last executing test programs: 7m6.55031828s ago: executing program 3 (id=183): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x0, {@in6_addr=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x40080c0) 7m6.53822552s ago: executing program 3 (id=184): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x101000, 0x108) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x18, 0xfffffffc, 0x7, 0x40}) 7m5.575449004s ago: executing program 3 (id=187): r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x1000000a, 0x6, 0xfff, 0x0, 0x8, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000100)=0x4, 0x8112) 7m5.164477545s ago: executing program 3 (id=190): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 7m4.55823497s ago: executing program 3 (id=196): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x693, &(0x7f0000000980)="$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") r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7m3.835000659s ago: executing program 3 (id=209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m3.476066418s ago: executing program 32 (id=209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m48.625124491s ago: executing program 4 (id=1772): syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x50, 0x16, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x85, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x77, 0x3, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 4m47.351984644s ago: executing program 4 (id=1786): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffff}) 4m47.223455727s ago: executing program 4 (id=1788): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x800, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 4m46.996969033s ago: executing program 4 (id=1791): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000c00, &(0x7f0000000140)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,iocharset=cp437,iocharset=iso8859-7,nodiscard,errors=continue,errors=continue,uid=', @ANYRESHEX=0xee01, @ANYBLOB], 0x21, 0x61e2, &(0x7f00000063c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4m45.675341486s ago: executing program 4 (id=1807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) 4m44.559752995s ago: executing program 4 (id=1821): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r0, 0x84, 0x80, 0xfffffffffffffffe, &(0x7f0000000000)=0x39) 4m44.37660131s ago: executing program 33 (id=1821): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r0, 0x84, 0x80, 0xfffffffffffffffe, &(0x7f0000000000)=0x39) 3m29.296412986s ago: executing program 1 (id=2687): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110180000000000de0000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 3m29.031623053s ago: executing program 1 (id=2690): r0 = socket$inet(0x2, 0x1, 0x0) listen(r0, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 3m28.791633899s ago: executing program 1 (id=2691): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0xfffffefd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1f, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x9, 0x7860, 0xfff}, 0x2a}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x4}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 3m27.443700704s ago: executing program 1 (id=2700): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x62a, &(0x7f0000000440)="$eJzs3N1u29YdAPDD2KrVFA0GBFvTNEDZtBcZhriSsjgwsotoNG2zlUSBlAv3aggWuwtqt0C7AWtutmDAtgIbdrXrobvYxZ5g77Bn6TN4oET5O7bhpE2G/H6AdSjxT54/P3COJfCcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEKFlqtdpR6GWDtfX4yZKlIu+fsH66v/8cKA5o7HsNUQhR9ReazXBl8tGVy3uxP6xeroc3Ju/eCM2qaIZHr/3oB3cvz16oNmxEUTghoafQ2N3vq9XLzkyoP/j8wiSf3cgvv3r06f2trY0v6vfN/StfAivpICvzrN9dSeOszOPFhYXW+6vLZbyc9dLy43KU9uOkSLujvIhvJPdCCIu34nT+43xtsLLU7aXxjeTHcXtx8c7NTqu1EH8wP0y7RZkP3v9gvkxWs14vG6yMY6rVNztvhzvVjfhhNopHabMfx5sPtzZunZZkFdQ+S1DntKBOq9Nptzud9sLtxdt3Wq3m5Hb4V+eLMPlgtnVIOLzJ7Hd10/ICeyXsazimbdwrz6oNh/PaSf42LucOr5g5Gvr9ZAQAAAA8a9H4N/YohMbuN/6sl7YOxOxErz6X3AAAAIBnIwrj5+ui+sG8KyFaPvL9/974dbzeMysAAADwf+jPu2Ps5o4ZYxeiKJTDuWj6tX+4/l603a2Wutv14wJHxgmMlq9Gl+qdjIuF2fpdkl6L3pwEvTmN/rYuNg+O9WuEw3lERdGIHo8TCCHM7tV3tgRmxhv9JVydxFx9MCkf1HH1iMSLy1kvnU/y3t126HYvXRil66PffPbwtyEUxc7M14P+pShsPtzamP/l51sPxrk8rvbyeDua7C46OZe5sHcywq93xz3WoxvvHTzixviHmOqovx70L07qbe2/APVgxAtnvwDhj+GtScxbFyflxeman4zrbFZ1tuePOfr9WbSH6+9Nx4uc8cgPZXFtEnPtxrtV8e6Nek0j7GXROS2LTn3+f1ed/3OdiydkEfZlceu0LG7tvwsuHLwz97KoztZxWfg5DXh+Ng/3Qkf6/71+94n9zmRM/wlt7eaJI/nHXfjhWo78e/GrSTH67+tPbtHfmcS8c3V2r0c61KK3TmvRW9MWffbkfv34Fn02/Dtc/8ffQ1gL16fBx/Qr4z62qvevB3rVaPubaoNv6nr/+YedsRDqkeah7M1V1+TVu5P++6uZmw+373+y8cnGZ53OrYXWT1ut253QGB9GXRx/VWbC5eM6KgBeFmnxbXRx9KeoKLLhL9qLi+3uaDWNizz5MC6ypZU0zgajtEhWu4OVNB4W+ShP8l618FG2lJZxuTYc5sUoXs6LeJiX2fp45pe4nvqlTPvdwShLymEv7ZZpnOSDUTcZxUtZmcTDtZ/3snI1LcYbl8M0yZazpDvK8kFc5mtFks7HcZmm+wKzpXQwypazanEQD4us3y1m4o/y3lo/nVtKy6TIhqN8ssNpXdlgOS/61W6PdOIA8LL6MoxnsIt+H0I9ld3unHZnXQjNU2Ke9zECAAcd7qWPzAO4yxwAAAAAAAAAAAAAAADwvOwfrvezekqf8w4EPLLQPNdW0ynUzrxV8+An9147Lvjtpz+cZ7kQQph99On96SQ8T7XD6UxML8JxPf1CFEJ4AdI4+R77rhaap1zKRr3+vFVUJ/f04NermO+1GQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM/lfAAAA//8RzIVU") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) creat(&(0x7f0000000200)='./file0/file1\x00', 0x288) 3m26.903699408s ago: executing program 1 (id=2706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 3m26.03629899s ago: executing program 1 (id=2722): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r1, 0x3, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x8400) 3m25.811046095s ago: executing program 34 (id=2722): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r1, 0x3, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x8400) 5.593843777s ago: executing program 0 (id=4792): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x2b, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11cc6437caa2dc891b724181fb42d00e3cefe6630aadee9a73a7095657dfccc791536fe9c5268be2bdd7a74"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 4.540019864s ago: executing program 0 (id=4802): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x57, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xc1, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x20, 0x3e, 0x28, {0x28, 0x3, "c26313852642792c3cbdeace918d0fb74237cc4b44b72bb0688881ce2a529736c3cb36cdb264"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 1.835912503s ago: executing program 2 (id=4832): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "ff"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) 1.685907997s ago: executing program 2 (id=4833): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) 1.543678551s ago: executing program 2 (id=4836): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/current_tracer\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.429889033s ago: executing program 2 (id=4839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000005000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 1.363348585s ago: executing program 2 (id=4840): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) 1.290688367s ago: executing program 6 (id=4841): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 1.223420169s ago: executing program 6 (id=4842): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c6e77c8285b061be4d1d842e4a63ec47a083470f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8cdc85b032f67dc95a947e63e3667ac2b1c953f5017b3cf2ce986800b84dcc3b33bfe950832606c010ac9f8a252454548986e9b7a88529e53efe01210aad5b2300137f1a62cd7a4a17b307956"], 0xff, 0x2a0, &(0x7f00000001c0)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) creat(&(0x7f0000000240)='./file1\x00', 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0xb) 1.17052772s ago: executing program 0 (id=4843): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 1.1704105s ago: executing program 7 (id=4844): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f00000006c0)='.\x00', 0xaa) read$FUSE(r0, 0x0, 0x0) 1.15876849s ago: executing program 5 (id=4845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000180000000000000001a0000000c000c400000000000000003"], 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.041764103s ago: executing program 7 (id=4846): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300d0000400ffff10ffffff08021100000050505050505000000010"], 0x44}}, 0x8000) 950.506336ms ago: executing program 5 (id=4847): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x1, {{0x2, 0x4e23, @multicast1}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) 598.646855ms ago: executing program 0 (id=4848): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x1, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000100)={0x17c04, 0xffffffffffffffff, 0x3003, 0xfff, 0x2b3, 0xa0}) 598.576765ms ago: executing program 5 (id=4849): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0x2710}, 0x10) 598.096195ms ago: executing program 6 (id=4850): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = dup2(r1, r0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x2}}, 0x18) 531.156936ms ago: executing program 7 (id=4851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01eeffffff0000000000020000000900020073797a32000000000900010073797a30000000000c000640000000000000000214"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 454.232588ms ago: executing program 5 (id=4852): r0 = socket$kcm(0x2b, 0x1, 0x0) listen(r0, 0x6) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) 386.0742ms ago: executing program 6 (id=4853): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x70bd22, 0x400000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}]}, 0x2c}}, 0x0) 385.97585ms ago: executing program 7 (id=4854): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="000000000902440000000000000000002040000000001000000000011fc7f3", 0x1f) 385.43792ms ago: executing program 2 (id=4855): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000800)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@dioread_nolock}, {@acl}, {@resuid}, {@errors_remount}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x7) 321.416802ms ago: executing program 0 (id=4856): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f00000006c0)='.\x00', 0xaa) read$FUSE(r0, 0x0, 0x0) 230.522944ms ago: executing program 5 (id=4857): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x1, 0x0, {0x4}}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x20) 228.433024ms ago: executing program 7 (id=4858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100), &(0x7f0000000140)=@udp=r1, 0x1}, 0x20) 182.510695ms ago: executing program 6 (id=4859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000dc0)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000e00)={@loopback, @loopback, @remote, 0x5, 0x7, 0x9, 0x100, 0x2b, 0x208, r2}) 134.393707ms ago: executing program 5 (id=4860): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000180)='T', 0x1, 0xe7c) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000d00)={0x9, 0x6, 0x5, 0x3ff}) 91.300278ms ago: executing program 0 (id=4861): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 90.286968ms ago: executing program 6 (id=4862): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000380)) 0s ago: executing program 7 (id=4863): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0x541b, 0x0) kernel console output (not intermixed with test programs): : ext4_journal_check_start:83: comm syz.5.4095: Detected aborted journal [ 449.073690][T15302] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4096: Detected aborted journal [ 449.097443][T15302] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4096: Detected aborted journal [ 449.126008][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.155627][T15305] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4097: Detected aborted journal [ 449.169677][T15301] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4095: Detected aborted journal [ 449.181883][T15288] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4090: Detected aborted journal [ 449.193557][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.226080][T15305] EXT4-fs: 217 callbacks suppressed [ 449.226100][T15305] EXT4-fs (sda1): Remounting filesystem read-only [ 449.249311][T15288] EXT4-fs (sda1): Remounting filesystem read-only [ 449.274984][T15300] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 449.283774][T15288] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4090: Detected aborted journal [ 449.299980][T15301] EXT4-fs (sda1): Remounting filesystem read-only [ 449.306595][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 449.307887][T15301] EXT4-fs (sda1): Remounting filesystem read-only [ 449.328039][T15288] EXT4-fs (sda1): Remounting filesystem read-only [ 449.335726][T15288] EXT4-fs (sda1): Remounting filesystem read-only [ 449.347342][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 449.353382][T15305] EXT4-fs (sda1): Remounting filesystem read-only [ 449.361394][T15288] EXT4-fs (sda1): Remounting filesystem read-only [ 449.368143][T15288] EXT4-fs (sda1): Remounting filesystem read-only [ 449.492600][T15300] EXT4-fs (loop7): Remounting filesystem read-only [ 449.786092][T15303] loop0: detected capacity change from 0 to 32768 [ 449.859340][T15322] loop7: detected capacity change from 0 to 16 [ 449.964710][T15322] erofs: (device loop7): mounted with root inode @ nid 36. [ 450.043102][T15322] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 450.095225][T15322] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 450.461883][ T4393] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 450.488043][T15341] loop7: detected capacity change from 0 to 1024 [ 450.788140][T15354] loop7: detected capacity change from 0 to 1024 [ 450.846848][ T4393] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.880605][T15354] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 450.888007][T15354] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 450.909225][ T4393] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.965112][ T4393] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 450.994932][ T4393] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.020414][ T4393] usb 7-1: config 0 descriptor?? [ 451.038552][T15354] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,quota,journal_dev=0x0000000000000007,nouid32,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 451.087093][T15354] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.320658][T15375] loop2: detected capacity change from 0 to 128 [ 451.434576][T15375] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 451.471996][T15375] hpfs: filesystem error: improperly stopped [ 451.499470][T15375] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 451.522196][T15375] hpfs: You really don't want any checks? You are crazy... [ 451.560225][T15375] hpfs: Code page index out of array [ 451.614150][T15375] hpfs: code page support is disabled [ 451.631144][T15375] hpfs: hpfs_map_4sectors(): unaligned read [ 451.646768][T15375] hpfs: hpfs_map_4sectors(): unaligned read [ 451.659386][T15375] hpfs: filesystem error: unable to find root dir [ 451.734430][T15375] hpfs: hpfs_map_4sectors(): unaligned read [ 451.740755][T15375] hpfs: hpfs_map_sector(): read error [ 451.841737][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.850669][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.876777][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.006800][ T4393] hid-led: probe of 0003:27B8:01ED.0024 failed with error -71 [ 452.035788][ T4393] usb 7-1: USB disconnect, device number 6 [ 452.301806][T15407] loop7: detected capacity change from 0 to 4096 [ 452.330599][T15409] loop5: detected capacity change from 0 to 1024 [ 452.397714][T15410] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 452.496417][T15407] NILFS (loop7): nilfs_palloc_freev (ino=3): entry number 1882 already freed [ 452.517414][T15407] NILFS (loop7): nilfs_sufile_do_free: segment 9 is already clean [ 452.702968][ T154] hfsplus: b-tree write err: -5, ino 25 [ 452.712253][ T154] hfsplus: b-tree write err: -5, ino 4 [ 452.723885][ T154] hfsplus: b-tree write err: -5, ino 2 [ 453.336530][T15429] loop6: detected capacity change from 0 to 128 [ 453.439509][T15429] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 453.476756][T15429] hpfs: filesystem error: improperly stopped [ 453.498418][T15429] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 453.506276][T15429] hpfs: You really don't want any checks? You are crazy... [ 453.551005][T15429] hpfs: Code page index out of array [ 453.565929][T15416] loop7: detected capacity change from 0 to 32768 [ 453.572564][T15429] hpfs: code page support is disabled [ 453.594549][T15429] hpfs: hpfs_map_4sectors(): unaligned read [ 453.600566][T15429] hpfs: hpfs_map_4sectors(): unaligned read [ 453.615184][T15429] hpfs: filesystem error: unable to find root dir [ 453.664136][T15429] hpfs: hpfs_map_4sectors(): unaligned read [ 453.680251][T15429] hpfs: hpfs_map_sector(): read error [ 453.732298][T15416] XFS (loop7): Mounting V5 Filesystem [ 453.933684][T15445] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 453.945759][T15416] XFS (loop7): Ending clean mount [ 454.034149][T15445] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,. Quota mode: none. [ 454.173202][T11581] XFS (loop7): Unmounting Filesystem [ 454.385282][ T4175] EXT4-fs error: 228 callbacks suppressed [ 454.385302][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 454.414706][T15453] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4157: Detected aborted journal [ 454.436020][T15455] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4158: Detected aborted journal [ 454.470190][T15456] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4159: Detected aborted journal [ 454.481512][T15455] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4158: Detected aborted journal [ 454.495273][T15455] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4158: Detected aborted journal [ 454.509263][T15453] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4157: Detected aborted journal [ 454.557016][T15455] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4158: Detected aborted journal [ 454.567874][T15453] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4157: Detected aborted journal [ 454.572022][T15455] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4158: Detected aborted journal [ 454.596130][T15437] set_capacity_and_notify: 1 callbacks suppressed [ 454.596150][T15437] loop0: detected capacity change from 0 to 32768 [ 454.616395][T15453] EXT4-fs: 212 callbacks suppressed [ 454.616414][T15453] EXT4-fs (sda1): Remounting filesystem read-only [ 454.628403][T15456] EXT4-fs (sda1): Remounting filesystem read-only [ 454.636686][T15455] EXT4-fs (sda1): Remounting filesystem read-only [ 454.645641][T15455] EXT4-fs (sda1): Remounting filesystem read-only [ 454.649937][T15453] EXT4-fs (sda1): Remounting filesystem read-only [ 454.656535][T15455] EXT4-fs (sda1): Remounting filesystem read-only [ 454.666324][T15456] EXT4-fs (sda1): Remounting filesystem read-only [ 454.667308][T15455] EXT4-fs (sda1): Remounting filesystem read-only [ 454.703156][T15456] EXT4-fs (sda1): Remounting filesystem read-only [ 454.704300][T15455] EXT4-fs (sda1): Remounting filesystem read-only [ 454.784812][T15458] device ipvlan0 entered promiscuous mode [ 454.822086][T15458] device ipvlan0 left promiscuous mode [ 454.879833][T15437] XFS (loop0): Mounting V5 Filesystem [ 455.188952][ T9755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.203054][T15437] XFS (loop0): Ending clean mount [ 455.241270][T15437] XFS (loop0): Quotacheck needed: Please wait. [ 455.262071][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.271069][ T4399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.412391][T15437] XFS (loop0): Quotacheck: Done. [ 455.470280][T15491] loop7: detected capacity change from 0 to 1024 [ 455.677009][ T4197] XFS (loop0): Unmounting Filesystem [ 455.814429][ T239] hfsplus: b-tree write err: -5, ino 25 [ 455.821553][ T239] hfsplus: b-tree write err: -5, ino 4 [ 455.827447][ T239] hfsplus: b-tree write err: -5, ino 2 [ 456.105304][T15476] loop5: detected capacity change from 0 to 32768 [ 456.310184][T15488] loop6: detected capacity change from 0 to 40427 [ 456.344072][T15505] device ipvlan0 entered promiscuous mode [ 456.370273][T15505] device ipvlan0 left promiscuous mode [ 456.372699][T15476] XFS (loop5): Mounting V5 Filesystem [ 456.416755][T15488] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 456.423631][T15488] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 456.474131][T15488] F2FS-fs (loop6): invalid crc value [ 456.565735][T15488] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 456.599619][T15476] XFS (loop5): Ending clean mount [ 456.640162][T15519] loop0: detected capacity change from 0 to 1024 [ 456.786603][ T4883] XFS (loop5): Unmounting Filesystem [ 456.889021][T15521] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 456.897834][T15521] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 456.989350][T15488] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 457.001731][T15488] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 457.167729][T15500] loop7: detected capacity change from 0 to 32768 [ 457.243513][ T9115] attempt to access beyond end of device [ 457.243513][ T9115] loop6: rw=2049, want=41000, limit=40427 [ 457.315728][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.337566][ T9755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.370863][ T4399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.402363][T15500] JBD2: Ignoring recovery information on journal [ 457.555278][T15500] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 457.606554][T15526] loop0: detected capacity change from 0 to 32768 [ 457.851458][T15533] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 457.879620][T15533] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 457.982079][T11581] ocfs2: Unmounting device (7,7) on (node local) [ 458.103104][T15540] loop5: detected capacity change from 0 to 1024 [ 458.196382][T15540] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 458.220507][T15540] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 458.306305][T15540] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,quota,journal_dev=0x0000000000000007,nouid32,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 458.340680][T15540] ext4 filesystem being mounted at /802/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.446783][T15546] device ipvlan0 entered promiscuous mode [ 458.546989][T15546] device ipvlan0 left promiscuous mode [ 458.700099][T15555] loop6: detected capacity change from 0 to 512 [ 458.786034][T15555] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 458.869421][T15560] loop0: detected capacity change from 0 to 512 [ 458.958805][ T144] tipc: Subscription rejected, illegal request [ 458.988865][T15555] EXT4-fs (loop6): 1 truncate cleaned up [ 459.009443][T15555] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 459.027005][ T26] audit: type=1800 audit(1785960561.501:80): pid=15560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4195" name="file1" dev="loop0" ino=1048799 res=0 errno=0 [ 459.168718][T15548] XFS (loop7): Mounting V5 Filesystem [ 459.498291][T15548] XFS (loop7): Ending clean mount [ 459.505324][T15548] XFS (loop7): Quotacheck needed: Please wait. [ 459.775893][T15572] JBD2: Ignoring recovery information on journal [ 459.805924][T15548] XFS (loop7): Quotacheck: Done. [ 459.876557][T15547] EXT4-fs error: 154 callbacks suppressed [ 459.876579][T15547] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4185: Detected aborted journal [ 459.939912][T15594] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4204: Detected aborted journal [ 459.942852][T15547] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4185: Detected aborted journal [ 459.984437][T15585] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4199: Detected aborted journal [ 460.007841][T15594] EXT4-fs: 142 callbacks suppressed [ 460.007858][T15594] EXT4-fs (sda1): Remounting filesystem read-only [ 460.008684][T15595] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4203: Detected aborted journal [ 460.035126][T15594] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4204: Detected aborted journal [ 460.060105][T15585] EXT4-fs (sda1): Remounting filesystem read-only [ 460.072327][T15547] EXT4-fs (sda1): Remounting filesystem read-only [ 460.089971][T15547] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4185: Detected aborted journal [ 460.118907][T15572] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 460.134173][T15547] EXT4-fs (sda1): Remounting filesystem read-only [ 460.141144][T15594] EXT4-fs (sda1): Remounting filesystem read-only [ 460.158222][T15547] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4185: Detected aborted journal [ 460.169789][T15595] EXT4-fs (sda1): Remounting filesystem read-only [ 460.178968][T15570] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4197: Detected aborted journal [ 460.188800][T15547] EXT4-fs (sda1): Remounting filesystem read-only [ 460.200591][T15570] EXT4-fs (sda1): Remounting filesystem read-only [ 460.209845][T15595] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4203: Detected aborted journal [ 460.215169][T15594] EXT4-fs (sda1): Remounting filesystem read-only [ 460.232528][T15585] EXT4-fs (sda1): Remounting filesystem read-only [ 460.344237][T11581] XFS (loop7): Unmounting Filesystem [ 460.524342][ T4883] ocfs2: Unmounting device (7,5) on (node local) [ 460.542220][T15604] set_capacity_and_notify: 2 callbacks suppressed [ 460.542238][T15604] loop0: detected capacity change from 0 to 512 [ 460.788643][ T2306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.828511][T15604] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 460.842737][T15604] ext4 filesystem being mounted at /794/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.923529][T15613] loop5: detected capacity change from 0 to 512 [ 461.053535][T15613] EXT4-fs (loop5): 1 truncate cleaned up [ 461.124491][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.149182][T15613] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 461.258416][ T26] audit: type=1800 audit(1785960563.587:81): pid=15619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4211" name="file1" dev="loop5" ino=13 res=0 errno=0 [ 461.419790][ T4271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.428865][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.590732][T15626] tun0: tun_chr_ioctl cmd 1074025681 [ 461.660744][T15628] loop6: detected capacity change from 0 to 1024 [ 461.765868][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.784104][T15628] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 461.863069][T15628] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,bsddf,nojournal_checksum,norecovery,dioread_nolock,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 462.088701][T15618] loop0: detected capacity change from 0 to 32768 [ 462.157663][T15637] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4230'. [ 462.229693][T15643] loop2: detected capacity change from 0 to 1024 [ 462.470032][T15643] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 462.494046][T15618] XFS (loop0): Mounting V5 Filesystem [ 462.622546][T15643] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,bsddf,nojournal_checksum,norecovery,dioread_nolock,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 462.730747][T15618] XFS (loop0): Ending clean mount [ 462.887117][ T4197] XFS (loop0): Unmounting Filesystem [ 462.929734][T15648] loop6: detected capacity change from 0 to 32768 [ 463.072896][T15648] JBD2: Ignoring recovery information on journal [ 463.259861][T15658] loop2: detected capacity change from 0 to 16 [ 463.293563][T15658] erofs: Unknown parameter '' [ 463.319769][T15648] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 463.475418][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.484952][ T9755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.507381][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.649467][ T9115] ocfs2: Unmounting device (7,6) on (node local) [ 463.649852][T15666] loop5: detected capacity change from 0 to 512 [ 463.807353][T15666] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 463.870977][T15666] ext4 filesystem being mounted at /809/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.413642][T15680] loop2: detected capacity change from 0 to 32768 [ 464.556761][T15669] loop7: detected capacity change from 0 to 40427 [ 464.586138][T15680] XFS (loop2): Mounting V5 Filesystem [ 464.673330][T15669] F2FS-fs (loop7): build fault injection attr: rate: 14, type: 0x1ffff [ 464.703069][T15680] XFS (loop2): Ending clean mount [ 464.713988][T15680] XFS (loop2): Quotacheck needed: Please wait. [ 464.720862][T15669] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0xe4 [ 464.759256][T15669] F2FS-fs (loop7): invalid crc value [ 464.834441][T15669] F2FS-fs (loop7): Found nat_bits in checkpoint [ 464.931539][T15680] XFS (loop2): Quotacheck: Done. [ 465.016704][T15669] F2FS-fs (loop7) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 465.082963][ T4190] XFS (loop2): Unmounting Filesystem [ 465.129734][T15669] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 465.244598][T15668] EXT4-fs error: 151 callbacks suppressed [ 465.244621][T15668] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4226: Detected aborted journal [ 465.332241][T15668] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4226: Detected aborted journal [ 465.354438][T15668] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4226: Detected aborted journal [ 465.391584][T15668] EXT4-fs: 140 callbacks suppressed [ 465.391602][T15668] EXT4-fs (sda1): Remounting filesystem read-only [ 465.452250][T15668] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4226: Detected aborted journal [ 465.495025][T15668] EXT4-fs (sda1): Remounting filesystem read-only [ 465.501615][T15668] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4226: Detected aborted journal [ 465.526598][T15689] XFS (loop5): Mounting V5 Filesystem [ 465.622308][T15668] EXT4-fs (sda1): Remounting filesystem read-only [ 465.635016][T15689] XFS (loop5): Ending clean mount [ 465.659220][T15688] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4236: Detected aborted journal [ 465.696034][T15688] EXT4-fs (sda1): Remounting filesystem read-only [ 465.703127][T15668] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4226: Detected aborted journal [ 465.716743][T15688] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4236: Detected aborted journal [ 465.748203][T15668] EXT4-fs (sda1): Remounting filesystem read-only [ 465.755638][T15668] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4226: Detected aborted journal [ 465.769731][T15668] EXT4-fs (sda1): Remounting filesystem read-only [ 465.776891][T15668] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4226: Detected aborted journal [ 465.790328][T15668] EXT4-fs (sda1): Remounting filesystem read-only [ 465.795102][T15688] EXT4-fs (sda1): Remounting filesystem read-only [ 465.799491][T15668] EXT4-fs (sda1): Remounting filesystem read-only [ 465.821803][T15668] EXT4-fs (sda1): Remounting filesystem read-only [ 465.961653][T15704] XFS (loop6): Mounting V5 Filesystem [ 466.159454][ T4883] XFS (loop5): Unmounting Filesystem [ 466.185496][T15704] XFS (loop6): Ending clean mount [ 466.274558][T15704] XFS (loop6): Quotacheck needed: Please wait. [ 466.319081][T15727] set_capacity_and_notify: 2 callbacks suppressed [ 466.319099][T15727] loop0: detected capacity change from 0 to 128 [ 466.526037][T15704] XFS (loop6): Quotacheck: Done. [ 466.678751][T15731] loop0: detected capacity change from 0 to 512 [ 466.752335][T15731] EXT4-fs (loop0): Ignoring removed bh option [ 466.783335][ T9115] XFS (loop6): Unmounting Filesystem [ 466.809266][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.922212][T15731] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.4244: inode #13: comm syz.0.4244: iget: illegal inode # [ 466.965401][T15731] EXT4-fs (loop0): Remounting filesystem read-only [ 466.997806][T15731] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.4244: couldn't read orphan inode 13 (err -117) [ 467.026415][T15731] EXT4-fs (loop0): Remounting filesystem read-only [ 467.081140][T15731] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,i_version,stripe=0x00000000000000f0,journal_ioprio=0x0000000000000001,bh,noblock_validity,. Quota mode: none. [ 467.182751][ T239] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 467.182885][T15731] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.4244: deleted inode referenced: 15 [ 467.245972][T15743] EXT4-fs error (device loop0): ext4_resize_begin:61: comm syz.0.4244: resize_inode disabled but reserved GDT blocks non-zero [ 467.320848][T15731] EXT4-fs (loop0): Remounting filesystem read-only [ 467.360352][T15743] EXT4-fs (loop0): Remounting filesystem read-only [ 467.416312][T15749] loop7: detected capacity change from 0 to 256 [ 467.543018][T15749] FAT-fs (loop7): Directory bread(block 64) failed [ 467.553357][T15755] loop5: detected capacity change from 0 to 256 [ 467.573106][T15749] FAT-fs (loop7): Directory bread(block 65) failed [ 467.581445][ T4271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.591099][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.629064][T15749] FAT-fs (loop7): Directory bread(block 66) failed [ 467.636570][T15749] FAT-fs (loop7): Directory bread(block 67) failed [ 467.650385][T15749] FAT-fs (loop7): Directory bread(block 68) failed [ 467.654380][T15755] exfat: Deprecated parameter 'utf8' [ 467.660781][T15749] FAT-fs (loop7): Directory bread(block 69) failed [ 467.674575][T15755] exfat: Deprecated parameter 'utf8' [ 467.681811][T15749] FAT-fs (loop7): Directory bread(block 70) failed [ 467.690024][T15756] [U] ^H^C [ 467.692904][T15749] FAT-fs (loop7): Directory bread(block 71) failed [ 467.712527][T15749] FAT-fs (loop7): Directory bread(block 72) failed [ 467.732834][T15755] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 467.745531][T15749] FAT-fs (loop7): Directory bread(block 73) failed [ 467.823144][ T4399] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 467.936037][T15761] loop6: detected capacity change from 0 to 128 [ 467.984464][T15761] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 468.040031][T15761] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 468.201371][ T154] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 468.244780][T15768] loop7: detected capacity change from 0 to 256 [ 468.389848][ T4399] usb 3-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice= 0.00 [ 468.405736][ T4399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.466454][ T4399] usb 3-1: Product: syz [ 468.481422][ T4399] usb 3-1: Manufacturer: syz [ 468.500532][ T4399] usb 3-1: SerialNumber: syz [ 468.564320][ T4399] smsusb:smsusb_probe: board id=2, interface number 0 [ 468.623516][ T4399] smsusb:siano_media_device_register: media controller created [ 468.948925][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.959754][ T2306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.969247][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.988921][ T4240] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 469.265749][T15795] loop5: detected capacity change from 0 to 128 [ 469.310959][T15795] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 469.345327][T15795] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 469.464868][ T144] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 469.491470][ T4240] usb 8-1: unable to get BOS descriptor or descriptor too short [ 469.624965][ T4240] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.660557][ T4240] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 469.684590][ T4240] usb 8-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 469.697312][ T4240] usb 8-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 469.748271][ T4240] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 469.764645][ T4240] usb 8-1: config 1 interface 1 has no altsetting 0 [ 469.814483][ T4399] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -110 [ 469.852847][ T4399] smsmdtv:smscore_set_device_mode: mode detect failed -110 [ 469.877156][ T4399] smsmdtv:smscore_start_device: set device mode failed , rc -110 [ 469.898250][ T4399] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 469.918348][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 469.939727][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 469.961104][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 469.982502][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 470.003848][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 470.025304][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 470.046651][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 470.062367][T15809] loop0: detected capacity change from 0 to 8192 [ 470.069140][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 470.089406][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 470.091394][ T4240] usb 8-1: string descriptor 0 read error: -22 [ 470.109811][ T4240] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 470.110919][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 470.122695][ T4240] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.143502][ T4399] smsusb:smsusb_probe: Device initialized with return code -110 [ 470.183405][ T4399] smsusb: probe of 3-1:1.0 failed with error -110 [ 470.202648][T15809] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 470.229163][ T4399] usb 3-1: USB disconnect, device number 24 [ 470.229186][T15809] REISERFS (device loop0): using ordered data mode [ 470.249819][T15809] reiserfs: using flush barriers [ 470.256266][T15809] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 470.291485][T15809] REISERFS (device loop0): checking transaction log (loop0) [ 470.443022][ T4240] usb 8-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 470.482548][ T4240] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 470.573104][T15809] REISERFS (device loop0): Using tea hash to sort names [ 470.582452][T15809] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 470.596452][T15824] loop6: detected capacity change from 0 to 256 [ 470.620377][T15808] EXT4-fs error: 158 callbacks suppressed [ 470.620395][T15808] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4278: Detected aborted journal [ 470.672146][T15824] exfat: Deprecated parameter 'namecase' [ 470.693892][T15808] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4278: Detected aborted journal [ 470.705812][T15808] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4278: Detected aborted journal [ 470.717295][T15808] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4278: Detected aborted journal [ 470.734929][T15808] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4278: Detected aborted journal [ 470.756109][T15808] EXT4-fs: 144 callbacks suppressed [ 470.756135][T15808] EXT4-fs (sda1): Remounting filesystem read-only [ 470.768210][T15808] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4278: Detected aborted journal [ 470.779013][T15779] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4264: Detected aborted journal [ 470.798040][T15824] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 470.818081][T15779] EXT4-fs (sda1): Remounting filesystem read-only [ 470.839687][T15808] EXT4-fs (sda1): Remounting filesystem read-only [ 470.845850][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 470.846550][T15808] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4278: Detected aborted journal [ 470.875344][T15812] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4280: Detected aborted journal [ 470.908886][T15823] EXT4-fs (sda1): Remounting filesystem read-only [ 470.911664][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 470.916404][T15812] EXT4-fs (sda1): Remounting filesystem read-only [ 470.942345][T15823] EXT4-fs (sda1): Remounting filesystem read-only [ 470.954560][T15808] EXT4-fs (sda1): Remounting filesystem read-only [ 470.963151][T15808] EXT4-fs (sda1): Remounting filesystem read-only [ 470.976086][T15823] EXT4-fs (sda1): Remounting filesystem read-only [ 471.071879][T15831] loop2: detected capacity change from 0 to 128 [ 471.105771][ T4240] usb 8-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 471.159174][ T4240] usb 8-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4 [ 471.175396][ T4240] usb 8-1: USB disconnect, device number 14 [ 471.183246][T15831] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 471.244129][T15831] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 471.336294][ T154] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 471.375517][T15833] [U] ^H^C [ 471.523809][ T6305] udevd[6305]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.659964][T15841] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.4302: missing EA_INODE flag [ 471.737136][T15841] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.4302: error while reading EA inode 12 err=-117 [ 471.769764][T15841] EXT4-fs (loop0): 1 orphan inode deleted [ 471.775578][T15841] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 471.834030][T15850] set_capacity_and_notify: 1 callbacks suppressed [ 471.834048][T15850] loop6: detected capacity change from 0 to 512 [ 472.071436][T15850] EXT4-fs (loop6): 1 orphan inode deleted [ 472.099460][T15850] EXT4-fs (loop6): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 472.121039][T15850] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.206166][ T4399] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 472.208254][ T4776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.294895][T15864] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 472.419605][T15867] loop0: detected capacity change from 0 to 128 [ 472.477124][T15867] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 472.528226][T15867] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 472.645441][ T239] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 472.762467][ T4399] usb 6-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice= 0.00 [ 472.771601][ T4399] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.799420][ T4399] usb 6-1: Product: syz [ 472.825701][ T4399] usb 6-1: Manufacturer: syz [ 472.831601][ T4399] usb 6-1: SerialNumber: syz [ 472.892443][ T4399] smsusb:smsusb_probe: board id=2, interface number 0 [ 472.948201][ T4399] smsusb:siano_media_device_register: media controller created [ 472.996650][T15885] loop7: detected capacity change from 0 to 128 [ 473.138899][T15885] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 473.156697][T15885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 473.205025][T15893] loop0: detected capacity change from 0 to 512 [ 473.222450][ T4240] Bluetooth: hci1: command 0x0406 tx timeout [ 473.318333][T15893] EXT4-fs (loop0): Ignoring removed bh option [ 473.388917][T15898] loop7: detected capacity change from 0 to 512 [ 473.408605][T15893] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4312: invalid indirect mapped block 256 (level 2) [ 473.451382][T15893] EXT4-fs (loop0): 2 truncates cleaned up [ 473.457344][T15893] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,bh,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 473.503899][T15893] fscrypt (loop0, inode 18): Direct key flag not allowed with different contents and filenames modes [ 473.578458][T15898] EXT4-fs (loop7): 1 orphan inode deleted [ 473.618192][T15898] EXT4-fs (loop7): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 473.686850][T15898] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.736404][ T239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.745269][ T4397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.094279][ T4399] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -110 [ 474.115218][ T4399] smsmdtv:smscore_set_device_mode: mode detect failed -110 [ 474.128657][T15911] loop0: detected capacity change from 0 to 512 [ 474.130235][ T4399] smsmdtv:smscore_start_device: set device mode failed , rc -110 [ 474.139700][T15896] loop2: detected capacity change from 0 to 40427 [ 474.172202][ T4399] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 474.220902][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 474.242631][T15896] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 474.255682][T15896] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 474.258889][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 474.280092][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 474.301502][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 474.322879][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 474.344232][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 474.359583][T15896] F2FS-fs (loop2): invalid crc value [ 474.365620][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 474.379676][T15911] EXT4-fs (loop0): 1 orphan inode deleted [ 474.386999][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 474.405436][T15911] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 474.420609][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 474.440454][ C1] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 474.454920][ T4399] smsusb:smsusb_probe: Device initialized with return code -110 [ 474.459533][T15911] ext4 filesystem being mounted at /823/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.503075][T15896] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 474.514669][ T4399] smsusb: probe of 6-1:1.0 failed with error -110 [ 474.530824][ T4399] usb 6-1: USB disconnect, device number 23 [ 474.737643][T15896] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 474.763796][T15896] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 474.799485][T15929] loop7: detected capacity change from 0 to 512 [ 474.901207][ T4190] attempt to access beyond end of device [ 474.901207][ T4190] loop2: rw=2049, want=45104, limit=40427 [ 475.108687][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.117918][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.157489][ T4393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.187986][T15939] loop7: detected capacity change from 0 to 256 [ 475.275235][T15939] exfat: Deprecated parameter 'namecase' [ 475.280990][T15939] exfat: Deprecated parameter 'namecase' [ 475.325172][T15939] exfat: Deprecated parameter 'utf8' [ 475.373424][T15939] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 475.537276][T15945] Line length is too long: Should be less than 4094 [ 475.930412][T15961] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4340'. [ 475.970282][T15960] EXT4-fs error: 196 callbacks suppressed [ 475.970301][T15960] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4340: Detected aborted journal [ 475.989742][T15962] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4341: Detected aborted journal [ 476.004493][T15964] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4342: Detected aborted journal [ 476.019125][T15965] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4343: Detected aborted journal [ 476.045377][T15962] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4341: Detected aborted journal [ 476.057362][T15964] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4342: Detected aborted journal [ 476.069556][T15965] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4343: Detected aborted journal [ 476.092095][T15964] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4342: Detected aborted journal [ 476.125261][T15968] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4344: Detected aborted journal [ 476.137287][T15968] EXT4-fs: 182 callbacks suppressed [ 476.137306][T15968] EXT4-fs (sda1): Remounting filesystem read-only [ 476.155930][T15968] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4344: Detected aborted journal [ 476.172898][T15962] EXT4-fs (sda1): Remounting filesystem read-only [ 476.173170][T15964] EXT4-fs (sda1): Remounting filesystem read-only [ 476.182061][T15962] EXT4-fs (sda1): Remounting filesystem read-only [ 476.193311][T15968] EXT4-fs (sda1): Remounting filesystem read-only [ 476.203242][T15962] EXT4-fs (sda1): Remounting filesystem read-only [ 476.211274][T15968] EXT4-fs (sda1): Remounting filesystem read-only [ 476.222342][T15969] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4344'. [ 476.243730][T15966] overlayfs: unrecognized mount option "/ workingset_restore_anon 8 [ 476.243730][T15966] workingset_restore_file 0 [ 476.243730][T15966] workingset_nodereclaim 0 [ 476.243730][T15966] nr_anon_pages 7465 [ 476.243730][T15966] nr_mapped 30382 [ 476.243730][T15966] nr_file_pages 48793 [ 476.243730][T15966] nr_dirty 659 [ 476.243730][T15966] nr_writeback 0 [ 476.243730][T15966] nr_writeback_temp 0 [ 476.243730][T15966] nr_shmem 4674 [ 476.243730][T15966] nr_shmem_hugepages 0 [ 476.243730][T15966] nr_shmem_pmdmapped 0 [ 476.243730][T15966] nr_file_hugepages 0 [ 476.243730][T15966] nr_file_pmdmapped 0 [ 476.243730][T15966] nr_anon_transparent_hugepages 0 [ 476.243730][T15966] nr_vmscan_write 765 [ 476.243730][T15966] nr_vmscan_immediate_reclaim 0 [ 476.243730][T15966] nr_dirtied 11206 [ 476.243730][T15966] nr_written 11216 [ 476.255069][T15936] loop0: detected capacity change from 0 to 32768 [ 476.358319][T15969] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4344'. [ 476.368799][T15968] EXT4-fs (sda1): Remounting filesystem read-only [ 476.376748][T15964] EXT4-fs (sda1): Remounting filesystem read-only [ 476.388514][T15968] EXT4-fs (sda1): Remounting filesystem read-only [ 476.432224][T15936] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.4329 (15936) [ 476.469259][T15936] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 476.500199][T15936] BTRFS info (device loop0): using free space tree [ 476.512261][T15936] BTRFS info (device loop0): has skinny extents [ 476.532092][T15975] overlayfs: unrecognized mount option "/ workingset_restore_anon 8 [ 476.532092][T15975] workingset_restore_file 0 [ 476.532092][T15975] workingset_nodereclaim 0 [ 476.532092][T15975] nr_anon_pages 7365 [ 476.532092][T15975] nr_mapped 30382 [ 476.532092][T15975] nr_file_pages 49393 [ 476.532092][T15975] nr_dirty 659 [ 476.532092][T15975] nr_writeback 0 [ 476.532092][T15975] nr_writeback_temp 0 [ 476.532092][T15975] nr_shmem 5249 [ 476.532092][T15975] nr_shmem_hugepages 0 [ 476.532092][T15975] nr_shmem_pmdmapped 0 [ 476.532092][T15975] nr_file_hugepages 0 [ 476.532092][T15975] nr_file_pmdmapped 0 [ 476.532092][T15975] nr_anon_transparent_hugepages 0 [ 476.532092][T15975] nr_vmscan_write 765 [ 476.532092][T15975] nr_vmscan_immediate_reclaim 0 [ 476.532092][T15975] nr_dirtied 11206 [ 476.532092][T15975] nr_written 11216 [ 476.696396][ T4399] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 476.816512][T15989] udevd[15989]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 476.914345][T15998] udevd[15998]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 476.992266][T16002] Line length is too long: Should be less than 4094 [ 477.017628][T15936] BTRFS info (device loop0): enabling ssd optimizations [ 477.083754][ T4399] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 477.105496][ T4399] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.123244][ T4399] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 477.144620][ T4399] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.311692][T16015] udevd[16015]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 477.335236][ T4237] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 477.470093][ T4399] usb 8-1: GET_CAPABILITIES returned 0 [ 477.475857][ T4399] usbtmc 8-1:16.0: can't read capabilities [ 477.665468][ T4237] usb 7-1: Using ep0 maxpacket: 32 [ 477.769116][ T4241] usb 8-1: USB disconnect, device number 15 [ 477.819031][ T4237] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.854840][ T4237] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.012075][ T4237] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 478.030389][ T4237] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 478.069264][ T4237] usb 7-1: Product: syz [ 478.103447][ T4237] usb 7-1: Manufacturer: syz [ 478.183926][ T4237] hub 7-1:4.0: USB hub found [ 478.233147][T16044] loop5: detected capacity change from 0 to 736 [ 478.459873][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.503478][ T4237] hub 7-1:4.0: 7 ports detected [ 478.525042][ T4237] hub 7-1:4.0: insufficient power available to use all downstream ports [ 478.568187][T16054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4373'. [ 478.655563][T16058] loop7: detected capacity change from 0 to 16 [ 478.729454][T16058] erofs: (device loop7): mounted with root inode @ nid 36. [ 478.738381][ T4237] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 478.744937][ T4237] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 478.825837][ T4237] usb 7-1: USB disconnect, device number 7 [ 479.120167][T16046] loop2: detected capacity change from 0 to 32768 [ 479.163513][T16046] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.4369 (16046) [ 479.241319][T16046] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 479.258083][T16046] BTRFS info (device loop2): setting nodatasum [ 479.311412][T16046] BTRFS info (device loop2): force zlib compression, level 3 [ 479.337377][T16046] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 479.347861][T16068] udevd[16068]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 479.375123][T16046] BTRFS info (device loop2): use lzo compression, level 0 [ 479.421947][T16046] BTRFS info (device loop2): turning on flush-on-commit [ 479.467132][T16046] BTRFS info (device loop2): enabling auto defrag [ 479.474139][T16046] BTRFS info (device loop2): max_inline at 4096 [ 479.507713][T16046] BTRFS info (device loop2): using free space tree [ 479.532439][T16046] BTRFS info (device loop2): has skinny extents [ 479.675647][T16056] loop0: detected capacity change from 0 to 40427 [ 479.687607][T16083] loop7: detected capacity change from 0 to 1024 [ 479.760614][T16046] BTRFS info (device loop2): enabling ssd optimizations [ 479.769877][T16056] F2FS-fs (loop0): invalid crc value [ 479.836882][T16056] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 479.893879][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.909155][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.965750][T16103] loop6: detected capacity change from 0 to 2048 [ 480.090537][T16103] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 480.179274][T16111] udevd[16111]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 480.204795][T16103] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.240157][T16110] loop7: detected capacity change from 0 to 736 [ 480.263132][T16056] F2FS-fs (loop0): Start checkpoint disabled! [ 480.330519][T16103] fs-verity: sha512 using implementation "sha512-avx2" [ 480.404536][T16056] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e7 [ 480.487338][T16056] attempt to access beyond end of device [ 480.487338][T16056] loop0: rw=2049, want=45104, limit=40427 [ 481.063230][ T3078] attempt to access beyond end of device [ 481.063230][ T3078] loop0: rw=2049, want=45112, limit=40427 [ 481.084428][ T6305] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (6305) [ 481.238574][T16118] udevd[16118]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 481.261549][ T239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.275013][ T9755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.287047][T16120] loop6: detected capacity change from 0 to 256 [ 481.298890][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.338814][T16121] EXT4-fs error: 183 callbacks suppressed [ 481.338832][T16121] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4392: Detected aborted journal [ 481.403840][T16120] exfat: Deprecated parameter 'utf8' [ 481.409449][T16120] exfat: Deprecated parameter 'utf8' [ 481.422393][T16123] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4393: Detected aborted journal [ 481.459374][T16121] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4392: Detected aborted journal [ 481.488569][T16120] exfat: Deprecated parameter 'namecase' [ 481.490949][T16123] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4393: Detected aborted journal [ 481.553713][T16120] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 481.560888][T16123] EXT4-fs: 154 callbacks suppressed [ 481.560939][T16123] EXT4-fs (sda1): Remounting filesystem read-only [ 481.578464][T16121] EXT4-fs (sda1): Remounting filesystem read-only [ 481.597941][T16119] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4389: Detected aborted journal [ 481.614925][T16123] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4393: Detected aborted journal [ 481.615304][T16119] EXT4-fs (sda1): Remounting filesystem read-only [ 481.639324][T16122] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4392'. [ 481.646845][T16123] EXT4-fs (sda1): Remounting filesystem read-only [ 481.657056][T16123] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4393: Detected aborted journal [ 481.669801][T16119] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4389: Detected aborted journal [ 481.713525][T16119] EXT4-fs (sda1): Remounting filesystem read-only [ 481.727490][T16123] EXT4-fs (sda1): Remounting filesystem read-only [ 481.738029][T16119] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4389: Detected aborted journal [ 481.759039][T16123] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4393: Detected aborted journal [ 481.775858][T16119] EXT4-fs (sda1): Remounting filesystem read-only [ 481.782471][T16123] EXT4-fs (sda1): Remounting filesystem read-only [ 481.789668][T16119] EXT4-fs (sda1): Remounting filesystem read-only [ 481.807884][T16123] EXT4-fs (sda1): Remounting filesystem read-only [ 481.986879][T16133] vxcan0: tx address claim with dest, not broadcast [ 482.059286][T16135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.111342][ T26] audit: type=1800 audit(1785960583.090:82): pid=16137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4397" name="addr_trsvcid" dev="configfs" ino=70737 res=0 errno=0 [ 482.207505][T16141] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 482.229991][T16142] loop2: detected capacity change from 0 to 256 [ 482.291586][T16142] FAT-fs (loop2): Unrecognized mount option "i0²sj#PêäJTÊ /—™s4êI‚¨’" or missing value [ 482.309549][T16141] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 482.358063][T16146] loop0: detected capacity change from 0 to 256 [ 482.519449][T16142] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4401'. [ 482.780110][ T9755] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 483.074839][T16155] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 483.094057][T16155] REISERFS (device loop7): using ordered data mode [ 483.106216][T16155] reiserfs: using flush barriers [ 483.116775][T16155] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 483.142414][T16155] REISERFS (device loop7): checking transaction log (loop7) [ 483.154762][T16155] REISERFS (device loop7): Using r5 hash to sort names [ 483.162308][T16155] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 483.233494][T16155] REISERFS warning (device loop7): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=522, len=13 - odd [ 483.247152][ T9755] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 483.271626][ T9755] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.304030][ T9755] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 483.313163][ T9755] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.366053][ T9755] usb 7-1: config 0 descriptor?? [ 483.695014][ T26] audit: type=1800 audit(1785960584.577:83): pid=16175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4415" name="addr_trsvcid" dev="configfs" ino=69960 res=0 errno=0 [ 483.795043][T16179] set_capacity_and_notify: 1 callbacks suppressed [ 483.795063][T16179] loop2: detected capacity change from 0 to 256 [ 483.841580][T16181] vxcan0: tx address claim with dest, not broadcast [ 483.873554][T16179] exfat: Deprecated parameter 'utf8' [ 483.879020][T16179] exfat: Deprecated parameter 'utf8' [ 483.899807][T16179] exfat: Deprecated parameter 'namecase' [ 483.964485][T16183] loop7: detected capacity change from 0 to 22 [ 483.976274][T16179] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 484.017573][T16183] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 484.049058][T16183] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 484.126899][ T9755] usb 7-1: language id specifier not provided by device, defaulting to English [ 484.234422][T16188] [U] ^A [ 484.394285][ T9755] uclogic 0003:256C:006D.0025: failed retrieving Huion firmware version: -71 [ 484.403404][ T9755] uclogic 0003:256C:006D.0025: failed probing parameters: -71 [ 484.449974][ T9755] uclogic: probe of 0003:256C:006D.0025 failed with error -71 [ 484.478139][T16192] loop0: detected capacity change from 0 to 4096 [ 484.493561][ T9755] usb 7-1: USB disconnect, device number 8 [ 484.541258][T16192] EXT4-fs (loop0): Mount option "dioread_lock" incompatible with ext2 [ 484.597409][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.057144][T16221] loop6: detected capacity change from 0 to 1024 [ 485.191951][T16221] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 2: comm syz.6.4436: lblock 2 mapped to illegal pblock 2 (length 1) [ 485.249298][T16221] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 485.257871][T16221] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 48: comm syz.6.4436: lblock 0 mapped to illegal pblock 48 (length 1) [ 485.257894][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4443'. [ 485.298060][T16221] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 485.331619][T16221] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.4436: Failed to acquire dquot type 0 [ 485.367666][T16221] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 485.403035][T16221] EXT4-fs error (device loop6): ext4_evict_inode:284: inode #11: comm syz.6.4436: mark_inode_dirty error [ 485.415895][T16221] EXT4-fs warning (device loop6): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 485.427535][T16221] EXT4-fs (loop6): 1 orphan inode deleted [ 485.443436][T16221] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 485.463551][ T4237] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 485.509415][ T144] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 485.587639][ T144] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 485.611367][ T144] EXT4-fs error (device loop6): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 485.641566][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4445'. [ 485.694786][ T239] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 485.714971][ T239] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 485.726359][ T239] EXT4-fs error (device loop6): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 485.735078][T16239] device hsr0 entered promiscuous mode [ 485.746050][ T9115] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 485.760775][ T9115] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 485.762810][ T4237] usb 6-1: Using ep0 maxpacket: 32 [ 485.776014][ T9115] EXT4-fs error (device loop6): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 485.922561][ T4237] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.943353][ T4237] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.975347][ T4237] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 485.995911][T16219] loop0: detected capacity change from 0 to 40427 [ 486.002565][ T4237] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.040748][ T4237] usb 6-1: config 0 descriptor?? [ 486.085123][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.096278][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.120838][T16219] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 486.149678][T16219] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 486.177465][T16219] F2FS-fs (loop0): invalid crc value [ 486.219427][T16219] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 486.231338][T16247] loop7: detected capacity change from 0 to 8192 [ 486.280236][ T7583] loop7: p1 p2 p3 p4 [ 486.284955][ T7583] loop7: p1 start 51379968 is beyond EOD, truncated [ 486.308325][ T7583] loop7: p3 size 100663552 extends beyond EOD, truncated [ 486.319241][ T7583] loop7: p4 size 81920 extends beyond EOD, truncated [ 486.374308][T16247] loop7: p1 p2 p3 p4 [ 486.393334][T16247] loop7: p1 start 51379968 is beyond EOD, truncated [ 486.433841][ T9755] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 486.448016][T16219] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 486.464379][T16219] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 486.489706][T16247] loop7: p3 size 100663552 extends beyond EOD, truncated [ 486.532896][T16247] loop7: p4 size 81920 extends beyond EOD, truncated [ 486.555806][ T4237] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 486.575119][ T4237] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 486.603681][ T4237] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 486.626343][ T4237] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 486.642881][T16257] loop6: detected capacity change from 0 to 8192 [ 486.652101][ T4197] attempt to access beyond end of device [ 486.652101][ T4197] loop0: rw=2049, want=45104, limit=40427 [ 486.660938][ T4237] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 486.699701][T16259] EXT4-fs error: 181 callbacks suppressed [ 486.699717][T16259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4453: Detected aborted journal [ 486.724821][ T4237] koneplus 0003:1E7D:2D51.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 486.743376][T16257] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 486.756995][T16257] REISERFS (device loop6): using ordered data mode [ 486.767399][T16259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4453: Detected aborted journal [ 486.781254][T16257] reiserfs: using flush barriers [ 486.805252][T16259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4453: Detected aborted journal [ 486.825475][T16257] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 486.867365][ T6305] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 486.895675][T16259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4453: Detected aborted journal [ 486.909307][T16257] REISERFS (device loop6): checking transaction log (loop6) [ 486.918021][ T9755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 486.918671][ T6305] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 486.945014][T16257] REISERFS (device loop6): Using r5 hash to sort names [ 486.952492][T16259] EXT4-fs: 164 callbacks suppressed [ 486.952509][T16259] EXT4-fs (sda1): Remounting filesystem read-only [ 486.960996][ T9755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.966036][ T6305] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 486.986695][T16257] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 487.001241][T16257] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 487.023980][ T9755] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 487.050978][ T9755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.062427][ T6305] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 487.086544][ T4591] udevd[4591]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 487.086924][ T7583] udevd[7583]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 487.122297][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 487.132107][ T9755] usb 3-1: config 0 descriptor?? [ 487.137808][ T4777] usb 6-1: USB disconnect, device number 24 [ 487.167173][ T6305] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 487.184822][T16256] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4451: Detected aborted journal [ 487.206503][T16256] EXT4-fs (sda1): Remounting filesystem read-only [ 487.262413][ T4284] udevd[4284]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 487.273537][ T6305] udevd[6305]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 487.293836][ T7583] udevd[7583]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 487.328037][T16261] udevd[16261]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 487.329725][T16262] EXT4-fs (sda1): Remounting filesystem read-only [ 487.349274][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 487.403655][T16248] EXT4-fs (sda1): Remounting filesystem read-only [ 487.426153][T16248] EXT4-fs (sda1): Remounting filesystem read-only [ 487.439323][T16262] EXT4-fs (sda1): Remounting filesystem read-only [ 487.454519][T16262] EXT4-fs (sda1): Remounting filesystem read-only [ 487.461350][T16248] EXT4-fs (sda1): Remounting filesystem read-only [ 487.537342][T16264] EXT4-fs (sda1): Remounting filesystem read-only [ 487.772897][T16272] kAFS: Invalid Command on /proc/fs/afs/cells file [ 487.828453][T16274] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 487.860416][ T4777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.905328][T16274] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 487.986365][ T9755] usb 3-1: language id specifier not provided by device, defaulting to English [ 488.243233][ T9755] uclogic 0003:256C:006D.0027: failed retrieving Huion firmware version: -71 [ 488.259808][ T9755] uclogic 0003:256C:006D.0027: failed probing parameters: -71 [ 488.269598][ T9755] uclogic: probe of 0003:256C:006D.0027 failed with error -71 [ 488.305388][ T9755] usb 3-1: USB disconnect, device number 25 [ 488.422326][T16297] kvm [16295]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010007 data 0x5 [ 488.456004][T16022] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 488.601650][T16284] loop0: detected capacity change from 0 to 32768 [ 488.641533][T16298] loop5: detected capacity change from 0 to 8192 [ 488.719283][T16298] loop5: p1 p2 p3 p4 [ 488.723898][T16298] loop5: p1 start 51379968 is beyond EOD, truncated [ 488.733632][T16298] loop5: p3 size 100663552 extends beyond EOD, truncated [ 488.771699][T16284] JBD2: Ignoring recovery information on journal [ 488.824022][T16298] loop5: p4 size 81920 extends beyond EOD, truncated [ 488.840821][T16022] usb 7-1: config 6 has an invalid interface number: 156 but max is 0 [ 488.856963][T16022] usb 7-1: config 6 has no interface number 0 [ 488.863829][T16022] usb 7-1: config 6 interface 156 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 488.875229][T16022] usb 7-1: config 6 interface 156 has no altsetting 0 [ 488.897768][T16284] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 489.026498][T16317] loop7: detected capacity change from 0 to 512 [ 489.044158][T16022] usb 7-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=65.2c [ 489.087481][T16317] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 489.097485][T16022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.141420][T16022] usb 7-1: Product: syz [ 489.145700][T16022] usb 7-1: Manufacturer: syz [ 489.165931][T16022] usb 7-1: SerialNumber: syz [ 489.190368][ T4197] ocfs2: Unmounting device (7,0) on (node local) [ 489.201102][T16317] EXT4-fs (loop7): 1 truncate cleaned up [ 489.214174][T16313] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 489.255274][T16313] ext4 filesystem being mounted at /948/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.265964][T16317] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier=0x0000000000000101,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 489.475072][ T4270] udevd[4270]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 489.475565][ T7583] udevd[7583]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 489.505273][T16293] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4468'. [ 489.573420][ T4282] udevd[4282]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 489.603154][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4483'. [ 489.604678][T16330] kvm [16329]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010007 data 0x5 [ 489.643364][T16022] port100 7-1:6.156: NFC: Could not find bulk-in or bulk-out endpoint [ 489.689124][T16022] usb 7-1: USB disconnect, device number 9 [ 489.929447][T16340] MTRR 1 not used [ 490.380640][T16347] set_capacity_and_notify: 1 callbacks suppressed [ 490.380660][T16347] loop5: detected capacity change from 0 to 8192 [ 490.477201][T16347] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 490.496551][T16347] REISERFS (device loop5): using ordered data mode [ 490.508630][T16022] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 490.510995][T16347] reiserfs: using flush barriers [ 490.556460][T16334] loop2: detected capacity change from 0 to 40427 [ 490.563837][T16347] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 490.587582][T16347] REISERFS (device loop5): checking transaction log (loop5) [ 490.589184][T16356] tipc: New replicast peer: 255.255.255.255 [ 490.603831][ T9755] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 490.613538][T16356] tipc: Enabled bearer , priority 10 [ 490.661691][T16334] F2FS-fs (loop2): invalid crc value [ 490.686364][T16359] loop0: detected capacity change from 0 to 512 [ 490.695833][T16334] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 490.794250][T16359] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 490.839402][T16359] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 490.893546][T16022] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 490.925904][T16022] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.953084][T16359] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 490.977058][T16347] REISERFS (device loop5): Using tea hash to sort names [ 490.983759][T16022] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 490.994117][T16347] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 491.010729][T16359] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 491.019129][ T9755] usb 8-1: too many configurations: 25, using maximum allowed: 8 [ 491.048308][T16359] System zones: 0-2, 18-18, 34-35 [ 491.068660][T16022] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.093003][T16359] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,,errors=continue. Quota mode: none. [ 491.109029][ T9756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.145867][T16334] F2FS-fs (loop2): Start checkpoint disabled! [ 491.190397][T16334] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e7 [ 491.335373][T16334] attempt to access beyond end of device [ 491.335373][T16334] loop2: rw=2049, want=45104, limit=40427 [ 491.417274][T16022] usb 7-1: GET_CAPABILITIES returned 0 [ 491.424644][T16022] usbtmc 7-1:16.0: can't read capabilities [ 491.455490][ T144] attempt to access beyond end of device [ 491.455490][ T144] loop2: rw=2049, want=45112, limit=40427 [ 491.584350][T16365] input: syz0 as /devices/virtual/input/input26 [ 491.675645][ T4397] usb 7-1: USB disconnect, device number 10 [ 491.686481][T16370] loop0: detected capacity change from 0 to 8 [ 491.752122][T16370] SQUASHFS error: Unable to read directory block [249:c] [ 491.845728][ T9755] usb 8-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 491.858526][ T4237] tipc: Node number set to 458783 [ 491.860624][ T9755] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.898384][ T9755] usb 8-1: config 0 descriptor?? [ 491.944132][ T9755] pwc: Creative Labs Webcam Pro Ex detected. [ 491.961365][ T9755] pwc: Warning: more than 1 configuration available. [ 492.050218][T16375] EXT4-fs error: 158 callbacks suppressed [ 492.050238][T16375] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4503: Detected aborted journal [ 492.082153][T16377] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4504: Detected aborted journal [ 492.101112][T16377] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4504: Detected aborted journal [ 492.114092][T16377] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4504: Detected aborted journal [ 492.138579][T16377] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4504: Detected aborted journal [ 492.164328][T16350] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4492: Detected aborted journal [ 492.184609][T16350] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4492: Detected aborted journal [ 492.196073][T16381] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4498: Detected aborted journal [ 492.209074][T16375] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4503: Detected aborted journal [ 492.209129][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.229129][ T4777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.239553][T16377] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4504: Detected aborted journal [ 492.312421][T16377] EXT4-fs: 138 callbacks suppressed [ 492.312437][T16377] EXT4-fs (sda1): Remounting filesystem read-only [ 492.374687][T16385] EXT4-fs (sda1): Remounting filesystem read-only [ 492.397921][T16386] EXT4-fs (sda1): Remounting filesystem read-only [ 492.410320][T16385] EXT4-fs (sda1): Remounting filesystem read-only [ 492.428832][T16386] EXT4-fs (sda1): Remounting filesystem read-only [ 492.479562][T16350] EXT4-fs (sda1): Remounting filesystem read-only [ 492.492059][T16375] EXT4-fs (sda1): Remounting filesystem read-only [ 492.519146][ T9755] pwc: send_video_command error -71 [ 492.524719][ T9755] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 492.537767][T16375] EXT4-fs (sda1): Remounting filesystem read-only [ 492.538542][ T9755] Philips webcam: probe of 8-1:0.0 failed with error -71 [ 492.574261][T16389] EXT4-fs (sda1): Remounting filesystem read-only [ 492.596184][T16389] EXT4-fs (sda1): Remounting filesystem read-only [ 492.616304][ T9755] usb 8-1: USB disconnect, device number 16 [ 493.018170][T16396] loop5: detected capacity change from 0 to 40427 [ 493.051138][T16402] loop0: detected capacity change from 0 to 1024 [ 493.103347][T16396] F2FS-fs (loop5): invalid crc value [ 493.157724][T16396] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 493.172372][T16402] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.4511: lblock 2 mapped to illegal pblock 2 (length 1) [ 493.238067][T16402] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 493.277430][T16402] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.4511: lblock 0 mapped to illegal pblock 48 (length 1) [ 493.323052][T16402] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 493.345212][T16402] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.4511: Failed to acquire dquot type 0 [ 493.412416][T16402] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 493.430298][T16396] F2FS-fs (loop5): Start checkpoint disabled! [ 493.461798][T16402] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.4511: mark_inode_dirty error [ 493.498447][T16402] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 493.509137][T16396] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e7 [ 493.566098][T16402] EXT4-fs (loop0): 1 orphan inode deleted [ 493.571919][T16402] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 493.596711][ T3078] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 493.623427][ T3078] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 493.641100][T16417] loop2: detected capacity change from 0 to 512 [ 493.647800][ T3078] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 493.702726][T16396] attempt to access beyond end of device [ 493.702726][T16396] loop5: rw=2049, want=45104, limit=40427 [ 493.773498][ T239] attempt to access beyond end of device [ 493.773498][ T239] loop5: rw=2049, want=45112, limit=40427 [ 493.797608][T16417] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 493.855497][ T3078] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 493.886484][T16417] EXT4-fs (loop2): 1 truncate cleaned up [ 493.918280][T16417] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000101,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 494.030027][ T3078] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 494.080025][ T3078] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 494.112712][ T4197] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 494.207639][ T4197] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 494.253508][ T4197] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 494.361253][ T9755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.817514][ T9756] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 494.846471][T16451] loop7: detected capacity change from 0 to 256 [ 494.889352][T16453] netem: change failed [ 495.033895][ T9755] Bluetooth: hci1: command 0x0405 tx timeout [ 495.147719][ T9756] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 495.206258][T16465] loop5: detected capacity change from 0 to 512 [ 495.227172][T16467] input: syz0 as /devices/virtual/input/input27 [ 495.256200][T16465] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 495.292772][T16465] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 495.314354][T16465] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 495.392032][T16465] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 495.401434][T16465] System zones: 0-2, 18-18, 34-35 [ 495.428279][T16465] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,,errors=continue. Quota mode: none. [ 495.972091][ T9756] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 495.982488][ T9756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.992447][ T9756] usb 3-1: config 0 descriptor?? [ 496.050178][ T9756] pwc: Creative Labs Webcam Pro Ex detected. [ 496.056479][ T9756] pwc: Warning: more than 1 configuration available. [ 496.495901][ T9756] pwc: send_video_command error -71 [ 496.501256][ T9756] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 496.510054][ T9756] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 496.519635][ T9756] usb 3-1: USB disconnect, device number 26 [ 496.531730][ T6305] udevd[6305]: setting owner of /dev/bus/usb/003/026 to uid=0, gid=0 failed: No such file or directory [ 497.091966][T16476] loop0: detected capacity change from 0 to 512 [ 497.272445][T16476] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.4552: iget: bad i_size value: 38620345925642 [ 497.300011][T16476] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.4552: couldn't read orphan inode 15 (err -117) [ 497.408807][T16489] EXT4-fs error: 158 callbacks suppressed [ 497.408825][T16489] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4548: Detected aborted journal [ 497.432046][T16476] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 497.487044][T16490] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4549: Detected aborted journal [ 497.504499][T16490] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4549: Detected aborted journal [ 497.524855][T16489] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4548: Detected aborted journal [ 497.540195][T16475] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4552: Detected aborted journal [ 497.573380][T16489] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4548: Detected aborted journal [ 497.591353][T16475] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4552: Detected aborted journal [ 497.603750][T16489] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4548: Detected aborted journal [ 497.616969][ T9755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.659104][T16489] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4548: Detected aborted journal [ 497.662503][T16475] EXT4-fs: 131 callbacks suppressed [ 497.662546][T16475] EXT4-fs (sda1): Remounting filesystem read-only [ 497.696367][T16489] EXT4-fs (sda1): Remounting filesystem read-only [ 497.705358][T16489] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4548: Detected aborted journal [ 497.725726][T16489] EXT4-fs (sda1): Remounting filesystem read-only [ 497.743627][T16493] EXT4-fs (sda1): Remounting filesystem read-only [ 497.744577][T16489] EXT4-fs (sda1): Remounting filesystem read-only [ 497.777349][T16475] EXT4-fs (sda1): Remounting filesystem read-only [ 497.787077][T16493] EXT4-fs (sda1): Remounting filesystem read-only [ 497.797196][T16475] EXT4-fs (sda1): Remounting filesystem read-only [ 497.805553][T16475] EXT4-fs (sda1): Remounting filesystem read-only [ 497.821893][T16475] EXT4-fs (sda1): Remounting filesystem read-only [ 498.005150][T16477] loop7: detected capacity change from 0 to 40427 [ 498.104876][T16477] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 498.131828][T16477] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 498.155476][T16477] F2FS-fs (loop7): invalid crc value [ 498.202758][T16477] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 498.378161][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.387944][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.407423][ T1219] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 498.465348][ T1219] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 498.483531][T16477] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 498.492221][ T1219] EXT4-fs (loop0): This should not happen!! Data will be lost [ 498.492221][ T1219] [ 498.501920][T16477] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 498.565600][ T1219] EXT4-fs (loop0): Total free blocks count 0 [ 498.572466][ T1219] EXT4-fs (loop0): Free/Dirty block details [ 498.578816][ T1219] EXT4-fs (loop0): free_blocks=0 [ 498.584954][ T1219] EXT4-fs (loop0): dirty_blocks=2720 [ 498.590439][ T1219] EXT4-fs (loop0): Block reservation details [ 498.590633][T16022] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 498.605422][ T1219] EXT4-fs (loop0): i_reserved_data_blocks=2720 [ 498.670022][T11581] attempt to access beyond end of device [ 498.670022][T11581] loop7: rw=2049, want=45104, limit=40427 [ 498.696017][ T1219] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 668 with error 28 [ 498.712000][ T1219] EXT4-fs (loop0): This should not happen!! Data will be lost [ 498.712000][ T1219] [ 499.005996][T16528] loop5: detected capacity change from 0 to 1024 [ 499.017189][T16022] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 499.027891][T16022] usb 7-1: config 0 has no interface number 0 [ 499.039024][T16022] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 499.108710][T16022] usb 7-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.135053][T16022] usb 7-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.167850][T16022] usb 7-1: config 0 interface 1 has no altsetting 0 [ 499.174771][T16022] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 499.200140][T16022] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.223694][T16022] usb 7-1: config 0 descriptor?? [ 499.388941][T16533] i2c i2c-0: new_device: Instantiated device stusb1600 at 0x28 [ 499.411696][T16535] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4568'. [ 499.449704][T16535] netlink: 2 bytes leftover after parsing attributes in process `syz.7.4568'. [ 499.567880][T16541] loop7: detected capacity change from 0 to 512 [ 499.658487][T16541] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.4570: iget: bad i_size value: 38620345925642 [ 499.732561][T16541] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.4570: couldn't read orphan inode 15 (err -117) [ 499.805916][T16541] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 499.827265][T16552] device erspan0 entered promiscuous mode [ 499.870204][T16556] loop2: detected capacity change from 0 to 128 [ 500.141089][T16022] uclogic 0003:145F:0212.0028: failed retrieving string descriptor #100: -71 [ 500.156347][T16022] uclogic 0003:145F:0212.0028: failed retrieving pen parameters: -71 [ 500.173624][T16022] uclogic 0003:145F:0212.0028: pen probing failed: -71 [ 500.209174][T16567] loop0: detected capacity change from 0 to 256 [ 500.218289][T16022] uclogic 0003:145F:0212.0028: failed probing parameters: -71 [ 500.237234][T16022] uclogic: probe of 0003:145F:0212.0028 failed with error -71 [ 500.257192][T16022] usb 7-1: USB disconnect, device number 11 [ 500.303188][T16567] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 500.352394][ T4292] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 500.698715][ T1219] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 500.725010][ T1219] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 500.772706][ T1219] EXT4-fs (loop7): This should not happen!! Data will be lost [ 500.772706][ T1219] [ 500.821997][ T1219] EXT4-fs (loop7): Total free blocks count 0 [ 500.835740][ T1219] EXT4-fs (loop7): Free/Dirty block details [ 500.842854][ T1219] EXT4-fs (loop7): free_blocks=0 [ 500.847932][ T1219] EXT4-fs (loop7): dirty_blocks=4948 [ 500.857876][ T1219] EXT4-fs (loop7): Block reservation details [ 500.858077][ T9755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.865147][ T1219] EXT4-fs (loop7): i_reserved_data_blocks=4948 [ 501.004215][ T1219] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 501.028186][ T1219] EXT4-fs (loop7): This should not happen!! Data will be lost [ 501.028186][ T1219] [ 501.401613][T16597] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4586'. [ 501.452215][ T144] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 501.469137][T16601] loop5: detected capacity change from 0 to 256 [ 501.607303][T16609] loop6: detected capacity change from 0 to 256 [ 501.754082][T16609] FAT-fs (loop6): Directory bread(block 64) failed [ 501.761320][T16573] loop0: detected capacity change from 0 to 32768 [ 501.792707][T16609] FAT-fs (loop6): Directory bread(block 65) failed [ 501.826971][T16609] FAT-fs (loop6): Directory bread(block 66) failed [ 501.879965][T16609] FAT-fs (loop6): Directory bread(block 67) failed [ 501.959636][T16609] FAT-fs (loop6): Directory bread(block 68) failed [ 501.966290][T16609] FAT-fs (loop6): Directory bread(block 69) failed [ 502.049690][T16609] FAT-fs (loop6): Directory bread(block 70) failed [ 502.105360][T16620] loop2: detected capacity change from 0 to 1024 [ 502.114818][T16609] FAT-fs (loop6): Directory bread(block 71) failed [ 502.136065][T16609] FAT-fs (loop6): Directory bread(block 72) failed [ 502.149154][T16609] FAT-fs (loop6): Directory bread(block 73) failed [ 502.163961][T16623] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4607'. [ 502.225667][ T4397] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 502.245330][ T4397] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 502.417022][T16630] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 502.579229][T16639] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 502.628367][T16641] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4616'. [ 502.737321][T16642] udevd[16642]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 502.763567][T16644] EXT4-fs error: 248 callbacks suppressed [ 502.763587][T16644] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4615: Detected aborted journal [ 502.785197][T16646] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4617: Detected aborted journal [ 502.794440][T16643] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4614: Detected aborted journal [ 502.810229][T16647] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4618: Detected aborted journal [ 502.831360][T16646] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4617: Detected aborted journal [ 502.854726][T16644] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4615: Detected aborted journal [ 502.858774][T16643] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4614: Detected aborted journal [ 502.868607][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 502.894529][T16646] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4617: Detected aborted journal [ 502.916290][T16650] set_capacity_and_notify: 1 callbacks suppressed [ 502.916308][T16650] loop0: detected capacity change from 0 to 1024 [ 502.922572][T16647] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4618: Detected aborted journal [ 503.002401][T16645] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4614'. [ 503.036128][T16644] EXT4-fs: 225 callbacks suppressed [ 503.036144][T16644] EXT4-fs (sda1): Remounting filesystem read-only [ 503.052249][T16645] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4614'. [ 503.063222][T16643] EXT4-fs (sda1): Remounting filesystem read-only [ 503.084361][T16647] EXT4-fs (sda1): Remounting filesystem read-only [ 503.092193][T16643] EXT4-fs (sda1): Remounting filesystem read-only [ 503.099847][T16647] EXT4-fs (sda1): Remounting filesystem read-only [ 503.107595][T16644] EXT4-fs (sda1): Remounting filesystem read-only [ 503.118031][T16653] EXT4-fs (sda1): Remounting filesystem read-only [ 503.128609][T16647] EXT4-fs (sda1): Remounting filesystem read-only [ 503.130975][T16644] EXT4-fs (sda1): Remounting filesystem read-only [ 503.149150][T16644] EXT4-fs (sda1): Remounting filesystem read-only [ 503.463057][T16667] loop6: detected capacity change from 0 to 128 [ 503.520169][T16670] loop7: detected capacity change from 0 to 256 [ 503.618660][T16672] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4629'. [ 503.805815][T16676] loop6: detected capacity change from 0 to 8 [ 503.939450][T16676] SQUASHFS error: Failed to read block 0x6e6: -5 [ 503.946016][T16676] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 504.014421][T16676] SQUASHFS error: Unable to read directory block [6e4:0] [ 504.038356][T16684] loop7: detected capacity change from 0 to 1024 [ 504.098937][ T9755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.333951][T16662] loop2: detected capacity change from 0 to 40427 [ 504.511246][T16662] F2FS-fs (loop2): Found nat_bits in checkpoint [ 504.526120][ T4292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.535102][ T4777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.680470][T16662] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 504.897079][T16703] netlink: 27 bytes leftover after parsing attributes in process `syz.6.4641'. [ 504.923349][ T4190] attempt to access beyond end of device [ 504.923349][ T4190] loop2: rw=2049, want=45104, limit=40427 [ 505.019607][T16682] loop5: detected capacity change from 0 to 32768 [ 505.099990][T16682] XFS (loop5): Mounting V5 Filesystem [ 505.239534][T16682] XFS (loop5): Ending clean mount [ 505.318663][ T4883] XFS (loop5): Unmounting Filesystem [ 505.507427][ T4397] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 505.633982][T16723] loop2: detected capacity change from 0 to 736 [ 505.774750][ T4397] usb 7-1: Using ep0 maxpacket: 32 [ 505.903216][ T4397] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 505.911482][ T4397] usb 7-1: config 0 has no interface number 0 [ 505.955348][ T4397] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 505.977067][ T4397] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 505.997626][ T4397] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 506.020804][ T4397] usb 7-1: config 0 interface 196 has no altsetting 0 [ 506.033842][T16719] loop7: detected capacity change from 0 to 32768 [ 506.071935][T16727] loop5: detected capacity change from 0 to 512 [ 506.108561][T16719] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 506.174863][T16719] JBD2: Ignoring recovery information on journal [ 506.191812][ T4397] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 506.201936][ T4397] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.214019][T16727] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.4646: iget: bad i_size value: 38620345925642 [ 506.235007][ T4397] usb 7-1: Product: syz [ 506.243873][ T4397] usb 7-1: Manufacturer: syz [ 506.269273][ T4397] usb 7-1: SerialNumber: syz [ 506.277996][T16727] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.4646: couldn't read orphan inode 15 (err -117) [ 506.298169][T16727] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 506.303719][ T4397] usb 7-1: config 0 descriptor?? [ 506.329182][T16719] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 506.384503][T16717] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 506.602975][T11581] ocfs2: Unmounting device (7,7) on (node local) [ 506.673633][ T4397] ipheth 7-1:0.196: Unable to find endpoints [ 506.731580][ T4397] usb 7-1: USB disconnect, device number 12 [ 506.938601][T16740] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 506.978950][T16740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.252413][ T4271] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 507.317750][T16750] exfat: Deprecated parameter 'utf8' [ 507.323237][T16750] exfat: Deprecated parameter 'namecase' [ 507.355742][ T4271] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 507.372793][T16750] exfat: Deprecated parameter 'namecase' [ 507.380436][ T4271] EXT4-fs (loop5): This should not happen!! Data will be lost [ 507.380436][ T4271] [ 507.431487][ T4777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.450164][T16750] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 507.471291][ T4271] EXT4-fs (loop5): Total free blocks count 0 [ 507.480556][ T4271] EXT4-fs (loop5): Free/Dirty block details [ 507.496412][T16754] size and base must be multiples of 4 kiB [ 507.528396][T16754] CPU: 1 PID: 16754 Comm: syz.2.4660 Not tainted syzkaller #0 [ 507.535942][T16754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.538632][ T4271] EXT4-fs (loop5): free_blocks=0 [ 507.546043][T16754] Call Trace: [ 507.554312][T16754] [ 507.557281][T16754] dump_stack_lvl+0x188/0x250 [ 507.562051][T16754] ? __might_fault+0xb7/0x110 [ 507.566962][T16754] ? show_regs_print_info+0x20/0x20 [ 507.572219][T16754] ? load_image+0x410/0x410 [ 507.576856][T16754] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 507.582701][T16754] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 507.588242][T16754] ? __might_fault+0xb3/0x110 [ 507.592983][T16754] mtrr_add+0x8e/0xc0 [ 507.595289][ T4271] EXT4-fs (loop5): dirty_blocks=6656 [ 507.597053][T16754] mtrr_ioctl+0x9bf/0x1140 [ 507.602419][ T4271] EXT4-fs (loop5): Block reservation details [ 507.606822][T16754] ? mtrr_close+0x1f0/0x1f0 [ 507.606881][T16754] ? mtrr_close+0x1f0/0x1f0 [ 507.621950][T16754] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 507.627504][T16754] ? proc_reg_poll+0x280/0x280 [ 507.632333][T16754] __se_sys_ioctl+0xfa/0x170 [ 507.637106][T16754] do_syscall_64+0x4c/0xa0 [ 507.641606][T16754] ? clear_bhb_loop+0x30/0x80 [ 507.646601][T16754] ? clear_bhb_loop+0x30/0x80 [ 507.651356][T16754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 507.654055][ T4271] EXT4-fs (loop5): i_reserved_data_blocks=6656 [ 507.657303][T16754] RIP: 0033:0x7f99d8cdc0d9 [ 507.657333][T16754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.657356][T16754] RSP: 002b:00007f99d6f34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.657384][T16754] RAX: ffffffffffffffda RBX: 00007f99d8f63fa0 RCX: 00007f99d8cdc0d9 [ 507.704313][T16754] RDX: 0000200000000140 RSI: 0000000040104d01 RDI: 0000000000000003 [ 507.712344][T16754] RBP: 00007f99d8d73024 R08: 0000000000000000 R09: 0000000000000000 [ 507.720416][T16754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.728442][T16754] R13: 00007f99d8f64038 R14: 00007f99d8f63fa0 R15: 00007ffc7cd63518 [ 507.736498][T16754] [ 507.841359][ T4271] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 507.871603][ T4271] EXT4-fs (loop5): This should not happen!! Data will be lost [ 507.871603][ T4271] [ 507.929315][T16762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4664'. [ 507.975371][T16758] hfs: walked past end of dir [ 508.123639][T16764] EXT4-fs error: 167 callbacks suppressed [ 508.123659][T16764] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4666: Detected aborted journal [ 508.143560][T16763] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4665: Detected aborted journal [ 508.223469][T16763] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4665: Detected aborted journal [ 508.225760][T16767] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4667: Detected aborted journal [ 508.248100][T16764] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4666: Detected aborted journal [ 508.255126][T16755] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4661: Detected aborted journal [ 508.309475][T16764] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4666: Detected aborted journal [ 508.317077][T16755] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4661: Detected aborted journal [ 508.378628][T16767] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4667: Detected aborted journal [ 508.390539][T16755] EXT4-fs: 152 callbacks suppressed [ 508.390557][T16755] EXT4-fs (sda1): Remounting filesystem read-only [ 508.402635][T16767] EXT4-fs (sda1): Remounting filesystem read-only [ 508.430943][T16767] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4667: Detected aborted journal [ 508.472439][T16769] EXT4-fs (sda1): Remounting filesystem read-only [ 508.481113][T16755] EXT4-fs (sda1): Remounting filesystem read-only [ 508.516113][T16767] EXT4-fs (sda1): Remounting filesystem read-only [ 508.525811][T16755] EXT4-fs (sda1): Remounting filesystem read-only [ 508.529975][T16769] EXT4-fs (sda1): Remounting filesystem read-only [ 508.540693][T16772] EXT4-fs (sda1): Remounting filesystem read-only [ 508.556325][T16770] EXT4-fs (sda1): Remounting filesystem read-only [ 508.559911][T16767] EXT4-fs (sda1): Remounting filesystem read-only [ 508.805935][T16785] set_capacity_and_notify: 5 callbacks suppressed [ 508.805954][T16785] loop7: detected capacity change from 0 to 1024 [ 508.890675][T16790] loop0: detected capacity change from 0 to 736 [ 508.938718][T16785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 509.210778][T16799] loop5: detected capacity change from 0 to 64 [ 509.315674][ T26] audit: type=1800 audit(1785960608.542:84): pid=16799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4679" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 509.339328][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.339386][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.576376][T16808] loop5: detected capacity change from 0 to 1024 [ 509.628721][T16814] loop6: detected capacity change from 0 to 64 [ 510.088272][T16822] loop6: detected capacity change from 0 to 4096 [ 510.311866][T16834] loop5: detected capacity change from 0 to 64 [ 510.372297][T16838] loop2: detected capacity change from 0 to 256 [ 510.403639][T16834] hfs: walked past end of dir [ 510.427362][T16838] exfat: Deprecated parameter 'utf8' [ 510.432831][T16838] exfat: Deprecated parameter 'namecase' [ 510.442244][T16838] exfat: Deprecated parameter 'namecase' [ 510.547647][T16838] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 510.683100][ T4777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.691303][ T4777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.701829][ T4241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.314728][T16853] netlink: 'syz.6.4705': attribute type 29 has an invalid length. [ 511.323864][T16854] ip_tables: iptables: counters copy to user failed while replacing table [ 511.338995][T16853] netlink: 'syz.6.4705': attribute type 29 has an invalid length. [ 511.351221][T16853] netlink: 'syz.6.4705': attribute type 29 has an invalid length. [ 511.367839][T16853] netlink: 'syz.6.4705': attribute type 29 has an invalid length. [ 511.659734][T16874] loop5: detected capacity change from 0 to 512 [ 511.749079][T16874] EXT4-fs (loop5): orphan cleanup on readonly fs [ 511.795689][T16874] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 511.906114][T16874] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 511.942895][T16874] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #13: comm syz.5.4713: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 57856(57856) [ 512.005146][T16874] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.4713: couldn't read orphan inode 13 (err -117) [ 512.039589][T16865] loop6: detected capacity change from 0 to 32768 [ 512.053711][T16874] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 512.111311][T16865] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 512.127651][T16874] EXT4-fs error (device loop5): ext4_lookup:1858: comm syz.5.4713: inode #15: comm syz.5.4713: iget: illegal inode # [ 512.163694][T16865] JBD2: Ignoring recovery information on journal [ 512.365061][T16865] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 512.516889][T16891] netlink: 'syz.5.4720': attribute type 29 has an invalid length. [ 512.582225][T16891] netlink: 'syz.5.4720': attribute type 29 has an invalid length. [ 512.627299][T16894] netlink: 'syz.5.4720': attribute type 29 has an invalid length. [ 512.637906][ T9115] ocfs2: Unmounting device (7,6) on (node local) [ 512.656168][T16895] netlink: 'syz.5.4720': attribute type 29 has an invalid length. [ 513.122415][T16912] ip_tables: iptables: counters copy to user failed while replacing table [ 513.207220][T16917] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 513.308777][T16884] XFS (loop7): Mounting V5 Filesystem [ 513.325106][T16923] hfs: session requires an argument [ 513.331967][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4731'. [ 513.341901][T16923] hfs: unable to parse mount options [ 513.475721][T16906] EXT4-fs error: 231 callbacks suppressed [ 513.475741][T16906] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4727: Detected aborted journal [ 513.550642][T16930] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4734: Detected aborted journal [ 513.583195][T16906] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4727: Detected aborted journal [ 513.616231][T16930] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4734: Detected aborted journal [ 513.639234][T16932] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4735: Detected aborted journal [ 513.651317][T16906] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4727: Detected aborted journal [ 513.668576][T16884] XFS (loop7): Ending clean mount [ 513.674629][T16930] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4734: Detected aborted journal [ 513.695871][T16906] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4727: Detected aborted journal [ 513.708165][T16930] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4734: Detected aborted journal [ 513.728948][T16883] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4718: Detected aborted journal [ 513.741573][T16930] EXT4-fs: 219 callbacks suppressed [ 513.741592][T16930] EXT4-fs (sda1): Remounting filesystem read-only [ 513.749551][T16906] EXT4-fs (sda1): Remounting filesystem read-only [ 513.784576][T16906] EXT4-fs (sda1): Remounting filesystem read-only [ 513.786421][T16883] EXT4-fs (sda1): Remounting filesystem read-only [ 513.798372][T16906] EXT4-fs (sda1): Remounting filesystem read-only [ 513.814813][T16906] EXT4-fs (sda1): Remounting filesystem read-only [ 513.833172][T16906] EXT4-fs (sda1): Remounting filesystem read-only [ 513.838059][T16883] EXT4-fs (sda1): Remounting filesystem read-only [ 513.856133][T16906] EXT4-fs (sda1): Remounting filesystem read-only [ 513.863543][T16930] EXT4-fs (sda1): Remounting filesystem read-only [ 513.938552][ T9755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.004945][T11581] XFS (loop7): Unmounting Filesystem [ 514.169397][T16928] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 514.195497][T16928] JBD2: Ignoring recovery information on journal [ 514.357794][T16928] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 514.592124][ T4883] ocfs2: Unmounting device (7,5) on (node local) [ 514.604276][T16933] set_capacity_and_notify: 4 callbacks suppressed [ 514.604293][T16933] loop0: detected capacity change from 0 to 40427 [ 514.730327][ T4237] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 514.752461][T16949] input: syz1 as /devices/virtual/input/input30 [ 514.844439][T16933] F2FS-fs (loop0): Found nat_bits in checkpoint [ 515.018325][T16933] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 515.130383][ T4237] usb 3-1: config index 0 descriptor too short (expected 81, got 63) [ 515.142860][T16960] loop7: detected capacity change from 0 to 2048 [ 515.171463][ T4237] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 1.00 [ 515.199516][ T4237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.242397][ T4197] attempt to access beyond end of device [ 515.242397][ T4197] loop0: rw=2049, want=45104, limit=40427 [ 515.341840][T16963] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 515.796069][T16955] loop6: detected capacity change from 0 to 32768 [ 515.984011][T16955] XFS (loop6): Mounting V5 Filesystem [ 516.089877][T16955] XFS (loop6): Ending clean mount [ 516.173572][T16994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4744'. [ 516.251098][T16997] loop0: detected capacity change from 0 to 512 [ 516.260697][ T9115] XFS (loop6): Unmounting Filesystem [ 516.370975][T16997] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,sysvgroups,usrquota,. Quota mode: writeback. [ 516.396375][T16997] ext4 filesystem being mounted at /879/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 516.441421][T17005] loop7: detected capacity change from 0 to 512 [ 516.595173][T16997] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4757: bg 0: block 217: padding at end of block bitmap is not set [ 516.617108][T17005] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 516.726875][ T4237] usb 3-1: USB disconnect, device number 27 [ 516.728238][T16997] EXT4-fs (loop0): Remounting filesystem read-only [ 516.782753][T17005] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: none. [ 516.805911][T16997] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 516.848637][ T4271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.858592][ T4777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.899646][T16997] EXT4-fs (loop0): Remounting filesystem read-only [ 517.109926][ T4284] udevd[4284]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.251517][ T9756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.511099][T17031] loop6: detected capacity change from 0 to 1024 [ 517.520923][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4767'. [ 517.676253][ T144] hfsplus: b-tree write err: -5, ino 25 [ 517.693393][ T144] hfsplus: b-tree write err: -5, ino 4 [ 517.703289][ T144] hfsplus: b-tree write err: -5, ino 2 [ 517.746243][T17039] loop5: detected capacity change from 0 to 512 [ 517.817900][T17041] loop2: detected capacity change from 0 to 512 [ 517.895180][T17039] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 517.936115][T17039] ext4 filesystem being mounted at /933/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 517.954842][T17041] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 517.969393][T17041] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 518.003021][T17041] System zones: 0-1, 15-15, 18-18, 34-34 [ 518.010636][T17041] EXT4-fs (loop2): orphan cleanup on readonly fs [ 518.017823][T17041] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 518.028177][T17041] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 518.044363][T17041] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 518.130081][T17041] EXT4-fs (loop2): 1 truncate cleaned up [ 518.177774][T17041] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 518.218336][T17051] loop7: detected capacity change from 0 to 256 [ 518.301769][T17051] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 518.344952][T17041] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 518.353516][T17051] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 518.384005][T17053] loop6: detected capacity change from 0 to 2048 [ 518.426247][T17051] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 518.562738][ T26] audit: type=1800 audit(1785960617.185:85): pid=17051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4775" name="bus" dev="loop7" ino=1048861 res=0 errno=0 [ 518.583737][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.603454][T17057] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 518.859754][T17065] EXT4-fs error: 192 callbacks suppressed [ 518.859772][T17065] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4782: Detected aborted journal [ 518.883877][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.891135][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 518.943932][T17065] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.4782: Detected aborted journal [ 518.961718][T17067] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4781: Detected aborted journal [ 518.985924][T17067] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4781: Detected aborted journal [ 519.022950][T17069] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4783: Detected aborted journal [ 519.037811][T17069] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4783: Detected aborted journal [ 519.050964][T17069] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4783: Detected aborted journal [ 519.106780][T17069] EXT4-fs: 172 callbacks suppressed [ 519.106799][T17069] EXT4-fs (sda1): Remounting filesystem read-only [ 519.109864][T17072] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4784: Detected aborted journal [ 519.140229][T17069] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4783: Detected aborted journal [ 519.145541][T17072] EXT4-fs (sda1): Remounting filesystem read-only [ 519.163776][T17072] EXT4-fs (sda1): Remounting filesystem read-only [ 519.197780][T17074] EXT4-fs (sda1): Remounting filesystem read-only [ 519.209022][T17075] EXT4-fs (sda1): Remounting filesystem read-only [ 519.218378][T17069] EXT4-fs (sda1): Remounting filesystem read-only [ 519.227153][T17069] EXT4-fs (sda1): Remounting filesystem read-only [ 519.241777][T17069] EXT4-fs (sda1): Remounting filesystem read-only [ 519.250034][T17069] EXT4-fs (sda1): Remounting filesystem read-only [ 519.257725][T17069] EXT4-fs (sda1): Remounting filesystem read-only [ 519.360218][T17076] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 519.482108][T17076] ext4 filesystem being mounted at /568/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 519.550242][T17083] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 519.582552][T17083] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 519.652768][T17083] System zones: 0-1, 15-15, 18-18, 34-34 [ 519.714238][T17083] EXT4-fs (loop5): orphan cleanup on readonly fs [ 519.740425][T17093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.759651][T17083] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 519.783685][T17083] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 519.895797][T17083] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 519.916410][T17083] EXT4-fs (loop5): 1 truncate cleaned up [ 519.923585][T17083] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 520.018098][T17083] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 520.128475][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4794'. [ 520.260507][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.284607][T17085] set_capacity_and_notify: 3 callbacks suppressed [ 520.284626][T17085] loop2: detected capacity change from 0 to 40427 [ 520.354832][T17085] F2FS-fs (loop2): invalid crc value [ 520.397127][T17085] F2FS-fs (loop2): Found nat_bits in checkpoint [ 520.517973][ T4777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.534323][T17110] loop5: detected capacity change from 0 to 1024 [ 520.622953][T17085] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 520.858376][ T4190] attempt to access beyond end of device [ 520.858376][ T4190] loop2: rw=2049, want=45112, limit=40427 [ 520.878787][T17121] loop7: detected capacity change from 0 to 512 [ 521.133251][T17129] loop5: detected capacity change from 0 to 512 [ 521.209393][T17129] EXT4-fs (loop5): Ignoring removed oldalloc option [ 521.318210][T17129] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 521.342639][T17137] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 521.388311][T17129] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 521.426258][T17129] EXT4-fs (loop5): orphan cleanup on readonly fs [ 521.432704][T17129] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.4808: bad orphan inode 267 [ 521.444605][T17129] EXT4-fs (loop5): Remounting filesystem read-only [ 521.485666][T17129] EXT4-fs (loop5): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 521.511000][T17129] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.4808: dx entry: limit 0 != root limit 125 [ 521.523730][T17129] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.4808: Corrupt directory, running e2fsck is recommended [ 522.324945][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.334044][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.448055][T17162] loop2: detected capacity change from 0 to 512 [ 522.569868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.669399][T17145] loop7: detected capacity change from 0 to 40427 [ 522.712893][T17145] F2FS-fs (loop7): invalid crc value [ 522.787408][T17145] F2FS-fs (loop7): Found nat_bits in checkpoint [ 522.963168][T17174] loop2: detected capacity change from 0 to 512 [ 522.996642][T17145] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 523.040617][T17174] EXT4-fs (loop2): Ignoring removed oldalloc option [ 523.047763][T17174] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 523.083064][T17174] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 523.106033][T17174] EXT4-fs (loop2): orphan cleanup on readonly fs [ 523.125837][T17174] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.4826: bad orphan inode 267 [ 523.167253][T17174] EXT4-fs (loop2): Remounting filesystem read-only [ 523.199151][T17174] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 523.205336][T11581] attempt to access beyond end of device [ 523.205336][T11581] loop7: rw=2049, want=45112, limit=40427 [ 523.325134][T17174] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.4826: dx entry: limit 0 != root limit 125 [ 523.337728][T17174] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.4826: Corrupt directory, running e2fsck is recommended [ 523.356163][T17189] loop6: detected capacity change from 0 to 1024 [ 523.767711][ T4772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.096793][T17211] loop6: detected capacity change from 0 to 256 [ 524.112364][T17214] loop0: detected capacity change from 0 to 128 [ 524.208203][T17210] EXT4-fs error: 176 callbacks suppressed [ 524.208221][T17210] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4842: Detected aborted journal [ 524.215215][T17214] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 524.248480][T17211] FAT-fs (loop6): error, invalid FAT chain (i_pos 196, last_block 1024) [ 524.286521][T17210] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4842: Detected aborted journal [ 524.300328][T17214] ext4 filesystem being mounted at /886/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.315085][T17220] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4846: Detected aborted journal [ 524.356038][T17221] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4847: Detected aborted journal [ 524.373508][T17210] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4842: Detected aborted journal [ 524.406817][T17220] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.7.4846: Detected aborted journal [ 524.425065][T17221] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4847: Detected aborted journal [ 524.439308][T17221] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.5.4847: Detected aborted journal [ 524.467191][T17212] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.4843: Detected aborted journal [ 524.469214][T17210] EXT4-fs: 168 callbacks suppressed [ 524.469255][T17210] EXT4-fs (sda1): Remounting filesystem read-only [ 524.495097][T17210] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.6.4842: Detected aborted journal [ 524.507189][T17220] EXT4-fs (sda1): Remounting filesystem read-only [ 524.514273][T17210] EXT4-fs (sda1): Remounting filesystem read-only [ 524.522472][T17210] EXT4-fs (sda1): Remounting filesystem read-only [ 524.529882][T17210] EXT4-fs (sda1): Remounting filesystem read-only [ 524.537377][T17212] EXT4-fs (sda1): Remounting filesystem read-only [ 524.557764][T17220] EXT4-fs (sda1): Remounting filesystem read-only [ 524.569387][T17214] EXT4-fs (loop0): shut down requested (1) Aug 5 20:10:22 [ 524.591864][T17220] EXT4-fs (sda1): Remounting filesystem read-only syzkaller kern.alert kernel: [ 524.569387][T17214] EXT4-fs (loop0): shut down requested (1) [ 524.608660][T17220] EXT4-fs (sda1): Remounting filesystem read-only [ 524.617892][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4846'. [ 524.644681][T17220] EXT4-fs (sda1): Remounting filesystem read-only [ 524.944997][T17237] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 525.063044][T17237] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,dioread_nolock,acl,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 525.143599][T17237] ext4 filesystem being mounted at /1030/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.623803][T17237] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.4855: lblock 0 mapped to illegal pblock 0 (length 1) [ 525.741782][T17251] EXT4-fs (loop5): 1 truncate cleaned up [ 525.761752][T17237] EXT4-fs (loop2): Remounting filesystem read-only [ 525.765888][T17251] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 525.863633][T17251] [ 525.866031][T17251] ====================================================== [ 525.873076][T17251] WARNING: possible circular locking dependency detected [ 525.880139][T17251] syzkaller #0 Not tainted [ 525.884585][T17251] ------------------------------------------------------ [ 525.891735][T17251] syz.5.4860/17251 is trying to acquire lock: [ 525.897879][T17251] ffff8880579d0ac0 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 525.907925][T17251] [ 525.907925][T17251] but task is already holding lock: [ 525.915318][T17251] ffff88805fe04c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2d40 [ 525.925470][T17251] [ 525.925470][T17251] which lock already depends on the new lock. [ 525.925470][T17251] [ 525.935907][T17251] [ 525.935907][T17251] the existing dependency chain (in reverse order) is: [ 525.944948][T17251] [ 525.944948][T17251] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 525.953427][T17251] percpu_down_read+0x46/0x1b0 [ 525.958755][T17251] ext4_writepages+0x213/0x2d40 [ 525.964173][T17251] do_writepages+0x493/0x700 [ 525.969406][T17251] __writeback_single_inode+0x153/0xda0 [ 525.975613][T17251] writeback_single_inode+0x3d2/0x8e0 [ 525.981544][T17251] write_inode_now+0x23b/0x2c0 [ 525.986869][T17251] iput+0x599/0x880 [ 525.991240][T17251] ext4_xattr_set_entry+0x1d76/0x3f70 [ 525.997306][T17251] ext4_xattr_block_set+0x8a7/0x2ce0 [ 526.003158][T17251] ext4_expand_extra_isize_ea+0xebe/0x18e0 [ 526.009529][T17251] __ext4_expand_extra_isize+0x301/0x3e0 [ 526.015722][T17251] __ext4_mark_inode_dirty+0x444/0x6c0 [ 526.021735][T17251] ext4_evict_inode+0xa55/0x1050 [ 526.027220][T17251] evict+0x4b6/0x8b0 [ 526.031699][T17251] ext4_orphan_cleanup+0xad8/0x1320 [ 526.037491][T17251] ext4_fill_super+0x8c65/0x93f0 [ 526.042997][T17251] mount_bdev+0x28a/0x3c0 [ 526.047985][T17251] legacy_get_tree+0xe6/0x180 [ 526.053299][T17251] vfs_get_tree+0x88/0x270 [ 526.058309][T17251] do_new_mount+0x247/0xa40 [ 526.063458][T17251] __se_sys_mount+0x2e3/0x3d0 [ 526.068700][T17251] do_syscall_64+0x4c/0xa0 [ 526.073677][T17251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.080219][T17251] [ 526.080219][T17251] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 526.087914][T17251] __lock_acquire+0x2c66/0x7b50 [ 526.093430][T17251] lock_acquire+0x19e/0x400 [ 526.098498][T17251] down_write+0x38/0x60 [ 526.103577][T17251] ext4_destroy_inline_data+0x24/0xe0 [ 526.109518][T17251] ext4_writepages+0x599/0x2d40 [ 526.114937][T17251] do_writepages+0x493/0x700 [ 526.120102][T17251] filemap_fdatawrite_wbc+0x1eb/0x240 [ 526.126132][T17251] file_write_and_wait_range+0x14d/0x220 [ 526.132342][T17251] ext4_sync_file+0x20e/0xb10 [ 526.137665][T17251] ext4_buffered_write_iter+0x323/0x3a0 [ 526.143779][T17251] ext4_file_write_iter+0x73f/0x1720 [ 526.149632][T17251] vfs_write+0x748/0xd70 [ 526.154433][T17251] __x64_sys_pwrite64+0x197/0x220 [ 526.160018][T17251] do_syscall_64+0x4c/0xa0 [ 526.165000][T17251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.171462][T17251] [ 526.171462][T17251] other info that might help us debug this: [ 526.171462][T17251] [ 526.181728][T17251] Possible unsafe locking scenario: [ 526.181728][T17251] [ 526.189252][T17251] CPU0 CPU1 [ 526.194648][T17251] ---- ---- [ 526.200049][T17251] lock(&sbi->s_writepages_rwsem); [ 526.205293][T17251] lock(&ei->xattr_sem); [ 526.212296][T17251] lock(&sbi->s_writepages_rwsem); [ 526.220052][T17251] lock(&ei->xattr_sem); [ 526.224463][T17251] [ 526.224463][T17251] *** DEADLOCK *** [ 526.224463][T17251] [ 526.232664][T17251] 2 locks held by syz.5.4860/17251: [ 526.237892][T17251] #0: ffff88805fe06460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 526.246917][T17251] #1: ffff88805fe04c58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2d40 [ 526.257764][T17251] [ 526.257764][T17251] stack backtrace: [ 526.263684][T17251] CPU: 1 PID: 17251 Comm: syz.5.4860 Not tainted syzkaller #0 [ 526.271379][T17251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.281663][T17251] Call Trace: [ 526.284979][T17251] [ 526.287950][T17251] dump_stack_lvl+0x188/0x250 [ 526.292677][T17251] ? load_image+0x410/0x410 [ 526.297229][T17251] ? show_regs_print_info+0x20/0x20 [ 526.302477][T17251] ? print_circular_bug+0x12b/0x1a0 [ 526.307809][T17251] check_noncircular+0x296/0x330 [ 526.312827][T17251] ? add_chain_block+0x9b0/0x9b0 [ 526.318065][T17251] ? lockdep_lock+0xf1/0x1f0 [ 526.322725][T17251] ? mark_lock+0x94/0x320 [ 526.327099][T17251] ? _find_first_zero_bit+0xd1/0xf0 [ 526.332448][T17251] __lock_acquire+0x2c66/0x7b50 [ 526.337550][T17251] ? ext4_block_write_begin+0x5ff/0x1200 [ 526.343243][T17251] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.349397][T17251] ? verify_lock_unused+0x140/0x140 [ 526.354646][T17251] ? verify_lock_unused+0x140/0x140 [ 526.360043][T17251] ? mark_lock+0x94/0x320 [ 526.364440][T17251] ? __lock_acquire+0x1305/0x7b50 [ 526.369525][T17251] lock_acquire+0x19e/0x400 [ 526.374081][T17251] ? ext4_destroy_inline_data+0x24/0xe0 [ 526.379774][T17251] ? read_lock_is_recursive+0x10/0x10 [ 526.385299][T17251] ? rcu_read_lock_any_held+0xb0/0x130 [ 526.390916][T17251] ? ext4_journal_check_start+0x17f/0x240 [ 526.396767][T17251] down_write+0x38/0x60 [ 526.400959][T17251] ? ext4_destroy_inline_data+0x24/0xe0 [ 526.406548][T17251] ext4_destroy_inline_data+0x24/0xe0 [ 526.411967][T17251] ext4_writepages+0x599/0x2d40 [ 526.416875][T17251] ? verify_lock_unused+0x140/0x140 [ 526.422212][T17251] ? mark_lock+0x94/0x320 [ 526.426638][T17251] ? __lock_acquire+0x13dc/0x7b50 [ 526.431709][T17251] ? ext4_readpage+0x2e0/0x2e0 [ 526.436517][T17251] ? verify_lock_unused+0x140/0x140 [ 526.441800][T17251] ? __lock_acquire+0x7b50/0x7b50 [ 526.446893][T17251] ? do_raw_spin_lock+0x128/0x2f0 [ 526.452045][T17251] ? do_raw_spin_unlock+0x11d/0x230 [ 526.457290][T17251] ? ext4_readpage+0x2e0/0x2e0 [ 526.462100][T17251] do_writepages+0x493/0x700 [ 526.466744][T17251] ? filemap_fdatawrite_wbc+0x1e0/0x240 [ 526.472341][T17251] ? __writepage+0x130/0x130 [ 526.476971][T17251] ? __lock_acquire+0x7b50/0x7b50 [ 526.482037][T17251] ? __rwlock_init+0x140/0x140 [ 526.486838][T17251] ? generic_write_end+0x24d/0x3d0 [ 526.491989][T17251] ? do_raw_spin_unlock+0x11d/0x230 [ 526.497226][T17251] filemap_fdatawrite_wbc+0x1eb/0x240 [ 526.502640][T17251] file_write_and_wait_range+0x14d/0x220 [ 526.508341][T17251] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 526.513853][T17251] ? grab_cache_page_write_begin+0xa0/0xa0 [ 526.519696][T17251] ? rwsem_write_trylock+0x135/0x1c0 [ 526.525053][T17251] ext4_sync_file+0x20e/0xb10 [ 526.529792][T17251] ext4_buffered_write_iter+0x323/0x3a0 [ 526.535391][T17251] ext4_file_write_iter+0x73f/0x1720 [ 526.540742][T17251] ? rcu_read_lock_any_held+0xb0/0x130 [ 526.546256][T17251] ? ext4_file_read_iter+0x6f0/0x6f0 [ 526.551592][T17251] ? end_current_label_crit_section+0x14b/0x170 [ 526.557946][T17251] ? memset+0x1e/0x40 [ 526.562251][T17251] ? iov_iter_init+0xb4/0x170 [ 526.566980][T17251] vfs_write+0x748/0xd70 [ 526.571398][T17251] ? file_end_write+0x250/0x250 [ 526.576290][T17251] ? __fget_files+0x402/0x470 [ 526.581014][T17251] ? __fdget+0x18b/0x210 [ 526.585298][T17251] ? __x64_sys_pwrite64+0xf3/0x220 [ 526.590452][T17251] __x64_sys_pwrite64+0x197/0x220 [ 526.595612][T17251] ? ksys_pwrite64+0x1c0/0x1c0 [ 526.600422][T17251] ? lockdep_hardirqs_on+0x94/0x140 [ 526.605668][T17251] do_syscall_64+0x4c/0xa0 [ 526.610124][T17251] ? clear_bhb_loop+0x30/0x80 [ 526.614866][T17251] ? clear_bhb_loop+0x30/0x80 [ 526.619615][T17251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.625546][T17251] RIP: 0033:0x7f705dfa60d9 [ 526.630006][T17251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.649643][T17251] RSP: 002b:00007f705c1fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 526.658182][T17251] RAX: ffffffffffffffda RBX: 00007f705e22dfa0 RCX: 00007f705dfa60d9 [ 526.666185][T17251] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 526.674190][T17251] RBP: 00007f705e03d024 R08: 0000000000000000 R09: 0000000000000000 [ 526.682196][T17251] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 526.690209][T17251] R13: 00007f705e22e038 R14: 00007f705e22dfa0 R15: 00007ffcb745b828 [ 526.698224][T17251] [ 526.790572][T17262] set_capacity_and_notify: 2 callbacks suppressed [ 526.790591][T17262] loop6: detected capacity change from 0 to 4096 [ 526.828588][T17262] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 526.849694][ T4271] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:6: bg 0: block 465: padding at end of block bitmap is not set [ 526.901974][ T4271] EXT4-fs (loop5): Remounting filesystem read-only [ 526.919583][T17262] ntfs: volume version 3.1. [ 527.019353][ T9756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.090840][T17262] ntfs: (device loop6): write_mft_record_nolock(): Failed to apply mst fixups! [ 527.109793][T17262] ntfs: (device loop6): __ntfs_write_inode(): Failed (error 22): Run chkdsk. [ 527.120956][T17262] ntfs: (device loop6): ntfs_file_fsync(): Failed to fsync inode 0x43. Error 22. [ 527.145696][ T9115] ntfs: (device loop6): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 528.472848][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.482680][ T9756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.267519][ T9755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.440490][ T3560] EXT4-fs error: 69 callbacks suppressed [ 530.440511][ T3560] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0 [ 530.485813][ T3560] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 530.497822][ T3560] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 530.510597][ T3560] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 530.522828][ T3560] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0 [ 530.536454][ T3560] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0 [ 533.517655][ T9756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.946569][ T3078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.955929][ T4237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.726482][ T144] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)