/0x40
[   87.521483][T11310] netlink: 'syz.2.3089': attribute type 1 has an invalid length.
[   87.521630][ T4329]  dump_stack_lvl+0xf4/0x15c
[   87.524061][ T4329]  dump_stack+0x1c/0x5c
[   87.524831][ T4329]  gfs2_assert_warn_i+0x16c/0x26c
[   87.525769][ T4329]  gfs2_quota_cleanup+0x444/0x640
[   87.526718][ T4329]  gfs2_make_fs_ro+0x36c/0x444
[   87.527544][ T4329]  gfs2_put_super+0x1dc/0x744
[   87.528387][ T4329]  generic_shutdown_super+0x138/0x32c
[   87.529396][ T4329]  kill_block_super+0x78/0xe0
[   87.530280][ T4329]  gfs2_kill_sb+0xc4/0xd8
[   87.531101][ T4329]  deactivate_locked_super+0xb4/0x128
[   87.532220][ T4329]  deactivate_super+0xe4/0x104
[   87.533127][ T4329]  cleanup_mnt+0x3a8/0x430
[   87.533902][ T4329]  __cleanup_mnt+0x20/0x30
[   87.534694][ T4329]  task_work_run+0x1f4/0x280
[   87.535549][ T4329]  do_notify_resume+0x20f8/0x2c84
[   87.536437][ T4329]  el0_svc+0x98/0x128
[   87.537109][ T4329]  el0t_64_sync_handler+0x84/0xf0
[   87.538022][ T4329]  el0t_64_sync+0x18c/0x190
[   87.540241][T11307] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[   87.693126][T11326] loop1: detected capacity change from 0 to 256
[   87.750842][T11334] loop0: detected capacity change from 0 to 64
[   87.755580][T11301] loop3: detected capacity change from 0 to 32768
[   87.768057][T11301] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   87.773028][T11301] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   87.778273][T11338] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.792055][T11338] I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.793861][T11338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   87.795854][T11301] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[   87.798124][ T4667] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   87.798183][T11338] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.799637][ T4667] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   87.809547][T11338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[   87.811236][T11338] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   87.826180][T11338] UDF-fs: Scanning with blocksize 512 failed
[   87.828322][T11338] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.831041][ T4667] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 31ms
[   87.832351][ T4667] gfs2: fsid=syz:syz.0: jid=0: Done
[   87.833295][T11301] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   87.839726][T11338] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.842829][T11338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   87.854969][T11338] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.856758][T11338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[   87.858435][T11338] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   87.868801][T11338] UDF-fs: Scanning with blocksize 1024 failed
[   87.870214][T11338] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.878752][T11338] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.882560][T11338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   87.884630][T11338] I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   87.886336][T11338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[   87.887980][T11338] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   87.909064][T11338] UDF-fs: Scanning with blocksize 2048 failed
[   87.910895][T11338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   87.919931][T11338] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[   87.921680][T11338] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   87.933384][T11338] UDF-fs: Scanning with blocksize 4096 failed
[   87.934600][T11338] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[   88.024893][T11301] gfs2: fsid=syz:syz.0: found 1 quota changes
[   88.080163][T11364] loop4: detected capacity change from 0 to 4096
[   88.082149][T11364] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[   88.105622][ T4340] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0
[   88.123263][ T4340] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[   88.125240][ T4340] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[   88.131124][ T4340] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[   88.163513][ T4340] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[   88.165933][ T4340] CPU: 0 PID: 4340 Comm: syz-executor Not tainted syzkaller #0
[   88.167380][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   88.169110][ T4340] Call trace:
[   88.169676][ T4340]  dump_backtrace+0x1c4/0x1f0
[   88.170492][ T4340]  show_stack+0x2c/0x3c
[   88.171224][ T4340]  __dump_stack+0x30/0x40
[   88.171991][ T4340]  dump_stack_lvl+0xf4/0x15c
[   88.172813][ T4340]  dump_stack+0x1c/0x5c
[   88.173540][ T4340]  gfs2_assert_warn_i+0x16c/0x26c
[   88.174620][ T4340]  gfs2_quota_cleanup+0x444/0x640
[   88.175688][ T4340]  gfs2_make_fs_ro+0x36c/0x444
[   88.176707][ T4340]  gfs2_put_super+0x1dc/0x744
[   88.177627][ T4340]  generic_shutdown_super+0x138/0x32c
[   88.178717][ T4340]  kill_block_super+0x78/0xe0
[   88.179646][ T4340]  gfs2_kill_sb+0xc4/0xd8
[   88.180466][ T4340]  deactivate_locked_super+0xb4/0x128
[   88.181444][ T4340]  deactivate_super+0xe4/0x104
[   88.182304][ T4340]  cleanup_mnt+0x3a8/0x430
[   88.183076][ T4340]  __cleanup_mnt+0x20/0x30
[   88.183890][ T4340]  task_work_run+0x1f4/0x280
[   88.184730][ T4340]  do_notify_resume+0x20f8/0x2c84
[   88.185655][ T4340]  el0_svc+0x98/0x128
[   88.186380][ T4340]  el0t_64_sync_handler+0x84/0xf0
[   88.187378][ T4340]  el0t_64_sync+0x18c/0x190
[   88.206770][T11349] loop0: detected capacity change from 0 to 32768
[   88.287779][T11384] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   88.314400][T11349] XFS (loop0): Mounting V5 Filesystem
[   88.387051][T11349] XFS (loop0): Ending clean mount
[   88.391837][T11349] XFS (loop0): Quotacheck needed: Please wait.
[   88.414948][T11349] XFS (loop0): Quotacheck: Done.
[   88.471078][T11399] loop3: detected capacity change from 0 to 256
[   88.472639][T11399] exfat: Deprecated parameter 'utf8'
[   88.473587][T11399] exfat: Deprecated parameter 'namecase'
[   88.486305][T11399] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   88.510501][T11366] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[   88.515633][ T4333] XFS (loop0): Unmounting Filesystem
[   88.517339][T11366] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   88.547819][T11366] F2FS-fs (loop1): invalid crc value
[   88.568346][T11366] F2FS-fs (loop1): Found nat_bits in checkpoint
[   88.592291][T11366] F2FS-fs (loop1): Start checkpoint disabled!
[   88.599748][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3130'.
[   88.625892][T11366] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   88.627272][T11366] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   88.721568][ T1617] kworker/u4:4: attempt to access beyond end of device
[   88.721568][ T1617] loop1: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[   88.905355][T11440] netlink: 'syz.2.3147': attribute type 1 has an invalid length.
[   88.986645][T11453] netlink: 'syz.1.3152': attribute type 12 has an invalid length.
[   89.010411][T11457] kAFS: unable to lookup cell 'syz0.r™iXýÕßðÒ<̧®© +âÔR!K+K™áû
4ÚÍö[Ÿ“EšýÖîê¯dî<¾æ6ócº7Ë(n�ÅÙÓÅ@À×8A¯5W®/7|{ÒÚü?�îÇhÇT•³8#&3�ræ?3ÚUü<·ÚG`-իǾóQ8õ%¹$­lH•YïL5еžYÏ^÷!!–\p"È3�¹Ä!£ò·
[   89.010411][T11457] ÛñÙÔh1„#-¹ï*·º„EºÍ=î)ú½¥"À6<Ú—H#.‚ýLÝÊ(˜Ü[Ý1„hã¯uC�8y
Þê½Ða½HÚ'(ùè‘lÚ“—+#-€nоYMËÆî²Àÿð«%'
[   89.123396][T11461] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   89.201631][T11467] EXT4-fs: Ignoring removed nomblk_io_submit option
[   89.201912][T11441] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[   89.204317][T11441] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   89.208108][T11441] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x3ffff
[   89.208396][T11467] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   89.213923][T11441] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8
[   89.217571][T11441] F2FS-fs (loop0): invalid crc value
[   89.228690][T11467] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   89.244960][T11467] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[   89.245406][T11441] F2FS-fs (loop0): Found nat_bits in checkpoint
[   89.246471][T11467] System zones: 0-1, 3-36
[   89.256468][T11467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   89.278983][T11441] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   89.280345][T11441] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   89.364319][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   89.383915][T11481] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   89.383963][ T4333] syz-executor: attempt to access beyond end of device
[   89.383963][ T4333] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   89.413446][T11481] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[   89.415884][T11481] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232
[   89.556407][T11497] syz.1.3171: attempt to access beyond end of device
[   89.556407][T11497] loop1: rw=0, sector=1022032, nr_sectors = 8 limit=512
[   89.575181][T11502] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   89.591311][T11505] AppArmor: change_hat: Invalid input '0x;'
[   89.718735][T11513] ntfs3: loop1: Failed to load $Extend.
[   89.887594][T11534] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   90.001808][T11464] F2FS-fs (loop3): Test dummy encryption mode enabled
[   90.040431][T11464] F2FS-fs (loop3): Found nat_bits in checkpoint
[   90.065452][T11464] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b
[   90.097694][T11560] netlink: 'syz.2.3200': attribute type 1 has an invalid length.
[   90.305176][T11583] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3212'.
[   90.317149][T11583] 0ªX¹¦À: renamed from caif0
[   90.388815][T11583] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   90.452295][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3221'.
[   90.457197][T11602] CIFS: VFS: Unable to allocate memory for devname
[   90.496273][T11610] netlink: 'syz.2.3225': attribute type 1 has an invalid length.
[   90.522974][T11614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3226'.
[   90.587076][T11623] nft_compat: unsupported protocol 5
[   90.846959][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3251'.
[   90.993149][T11687] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3261'.
[   90.994859][T11687] 0ªX¹¦À: renamed from caif0
[   91.059240][T11687] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   91.181421][T11714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.186652][T11718] exfat: Deprecated parameter 'utf8'
[   91.187621][T11718] exfat: Deprecated parameter 'utf8'
[   91.205363][T11714] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 520
[   91.210241][T11718] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   91.282112][T11730] netlink: 'syz.2.3284': attribute type 10 has an invalid length.
[   91.283839][T11730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.290251][T11732] netlink: 'syz.4.3285': attribute type 1 has an invalid length.
[   91.291892][T11732] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3285'.
[   91.362230][T11741] FAT-fs (loop4): Directory bread(block 64) failed
[   91.363507][T11741] FAT-fs (loop4): Directory bread(block 65) failed
[   91.364606][T11741] FAT-fs (loop4): Directory bread(block 66) failed
[   91.365794][T11741] FAT-fs (loop4): Directory bread(block 67) failed
[   91.366886][T11741] FAT-fs (loop4): Directory bread(block 68) failed
[   91.368039][T11741] FAT-fs (loop4): Directory bread(block 69) failed
[   91.375475][T11741] FAT-fs (loop4): Directory bread(block 70) failed
[   91.376699][T11741] FAT-fs (loop4): Directory bread(block 71) failed
[   91.377816][T11741] FAT-fs (loop4): Directory bread(block 72) failed
[   91.385614][T11741] FAT-fs (loop4): Directory bread(block 73) failed
[   91.424364][T11751] device bridge_slave_1 left promiscuous mode
[   91.425686][T11751] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.480499][T11751] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[   91.574634][T11772] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.604869][T11772] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.785846][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3321'.
[   91.801181][T11809] set_capacity_and_notify: 16 callbacks suppressed
[   91.801190][T11809] loop0: detected capacity change from 0 to 16
[   91.813714][T11809] erofs: (device loop0): mounted with root inode @ nid 36.
[   92.065463][T11852] netlink: 'syz.2.3345': attribute type 1 has an invalid length.
[   92.084997][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3347'.
[   92.092278][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3347'.
[   92.301562][T11883] loop2: detected capacity change from 0 to 16
[   92.310905][T11883] erofs: (device loop2): mounted with root inode @ nid 36.
[   92.377412][T11890] Soft offlining pfn 0x12452f at process virtual address 0x202e0000
[   92.392274][T11890] Soft offlining pfn 0x137068 at process virtual address 0x202e1000
[   92.402841][T11890] Soft offlining pfn 0x137069 at process virtual address 0x202e2000
[   92.414618][T11861] loop0: detected capacity change from 0 to 40427
[   92.437421][T11861] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   92.440792][T11861] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   92.447762][T11861] F2FS-fs (loop0): invalid crc_offset: 1
[   92.450589][T11894] netlink: 'syz.2.3365': attribute type 2 has an invalid length.
[   92.471727][T11861] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   92.507429][T11901] device bridge_slave_1 left promiscuous mode
[   92.508877][T11901] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.510889][T11861] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   92.512110][T11861] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   92.541459][T11879] loop4: detected capacity change from 0 to 32768
[   92.542970][T11879] XFS: noikeep mount option is deprecated.
[   92.583771][T11879] XFS (loop4): Mounting V5 Filesystem
[   92.589853][T11901] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[   92.608486][T11879] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   92.627916][T11879] XFS (loop4): Starting recovery (logdev: internal)
[   92.661929][T11879] XFS (loop4): Ending recovery (logdev: internal)
[   92.675541][T11919] loop3: detected capacity change from 0 to 1024
[   92.703835][ T4337] XFS (loop4): Unmounting Filesystem
[   92.930431][T11950] loop1: detected capacity change from 0 to 128
[   92.960484][T11950] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0)
[   92.962114][T11950] FAT-fs (loop1): Filesystem has been set read-only
[   93.066087][T11965] loop1: detected capacity change from 0 to 1024
[   93.123452][T11974] IPv6: Can't replace route, no match found
[   93.207157][T11989] Bluetooth: hci0: Opcode 0x080f failed: -22
[   93.357330][T12007] loop2: detected capacity change from 0 to 256
[   93.376528][T12007] FAT-fs (loop2): Directory bread(block 64) failed
[   93.377769][T12007] FAT-fs (loop2): Directory bread(block 65) failed
[   93.387131][T12011] netlink: 'syz.1.3416': attribute type 1 has an invalid length.
[   93.388533][T12011] netlink: 'syz.1.3416': attribute type 12 has an invalid length.
[   93.390118][T12007] FAT-fs (loop2): Directory bread(block 66) failed
[   93.391270][T12007] FAT-fs (loop2): Directory bread(block 67) failed
[   93.392421][T12007] FAT-fs (loop2): Directory bread(block 68) failed
[   93.393529][T12007] FAT-fs (loop2): Directory bread(block 69) failed
[   93.394705][T12007] FAT-fs (loop2): Directory bread(block 70) failed
[   93.395799][T12007] FAT-fs (loop2): Directory bread(block 71) failed
[   93.396868][T12007] FAT-fs (loop2): Directory bread(block 72) failed
[   93.397965][T12007] FAT-fs (loop2): Directory bread(block 73) failed
[   93.599758][T12035] xt_CT: You must specify a L4 protocol and not use inversions on it
[   93.682163][T12048] loop3: detected capacity change from 0 to 256
[   93.777725][T12058] loop1: detected capacity change from 0 to 2048
[   93.786814][T12058] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2116033, location=2116033
[   93.795959][T12058] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   94.333269][T12131] __nla_validate_parse: 7 callbacks suppressed
[   94.333281][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3468'.
[   94.341740][T11981] F2FS-fs (loop0): Found nat_bits in checkpoint
[   94.370928][T11981] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   94.742591][T12146] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   94.786920][ T4340] ocfs2: Unmounting device (7,3) on (node local)
[   94.833909][T12136] XFS (loop1): Mounting V5 Filesystem
[   94.902924][T12203] 0x000000000000-0x000000020000 : ""
[   94.922159][T12136] XFS (loop1): Ending clean mount
[   94.925865][T12136] XFS (loop1): Quotacheck needed: Please wait.
[   94.953220][T12136] XFS (loop1): Quotacheck: Done.
[   94.964862][T12203] ftl_cs: FTL header not found.
[   95.040314][ T4329] XFS (loop1): Unmounting Filesystem
[   95.113406][T12226] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[   95.219115][   T48] Bluetooth: hci0: command 0x080f tx timeout
[   95.348661][T12260] netlink: 'syz.2.3515': attribute type 49 has an invalid length.
[   95.467240][T12265] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   95.502798][ T4337] EXT4-fs (loop4): unmounting filesystem.
[   95.524622][T12248] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3511 (12248)
[   95.539081][T12248] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   95.544575][T12248] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[   95.550767][T12248] BTRFS info (device loop3): using free space tree
[   95.571473][T12260] device ip6gretap0 entered promiscuous mode
[   95.607848][T12255] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   95.636209][T12255] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   95.666315][T12255] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[   95.672432][ T4668] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   95.673671][ T4668] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   95.712063][ T4668] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 38ms
[   95.713387][ T4668] gfs2: fsid=syz:syz.0: jid=0: Done
[   95.714294][T12255] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   95.737922][T12301] netlink: 'syz.2.3525': attribute type 1 has an invalid length.
[   95.763024][T12255] gfs2: fsid=syz:syz.0: found 1 quota changes
[   95.772867][T12255] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[   95.772867][T12255]   inode = 11 2339
[   95.772867][T12255]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413
[   95.776581][T12255] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[   95.778428][T12255] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:12255 [syz.0.3512] gfs2_quota_sync+0x2cc/0x4e8
[   95.780749][T12255] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[   95.782495][T12255] gfs2: fsid=syz:syz.0: about to withdraw this file system
[   95.790001][T12255] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[   95.791603][T12255] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[   95.793204][T12255] gfs2: fsid=syz:syz.0: File system withdrawn
[   95.795031][T12255] CPU: 0 PID: 12255 Comm: syz.0.3512 Not tainted syzkaller #0
[   95.796309][T12255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   95.797941][T12255] Call trace:
[   95.798507][T12255]  dump_backtrace+0x1c4/0x1f0
[   95.799512][T12255]  show_stack+0x2c/0x3c
[   95.800374][T12255]  __dump_stack+0x30/0x40
[   95.801181][T12255]  dump_stack_lvl+0xf4/0x15c
[   95.802045][T12255]  dump_stack+0x1c/0x5c
[   95.802779][T12255]  gfs2_withdraw+0x9f8/0x1244
[   95.803633][T12255]  gfs2_consist_inode_i+0xf8/0x114
[   95.804573][T12255]  gfs2_inode_refresh+0x9a0/0xe64
[   95.805486][T12255]  inode_go_instantiate+0x4c/0x68
[   95.806399][T12255]  gfs2_instantiate+0x178/0x2b4
[   95.807309][T12255]  gfs2_glock_wait+0x1b0/0x290
[   95.808215][T12255]  gfs2_glock_nq+0x8bc/0x11c4
[   95.809064][T12255]  do_sync+0x414/0xa68
[   95.809786][T12255]  gfs2_quota_sync+0x2cc/0x4e8
[   95.810639][T12255]  gfs2_sync_fs+0x50/0xc8
[   95.811430][T12255]  sync_filesystem+0xe8/0x218
[   95.812294][T12255]  gfs2_reconfigure+0x100/0xab4
[   95.813197][T12255]  reconfigure_super+0x1d4/0x7cc
[   95.814101][T12255]  path_mount+0xc98/0xe6c
[   95.814891][T12255]  __arm64_sys_mount+0x4a0/0x5a0
[   95.815789][T12255]  invoke_syscall+0x98/0x290
[   95.816650][T12255]  el0_svc_common+0x13c/0x258
[   95.817480][T12255]  do_el0_svc+0x5c/0x134
[   95.818205][T12255]  el0_svc+0x58/0x128
[   95.818906][T12255]  el0t_64_sync_handler+0x84/0xf0
[   95.819783][T12255]  el0t_64_sync+0x18c/0x190
[   95.914202][T12248] BTRFS info (device loop3): enabling ssd optimizations
[   95.933981][ T4333] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[   95.936226][ T4333] CPU: 1 PID: 4333 Comm: syz-executor Not tainted syzkaller #0
[   95.937392][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   95.939097][ T4333] Call trace:
[   95.939695][ T4333]  dump_backtrace+0x1c4/0x1f0
[   95.940578][ T4333]  show_stack+0x2c/0x3c
[   95.941386][ T4333]  __dump_stack+0x30/0x40
[   95.942208][ T4333]  dump_stack_lvl+0xf4/0x15c
[   95.943026][ T4333]  dump_stack+0x1c/0x5c
[   95.943788][ T4333]  gfs2_assert_warn_i+0x16c/0x26c
[   95.944702][ T4333]  gfs2_quota_cleanup+0x444/0x640
[   95.945602][ T4333]  gfs2_put_super+0x1ec/0x744
[   95.946436][ T4333]  generic_shutdown_super+0x138/0x32c
[   95.947374][ T4333]  kill_block_super+0x78/0xe0
[   95.948218][ T4333]  gfs2_kill_sb+0xc4/0xd8
[   95.949004][ T4333]  deactivate_locked_super+0xb4/0x128
[   95.949960][ T4333]  deactivate_super+0xe4/0x104
[   95.950839][ T4333]  cleanup_mnt+0x3a8/0x430
[   95.951645][ T4333]  __cleanup_mnt+0x20/0x30
[   95.952413][ T4333]  task_work_run+0x1f4/0x280
[   95.953236][ T4333]  do_notify_resume+0x20f8/0x2c84
[   95.954161][ T4333]  el0_svc+0x98/0x128
[   95.954891][ T4333]  el0t_64_sync_handler+0x84/0xf0
[   95.955809][ T4333]  el0t_64_sync+0x18c/0x190
[   95.987632][ T4340] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   96.075356][T12334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3534'.
[   96.222483][T12349] iso9660: Corrupted directory entry in block 14 of inode 1920
[   96.277614][ T4321] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4321)
[   96.442625][T12383] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051
[   96.473809][T12383] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.535376][T12398] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   96.568811][T12408] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.570951][T12398] NILFS (loop1): unrecognized mount option "»�É »ÞØyF̳¥óoô#bQØc4ñuEÌ®ˆ"
[   96.690054][T12423] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   96.708759][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3574'.
[   96.711199][T12423] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[   96.717009][T12423] Quota error (device loop1): write_blk: dquota write failed
[   96.718297][T12423] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[   96.724016][T12423] Quota error (device loop1): write_blk: dquota write failed
[   96.725437][T12423] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[   96.727455][T12423] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3573: Failed to acquire dquot type 1
[   96.731691][T12423] EXT4-fs (loop1): 1 truncate cleaned up
[   96.732747][T12423] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   96.804326][T12423] EXT4-fs error (device loop1): __ext4_remount:6650: comm syz.1.3573: Abort forced by user
[   96.813486][T12443] tmpfs: Bad value for 'mpol'
[   96.813612][T12423] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[   96.818454][T12441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3579'.
[   96.864094][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   96.866397][T12448] netlink: 'syz.3.3584': attribute type 29 has an invalid length.
[   96.899948][T12454] set_capacity_and_notify: 12 callbacks suppressed
[   96.899958][T12454] loop1: detected capacity change from 0 to 512
[   96.911574][T12454] EXT4-fs: Ignoring removed orlov option
[   96.921303][T12454] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   96.977727][ T4329] EXT4-fs (loop1): unmounting filesystem.
[   97.107496][T12481] loop3: detected capacity change from 0 to 512
[   97.108549][T12457] loop0: detected capacity change from 0 to 32768
[   97.112356][T12476] sp0: Synchronizing with TNC
[   97.129831][T12457] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   97.135224][T12481] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   97.157191][T12481] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   97.160084][ T4333] ocfs2: Unmounting device (7,0) on (node local)
[   97.195971][T12481] EXT4-fs (loop3): 1 truncate cleaned up
[   97.197058][T12481] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   97.206597][T12491] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   97.212611][T12481] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.3599: Logical block already allocated
[   97.231538][T12481] EXT4-fs (loop3): Remounting filesystem read-only
[   97.240657][T12493] netlink: set zone limit has 8 unknown bytes
[   97.272190][ T4340] EXT4-fs (loop3): unmounting filesystem.
[   97.274375][T12497] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3605'.
[   97.405756][T12519] netlink: 'syz.1.3614': attribute type 1 has an invalid length.
[   97.581650][T12548] loop1: detected capacity change from 0 to 128
[   97.596126][T12548] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   97.602661][T12548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.613889][T12550] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3630'.
[   97.635589][T12554] netlink: 'syz.3.3631': attribute type 10 has an invalid length.
[   97.657717][T12554] bridge0: port 3(bond0) entered disabled state
[   97.666527][T12554] device bond0 left promiscuous mode
[   97.667415][T12554] device bond_slave_0 left promiscuous mode
[   97.668552][T12554] device bond_slave_1 left promiscuous mode
[   97.673698][T12554] bridge0: port 3(bond0) entered disabled state
[   97.740645][T12554] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.742916][T12554] team0: Port device bond0 added
[   97.793171][T12572] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3640'.
[   97.794975][T12572] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3640'.
[   97.796543][T12572] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3640'.
[   97.837812][T12581] SET target dimension over the limit!
[   97.945366][T12594] loop3: detected capacity change from 0 to 4096
[   98.012543][T12594] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   98.014001][T12594] ntfs3: loop3: Failed to load $Extend.
[   98.015350][T12606] netlink: 'syz.4.3656': attribute type 1 has an invalid length.
[   98.048524][T12611] netlink: 399 bytes leftover after parsing attributes in process `syz.2.3658'.
[   98.061103][T12611] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16)
[   98.103445][ T4340] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22.
[   98.105286][ T4340] ntfs3: loop3: ntfs_evict_inode r=9 failed, -22.
[   98.285459][T12638] loop4: detected capacity change from 0 to 4096
[   98.287021][T12638] EXT4-fs: Ignoring removed mblk_io_submit option
[   98.294760][T12646] loop2: detected capacity change from 0 to 8
[   98.336788][T12646] SQUASHFS error: Unable to read inode 0xa7
[   98.364963][T12638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   98.381287][T12653] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[   98.417387][ T4337] EXT4-fs (loop4): unmounting filesystem.
[   98.512868][T12665] xt_CT: No such helper "pptp"
[   98.528221][T12672] loop3: detected capacity change from 0 to 22
[   98.529795][T12672] MTD: Attempt to mount non-MTD device "/dev/loop3"
[   98.538892][T12672] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   98.765663][T12715] netlink: 'syz.0.3708': attribute type 3 has an invalid length.
[   98.791534][T12710] device geneve1 entered promiscuous mode
[   98.926785][T12740] netlink: 'syz.4.3720': attribute type 15 has an invalid length.
[   99.123525][T12773] netlink: 'syz.4.3734': attribute type 9 has an invalid length.
[   99.258872][T12783] loop0: detected capacity change from 0 to 8192
[   99.273301][T12783] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   99.275457][T12783] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   99.277098][T12783] REISERFS (device loop0): using ordered data mode
[   99.278531][T12783] reiserfs: using flush barriers
[   99.288107][T12783] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   99.291752][T12783] REISERFS (device loop0): checking transaction log (loop0)
[   99.315758][T12800] loop4: detected capacity change from 0 to 256
[   99.317338][T12800] exfat: Deprecated parameter 'utf8'
[   99.347384][T12783] REISERFS (device loop0): Using tea hash to sort names
[   99.349302][T12783] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   99.371718][T12800] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[   99.427053][T12804] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   99.432846][T12806] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   99.433494][T12804] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[   99.434236][T12806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   99.436040][T12804] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   99.440057][T12806] vhci_hcd vhci_hcd.0: Device attached
[   99.454051][T12804] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   99.461771][T12804] ntfs: volume version 3.1.
[   99.473520][T12807] vhci_hcd: connection closed
[   99.475773][ T1617] vhci_hcd: stop threads
[   99.478117][ T1617] vhci_hcd: release socket
[   99.479135][ T1617] vhci_hcd: disconnect device
[   99.489305][T12804] ntfs: (device loop1): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[   99.600595][T12803] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.3752 (12803)
[   99.605372][T12803] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   99.607239][T12803] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[   99.619294][T12803] BTRFS info (device loop3): force zlib compression, level 3
[   99.620585][T12803] BTRFS info (device loop3): force clearing of disk cache
[   99.621887][T12803] BTRFS info (device loop3): setting nodatasum
[   99.622988][T12803] BTRFS info (device loop3): use zlib compression, level 3
[   99.624240][T12803] BTRFS info (device loop3): allowing degraded mounts
[   99.625434][T12803] BTRFS info (device loop3): enabling disk space caching
[   99.626592][T12803] BTRFS info (device loop3): disk space caching is enabled
[   99.664367][T12831] __nla_validate_parse: 2 callbacks suppressed
[   99.664378][T12831] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3762'.
[   99.801016][T12855] FAT-fs (loop1): Directory bread(block 199916) failed
[   99.802376][T12855] FAT-fs (loop1): Directory bread(block 199917) failed
[   99.803511][T12855] FAT-fs (loop1): Directory bread(block 199918) failed
[   99.804740][T12855] FAT-fs (loop1): Directory bread(block 199919) failed
[   99.805914][T12855] FAT-fs (loop1): Directory bread(block 199920) failed
[   99.815406][T12803] BTRFS info (device loop3): enabling ssd optimizations
[   99.817056][T12803] BTRFS info (device loop3): rebuilding free space tree
[   99.820605][T12855] FAT-fs (loop1): Directory bread(block 199921) failed
[   99.822762][T12855] FAT-fs (loop1): Directory bread(block 199922) failed
[   99.824026][T12855] FAT-fs (loop1): Directory bread(block 199923) failed
[   99.831081][T12803] BTRFS info (device loop3): disabling free space tree
[   99.832321][T12803] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   99.834045][T12803] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   99.840504][T12855] FAT-fs (loop1): Directory bread(block 199916) failed
[   99.841835][T12855] FAT-fs (loop1): Directory bread(block 199917) failed
[   99.847641][T12803] BTRFS info (device loop3): balance: start -f -susage=0,usage=0..0,limit=6
[   99.850431][T12803] BTRFS info (device loop3): balance: ended with status: 0
[   99.900932][ T4340] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  100.011562][T12869] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  100.022701][T12867] Non-string source
[  100.035767][T12873] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.234256][T12888] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  100.245451][T12888] EXT4-fs error (device loop1): empty_inline_dir:1903: inode #12: block 5: comm syz.1.3781: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0
[  100.279935][T12888] EXT4-fs warning (device loop1): empty_inline_dir:1910: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  100.344883][ T4329] EXT4-fs (loop1): unmounting filesystem.
[  100.392704][T12921] netlink: 'syz.3.3797': attribute type 12 has an invalid length.
[  100.398261][T12921] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3797'.
[  100.526594][T12936] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3804: bg 0: block 313: padding at end of block bitmap is not set
[  100.537936][T12936] EXT4-fs (loop4): Remounting filesystem read-only
[  100.545575][T12936] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  100.576959][T12936] EXT4-fs (loop4): 1 truncate cleaned up
[  100.578082][T12936] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  100.590137][T12944] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  100.610963][T12944] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.696451][ T4337] EXT4-fs (loop4): unmounting filesystem.
[  100.917902][T12974] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  100.924378][T12977] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.934868][T12974] Remounting filesystem read-only
[  100.964119][T12974] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6
[  100.977906][T12958] F2FS-fs (loop0): Invalid log blocks per segment (83886089)
[  100.980510][T12958] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  100.984941][T12958] F2FS-fs (loop0): invalid crc value
[  101.002508][T12958] F2FS-fs (loop0): Found nat_bits in checkpoint
[  101.017060][T12958] F2FS-fs (loop0): Start checkpoint disabled!
[  101.068459][T12958] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  101.070080][T12958] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  101.082139][T12990] netlink: 'syz.3.3830': attribute type 2 has an invalid length.
[  101.083553][T12990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3830'.
[  101.283997][T13016] netlink: 'syz.2.3841': attribute type 1 has an invalid length.
[  101.285408][T13016] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.3841'.
[  101.341172][T13022] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.370434][T13022] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  101.383991][ T1698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  101.385748][T13024] bond0: Unable to set up delay as MII monitoring is disabled
[  101.420170][T13018] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  101.493504][ T4340] EXT4-fs (loop3): unmounting filesystem.
[  101.510582][T13035] netlink: 2052 bytes leftover after parsing attributes in process `syz.0.3850'.
[  101.602058][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3858'.
[  101.726337][T13071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3868'.
[  101.728256][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3868'.
[  101.921874][T13102] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3882'.
[  101.975079][T13112] set_capacity_and_notify: 12 callbacks suppressed
[  101.975089][T13112] loop0: detected capacity change from 0 to 1024
[  102.008142][T13115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3890'.
[  102.015979][T13112] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  102.022310][T13120] loop2: detected capacity change from 0 to 256
[  102.038078][T13112] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.3888: directory missing '..'
[  102.078408][T13122] netlink: 'syz.3.3893': attribute type 15 has an invalid length.
[  102.084730][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  102.154860][T13133] loop3: detected capacity change from 0 to 16
[  102.172424][T13133] erofs: (device loop3): mounted with root inode @ nid 36.
[  102.188793][T13133] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -19 in[52, 4044] out[2639]
[  102.191099][T13133] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[  102.277135][T13149] loop4: detected capacity change from 0 to 512
[  102.280442][T13150] loop0: detected capacity change from 0 to 256
[  102.287711][T13149] EXT4-fs (loop4): 1 truncate cleaned up
[  102.288854][T13149] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  102.295877][T13150] FAT-fs (loop0): Directory bread(block 64) failed
[  102.297067][T13150] FAT-fs (loop0): Directory bread(block 65) failed
[  102.298170][T13150] FAT-fs (loop0): Directory bread(block 66) failed
[  102.299531][T13150] FAT-fs (loop0): Directory bread(block 67) failed
[  102.301425][T13150] FAT-fs (loop0): Directory bread(block 68) failed
[  102.302556][T13150] FAT-fs (loop0): Directory bread(block 69) failed
[  102.303646][T13150] FAT-fs (loop0): Directory bread(block 70) failed
[  102.304761][T13150] FAT-fs (loop0): Directory bread(block 71) failed
[  102.306920][T13150] FAT-fs (loop0): Directory bread(block 72) failed
[  102.308003][T13150] FAT-fs (loop0): Directory bread(block 73) failed
[  102.347793][ T4337] EXT4-fs (loop4): unmounting filesystem.
[  102.578015][T13154] loop3: detected capacity change from 0 to 40427
[  102.590150][T13154] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  102.591543][T13154] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  102.652821][T13154] F2FS-fs (loop3): Found nat_bits in checkpoint
[  102.657177][T13190] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  102.681191][T13154] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  102.682541][T13154] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  102.812608][T13205] loop4: detected capacity change from 0 to 4096
[  102.817887][T13205] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  102.819570][T13207] loop0: detected capacity change from 0 to 4096
[  102.827164][T13207] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  102.829899][T13207] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  102.833690][T13207] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  102.835866][T13207] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  102.838097][T13207] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  102.849617][T13205] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  102.853310][T13205] ntfs3: loop4: Failed to load $Extend.
[  102.856270][T13207] ntfs: volume version 3.1.
[  102.871771][T13207] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  102.873826][T13207] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  102.875784][T13207] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  102.891407][T13207] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[  102.893356][T13207] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2.
[  102.896567][T13205] ntfs3: loop4: ino=5, "/" directory corrupted
[  103.021075][T13232] netlink: 'syz.0.3942': attribute type 1 has an invalid length.
[  103.251696][T13261] loop4: detected capacity change from 0 to 2048
[  103.267638][T13261] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.335884][T13220] syz.2.3938 (13220): drop_caches: 3
[  103.336886][T13266] overlayfs: bad mount option "redirect_dir=off:/"
[  103.393593][T13270] loop0: detected capacity change from 0 to 2048
[  103.397839][T13270] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  103.420584][T13270] syz.0.3963: attempt to access beyond end of device
[  103.420584][T13270] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  103.423380][T13275] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.445843][T13270] syz.0.3963: attempt to access beyond end of device
[  103.445843][T13270] loop0: rw=0, sector=9437254, nr_sectors = 2 limit=2048
[  103.451481][T13270] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=0)
[  103.872971][T13299] XFS (loop0): Mounting V5 Filesystem
[  103.911078][T13299] XFS (loop0): Ending clean mount
[  104.003376][ T4333] XFS (loop0): Unmounting Filesystem
[  104.077784][T13320] ERROR: (device loop3): dbAlloc: unable to allocate blocks
[  104.077784][T13320] 
[  104.095444][T13320] ERROR: (device loop3): remounting filesystem as read-only
[  104.096820][T13320] ialloc: diAlloc returned -5!
[  104.243981][T13316] F2FS-fs (loop2): Found nat_bits in checkpoint
[  104.282122][T13316] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  104.459610][T13354] infiniband !yz!: set active
[  104.460751][T13354] infiniband !yz!: added team_slave_0
[  104.471809][T13354] RDS/IB: !yz!: added
[  104.473014][T13354] smc: adding ib device !yz! with port count 1
[  104.474114][T13354] smc:    ib device !yz! port 1 has pnetid 
[  104.631166][T13376] Major/Minor mismatch, trying to mount newer 4.2304 filesystem
[  104.652094][T13376] Please update your kernel
[  104.867766][T13402] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.064699][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4036'.
[  105.512611][T13485] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  105.524369][T13485] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.4058: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  105.563495][ T4329] EXT4-fs (loop1): unmounting filesystem.
[  105.570145][T13492] iso9660: Corrupted directory entry in block 14 of inode 1920
[  105.692091][T13522] usb usb1: usbfs: process 13522 (syz.2.4077) did not claim interface 0 before use
[  105.826549][T13543] netlink: 'syz.2.4088': attribute type 29 has an invalid length.
[  105.836147][T13544] netlink: 'syz.3.4089': attribute type 13 has an invalid length.
[  105.848834][T13544] netlink: 'syz.3.4089': attribute type 12 has an invalid length.
[  106.001453][T13562] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  106.008902][T13564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4098'.
[  106.010633][T13564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4098'.
[  106.028700][T13565] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  106.041551][T13562] NILFS (loop3): unrecognized mount option "»�É »ÞØyF̳¥óoô#bQØc4ñuEÌ®ˆ"
[  106.097521][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4100'.
[  106.101775][T13571] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  106.212850][T13579] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4105'.
[  106.214705][T13579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4105'.
[  106.456230][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4113'.
[  106.706270][T13629] netlink: 'syz.3.4123': attribute type 21 has an invalid length.
[  106.707843][T13629] netlink: 'syz.3.4123': attribute type 20 has an invalid length.
[  106.812265][T13645] cgroup: Unexpected value for 'cpuset_v2_mode'
[  106.847944][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4133'.
[  106.959666][T13550] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 150994945)
[  106.961213][T13550] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  106.966259][T13550] F2FS-fs (loop2): invalid crc value
[  106.992376][T13550] F2FS-fs (loop2): Found nat_bits in checkpoint
[  107.036421][T13550] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  107.037624][T13550] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  107.078090][T13550] F2FS-fs (loop2): access invalid blkaddr:36
[  107.080723][T13550] CPU: 1 PID: 13550 Comm: syz.2.4092 Not tainted syzkaller #0
[  107.082003][T13550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  107.083644][T13550] Call trace:
[  107.084182][T13550]  dump_backtrace+0x1c4/0x1f0
[  107.085025][T13550]  show_stack+0x2c/0x3c
[  107.085788][T13550]  __dump_stack+0x30/0x40
[  107.086619][T13550]  dump_stack_lvl+0xf4/0x15c
[  107.086843][T13643] set_capacity_and_notify: 13 callbacks suppressed
[  107.086851][T13643] loop4: detected capacity change from 0 to 40427
[  107.087493][T13550]  dump_stack+0x1c/0x5c
[  107.090618][T13550]  f2fs_is_valid_blkaddr+0x9c4/0xefc
[  107.090624][T13643] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  107.090637][T13550]  f2fs_get_read_data_page+0x24c/0x60c
[  107.091596][T13643] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  107.093122][T13550]  f2fs_get_lock_data_page+0x68/0x2ac
[  107.096501][T13550]  f2fs_get_new_data_page+0x2c4/0x5b0
[  107.096978][T13643] F2FS-fs (loop4): invalid crc value
[  107.097473][T13550]  f2fs_add_regular_entry+0x508/0xb94
[  107.098439][T13643] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  107.099370][T13550]  f2fs_do_add_link+0x2a0/0x4f8
[  107.099391][T13550]  f2fs_create+0x624/0x8b0
[  107.099402][T13550]  path_openat+0xda8/0x27a0
[  107.099411][T13550]  do_filp_open+0x198/0x38c
[  107.099419][T13550]  do_sys_openat2+0x134/0x3fc
[  107.099425][T13550]  __arm64_sys_openat+0x11c/0x150
[  107.099431][T13550]  invoke_syscall+0x98/0x290
[  107.099440][T13550]  el0_svc_common+0x13c/0x258
[  107.099447][T13550]  do_el0_svc+0x5c/0x134
[  107.099454][T13550]  el0_svc+0x58/0x128
[  107.104160][T13643] F2FS-fs (loop4): Found nat_bits in checkpoint
[  107.104369][T13550]  el0t_64_sync_handler+0x84/0xf0
[  107.110587][T13643] F2FS-fs (loop4): recover fsync data on readonly fs
[  107.111344][T13550]  el0t_64_sync+0x18c/0x190
[  107.126725][T13643] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30
[  107.128163][T13643] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  107.238316][T13690] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4148'.
[  107.240697][T13690] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4148'.
[  107.528000][T13721] netlink: 'syz.1.4167': attribute type 1 has an invalid length.
[  107.565108][T13694] loop4: detected capacity change from 0 to 32768
[  107.598028][T13730] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16)
[  107.642986][T13694] XFS (loop4): Mounting V5 Filesystem
[  107.681574][T13733] loop0: detected capacity change from 0 to 4096
[  107.691752][T13694] XFS (loop4): Ending clean mount
[  107.766778][ T4337] XFS (loop4): Unmounting Filesystem
[  107.785900][T13733] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  107.790884][T13733] ntfs3: loop0: Failed to load $Extend.
[  107.879657][ T4333] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22.
[  107.881287][ T4333] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22.
[  107.906741][T13768] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16)
[  107.925783][T13771] loop3: detected capacity change from 0 to 8
[  107.955232][T13771] SQUASHFS error: Unable to read inode 0xa7
[  108.244977][T13810] loop0: detected capacity change from 0 to 22
[  108.246522][T13810] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  108.256849][T13779] loop1: detected capacity change from 0 to 32768
[  108.258478][T13810] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  108.272400][T13807] loop3: detected capacity change from 0 to 4096
[  108.273932][T13807] EXT4-fs: Ignoring removed mblk_io_submit option
[  108.312293][T13807] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  108.331831][T13826] loop4: detected capacity change from 0 to 8
[  108.340757][T13779] XFS (loop1): Mounting V5 Filesystem
[  108.377113][T13779] XFS (loop1): Ending clean mount
[  108.394014][T13826] SQUASHFS error: Unable to read inode 0xa7
[  108.400941][ T4340] EXT4-fs (loop3): unmounting filesystem.
[  108.470396][T13840] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[  108.511506][ T4329] XFS (loop1): Unmounting Filesystem
[  108.570915][T13845] xt_CT: No such helper "pptp"
[  108.584388][T13856] netlink: 'syz.3.4224': attribute type 49 has an invalid length.
[  108.626369][T13861] kAFS: unable to lookup cell ''
[  108.722779][T13876] netlink: 'syz.0.4234': attribute type 15 has an invalid length.
[  108.930553][T13899] loop1: detected capacity change from 0 to 22
[  108.934417][T13899] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  108.955227][T13899] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  109.118805][T13917] device geneve1 entered promiscuous mode
[  109.121989][T13919] netlink: 'syz.1.4251': attribute type 9 has an invalid length.
[  109.422190][T13960] xt_CT: No such helper "pptp"
[  109.465856][T13958] loop1: detected capacity change from 0 to 8192
[  109.472177][T13958] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  109.474821][T13958] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  109.476654][T13958] REISERFS (device loop1): using ordered data mode
[  109.481308][T13958] reiserfs: using flush barriers
[  109.483368][T13958] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  109.486524][T13958] REISERFS (device loop1): checking transaction log (loop1)
[  109.637399][T13978] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4275 (13978)
[  109.644502][T13978] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.646345][T13978] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[  109.647808][T13978] BTRFS info (device loop4): using free space tree
[  109.655556][T13958] REISERFS (device loop1): Using tea hash to sort names
[  109.657021][T13958] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  109.852724][T13978] BTRFS info (device loop4): enabling ssd optimizations
[  109.950177][ T4337] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.071290][T14036] FAT-fs (loop2): Directory bread(block 199916) failed
[  110.072601][T14036] FAT-fs (loop2): Directory bread(block 199917) failed
[  110.073699][T14036] FAT-fs (loop2): Directory bread(block 199918) failed
[  110.074827][T14036] FAT-fs (loop2): Directory bread(block 199919) failed
[  110.076072][T14036] FAT-fs (loop2): Directory bread(block 199920) failed
[  110.078376][T14038] netlink: 'syz.0.4309': attribute type 1 has an invalid length.
[  110.097955][T14036] FAT-fs (loop2): Directory bread(block 199921) failed
[  110.099536][T14036] FAT-fs (loop2): Directory bread(block 199922) failed
[  110.100736][T14036] FAT-fs (loop2): Directory bread(block 199923) failed
[  110.119566][T14036] FAT-fs (loop2): Directory bread(block 199916) failed
[  110.120819][T14036] FAT-fs (loop2): Directory bread(block 199917) failed
[  110.146648][T14045] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  110.163379][T14045] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  110.166131][T14046] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  110.167254][T14046] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  110.170868][T14046] vhci_hcd vhci_hcd.0: Device attached
[  110.183188][T14047] usbip_core: unknown command
[  110.184046][T14047] vhci_hcd: unknown pdu 0
[  110.184879][T14047] usbip_core: unknown command
[  110.187093][   T39] vhci_hcd: stop threads
[  110.187943][   T39] vhci_hcd: release socket
[  110.189283][   T39] vhci_hcd: disconnect device
[  110.203165][T14045] EXT4-fs (loop1): 1 truncate cleaned up
[  110.204244][T14045] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  110.231636][T14045] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.4300: Logical block already allocated
[  110.245679][T14045] EXT4-fs (loop1): Remounting filesystem read-only
[  110.265937][T14061] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.275984][T14061] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.277355][T14061] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.291860][ T4329] EXT4-fs (loop1): unmounting filesystem.
[  110.469752][T14081] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  110.476728][T14081] EXT4-fs error (device loop4): empty_inline_dir:1903: inode #12: block 5: comm syz.4.4317: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0
[  110.499565][T14081] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  110.518811][ T4337] EXT4-fs (loop4): unmounting filesystem.
[  110.540559][T14095] netlink: 'syz.1.4325': attribute type 10 has an invalid length.
[  110.564594][T14095] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.566440][T14095] team0: Port device bond0 added
[  110.567679][T14097] netlink: 'syz.4.4324': attribute type 12 has an invalid length.
[  110.569884][T14097] __nla_validate_parse: 6 callbacks suppressed
[  110.569899][T14097] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4324'.
[  110.618111][T14099] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  110.620999][T14099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.662012][T12290] blk_print_req_error: 3 callbacks suppressed
[  110.662025][T12290] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  110.674786][T14107] SET target dimension over the limit!
[  110.702381][T14109] netlink: 'syz.4.4330': attribute type 3 has an invalid length.
[  110.793731][T14123] SET target dimension over the limit!
[  110.833620][T14132] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  110.839597][T14132] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  110.842314][T14132] EXT4-fs (loop2): 1 truncate cleaned up
[  110.843304][T14132] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  110.860315][T14132] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.4339: Logical block already allocated
[  110.863655][T14131] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4340: bg 0: block 313: padding at end of block bitmap is not set
[  110.865648][T14132] EXT4-fs (loop2): Remounting filesystem read-only
[  110.903265][T14131] EXT4-fs (loop0): Remounting filesystem read-only
[  110.905423][ T4336] EXT4-fs (loop2): unmounting filesystem.
[  110.931124][T14131] EXT4-fs (loop0): 1 truncate cleaned up
[  110.935742][T14131] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  110.940991][T14126] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  110.949152][T14126] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  110.950815][T14126] REISERFS (device loop4): using ordered data mode
[  110.951918][T14126] reiserfs: using flush barriers
[  110.979594][T14126] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  110.982380][T14126] REISERFS (device loop4): checking transaction log (loop4)
[  111.139093][T14126] REISERFS (device loop4): Using tea hash to sort names
[  111.144024][T14126] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  111.194232][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  111.237982][T14163] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  111.266790][T14163] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  111.308176][T14163] EXT4-fs (loop0): 1 truncate cleaned up
[  111.312685][T14163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  111.360822][T14163] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.4354: Logical block already allocated
[  111.363439][T14163] EXT4-fs (loop0): Remounting filesystem read-only
[  111.387463][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  111.544157][T14193] netlink: 'syz.4.4370': attribute type 2 has an invalid length.
[  111.545760][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4370'.
[  111.643159][T14202] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  111.644424][T14202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  111.647760][T14202] vhci_hcd vhci_hcd.0: Device attached
[  111.651567][T14203] usbip_core: unknown command
[  111.652423][T14203] vhci_hcd: unknown pdu 0
[  111.653271][T14203] usbip_core: unknown command
[  111.654945][    T9] vhci_hcd: stop threads
[  111.655705][    T9] vhci_hcd: release socket
[  111.656517][    T9] vhci_hcd: disconnect device
[  111.760046][T14180] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  111.761548][T14180] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  111.765570][T14180] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  111.771358][ T4373] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  111.772515][ T4373] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  111.786398][ T4373] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 13ms
[  111.788309][ T4373] gfs2: fsid=syz:syz.0: jid=0: Done
[  111.797171][T14180] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  111.799866][T14220] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  111.848711][T14226] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4383'.
[  111.904057][T14180] gfs2: fsid=syz:syz.0: found 1 quota changes
[  111.953731][T14180] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  111.953731][T14180]   inode = 11 2339
[  111.953731][T14180]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413
[  111.956873][T14180] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  111.958388][T14180] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:14180 [syz.3.4372] gfs2_quota_sync+0x2cc/0x4e8
[  111.980828][T14180] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000200 s:0 p:0
[  111.983940][T14180] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  111.996323][T14180] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  111.997971][T14180] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  112.002833][T14236] __ntfs_warning: 4 callbacks suppressed
[  112.002841][T14236] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  112.007784][T14180] gfs2: fsid=syz:syz.0: File system withdrawn
[  112.011267][T14180] CPU: 0 PID: 14180 Comm: syz.3.4372 Not tainted syzkaller #0
[  112.012526][T14180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  112.014249][T14180] Call trace:
[  112.014806][T14180]  dump_backtrace+0x1c4/0x1f0
[  112.015595][T14180]  show_stack+0x2c/0x3c
[  112.016310][T14180]  __dump_stack+0x30/0x40
[  112.017105][T14180]  dump_stack_lvl+0xf4/0x15c
[  112.017964][T14180]  dump_stack+0x1c/0x5c
[  112.018754][T14180]  gfs2_withdraw+0x9f8/0x1244
[  112.019652][T14180]  gfs2_consist_inode_i+0xf8/0x114
[  112.020546][T14180]  gfs2_inode_refresh+0x9a0/0xe64
[  112.021430][T14180]  inode_go_instantiate+0x4c/0x68
[  112.022322][T14180]  gfs2_instantiate+0x178/0x2b4
[  112.023184][T14180]  gfs2_glock_wait+0x1b0/0x290
[  112.024058][T14180]  gfs2_glock_nq+0x8bc/0x11c4
[  112.024904][T14180]  do_sync+0x414/0xa68
[  112.025648][T14180]  gfs2_quota_sync+0x2cc/0x4e8
[  112.026515][T14180]  gfs2_sync_fs+0x50/0xc8
[  112.027287][T14180]  sync_filesystem+0xe8/0x218
[  112.028107][T14180]  gfs2_reconfigure+0x100/0xab4
[  112.028984][T14180]  reconfigure_super+0x1d4/0x7cc
[  112.029924][T14180]  path_mount+0xc98/0xe6c
[  112.030758][T14180]  __arm64_sys_mount+0x4a0/0x5a0
[  112.031859][T14180]  invoke_syscall+0x98/0x290
[  112.032835][T14180]  el0_svc_common+0x13c/0x258
[  112.033838][T14180]  do_el0_svc+0x5c/0x134
[  112.034682][T14180]  el0_svc+0x58/0x128
[  112.035502][T14180]  el0t_64_sync_handler+0x84/0xf0
[  112.036437][T14180]  el0t_64_sync+0x18c/0x190
[  112.050516][T14236] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  112.052423][T14236] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  112.054902][T14236] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  112.059693][T14236] ntfs: volume version 3.1.
[  112.064867][T14236] ntfs: (device loop4): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  112.097500][T14242] bond0: Unable to set up delay as MII monitoring is disabled
[  112.111455][ T4340] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[  112.114069][ T4340] CPU: 1 PID: 4340 Comm: syz-executor Not tainted syzkaller #0
[  112.115369][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  112.117099][ T4340] Call trace:
[  112.117677][ T4340]  dump_backtrace+0x1c4/0x1f0
[  112.118545][ T4340]  show_stack+0x2c/0x3c
[  112.119262][ T4340]  __dump_stack+0x30/0x40
[  112.120021][ T4340]  dump_stack_lvl+0xf4/0x15c
[  112.120825][ T4340]  dump_stack+0x1c/0x5c
[  112.121542][ T4340]  gfs2_assert_warn_i+0x16c/0x26c
[  112.122436][ T4340]  gfs2_quota_cleanup+0x444/0x640
[  112.123323][ T4340]  gfs2_put_super+0x1ec/0x744
[  112.124138][ T4340]  generic_shutdown_super+0x138/0x32c
[  112.125114][ T4340]  kill_block_super+0x78/0xe0
[  112.125965][ T4340]  gfs2_kill_sb+0xc4/0xd8
[  112.126760][ T4340]  deactivate_locked_super+0xb4/0x128
[  112.127741][ T4340]  deactivate_super+0xe4/0x104
[  112.128565][ T4340]  cleanup_mnt+0x3a8/0x430
[  112.129366][ T4340]  __cleanup_mnt+0x20/0x30
[  112.130162][ T4340]  task_work_run+0x1f4/0x280
[  112.130970][ T4340]  do_notify_resume+0x20f8/0x2c84
[  112.131848][ T4340]  el0_svc+0x98/0x128
[  112.132553][ T4340]  el0t_64_sync_handler+0x84/0xf0
[  112.133475][ T4340]  el0t_64_sync+0x18c/0x190
[  112.137291][T14244] Non-string source
[  112.240604][T14257] set_capacity_and_notify: 14 callbacks suppressed
[  112.240614][T14257] loop4: detected capacity change from 0 to 512
[  112.254183][T14260] loop0: detected capacity change from 0 to 256
[  112.316592][T14257] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  112.365101][T14276] loop3: detected capacity change from 0 to 2048
[  112.376783][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4409'.
[  112.401989][T14276] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  112.414171][T14276] EXT4-fs error (device loop3): empty_inline_dir:1903: inode #12: block 5: comm syz.3.4405: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0
[  112.428809][ T4337] EXT4-fs (loop4): unmounting filesystem.
[  112.442656][T14276] EXT4-fs warning (device loop3): empty_inline_dir:1910: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  112.479998][T14289] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  112.481202][T14289] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  112.483468][T14289] vhci_hcd vhci_hcd.0: Device attached
[  112.486037][T14290] usbip_core: unknown command
[  112.486757][T14290] vhci_hcd: unknown pdu 0
[  112.487522][T14290] usbip_core: unknown command
[  112.488451][ T1698] vhci_hcd: stop threads
[  112.492369][ T1698] vhci_hcd: release socket
[  112.493258][ T1698] vhci_hcd: disconnect device
[  112.511384][ T4340] EXT4-fs (loop3): unmounting filesystem.
[  112.514112][T14294] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.539798][T14294] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.541278][T14294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.557939][T14298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4428'.
[  112.615520][T14300] loop3: detected capacity change from 0 to 8192
[  112.630559][T14300] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  112.632811][T14300] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  112.634520][T14300] REISERFS (device loop3): using ordered data mode
[  112.635606][T14300] reiserfs: using flush barriers
[  112.653809][T14300] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  112.656894][T14300] REISERFS (device loop3): checking transaction log (loop3)
[  112.787542][T14300] REISERFS (device loop3): Using tea hash to sort names
[  112.789286][T14300] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  112.882625][T14332] loop1: detected capacity change from 0 to 512
[  112.886346][T14333] loop0: detected capacity change from 0 to 256
[  112.901250][T14332] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4435: bg 0: block 313: padding at end of block bitmap is not set
[  112.905057][T14332] EXT4-fs (loop1): Remounting filesystem read-only
[  112.906438][T14332] EXT4-fs (loop1): 1 truncate cleaned up
[  112.907866][T14332] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  112.988238][ T4329] EXT4-fs (loop1): unmounting filesystem.
[  113.008558][T14344] loop2: detected capacity change from 0 to 512
[  113.036406][T14344] EXT4-fs (loop2): 1 truncate cleaned up
[  113.037465][T14344] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  113.132099][ T4336] EXT4-fs (loop2): unmounting filesystem.
[  113.146814][T14363] loop0: detected capacity change from 0 to 512
[  113.396439][T14353] loop4: detected capacity change from 0 to 40427
[  113.398390][T14353] F2FS-fs (loop4): Invalid log blocks per segment (83886089)
[  113.401689][T14353] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  113.403628][T14353] F2FS-fs (loop4): invalid crc value
[  113.406134][T14353] F2FS-fs (loop4): Found nat_bits in checkpoint
[  113.418132][T14353] F2FS-fs (loop4): Start checkpoint disabled!
[  113.435801][T14353] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  113.437087][T14353] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  113.518432][T14405] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  113.601236][T14375] loop2: detected capacity change from 0 to 32768
[  113.608318][T14375] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.4453 (14375)
[  113.627767][T14375] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  113.641773][T14375] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  113.643593][T14375] BTRFS info (device loop2): force zlib compression, level 3
[  113.645052][T14375] BTRFS info (device loop2): force clearing of disk cache
[  113.646294][T14375] BTRFS info (device loop2): setting nodatasum
[  113.647342][T14375] BTRFS info (device loop2): use zlib compression, level 3
[  113.669652][T14422] netlink: 'syz.1.4476': attribute type 2 has an invalid length.
[  113.670899][T14375] BTRFS info (device loop2): allowing degraded mounts
[  113.671318][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4476'.
[  113.672273][T14375] BTRFS info (device loop2): enabling disk space caching
[  113.674949][T14375] BTRFS info (device loop2): disk space caching is enabled
[  113.715770][T14432] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.717980][T14414] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  113.725911][T14414] Remounting filesystem read-only
[  113.751354][T14414] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6
[  113.882828][T14455] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.904269][T14375] BTRFS info (device loop2): enabling ssd optimizations
[  113.905458][T14460] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  113.908010][T14375] BTRFS info (device loop2): rebuilding free space tree
[  113.916316][T14375] BTRFS info (device loop2): disabling free space tree
[  113.917554][T14375] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  113.923351][T14375] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  113.940430][T14455] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  113.943528][T14466] netlink: 2052 bytes leftover after parsing attributes in process `syz.3.4489'.
[  113.963460][T14469] bond0: Unable to set up delay as MII monitoring is disabled
[  113.972293][T14375] BTRFS info (device loop2): balance: start -f -susage=0,usage=0..0,limit=6
[  113.974096][T14375] BTRFS info (device loop2): balance: ended with status: 0
[  114.016419][ T4329] EXT4-fs (loop1): unmounting filesystem.
[  114.062865][ T4336] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  114.118533][T14481] netlink: 'syz.1.4491': attribute type 1 has an invalid length.
[  114.214434][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4500'.
[  114.221385][T12290] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 13 /dev/loop2 scanned by udevd (12290)
[  114.295148][T14501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  114.296863][T14501] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.352278][T14501] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  114.454496][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4517'.
[  114.456097][T14525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4517'.
[  114.640520][T14508] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 13
[  114.814302][T14569] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  114.853270][T14569] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.4539: directory missing '..'
[  114.907631][ T4336] EXT4-fs (loop2): unmounting filesystem.
[  115.042988][T14583] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  115.044886][T14583] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  115.059495][T14583] F2FS-fs (loop1): Found nat_bits in checkpoint
[  115.082807][T14583] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  115.084165][T14583] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  115.339802][T14619] Major/Minor mismatch, trying to mount newer 4.2304 filesystem
[  115.341385][T14619] Please update your kernel
[  115.377780][T12290] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  115.482327][T14639] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  115.613914][T14653] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  115.758993][T14662] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  115.802266][T14662] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  115.805822][T14662] ntfs3: loop3: Failed to load $Extend.
[  115.814109][T14667] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  115.816037][T14667] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  115.820315][T14667] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  115.822333][T14667] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  115.824827][T14662] ntfs3: loop3: ino=5, "/" directory corrupted
[  115.840545][T14667] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  115.845154][T14667] ntfs: volume version 3.1.
[  115.960785][T14679] netlink: 'syz.3.4589': attribute type 1 has an invalid length.
[  116.504424][T14725] rdma_rxe: rxe_register_device failed with error -23
[  116.507666][T14725] rdma_rxe: failed to add team_slave_0
[  116.630637][T14731] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  116.637826][T14731] syz.3.4613: attempt to access beyond end of device
[  116.637826][T14731] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  116.656184][T14738] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  116.675780][T14675] syz.4.4588 (14675): drop_caches: 3
[  116.682040][T14731] syz.3.4613: attempt to access beyond end of device
[  116.682040][T14731] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048
[  116.684426][T14731] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0)
[  116.909289][T14769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4632'.
[  116.910971][T14769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4632'.
[  116.916108][T14735] XFS (loop1): Mounting V5 Filesystem
[  117.002421][T14735] XFS (loop1): Ending clean mount
[  117.097588][ T4329] XFS (loop1): Unmounting Filesystem
[  117.181511][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4640'.
[  117.402647][T14810] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  117.496951][T14761] set_capacity_and_notify: 14 callbacks suppressed
[  117.496960][T14761] loop4: detected capacity change from 0 to 131072
[  117.521615][T14761] F2FS-fs (loop4): Found nat_bits in checkpoint
[  117.564384][T14827] loop0: detected capacity change from 0 to 4096
[  117.566256][T14761] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  117.596641][T14833] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  117.609639][T14835] loop3: detected capacity change from 0 to 64
[  117.794623][T14851] cgroup: Unexpected value for 'cpuset_v2_mode'
[  117.918444][T14840] loop1: detected capacity change from 0 to 32768
[  117.932030][T14866] loop3: detected capacity change from 0 to 16
[  117.940711][T14866] erofs: (device loop3): mounted with root inode @ nid 36.
[  117.942355][T14840] ERROR: (device loop1): dbAlloc: unable to allocate blocks
[  117.942355][T14840] 
[  117.944928][T14840] ERROR: (device loop1): remounting filesystem as read-only
[  117.946238][T14840] ialloc: diAlloc returned -5!
[  117.954333][T14871] rdma_rxe: rxe_register_device failed with error -23
[  117.955578][T14871] rdma_rxe: failed to add team_slave_0
[  118.073800][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4677'.
[  118.182852][T14898] usb usb1: usbfs: process 14898 (syz.3.4688) did not claim interface 0 before use
[  118.245834][T14902] netlink: 'syz.4.4692': attribute type 13 has an invalid length.
[  118.247371][T14902] netlink: 'syz.4.4692': attribute type 12 has an invalid length.
[  118.357977][T14917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4699'.
[  118.361410][T14917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4699'.
[  118.379514][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4701'.
[  118.467840][T14899] loop2: detected capacity change from 0 to 32768
[  118.487117][T14936] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  118.494596][T14934] netlink: 'syz.4.4708': attribute type 21 has an invalid length.
[  118.496055][T14934] netlink: 'syz.4.4708': attribute type 20 has an invalid length.
[  118.497470][T14899] ERROR: (device loop2): dbAlloc: unable to allocate blocks
[  118.497470][T14899] 
[  118.511780][T14899] ERROR: (device loop2): remounting filesystem as read-only
[  118.513088][T14899] ialloc: diAlloc returned -5!
[  118.633761][T14951] cgroup: Unexpected value for 'cpuset_v2_mode'
[  118.634041][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4717'.
[  118.641427][T14948] syz.2.4725 (14948): drop_caches: 3
[  118.697878][T14960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4721'.
[  118.725185][T14964] tmpfs: Bad value for 'mpol'
[  118.842107][T14984] kAFS: unable to lookup cell ''
[  118.850784][T14980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.852572][T14980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.881184][T14980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.883258][T14980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.884945][T14980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.886746][T14980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.906971][T14980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.908929][T14980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.913907][T14990] syz.0.4736 (14990): drop_caches: 3
[  118.935514][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4738'.
[  118.954160][T14998] tmpfs: Bad value for 'mpol'
[  119.061253][T15013] kAFS: unable to lookup cell ''
[  119.103303][T15019] random: crng reseeded on system resumption
[  119.167266][T15033] tmpfs: Bad value for 'mpol'
[  119.193591][T15030] syz.4.4756 (15030): drop_caches: 3
[  119.343179][T15056] loop4: detected capacity change from 0 to 256
[  119.344914][T15057] loop1: detected capacity change from 0 to 1024
[  119.419579][T15057] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.4769: lblock 2 mapped to illegal pblock 2 (length 1)
[  119.440792][T15057] __quota_error: 9 callbacks suppressed
[  119.440811][T15057] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  119.454068][T15057] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.4769: lblock 0 mapped to illegal pblock 48 (length 1)
[  119.468649][T15057] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  119.470680][T15057] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.4769: Failed to acquire dquot type 0
[  119.484919][T15057] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  119.500595][T15057] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.4769: mark_inode_dirty error
[  119.517898][T15057] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  119.520014][T15057] EXT4-fs (loop1): 1 orphan inode deleted
[  119.521005][T15057] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  119.538841][   T39] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  119.544067][   T39] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  119.549100][   T39] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 0
[  119.551366][T15079] device geneve1 entered promiscuous mode
[  119.575343][T15075] syz.3.4776 (15075): drop_caches: 3
[  119.607854][ T4329] EXT4-fs (loop1): unmounting filesystem.
[  119.611843][   T39] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  119.614473][   T39] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  119.616012][   T39] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 0
[  119.632816][ T4329] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  119.636763][ T4329] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  119.639913][ T4329] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  119.769909][T15111] loop4: detected capacity change from 0 to 136
[  119.777782][T15111] Attempt to read inode for relocated directory
[  119.959423][T15138] random: crng reseeded on system resumption
[  120.020919][T15146] random: crng reseeded on system resumption
[  120.125819][T15154] loop3: detected capacity change from 0 to 136
[  120.134726][T15154] Attempt to read inode for relocated directory
[  120.326867][T15185] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.4833: lblock 2 mapped to illegal pblock 2 (length 1)
[  120.344327][T15185] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  120.345813][T15185] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.4833: lblock 0 mapped to illegal pblock 48 (length 1)
[  120.350209][T15193] Attempt to read inode for relocated directory
[  120.352899][T15185] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  120.362397][T15185] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.4833: Failed to acquire dquot type 0
[  120.376607][T15185] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  120.378346][T15185] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.4833: mark_inode_dirty error
[  120.398266][T15185] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  120.415989][T15185] EXT4-fs (loop0): 1 orphan inode deleted
[  120.417083][T15185] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  120.430110][ T1698] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  120.432742][ T1698] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  120.434207][ T1698] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0
[  120.521861][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  120.530904][  T192] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  120.533900][  T192] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  120.535376][  T192] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0
[  120.537949][ T4333] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  120.540625][T15210] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  120.567121][ T4333] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  120.569782][ T4333] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  120.714995][T15236] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.4857: lblock 2 mapped to illegal pblock 2 (length 1)
[  120.727541][T15236] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  120.737104][T15236] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.4857: lblock 0 mapped to illegal pblock 48 (length 1)
[  120.747203][T15236] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  120.752688][T15236] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.4857: Failed to acquire dquot type 0
[  120.754752][T15236] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  120.756841][T15236] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.4857: mark_inode_dirty error
[  120.762795][T15236] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  120.764606][T15236] EXT4-fs (loop2): 1 orphan inode deleted
[  120.765650][T15236] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  120.778623][    T9] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  120.782442][    T9] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0
[  120.838025][ T4336] EXT4-fs (loop2): unmounting filesystem.
[  120.849685][    T9] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  120.852236][    T9] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0
[  120.856618][ T4336] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  120.874782][ T4336] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  120.882219][ T4336] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  121.365331][T15245] F2FS-fs (loop0): Found nat_bits in checkpoint
[  121.381539][T15245] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  121.643379][T15299] netlink: 'syz.2.4887': attribute type 1 has an invalid length.
[  121.746465][T15305] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  121.771327][T15309] device vlan0 entered promiscuous mode
[  121.772484][T15309] device veth0_vlan entered promiscuous mode
[  121.983070][T15341] __nla_validate_parse: 15 callbacks suppressed
[  121.983083][T15341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4907'.
[  122.121860][T15335] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x3ffff
[  122.123849][T15335] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xe4
[  122.125933][T15335] F2FS-fs (loop0): invalid crc value
[  122.128381][T15335] F2FS-fs (loop0): Found nat_bits in checkpoint
[  122.135880][T15335] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8
[  122.141669][T15345] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4908'.
[  122.176293][T15335] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  122.200991][T15335] F2FS-fs (loop0): switch extent_cache option is not allowed
[  122.208476][T15354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4911'.
[  122.293628][T15364] netlink: 'syz.3.4916': attribute type 1 has an invalid length.
[  122.389650][T15378] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4923'.
[  122.472536][T15392] netlink: 'syz.4.4931': attribute type 1 has an invalid length.
[  122.528348][T15393] set_capacity_and_notify: 6 callbacks suppressed
[  122.528359][T15393] loop1: detected capacity change from 0 to 8192
[  122.534842][T15393] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  122.536980][T15393] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  122.538712][T15393] REISERFS (device loop1): using ordered data mode
[  122.539904][T15393] reiserfs: using flush barriers
[  122.541121][T15393] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  122.544099][T15393] REISERFS (device loop1): checking transaction log (loop1)
[  122.572339][T15393] REISERFS (device loop1): Using tea hash to sort names
[  122.573881][T15393] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  122.580727][T15393] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  122.759056][T15407] device vlan0 entered promiscuous mode
[  122.795124][T15385] loop2: detected capacity change from 0 to 40427
[  122.803399][T15385] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff
[  122.804919][T15385] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xe4
[  122.812312][T15385] F2FS-fs (loop2): invalid crc value
[  122.836128][T15385] F2FS-fs (loop2): Found nat_bits in checkpoint
[  122.842062][T15385] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8
[  122.873685][T15385] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  122.899725][T15385] F2FS-fs (loop2): switch extent_cache option is not allowed
[  123.179539][T15457] loop4: detected capacity change from 0 to 512
[  123.204756][T15457] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  123.332220][ T4337] EXT4-fs (loop4): unmounting filesystem.
[  123.386645][T15458] loop1: detected capacity change from 0 to 40427
[  123.422730][T15458] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x3ffff
[  123.424274][T15458] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4
[  123.433087][T15458] F2FS-fs (loop1): invalid crc value
[  123.443674][T15458] F2FS-fs (loop1): Found nat_bits in checkpoint
[  123.452771][T15388] loop3: detected capacity change from 0 to 131072
[  123.454762][T15388] F2FS-fs (loop3): Test dummy encryption mode enabled
[  123.455606][T15458] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8
[  123.469047][T15388] F2FS-fs (loop3): invalid crc value
[  123.489692][T15458] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  123.502085][T15388] F2FS-fs (loop3): Found nat_bits in checkpoint
[  123.508103][T15458] F2FS-fs (loop1): switch extent_cache option is not allowed
[  123.530525][T15388] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  123.800742][T15529] netlink: 'syz.0.4994': attribute type 5 has an invalid length.
[  123.867799][T15540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4998'.
[  123.872690][T15540] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  123.874220][T15540] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  123.890115][T15541] CIFS: VFS: Malformed UNC in devname
[  123.916593][T15543] loop0: detected capacity change from 0 to 164
[  123.944369][T15547] sctp: [Deprecated]: syz.4.5003 (pid 15547) Use of struct sctp_assoc_value in delayed_ack socket option.
[  123.944369][T15547] Use struct sctp_sack_info instead
[  123.975712][T15549] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  123.991557][T15551] loop4: detected capacity change from 0 to 16
[  124.006264][T15553] mmap: syz.1.5006 (15553): VmData 37482496 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data.
[  124.009370][T15551] erofs: (device loop4): mounted with root inode @ nid 36.
[  124.111469][T15568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.113140][T15568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.149761][T15571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5014'.
[  124.181782][T15573] misc userio: The device must be registered before sending interrupts
[  124.273367][T15581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5019'.
[  124.331837][T15585] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5021'.
[  124.412787][T15569] loop4: detected capacity change from 0 to 40427
[  124.413742][T15589] loop0: detected capacity change from 0 to 512
[  124.418540][T15569] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x3ffff
[  124.420503][T15569] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x724
[  124.424637][T15569] F2FS-fs (loop4): invalid crc value
[  124.435002][T15569] F2FS-fs (loop4): Found nat_bits in checkpoint
[  124.441033][T15569] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8
[  124.444211][T15589] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  124.457888][T15569] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  124.467515][T15569] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x110/0x91c
[  124.470966][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  124.731715][T15619] libceph: resolve '0' (ret=-3): failed
[  124.779695][T15537] loop2: detected capacity change from 0 to 131072
[  124.790982][T15537] F2FS-fs (loop2): Test dummy encryption mode enabled
[  124.796204][T15537] F2FS-fs (loop2): invalid crc value
[  124.831656][T15537] F2FS-fs (loop2): Found nat_bits in checkpoint
[  124.882080][T15537] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  124.996606][T15649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5049'.
[  125.012675][T15649] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5049'.
[  125.014986][T15613] F2FS-fs (loop0): invalid crc value
[  125.018078][T15613] F2FS-fs (loop0): Found nat_bits in checkpoint
[  125.043686][T15613] F2FS-fs (loop0): Start checkpoint disabled!
[  125.087711][T15613] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  125.090147][T15658] iso9660: Corrupted directory entry in block 2 of inode 1920
[  125.127773][   T11] kworker/u4:1: attempt to access beyond end of device
[  125.127773][   T11] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  125.399117][T15696] syz.3.5069: attempt to access beyond end of device
[  125.399117][T15696] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64
[  125.401802][T15696] Buffer I/O error on dev loop3, logical block 512, async page read
[  125.409445][T15696] syz.3.5069: attempt to access beyond end of device
[  125.409445][T15696] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64
[  125.411921][T15696] Buffer I/O error on dev loop3, logical block 56576, async page read
[  125.565013][T15718] exfat: Deprecated parameter 'utf8'
[  125.581941][T15718] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  125.654040][T15720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  125.707944][T15726] __ntfs_error: 2 callbacks suppressed
[  125.707963][T15726] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  125.711628][T15726] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  125.719971][T15726] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  125.727126][ T4336] EXT4-fs (loop2): unmounting filesystem.
[  125.737851][T15726] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  125.747037][T15726] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  125.760419][T15726] ntfs: volume version 3.1.
[  125.770300][T15726] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  125.772454][T15726] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  125.777231][T15726] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  125.787320][T15726] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  125.797440][T15726] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  125.891421][T15751] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  125.906981][T15751] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.5095: bad orphan inode 13
[  125.916318][T15751] ext4_test_bit(bit=12, block=18) = 1
[  125.917323][T15751] is_bad_inode(inode)=0
[  125.918032][T15751] NEXT_ORPHAN(inode)=0
[  125.918876][T15751] max_ino=32
[  125.919904][T15751] i_nlink=1
[  125.920518][T15751] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  125.929428][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[  125.930563][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[  126.061133][T15751] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.5095: Failed to acquire dquot type 1
[  126.132323][T15762] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  126.309282][T15674] F2FS-fs (loop4): Test dummy encryption mode enabled
[  126.321169][T15674] F2FS-fs (loop4): invalid crc value
[  126.360524][T15674] F2FS-fs (loop4): Found nat_bits in checkpoint
[  126.387422][T15674] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  126.607055][T15785] netlink: 'syz.1.5110': attribute type 17 has an invalid length.
[  126.608492][T15785] netlink: 'syz.1.5110': attribute type 16 has an invalid length.
[  128.090947][T15594] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set
[  141.585050][ T4330] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  141.588283][ T4330] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  141.591094][ T4330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  141.592668][ T4330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  141.594711][ T4330] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  141.596076][ T4330] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  141.608930][ T4339] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  141.614892][ T4339] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  141.616379][ T4339] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  141.618491][ T4339] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  141.620553][ T4339] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  141.622031][ T4339] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  141.624081][ T4339] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  141.625690][ T4339] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  141.627155][ T4339] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  141.629107][ T4339] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  141.630798][ T4339] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  141.632544][ T4339] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  141.656508][   T48] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  141.663291][   T48] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  141.665305][   T48] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  141.666832][   T48] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  141.668372][   T48] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  141.670217][   T48] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  142.455421][   T48] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  142.458202][   T48] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  142.460506][   T48] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  142.462265][   T48] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  142.463775][   T48] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  142.465184][   T48] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  142.535337][   T48] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  142.538178][   T48] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  142.541155][   T48] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  142.542779][   T48] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  142.544299][   T48] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  142.545687][   T48] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  143.688710][ T4334] Bluetooth: hci7: command 0x0409 tx timeout
[  143.690560][ T4334] Bluetooth: hci6: command 0x0409 tx timeout
[  143.691832][ T4334] Bluetooth: hci5: command 0x0409 tx timeout
[  144.488722][   T48] Bluetooth: hci8: command 0x0409 tx timeout
[  144.568720][   T48] Bluetooth: hci9: command 0x0409 tx timeout
[  145.768683][   T48] Bluetooth: hci5: command 0x041b tx timeout
[  145.769770][   T48] Bluetooth: hci6: command 0x041b tx timeout
[  145.770772][   T48] Bluetooth: hci7: command 0x041b tx timeout
[  146.569877][ T4334] Bluetooth: hci8: command 0x041b tx timeout
[  146.648732][   T48] Bluetooth: hci9: command 0x041b tx timeout
[  147.848677][ T4334] Bluetooth: hci7: command 0x040f tx timeout
[  147.849794][ T4334] Bluetooth: hci6: command 0x040f tx timeout
[  147.850781][ T4334] Bluetooth: hci5: command 0x040f tx timeout
[  148.118566][    C1] watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [aoe_tx0:2066]
[  148.119988][    C1] Modules linked in:
[  148.120703][    C1] irq event stamp: 63090659
[  148.121476][    C1] hardirqs last  enabled at (63090658): [<ffff800011c77fb4>] _raw_spin_unlock_irqrestore+0x48/0xac
[  148.123377][    C1] hardirqs last disabled at (63090659): [<ffff800011b8c83c>] el1_interrupt+0x24/0x54
[  148.125074][    C1] softirqs last  enabled at (2054): [<ffff80000fefdd94>] local_bh_enable+0x10/0x34
[  148.126688][    C1] softirqs last disabled at (2058): [<ffff80000fefdd60>] local_bh_disable+0x10/0x34
[  148.128364][    C1] CPU: 1 PID: 2066 Comm: aoe_tx0 Not tainted syzkaller #0
[  148.129660][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  148.131529][    C1] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  148.132919][    C1] pc : _raw_spin_unlock_irqrestore+0x58/0xac
[  148.134013][    C1] lr : _raw_spin_unlock_irqrestore+0x48/0xac
[  148.135071][    C1] sp : ffff8000272d7860
[  148.135802][    C1] x29: ffff8000272d7860 x28: 1fffe0001e4ab8c0 x27: dfff800000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  148.137286][    C1] x26: ffff0000f255c600 x25: ffff0000cdda0fd0 x24: ffff0000dc4130b0
[  148.138789][    C1] x23: 0000000000000020 x22: 0000000000000002 x21: ffff0000cdda0c30
[  148.140257][    C1] x20: ffff80001c936c90 x19: 0000000000000000 x18: 0000000000000000
[  148.141690][    C1] x17: 0000000000b000b0 x16: ffff8000082dd244 x15: 000000000004ffff
[  148.143064][    C1] x14: 0000000000000001 x13: 1ffff00003926d92 x12: 0000000000000000
[  148.144462][    C1] x11: ff0080000a9761c0 x10: 0000000000000003 x9 : 0000000000000080
[  148.145879][    C1] x8 : 00000000000000c0 x7 : ffff80000b46664c x6 : 0000000000000000
[  148.147330][    C1] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
[  148.148779][    C1] x2 : 0000000000000002 x1 : ffff800011cedc80 x0 : ffff80018a0de000
[  148.150231][    C1] Call trace:
[  148.150808][    C1]  _raw_spin_unlock_irqrestore+0x58/0xac
[  148.151860][    C1]  uart_write+0x3a0/0x7d8
[  148.152629][    C1]  handle_tx+0x1e4/0x600
[  148.153425][    C1]  caif_xmit+0x108/0x150
[  148.154149][    C1]  dev_hard_start_xmit+0x234/0x8c8
[  148.154998][    C1]  __dev_queue_xmit+0x1590/0x3154
[  148.155810][    C1]  tx+0xa0/0x1c8
[  148.156442][    C1]  kthread+0x178/0x344
[  148.157148][    C1]  kthread+0x254/0x2e0
[  148.157836][    C1]  ret_from_fork+0x10/0x20
[  148.158614][    C1] Kernel panic - not syncing: softlockup: hung tasks
[  148.159711][    C1] CPU: 1 PID: 2066 Comm: aoe_tx0 Tainted: G             L     syzkaller #0
[  148.161194][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  148.162985][    C1] Call trace:
[  148.163542][    C1]  dump_backtrace+0x1c4/0x1f0
[  148.164377][    C1]  show_stack+0x2c/0x3c
[  148.165143][    C1]  __dump_stack+0x30/0x40
[  148.165896][    C1]  dump_stack_lvl+0xf4/0x15c
[  148.166689][    C1]  dump_stack+0x1c/0x5c
[  148.167408][    C1]  panic+0x2f8/0x7ac
[  148.168075][    C1]  softlockup_fn+0x0/0x120
[  148.168815][    C1]  __hrtimer_run_queues+0x414/0xc58
[  148.169715][    C1]  hrtimer_interrupt+0x294/0xb28
[  148.170597][    C1]  arch_timer_handler_virt+0x74/0x88
[  148.171506][    C1]  handle_percpu_devid_irq+0x17c/0x358
[  148.172411][    C1]  generic_handle_domain_irq+0xe4/0x154
[  148.173376][    C1]  gic_handle_irq+0x70/0x1d8
[  148.174154][    C1]  call_on_irq_stack+0x30/0x48
[  148.174990][    C1]  do_interrupt_handler+0xd4/0x138
[  148.175886][    C1]  el1_interrupt+0x34/0x54
[  148.176663][    C1]  el1h_64_irq_handler+0x18/0x24
[  148.177547][    C1]  el1h_64_irq+0x64/0x68
[  148.178269][    C1]  _raw_spin_unlock_irqrestore+0x58/0xac
[  148.179288][    C1]  uart_write+0x3a0/0x7d8
[  148.180065][    C1]  handle_tx+0x1e4/0x600
[  148.180784][    C1]  caif_xmit+0x108/0x150
[  148.181532][    C1]  dev_hard_start_xmit+0x234/0x8c8
[  148.182417][    C1]  __dev_queue_xmit+0x1590/0x3154
[  148.183286][    C1]  tx+0xa0/0x1c8
[  148.183898][    C1]  kthread+0x178/0x344
[  148.184597][    C1]  kthread+0x254/0x2e0
[  148.185298][    C1]  ret_from_fork+0x10/0x20
[  148.186074][    C1] SMP: stopping secondary CPUs
[  148.186888][    C1] Kernel Offset: disabled
[  148.187640][    C1] CPU features: 0x0a0000,000f0097,a65bfea7
[  148.188592][    C1] Memory Limit: none
[  148.200743][    C1] 
[  148.201147][    C1] ================================
[  148.201995][    C1] WARNING: inconsistent lock state
[  148.202866][    C1] syzkaller #0 Tainted: G             L    
[  148.203851][    C1] --------------------------------
[  148.204737][    C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage.
[  148.205939][    C1] aoe_tx0/2066 [HC1[1]:SC0[2]:HE0:SE0] takes:
[  148.206974][    C1] ffff8000153c14b8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c
[  148.208822][    C1] {HARDIRQ-ON-W} state was registered at:
[  148.209834][    C1]   lock_acquire+0x20c/0x638
[  148.210648][    C1]   _raw_spin_lock+0x54/0x6c
[  148.211477][    C1]   efi_call_rts+0x3c8/0x9d8
[  148.212276][    C1]   process_one_work+0x7e4/0x13bc
[  148.213129][    C1]   worker_thread+0x8cc/0xfe8
[  148.213953][    C1]   kthread+0x254/0x2e0
[  148.214672][    C1]   ret_from_fork+0x10/0x20
[  148.215423][    C1] irq event stamp: 63090659
[  148.216194][    C1] hardirqs last  enabled at (63090658): [<ffff800011c77fb4>] _raw_spin_unlock_irqrestore+0x48/0xac
[  148.218001][    C1] hardirqs last disabled at (63090659): [<ffff800011b8c83c>] el1_interrupt+0x24/0x54
[  148.219682][    C1] softirqs last  enabled at (2054): [<ffff80000fefdd94>] local_bh_enable+0x10/0x34
[  148.221392][    C1] softirqs last disabled at (2058): [<ffff80000fefdd60>] local_bh_disable+0x10/0x34
[  148.223032][    C1] 
[  148.223032][    C1] other info that might help us debug this:
[  148.224414][    C1]  Possible unsafe locking scenario:
[  148.224414][    C1] 
[  148.225683][    C1]        CPU0
[  148.226244][    C1]        ----
[  148.226803][    C1]   lock(efi_rt_lock);
[  148.227506][    C1]   <Interrupt>
[  148.228100][    C1]     lock(efi_rt_lock);
[  148.228846][    C1] 
[  148.228846][    C1]  *** DEADLOCK ***
[  148.228846][    C1] 
[  148.230249][    C1] 4 locks held by aoe_tx0/2066:
[  148.231064][    C1]  #0: ffff8000155574a0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54
[  148.232741][    C1]  #1: ffff0000f31668d8 (_xmit_CAIF#2){+...}-{2:2}, at: __dev_queue_xmit+0x10b8/0x3154
[  148.234406][    C1]  #2: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c
[  148.236017][    C1]  #3: ffff80001743eb88 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x188/0x828
[  148.237714][    C1] 
[  148.237714][    C1] stack backtrace:
[  148.238811][    C1] CPU: 1 PID: 2066 Comm: aoe_tx0 Tainted: G             L     syzkaller #0
[  148.240315][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  148.242029][    C1] Call trace:
[  148.242607][    C1]  dump_backtrace+0x1c4/0x1f0
[  148.243450][    C1]  show_stack+0x2c/0x3c
[  148.244173][    C1]  __dump_stack+0x30/0x40
[  148.244919][    C1]  dump_stack_lvl+0xf4/0x15c
[  148.245761][    C1]  dump_stack+0x1c/0x5c
[  148.246458][    C1]  print_usage_bug+0x4c0/0x6dc
[  148.247298][    C1]  mark_lock_irq+0x858/0xab8
[  148.248090][    C1]  mark_lock+0x224/0x320
[  148.248842][    C1]  __lock_acquire+0xa60/0x6634
[  148.249689][    C1]  lock_acquire+0x20c/0x638
[  148.250479][    C1]  _raw_spin_lock+0x54/0x6c
[  148.251284][    C1]  virt_efi_set_variable_nonblocking+0x74/0x16c
[  148.252381][    C1]  efivar_set_variable_locked+0x1d0/0x204
[  148.253364][    C1]  efi_pstore_write+0x2a8/0x3b4
[  148.254226][    C1]  pstore_dump+0x5b8/0x828
[  148.254962][    C1]  kmsg_dump+0x174/0x264
[  148.255649][    C1]  panic+0x384/0x7ac
[  148.256306][    C1]  softlockup_fn+0x0/0x120
[  148.257059][    C1]  __hrtimer_run_queues+0x414/0xc58
[  148.257982][    C1]  hrtimer_interrupt+0x294/0xb28
[  148.258871][    C1]  arch_timer_handler_virt+0x74/0x88
[  148.259803][    C1]  handle_percpu_devid_irq+0x17c/0x358
[  148.260729][    C1]  generic_handle_domain_irq+0xe4/0x154
[  148.261730][    C1]  gic_handle_irq+0x70/0x1d8
[  148.262578][    C1]  call_on_irq_stack+0x30/0x48
[  148.263455][    C1]  do_interrupt_handler+0xd4/0x138
[  148.264324][    C1]  el1_interrupt+0x34/0x54
[  148.265120][    C1]  el1h_64_irq_handler+0x18/0x24
[  148.265954][    C1]  el1h_64_irq+0x64/0x68
[  148.266688][    C1]  _raw_spin_unlock_irqrestore+0x58/0xac
[  148.267672][    C1]  uart_write+0x3a0/0x7d8
[  148.268420][    C1]  handle_tx+0x1e4/0x600
[  148.269194][    C1]  caif_xmit+0x108/0x150
[  148.269964][    C1]  dev_hard_start_xmit+0x234/0x8c8
[  148.270853][    C1]  __dev_queue_xmit+0x1590/0x3154
[  148.271701][    C1]  tx+0xa0/0x1c8
[  148.272323][    C1]  kthread+0x178/0x344
[  148.273060][    C1]  kthread+0x254/0x2e0
[  148.273782][    C1]  ret_from_fork+0x10/0x20
[  148.509976][    C1] Rebooting in 86400 seconds..