last executing test programs:

8.891450706s ago: executing program 3 (id=811):
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, 0x0, 0x20000001)
recvmsg$kcm(r0, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, 0x40011802)

8.597683006s ago: executing program 3 (id=813):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0x0, 0x0, 0x20, 0x572, 0xcb01, 0xbe71, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x3, 0x80, 0x2, "", [{{0x9, 0x4, 0x2c, 0x7, 0x0, 0x5f, 0x90, 0xe3}}]}}]}}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000001940)={0x24, 0x0, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @string={0x4, 0x3, "52f4"}}}, 0x0)

5.028815939s ago: executing program 1 (id=822):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)

4.836739816s ago: executing program 2 (id=824):
r0 = socket$inet(0x2, 0x3, 0x6)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10)

4.653749441s ago: executing program 2 (id=826):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000600), 0x3, 0x79e, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)

4.646820202s ago: executing program 3 (id=827):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b29, &(0x7f0000000000)={'wlan0\x00'})
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080d0}, 0x0)

4.324739912s ago: executing program 2 (id=828):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a00000107241400efffff080581"], 0x0)

3.968018503s ago: executing program 1 (id=829):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x6}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0)

3.835880388s ago: executing program 1 (id=830):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

2.845598531s ago: executing program 1 (id=832):
r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x9e8, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x40, 0x90, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x3}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000001180)={0x14, 0x0, &(0x7f00000010c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)

2.83074628s ago: executing program 0 (id=833):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe2(&(0x7f0000001cc0), 0x800)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

2.722323654s ago: executing program 2 (id=834):
timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x3e)

2.721725724s ago: executing program 0 (id=835):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[], 0x5, 0x1530, &(0x7f0000002f80)="$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")
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
truncate(&(0x7f0000000500)='./file2\x00', 0x800)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0)

2.409734494s ago: executing program 0 (id=836):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x8000000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x1, 0xb000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
close(r1)

2.247818709s ago: executing program 2 (id=837):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)

2.146964472s ago: executing program 0 (id=838):
prlimit64(0x0, 0xe, 0x0, 0x0)
ptrace$getsig(0x4202, 0x0, 0x6, &(0x7f00000000c0))
syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pause()
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1.193564132s ago: executing program 2 (id=839):
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

1.174622813s ago: executing program 3 (id=840):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

1.125895054s ago: executing program 0 (id=841):
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001)
recvmsg$kcm(r0, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, 0x40011802)

1.027984188s ago: executing program 3 (id=842):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')

961.60114ms ago: executing program 0 (id=843):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x101341, 0x69)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0xfffffffc)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x800800})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})

255.563982ms ago: executing program 1 (id=844):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe2(&(0x7f0000001cc0), 0x800)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

220.832753ms ago: executing program 3 (id=845):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b02, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

0s ago: executing program 1 (id=846):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0)

kernel console output (not intermixed with test programs):

's value: 18
[  206.366593][ T5813] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  206.392513][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.710771][ T7024] loop1: detected capacity change from 0 to 32768
[  206.802878][ T7024] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  207.677009][ T5813] usb 1-1: config 0 descriptor??
[  207.695033][ T7024] XFS (loop1): Ending clean mount
[  207.713034][ T7024] XFS (loop1): Quotacheck needed: Please wait.
[  207.811587][ T7024] XFS (loop1): Quotacheck: Done.
[  208.753909][ T5813] usb 1-1: can't set config #0, error -71
[  208.764741][ T5813] usb 1-1: USB disconnect, device number 7
[  208.841415][ T5780] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  208.861251][ T7047] netlink: 52 bytes leftover after parsing attributes in process `syz.3.283'.
[  209.170718][ T5777] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  209.423810][ T5777] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.457870][ T5777] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  209.481208][ T5777] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  209.491515][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.511037][ T5777] usb 3-1: config 0 descriptor??
[  209.533941][ T5777] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  209.877147][ T7060] loop3: detected capacity change from 0 to 32768
[  209.890048][ T7060] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  209.960858][ T7060] XFS (loop3): Ending clean mount
[  210.066381][ T5786] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  210.440937][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'.
[  210.466408][ T7079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.485817][ T7079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.572218][ T7081] loop0: detected capacity change from 0 to 512
[  210.687676][ T7081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.911056][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.644592][ T7104] loop0: detected capacity change from 0 to 131072
[  212.903224][ T7104] F2FS-fs (loop0): inline encryption not supported
[  212.911971][ T7104] F2FS-fs (loop0): Test dummy encryption mode enabled
[  212.948065][ T7104] F2FS-fs (loop0): invalid crc value
[  213.004551][ T7104] F2FS-fs (loop0): Found nat_bits in checkpoint
[  213.049130][    T9] usb 3-1: USB disconnect, device number 12
[  213.101542][ T7104] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  213.167018][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'.
[  213.224645][ T7115] loop3: detected capacity change from 0 to 512
[  213.281780][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  213.288828][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  213.300487][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  213.306920][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  213.377649][ T7115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.627078][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.931978][ T7147] loop0: detected capacity change from 0 to 131072
[  216.118331][ T7147] F2FS-fs (loop0): inline encryption not supported
[  216.128338][ T7147] F2FS-fs (loop0): Test dummy encryption mode enabled
[  216.141384][ T7147] F2FS-fs (loop0): invalid crc value
[  216.265439][ T7147] F2FS-fs (loop0): Found nat_bits in checkpoint
[  216.273416][ T7149] loop3: detected capacity change from 0 to 512
[  216.342832][ T7147] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  216.406545][ T7149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.449073][ T7154] loop2: detected capacity change from 0 to 512
[  216.647424][ T7154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.722707][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.731119][ T7154] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  217.882986][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.887318][ T7185] loop3: detected capacity change from 0 to 512
[  220.714646][ T7190] loop2: detected capacity change from 0 to 131072
[  220.811803][ T7190] F2FS-fs (loop2): inline encryption not supported
[  220.821263][ T7190] F2FS-fs (loop2): Test dummy encryption mode enabled
[  220.838282][ T7190] F2FS-fs (loop2): invalid crc value
[  220.905653][ T7185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.943158][ T7190] F2FS-fs (loop2): Found nat_bits in checkpoint
[  221.011480][ T7190] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  221.134393][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.439594][ T7203] loop3: detected capacity change from 0 to 512
[  221.521649][ T7203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.537827][ T7203] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  222.383186][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.728085][ T7223] loop3: detected capacity change from 0 to 512
[  222.887989][ T7223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.150134][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.266835][ T7199] loop1: detected capacity change from 0 to 32768
[  223.437509][ T7199] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  223.454400][ T5788] Bluetooth: Wrong link type (-71)
[  223.465246][ T7199] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  223.515110][ T7199] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  223.587209][ T7216] loop0: detected capacity change from 0 to 32768
[  223.598051][ T5813] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  223.611408][ T5813] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  223.673883][ T7216] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  223.821271][ T5813] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 209ms
[  223.846416][ T7216] XFS (loop0): Ending clean mount
[  223.846559][ T5813] gfs2: fsid=syz:syz.0: jid=0: Done
[  223.881668][ T7199] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  224.038719][ T5784] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  224.082973][ T7245] loop3: detected capacity change from 0 to 2048
[  224.470899][ T7232] loop2: detected capacity change from 0 to 32768
[  224.507006][ T7232] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.343 (7232)
[  224.615855][ T7232] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  224.693630][ T7232] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  224.782435][ T7232] BTRFS info (device loop2): using free space tree
[  224.901650][ T7199] gfs2: fsid=syz:syz.0: found 1 quota changes
[  225.008356][ T7232] BTRFS info (device loop2): enabling ssd optimizations
[  225.018842][ T7232] BTRFS info (device loop2): auto enabling async discard
[  225.116049][ T7268] loop0: detected capacity change from 0 to 4096
[  225.123945][ T5780] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0
[  225.137119][ T5780] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  225.147494][ T5780] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  225.155077][ T7268] EXT4-fs: Ignoring removed mblk_io_submit option
[  225.158169][ T5780] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  225.179255][ T5780] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  225.251679][ T5776] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  225.255552][ T5780] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  225.310928][ T5780] CPU: 0 PID: 5780 Comm: syz-executor Not tainted syzkaller #0
[  225.319161][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  225.330468][ T5780] Call Trace:
[  225.334336][ T5780]  <TASK>
[  225.337704][ T5780]  dump_stack_lvl+0x18c/0x250
[  225.343738][ T5780]  ? show_regs_print_info+0x20/0x20
[  225.350240][ T5780]  ? load_image+0x420/0x420
[  225.356026][ T5780]  ? do_raw_spin_unlock+0x121/0x230
[  225.362224][ T5780]  gfs2_assert_warn_i+0x193/0x2c0
[  225.368174][ T5780]  gfs2_qd_dispose+0x4aa/0x5b0
[  225.374031][ T5780]  gfs2_quota_cleanup+0x410/0x720
[  225.379352][ T5780]  ? spin_lock_bucket+0x150/0x150
[  225.383186][ T7268] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  225.385230][ T5780]  ? __might_sleep+0xe0/0xe0
[  225.385260][ T5780]  ? down_write+0x16e/0x200
[  225.385278][ T5780]  ? down_read_killable+0x340/0x340
[  225.385296][ T5780]  ? gfs2_quota_sync+0x591/0x5a0
[  225.385321][ T5780]  gfs2_make_fs_ro+0x2aa/0x320
[  225.385345][ T5780]  ? gfs2_dinode_out+0xb10/0xb10
[  225.385363][ T5780]  ? __lock_acquire+0x7d40/0x7d40
[  225.438135][ T5780]  ? __rwlock_init+0x150/0x150
[  225.444302][ T5780]  ? do_raw_spin_unlock+0x121/0x230
[  225.444429][ T7268] EXT4-fs (loop0): Test dummy encryption mode enabled
[  225.450332][ T5780]  gfs2_put_super+0x224/0x930
[  225.450374][ T5780]  ? gfs2_evict_inode+0x1350/0x1350
[  225.468731][ T5780]  generic_shutdown_super+0x134/0x2b0
[  225.476144][ T5780]  kill_block_super+0x44/0x90
[  225.481815][ T5780]  deactivate_locked_super+0x97/0x100
[  225.487507][ T5780]  cleanup_mnt+0x43b/0x4d0
[  225.494077][ T5780]  task_work_run+0x1d4/0x260
[  225.500191][ T5780]  ? task_work_cancel+0x220/0x220
[  225.505400][ T5780]  ? exit_to_user_mode_loop+0x3b/0x110
[  225.513413][ T5780]  exit_to_user_mode_loop+0xe6/0x110
[  225.519032][ T5780]  exit_to_user_mode_prepare+0xee/0x180
[  225.525678][ T5780]  syscall_exit_to_user_mode+0x1a/0x50
[  225.531815][ T5780]  do_syscall_64+0x61/0xb0
[  225.537054][ T5780]  ? clear_bhb_loop+0x40/0x90
[  225.542635][ T5780]  ? clear_bhb_loop+0x40/0x90
[  225.548498][ T5780]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  225.556164][ T5780] RIP: 0033:0x7f11e859e097
[  225.562598][ T5780] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  225.586615][ T5780] RSP: 002b:00007fff5926a968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  225.596400][ T5780] RAX: 0000000000000000 RBX: 00007f11e86321ca RCX: 00007f11e859e097
[  225.605803][ T5780] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5926aa20
[  225.615118][ T5780] RBP: 00007fff5926aa20 R08: 00007fff5926ba20 R09: 00000000ffffffff
[  225.625069][ T5780] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff5926bab0
[  225.634362][ T5780] R13: 00007f11e86321ca R14: 0000000000035ee7 R15: 00007fff5926baf0
[  225.642753][ T5780]  </TASK>
[  225.724603][ T7268] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c19c, mo2=0003]
[  225.754194][ T7268] System zones: 0-5
[  225.806477][ T7268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.355779][ T7277] loop3: detected capacity change from 0 to 32768
[  226.456724][ T7282] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  226.468647][ T7277] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  226.611718][ T7277] XFS (loop3): Ending clean mount
[  226.624646][ T7277] XFS (loop3): Quotacheck needed: Please wait.
[  226.690106][ T7277] XFS (loop3): Quotacheck: Done.
[  227.061875][ T7299] binder: 7298:7299 ioctl 4018620d 0 returned -22
[  227.280203][ T5786] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  230.097798][ T7326] loop1: detected capacity change from 0 to 2048
[  230.177184][ T7308] loop3: detected capacity change from 0 to 32768
[  230.425036][ T7328] loop2: detected capacity change from 0 to 32768
[  230.473991][ T7308] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  230.824253][ T7308] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  230.872560][ T7328] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  231.093527][ T7308] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  231.142284][ T7328] XFS (loop2): Ending clean mount
[  231.154261][ T7328] XFS (loop2): Quotacheck needed: Please wait.
[  231.168814][   T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  231.196886][   T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  231.263765][ T7328] XFS (loop2): Quotacheck: Done.
[  231.488022][   T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 291ms
[  231.526762][   T27] gfs2: fsid=syz:syz.0: jid=0: Done
[  231.546654][ T7308] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  231.569680][ T7308] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  231.863180][ T7346] binder: 7345:7346 ioctl 4018620d 0 returned -22
[  232.094379][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  235.366068][ T7381] binder: 7380:7381 ioctl 4018620d 0 returned -22
[  235.536771][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.822158][ T7385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.377'.
[  236.535923][ T7377] loop3: detected capacity change from 0 to 32768
[  236.737443][ T7377] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  236.812649][ T7377] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  236.902039][ T7377] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  236.963210][  T968] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  236.989819][  T968] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  237.380675][  T968] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 390ms
[  237.453568][  T968] gfs2: fsid=syz:syz.0: jid=0: Done
[  237.500877][ T7377] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  238.077913][ T7401] loop0: detected capacity change from 0 to 32768
[  238.108569][ T7401] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  238.988269][ T7401] XFS (loop0): Ending clean mount
[  239.103818][ T7377] gfs2: fsid=syz:syz.0: found 1 quota changes
[  239.241991][ T5784] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  239.374221][ T5786] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0
[  239.409129][ T5786] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  239.462749][ T5786] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  239.520206][ T5786] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  239.531386][ T5786] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  239.589126][ T5786] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  239.613653][ T5786] CPU: 1 PID: 5786 Comm: syz-executor Not tainted syzkaller #0
[  239.621991][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  239.637055][ T5786] Call Trace:
[  239.640824][ T5786]  <TASK>
[  239.644225][ T5786]  dump_stack_lvl+0x18c/0x250
[  239.649539][ T5786]  ? show_regs_print_info+0x20/0x20
[  239.654878][ T5786]  ? load_image+0x420/0x420
[  239.659548][ T5786]  ? do_raw_spin_unlock+0x121/0x230
[  239.665618][ T5786]  gfs2_assert_warn_i+0x193/0x2c0
[  239.671987][ T5786]  gfs2_qd_dispose+0x4aa/0x5b0
[  239.677917][ T5786]  gfs2_quota_cleanup+0x410/0x720
[  239.684118][ T5786]  ? spin_lock_bucket+0x150/0x150
[  239.689493][ T5786]  ? __might_sleep+0xe0/0xe0
[  239.694118][ T5786]  ? down_write+0x16e/0x200
[  239.699101][ T5786]  ? down_read_killable+0x340/0x340
[  239.705402][ T5786]  ? gfs2_quota_sync+0x591/0x5a0
[  239.711080][ T5786]  gfs2_make_fs_ro+0x2aa/0x320
[  239.717021][ T5786]  ? gfs2_dinode_out+0xb10/0xb10
[  239.724505][ T5786]  ? __lock_acquire+0x7d40/0x7d40
[  239.729912][ T5786]  ? __rwlock_init+0x150/0x150
[  239.735240][ T5786]  ? do_raw_spin_unlock+0x121/0x230
[  239.742489][ T5786]  gfs2_put_super+0x224/0x930
[  239.749488][ T5786]  ? gfs2_evict_inode+0x1350/0x1350
[  239.756297][ T5786]  generic_shutdown_super+0x134/0x2b0
[  239.764245][ T5786]  kill_block_super+0x44/0x90
[  239.769494][ T5786]  deactivate_locked_super+0x97/0x100
[  239.775183][ T5786]  cleanup_mnt+0x43b/0x4d0
[  239.781126][ T5786]  task_work_run+0x1d4/0x260
[  239.786506][ T5786]  ? task_work_cancel+0x220/0x220
[  239.791980][ T5786]  ? exit_to_user_mode_loop+0x3b/0x110
[  239.798066][ T5786]  exit_to_user_mode_loop+0xe6/0x110
[  239.803402][ T5786]  exit_to_user_mode_prepare+0xee/0x180
[  239.809177][ T5786]  syscall_exit_to_user_mode+0x1a/0x50
[  239.817180][ T5786]  do_syscall_64+0x61/0xb0
[  239.822529][ T5786]  ? clear_bhb_loop+0x40/0x90
[  239.827597][ T5786]  ? clear_bhb_loop+0x40/0x90
[  239.833617][ T5786]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  239.841653][ T5786] RIP: 0033:0x7f51dd59e097
[  239.846715][ T5786] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  239.870513][ T5786] RSP: 002b:00007ffdf2a6a958 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  239.879920][ T5786] RAX: 0000000000000000 RBX: 00007f51dd6321ca RCX: 00007f51dd59e097
[  239.891716][ T5786] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf2a6aa10
[  239.901194][ T5786] RBP: 00007ffdf2a6aa10 R08: 00007ffdf2a6ba10 R09: 00000000ffffffff
[  239.912148][ T5786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf2a6baa0
[  239.923735][ T5786] R13: 00007f51dd6321ca R14: 00000000000393be R15: 00007ffdf2a6bae0
[  239.934662][ T5786]  </TASK>
[  239.937934][    C1] vkms_vblank_simulate: vblank timer overrun
[  240.531823][ T7430] loop0: detected capacity change from 0 to 4096
[  240.539987][ T7430] EXT4-fs: Ignoring removed mblk_io_submit option
[  240.581270][ T7430] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  240.618039][ T7430] EXT4-fs (loop0): Test dummy encryption mode enabled
[  240.675280][ T7430] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c19c, mo2=0003]
[  240.704890][ T7430] System zones: 0-5
[  240.728376][ T7430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.801028][ T7432] loop3: detected capacity change from 0 to 32768
[  241.026392][ T7432] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  241.130537][ T7444] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  241.415192][ T7432] XFS (loop3): Ending clean mount
[  241.426617][ T7432] XFS (loop3): Quotacheck needed: Please wait.
[  241.551040][ T7432] XFS (loop3): Quotacheck: Done.
[  241.825206][ T7446] loop1: detected capacity change from 0 to 512
[  242.633395][ T7446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.715549][ T7446] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  242.747657][ T5786] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  242.888882][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.572548][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.620819][ T7465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.393'.
[  246.713440][ T7463] loop0: detected capacity change from 0 to 131072
[  247.329648][ T7463] F2FS-fs (loop0): inline encryption not supported
[  247.338085][ T7463] F2FS-fs (loop0): Test dummy encryption mode enabled
[  247.362548][ T7463] F2FS-fs (loop0): invalid crc value
[  247.401647][ T7463] F2FS-fs (loop0): Found nat_bits in checkpoint
[  247.475462][ T7463] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  250.345123][ T7482] loop3: detected capacity change from 0 to 2048
[  250.686808][ T7487] loop2: detected capacity change from 0 to 4096
[  250.702498][ T7487] EXT4-fs: Ignoring removed mblk_io_submit option
[  250.930878][ T7487] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  251.100093][ T7487] EXT4-fs (loop2): Test dummy encryption mode enabled
[  251.330665][ T7487] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c19c, mo2=0003]
[  251.390824][ T7487] System zones: 0-5
[  251.410478][ T7495] binder: 7493:7495 ioctl c0306201 0 returned -14
[  251.442483][ T7487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.891417][ T7505] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  253.386972][ T7501] loop0: detected capacity change from 0 to 32768
[  253.675139][ T7504] loop3: detected capacity change from 0 to 32768
[  253.694325][ T7504] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  253.703748][ T7504] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  253.707009][ T7501] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  254.148164][ T7504] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 12ms
[  254.492659][ T1198] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  254.525981][ T1198] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  254.538388][ T7501] XFS (loop0): Ending clean mount
[  254.797783][ T5784] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  254.863836][ T1198] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 337ms
[  254.929623][ T1198] gfs2: fsid=syz:syz.0: jid=0: Done
[  254.971785][ T7504] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  255.022409][ T7504] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  255.697996][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.769278][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.414'.
[  256.133269][ T7542] binder: 7541:7542 ioctl c0306201 0 returned -14
[  256.349143][ T7529] loop0: detected capacity change from 0 to 40427
[  256.376495][ T7529] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  256.412693][ T7529] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  256.458241][ T7529] F2FS-fs (loop0): invalid crc value
[  256.502864][ T7529] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  257.265600][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  257.283601][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  257.351725][ T5788] Bluetooth: Wrong link type (-71)
[  257.432514][ T7529] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[  257.450086][ T7557] loop1: detected capacity change from 0 to 4096
[  257.470879][ T7529] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  257.481697][ T7557] EXT4-fs: Ignoring removed mblk_io_submit option
[  257.521976][ T7557] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  257.600678][ T7557] EXT4-fs (loop1): Test dummy encryption mode enabled
[  257.745734][ T7557] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c19c, mo2=0003]
[  257.778190][ T7557] System zones: 0-5
[  257.802839][ T7557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.875914][ T7569] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  261.701877][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'.
[  261.717565][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.035657][ T7576] binder: 7575:7576 ioctl c0306201 0 returned -14
[  263.519349][ T7592] loop1: detected capacity change from 0 to 32768
[  263.724614][ T7592] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  264.426725][ T7592] XFS (loop1): Ending clean mount
[  264.442358][ T7592] XFS (loop1): Quotacheck needed: Please wait.
[  264.538627][ T7592] XFS (loop1): Quotacheck: Done.
[  264.663336][ T7581] loop0: detected capacity change from 0 to 32768
[  264.712110][ T7581] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  264.774136][ T7581] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  264.878292][ T5780] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  264.957050][ T7581] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  264.979070][ T7609] loop3: detected capacity change from 0 to 4096
[  265.001028][ T1198] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  265.026437][ T7609] EXT4-fs: Ignoring removed mblk_io_submit option
[  265.087293][ T1198] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  265.132552][ T7609] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  265.196801][ T7609] EXT4-fs (loop3): Test dummy encryption mode enabled
[  265.267153][ T7609] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c19c, mo2=0003]
[  265.336834][ T7609] System zones: 0-5
[  265.372391][ T7609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.440253][ T1198] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 352ms
[  265.719045][ T1198] gfs2: fsid=syz:syz.0: jid=0: Done
[  265.727457][ T7581] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  265.748009][ T7581] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  265.797112][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.435'.
[  265.924149][ T7617] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  266.563465][ T5788] Bluetooth: Wrong link type (-71)
[  267.413587][ T7628] loop1: detected capacity change from 0 to 32768
[  267.447619][ T7628] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.434 (7628)
[  267.781101][ T7629] loop0: detected capacity change from 0 to 131072
[  267.782471][ T7628] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  267.823729][ T7629] F2FS-fs (loop0): inline encryption not supported
[  267.832401][ T7629] F2FS-fs (loop0): Test dummy encryption mode enabled
[  267.863176][ T7629] F2FS-fs (loop0): invalid crc value
[  268.018373][ T7628] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  268.167628][ T7629] F2FS-fs (loop0): Found nat_bits in checkpoint
[  268.371018][ T7629] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  268.393961][ T7628] BTRFS info (device loop1): using free space tree
[  268.698703][ T7628] BTRFS info (device loop1): enabling ssd optimizations
[  268.742155][ T7628] BTRFS info (device loop1): auto enabling async discard
[  268.891017][ T7657] netlink: 52 bytes leftover after parsing attributes in process `syz.2.442'.
[  268.950704][ T5780] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  271.374044][ T7659] loop2: detected capacity change from 0 to 32768
[  271.441655][ T7659] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  271.500676][ T7659] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  271.637733][ T7659] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  271.673590][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.445'.
[  271.705215][ T5821] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  271.717382][ T5821] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  271.789466][ T5821] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 72ms
[  271.800861][ T5821] gfs2: fsid=syz:syz.0: jid=0: Done
[  271.807335][ T7659] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  272.047521][ T7676] loop1: detected capacity change from 0 to 2048
[  272.133084][ T5770] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  272.191041][ T7676] loop1: detected capacity change from 0 to 512
[  272.198332][ T7676] EXT4-fs: Ignoring removed bh option
[  272.260657][ T7676] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  272.296107][ T7676] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  272.317985][ T7676] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.447: Corrupt directory, running e2fsck is recommended
[  272.354048][ T7676] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  272.365172][ T7659] gfs2: fsid=syz:syz.0: found 1 quota changes
[  272.390682][ T7676] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.447: corrupted in-inode xattr: e_name out of bounds
[  272.455282][ T7676] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.447: couldn't read orphan inode 15 (err -117)
[  272.540124][ T7676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.561648][ T5776] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0
[  272.614735][ T5776] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  272.635138][ T7682] loop0: detected capacity change from 0 to 32768
[  272.656579][ T5776] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  272.668168][ T5776] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  272.679574][ T5776] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  272.720139][ T5776] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  272.780489][ T5776] CPU: 0 PID: 5776 Comm: syz-executor Not tainted syzkaller #0
[  272.788622][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  272.798886][ T5776] Call Trace:
[  272.802464][ T5776]  <TASK>
[  272.805507][ T5776]  dump_stack_lvl+0x18c/0x250
[  272.810317][ T5776]  ? show_regs_print_info+0x20/0x20
[  272.815714][ T5776]  ? load_image+0x420/0x420
[  272.820350][ T5776]  ? do_raw_spin_unlock+0x121/0x230
[  272.825579][ T5776]  gfs2_assert_warn_i+0x193/0x2c0
[  272.830635][ T5776]  gfs2_qd_dispose+0x4aa/0x5b0
[  272.835438][ T5776]  gfs2_quota_cleanup+0x410/0x720
[  272.840481][ T5776]  ? spin_lock_bucket+0x150/0x150
[  272.846300][ T5776]  ? __might_sleep+0xe0/0xe0
[  272.851001][ T5776]  ? down_write+0x16e/0x200
[  272.855536][ T5776]  ? down_read_killable+0x340/0x340
[  272.860770][ T5776]  ? gfs2_quota_sync+0x591/0x5a0
[  272.866106][ T5776]  gfs2_make_fs_ro+0x2aa/0x320
[  272.870902][ T5776]  ? gfs2_dinode_out+0xb10/0xb10
[  272.876046][ T5776]  ? __lock_acquire+0x7d40/0x7d40
[  272.881113][ T5776]  ? __rwlock_init+0x150/0x150
[  272.886008][ T5776]  ? do_raw_spin_unlock+0x121/0x230
[  272.891364][ T5776]  gfs2_put_super+0x224/0x930
[  272.896081][ T5776]  ? gfs2_evict_inode+0x1350/0x1350
[  272.901319][ T5776]  generic_shutdown_super+0x134/0x2b0
[  272.906899][ T5776]  kill_block_super+0x44/0x90
[  272.911738][ T5776]  deactivate_locked_super+0x97/0x100
[  272.917366][ T5776]  cleanup_mnt+0x43b/0x4d0
[  272.921835][ T5776]  task_work_run+0x1d4/0x260
[  272.926644][ T5776]  ? task_work_cancel+0x220/0x220
[  272.932065][ T5776]  ? exit_to_user_mode_loop+0x3b/0x110
[  272.937837][ T5776]  exit_to_user_mode_loop+0xe6/0x110
[  272.943430][ T5776]  exit_to_user_mode_prepare+0xee/0x180
[  272.949026][ T5776]  syscall_exit_to_user_mode+0x1a/0x50
[  272.954526][ T5776]  do_syscall_64+0x61/0xb0
[  272.958986][ T5776]  ? clear_bhb_loop+0x40/0x90
[  272.963870][ T5776]  ? clear_bhb_loop+0x40/0x90
[  272.968751][ T5776]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  272.974774][ T5776] RIP: 0033:0x7f0d8d79e097
[  272.979222][ T5776] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  272.999425][ T5776] RSP: 002b:00007ffd0c959e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  273.008048][ T5776] RAX: 0000000000000000 RBX: 00007f0d8d8321ca RCX: 00007f0d8d79e097
[  273.016045][ T5776] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0c959f20
[  273.024564][ T5776] RBP: 00007ffd0c959f20 R08: 00007ffd0c95af20 R09: 00000000ffffffff
[  273.032594][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0c95afb0
[  273.040686][ T5776] R13: 00007f0d8d8321ca R14: 0000000000041a66 R15: 00007ffd0c95aff0
[  273.049094][ T5776]  </TASK>
[  273.052443][    C0] vkms_vblank_simulate: vblank timer overrun
[  273.067724][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.079968][ T7682] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  273.132182][ T7682] XFS (loop0): Ending clean mount
[  273.175864][ T7682] XFS (loop0): Quotacheck needed: Please wait.
[  273.255826][ T7682] XFS (loop0): Quotacheck: Done.
[  273.450678][ T7696] netlink: 52 bytes leftover after parsing attributes in process `syz.3.452'.
[  273.470800][ T5784] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  274.009066][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'.
[  274.088560][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.318497][ T7713] loop1: detected capacity change from 0 to 4096
[  274.334721][ T7713] EXT4-fs: Ignoring removed mblk_io_submit option
[  274.363534][ T7713] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  274.388340][ T7713] EXT4-fs (loop1): Test dummy encryption mode enabled
[  274.410490][ T7713] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c19c, mo2=0003]
[  274.442772][ T7713] System zones: 0-5
[  274.462182][ T7713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.841053][ T7710] loop2: detected capacity change from 0 to 32768
[  274.913444][ T7710] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  275.013249][ T7710] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  275.035804][ T7720] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  275.125900][ T7710] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  275.152521][ T1198] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  275.171153][ T1198] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  275.307854][ T1198] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 136ms
[  275.326162][ T1198] gfs2: fsid=syz:syz.0: jid=0: Done
[  275.338601][ T7710] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  276.591280][ T7739] loop3: detected capacity change from 0 to 2048
[  276.844209][ T7710] gfs2: fsid=syz:syz.0: found 1 quota changes
[  276.911822][ T7710] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0
[  276.956466][ T7710] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  277.021550][ T7710] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  277.070529][ T7710] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  277.082570][ T7710] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  277.524709][ T5776] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  277.574531][ T5776] CPU: 1 PID: 5776 Comm: syz-executor Not tainted syzkaller #0
[  277.582516][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  277.593573][ T5776] Call Trace:
[  277.597036][ T5776]  <TASK>
[  277.600606][ T5776]  dump_stack_lvl+0x18c/0x250
[  277.605897][ T5776]  ? show_regs_print_info+0x20/0x20
[  277.612217][ T5776]  ? load_image+0x420/0x420
[  277.618355][ T5776]  ? do_raw_spin_unlock+0x121/0x230
[  277.624564][ T5776]  gfs2_assert_warn_i+0x193/0x2c0
[  277.631132][ T5776]  gfs2_qd_dispose+0x4aa/0x5b0
[  277.636303][ T5776]  gfs2_quota_cleanup+0x410/0x720
[  277.641494][ T5776]  ? spin_lock_bucket+0x150/0x150
[  277.646914][ T5776]  ? __might_sleep+0xe0/0xe0
[  277.652690][ T5776]  ? down_write+0x16e/0x200
[  277.658830][ T5776]  ? down_read_killable+0x340/0x340
[  277.666006][ T5776]  ? gfs2_quota_sync+0x591/0x5a0
[  277.672658][ T5776]  gfs2_make_fs_ro+0x2aa/0x320
[  277.678867][ T5776]  ? gfs2_dinode_out+0xb10/0xb10
[  277.685576][ T5776]  ? __lock_acquire+0x7d40/0x7d40
[  277.692163][ T5776]  ? __rwlock_init+0x150/0x150
[  277.699126][ T5776]  ? do_raw_spin_unlock+0x121/0x230
[  277.706345][ T5776]  gfs2_put_super+0x224/0x930
[  277.711955][ T5776]  ? gfs2_evict_inode+0x1350/0x1350
[  277.717900][ T5776]  generic_shutdown_super+0x134/0x2b0
[  277.723756][ T5776]  kill_block_super+0x44/0x90
[  277.729254][ T5776]  deactivate_locked_super+0x97/0x100
[  277.735445][ T5776]  cleanup_mnt+0x43b/0x4d0
[  277.740382][ T5776]  task_work_run+0x1d4/0x260
[  277.745282][ T5776]  ? task_work_cancel+0x220/0x220
[  277.751762][ T5776]  ? exit_to_user_mode_loop+0x3b/0x110
[  277.761018][ T5776]  exit_to_user_mode_loop+0xe6/0x110
[  277.768459][ T5776]  exit_to_user_mode_prepare+0xee/0x180
[  277.775612][ T5776]  syscall_exit_to_user_mode+0x1a/0x50
[  277.781892][ T5776]  do_syscall_64+0x61/0xb0
[  277.786787][ T5776]  ? clear_bhb_loop+0x40/0x90
[  277.793770][ T5776]  ? clear_bhb_loop+0x40/0x90
[  277.799670][ T5776]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  277.807918][ T5776] RIP: 0033:0x7f0d8d79e097
[  277.812970][ T5776] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  277.835841][ T5776] RSP: 002b:00007ffd0c959e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  277.846702][ T5776] RAX: 0000000000000000 RBX: 00007f0d8d8321ca RCX: 00007f0d8d79e097
[  277.855071][ T5776] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0c959f20
[  277.863710][ T5776] RBP: 00007ffd0c959f20 R08: 00007ffd0c95af20 R09: 00000000ffffffff
[  277.872448][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0c95afb0
[  277.880545][ T5776] R13: 00007f0d8d8321ca R14: 00000000000439ff R15: 00007ffd0c95aff0
[  277.888654][ T5776]  </TASK>
[  278.548775][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.465'.
[  282.294359][ T7768] loop0: detected capacity change from 0 to 32768
[  282.362400][ T7768] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  282.405860][ T7768] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  282.446831][ T7778] loop2: detected capacity change from 0 to 2048
[  282.487652][ T7768] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  282.527743][ T5815] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  282.555333][ T5815] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  282.629212][ T7776] loop3: detected capacity change from 0 to 131072
[  282.667407][ T7776] F2FS-fs (loop3): inline encryption not supported
[  282.676214][ T7776] F2FS-fs (loop3): Test dummy encryption mode enabled
[  282.712777][ T7776] F2FS-fs (loop3): invalid crc value
[  282.844099][ T7776] F2FS-fs (loop3): Found nat_bits in checkpoint
[  282.884428][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.889622][ T7776] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  283.013373][ T5815] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 458ms
[  283.055260][ T5815] gfs2: fsid=syz:syz.0: jid=0: Done
[  283.072358][ T7768] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  283.266278][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'.
[  283.830860][ T7768] gfs2: fsid=syz:syz.0: found 1 quota changes
[  283.938877][ T5784] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0
[  283.955611][ T5784] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  283.969926][ T5784] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  283.984521][ T5784] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  283.995647][ T5784] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  284.053516][ T5784] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  284.080921][ T5784] CPU: 1 PID: 5784 Comm: syz-executor Not tainted syzkaller #0
[  284.089408][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  284.100549][ T5784] Call Trace:
[  284.104727][ T5784]  <TASK>
[  284.109288][ T5784]  dump_stack_lvl+0x18c/0x250
[  284.114576][ T5784]  ? show_regs_print_info+0x20/0x20
[  284.121299][ T5784]  ? load_image+0x420/0x420
[  284.128000][ T5784]  ? do_raw_spin_unlock+0x121/0x230
[  284.133780][ T5784]  gfs2_assert_warn_i+0x193/0x2c0
[  284.139814][ T5784]  gfs2_qd_dispose+0x4aa/0x5b0
[  284.145188][ T5784]  gfs2_quota_cleanup+0x410/0x720
[  284.152191][ T5784]  ? spin_lock_bucket+0x150/0x150
[  284.158727][ T5784]  ? __might_sleep+0xe0/0xe0
[  284.163748][ T5784]  ? down_write+0x16e/0x200
[  284.169264][ T5784]  ? down_read_killable+0x340/0x340
[  284.174749][ T5784]  ? gfs2_quota_sync+0x591/0x5a0
[  284.180527][ T5784]  gfs2_make_fs_ro+0x2aa/0x320
[  284.185434][ T5784]  ? gfs2_dinode_out+0xb10/0xb10
[  284.191413][ T5784]  ? __lock_acquire+0x7d40/0x7d40
[  284.198305][ T5784]  ? __rwlock_init+0x150/0x150
[  284.203381][ T5784]  ? do_raw_spin_unlock+0x121/0x230
[  284.208824][ T5784]  gfs2_put_super+0x224/0x930
[  284.215002][ T5784]  ? gfs2_evict_inode+0x1350/0x1350
[  284.221809][ T5784]  generic_shutdown_super+0x134/0x2b0
[  284.227941][ T5784]  kill_block_super+0x44/0x90
[  284.233713][ T5784]  deactivate_locked_super+0x97/0x100
[  284.240002][ T5784]  cleanup_mnt+0x43b/0x4d0
[  284.244478][ T5784]  task_work_run+0x1d4/0x260
[  284.249385][ T5784]  ? task_work_cancel+0x220/0x220
[  284.255008][ T5784]  ? exit_to_user_mode_loop+0x3b/0x110
[  284.264000][ T5784]  exit_to_user_mode_loop+0xe6/0x110
[  284.269510][ T5784]  exit_to_user_mode_prepare+0xee/0x180
[  284.276078][ T5784]  syscall_exit_to_user_mode+0x1a/0x50
[  284.283411][ T5784]  do_syscall_64+0x61/0xb0
[  284.288739][ T5784]  ? clear_bhb_loop+0x40/0x90
[  284.295736][ T5784]  ? clear_bhb_loop+0x40/0x90
[  284.301080][ T5784]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  284.309453][ T5784] RIP: 0033:0x7f980679e097
[  284.314172][ T5784] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  284.339249][ T5784] RSP: 002b:00007ffecd692bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  284.348059][ T5784] RAX: 0000000000000000 RBX: 00007f98068321ca RCX: 00007f980679e097
[  284.362972][ T5784] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecd692c80
[  284.371417][ T5784] RBP: 00007ffecd692c80 R08: 00007ffecd693c80 R09: 00000000ffffffff
[  284.385255][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffecd693d10
[  284.394454][ T5784] R13: 00007f98068321ca R14: 00000000000445fa R15: 00007ffecd693d50
[  284.404944][ T5784]  </TASK>
[  285.931228][ T7816] loop1: detected capacity change from 0 to 4096
[  286.071020][ T7816] EXT4-fs: Ignoring removed mblk_io_submit option
[  286.385842][ T7816] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  286.558601][ T7816] EXT4-fs (loop1): Test dummy encryption mode enabled
[  286.836566][ T7816] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c19c, mo2=0003]
[  286.847246][ T7816] System zones: 0-5
[  286.885392][ T7816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.899689][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'.
[  288.117007][ T7828] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  288.662557][ T7825] loop2: detected capacity change from 0 to 131072
[  288.674929][ T7825] F2FS-fs (loop2): inline encryption not supported
[  288.682504][ T7825] F2FS-fs (loop2): Test dummy encryption mode enabled
[  288.691222][ T7825] F2FS-fs (loop2): invalid crc value
[  288.733281][ T7825] F2FS-fs (loop2): Found nat_bits in checkpoint
[  288.763187][ T7833] loop3: detected capacity change from 0 to 2048
[  288.788943][ T7825] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  288.926848][ T7833] loop3: detected capacity change from 0 to 512
[  288.961349][ T7833] EXT4-fs: Ignoring removed bh option
[  289.003280][ T7833] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  289.041826][ T7833] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  289.090744][ T7833] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.489: Corrupt directory, running e2fsck is recommended
[  289.152549][ T7833] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  289.210587][ T7833] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.489: corrupted in-inode xattr: e_name out of bounds
[  289.286461][ T7833] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.489: couldn't read orphan inode 15 (err -117)
[  289.324048][ T7833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.760077][ T7831] loop0: detected capacity change from 0 to 32768
[  289.785602][ T7831] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  289.801038][ T7831] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  289.947442][ T7831] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  289.998876][ T5815] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  290.020924][ T5815] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  290.161527][ T5815] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 140ms
[  290.185027][ T5815] gfs2: fsid=syz:syz.0: jid=0: Done
[  290.210559][ T7831] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  290.835486][ T7831] gfs2: fsid=syz:syz.0: found 1 quota changes
[  290.879377][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.900310][ T7831] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0
[  290.919855][ T7831] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  290.949045][ T7831] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  290.985708][ T7831] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  290.996488][ T7831] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  291.087041][ T5784] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  291.113907][ T5784] CPU: 0 PID: 5784 Comm: syz-executor Not tainted syzkaller #0
[  291.122706][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  291.134255][ T5784] Call Trace:
[  291.138062][ T5784]  <TASK>
[  291.141021][ T5784]  dump_stack_lvl+0x18c/0x250
[  291.147585][ T5784]  ? show_regs_print_info+0x20/0x20
[  291.153005][ T5784]  ? load_image+0x420/0x420
[  291.158519][ T5784]  ? do_raw_spin_unlock+0x121/0x230
[  291.164178][ T5784]  gfs2_assert_warn_i+0x193/0x2c0
[  291.169227][ T5784]  gfs2_qd_dispose+0x4aa/0x5b0
[  291.174125][ T5784]  gfs2_quota_cleanup+0x410/0x720
[  291.179370][ T5784]  ? spin_lock_bucket+0x150/0x150
[  291.184736][ T5784]  ? __might_sleep+0xe0/0xe0
[  291.189797][ T5784]  ? down_write+0x16e/0x200
[  291.195404][ T5784]  ? down_read_killable+0x340/0x340
[  291.201349][ T5784]  ? gfs2_quota_sync+0x591/0x5a0
[  291.208158][ T5784]  gfs2_make_fs_ro+0x2aa/0x320
[  291.213333][ T5784]  ? gfs2_dinode_out+0xb10/0xb10
[  291.219349][ T5784]  ? __lock_acquire+0x7d40/0x7d40
[  291.225096][ T5784]  ? __rwlock_init+0x150/0x150
[  291.231206][ T5784]  ? do_raw_spin_unlock+0x121/0x230
[  291.236896][ T5784]  gfs2_put_super+0x224/0x930
[  291.241916][ T5784]  ? gfs2_evict_inode+0x1350/0x1350
[  291.251035][ T5784]  generic_shutdown_super+0x134/0x2b0
[  291.257574][ T5784]  kill_block_super+0x44/0x90
[  291.263242][ T5784]  deactivate_locked_super+0x97/0x100
[  291.269344][ T5784]  cleanup_mnt+0x43b/0x4d0
[  291.273870][ T5784]  task_work_run+0x1d4/0x260
[  291.279515][ T5784]  ? task_work_cancel+0x220/0x220
[  291.284821][ T5784]  ? exit_to_user_mode_loop+0x3b/0x110
[  291.290500][ T5784]  exit_to_user_mode_loop+0xe6/0x110
[  291.295822][ T5784]  exit_to_user_mode_prepare+0xee/0x180
[  291.301785][ T5784]  syscall_exit_to_user_mode+0x1a/0x50
[  291.309226][ T5784]  do_syscall_64+0x61/0xb0
[  291.313852][ T5784]  ? clear_bhb_loop+0x40/0x90
[  291.319042][ T5784]  ? clear_bhb_loop+0x40/0x90
[  291.324090][ T5784]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  291.330793][ T5784] RIP: 0033:0x7f980679e097
[  291.335432][ T5784] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  291.359942][ T5784] RSP: 002b:00007ffecd692bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  291.369945][ T5784] RAX: 0000000000000000 RBX: 00007f98068321ca RCX: 00007f980679e097
[  291.380290][ T5784] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecd692c80
[  291.389069][ T5784] RBP: 00007ffecd692c80 R08: 00007ffecd693c80 R09: 00000000ffffffff
[  291.399196][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffecd693d10
[  291.407282][ T5784] R13: 00007f98068321ca R14: 0000000000046ffd R15: 00007ffecd693d50
[  291.416518][ T5784]  </TASK>
[  293.116594][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.496'.
[  293.214815][ T7861] loop3: detected capacity change from 0 to 32768
[  293.286420][ T7861] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  293.424069][ T7861] XFS (loop3): Ending clean mount
[  293.443735][ T7861] XFS (loop3): Quotacheck needed: Please wait.
[  294.523405][ T7861] XFS (loop3): Quotacheck: Done.
[  294.762529][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.958286][ T7880] loop0: detected capacity change from 0 to 131072
[  295.969909][ T7880] F2FS-fs (loop0): inline encryption not supported
[  295.977538][ T7880] F2FS-fs (loop0): Test dummy encryption mode enabled
[  295.996940][ T7880] F2FS-fs (loop0): invalid crc value
[  296.006390][ T5786] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  296.041745][ T7880] F2FS-fs (loop0): Found nat_bits in checkpoint
[  296.115718][ T7880] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  296.584336][ T7893] loop3: detected capacity change from 0 to 2048
[  296.727586][ T7885] loop2: detected capacity change from 0 to 32768
[  296.755897][ T7885] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  296.781049][ T7885] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  296.875287][ T7885] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  296.934389][ T5821] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  296.950253][ T5821] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  297.601438][ T5821] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 651ms
[  297.612250][ T5821] gfs2: fsid=syz:syz.0: jid=0: Done
[  297.618851][ T7885] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  298.115235][ T7885] gfs2: fsid=syz:syz.0: found 1 quota changes
[  298.158131][ T7885] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0
[  298.179945][ T7885] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  298.214981][ T7885] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  298.257919][ T7885] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  298.271265][ T7885] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  298.395544][ T5776] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  298.441067][ T5776] CPU: 0 PID: 5776 Comm: syz-executor Not tainted syzkaller #0
[  298.449334][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  298.461079][ T5776] Call Trace:
[  298.465701][ T5776]  <TASK>
[  298.468930][ T5776]  dump_stack_lvl+0x18c/0x250
[  298.474205][ T5776]  ? show_regs_print_info+0x20/0x20
[  298.480578][ T5776]  ? load_image+0x420/0x420
[  298.486251][ T5776]  ? do_raw_spin_unlock+0x121/0x230
[  298.493061][ T5776]  gfs2_assert_warn_i+0x193/0x2c0
[  298.498682][ T5776]  gfs2_qd_dispose+0x4aa/0x5b0
[  298.504179][ T5776]  gfs2_quota_cleanup+0x410/0x720
[  298.510305][ T5776]  ? spin_lock_bucket+0x150/0x150
[  298.515589][ T5776]  ? __might_sleep+0xe0/0xe0
[  298.521349][ T5776]  ? down_write+0x16e/0x200
[  298.526804][ T5776]  ? down_read_killable+0x340/0x340
[  298.532644][ T5776]  ? gfs2_quota_sync+0x591/0x5a0
[  298.538067][ T5776]  gfs2_make_fs_ro+0x2aa/0x320
[  298.543429][ T5776]  ? gfs2_dinode_out+0xb10/0xb10
[  298.549358][ T5776]  ? __lock_acquire+0x7d40/0x7d40
[  298.555063][ T5776]  ? __rwlock_init+0x150/0x150
[  298.560048][ T5776]  ? do_raw_spin_unlock+0x121/0x230
[  298.565456][ T5776]  gfs2_put_super+0x224/0x930
[  298.570831][ T5776]  ? gfs2_evict_inode+0x1350/0x1350
[  298.576441][ T5776]  generic_shutdown_super+0x134/0x2b0
[  298.582722][ T5776]  kill_block_super+0x44/0x90
[  298.587694][ T5776]  deactivate_locked_super+0x97/0x100
[  298.594757][ T5776]  cleanup_mnt+0x43b/0x4d0
[  298.599867][ T5776]  task_work_run+0x1d4/0x260
[  298.604510][ T5776]  ? task_work_cancel+0x220/0x220
[  298.610056][ T5776]  ? exit_to_user_mode_loop+0x3b/0x110
[  298.616427][ T5776]  exit_to_user_mode_loop+0xe6/0x110
[  298.622814][ T5776]  exit_to_user_mode_prepare+0xee/0x180
[  298.628774][ T5776]  syscall_exit_to_user_mode+0x1a/0x50
[  298.635166][ T5776]  do_syscall_64+0x61/0xb0
[  298.640148][ T5776]  ? clear_bhb_loop+0x40/0x90
[  298.645727][ T5776]  ? clear_bhb_loop+0x40/0x90
[  298.652353][ T5776]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  298.659332][ T5776] RIP: 0033:0x7f0d8d79e097
[  298.663988][ T5776] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  298.685218][ T5776] RSP: 002b:00007ffd0c959e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  298.694056][ T5776] RAX: 0000000000000000 RBX: 00007f0d8d8321ca RCX: 00007f0d8d79e097
[  298.703261][ T5776] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0c959f20
[  298.713000][ T5776] RBP: 00007ffd0c959f20 R08: 00007ffd0c95af20 R09: 00000000ffffffff
[  298.721435][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0c95afb0
[  298.732463][ T5776] R13: 00007f0d8d8321ca R14: 0000000000048c6f R15: 00007ffd0c95aff0
[  298.742661][ T5776]  </TASK>
[  299.035240][ T7918] loop0: detected capacity change from 0 to 4096
[  299.061816][ T7918] EXT4-fs: Ignoring removed mblk_io_submit option
[  299.091716][ T7918] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  299.107460][ T7918] EXT4-fs (loop0): Test dummy encryption mode enabled
[  299.138401][ T7918] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c19c, mo2=0003]
[  299.162211][ T7918] System zones: 0-5
[  299.200091][ T7918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.967188][ T7928] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  300.147423][ T7920] loop1: detected capacity change from 0 to 32768
[  300.285429][ T7920] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  300.408673][ T7920] XFS (loop1): Ending clean mount
[  300.447986][ T7920] XFS (loop1): Quotacheck needed: Please wait.
[  300.650548][ T7920] XFS (loop1): Quotacheck: Done.
[  300.819465][ T7940] binder: BINDER_SET_CONTEXT_MGR already set
[  300.858655][ T7940] binder: 7939:7940 ioctl 4018620d 200000004a80 returned -16
[  301.749890][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.774537][ T7955] loop0: detected capacity change from 0 to 2048
[  302.880969][ T5770] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  302.925263][ T7955] loop0: detected capacity change from 0 to 512
[  302.940892][ T5770] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  302.951247][ T7955] EXT4-fs: Ignoring removed bh option
[  303.031000][ T7955] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  303.089508][ T7955] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[  303.103334][ T7955] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.513: Corrupt directory, running e2fsck is recommended
[  303.137831][ T7955] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  303.147487][ T7955] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.513: corrupted in-inode xattr: e_name out of bounds
[  303.164078][ T7955] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.513: couldn't read orphan inode 15 (err -117)
[  303.200773][ T7955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.483975][ T7953] loop2: detected capacity change from 0 to 32768
[  303.509231][ T7953] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  303.560782][ T7953] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  303.603139][ T7953] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  303.621062][   T27] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  303.629614][   T27] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  303.743236][   T27] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 113ms
[  303.767500][   T27] gfs2: fsid=syz:syz.0: jid=0: Done
[  303.780078][ T7953] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  303.937884][ T5780] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  304.433670][ T7953] gfs2: fsid=syz:syz.0: found 1 quota changes
[  304.458800][ T7953] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0
[  304.483911][ T7953] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  304.508968][ T7953] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  304.518933][ T7953] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  304.530829][ T7953] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  304.545079][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.370889][ T5776] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  305.400321][ T5776] CPU: 0 PID: 5776 Comm: syz-executor Not tainted syzkaller #0
[  305.410499][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  305.421651][ T5776] Call Trace:
[  305.425158][ T5776]  <TASK>
[  305.428111][ T5776]  dump_stack_lvl+0x18c/0x250
[  305.434144][ T5776]  ? show_regs_print_info+0x20/0x20
[  305.440715][ T5776]  ? load_image+0x420/0x420
[  305.446048][ T5776]  ? do_raw_spin_unlock+0x121/0x230
[  305.451298][ T5776]  gfs2_assert_warn_i+0x193/0x2c0
[  305.457419][ T5776]  gfs2_qd_dispose+0x4aa/0x5b0
[  305.463622][ T5776]  gfs2_quota_cleanup+0x410/0x720
[  305.469725][ T5776]  ? spin_lock_bucket+0x150/0x150
[  305.475437][ T5776]  ? __might_sleep+0xe0/0xe0
[  305.481452][ T5776]  ? down_write+0x16e/0x200
[  305.485997][ T5776]  ? down_read_killable+0x340/0x340
[  305.492418][ T5776]  ? gfs2_quota_sync+0x591/0x5a0
[  305.498099][ T5776]  gfs2_make_fs_ro+0x2aa/0x320
[  305.505869][ T5776]  ? gfs2_dinode_out+0xb10/0xb10
[  305.510940][ T5776]  ? __lock_acquire+0x7d40/0x7d40
[  305.516109][ T5776]  ? __rwlock_init+0x150/0x150
[  305.522285][ T5776]  ? do_raw_spin_unlock+0x121/0x230
[  305.527612][ T5776]  gfs2_put_super+0x224/0x930
[  305.532770][ T5776]  ? gfs2_evict_inode+0x1350/0x1350
[  305.539330][ T5776]  generic_shutdown_super+0x134/0x2b0
[  305.549179][ T5776]  kill_block_super+0x44/0x90
[  305.554619][ T5776]  deactivate_locked_super+0x97/0x100
[  305.561933][ T5776]  cleanup_mnt+0x43b/0x4d0
[  305.566908][ T5776]  task_work_run+0x1d4/0x260
[  305.573104][ T5776]  ? task_work_cancel+0x220/0x220
[  305.581568][ T5776]  ? exit_to_user_mode_loop+0x3b/0x110
[  305.590179][ T5776]  exit_to_user_mode_loop+0xe6/0x110
[  305.596371][ T5776]  exit_to_user_mode_prepare+0xee/0x180
[  305.604310][ T5776]  syscall_exit_to_user_mode+0x1a/0x50
[  305.611471][ T5776]  do_syscall_64+0x61/0xb0
[  305.616986][ T5776]  ? clear_bhb_loop+0x40/0x90
[  305.623348][ T5776]  ? clear_bhb_loop+0x40/0x90
[  305.628220][ T5776]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  305.636933][ T5776] RIP: 0033:0x7f0d8d79e097
[  305.642246][ T5776] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  305.667499][ T5776] RSP: 002b:00007ffd0c959e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  305.678988][ T5776] RAX: 0000000000000000 RBX: 00007f0d8d8321ca RCX: 00007f0d8d79e097
[  305.690361][ T5776] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0c959f20
[  305.704339][ T5776] RBP: 00007ffd0c959f20 R08: 00007ffd0c95af20 R09: 00000000ffffffff
[  305.716514][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0c95afb0
[  305.726076][ T5776] R13: 00007f0d8d8321ca R14: 000000000004a570 R15: 00007ffd0c95aff0
[  305.736862][ T5776]  </TASK>
[  306.017487][ T7983] loop3: detected capacity change from 0 to 4096
[  306.058110][ T7985] Bluetooth: hci0: unsupported parameter 255
[  306.059425][ T7983] EXT4-fs: Ignoring removed mblk_io_submit option
[  306.078082][ T7985] Bluetooth: hci0: unsupported parameter 255
[  306.156963][ T7983] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  306.190089][ T7983] EXT4-fs (loop3): Test dummy encryption mode enabled
[  306.255375][ T7983] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c19c, mo2=0003]
[  306.296073][ T7983] System zones: 0-5
[  306.333686][ T7983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.431525][ T5777] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  306.801293][ T5777] usb 1-1: Using ep0 maxpacket: 8
[  306.933082][ T5777] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  307.022021][ T5777] usb 1-1: config 179 has no interface number 0
[  307.107118][ T5777] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  307.243067][ T5777] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  307.400726][ T5777] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  307.446963][ T5777] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  307.485005][ T5777] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  307.555181][ T5777] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  307.582241][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.612417][ T7987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  307.809035][ T8001] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  309.803352][ T8003] loop1: detected capacity change from 0 to 2048
[  310.427434][ T8005] loop2: detected capacity change from 0 to 512
[  310.488718][ T8005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.544347][ T8005] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  310.615067][ T5770] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  310.618481][ T5813] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5
[  310.653269][ T5777] usb 1-1: USB disconnect, device number 8
[  310.653406][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  310.653508][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  310.759915][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.782540][ T5777] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  310.836419][ T8003] loop1: detected capacity change from 0 to 512
[  310.857951][ T8003] EXT4-fs: Ignoring removed bh option
[  310.953031][ T8003] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  311.024054][ T8003] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  311.092822][ T8003] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.526: Corrupt directory, running e2fsck is recommended
[  311.112678][ T8003] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  311.129877][ T8003] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.526: corrupted in-inode xattr: e_name out of bounds
[  311.190719][ T8003] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.526: couldn't read orphan inode 15 (err -117)
[  311.233917][ T8003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.975841][ T8012] loop3: detected capacity change from 0 to 32768
[  312.017149][ T8012] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  312.178975][ T8012] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  312.294705][ T8012] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  312.355130][ T5777] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  312.377421][ T5777] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  312.430900][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.707000][ T5777] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 329ms
[  312.737476][ T5777] gfs2: fsid=syz:syz.0: jid=0: Done
[  312.738580][ T8027] Bluetooth: hci0: unsupported parameter 255
[  312.761870][ T8012] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  312.769214][ T8027] Bluetooth: hci0: unsupported parameter 255
[  312.866221][ T8008] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set
[  313.177750][ T8012] gfs2: fsid=syz:syz.0: found 1 quota changes
[  313.233248][ T8012] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0
[  313.262429][ T8012] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  313.345833][ T8012] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  313.738223][ T8012] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  313.755253][ T8012] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  315.691345][ T5786] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  315.746147][ T5786] CPU: 0 PID: 5786 Comm: syz-executor Not tainted syzkaller #0
[  315.755520][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  315.766135][ T5786] Call Trace:
[  315.769447][ T5786]  <TASK>
[  315.772849][ T5786]  dump_stack_lvl+0x18c/0x250
[  315.777571][ T5786]  ? show_regs_print_info+0x20/0x20
[  315.785071][ T5786]  ? load_image+0x420/0x420
[  315.789608][ T5786]  ? do_raw_spin_unlock+0x121/0x230
[  315.795108][ T5786]  gfs2_assert_warn_i+0x193/0x2c0
[  315.800192][ T5786]  gfs2_qd_dispose+0x4aa/0x5b0
[  315.805441][ T5786]  gfs2_quota_cleanup+0x410/0x720
[  315.811381][ T5786]  ? spin_lock_bucket+0x150/0x150
[  315.816808][ T5786]  ? __might_sleep+0xe0/0xe0
[  315.822162][ T5786]  ? down_write+0x16e/0x200
[  315.826883][ T5786]  ? down_read_killable+0x340/0x340
[  315.832589][ T5786]  ? gfs2_quota_sync+0x591/0x5a0
[  315.839009][ T5786]  gfs2_make_fs_ro+0x2aa/0x320
[  315.844898][ T5786]  ? gfs2_dinode_out+0xb10/0xb10
[  315.850914][ T5786]  ? __lock_acquire+0x7d40/0x7d40
[  315.856156][ T5786]  ? __rwlock_init+0x150/0x150
[  315.861233][ T5786]  ? do_raw_spin_unlock+0x121/0x230
[  315.866909][ T5786]  gfs2_put_super+0x224/0x930
[  315.871749][ T5786]  ? gfs2_evict_inode+0x1350/0x1350
[  315.877083][ T5786]  generic_shutdown_super+0x134/0x2b0
[  315.885598][ T5786]  kill_block_super+0x44/0x90
[  315.891153][ T5786]  deactivate_locked_super+0x97/0x100
[  315.896881][ T5786]  cleanup_mnt+0x43b/0x4d0
[  315.901775][ T5786]  task_work_run+0x1d4/0x260
[  315.906426][ T5786]  ? task_work_cancel+0x220/0x220
[  315.911851][ T5786]  ? exit_to_user_mode_loop+0x3b/0x110
[  315.918340][ T5786]  exit_to_user_mode_loop+0xe6/0x110
[  315.924019][ T5786]  exit_to_user_mode_prepare+0xee/0x180
[  315.930501][ T5786]  syscall_exit_to_user_mode+0x1a/0x50
[  315.937061][ T5786]  do_syscall_64+0x61/0xb0
[  315.942939][ T5786]  ? clear_bhb_loop+0x40/0x90
[  315.948611][ T5786]  ? clear_bhb_loop+0x40/0x90
[  315.954279][ T5786]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  315.960653][ T5786] RIP: 0033:0x7f51dd59e097
[  315.966145][ T5786] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  315.988467][ T5786] RSP: 002b:00007ffdf2a6a958 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  315.998417][ T5786] RAX: 0000000000000000 RBX: 00007f51dd6321ca RCX: 00007f51dd59e097
[  316.007571][ T5786] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf2a6aa10
[  316.017228][ T5786] RBP: 00007ffdf2a6aa10 R08: 00007ffdf2a6ba10 R09: 00000000ffffffff
[  316.028640][ T5786] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf2a6baa0
[  316.037081][ T5786] R13: 00007f51dd6321ca R14: 000000000004ce3b R15: 00007ffdf2a6bae0
[  316.046665][ T5786]  </TASK>
[  316.050833][    C0] vkms_vblank_simulate: vblank timer overrun
[  316.861150][ T8052] netlink: 620 bytes leftover after parsing attributes in process `syz.0.538'.
[  316.998380][ T8054] loop0: detected capacity change from 0 to 2048
[  317.000583][   T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  317.099773][ T5770] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  317.132889][ T8054] loop0: detected capacity change from 0 to 512
[  317.154285][ T8054] EXT4-fs: Ignoring removed bh option
[  317.163261][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.211248][   T27] usb 4-1: Using ep0 maxpacket: 32
[  317.218377][ T8054] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  317.222958][   T27] usb 4-1: unable to get BOS descriptor or descriptor too short
[  317.232999][ T8054] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[  317.260136][ T8054] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.539: Corrupt directory, running e2fsck is recommended
[  317.282598][   T27] usb 4-1: config 0 has no interfaces?
[  317.308069][ T8054] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  317.320827][   T27] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  317.346937][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.360886][ T8054] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.539: corrupted in-inode xattr: e_name out of bounds
[  317.368509][ T8061] Bluetooth: hci0: unsupported parameter 255
[  317.383218][ T8054] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.539: couldn't read orphan inode 15 (err -117)
[  317.403222][ T8061] Bluetooth: hci0: unsupported parameter 255
[  317.421724][   T27] usb 4-1: Product: syz
[  317.424515][ T8054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.427007][   T27] usb 4-1: Manufacturer: syz
[  317.457324][   T27] usb 4-1: SerialNumber: syz
[  317.498586][   T27] usb 4-1: config 0 descriptor??
[  317.560718][ T8056] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  317.866594][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.881266][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.940166][ T5813] usb 4-1: USB disconnect, device number 5
[  318.550575][ T5813] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  318.630010][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.639984][ T5777] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  318.704535][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  318.723282][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  318.742498][ T5813] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  318.758199][ T5813] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  318.768712][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.777448][ T5813] usb 4-1: Product: syz
[  318.783675][ T5813] usb 4-1: Manufacturer: syz
[  318.789729][ T5813] usb 4-1: SerialNumber: syz
[  318.832107][ T5777] usb 3-1: not running at top speed; connect to a high speed hub
[  318.852655][ T5777] usb 3-1: config 6 has an invalid interface number: 44 but max is 0
[  318.873842][ T5777] usb 3-1: config 6 has no interface number 0
[  318.890538][ T5777] usb 3-1: config 6 interface 44 has no altsetting 0
[  318.912137][ T5777] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=be.71
[  318.932473][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.969406][ T5777] usb 3-1: Product: syz
[  318.987149][ T5777] usb 3-1: Manufacturer: syz
[  319.006696][ T5777] usb 3-1: SerialNumber: syz
[  319.021008][ T5813] usb 4-1: selecting invalid altsetting 1
[  319.035820][ T5813] cdc_ncm 4-1:1.0: bind() failure
[  319.182539][ T5813] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  319.519358][ T5777] usb 3-1: ignoring: probably an ADSL modem
[  319.728270][ T5777] cxacru 3-1:6.44: usbatm_usb_probe: bind failed: -19!
[  319.740649][ T5813] snd-usb-audio: probe of 4-1:1.1 failed with error -22
[  319.789713][ T5777] usb 3-1: USB disconnect, device number 13
[  319.804111][ T5813] usb 4-1: USB disconnect, device number 6
[  319.909114][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  320.158829][ T8072] loop1: detected capacity change from 0 to 32768
[  320.189420][ T8072] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  320.264556][ T8072] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  320.370968][ T8072] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  320.480147][ T5777] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  320.526681][ T5777] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  320.677000][ T8083] loop0: detected capacity change from 0 to 512
[  320.771804][ T5777] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 245ms
[  320.778289][ T8083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.790774][ T5777] gfs2: fsid=syz:syz.0: jid=0: Done
[  320.802888][ T8072] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  320.836331][ T8083] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  321.590799][ T8072] gfs2: fsid=syz:syz.0: found 1 quota changes
[  321.722708][ T5780] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0
[  321.760564][ T5780] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  321.780486][ T5780] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  321.810495][ T5780] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  321.824124][ T5780] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  321.883017][ T5780] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  321.909864][ T5780] CPU: 0 PID: 5780 Comm: syz-executor Not tainted syzkaller #0
[  321.918112][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  321.929377][ T5780] Call Trace:
[  321.932730][ T5780]  <TASK>
[  321.935759][ T5780]  dump_stack_lvl+0x18c/0x250
[  321.942575][ T5780]  ? show_regs_print_info+0x20/0x20
[  321.950075][ T5780]  ? load_image+0x420/0x420
[  321.955923][ T5780]  ? do_raw_spin_unlock+0x121/0x230
[  321.961682][ T5780]  gfs2_assert_warn_i+0x193/0x2c0
[  321.967239][ T5780]  gfs2_qd_dispose+0x4aa/0x5b0
[  321.972485][ T5780]  gfs2_quota_cleanup+0x410/0x720
[  321.978154][ T5780]  ? spin_lock_bucket+0x150/0x150
[  321.984253][ T5780]  ? __might_sleep+0xe0/0xe0
[  321.989580][ T5780]  ? down_write+0x16e/0x200
[  321.996288][ T5780]  ? down_read_killable+0x340/0x340
[  322.001978][ T5780]  ? gfs2_quota_sync+0x591/0x5a0
[  322.007741][ T5780]  gfs2_make_fs_ro+0x2aa/0x320
[  322.012539][ T5780]  ? gfs2_dinode_out+0xb10/0xb10
[  322.017995][ T5780]  ? __lock_acquire+0x7d40/0x7d40
[  322.023566][ T5780]  ? __rwlock_init+0x150/0x150
[  322.028401][ T5780]  ? do_raw_spin_unlock+0x121/0x230
[  322.035114][ T5780]  gfs2_put_super+0x224/0x930
[  322.040140][ T5780]  ? gfs2_evict_inode+0x1350/0x1350
[  322.048167][ T5780]  generic_shutdown_super+0x134/0x2b0
[  322.055091][ T5780]  kill_block_super+0x44/0x90
[  322.060426][ T5780]  deactivate_locked_super+0x97/0x100
[  322.066456][ T5780]  cleanup_mnt+0x43b/0x4d0
[  322.072690][ T5780]  task_work_run+0x1d4/0x260
[  322.078465][ T5780]  ? task_work_cancel+0x220/0x220
[  322.083622][ T5780]  ? exit_to_user_mode_loop+0x3b/0x110
[  322.092874][ T5780]  exit_to_user_mode_loop+0xe6/0x110
[  322.098865][ T5780]  exit_to_user_mode_prepare+0xee/0x180
[  322.104805][ T5780]  syscall_exit_to_user_mode+0x1a/0x50
[  322.111463][ T5780]  do_syscall_64+0x61/0xb0
[  322.116322][ T5780]  ? clear_bhb_loop+0x40/0x90
[  322.121805][ T5780]  ? clear_bhb_loop+0x40/0x90
[  322.127395][ T5780]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  322.133478][ T5780] RIP: 0033:0x7f11e859e097
[  322.138353][ T5780] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  322.158966][ T5780] RSP: 002b:00007fff5926a968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  322.168005][ T5780] RAX: 0000000000000000 RBX: 00007f11e86321ca RCX: 00007f11e859e097
[  322.176352][ T5780] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5926aa20
[  322.185066][ T5780] RBP: 00007fff5926aa20 R08: 00007fff5926ba20 R09: 00000000ffffffff
[  322.193157][ T5780] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff5926bab0
[  322.202386][ T5780] R13: 00007f11e86321ca R14: 000000000004db8e R15: 00007fff5926baf0
[  322.210573][ T5780]  </TASK>
[  322.214780][    C0] vkms_vblank_simulate: vblank timer overrun
[  322.380595][ T8086] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set
[  323.202723][ T8110] loop1: detected capacity change from 0 to 2048
[  323.272768][ T5770] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  323.356098][ T8110] loop1: detected capacity change from 0 to 512
[  323.365576][ T5770] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  323.390379][ T8110] EXT4-fs: Ignoring removed bh option
[  323.461025][ T8110] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  323.520562][ T8110] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  323.532062][ T8110] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.553: Corrupt directory, running e2fsck is recommended
[  323.555094][ T8110] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  323.574015][ T8110] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.553: corrupted in-inode xattr: e_name out of bounds
[  323.597810][ T8110] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.553: couldn't read orphan inode 15 (err -117)
[  323.635161][ T8110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.474248][   T27] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  325.719527][ T8124] loop2: detected capacity change from 0 to 131072
[  325.744102][ T8124] F2FS-fs (loop2): inline encryption not supported
[  325.752688][ T8124] F2FS-fs (loop2): Test dummy encryption mode enabled
[  325.772137][ T8124] F2FS-fs (loop2): invalid crc value
[  325.814611][ T8124] F2FS-fs (loop2): Found nat_bits in checkpoint
[  325.871826][ T8124] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  325.892052][   T27] usb 4-1: not running at top speed; connect to a high speed hub
[  325.943837][ T8112] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  325.969391][   T27] usb 4-1: config 6 has an invalid interface number: 44 but max is 0
[  325.978018][   T27] usb 4-1: config 6 has no interface number 0
[  325.998271][   T27] usb 4-1: config 6 interface 44 has no altsetting 0
[  326.008209][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.043636][   T27] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=be.71
[  326.062659][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.071592][   T27] usb 4-1: Product: syz
[  326.077103][   T27] usb 4-1: Manufacturer: syz
[  326.083843][   T27] usb 4-1: SerialNumber: syz
[  326.544669][   T27] usb 4-1: ignoring: probably an ADSL modem
[  326.716068][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.779158][   T27] cxacru 4-1:6.44: usbatm_usb_probe: bind failed: -19!
[  326.805553][   T27] usb 4-1: USB disconnect, device number 7
[  327.704850][ T8140] loop1: detected capacity change from 0 to 32768
[  327.760992][ T8140] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  327.800033][ T8136] loop2: detected capacity change from 0 to 32768
[  327.818383][ T8136] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  327.831647][ T8136] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  327.895006][ T8136] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  327.909239][ T8140] XFS (loop1): Ending clean mount
[  327.926845][ T8140] XFS (loop1): Quotacheck needed: Please wait.
[  327.939497][ T5777] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  327.968663][ T5777] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  328.030822][ T8140] XFS (loop1): Quotacheck: Done.
[  328.141365][ T5777] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 172ms
[  328.190891][ T5777] gfs2: fsid=syz:syz.0: jid=0: Done
[  328.251292][ T8136] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  328.845640][ T8136] gfs2: fsid=syz:syz.0: found 1 quota changes
[  328.920098][ T8136] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0
[  328.938581][ T8136] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  328.985503][ T8136] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  329.050562][ T8136] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  329.061021][ T8136] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  330.279803][ T5780] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  330.468070][ T8170] loop0: detected capacity change from 0 to 131072
[  330.476940][ T8170] F2FS-fs (loop0): inline encryption not supported
[  330.484732][ T8170] F2FS-fs (loop0): Test dummy encryption mode enabled
[  330.503630][ T8172] loop3: detected capacity change from 0 to 512
[  330.519666][ T8170] F2FS-fs (loop0): invalid crc value
[  330.534996][ T5776] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  330.562307][ T8170] F2FS-fs (loop0): Found nat_bits in checkpoint
[  330.575025][ T5776] CPU: 0 PID: 5776 Comm: syz-executor Not tainted syzkaller #0
[  330.583971][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  330.595352][ T5776] Call Trace:
[  330.598648][ T5776]  <TASK>
[  330.601610][ T5776]  dump_stack_lvl+0x18c/0x250
[  330.606388][ T5776]  ? show_regs_print_info+0x20/0x20
[  330.612524][ T5776]  ? load_image+0x420/0x420
[  330.618288][ T5776]  ? do_raw_spin_unlock+0x121/0x230
[  330.623542][ T5776]  gfs2_assert_warn_i+0x193/0x2c0
[  330.628617][ T5776]  gfs2_qd_dispose+0x4aa/0x5b0
[  330.633419][ T5776]  gfs2_quota_cleanup+0x410/0x720
[  330.638481][ T5776]  ? spin_lock_bucket+0x150/0x150
[  330.643538][ T5776]  ? __might_sleep+0xe0/0xe0
[  330.648243][ T5776]  ? down_write+0x16e/0x200
[  330.652784][ T5776]  ? down_read_killable+0x340/0x340
[  330.658111][ T5776]  ? gfs2_quota_sync+0x591/0x5a0
[  330.661838][ T8170] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  330.663139][ T5776]  gfs2_make_fs_ro+0x2aa/0x320
[  330.675665][ T5776]  ? gfs2_dinode_out+0xb10/0xb10
[  330.675927][ T8172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.680634][ T5776]  ? __lock_acquire+0x7d40/0x7d40
[  330.680665][ T5776]  ? __rwlock_init+0x150/0x150
[  330.680686][ T5776]  ? do_raw_spin_unlock+0x121/0x230
[  330.680707][ T5776]  gfs2_put_super+0x224/0x930
[  330.680732][ T5776]  ? gfs2_evict_inode+0x1350/0x1350
[  330.680750][ T5776]  generic_shutdown_super+0x134/0x2b0
[  330.680769][ T5776]  kill_block_super+0x44/0x90
[  330.680786][ T5776]  deactivate_locked_super+0x97/0x100
[  330.680803][ T5776]  cleanup_mnt+0x43b/0x4d0
[  330.680825][ T5776]  task_work_run+0x1d4/0x260
[  330.744140][ T5776]  ? task_work_cancel+0x220/0x220
[  330.749205][ T5776]  ? exit_to_user_mode_loop+0x3b/0x110
[  330.754735][ T5776]  exit_to_user_mode_loop+0xe6/0x110
[  330.760070][ T5776]  exit_to_user_mode_prepare+0xee/0x180
[  330.765663][ T5776]  syscall_exit_to_user_mode+0x1a/0x50
[  330.771267][ T5776]  do_syscall_64+0x61/0xb0
[  330.775807][ T5776]  ? clear_bhb_loop+0x40/0x90
[  330.780512][ T5776]  ? clear_bhb_loop+0x40/0x90
[  330.780818][ T8172] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  330.785286][ T5776]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.802170][ T5776] RIP: 0033:0x7f0d8d79e097
[  330.806615][ T5776] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  330.830241][ T5776] RSP: 002b:00007ffd0c959e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  330.838698][ T5776] RAX: 0000000000000000 RBX: 00007f0d8d8321ca RCX: 00007f0d8d79e097
[  330.846810][ T5776] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0c959f20
[  330.854903][ T5776] RBP: 00007ffd0c959f20 R08: 00007ffd0c95af20 R09: 00000000ffffffff
[  330.863113][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd0c95afb0
[  330.871116][ T5776] R13: 00007f0d8d8321ca R14: 0000000000050474 R15: 00007ffd0c95aff0
[  330.879141][ T5776]  </TASK>
[  331.234037][ T8178] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set
[  333.767742][ T8205] loop0: detected capacity change from 0 to 32768
[  333.799126][ T8205] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  333.924161][ T8205] XFS (loop0): Ending clean mount
[  333.938036][ T8205] XFS (loop0): Quotacheck needed: Please wait.
[  334.015863][ T8205] XFS (loop0): Quotacheck: Done.
[  334.429288][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'.
[  335.910596][ T8224] loop2: detected capacity change from 0 to 131072
[  335.926634][ T8224] F2FS-fs (loop2): inline encryption not supported
[  335.935998][ T8224] F2FS-fs (loop2): Test dummy encryption mode enabled
[  335.958443][ T8224] F2FS-fs (loop2): invalid crc value
[  335.991487][ T8224] F2FS-fs (loop2): Found nat_bits in checkpoint
[  336.088360][ T8224] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  336.402315][ T5784] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  336.742783][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.576886][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'.
[  338.436324][ T8261] binder: 8260:8261 ioctl c0306201 0 returned -14
[  338.461597][ T8264] loop2: detected capacity change from 0 to 512
[  338.523249][ T8264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.599831][ T8264] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  339.192486][ T8267] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set
[  340.626012][ T8293] binder: 8292:8293 ioctl c0306201 0 returned -14
[  342.405029][ T8316] binder: 8315:8316 ioctl c0306201 0 returned -14
[  343.736681][ T8330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.615'.
[  345.110851][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.624'.
[  345.343550][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.622'.
[  347.244024][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.888462][ T8367] loop3: detected capacity change from 0 to 2048
[  348.008861][ T5767] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  348.073354][ T8367] loop3: detected capacity change from 0 to 512
[  348.086040][ T8367] EXT4-fs: Ignoring removed bh option
[  348.136450][ T8367] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  348.161218][ T8367] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  348.175445][ T8367] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.628: Corrupt directory, running e2fsck is recommended
[  348.195481][ T8367] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  348.208233][ T8367] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.628: corrupted in-inode xattr: e_name out of bounds
[  348.264386][ T8367] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.628: couldn't read orphan inode 15 (err -117)
[  348.321863][ T8367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.216943][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.440740][   T27] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  349.630603][ T5813] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  349.630648][   T27] usb 3-1: Using ep0 maxpacket: 32
[  349.669227][   T27] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  349.689355][   T27] usb 3-1: config 0 has no interface number 0
[  349.708367][   T27] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  349.740617][   T27] usb 3-1: config 0 interface 1 has no altsetting 0
[  349.754518][   T27] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  349.770531][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.789405][   T27] usb 3-1: Product: syz
[  349.799528][   T27] usb 3-1: Manufacturer: syz
[  349.809701][   T27] usb 3-1: SerialNumber: syz
[  349.830600][ T5813] usb 4-1: Using ep0 maxpacket: 8
[  349.833278][   T27] usb 3-1: config 0 descriptor??
[  349.843648][ T5813] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  349.860875][ T5813] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  349.880806][  T968] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  349.893184][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  349.920770][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  349.940621][ T5813] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  349.970522][ T5813] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  349.996928][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.093579][  T968] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  350.110866][  T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.115877][   T27] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  350.151689][  T968] usb 2-1: config 0 descriptor??
[  350.180773][   T27] cx231xx 3-1:0.1: Failed to read PCB config
[  350.193989][  T968] pwc: Samsung MPC-C10 USB webcam detected.
[  350.200337][   T27] cx231xx: probe of 3-1:0.1 failed with error -71
[  350.240398][   T27] usb 3-1: USB disconnect, device number 14
[  350.248665][ T5813] usb 4-1: usb_control_msg returned -32
[  350.273150][ T5813] usbtmc 4-1:16.0: can't read capabilities
[  350.396470][  T968] pwc: send_video_command error -71
[  350.414951][  T968] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  350.441949][  T968] Philips webcam: probe of 2-1:0.0 failed with error -71
[  350.457596][ T8387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.477929][  T968] usb 2-1: USB disconnect, device number 5
[  350.501033][ T8387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.538930][ T8387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.549903][ T8387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.568949][ T8387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.580798][ T8387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.594449][ T8387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.613617][ T8387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.790668][   T27] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  350.851652][ T5815] usb 4-1: USB disconnect, device number 8
[  351.020877][  T968] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  351.050673][   T27] usb 3-1: Using ep0 maxpacket: 32
[  351.058452][   T27] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  351.067201][   T27] usb 3-1: config 0 has no interface number 0
[  351.075926][   T27] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  351.087718][   T27] usb 3-1: config 0 interface 1 has no altsetting 0
[  351.103629][   T27] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  351.116791][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.127433][   T27] usb 3-1: Product: syz
[  351.132789][   T27] usb 3-1: Manufacturer: syz
[  351.138892][   T27] usb 3-1: SerialNumber: syz
[  351.154891][   T27] usb 3-1: config 0 descriptor??
[  351.217166][  T968] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  351.231256][  T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.244382][  T968] usb 2-1: config 0 descriptor??
[  351.253643][  T968] pwc: Samsung MPC-C10 USB webcam detected.
[  351.440830][   T27] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  351.456162][   T27] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[  351.572142][   T27] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[  351.588354][   T27] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  351.609126][   T27] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  351.620495][   T27] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  351.637651][   T27] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  351.646794][   T27] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -32
[  351.738685][   T27] i2c i2c-2: Added multiplexed i2c bus 4
[  351.791049][   T27] i2c i2c-2: Added multiplexed i2c bus 5
[  351.947926][ T8401] Bluetooth: hci0: invalid length 0, exp 2 for type 6
[  351.974055][   T27] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  352.031136][   T27] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71
[  352.058909][   T27] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71
[  352.080260][   T27] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71
[  352.084687][  T968] pwc: recv_control_msg error -71 req 04 val 1700
[  352.094325][   T27] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71
[  352.116864][   T27] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71
[  352.129591][  T968] pwc: recv_control_msg error -71 req 02 val 2c00
[  352.131237][   T27] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71
[  352.137702][  T968] pwc: recv_control_msg error -71 req 04 val 1000
[  352.153742][   T27] cx231xx 3-1:0.1: cx231xx_send_usb_command: failed with status --71
[  352.171173][  T968] pwc: recv_control_msg error -71 req 04 val 1300
[  352.188837][  T968] pwc: recv_control_msg error -71 req 04 val 1400
[  352.196299][   T27] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]!
[  352.209370][  T968] pwc: recv_control_msg error -71 req 02 val 2000
[  352.209847][  T968] pwc: recv_control_msg error -71 req 02 val 2100
[  352.225277][   T27] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]!
[  352.267364][  T968] pwc: recv_control_msg error -71 req 02 val 2200
[  352.285119][  T968] pwc: recv_control_msg error -71 req 06 val 0600
[  352.308045][ T8405] loop3: detected capacity change from 0 to 2048
[  352.318101][  T968] pwc: recv_control_msg error -71 req 04 val 1500
[  352.326290][  T968] pwc: recv_control_msg error -71 req 02 val 2500
[  352.344505][  T968] pwc: recv_control_msg error -71 req 02 val 2400
[  352.357223][   T27] cx231xx: probe of 3-1:0.1 failed with error -71
[  352.370995][  T968] pwc: recv_control_msg error -71 req 02 val 2600
[  352.383111][   T27] usb 3-1: USB disconnect, device number 15
[  352.413720][  T968] pwc: recv_control_msg error -71 req 02 val 2900
[  352.443836][  T968] pwc: recv_control_msg error -71 req 02 val 2800
[  352.465826][ T8405] loop3: detected capacity change from 0 to 512
[  352.492018][ T8405] EXT4-fs: Ignoring removed bh option
[  352.492474][  T968] pwc: recv_control_msg error -71 req 04 val 1100
[  352.550845][  T968] pwc: recv_control_msg error -71 req 04 val 1200
[  352.675591][  T968] pwc: Registered as video103.
[  352.708110][ T8405] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  352.739565][  T968] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6
[  352.753574][ T8405] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  352.800177][ T8414] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  352.808532][  T968] usb 2-1: USB disconnect, device number 6
[  352.811017][ T8414] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  352.826872][ T8414] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  352.837865][ T8405] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.642: Corrupt directory, running e2fsck is recommended
[  352.837975][ T8414] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  352.861212][ T8414] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  352.869593][ T8405] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  352.870358][ T8414] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  352.888212][ T8405] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.642: corrupted in-inode xattr: e_name out of bounds
[  352.888479][ T8414] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  352.911792][ T8414] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  352.921698][ T8414] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  352.930860][ T8414] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  352.936995][ T8405] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.642: couldn't read orphan inode 15 (err -117)
[  352.960528][ T8405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.565349][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.120363][ T8440] Bluetooth: hci0: invalid length 0, exp 2 for type 6
[  356.325216][ T8430] loop2: detected capacity change from 0 to 131072
[  356.341881][ T8430] F2FS-fs (loop2): inline encryption not supported
[  356.351651][ T8430] F2FS-fs (loop2): Test dummy encryption mode enabled
[  356.426378][ T8430] F2FS-fs (loop2): invalid crc value
[  356.528151][ T8448] netlink: 'syz.3.657': attribute type 19 has an invalid length.
[  356.575441][ T8448] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.657'.
[  356.589619][ T8430] F2FS-fs (loop2): Found nat_bits in checkpoint
[  356.737485][ T8430] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  357.079835][ T8457] loop0: detected capacity change from 0 to 2048
[  358.504012][ T8476] Bluetooth: hci0: invalid length 0, exp 2 for type 6
[  359.294009][ T8489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.669'.
[  361.059623][ T8502] binder: 8500:8502 ioctl 4018620d 0 returned -22
[  361.633683][  T968] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  362.022485][  T968] usb 4-1: config 128 has an invalid interface number: 148 but max is 0
[  362.396265][  T968] usb 4-1: config 128 has no interface number 0
[  362.406627][  T968] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0
[  362.421895][  T968] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  362.435151][  T968] usb 4-1: config 128 interface 148 has no altsetting 0
[  362.447399][  T968] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f
[  362.457174][  T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.467898][  T968] usb 4-1: Product: syz
[  362.473342][  T968] usb 4-1: Manufacturer: syz
[  362.479846][  T968] usb 4-1: SerialNumber: syz
[  362.528147][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.683'.
[  362.771054][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.780253][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  362.814646][  T968] usb 4-1: USB disconnect, device number 9
[  363.570578][  T968] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  363.780552][  T968] usb 4-1: Using ep0 maxpacket: 8
[  363.796593][  T968] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  363.816378][  T968] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  363.848409][  T968] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  363.863228][  T968] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16
[  363.890492][  T968] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  363.920555][  T968] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  363.950654][  T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.202590][  T968] usb 4-1: GET_CAPABILITIES returned 0
[  364.208879][  T968] usbtmc 4-1:16.0: can't read capabilities
[  364.407056][ T1198] usb 4-1: USB disconnect, device number 10
[  365.410514][ T5777] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  365.590668][ T5777] usb 3-1: Using ep0 maxpacket: 8
[  365.612741][ T5777] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  365.640540][ T5777] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  365.677887][ T5777] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  365.708313][ T5777] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  365.734655][ T5777] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  365.792330][ T8533] loop0: detected capacity change from 0 to 131072
[  365.830541][ T5777] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  365.853167][ T8533] F2FS-fs (loop0): inline encryption not supported
[  365.861933][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.863313][ T8533] F2FS-fs (loop0): Test dummy encryption mode enabled
[  365.922506][ T8533] F2FS-fs (loop0): invalid crc value
[  365.971835][ T8533] F2FS-fs (loop0): Found nat_bits in checkpoint
[  366.170634][ T5777] usb 3-1: usb_control_msg returned -32
[  366.177156][ T1198] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  366.205183][ T5777] usbtmc 3-1:16.0: can't read capabilities
[  366.205414][ T8550] Driver unsupported XDP return value 0 on prog  (id 22) dev N/A, expect packet loss!
[  366.362167][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.376583][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.398281][ T1198] usb 4-1: unable to read config index 0 descriptor/start: -71
[  366.415246][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.425725][ T1198] usb 4-1: can't read configurations, error -71
[  366.440259][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.472733][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.509834][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.577305][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  366.612490][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.841759][ T5814] usb 3-1: USB disconnect, device number 16
[  367.170876][   T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  367.379101][   T27] usb 2-1: config 128 has an invalid interface number: 148 but max is 0
[  367.400036][   T27] usb 2-1: config 128 has no interface number 0
[  367.430764][   T27] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0
[  367.459873][   T27] usb 2-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  367.481278][   T27] usb 2-1: config 128 interface 148 has no altsetting 0
[  367.500808][   T27] usb 2-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f
[  367.539394][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.567951][   T27] usb 2-1: Product: syz
[  367.587622][   T27] usb 2-1: Manufacturer: syz
[  367.608466][   T27] usb 2-1: SerialNumber: syz
[  367.881834][ T8555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.903428][ T8555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  367.947810][   T27] usb 2-1: USB disconnect, device number 7
[  367.999624][ T8572] loop0: detected capacity change from 0 to 512
[  368.066771][ T8572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.105088][ T8572] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  368.521774][ T8577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.699'.
[  368.550576][   T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  368.780724][   T27] usb 2-1: Using ep0 maxpacket: 8
[  368.787764][   T27] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  368.820658][   T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  368.850574][   T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  368.890494][   T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16
[  368.926873][   T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  368.970492][   T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  368.980031][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.220569][   T27] usb 2-1: GET_CAPABILITIES returned 0
[  369.226783][   T27] usbtmc 2-1:16.0: can't read capabilities
[  369.426883][ T5814] usb 2-1: USB disconnect, device number 8
[  370.780723][ T8575] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set
[  371.860563][    T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  372.079065][    T9] usb 4-1: unable to read config index 0 descriptor/start: -71
[  372.087890][    T9] usb 4-1: can't read configurations, error -71
[  373.397524][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.026801][ T8609] syzkaller0: entered promiscuous mode
[  374.047221][ T8609] syzkaller0: entered allmulticast mode
[  376.392641][   T27] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  376.632361][   T27] usb 2-1: unable to read config index 0 descriptor/start: -71
[  376.650963][   T27] usb 2-1: can't read configurations, error -71
[  377.483100][ T8628] loop1: detected capacity change from 0 to 512
[  377.567707][ T8628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.613526][ T8628] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  378.827929][ T8618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.713'.
[  379.763573][ T8645] loop2: detected capacity change from 0 to 4096
[  379.777739][ T8645] EXT4-fs: Ignoring removed mblk_io_submit option
[  380.171206][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  380.178717][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  380.224191][ T8645] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  380.261538][ T8645] EXT4-fs (loop2): Test dummy encryption mode enabled
[  380.311233][ T8631] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set
[  380.340510][ T8645] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c19c, mo2=0003]
[  380.380258][ T8645] System zones: 0-5
[  380.407450][ T8645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.811436][ T5777] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  380.919080][ T8647] loop0: detected capacity change from 0 to 131072
[  380.948908][ T8647] F2FS-fs (loop0): inline encryption not supported
[  380.957646][ T8647] F2FS-fs (loop0): Test dummy encryption mode enabled
[  380.976011][ T8647] F2FS-fs (loop0): invalid crc value
[  380.989423][ T8647] F2FS-fs (loop0): Found nat_bits in checkpoint
[  381.050536][ T5777] usb 4-1: Using ep0 maxpacket: 32
[  381.065786][ T8647] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  381.082160][ T5777] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  381.097396][ T5777] usb 4-1: config 0 has no interface number 0
[  381.152638][ T8655] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  382.676153][ T5777] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  382.688639][ T5777] usb 4-1: config 0 interface 1 has no altsetting 0
[  382.700840][ T5777] usb 4-1: string descriptor 0 read error: -71
[  382.711402][ T5777] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  382.740940][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.771928][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.785818][ T5777] usb 4-1: config 0 descriptor??
[  382.822491][ T5777] usb 4-1: can't set config #0, error -71
[  382.837312][ T5777] usb 4-1: USB disconnect, device number 15
[  382.890715][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.502304][ T5814] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  384.991381][ T8674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.727'.
[  386.621093][   T28] audit: type=1326 audit(1781255595.786:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.0.732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f980679ce59 code=0x0
[  386.842013][ T5814] usb 2-1: device not accepting address 11, error -71
[  386.927480][ T8691] loop3: detected capacity change from 0 to 512
[  387.017096][ T8691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  387.095333][ T8691] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  387.260557][ T8694] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set
[  388.250353][ T8711] netlink: 'syz.1.743': attribute type 25 has an invalid length.
[  389.299439][ T8722] loop0: detected capacity change from 0 to 32768
[  389.431517][ T8722] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  389.589720][ T8722] XFS (loop0): Ending clean mount
[  389.611451][ T8722] XFS (loop0): Quotacheck needed: Please wait.
[  389.650818][ T8733] netlink: 'syz.1.749': attribute type 39 has an invalid length.
[  389.712441][ T8722] XFS (loop0): Quotacheck: Done.
[  389.990861][ T8735] loop2: detected capacity change from 0 to 2048
[  390.070526][ T5767] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  390.178360][ T8735] loop2: detected capacity change from 0 to 512
[  390.179216][ T8733] hsr_slave_0 (unregistering): left promiscuous mode
[  390.201474][ T8735] EXT4-fs: Ignoring removed bh option
[  390.239775][ T8735] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  390.285928][ T8735] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  390.297381][ T8735] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.750: Corrupt directory, running e2fsck is recommended
[  390.317993][ T8735] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  390.376760][ T8735] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.750: corrupted in-inode xattr: e_name out of bounds
[  390.461432][ T8735] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.750: couldn't read orphan inode 15 (err -117)
[  390.526523][ T8735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.022020][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.184859][ T8748] sock: sock_timestamping_bind_phc: sock not bind to device
[  391.921683][ T8764] netlink: 52 bytes leftover after parsing attributes in process `syz.2.761'.
[  392.065955][ T8764] netlink: 52 bytes leftover after parsing attributes in process `syz.2.761'.
[  392.328525][ T8764] netlink: 52 bytes leftover after parsing attributes in process `syz.2.761'.
[  392.552158][ T8769] loop2: detected capacity change from 0 to 2048
[  392.619599][ T5770] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  392.656930][ T8769] loop2: detected capacity change from 0 to 512
[  392.672283][ T5770] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  392.691368][ T8769] EXT4-fs: Ignoring removed bh option
[  392.707719][ T5784] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  392.760643][ T8769] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  392.794695][ T8769] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  392.839504][ T8769] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.762: Corrupt directory, running e2fsck is recommended
[  392.953136][ T8769] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  393.001403][ T8769] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.762: corrupted in-inode xattr: e_name out of bounds
[  393.080907][ T8769] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.762: couldn't read orphan inode 15 (err -117)
[  393.162262][ T8769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.727857][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.164119][ T8792] netlink: 52 bytes leftover after parsing attributes in process `syz.0.771'.
[  395.199162][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.305649][ T8792] netlink: 52 bytes leftover after parsing attributes in process `syz.0.771'.
[  395.355881][ T8796] netlink: 'syz.3.772': attribute type 27 has an invalid length.
[  395.385352][ T8796] netlink: 'syz.3.772': attribute type 25 has an invalid length.
[  395.509103][ T8792] netlink: 52 bytes leftover after parsing attributes in process `syz.0.771'.
[  395.606339][ T8799] loop3: detected capacity change from 0 to 2048
[  396.258000][ T8814] loop2: detected capacity change from 0 to 512
[  396.310301][ T8814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.335604][ T8814] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  396.582492][ T8822] netlink: 52 bytes leftover after parsing attributes in process `syz.0.782'.
[  398.681292][ T8817] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set
[  399.138861][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.060541][    T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  404.272060][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  404.324079][    T9] usb 4-1: config 6 has an invalid interface number: 44 but max is 0
[  404.350562][    T9] usb 4-1: config 6 has no interface number 0
[  405.313667][ T8902] loop0: detected capacity change from 0 to 32768
[  405.428971][ T8902] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  405.607243][ T8902] XFS (loop0): Ending clean mount
[  405.646549][ T8902] XFS (loop0): Quotacheck needed: Please wait.
[  405.790559][    T9] usb 4-1: config 6 interface 44 has no altsetting 0
[  405.815169][ T8902] XFS (loop0): Quotacheck: Done.
[  406.237390][ T5784] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  406.263539][    T9] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=be.71
[  406.273359][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.283977][    T9] usb 4-1: Product: syz
[  406.288306][    T9] usb 4-1: Manufacturer: syz
[  406.344798][    T9] usb 4-1: SerialNumber: syz
[  406.794789][    T9] usb 4-1: ignoring: probably an ADSL modem
[  407.012924][    T9] cxacru 4-1:6.44: usbatm_usb_probe: bind failed: -19!
[  407.042683][    T9] usb 4-1: USB disconnect, device number 16
[  407.699274][ T8945] loop2: detected capacity change from 0 to 2048
[  407.848387][ T8945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  407.917679][ T8945] EXT4-fs (loop2): shut down requested (2)
[  407.966180][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.980499][ T1198] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  408.172502][ T1198] usb 1-1: config 128 has an invalid interface number: 148 but max is 0
[  408.184929][ T1198] usb 1-1: config 128 has no interface number 0
[  408.202262][ T1198] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0
[  408.236031][ T1198] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  408.267863][ T1198] usb 1-1: config 128 interface 148 has no altsetting 0
[  408.289425][ T1198] usb 1-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f
[  408.303783][ T1198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.325227][ T1198] usb 1-1: Product: syz
[  408.329832][ T1198] usb 1-1: Manufacturer: syz
[  408.350509][ T1198] usb 1-1: SerialNumber: syz
[  408.363610][    T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  408.577615][ T8943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.591604][    T9] usb 3-1: config 1 has an invalid interface number: 128 but max is 1
[  408.603626][ T8943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.623607][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  408.625106][ T8943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.646816][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  408.646847][    T9] usb 3-1: config 1 has no interface number 0
[  408.646899][    T9] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  408.646924][    T9] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.651200][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  408.701333][ T8943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.710634][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.733336][    T9] usb 3-1: Product: syz
[  408.739582][    T9] usb 3-1: Manufacturer: syz
[  408.748582][    T9] usb 3-1: SerialNumber: syz
[  408.778039][    T9] cdc_wdm 3-1:1.128: skipping garbage
[  408.795154][    T9] cdc_wdm 3-1:1.128: cdc-wdm0: USB WDM device
[  408.802903][ T1198] usb 1-1: USB disconnect, device number 9
[  408.818000][    T9] cdc_wdm 3-1:1.128: Unknown control protocol
[  408.988541][    T9] usb 3-1: USB disconnect, device number 17
[  409.659921][ T8972] loop0: detected capacity change from 0 to 256
[  409.705585][ T8972] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  409.810624][ T1198] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  410.030550][ T1198] usb 2-1: Using ep0 maxpacket: 16
[  410.047715][ T1198] usb 2-1: unable to get BOS descriptor or descriptor too short
[  410.076845][ T1198] usb 2-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40
[  410.099938][ T1198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.130530][ T1198] usb 2-1: Product: syz
[  410.134761][ T1198] usb 2-1: Manufacturer: syz
[  410.139374][ T1198] usb 2-1: SerialNumber: syz
[  411.420837][ T5777] usb 2-1: USB disconnect, device number 13
[  411.440666][    T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  411.660620][    T9] usb 3-1: Using ep0 maxpacket: 32
[  411.682178][    T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  411.704674][    T9] usb 3-1: config 0 has no interface number 0
[  411.714837][    T9] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  411.740655][    T9] usb 3-1: config 0 interface 1 has no altsetting 0
[  411.763024][    T9] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  411.777874][ T8995] loop0: detected capacity change from 0 to 40427
[  411.780513][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.810625][    T9] usb 3-1: Product: syz
[  411.815089][    T9] usb 3-1: Manufacturer: syz
[  411.820222][    T9] usb 3-1: SerialNumber: syz
[  411.830761][ T8995] F2FS-fs (loop0): invalid crc value
[  411.849278][    T9] usb 3-1: config 0 descriptor??
[  411.868212][ T8995] F2FS-fs (loop0): Found nat_bits in checkpoint
[  411.929350][ T8996] loop3: detected capacity change from 0 to 40427
[  411.970351][ T8996] F2FS-fs (loop3): LFS is not compatible with checkpoint=disable
[  412.052202][ T8995] F2FS-fs (loop0): Start checkpoint disabled!
[  412.096550][    T9] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  412.134924][ T8995] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  412.144469][    T9] cx231xx 3-1:0.1: Failed to read PCB config
[  412.159324][    T9] cx231xx: probe of 3-1:0.1 failed with error -71
[  412.190909][    T9] usb 3-1: USB disconnect, device number 18
[  412.267669][ T8995] ------------[ cut here ]------------
[  412.274083][ T8995] kernel BUG at fs/f2fs/segment.c:3481!
[  412.300632][ T8995] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  412.306853][ T8995] CPU: 0 PID: 8995 Comm: syz.0.843 Not tainted syzkaller #0
[  412.314268][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  412.324528][ T8995] RIP: 0010:f2fs_allocate_data_block+0x3f6f/0x3fb0
[  412.332543][ T8995] Code: 19 fe 48 8b 54 24 30 e9 88 eb ff ff e8 7a 20 c1 fd 48 c7 c7 60 0a 70 8d 4c 89 f6 e8 5b a1 97 00 e9 a4 eb ff ff e8 61 20 c1 fd <0f> 0b e8 5a 20 c1 fd 0f 0b e8 53 20 c1 fd 0f 0b e8 4c 20 c1 fd 0f
[  412.353399][ T8995] RSP: 0018:ffffc9000c71f3f0 EFLAGS: 00010287
[  412.359628][ T8995] RAX: ffffffff83c60b2f RBX: 0000000000000200 RCX: 0000000000080000
[  412.368244][ T8995] RDX: ffffc9000cf49000 RSI: 0000000000034b69 RDI: 0000000000034b6a
[  412.376227][ T8995] RBP: 0000000000000200 R08: ffff88805d23a05f R09: 1ffff1100ba4740b
[  412.384949][ T8995] R10: dffffc0000000000 R11: ffffed100ba4740c R12: 1ffff920018e3ef0
[  412.393732][ T8995] R13: 0000000000000000 R14: 0000000000001a00 R15: dffffc0000000000
[  412.405027][ T8995] FS:  00007f98076886c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  412.417893][ T8995] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  412.427020][ T8995] CR2: 0000001b2de1fff8 CR3: 000000002b49b000 CR4: 00000000003506f0
[  412.437006][ T8995] Call Trace:
[  412.441537][ T8995]  <TASK>
[  412.446688][ T8995]  ? f2fs_mark_inode_dirty_sync+0x120/0x1f0
[  412.454563][ T8995]  f2fs_map_blocks+0x1191/0x40f0
[  412.460445][ T8995]  ? f2fs_get_block_locked+0xe0/0xe0
[  412.466766][ T8995]  ? __up_read+0x2b6/0x6b0
[  412.473468][ T8995]  ? up_write+0x1c3/0x410
[  412.479222][ T8995]  ? f2fs_allocate_pinning_section+0x1af/0x590
[  412.485589][ T8995]  f2fs_expand_inode_data+0x67a/0xa10
[  412.491704][ T8995]  ? f2fs_insert_range+0x470/0x470
[  412.497032][ T8995]  ? __mnt_drop_write_file+0xc3/0x100
[  412.504339][ T8995]  ? file_modified_flags+0x267/0x2a0
[  412.510004][ T8995]  f2fs_fallocate+0x416/0x890
[  412.515922][ T8995]  vfs_fallocate+0x58e/0x700
[  412.520853][ T8995]  do_vfs_ioctl+0x19f6/0x1cc0
[  412.525639][ T8995]  ? __ia32_compat_sys_ioctl+0x8a0/0x8a0
[  412.535161][ T8995]  ? tomoyo_path_number_perm+0x217/0x620
[  412.540970][ T8995]  ? __lock_acquire+0x7d40/0x7d40
[  412.546723][ T8995]  ? slab_free_freelist_hook+0x130/0x1a0
[  412.553697][ T8995]  ? tomoyo_path_number_perm+0x5b4/0x620
[  412.559797][ T8995]  ? tomoyo_path_number_perm+0x217/0x620
[  412.565635][ T8995]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  412.575482][ T8995]  ? __fget_files+0x28/0x4b0
[  412.580263][ T8995]  ? __fget_files+0x28/0x4b0
[  412.584892][ T8995]  ? bpf_lsm_file_ioctl+0x9/0x10
[  412.589892][ T8995]  ? security_file_ioctl+0x80/0xa0
[  412.595725][ T8995]  __se_sys_ioctl+0x83/0x170
[  412.600964][ T8995]  do_syscall_64+0x55/0xb0
[  412.605556][ T8995]  ? clear_bhb_loop+0x40/0x90
[  412.610736][ T8995]  ? clear_bhb_loop+0x40/0x90
[  412.615432][ T8995]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  412.621448][ T8995] RIP: 0033:0x7f980679ce59
[  412.625885][ T8995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.647325][ T8995] RSP: 002b:00007f9807688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  412.656353][ T8995] RAX: ffffffffffffffda RBX: 00007f9806a15fa0 RCX: 00007f980679ce59
[  412.664327][ T8995] RDX: 0000200000000040 RSI: 0000000040305828 RDI: 0000000000000004
[  412.672471][ T8995] RBP: 00007f9806832d6f R08: 0000000000000000 R09: 0000000000000000
[  412.681413][ T8995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  412.689588][ T8995] R13: 00007f9806a16038 R14: 00007f9806a15fa0 R15: 00007ffecd693958
[  412.697854][ T8995]  </TASK>
[  412.700874][ T8995] Modules linked in:
[  412.730044][ T8995] ---[ end trace 0000000000000000 ]---
[  412.736266][ T8995] RIP: 0010:f2fs_allocate_data_block+0x3f6f/0x3fb0
[  412.749218][ T8995] Code: 19 fe 48 8b 54 24 30 e9 88 eb ff ff e8 7a 20 c1 fd 48 c7 c7 60 0a 70 8d 4c 89 f6 e8 5b a1 97 00 e9 a4 eb ff ff e8 61 20 c1 fd <0f> 0b e8 5a 20 c1 fd 0f 0b e8 53 20 c1 fd 0f 0b e8 4c 20 c1 fd 0f
[  412.774562][ T8995] RSP: 0018:ffffc9000c71f3f0 EFLAGS: 00010287
[  412.782633][   T27] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  412.794048][ T8995] RAX: ffffffff83c60b2f RBX: 0000000000000200 RCX: 0000000000080000
[  412.802262][ T8995] RDX: ffffc9000cf49000 RSI: 0000000000034b69 RDI: 0000000000034b6a
[  412.810284][ T8995] RBP: 0000000000000200 R08: ffff88805d23a05f R09: 1ffff1100ba4740b
[  412.818621][ T8995] R10: dffffc0000000000 R11: ffffed100ba4740c R12: 1ffff920018e3ef0
[  412.826740][ T8995] R13: 0000000000000000 R14: 0000000000001a00 R15: dffffc0000000000
[  412.835075][ T8995] FS:  00007f98076886c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  412.844253][ T8995] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  412.851031][ T8995] CR2: 00007f98067ea540 CR3: 000000002b49b000 CR4: 00000000003506e0
[  412.859823][ T8995] Kernel panic - not syncing: Fatal exception
[  412.866587][ T8995] Kernel Offset: disabled
[  412.870919][ T8995] Rebooting in 86400 seconds..