last executing test programs:

15.403482416s ago: executing program 1 (id=1234):
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x40902)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)

15.239009738s ago: executing program 1 (id=1235):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
getgroups(0x16, 0xfffffffffffffffe)

15.053003161s ago: executing program 1 (id=1236):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYBLOB="0000000004200400", @ANYRES32, @ANYBLOB="0800ea911900000008000100", @ANYRES32, @ANYBLOB="08001b"], 0x44}}, 0x0)

14.947773483s ago: executing program 1 (id=1237):
r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f0000000040), 0x0, 0x97d7, &(0x7f0000012d80)="$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")
openat(r0, &(0x7f00000002c0)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x441, 0x1f3)

10.905417477s ago: executing program 1 (id=1277):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001f80)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x44010}, 0x804)

3.224148279s ago: executing program 2 (id=1354):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x10}}, 0x88}}, 0x0)

2.950052383s ago: executing program 2 (id=1359):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4002, &(0x7f00000004c0)={[{@type={'type', 0x3d, "74b0750f"}}, {@codepage={'codepage', 0x3d, 'macgaelic'}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}]}, 0x4, 0x33e, &(0x7f0000000540)="$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")
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)

2.585188109s ago: executing program 2 (id=1363):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1400}, [@RTA_PRIORITY={0x8, 0x1e, 0x400}, @RTA_EXPIRES={0x8, 0x17, 0x3}]}, 0x2c}}, 0x0)

2.375597722s ago: executing program 2 (id=1365):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000140)=""/159)

2.178021096s ago: executing program 2 (id=1367):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x7, 0xf8}, 0x80, &(0x7f0000000080)=[{&(0x7f00000006c0)="270327", 0x3}], 0x1}, 0x0)

2.057364038s ago: executing program 3 (id=1369):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x10}}, 0x88}}, 0x0)

1.28826008s ago: executing program 1 (id=1378):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0)

960.213395ms ago: executing program 2 (id=1381):
r0 = socket(0x11, 0x3, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0)

786.882978ms ago: executing program 0 (id=1385):
pipe2(&(0x7f0000003bc0)={<r0=>0xffffffffffffffff}, 0x0)
syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x5000}}, 0x0, 0x0, 0x0)

775.326078ms ago: executing program 3 (id=1386):
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x1, 0x420)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000003c0)={0x0, 0x0, {0xffca, 0x8, 0x3011, 0x8, 0x0, 0x7, 0x2, 0x7}})

707.350669ms ago: executing program 4 (id=1387):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

627.99833ms ago: executing program 3 (id=1388):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)

619.49053ms ago: executing program 4 (id=1389):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x8a, &(0x7f00000000c0), 0x4)

611.334551ms ago: executing program 0 (id=1390):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="e0000000110001002cbd7000fbdbdf2500000000", @ANYRES32, @ANYBLOB="00000100000000001a0024001d452a79a2614dc6ac059ecf1abe1cfd8b4ab0f39fdc0000080020001000000008002e0002000000080029"], 0xe0}}, 0x0)

453.146063ms ago: executing program 3 (id=1391):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
get_mempolicy(0x0, 0xfffffffffffffffe, 0x1ff, &(0x7f0000ffc000/0x4000)=nil, 0x4)

452.903423ms ago: executing program 0 (id=1392):
prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

445.214563ms ago: executing program 4 (id=1393):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x62f3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x59555956, 0x7, 0x0, [{0x0, 0x1000}, {}, {0x1}, {0x8}, {}, {}, {}, {0x0, 0x7}]}})

331.541885ms ago: executing program 0 (id=1394):
prlimit64(0x0, 0x9, &(0x7f00000000c0), 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000002c0)='\"\x05\f\x9a\xfd~\xf7\x981sK\x86y\xd2\xd6\xe01`\xbfT\xdeTz\xaa\xc9\x12S^\x88\xbd\xa7\xba\x96([\niGq\xedkI\xba\x9b\xf0\xc9mB\xca\xa3\xac\xeeD\xf3|\xd2q\x8eO\x8c:\x9b\x03#\xdd\x0e\xf5\x18<\xb4G\xeb\xbf\r\x8c\xfdr\x82']}, 0x1000)

331.394335ms ago: executing program 4 (id=1395):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14, 0x52, 0x311}, 0x14}, 0x1, 0xf00000000000000}, 0x0)

230.606876ms ago: executing program 3 (id=1396):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f00000000c0)=0xca)

222.917686ms ago: executing program 0 (id=1397):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0xc0984124, 0x0)

178.937637ms ago: executing program 4 (id=1398):
r0 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x11, @empty, 0x4e24, 0x0, 'lc\x00', 0x1c, 0x2, 0x4a}, 0x2c)

100.093499ms ago: executing program 3 (id=1399):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f0000000140)=0x62)

66.123149ms ago: executing program 0 (id=1400):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000240))

0s ago: executing program 4 (id=1401):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000900053582c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

2.659540][ T4502] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[   42.681260][ T4508] loop0: detected capacity change from 0 to 256
[   42.711274][ T4509] loop3: detected capacity change from 0 to 1764
[   42.798764][ T4509] iso9660: Corrupted directory entry in block 2 of inode 1920
[   43.097708][ T4495] loop4: detected capacity change from 0 to 32768
[   43.155585][ T4526] netlink: 'syz.3.66': attribute type 29 has an invalid length.
[   43.158192][ T4526] netlink: 'syz.3.66': attribute type 29 has an invalid length.
[   43.189908][ T4495] ERROR: (device loop4): dbAlloc: the hint is outside the map
[   43.189908][ T4495] 
[   43.210685][ T4495] ialloc: diAlloc returned -5!
[   43.462361][ T4311] Bluetooth: hci0: command 0x0419 tx timeout
[   43.464018][ T4311] Bluetooth: hci2: command 0x0419 tx timeout
[   43.465587][ T4311] Bluetooth: hci1: command 0x0419 tx timeout
[   43.545275][ T4304] Bluetooth: hci3: command 0x0419 tx timeout
[   43.695689][ T4549] netdevsim netdevsim2: loading /lib/firmware// failed with error -22
[   43.697926][ T4549] netdevsim netdevsim2: Direct firmware load for / failed with error -22
[   43.700153][ T4549] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[   43.917945][ T4556] capability: warning: `syz.4.79' uses deprecated v2 capabilities in a way that may be insecure
[   44.119358][ T4562] loop4: detected capacity change from 0 to 256
[   44.166574][ T4562] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[   44.189479][ T4540] loop0: detected capacity change from 0 to 40427
[   44.214944][ T4540] F2FS-fs (loop0): build fault injection attr: rate: 691, type: 0x3ffff
[   44.222383][ T4540] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4
[   44.240401][ T4540] F2FS-fs (loop0): invalid crc value
[   44.277743][ T4540] F2FS-fs (loop0): Found nat_bits in checkpoint
[   44.330454][ T4540] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   44.386917][ T4543] loop3: detected capacity change from 0 to 40427
[   44.399281][ T4543] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[   44.407366][ T4543] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   44.416409][ T4543] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff
[   44.420940][ T4543] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8
[   44.444443][ T4543] F2FS-fs (loop3): invalid crc value
[   44.463116][ T4303] syz-executor: attempt to access beyond end of device
[   44.463116][ T4303] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   44.488620][ T4543] F2FS-fs (loop3): Found nat_bits in checkpoint
[   44.540119][ T4543] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   44.542769][ T4543] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   44.590111][ T4543] syz.3.73: attempt to access beyond end of device
[   44.590111][ T4543] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[   44.689376][ T4302] syz-executor: attempt to access beyond end of device
[   44.689376][ T4302] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   44.758352][ T4585] loop1: detected capacity change from 0 to 256
[   44.882986][ T4585] FAT-fs (loop1): Directory bread(block 64) failed
[   44.884813][ T4585] FAT-fs (loop1): Directory bread(block 65) failed
[   44.888932][ T4585] FAT-fs (loop1): Directory bread(block 66) failed
[   44.890660][ T4585] FAT-fs (loop1): Directory bread(block 67) failed
[   44.928162][ T4585] FAT-fs (loop1): Directory bread(block 68) failed
[   44.929935][ T4585] FAT-fs (loop1): Directory bread(block 69) failed
[   44.943823][ T4585] FAT-fs (loop1): Directory bread(block 70) failed
[   44.945651][ T4585] FAT-fs (loop1): Directory bread(block 71) failed
[   44.947394][ T4585] FAT-fs (loop1): Directory bread(block 72) failed
[   44.979709][ T4585] FAT-fs (loop1): Directory bread(block 73) failed
[   45.208233][ T4600] No such timeout policy "syz0"
[   45.556632][ T4611] loop4: detected capacity change from 0 to 1024
[   45.724867][ T4619] bridge0: port 3(veth0_to_bridge) entered blocking state
[   45.726819][ T4619] bridge0: port 3(veth0_to_bridge) entered disabled state
[   45.732475][ T4619] device veth0_to_bridge entered promiscuous mode
[   45.734319][ T4619] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   45.737902][ T4619] bridge0: port 3(veth0_to_bridge) entered blocking state
[   45.739443][ T4593] loop0: detected capacity change from 0 to 32768
[   45.739893][ T4619] bridge0: port 3(veth0_to_bridge) entered forwarding state
[   45.763530][  T125] hfsplus: b-tree write err: -5, ino 4
[   45.797514][ T4593] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   45.799736][ T4593] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   45.841563][ T4593] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[   45.852473][ T4345] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   45.854467][ T4345] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   45.929109][ T4345] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 74ms
[   45.939219][ T4345] gfs2: fsid=syz:syz.0: jid=0: Done
[   45.941250][ T4593] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   45.975227][ T4628] device ipip0 entered promiscuous mode
[   46.391387][ T4649] ieee802154 phy0 wpan0: encryption failed: -22
[   46.597080][ T4661] loop3: detected capacity change from 0 to 128
[   46.644798][ T4661] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   46.682661][ T4661] EXT4-fs (loop3): re-mounted. Quota mode: none.
[   46.684731][ T4666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'.
[   46.687068][ T4666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.129'.
[   46.772301][ T4302] EXT4-fs (loop3): unmounting filesystem.
[   46.781301][ T4617] loop1: detected capacity change from 0 to 32768
[   46.895373][ T4617] ERROR: (device loop1): dbAlloc: unable to allocate blocks
[   46.895373][ T4617] 
[   46.946393][ T4617] ERROR: (device loop1): remounting filesystem as read-only
[   46.953027][ T4617] jfs_mkdir: dtInsert returned -EIO
[   46.969972][ T4617] ERROR: (device loop1): txAbort: 
[   46.969972][ T4617] 
[   47.149297][ T4681] netlink: 48 bytes leftover after parsing attributes in process `syz.2.138'.
[   47.168363][ T4657] loop0: detected capacity change from 0 to 32768
[   47.189052][ T4657] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.126 (4657)
[   47.239122][ T4657] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   47.251832][ T4657] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[   47.254058][ T4657] BTRFS info (device loop0): using free space tree
[   47.284008][ T4688] loop3: detected capacity change from 0 to 256
[   47.451314][ T4707] loop3: detected capacity change from 0 to 1764
[   47.556278][ T4657] BTRFS info (device loop0): enabling ssd optimizations
[   47.695095][ T4303] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   48.295726][ T4763] loop3: detected capacity change from 0 to 8
[   48.322846][ T4761] loop0: detected capacity change from 0 to 1024
[   48.325224][ T4761] EXT4-fs: Ignoring removed bh option
[   48.326757][ T4761] EXT4-fs: inline encryption not supported
[   48.362175][ T4761] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[   48.366456][ T4763] SQUASHFS error: Failed to read block 0x738: -5
[   48.368156][ T4763] SQUASHFS error: Unable to read metadata cache entry [736]
[   48.382481][ T4732] loop2: detected capacity change from 0 to 32768
[   48.426141][ T4761] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 2: comm syz.0.165: lblock 2 mapped to illegal pblock 2 (length 1)
[   48.431105][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'.
[   48.438064][ T4732] ERROR: (device loop2): dbAlloc: unable to allocate blocks
[   48.438064][ T4732] 
[   48.440827][ T4732] ERROR: (device loop2): remounting filesystem as read-only
[   48.449025][ T4761] Quota error (device loop0): qtree_write_dquot: dquota write failed
[   48.451350][ T4761] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 48: comm syz.0.165: lblock 0 mapped to illegal pblock 48 (length 1)
[   48.526856][ T4761] Quota error (device loop0): v2_write_file_info: Can't write info structure
[   48.529505][ T4761] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.165: Failed to acquire dquot type 0
[   48.587620][ T4761] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem
[   48.592220][ T4761] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.165: mark_inode_dirty error
[   48.612494][ T4761] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[   48.615597][ T4761] EXT4-fs (loop0): 1 orphan inode deleted
[   48.621920][ T4761] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   48.637644][ T4761] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 1: comm syz.0.165: lblock 1 mapped to illegal pblock 1 (length 1)
[   48.661664][ T4761] Quota error (device loop0): find_next_id: Can't read quota tree block 1
[   48.666018][ T1688] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[   48.677137][ T1688] Quota error (device loop0): remove_tree: Can't read quota data block 1
[   48.679466][ T1688] EXT4-fs error (device loop0): ext4_release_dquot:6825: comm kworker/u4:5: Failed to release dquot type 0
[   48.737692][ T4303] EXT4-fs (loop0): unmounting filesystem.
[   48.739573][ T4303] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 1 in block_group 0
[   48.773251][ T4303] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem
[   48.798101][ T4303] EXT4-fs error (device loop0): ext4_quota_off:7091: inode #3: comm syz-executor: mark_inode_dirty error
[   48.925012][   T27] audit: type=1107 audit(48.900:2): pid=4786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='—'
[   49.004366][ T4773] loop3: detected capacity change from 0 to 32768
[   49.028227][ T4773] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.171 (4773)
[   49.045131][ T4794] loop1: detected capacity change from 0 to 256
[   49.047368][ T4773] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   49.050044][ T4773] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[   49.066770][ T4773] BTRFS info (device loop3): force zlib compression, level 3
[   49.068702][ T4773] BTRFS info (device loop3): force clearing of disk cache
[   49.070517][ T4773] BTRFS info (device loop3): setting nodatasum
[   49.074294][ T4794] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   49.091518][ T4773] BTRFS info (device loop3): use zlib compression, level 3
[   49.094297][ T4773] BTRFS info (device loop3): allowing degraded mounts
[   49.096139][ T4773] BTRFS info (device loop3): enabling disk space caching
[   49.097977][ T4773] BTRFS info (device loop3): disk space caching is enabled
[   49.107346][ T4794] FAT-fs (loop1): error, corrupted directory (invalid entries)
[   49.345725][ T4820] loop4: detected capacity change from 0 to 128
[   49.372974][ T4820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   49.463167][ T4773] BTRFS info (device loop3): enabling ssd optimizations
[   49.473163][ T4773] BTRFS info (device loop3): rebuilding free space tree
[   49.478992][ T4295] EXT4-fs (loop4): unmounting filesystem.
[   49.534729][ T4773] BTRFS info (device loop3): disabling free space tree
[   49.536706][ T4773] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   49.549978][ T4773] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   49.700743][ T4773] BTRFS info (device loop3): balance: start -f -susage=25769803773,usage=4294967293..5,vrange=9223372036854775809..4398046511294,limit=3..3
[   49.719335][ T4773] BTRFS info (device loop3): balance: ended with status: 0
[   49.770116][ T4814] loop0: detected capacity change from 0 to 32768
[   49.808282][ T4302] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   50.000674][ T4817] loop2: detected capacity change from 0 to 32768
[   50.019211][ T4817] (syz.2.188,4817,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   50.038945][ T4814] XFS (loop0): Mounting V5 Filesystem
[   50.060993][ T4817] (syz.2.188,4817,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   50.203322][ T4814] XFS (loop0): Ending clean mount
[   50.218178][ T4817] JBD2: Ignoring recovery information on journal
[   50.386849][ T4817] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   50.431539][ T4887] netlink: 'syz.4.211': attribute type 4 has an invalid length.
[   50.437532][ T4887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'.
[   50.487983][ T4303] XFS (loop0): Unmounting Filesystem
[   50.588984][ T4894] Lens A: =================  START STATUS  =================
[   50.590990][ T4894] Lens A: Focus, Absolute: 0
[   50.608445][ T4894] Lens A: ==================  END STATUS  ==================
[   50.623274][ T4307] ocfs2: Unmounting device (7,2) on (node local)
[   50.958837][ T4914] netlink: 112 bytes leftover after parsing attributes in process `syz.4.223'.
[   50.969189][ T4914] netlink: 'syz.4.223': attribute type 1 has an invalid length.
[   51.168010][ T4927] netlink: 2 bytes leftover after parsing attributes in process `syz.3.230'.
[   51.297579][ T4937] random: crng reseeded on system resumption
[   51.492306][ T4947] loop4: detected capacity change from 0 to 1024
[   51.650310][ T4959] loop4: detected capacity change from 0 to 1024
[   51.728258][ T4964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.730979][ T4964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.775553][ T4966] netlink: 'syz.3.250': attribute type 11 has an invalid length.
[   51.783715][ T4966] netlink: 132 bytes leftover after parsing attributes in process `syz.3.250'.
[   51.784869][  T515] hfsplus: b-tree write err: -5, ino 4
[   51.875707][ T4973] loop3: detected capacity change from 0 to 164
[   51.889645][ T4973] Unable to read rock-ridge attributes
[   52.202802][ T4985] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.259'.
[   52.237946][ T4987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.260'.
[   52.354726][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   52.359201][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   52.362711][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   52.366021][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   52.369297][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   52.372714][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   52.376058][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   52.379346][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   52.382848][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   52.386059][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   52.495621][ T4995] netlink: 32 bytes leftover after parsing attributes in process `syz.3.265'.
[   52.774606][ T4970] loop4: detected capacity change from 0 to 40427
[   52.891278][ T4970] F2FS-fs (loop4): invalid crc value
[   53.048830][ T4970] F2FS-fs (loop4): Found nat_bits in checkpoint
[   53.077069][ T5018] loop3: detected capacity change from 0 to 256
[   53.136164][ T4970] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   53.490589][ T5027] loop3: detected capacity change from 0 to 4096
[   53.594347][ T5027] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[   53.948454][ T5027] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   53.967435][ T5029] overlayfs: missing 'lowerdir'
[   54.039839][ T5023] loop1: detected capacity change from 0 to 32768
[   54.103606][ T5023] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.276 (5023)
[   54.154307][ T5023] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   54.157205][ T5023] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   54.159881][ T5023] BTRFS info (device loop1): force zlib compression, level 3
[   54.164459][ T5023] BTRFS info (device loop1): force clearing of disk cache
[   54.190759][ T5023] BTRFS info (device loop1): setting nodatasum
[   54.192882][ T5023] BTRFS info (device loop1): doing ref verification
[   54.194548][ T5023] BTRFS info (device loop1): allowing degraded mounts
[   54.196247][ T5023] BTRFS info (device loop1): enabling disk space caching
[   54.198027][ T5023] BTRFS info (device loop1): disk space caching is enabled
[   54.262921][ T5025] loop0: detected capacity change from 0 to 32768
[   54.527478][ T5025] XFS (loop0): Mounting V5 Filesystem
[   54.638351][ T5023] BTRFS info (device loop1): enabling ssd optimizations
[   54.664950][ T5023] BTRFS info (device loop1): rebuilding free space tree
[   54.780586][ T5023] BTRFS info (device loop1): disabling free space tree
[   54.783751][ T5023] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   54.786177][ T5023] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   55.025013][ T5075] x_tables: duplicate underflow at hook 3
[   55.042563][ T4302] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[   55.079827][ T4296] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   55.660519][ T5025] XFS (loop0): Ending clean mount
[   55.698218][ T5100] netlink: 56 bytes leftover after parsing attributes in process `syz.3.297'.
[   55.713788][ T5102] loop1: detected capacity change from 0 to 256
[   55.792400][ T4303] XFS (loop0): Unmounting Filesystem
[   55.976298][ T5103] loop2: detected capacity change from 0 to 8192
[   56.029644][ T5112] loop1: detected capacity change from 0 to 256
[   56.820058][ T5107] loop3: detected capacity change from 0 to 32768
[   56.857098][ T5107] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   56.859241][ T5107] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   57.026190][ T5107] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms
[   57.079213][ T5086] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   57.081156][ T5086] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   57.168310][ T5086] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 87ms
[   57.170441][ T5086] gfs2: fsid=syz:syz.0: jid=0: Done
[   57.177709][ T5107] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   57.186414][ T5132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.313'.
[   57.311228][ T5107] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[   57.311228][ T5107]   inode = 0 2341
[   57.311228][ T5107]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[   57.319139][ T5107] gfs2: fsid=syz:syz.0: G:  s:SH n:2/925 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[   57.322134][ T5107] gfs2: fsid=syz:syz.0:  H: s:SH f:AH e:0 p:5107 [syz.3.301] inode_permission+0x1d0/0x3b4
[   57.324735][ T5107] gfs2: fsid=syz:syz.0:  I: n:0/2341 t:4 f:0x00 d:0x00000200 s:0 p:0
[   57.326810][ T5107] gfs2: fsid=syz:syz.0: about to withdraw this file system
[   57.341322][ T5107] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[   57.343999][ T5103] Dev loop2: RDB in block 1 has bad checksum
[   57.346708][ T5103] Dev loop2: unable to read RDB block 8
[   57.348407][ T5103]  loop2: unable to read partition table
[   57.349996][ T5103] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[   57.352819][ T5107] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[   57.362313][ T5107] gfs2: fsid=syz:syz.0: File system withdrawn
[   57.364197][ T5107] CPU: 0 PID: 5107 Comm: syz.3.301 Not tainted 6.1.134-syzkaller #0
[   57.366348][ T5107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   57.368991][ T5107] Call trace:
[   57.369836][ T5107]  dump_backtrace+0x1c8/0x1f4
[   57.371063][ T5107]  show_stack+0x2c/0x3c
[   57.372146][ T5107]  dump_stack_lvl+0x108/0x170
[   57.373419][ T5107]  dump_stack+0x1c/0x5c
[   57.374515][ T5107]  gfs2_withdraw+0xdcc/0x140c
[   57.375721][ T5107]  gfs2_consist_inode_i+0xf0/0x10c
[   57.375827][    C1] net_ratelimit: 10296 callbacks suppressed
[   57.375841][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.377033][ T5107]  gfs2_inode_refresh+0x964/0xd9c
[   57.378953][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.381755][ T5107]  inode_go_instantiate+0x4c/0x68
[   57.381776][ T5107]  gfs2_instantiate+0x17c/0x2c8
[   57.381787][ T5107]  gfs2_glock_wait+0x1b8/0x298
[   57.381798][ T5107]  gfs2_glock_nq+0xa90/0x11d8
[   57.381808][ T5107]  gfs2_permission+0x280/0x46c
[   57.381822][ T5107]  inode_permission+0x1d0/0x3b4
[   57.381836][ T5107]  may_open+0x290/0x3bc
[   57.383479][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   57.386408][ T5107]  path_openat+0x1cec/0x2548
[   57.386430][ T5107]  do_filp_open+0x1bc/0x3cc
[   57.386440][ T5107]  do_sys_openat2+0x128/0x3e0
[   57.387870][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   57.388923][ T5107]  __arm64_sys_openat+0x1f0/0x240
[   57.390372][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.391490][ T5107]  invoke_syscall+0x98/0x2bc
[   57.393311][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.394229][ T5107]  el0_svc_common+0x138/0x258
[   57.395620][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   57.398521][ T5107]  do_el0_svc+0x58/0x13c
[   57.400017][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   57.401321][ T5107]  el0_svc+0x58/0x168
[   57.402838][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.405761][ T5107]  el0t_64_sync_handler+0x84/0xf0
[   57.407498][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   57.410342][ T5107]  el0t_64_sync+0x18c/0x190
[   57.434109][    C0] vkms_vblank_simulate: vblank timer overrun
[   57.569848][ T5140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.316'.
[   57.643573][ T5144] loop1: detected capacity change from 0 to 64
[   58.444366][ T5138] loop4: detected capacity change from 0 to 32768
[   58.521683][ T5138] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.315 (5138)
[   58.574664][ T5143] loop0: detected capacity change from 0 to 32768
[   58.597267][ T5138] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   58.600406][ T5138] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[   58.603874][ T5138] BTRFS info (device loop4): using free space tree
[   58.624820][ T5143] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.317 (5143)
[   58.701863][ T5143] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   58.708152][ T5143] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   58.710697][ T5143] BTRFS info (device loop0): force zlib compression, level 3
[   58.713474][ T5143] BTRFS info (device loop0): force clearing of disk cache
[   58.718050][ T5143] BTRFS info (device loop0): setting nodatasum
[   58.736006][ T5143] BTRFS info (device loop0): use zlib compression, level 3
[   58.738080][ T5143] BTRFS info (device loop0): allowing degraded mounts
[   58.741057][ T5143] BTRFS info (device loop0): enabling disk space caching
[   58.745169][ T5143] BTRFS info (device loop0): disk space caching is enabled
[   59.186155][ T5138] BTRFS info (device loop4): enabling ssd optimizations
[   59.190995][ T5218] netlink: 'syz.2.333': attribute type 3 has an invalid length.
[   59.193225][ T5156] DRBG: could not allocate digest TFM handle: hmac(sha512)
[   59.370105][ T4295] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   59.397544][ T5143] BTRFS info (device loop0): enabling ssd optimizations
[   59.480809][ T5143] BTRFS info (device loop0): rebuilding free space tree
[   59.488359][ T5225] loop2: detected capacity change from 0 to 4096
[   59.564718][ T5143] BTRFS info (device loop0): disabling free space tree
[   59.566613][ T5143] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   59.569163][ T5143] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   59.971064][ T4303] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   60.034469][ T4440] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4440)
[   60.051254][ T4304] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[   60.068470][ T4304] Bluetooth: hci4: Injecting HCI hardware error event
[   60.071749][ T4304] Bluetooth: hci4: hardware error 0x00
[   61.055498][ T5248] loop4: detected capacity change from 0 to 40427
[   61.093828][ T5248] F2FS-fs (loop4): Unrecognized mount option "nobh" or missing value
[   61.098747][ T5282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.352'.
[   61.328827][ T5290] No such timeout policy "syz0"
[   62.275085][ T5302] netlink: 'syz.2.365': attribute type 8 has an invalid length.
[   62.362869][ T5306] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   62.371731][    C1] net_ratelimit: 11581 callbacks suppressed
[   62.371746][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   62.376580][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   62.379850][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.383388][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.409133][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   62.412599][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   62.415848][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.419349][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   62.422834][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   62.426107][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   63.091936][ T5320] loop3: detected capacity change from 0 to 64
[   63.180678][ T5320] syz.3.373: attempt to access beyond end of device
[   63.180678][ T5320] loop3: rw=0, sector=3594, nr_sectors = 2 limit=64
[   63.185045][ T5314] loop2: detected capacity change from 0 to 32768
[   63.187214][ T5320] Buffer I/O error on dev loop3, logical block 1797, async page read
[   63.190088][ T5320] syz.3.373: attempt to access beyond end of device
[   63.190088][ T5320] loop3: rw=0, sector=3594, nr_sectors = 2 limit=64
[   63.191685][ T4440] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   63.201998][ T5320] Buffer I/O error on dev loop3, logical block 1797, async page read
[   63.326101][ T5314] (syz.2.370,5314,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   63.341941][ T5314] (syz.2.370,5314,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   63.373708][ T5316] loop0: detected capacity change from 0 to 32768
[   63.633773][ T5327] loop4: detected capacity change from 0 to 1764
[   63.846249][ T5327] iso9660: Corrupted directory entry in block 2 of inode 1920
[   63.865550][ T5314] JBD2: Ignoring recovery information on journal
[   64.025204][ T5316] JBD2: Ignoring recovery information on journal
[   64.131350][ T4304] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[   64.160019][ T5314] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   64.182766][ T5334] loop4: detected capacity change from 0 to 4096
[   64.223080][ T5334] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[   64.292498][ T5316] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   64.507269][ T5332] loop3: detected capacity change from 0 to 32768
[   64.530725][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[   64.532570][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[   64.541344][ T5332] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[   64.569467][ T5331] loop1: detected capacity change from 0 to 32768
[   64.604553][ T5331] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum"
[   64.607008][ T5331] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)...
[   64.731630][ T4303] ocfs2: Unmounting device (7,0) on (node local)
[   64.749373][ T4307] ocfs2: Unmounting device (7,2) on (node local)
[   64.756853][ T5331] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms
[   64.951104][ T5331] gfs2: fsid=statfs_quantum.s: first mount done, others may mount
[   65.189001][ T4440] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[   65.310146][ T5352] loop2: detected capacity change from 0 to 16
[   65.325765][ T5352] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[   65.338288][ T5334] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[   65.357939][ T5352] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature 9000000, please upgrade kernel version
[   65.747308][ T5357] loop1: detected capacity change from 0 to 4096
[   65.875826][ T5346] loop0: detected capacity change from 0 to 32768
[   66.167467][ T5346] ERROR: (device loop0): dtSearch: stack overrun!
[   66.167467][ T5346] 
[   66.202041][ T5346] ERROR: (device loop0): remounting filesystem as read-only
[   66.204027][ T5346] btstack dump:
[   66.204887][ T5346] bn = 0, index = 0
[   66.205864][ T5346] bn = 0, index = 0
[   66.206865][ T5346] bn = 0, index = 0
[   66.207818][ T5346] bn = 0, index = 0
[   66.212280][ T5346] bn = 0, index = 0
[   66.213331][ T5346] bn = 0, index = 0
[   66.214295][ T5346] bn = 0, index = 0
[   66.215247][ T5346] bn = 0, index = 0
[   66.233644][ T5346] jfs_lookup: dtSearch returned -5
[   66.365263][ T5360] loop4: detected capacity change from 0 to 32768
[   66.367525][ T5360] XFS: ikeep mount option is deprecated.
[   66.413551][ T5360] XFS: noikeep mount option is deprecated.
[   66.471503][ T4440] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   66.542965][ T5360] XFS (loop4): Mounting V5 Filesystem
[   66.597203][ T5380] loop3: detected capacity change from 0 to 64
[   66.642956][ T5357] ntfs: volume version 3.1.
[   66.764061][ T5384] netlink: 'syz.0.397': attribute type 23 has an invalid length.
[   66.950709][ T5357] ntfs: (device loop1): ntfs_nlstoucs(): Name using character set cp936 contains characters that cannot be converted to Unicode.
[   66.961698][ T5357] ntfs: (device loop1): ntfs_lookup(): Failed to convert name to Unicode.
[   67.304036][ T5400] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   67.383156][    C1] net_ratelimit: 10293 callbacks suppressed
[   67.383174][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.388297][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   67.391474][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   67.394951][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.398402][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.401857][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   67.405134][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   67.408509][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.411886][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   67.415235][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   68.654351][ T5417] loop0: detected capacity change from 0 to 32768
[   68.669677][ T5417] XFS: ikeep mount option is deprecated.
[   68.768063][ T5413] loop1: detected capacity change from 0 to 32768
[   68.840456][ T5417] XFS (loop0): Mounting V5 Filesystem
[   68.858509][ T5413] (syz.1.411,5413,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   68.899384][ T5413] (syz.1.411,5413,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   69.036706][ T5431] netlink: 'syz.3.416': attribute type 1 has an invalid length.
[   69.039024][ T5431] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.416'.
[   69.072154][ T5433] sctp: [Deprecated]: syz.2.417 (pid 5433) Use of int in max_burst socket option deprecated.
[   69.072154][ T5433] Use struct sctp_assoc_value instead
[   69.219147][ T5436] netlink: 116 bytes leftover after parsing attributes in process `syz.2.419'.
[   69.397178][ T5413] JBD2: Ignoring recovery information on journal
[   69.577649][ T5413] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   69.640012][   T22] cfg80211: failed to load regulatory.db
[   69.963721][ T5417] XFS (loop0): Ending clean mount
[   70.082446][ T5417] XFS (loop0): Quotacheck needed: Please wait.
[   70.157242][ T4296] ocfs2: Unmounting device (7,1) on (node local)
[   70.242220][ T5360] XFS (loop4): Ending clean mount
[   70.301646][ T5417] XFS (loop0): Quotacheck: Done.
[   70.380755][ T5360] XFS (loop4): Quotacheck needed: Please wait.
[   70.519022][ T4303] XFS (loop0): Unmounting Filesystem
[   70.667173][ T5360] XFS (loop4): Quotacheck: Done.
[   70.862816][ T4295] XFS (loop4): Unmounting Filesystem
[   71.049036][ T5461] loop3: detected capacity change from 0 to 32768
[   71.231416][ T5483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'.
[   71.393035][ T5461] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[   71.835056][ T5461] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   72.095211][ T5503] netlink: 'syz.2.452': attribute type 1 has an invalid length.
[   72.285395][ T5507] random: crng reseeded on system resumption
[   72.324626][ T5509] netlink: 911 bytes leftover after parsing attributes in process `syz.2.456'.
[   72.345002][ T4302] ocfs2: Unmounting device (7,3) on (node local)
[   72.396709][    C1] net_ratelimit: 10778 callbacks suppressed
[   72.396725][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.401731][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   72.405335][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.408697][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.412024][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.415401][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   72.418712][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   72.422186][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   72.425740][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   72.429035][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   72.516376][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'.
[   72.518790][ T5513] netlink: 'syz.2.458': attribute type 1 has an invalid length.
[   72.823090][ T5523] loop2: detected capacity change from 0 to 1024
[   72.876372][ T5523] hfsplus: Filesystem is marked locked, mounting read-only.
[   72.979186][ T5523] hfsplus: filesystem is marked locked, leaving read-only.
[   73.363440][ T5541] netlink: 60 bytes leftover after parsing attributes in process `syz.2.471'.
[   73.734491][ T5557] loop3: detected capacity change from 0 to 256
[   74.013388][ T5569] loop2: detected capacity change from 0 to 512
[   74.225130][ T5569] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   74.227344][ T5569] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002]
[   74.231961][ T5569] System zones: 0-1, 15-15, 18-18, 34-34
[   74.234082][ T5569] EXT4-fs (loop2): orphan cleanup on readonly fs
[   74.235802][ T5569] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[   74.238251][ T5569] EXT4-fs warning (device loop2): ext4_enable_quotas:7037: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   74.296880][ T5569] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   74.330741][ T5569] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.484: bad orphan inode 16
[   74.363906][ T5569] EXT4-fs (loop2): Remounting filesystem read-only
[   74.365837][ T5569] ext4_test_bit(bit=15, block=18) = 1
[   74.367232][ T5569] is_bad_inode(inode)=0
[   74.381309][ T5569] NEXT_ORPHAN(inode)=0
[   74.385515][ T5569] max_ino=32
[   74.386382][ T5569] i_nlink=2
[   74.387685][ T5569] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   74.437876][ T5569] fscrypt (loop2, inode 16): Error -61 getting encryption context
[   74.444492][ T5583] dlm: no local IP address has been set
[   74.447947][ T5583] dlm: cannot start dlm midcomms -107
[   74.517263][ T4307] EXT4-fs (loop2): unmounting filesystem.
[   74.534105][ T5585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'.
[   74.739248][ T5594] device netdevsim0 entered promiscuous mode
[   74.808029][ T5597] netlink: 'syz.1.497': attribute type 3 has an invalid length.
[   74.952679][ T5601] netlink: 52 bytes leftover after parsing attributes in process `syz.1.499'.
[   75.001723][ T5603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.500'.
[   75.284096][ T5614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.506'.
[   75.977275][ T5639] loop0: detected capacity change from 0 to 256
[   76.285726][ T5629] loop2: detected capacity change from 0 to 32768
[   76.317391][ T5629] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.510 (5629)
[   76.368559][ T5629] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   76.371185][ T5629] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   76.373767][ T5629] BTRFS info (device loop2): force zlib compression, level 3
[   76.375679][ T5629] BTRFS info (device loop2): force clearing of disk cache
[   76.392018][ T5629] BTRFS info (device loop2): setting nodatasum
[   76.393646][ T5629] BTRFS info (device loop2): allowing degraded mounts
[   76.395373][ T5629] BTRFS info (device loop2): enabling disk space caching
[   76.397260][ T5629] BTRFS info (device loop2): disk space caching is enabled
[   76.539008][ T5639] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   76.695509][ T5639] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008)
[   76.701868][ T5639] exFAT-fs (loop0): Filesystem has been set read-only
[   77.051754][ T5629] BTRFS info (device loop2): rebuilding free space tree
[   77.147317][ T5629] BTRFS info (device loop2): disabling free space tree
[   77.149246][ T5629] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   77.151763][ T5629] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   77.401755][    C1] net_ratelimit: 11090 callbacks suppressed
[   77.401771][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.406708][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   77.410048][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   77.413445][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   77.422218][ T5629] BTRFS info (device loop2): balance: start -ssoft,usage=172,vrange=0..18446744073709551615,limit=0,stripes=0..511
[   77.425457][ T5629] BTRFS info (device loop2): balance: ended with status: 0
[   77.441793][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.445385][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   77.448818][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.452192][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.455526][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   77.458840][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   77.517415][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.519521][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.521433][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.537691][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.539761][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.564647][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.566593][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.569323][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.571207][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.594830][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.596780][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.598731][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.600754][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.603243][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.617002][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.619038][ T5083] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   77.637805][ T5083] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[   77.658493][ T4307] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   77.857579][ T5692] usb usb1: check_ctrlrecip: process 5692 (syz.3.532) requesting ep 01 but needs 81
[   77.860109][ T5692] usb usb1: usbfs: process 5692 (syz.3.532) did not claim interface 0 before use
[   78.418545][ T5710] loop2: detected capacity change from 0 to 256
[   78.900673][ T5720] loop1: detected capacity change from 0 to 64
[   79.818487][ T5734] tipc: Can't bind to reserved service type 2
[   80.347178][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'.
[   80.741441][ T5756] netlink: 'syz.2.559': attribute type 29 has an invalid length.
[   80.759625][ T5756] netlink: 'syz.2.559': attribute type 29 has an invalid length.
[   81.486353][ T5774] loop4: detected capacity change from 0 to 1024
[   81.637240][ T5779] netlink: 'syz.3.570': attribute type 16 has an invalid length.
[   81.639647][ T5779] netlink: 'syz.3.570': attribute type 17 has an invalid length.
[   81.670438][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   81.692942][ T5774] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   81.699125][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   81.798495][ T4295] EXT4-fs (loop4): unmounting filesystem.
[   81.883209][ T5782] loop2: detected capacity change from 0 to 4096
[   81.885357][ T5782] EXT4-fs: Invalid journal IO priority (must be 0-7)
[   81.998668][ T4440] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   82.046621][ T5782] loop2: detected capacity change from 0 to 256
[   82.048762][ T5782] exfat: Deprecated parameter 'debug'
[   82.050195][ T5782] exfat: Unknown parameter 'delalloc'
[   82.245759][ T5788] loop2: detected capacity change from 0 to 256
[   82.411877][    C1] net_ratelimit: 9126 callbacks suppressed
[   82.411895][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.416897][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.420393][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.423929][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   82.427332][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   82.430615][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   82.433967][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.437309][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   82.440552][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.444064][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   82.671501][ T5788] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[   83.478501][ T5809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'.
[   83.873751][ T5823] netlink: 132 bytes leftover after parsing attributes in process `syz.3.589'.
[   84.203597][ T5835] loop3: detected capacity change from 0 to 2048
[   84.402647][ T5845] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.552895][ T5835] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5
[   84.632370][ T5835] Remounting filesystem read-only
[   85.193281][ T5872] device bond1 entered promiscuous mode
[   85.200942][ T5872] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.370695][ T5879] loop3: detected capacity change from 0 to 1764
[   85.499252][ T5891] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615)
[   85.502051][ T5891] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   85.581459][ T5879] iso9660: Corrupted directory entry in block 2 of inode 1920
[   85.794030][ T5904] loop3: detected capacity change from 0 to 512
[   86.318578][ T5904] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   86.442454][ T4302] EXT4-fs (loop3): unmounting filesystem.
[   86.825945][ T5912] loop2: detected capacity change from 0 to 32768
[   87.109664][ T5920] loop1: detected capacity change from 0 to 32768
[   87.153241][ T5924] loop0: detected capacity change from 0 to 32768
[   87.169962][ T5920] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   87.172569][ T5920] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   87.286415][ T5912] kAFS: unparsable volume name
[   87.364673][ T5920] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[   87.420508][ T5241] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   87.422431][ T5241] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   87.436447][    C1] net_ratelimit: 8025 callbacks suppressed
[   87.436464][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.441552][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   87.445189][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.448730][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.452365][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.455804][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.459388][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.462954][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.466445][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   87.469879][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   87.568196][ T5241] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 145ms
[   87.582169][ T5241] gfs2: fsid=syz:syz.0: jid=0: Done
[   87.583655][ T5920] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   87.922171][ T5924] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   88.035358][ T5924] ocfs2: Unmounting device (7,0) on (node local)
[   88.232842][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'.
[   88.292943][ T5973] loop2: detected capacity change from 0 to 64
[   88.446646][ T5977] delete_channel: no stack
[   88.602817][ T5980] bridge0: port 3(veth0_to_bridge) entered blocking state
[   88.635564][ T5980] bridge0: port 3(veth0_to_bridge) entered disabled state
[   88.638220][ T5980] device veth0_to_bridge entered promiscuous mode
[   88.640018][ T5980] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   88.671890][ T5980] bridge0: port 3(veth0_to_bridge) entered blocking state
[   88.674776][ T5980] bridge0: port 3(veth0_to_bridge) entered forwarding state
[   88.811283][ T5959] loop1: detected capacity change from 0 to 32768
[   89.172421][ T6002] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551615)
[   89.188857][ T6002] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   89.260937][ T5959] ialloc: diAlloc returned -17!
[   89.379856][ T6009] netlink: 48 bytes leftover after parsing attributes in process `syz.4.677'.
[   89.562028][ T6015] bridge0: port 3(veth0_to_bridge) entered blocking state
[   89.568185][ T6015] bridge0: port 3(veth0_to_bridge) entered disabled state
[   89.570944][ T6015] device veth0_to_bridge entered promiscuous mode
[   89.585805][ T6015] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   89.598646][ T6015] bridge0: port 3(veth0_to_bridge) entered blocking state
[   89.600654][ T6015] bridge0: port 3(veth0_to_bridge) entered forwarding state
[   89.907423][ T6033] loop2: detected capacity change from 0 to 1024
[   90.258519][  T125] hfsplus: b-tree write err: -5, ino 4
[   90.798367][ T6057] loop0: detected capacity change from 0 to 256
[   91.234456][ T6045] loop1: detected capacity change from 0 to 32768
[   91.556913][ T6073] loop2: detected capacity change from 0 to 8
[   91.665549][ T6045] kAFS: unparsable volume name
[   91.847748][ T6073] SQUASHFS error: Failed to read block 0x738: -5
[   91.849577][ T6073] SQUASHFS error: Unable to read metadata cache entry [736]
[   91.852852][ T6059] loop3: detected capacity change from 0 to 32768
[   92.164797][ T6086] loop0: detected capacity change from 0 to 256
[   92.191793][ T6059] ERROR: (device loop3): dbAlloc: unable to allocate blocks
[   92.191793][ T6059] 
[   92.228175][ T6059] ERROR: (device loop3): remounting filesystem as read-only
[   92.230452][ T6059] jfs_mkdir: dtInsert returned -EIO
[   92.231944][ T6059] ERROR: (device loop3): txAbort: 
[   92.231944][ T6059] 
[   92.271239][ T6086] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   92.351665][ T6086] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   92.460447][    C1] net_ratelimit: 7901 callbacks suppressed
[   92.460465][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.465725][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.469226][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.472929][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.476520][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.480399][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.483965][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   92.487528][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[   92.491194][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   92.494869][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   92.854913][ T6115] loop1: detected capacity change from 0 to 1024
[   92.857220][ T6115] EXT4-fs: Ignoring removed bh option
[   92.858693][ T6115] EXT4-fs: inline encryption not supported
[   93.003767][ T6115] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[   93.246909][ T6115] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 2: comm syz.1.728: lblock 2 mapped to illegal pblock 2 (length 1)
[   93.268996][ T6115] Quota error (device loop1): qtree_write_dquot: dquota write failed
[   93.271117][ T6115] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 48: comm syz.1.728: lblock 0 mapped to illegal pblock 48 (length 1)
[   93.305604][ T6115] Quota error (device loop1): v2_write_file_info: Can't write info structure
[   93.308000][ T6115] EXT4-fs error (device loop1): ext4_acquire_dquot:6802: comm syz.1.728: Failed to acquire dquot type 0
[   93.348725][ T6115] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: Corrupt filesystem
[   93.383674][ T6115] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.728: mark_inode_dirty error
[   93.418988][ T6115] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[   93.421889][ T6115] EXT4-fs (loop1): 1 orphan inode deleted
[   93.423470][ T6115] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   93.461750][    T9] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[   93.477338][    T9] Quota error (device loop1): remove_tree: Can't read quota data block 1
[   93.479562][    T9] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:0: Failed to release dquot type 0
[   93.575858][ T6115] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 1: comm syz.1.728: lblock 1 mapped to illegal pblock 1 (length 1)
[   93.626741][ T6115] Quota error (device loop1): find_next_id: Can't read quota tree block 1
[   93.752632][ T4296] EXT4-fs (loop1): unmounting filesystem.
[   93.761898][ T4296] EXT4-fs error (device loop1): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 1 in block_group 0
[   93.779609][ T4296] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: Corrupt filesystem
[   93.805257][ T4296] EXT4-fs error (device loop1): ext4_quota_off:7091: inode #3: comm syz-executor: mark_inode_dirty error
[   93.874005][ T6119] loop0: detected capacity change from 0 to 32768
[   94.079525][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'.
[   94.185215][ T6125] loop2: detected capacity change from 0 to 32768
[   94.316622][ T6119] ERROR: (device loop0): dbAlloc: unable to allocate blocks
[   94.316622][ T6119] 
[   94.336218][ T6119] ERROR: (device loop0): remounting filesystem as read-only
[   94.482294][ T6125] ERROR: (device loop2): dbAlloc: unable to allocate blocks
[   94.482294][ T6125] 
[   94.493161][ T6125] ERROR: (device loop2): remounting filesystem as read-only
[   94.495456][ T6125] jfs_mkdir: dtInsert returned -EIO
[   94.496869][ T6125] ERROR: (device loop2): txAbort: 
[   94.496869][ T6125] 
[   94.506904][ T6137] loop4: detected capacity change from 0 to 32768
[   94.598575][ T6137] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   94.601435][ T6137] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[   94.604382][ T6137] BTRFS info (device loop4): using free space tree
[   95.119988][ T6137] BTRFS info (device loop4): enabling ssd optimizations
[   95.413483][ T4295] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   95.663776][ T6202] netlink: 'syz.0.766': attribute type 4 has an invalid length.
[   95.718576][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'.
[   95.771406][ T4287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4287)
[   95.793502][ T6207] Lens A: =================  START STATUS  =================
[   95.796592][ T6207] Lens A: Focus, Absolute: 0
[   95.797745][ T6207] Lens A: ==================  END STATUS  ==================
[   96.040580][ T6190] loop3: detected capacity change from 0 to 32768
[   96.541708][ T6190] ERROR: (device loop3): dbAlloc: unable to allocate blocks
[   96.541708][ T6190] 
[   96.582091][ T6190] ERROR: (device loop3): remounting filesystem as read-only
[   97.357944][ T6227] loop2: detected capacity change from 0 to 32768
[   97.375394][ T6227] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[   97.462365][    C0] net_ratelimit: 6715 callbacks suppressed
[   97.462382][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[   97.468178][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[   97.468608][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.474924][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   97.478473][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.481852][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.485187][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.488618][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.491993][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   97.493422][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[   97.887098][ T6266] loop0: detected capacity change from 0 to 256
[   98.115332][ T6243] loop4: detected capacity change from 0 to 32768
[   98.173113][ T6243] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   98.175274][ T6243] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   98.299927][ T4289] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   98.397336][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.399715][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.631116][ T6243] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[   98.675205][ T4345] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   98.677043][ T4345] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   98.787868][ T4345] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 110ms
[   98.790358][ T4345] gfs2: fsid=syz:syz.0: jid=0: Done
[   98.792253][ T6243] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   99.074311][ T6305] overlayfs: missing 'lowerdir'
[   99.100012][ T6306] loop2: detected capacity change from 0 to 1024
[   99.261820][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.292351][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.368653][ T6314] loop1: detected capacity change from 0 to 1024
[   99.471733][ T6318] netlink: 'syz.2.819': attribute type 11 has an invalid length.
[   99.479104][ T6318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.819'.
[   99.646880][ T6294] hfsplus: b-tree write err: -5, ino 4
[   99.664789][ T6322] loop2: detected capacity change from 0 to 164
[   99.791722][ T6322] Unable to read rock-ridge attributes
[  100.053584][ T6334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.829'.
[  100.069795][ T4311] Bluetooth: hci1: command 0x0406 tx timeout
[  100.205430][ T6300] loop0: detected capacity change from 0 to 40427
[  100.209864][ T6336] device ipip0 entered promiscuous mode
[  100.337245][ T6300] F2FS-fs (loop0): invalid crc value
[  100.506626][ T6300] F2FS-fs (loop0): Found nat_bits in checkpoint
[  100.629249][ T6300] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  101.044556][ T6358] overlayfs: missing 'lowerdir'
[  101.122203][ T6355] loop4: detected capacity change from 0 to 4096
[  101.175940][ T6355] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  101.311524][ T6367] loop2: detected capacity change from 0 to 64
[  101.542266][ T6371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.847'.
[  101.759571][ T6355] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  102.099147][ T6385] loop2: detected capacity change from 0 to 128
[  102.126388][ T6383] device ipip0 entered promiscuous mode
[  102.167885][ T6385] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  102.255718][ T6385] EXT4-fs (loop2): re-mounted. Quota mode: none.
[  102.320267][ T4307] EXT4-fs (loop2): unmounting filesystem.
[  102.477640][    C0] net_ratelimit: 9614 callbacks suppressed
[  102.477656][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[  102.482766][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.486327][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.491473][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[  102.495062][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.498480][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.503506][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[  102.506230][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:01:72:1c:23:64, vlan:0)
[  102.506839][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  102.510366][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[  102.898987][ T4295] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  102.994045][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.859'.
[  103.463386][ T6415] loop1: detected capacity change from 0 to 1764
[  103.576377][ T6422] x_tables: duplicate underflow at hook 3
[  103.783083][ T6397] loop2: detected capacity change from 0 to 40427
[  103.920108][ T6397] F2FS-fs (loop2): invalid crc value
[  104.000479][ T6427] loop3: detected capacity change from 0 to 8192
[  104.019965][ T6397] F2FS-fs (loop2): Found nat_bits in checkpoint
[  104.130486][ T6397] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  104.440643][ T6421] loop4: detected capacity change from 0 to 32768
[  104.501857][ T6421] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.870 (6421)
[  104.581500][ T6421] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  104.612814][ T6421] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  104.615559][ T6421] BTRFS info (device loop4): force zlib compression, level 3
[  104.617513][ T6421] BTRFS info (device loop4): force clearing of disk cache
[  104.619297][ T6421] BTRFS info (device loop4): setting nodatasum
[  104.620859][ T6421] BTRFS info (device loop4): use zlib compression, level 3
[  104.653731][ T6421] BTRFS info (device loop4): allowing degraded mounts
[  104.655516][ T6421] BTRFS info (device loop4): enabling disk space caching
[  104.678136][ T6421] BTRFS info (device loop4): disk space caching is enabled
[  105.081557][ T6421] BTRFS info (device loop4): enabling ssd optimizations
[  105.126917][ T6421] BTRFS info (device loop4): rebuilding free space tree
[  105.165669][ T6427] Dev loop3: RDB in block 1 has bad checksum
[  105.167827][ T6427] Dev loop3: unable to read RDB block 8
[  105.169457][ T6427]  loop3: unable to read partition table
[  105.171010][ T6427] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[  105.189424][ T6421] BTRFS info (device loop4): disabling free space tree
[  105.191347][ T6421] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  105.201647][ T6421] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  105.226001][ T3913] Dev loop3: RDB in block 1 has bad checksum
[  105.477243][ T4295] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  105.738208][ T6470] loop4: detected capacity change from 0 to 1764
[  105.971000][ T6463] loop1: detected capacity change from 0 to 32768
[  105.990063][ T6463] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  105.999817][ T6463] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  106.135490][ T4440] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  106.156653][ T6467] loop0: detected capacity change from 0 to 32768
[  106.201772][ T6467] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[  106.203729][ T6467] CPU: 0 PID: 6467 Comm: syz.0.881 Not tainted 6.1.134-syzkaller #0
[  106.205804][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  106.208499][ T6467] Call trace:
[  106.209327][ T6467]  dump_backtrace+0x1c8/0x1f4
[  106.210628][ T6467]  show_stack+0x2c/0x3c
[  106.211714][ T6467]  dump_stack_lvl+0x108/0x170
[  106.212987][ T6467]  dump_stack+0x1c/0x5c
[  106.214087][ T6467]  sysfs_create_dir_ns+0x278/0x318
[  106.215489][ T6467]  kobject_add_internal+0x598/0xb14
[  106.216987][ T6467]  kobject_init_and_add+0x130/0x1a0
[  106.218391][ T6467]  gfs2_sys_fs_add+0x1f8/0x3f4
[  106.219697][ T6467]  gfs2_fill_super+0xe18/0x1fdc
[  106.221050][ T6467]  get_tree_bdev+0x360/0x54c
[  106.222331][ T6467]  gfs2_get_tree+0x54/0x1b4
[  106.223554][ T6467]  vfs_get_tree+0x90/0x274
[  106.224791][ T6467]  do_new_mount+0x278/0x8fc
[  106.226040][ T6467]  path_mount+0x590/0xe5c
[  106.227227][ T6467]  __arm64_sys_mount+0x498/0x588
[  106.228651][ T6467]  invoke_syscall+0x98/0x2bc
[  106.229961][ T6467]  el0_svc_common+0x138/0x258
[  106.231248][ T6467]  do_el0_svc+0x58/0x13c
[  106.232400][ T6467]  el0_svc+0x58/0x168
[  106.233493][ T6467]  el0t_64_sync_handler+0x84/0xf0
[  106.234876][ T6467]  el0t_64_sync+0x18c/0x190
[  106.279573][ T6463] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  106.350354][ T5084] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  106.351711][ T6467] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[  106.352279][ T5084] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  106.355549][ T6467] gfs2: fsid=syz:syz: error -17 adding sysfs files
[  106.451736][ T5084] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 99ms
[  106.453806][ T5084] gfs2: fsid=syz:syz.0: jid=0: Done
[  106.455227][ T6463] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  107.286908][ T6490] loop0: detected capacity change from 0 to 256
[  107.338026][ T6480] loop3: detected capacity change from 0 to 32768
[  107.481944][    C1] net_ratelimit: 10068 callbacks suppressed
[  107.481962][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.486234][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[  107.486976][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[  107.490171][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.493305][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[  107.496466][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.499397][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  107.504015][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[  107.505563][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.508636][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  107.528041][ T6480] (syz.3.888,6480,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  107.591674][ T6480] (syz.3.888,6480,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  107.725637][ T6501] loop0: detected capacity change from 0 to 1764
[  107.892764][ T6488] loop1: detected capacity change from 0 to 40427
[  107.907403][ T6501] iso9660: Corrupted directory entry in block 2 of inode 1920
[  108.038763][ T4311] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  108.041185][ T4311] Bluetooth: hci3: Injecting HCI hardware error event
[  108.048849][ T6488] F2FS-fs (loop1): invalid crc value
[  108.048952][ T4304] Bluetooth: hci3: hardware error 0x00
[  108.160334][ T6480] JBD2: Ignoring recovery information on journal
[  108.215348][ T6488] F2FS-fs (loop1): Found nat_bits in checkpoint
[  108.359911][ T6488] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  108.421035][ T6480] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  108.513815][ T6515] loop4: detected capacity change from 0 to 4096
[  108.740497][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.905'.
[  109.207529][ T4302] ocfs2: Unmounting device (7,3) on (node local)
[  109.386818][ T6531] loop1: detected capacity change from 0 to 8192
[  110.433329][ T4304] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  110.462002][ T6542] loop4: detected capacity change from 0 to 32768
[  110.542118][ T6542] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  110.544297][ T6542] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  110.719964][ T6542] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms
[  110.752760][ T5083] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  110.754696][ T5083] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  110.849490][ T5083] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 94ms
[  110.853019][ T5083] gfs2: fsid=syz:syz.0: jid=0: Done
[  110.854785][ T6542] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  110.899868][ T6542] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  110.899868][ T6542]   inode = 0 2341
[  110.899868][ T6542]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[  110.904890][ T6542] gfs2: fsid=syz:syz.0: G:  s:SH n:2/925 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  110.907454][ T6542] gfs2: fsid=syz:syz.0:  H: s:SH f:AH e:0 p:6542 [syz.4.913] inode_permission+0x1d0/0x3b4
[  110.910380][ T6542] gfs2: fsid=syz:syz.0:  I: n:0/2341 t:4 f:0x00 d:0x00000201 s:0 p:0
[  110.912604][ T6542] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  110.914639][ T6542] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  110.916895][ T6542] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  110.918704][ T6542] gfs2: fsid=syz:syz.0: File system withdrawn
[  110.920269][ T6542] CPU: 0 PID: 6542 Comm: syz.4.913 Not tainted 6.1.134-syzkaller #0
[  110.922392][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  110.925063][ T6542] Call trace:
[  110.925925][ T6542]  dump_backtrace+0x1c8/0x1f4
[  110.927175][ T6542]  show_stack+0x2c/0x3c
[  110.928300][ T6542]  dump_stack_lvl+0x108/0x170
[  110.929597][ T6542]  dump_stack+0x1c/0x5c
[  110.930722][ T6542]  gfs2_withdraw+0xdcc/0x140c
[  110.931941][ T6542]  gfs2_consist_inode_i+0xf0/0x10c
[  110.933327][ T6542]  gfs2_inode_refresh+0x964/0xd9c
[  110.934706][ T6542]  inode_go_instantiate+0x4c/0x68
[  110.936046][ T6542]  gfs2_instantiate+0x17c/0x2c8
[  110.937380][ T6542]  gfs2_glock_wait+0x1b8/0x298
[  110.938640][ T6542]  gfs2_glock_nq+0xa90/0x11d8
[  110.939901][ T6542]  gfs2_permission+0x280/0x46c
[  110.941197][ T6542]  inode_permission+0x1d0/0x3b4
[  110.942494][ T6542]  may_open+0x290/0x3bc
[  110.943567][ T6542]  path_openat+0x1cec/0x2548
[  110.944817][ T6542]  do_filp_open+0x1bc/0x3cc
[  110.946032][ T6542]  do_sys_openat2+0x128/0x3e0
[  110.947326][ T6542]  __arm64_sys_openat+0x1f0/0x240
[  110.948648][ T6542]  invoke_syscall+0x98/0x2bc
[  110.949888][ T6542]  el0_svc_common+0x138/0x258
[  110.951320][ T6542]  do_el0_svc+0x58/0x13c
[  110.952451][ T6542]  el0_svc+0x58/0x168
[  110.953513][ T6542]  el0t_64_sync_handler+0x84/0xf0
[  110.954844][ T6542]  el0t_64_sync+0x18c/0x190
[  111.457726][ T6531] Dev loop1: RDB in block 1 has bad checksum
[  111.459595][ T6531] Dev loop1: unable to read RDB block 8
[  111.461200][ T6531]  loop1: unable to read partition table
[  111.467934][ T6531] loop_reread_partitions: partition scan of loop1 () failed (rc=-5)
[  111.495742][ T3913] Dev loop1: RDB in block 1 has bad checksum
[  111.517608][ T6550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.918'.
[  111.907119][ T6566] sctp: [Deprecated]: syz.1.928 (pid 6566) Use of int in max_burst socket option deprecated.
[  111.907119][ T6566] Use struct sctp_assoc_value instead
[  112.026700][ T6574] netlink: 116 bytes leftover after parsing attributes in process `syz.3.929'.
[  112.424980][ T6580] loop2: detected capacity change from 0 to 4096
[  112.439437][ T6580] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  112.453851][ T6584] loop3: detected capacity change from 0 to 4096
[  112.508245][    C1] net_ratelimit: 13012 callbacks suppressed
[  112.508262][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  112.513319][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.517649][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:01:72:1c:23:64, vlan:0)
[  112.518563][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.521722][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[  112.525701][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.527567][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.530688][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  112.533772][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  112.537272][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[  113.254767][ T6578] loop1: detected capacity change from 0 to 32768
[  113.316919][ T6578] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  113.319259][ T6578] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  113.411851][ T6584] ntfs: volume version 3.1.
[  113.484805][ T6578] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms
[  113.487224][ T6580] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  113.549559][ T5084] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  113.552131][ T5084] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  113.584402][ T4304] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  113.586878][ T4304] Bluetooth: hci1: Injecting HCI hardware error event
[  113.590025][ T4311] Bluetooth: hci1: hardware error 0x00
[  113.656986][ T5084] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 104ms
[  113.683369][ T5084] gfs2: fsid=syz:syz.0: jid=0: Done
[  113.684874][ T6578] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  113.731513][ T6584] ntfs: (device loop3): ntfs_nlstoucs(): Name using character set cp936 contains characters that cannot be converted to Unicode.
[  113.746832][ T6599] loop4: detected capacity change from 0 to 32768
[  113.753319][ T6584] ntfs: (device loop3): ntfs_lookup(): Failed to convert name to Unicode.
[  113.818411][ T6578] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  113.818411][ T6578]   inode = 0 2341
[  113.818411][ T6578]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[  113.824228][ T6578] gfs2: fsid=syz:syz.0: G:  s:SH n:2/925 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  113.826656][ T6578] gfs2: fsid=syz:syz.0:  H: s:SH f:AH e:0 p:6578 [syz.1.932] inode_permission+0x1d0/0x3b4
[  113.829309][ T6578] gfs2: fsid=syz:syz.0:  I: n:0/2341 t:4 f:0x00 d:0x00000201 s:0 p:0
[  113.831315][ T6578] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  113.874916][ T6578] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  113.877324][ T6578] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  113.879122][ T6578] gfs2: fsid=syz:syz.0: File system withdrawn
[  113.893901][ T6578] CPU: 0 PID: 6578 Comm: syz.1.932 Not tainted 6.1.134-syzkaller #0
[  113.896185][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  113.898900][ T6578] Call trace:
[  113.899751][ T6578]  dump_backtrace+0x1c8/0x1f4
[  113.900993][ T6578]  show_stack+0x2c/0x3c
[  113.902112][ T6578]  dump_stack_lvl+0x108/0x170
[  113.903350][ T6578]  dump_stack+0x1c/0x5c
[  113.904482][ T6578]  gfs2_withdraw+0xdcc/0x140c
[  113.905764][ T6578]  gfs2_consist_inode_i+0xf0/0x10c
[  113.907219][ T6578]  gfs2_inode_refresh+0x964/0xd9c
[  113.908642][ T6578]  inode_go_instantiate+0x4c/0x68
[  113.910042][ T6578]  gfs2_instantiate+0x17c/0x2c8
[  113.911380][ T6578]  gfs2_glock_wait+0x1b8/0x298
[  113.912682][ T6578]  gfs2_glock_nq+0xa90/0x11d8
[  113.913912][ T6578]  gfs2_permission+0x280/0x46c
[  113.915200][ T6578]  inode_permission+0x1d0/0x3b4
[  113.916495][ T6578]  may_open+0x290/0x3bc
[  113.917574][ T6578]  path_openat+0x1cec/0x2548
[  113.918786][ T6578]  do_filp_open+0x1bc/0x3cc
[  113.919954][ T6578]  do_sys_openat2+0x128/0x3e0
[  113.921213][ T6578]  __arm64_sys_openat+0x1f0/0x240
[  113.922593][ T6578]  invoke_syscall+0x98/0x2bc
[  113.923828][ T6578]  el0_svc_common+0x138/0x258
[  113.925109][ T6578]  do_el0_svc+0x58/0x13c
[  113.926260][ T6578]  el0_svc+0x58/0x168
[  113.927323][ T6578]  el0t_64_sync_handler+0x84/0xf0
[  113.928698][ T6578]  el0t_64_sync+0x18c/0x190
[  114.092721][ T6614] No such timeout policy "syz0"
[  114.279599][ T6599] ERROR: (device loop4): dtSearch: stack overrun!
[  114.279599][ T6599] 
[  114.326911][ T6599] ERROR: (device loop4): remounting filesystem as read-only
[  114.329032][ T6599] btstack dump:
[  114.330036][ T6599] bn = 0, index = 0
[  114.331033][ T6599] bn = 0, index = 0
[  114.332392][ T6599] bn = 0, index = 0
[  114.333382][ T6599] bn = 0, index = 0
[  114.345065][ T6599] bn = 0, index = 0
[  114.346287][ T6599] bn = 0, index = 0
[  114.347257][ T6599] bn = 0, index = 0
[  114.383976][ T6599] bn = 0, index = 0
[  114.387209][ T6599] jfs_lookup: dtSearch returned -5
[  115.168977][ T6646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.962'.
[  115.607879][ T6622] loop3: detected capacity change from 0 to 32768
[  115.633277][ T6622] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  115.635454][ T6622] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  115.792662][ T6622] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 2ms
[  115.829820][ T5241] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  115.831658][ T5241] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  115.910883][ T5241] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 79ms
[  115.915200][ T5241] gfs2: fsid=syz:syz.0: jid=0: Done
[  115.916629][ T6622] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  116.222584][ T4311] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  117.304394][ T6660] netlink: 'syz.3.969': attribute type 8 has an invalid length.
[  117.511819][    C0] net_ratelimit: 15424 callbacks suppressed
[  117.511836][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.511880][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:01:72:1c:23:64, vlan:0)
[  117.519986][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[  117.523481][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.526780][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  117.537570][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.541334][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[  117.544839][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.548314][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  117.551760][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  117.717598][ T6679] loop0: detected capacity change from 0 to 16
[  117.719848][ T6679] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  117.740625][ T6680] loop3: detected capacity change from 0 to 1024
[  117.775173][ T6679] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 9000000, please upgrade kernel version
[  117.797628][ T6680] EXT4-fs: Ignoring removed nobh option
[  117.799304][ T6680] EXT4-fs: Ignoring removed bh option
[  117.861661][ T6680] EXT4-fs: Mount option(s) incompatible with ext3
[  118.035214][ T6685] netlink: 911 bytes leftover after parsing attributes in process `syz.4.983'.
[  118.203470][ T6689] loop1: detected capacity change from 0 to 64
[  118.437855][ T6665] loop2: detected capacity change from 0 to 32768
[  118.453803][ T6665] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  118.456013][ T6665] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  118.456493][ T4289] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  118.665854][ T6665] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms
[  118.696569][ T5260] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  118.698523][ T5260] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  118.775870][ T5260] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 77ms
[  118.781927][ T5260] gfs2: fsid=syz:syz.0: jid=0: Done
[  118.783368][ T6665] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  118.889889][ T6665] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  118.889889][ T6665]   inode = 0 2341
[  118.889889][ T6665]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[  118.895067][ T6665] gfs2: fsid=syz:syz.0: G:  s:SH n:2/925 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  118.897448][ T6665] gfs2: fsid=syz:syz.0:  H: s:SH f:AH e:0 p:6665 [syz.2.966] inode_permission+0x1d0/0x3b4
[  118.910131][ T6665] gfs2: fsid=syz:syz.0:  I: n:0/2341 t:4 f:0x00 d:0x00000201 s:0 p:0
[  118.940744][ T6665] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  118.943035][ T6665] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  118.945629][ T6665] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  118.946580][ T6680] loop3: detected capacity change from 0 to 40427
[  118.947948][ T6665] gfs2: fsid=syz:syz.0: File system withdrawn
[  118.950628][ T6665] CPU: 1 PID: 6665 Comm: syz.2.966 Not tainted 6.1.134-syzkaller #0
[  118.952930][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  118.955584][ T6665] Call trace:
[  118.956461][ T6665]  dump_backtrace+0x1c8/0x1f4
[  118.957718][ T6665]  show_stack+0x2c/0x3c
[  118.958826][ T6665]  dump_stack_lvl+0x108/0x170
[  118.960105][ T6665]  dump_stack+0x1c/0x5c
[  118.961242][ T6665]  gfs2_withdraw+0xdcc/0x140c
[  118.962499][ T6665]  gfs2_consist_inode_i+0xf0/0x10c
[  118.963841][ T6665]  gfs2_inode_refresh+0x964/0xd9c
[  118.965225][ T6665]  inode_go_instantiate+0x4c/0x68
[  118.966621][ T6665]  gfs2_instantiate+0x17c/0x2c8
[  118.967930][ T6665]  gfs2_glock_wait+0x1b8/0x298
[  118.969193][ T6665]  gfs2_glock_nq+0xa90/0x11d8
[  118.970558][ T6665]  gfs2_permission+0x280/0x46c
[  118.971843][ T6665]  inode_permission+0x1d0/0x3b4
[  118.973200][ T6665]  may_open+0x290/0x3bc
[  118.974431][ T6665]  path_openat+0x1cec/0x2548
[  118.975725][ T6665]  do_filp_open+0x1bc/0x3cc
[  118.976970][ T6665]  do_sys_openat2+0x128/0x3e0
[  118.978257][ T6665]  __arm64_sys_openat+0x1f0/0x240
[  118.979634][ T6665]  invoke_syscall+0x98/0x2bc
[  118.980849][ T6665]  el0_svc_common+0x138/0x258
[  118.982054][ T6665]  do_el0_svc+0x58/0x13c
[  118.982408][ T6680] F2FS-fs (loop3): Unrecognized mount option "nobh" or missing value
[  118.983168][ T6665]  el0_svc+0x58/0x168
[  118.986257][ T6665]  el0t_64_sync_handler+0x84/0xf0
[  118.987556][ T6665]  el0t_64_sync+0x18c/0x190
[  119.194651][ T6703] loop0: detected capacity change from 0 to 4096
[  119.776898][ T6717] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1009'.
[  119.781284][ T6699] loop1: detected capacity change from 0 to 32768
[  119.871844][ T4289] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  120.020538][ T6699] ERROR: (device loop1): dtSearch: stack overrun!
[  120.020538][ T6699] 
[  120.034280][ T6699] ERROR: (device loop1): remounting filesystem as read-only
[  120.041629][ T6699] btstack dump:
[  120.042993][ T6699] bn = 0, index = 0
[  120.043975][ T6699] bn = 0, index = 0
[  120.055221][ T6699] bn = 0, index = 0
[  120.056233][ T6699] bn = 0, index = 0
[  120.057190][ T6699] bn = 0, index = 0
[  120.058170][ T6699] bn = 0, index = 0
[  120.059131][ T6699] bn = 0, index = 0
[  120.060133][ T6699] bn = 0, index = 0
[  120.061129][ T6699] jfs_lookup: dtSearch returned -5
[  120.109368][ T6703] ntfs: volume version 3.1.
[  120.438917][ T6703] ntfs: (device loop0): ntfs_nlstoucs(): Name using character set cp936 contains characters that cannot be converted to Unicode.
[  120.451990][ T6703] ntfs: (device loop0): ntfs_lookup(): Failed to convert name to Unicode.
[  120.491939][ T6728] netlink: 'syz.2.1004': attribute type 1 has an invalid length.
[  120.501688][ T6728] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1004'.
[  120.832601][ T6745] sctp: [Deprecated]: syz.3.1007 (pid 6745) Use of int in max_burst socket option deprecated.
[  120.832601][ T6745] Use struct sctp_assoc_value instead
[  121.114603][ T6756] loop0: detected capacity change from 0 to 1024
[  121.116727][ T6756] EXT4-fs: Ignoring removed nobh option
[  121.118146][ T6756] EXT4-fs: Ignoring removed bh option
[  121.187104][ T6756] EXT4-fs: Mount option(s) incompatible with ext3
[  121.637337][ T6770] loop3: detected capacity change from 0 to 512
[  121.844792][ T6770] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  121.846952][ T6770] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002]
[  121.852859][ T6770] System zones: 0-1, 15-15, 18-18, 34-34
[  121.855403][ T6770] EXT4-fs (loop3): orphan cleanup on readonly fs
[  121.857297][ T6770] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  121.859818][ T6770] EXT4-fs warning (device loop3): ext4_enable_quotas:7037: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  121.871647][ T6770] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  121.896525][ T6770] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1034: bad orphan inode 16
[  121.903707][ T4440] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  121.917315][ T6770] EXT4-fs (loop3): Remounting filesystem read-only
[  121.919206][ T6770] ext4_test_bit(bit=15, block=18) = 1
[  121.920615][ T6770] is_bad_inode(inode)=0
[  121.922305][ T6770] NEXT_ORPHAN(inode)=0
[  121.923474][ T6770] max_ino=32
[  121.924407][ T6770] i_nlink=2
[  121.929829][ T6770] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  122.038346][ T6770] fscrypt (loop3, inode 16): Error -61 getting encryption context
[  122.112633][ T4302] EXT4-fs (loop3): unmounting filesystem.
[  122.177342][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1026'.
[  122.437177][ T6782] loop4: detected capacity change from 0 to 1024
[  122.460208][ T6782] hfsplus: Filesystem is marked locked, mounting read-only.
[  122.527139][    C0] net_ratelimit: 12994 callbacks suppressed
[  122.527155][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.532354][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.535982][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[  122.537517][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.539407][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.542629][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  122.545645][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  122.548876][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.551877][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.554857][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  122.573583][ T6782] hfsplus: filesystem is marked locked, leaving read-only.
[  122.818974][ T6793] netlink: 'syz.3.1032': attribute type 3 has an invalid length.
[  123.005385][ T6756] loop0: detected capacity change from 0 to 40427
[  123.008053][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1035'.
[  123.078369][ T6756] F2FS-fs (loop0): Unrecognized mount option "nobh" or missing value
[  123.180959][ T6801] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1039'.
[  123.211248][ T6803] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1037'.
[  123.383736][ T6786] loop2: detected capacity change from 0 to 32768
[  123.419393][ T6809] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1043'.
[  123.580855][ T6814] loop3: detected capacity change from 0 to 512
[  123.615991][ T6814] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  123.618362][ T6814] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  123.771900][ T6786] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  123.924518][ T6814] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #16: comm syz.3.1046: iget: bogus i_mode (5)
[  123.981928][ T6814] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1046: couldn't read orphan inode 16 (err -117)
[  124.088970][ T6814] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  124.098917][ T6798] loop4: detected capacity change from 0 to 32768
[  124.127218][ T6834] netlink: 'syz.0.1063': attribute type 1 has an invalid length.
[  124.147706][ T6833] loop1: detected capacity change from 0 to 1024
[  124.149942][ T6833] EXT4-fs: Ignoring removed nobh option
[  124.167834][ T6814] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  124.172503][ T6798] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  124.174674][ T6798] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  124.177424][ T6833] EXT4-fs: Ignoring removed bh option
[  124.180209][ T6814] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  124.190290][ T6814] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1046: Failed to acquire dquot type 0
[  124.195566][ T6786] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  124.202321][ T6833] EXT4-fs: Mount option(s) incompatible with ext3
[  124.304509][ T6798] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms
[  124.361157][ T5257] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  124.363192][ T5257] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  124.396148][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.398263][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.400144][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.404595][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.406580][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.417666][ T4302] EXT4-fs (loop3): unmounting filesystem.
[  124.420459][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.422802][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.424833][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.426752][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.428756][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.438988][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.441249][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.459191][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.461907][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.463883][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.465782][ T5086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  124.476342][ T5257] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 113ms
[  124.478928][ T5086] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  124.478959][ T5257] gfs2: fsid=syz:syz.0: jid=0: Done
[  124.491221][ T6798] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  124.597912][ T6798] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  124.597912][ T6798]   inode = 0 2341
[  124.597912][ T6798]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[  124.602793][ T6798] gfs2: fsid=syz:syz.0: G:  s:SH n:2/925 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  124.605089][ T6798] gfs2: fsid=syz:syz.0:  H: s:SH f:AH e:0 p:6798 [syz.4.1036] inode_permission+0x1d0/0x3b4
[  124.607619][ T6798] gfs2: fsid=syz:syz.0:  I: n:0/2341 t:4 f:0x00 d:0x00000000 s:0 p:0
[  124.609713][ T6798] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  124.611542][ T6798] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  124.636733][ T6798] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  124.638648][ T6798] gfs2: fsid=syz:syz.0: File system withdrawn
[  124.640200][ T6798] CPU: 1 PID: 6798 Comm: syz.4.1036 Not tainted 6.1.134-syzkaller #0
[  124.642255][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  124.644890][ T6798] Call trace:
[  124.645734][ T6798]  dump_backtrace+0x1c8/0x1f4
[  124.646969][ T6798]  show_stack+0x2c/0x3c
[  124.648156][ T6798]  dump_stack_lvl+0x108/0x170
[  124.649397][ T6798]  dump_stack+0x1c/0x5c
[  124.650518][ T6798]  gfs2_withdraw+0xdcc/0x140c
[  124.651764][ T6798]  gfs2_consist_inode_i+0xf0/0x10c
[  124.653175][ T6798]  gfs2_inode_refresh+0x964/0xd9c
[  124.654519][ T6798]  inode_go_instantiate+0x4c/0x68
[  124.655853][ T6798]  gfs2_instantiate+0x17c/0x2c8
[  124.657106][ T6798]  gfs2_glock_wait+0x1b8/0x298
[  124.658330][ T6798]  gfs2_glock_nq+0xa90/0x11d8
[  124.659538][ T6798]  gfs2_permission+0x280/0x46c
[  124.660813][ T6798]  inode_permission+0x1d0/0x3b4
[  124.662104][ T6798]  may_open+0x290/0x3bc
[  124.663244][ T6798]  path_openat+0x1cec/0x2548
[  124.664447][ T6798]  do_filp_open+0x1bc/0x3cc
[  124.665630][ T6798]  do_sys_openat2+0x128/0x3e0
[  124.666893][ T6798]  __arm64_sys_openat+0x1f0/0x240
[  124.668242][ T6798]  invoke_syscall+0x98/0x2bc
[  124.669446][ T6798]  el0_svc_common+0x138/0x258
[  124.670664][ T6798]  do_el0_svc+0x58/0x13c
[  124.671788][ T6798]  el0_svc+0x58/0x168
[  124.672839][ T6798]  el0t_64_sync_handler+0x84/0xf0
[  124.674187][ T6798]  el0t_64_sync+0x18c/0x190
[  124.977180][ T4307] ocfs2: Unmounting device (7,2) on (node local)
[  125.518462][ T6839] loop3: detected capacity change from 0 to 32768
[  125.526106][ T6839] XFS: ikeep mount option is deprecated.
[  125.643821][ T6839] XFS (loop3): Mounting V5 Filesystem
[  125.947604][ T2061] ieee802154 phy0 wpan0: encryption failed: -22
[  125.949507][ T2061] ieee802154 phy1 wpan1: encryption failed: -22
[  126.055029][ T4442] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  126.454382][ T6839] XFS (loop3): Ending clean mount
[  126.541257][ T6839] XFS (loop3): Quotacheck needed: Please wait.
[  126.713836][ T6833] loop1: detected capacity change from 0 to 40427
[  126.768623][ T6839] XFS (loop3): Quotacheck: Done.
[  126.768638][ T6833] F2FS-fs (loop1): Unrecognized mount option "nobh" or missing value
[  127.054674][ T4302] XFS (loop3): Unmounting Filesystem
[  127.140155][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'.
[  127.145281][ T6874] netlink: 'syz.4.1069': attribute type 1 has an invalid length.
[  127.531743][    C0] net_ratelimit: 12043 callbacks suppressed
[  127.531761][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.537134][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[  127.540496][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.541835][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:01:72:1c:23:64, vlan:0)
[  127.544024][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  127.547471][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[  127.550197][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.553215][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.557502][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  127.559365][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  127.899461][ T6872] loop1: detected capacity change from 0 to 32768
[  128.212722][ T6872] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  128.382899][ T6903] loop0: detected capacity change from 0 to 256
[  128.527953][ T6909] loop4: detected capacity change from 0 to 512
[  128.577216][ T6872] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  128.775918][ T6909] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  128.778042][ T6909] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002]
[  128.780152][ T6909] System zones: 0-1, 15-15, 18-18, 34-34
[  128.793182][ T6909] EXT4-fs (loop4): orphan cleanup on readonly fs
[  128.798734][ T6909] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  128.807211][ T6909] EXT4-fs warning (device loop4): ext4_enable_quotas:7037: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  128.840407][ T6909] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  128.868512][ T6909] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1085: bad orphan inode 16
[  128.893701][ T6909] EXT4-fs (loop4): Remounting filesystem read-only
[  128.895626][ T6909] ext4_test_bit(bit=15, block=18) = 1
[  128.897030][ T6909] is_bad_inode(inode)=0
[  128.898086][ T6909] NEXT_ORPHAN(inode)=0
[  128.899146][ T6909] max_ino=32
[  128.899931][ T6909] i_nlink=2
[  128.900727][ T6909] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  128.958072][ T6909] fscrypt (loop4, inode 16): Error -61 getting encryption context
[  128.991040][ T4295] EXT4-fs (loop4): unmounting filesystem.
[  129.157899][ T4296] ocfs2: Unmounting device (7,1) on (node local)
[  129.290322][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'.
[  129.445914][ T6929] loop4: detected capacity change from 0 to 64
[  129.763207][ T6937] dlm: no local IP address has been set
[  129.764684][ T6937] dlm: cannot start dlm midcomms -107
[  129.871056][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'.
[  130.333640][ T6942] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1110'.
[  130.894835][ T6952] loop3: detected capacity change from 0 to 256
[  130.960840][ T6952] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  130.963654][ T6952] FAT-fs (loop3): bogus number of directory entries (1)
[  130.965606][ T6952] FAT-fs (loop3): Can't find a valid FAT filesystem
[  131.293135][ T6966] netlink: 'syz.4.1106': attribute type 3 has an invalid length.
[  131.439072][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1109'.
[  131.544640][ T6971] loop3: detected capacity change from 0 to 1024
[  131.830452][ T6971] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  131.940672][ T4302] EXT4-fs (loop3): unmounting filesystem.
[  132.050066][ T6982] loop3: detected capacity change from 0 to 256
[  132.541646][    C0] net_ratelimit: 13841 callbacks suppressed
[  132.541664][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[  132.542227][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:01:72:1c:23:64, vlan:0)
[  132.543538][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.547108][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[  132.549677][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  132.552967][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.556128][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.558999][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  132.563395][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.565380][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  132.751975][ T6982] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  132.977041][ T6982] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008)
[  132.979508][ T6982] exFAT-fs (loop3): Filesystem has been set read-only
[  134.079012][ T7037] loop4: detected capacity change from 0 to 64
[  134.126705][ T7039] device bond1 entered promiscuous mode
[  134.128365][ T7039] 8021q: adding VLAN 0 to HW filter on device bond1
[  134.653221][ T7058] loop1: detected capacity change from 0 to 1764
[  134.893846][ T7058] iso9660: Corrupted directory entry in block 2 of inode 1920
[  135.223317][ T7076] loop4: detected capacity change from 0 to 512
[  135.257375][ T7078] ieee802154 phy0 wpan0: encryption failed: -22
[  135.671391][ T7076] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  135.877214][ T4295] EXT4-fs (loop4): unmounting filesystem.
[  136.339073][ T7102] loop1: detected capacity change from 0 to 4096
[  136.378918][ T7102] EXT4-fs: Invalid journal IO priority (must be 0-7)
[  136.714019][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'.
[  136.822987][ T7118] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1177'.
[  137.217832][ T7132] loop2: detected capacity change from 0 to 2048
[  137.345129][ T7136] device bond1 entered promiscuous mode
[  137.346919][ T7136] 8021q: adding VLAN 0 to HW filter on device bond1
[  137.534737][ T7139] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  137.552844][    C1] net_ratelimit: 11073 callbacks suppressed
[  137.552861][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:01:72:1c:23:64, vlan:0)
[  137.558048][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[  137.561356][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.561879][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.564765][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  137.567850][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  137.570823][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.573999][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.576804][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.580944][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  137.879051][ T7132] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5
[  137.932412][ T7150] loop4: detected capacity change from 0 to 1764
[  138.007019][ T7132] Remounting filesystem read-only
[  138.070729][ T7123] loop1: detected capacity change from 0 to 32768
[  138.142196][ T7123] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1179 (7123)
[  138.172495][ T7150] iso9660: Corrupted directory entry in block 2 of inode 1920
[  138.221813][ T7123] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  138.224651][ T7123] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  138.227013][ T7123] BTRFS info (device loop1): force zlib compression, level 3
[  138.228896][ T7123] BTRFS info (device loop1): force clearing of disk cache
[  138.230703][ T7123] BTRFS info (device loop1): setting nodatasum
[  138.257441][ T7123] BTRFS info (device loop1): allowing degraded mounts
[  138.259279][ T7123] BTRFS info (device loop1): enabling disk space caching
[  138.261064][ T7123] BTRFS info (device loop1): disk space caching is enabled
[  138.707829][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1204'.
[  139.002838][ T7123] BTRFS info (device loop1): rebuilding free space tree
[  139.067348][ T7123] BTRFS info (device loop1): disabling free space tree
[  139.069165][ T7123] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  139.074475][ T7123] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  139.250340][ T7123] BTRFS info (device loop1): balance: start -ssoft,usage=172,vrange=0..18446744073709551615,limit=0,stripes=0..511
[  139.254322][ T7123] BTRFS info (device loop1): balance: ended with status: 0
[  139.460926][ T4296] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  139.472974][ T7183] loop0: detected capacity change from 0 to 32768
[  139.491526][ T7183] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  139.493918][ T7183] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  139.777852][ T7203] loop2: detected capacity change from 0 to 512
[  139.801911][ T7183] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  139.872967][ T5237] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  139.874770][ T5237] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  139.951679][ T5237] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 76ms
[  139.953998][ T5237] gfs2: fsid=syz:syz.0: jid=0: Done
[  139.955461][ T7183] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  140.201996][ T7203] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  140.378649][ T4307] EXT4-fs (loop2): unmounting filesystem.
[  141.625795][ T7237] loop2: detected capacity change from 0 to 32768
[  141.699292][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'.
[  141.805584][ T7245] loop3: detected capacity change from 0 to 32768
[  142.238771][ T7237] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  142.242837][ T7245] ialloc: diAlloc returned -17!
[  142.314977][ T7237] ocfs2: Unmounting device (7,2) on (node local)
[  142.356961][ T7264] loop4: detected capacity change from 0 to 64
[  142.475379][ T7258] loop1: detected capacity change from 0 to 32768
[  142.484996][ T7266] delete_channel: no stack
[  142.561776][    C0] net_ratelimit: 12422 callbacks suppressed
[  142.561806][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  142.566935][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.571415][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.574966][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.578670][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[  142.582077][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.585396][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  142.588031][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.588803][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.591632][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  142.698752][ T7280] dlm: no locking on control device
[  142.731010][ T7258] XFS (loop1): Mounting V5 Filesystem
[  143.009164][ T7292] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1247'.
[  143.012799][ T7293] netlink: 'syz.4.1248': attribute type 16 has an invalid length.
[  143.014989][ T7293] netlink: 'syz.4.1248': attribute type 17 has an invalid length.
[  143.042817][ T7293] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  143.044950][ T7293] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  143.923856][ T7299] loop0: detected capacity change from 0 to 32768
[  144.317415][ T7299] ialloc: diAlloc returned -17!
[  144.493522][ T7313] loop3: detected capacity change from 0 to 4096
[  145.471230][ T7313] ntfs: volume version 3.1.
[  145.591732][ T7313] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  145.594503][ T7313] ntfs: (device loop3): load_and_init_quota(): Failed to find inode number for $Quota.
[  145.596986][ T7313] ntfs: (device loop3): load_system_files(): Failed to load $Quota.  Mounting read-only.  Run chkdsk.
[  145.599727][ T7313] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  145.623418][ T7313] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  145.626123][ T7313] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  145.679028][ T7258] XFS (loop1): Ending clean mount
[  145.753721][ T4296] XFS (loop1): Unmounting Filesystem
[  145.790884][ T7350] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1279'.
[  146.007485][ T7357] device netdevsim0 entered promiscuous mode
[  146.604278][ T7373] loop4: detected capacity change from 0 to 4096
[  146.839247][ T7379] loop3: detected capacity change from 0 to 2048
[  147.042533][ T7379] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.440346][ T7373] ntfs: volume version 3.1.
[  147.450306][ T7395] loop2: detected capacity change from 0 to 256
[  147.452905][ T7395] exfat: Deprecated parameter 'namecase'
[  147.454532][ T7395] exfat: Deprecated parameter 'utf8'
[  147.530453][ T7398] loop3: detected capacity change from 0 to 8
[  147.571839][    C0] net_ratelimit: 14881 callbacks suppressed
[  147.571856][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.576936][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.580365][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.581768][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.583964][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.587812][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:01:72:1c:23:64, vlan:0)
[  147.590453][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.593491][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[  147.599413][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  147.601282][ T7373] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  147.602759][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  147.605215][ T7373] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota.
[  147.610746][ T7373] ntfs: (device loop4): load_system_files(): Failed to load $Quota.  Mounting read-only.  Run chkdsk.
[  147.617272][ T7373] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  147.810699][ T7401] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1303'.
[  147.813272][ T7401] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  147.982045][ T7395] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  148.036485][ T7403] loop4: detected capacity change from 0 to 4096
[  148.252899][ T7411] loop3: detected capacity change from 0 to 256
[  148.284144][ T7411] exfat: Deprecated parameter 'namecase'
[  148.285827][ T7411] exfat: Deprecated parameter 'utf8'
[  148.400750][ T7414] loop0: detected capacity change from 0 to 2048
[  148.422525][ T7415] loop2: detected capacity change from 0 to 2048
[  148.480523][ T7414] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  148.594645][ T7416] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.597369][ T4287] udevd[4287]: incorrect nilfs2 checksum on /dev/loop0
[  148.664689][ T7415] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.690185][ T7411] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  148.753015][ T7414] NILFS (loop0): failed to count free inodes: err=-34
[  149.222553][ T4303] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 8796093022222
[  149.225152][ T4303] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16)
[  149.269612][ T7424] binder: 7423:7424 ioctl c0046209 9999999999999999 returned -22
[  149.315254][ T4303] Remounting filesystem read-only
[  149.316689][ T4303] NILFS (loop0): error -5 truncating bmap (ino=16)
[  149.333791][ T4303] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  149.529167][ T7428] loop2: detected capacity change from 0 to 4096
[  149.669233][ T7436] loop3: detected capacity change from 0 to 256
[  149.890863][ T7440] loop0: detected capacity change from 0 to 1024
[  150.312501][ T7442] loop3: detected capacity change from 0 to 2048
[  150.357069][ T7442] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  150.384095][ T7444] loop0: detected capacity change from 0 to 2048
[  150.418397][ T7428] ntfs: volume version 3.1.
[  150.444633][ T7445] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.549073][ T7442] NILFS (loop3): failed to count free inodes: err=-34
[  150.599867][ T7444] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.857011][ T4302] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 8796093022222
[  150.859551][ T4302] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16)
[  150.877854][ T7449] loop0: detected capacity change from 0 to 64
[  151.049561][ T4302] Remounting filesystem read-only
[  151.050981][ T4302] NILFS (loop3): error -5 truncating bmap (ino=16)
[  151.077186][ T4302] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  152.269074][ T7475] loop2: detected capacity change from 0 to 2048
[  152.328541][ T7475] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  152.348605][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1339'.
[  152.432273][ T7478] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.581811][    C1] net_ratelimit: 16569 callbacks suppressed
[  152.581827][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:01:72:1c:23:64, vlan:0)
[  152.587767][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[  152.589920][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.591268][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.594943][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.597464][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  152.600841][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.604191][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.607476][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[  152.610183][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  152.646019][ T7475] NILFS (loop2): failed to count free inodes: err=-34
[  152.952009][ T4307] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 8796093022222
[  152.954395][ T4307] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16)
[  153.016193][ T4307] Remounting filesystem read-only
[  153.017610][ T4307] NILFS (loop2): error -5 truncating bmap (ino=16)
[  153.030797][ T4307] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  153.396849][ T7496] loop0: detected capacity change from 0 to 4096
[  153.809601][ T7514] process 'syz.3.1360' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  153.831019][ T7516] loop2: detected capacity change from 0 to 64
[  154.850996][ T7542] loop4: detected capacity change from 0 to 1024
[  155.082039][ T7542] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  155.229554][ T4295] EXT4-fs (loop4): unmounting filesystem.
[  156.017052][ T7573] fuse: Invalid rootmode
[  156.134261][ T7577] Cannot find set identified by id 0 to match
[  156.716436][ T4311] ------------[ cut here ]------------
[  156.718592][ T4311] WARNING: CPU: 0 PID: 4311 at net/bluetooth/hci_conn.c:667 hci_conn_timeout+0x208/0x428
[  156.721114][ T4311] Modules linked in:
[  156.722140][ T4311] CPU: 0 PID: 4311 Comm: kworker/u5:7 Not tainted 6.1.134-syzkaller #0
[  156.724306][ T4311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  156.726939][ T4311] Workqueue: hci2 hci_conn_timeout
[  156.728324][ T4311] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  156.730403][ T4311] pc : hci_conn_timeout+0x208/0x428
[  156.731767][ T4311] lr : hci_conn_timeout+0x208/0x428
[  156.733213][ T4311] sp : ffff8000213b7b30
[  156.734324][ T4311] x29: ffff8000213b7b30 x28: ffff0000c4bf4800 x27: ffff0000eea98330
[  156.736451][ T4311] x26: ffff0000c0870818 x25: ffff0000c0870810 x24: dfff800000000000
[  156.738552][ T4311] x23: 1fffe0001acede81 x22: dfff800000000000 x21: 00000000ffffffff
[  156.740620][ T4311] x20: ffff0000eea98000 x19: ffff0000eea98330 x18: ffff8000213b7880
[  156.742748][ T4311] x17: ffff800018c59000 x16: ffff8000084f3ce0 x15: ffff800018739f80
[  156.744863][ T4311] x14: 00000000b9105f70 x13: dfff800000000000 x12: 0000000000000001
[  156.746993][ T4311] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011514600
[  156.749103][ T4311] x8 : ffff0000d9d38000 x7 : 0000000000000000 x6 : 0000000000000000
[  156.751193][ T4311] x5 : ffff800018c7a3a8 x4 : 0000000000000008 x3 : ffff800011514430
[  156.753317][ T4311] x2 : 0000000000000000 x1 : 00000000ffffffff x0 : 0000000000000000
[  156.755486][ T4311] Call trace:
[  156.756341][ T4311]  hci_conn_timeout+0x208/0x428
[  156.757572][ T4311]  process_one_work+0x804/0x1484
[  156.758826][ T4311]  worker_thread+0x8e4/0xfec
[  156.759981][ T4311]  kthread+0x250/0x2d8
[  156.761018][ T4311]  ret_from_fork+0x10/0x20
[  156.762199][ T4311] irq event stamp: 7178
[  156.763319][ T4311] hardirqs last  enabled at (7177): [<ffff80001240f484>] _raw_spin_unlock_irq+0x3c/0x90
[  156.765934][ T4311] hardirqs last disabled at (7178): [<ffff80001232684c>] el1_dbg+0x24/0x80
[  156.768272][ T4311] softirqs last  enabled at (6586): [<ffff8000081c40ac>] handle_softirqs+0xb84/0xd58
[  156.770785][ T4311] softirqs last disabled at (3487): [<ffff800008020174>] __do_softirq+0x14/0x20
[  156.773215][ T4311] ---[ end trace 0000000000000000 ]---
[  156.850113][ T7605] netlink: 'syz.4.1401': attribute type 2 has an invalid length.
[  156.899191][ T7605] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.1401'.
[  157.591658][    C0] net_ratelimit: 14471 callbacks suppressed
[  157.591677][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.592237][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.593651][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.596591][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  157.599961][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[  157.602797][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  157.605779][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.608830][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  157.611910][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  157.615937][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:01:72:1c:23:64, vlan:0)
[  158.828292][ T4301] Bluetooth: hci0: command 0x0406 tx timeout
[  162.602097][    C0] net_ratelimit: 25357 callbacks suppressed
[  162.602116][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ae:a4:70:97:1c:a5, vlan:0)
[  162.602590][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:01:72:1c:23:64, vlan:0)
[  162.603972][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.607466][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:92:a2:a2:63:9e, vlan:0)
[  162.610224][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.613348][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.616384][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.619396][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  162.622612][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  162.625745][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)