last executing test programs: 38.2264832s ago: executing program 2 (id=758): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x4, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 38.069602814s ago: executing program 2 (id=760): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) 37.722613916s ago: executing program 2 (id=763): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000340)={0x27, 0x0, 0x1, 0x7, 0x0, 0x0, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca4d86103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f487617c318500", 0xa}, 0x60) 37.465708773s ago: executing program 2 (id=765): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b47, &(0x7f0000000140)) 37.293278629s ago: executing program 2 (id=767): syz_mount_image$ntfs3(&(0x7f0000000440), &(0x7f0000000040)='./file1\x00', 0x1014050, &(0x7f0000000140)=ANY=[], 0x1, 0x1f221, &(0x7f000001f6c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 36.658486109s ago: executing program 2 (id=774): syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 21.427400647s ago: executing program 32 (id=774): syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 4.44871275s ago: executing program 0 (id=1076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 4.371864582s ago: executing program 0 (id=1077): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000, 0x4}, 0x20) 4.155523799s ago: executing program 0 (id=1082): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001400b59540000000ffdbdf250a400900", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000000000001"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 3.976510035s ago: executing program 0 (id=1084): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f00000000c0), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) truncate(&(0x7f00000002c0)='./file0\x00', 0x3a7000) 2.22329128s ago: executing program 0 (id=1102): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x20000) 1.921765089s ago: executing program 1 (id=1106): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r0, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x1, 0x80814) 1.767174074s ago: executing program 1 (id=1107): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001a00010028bd7000fcdbdf250a80800000000016"], 0x34}}, 0x20000050) 1.694530136s ago: executing program 0 (id=1109): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="2000280000002831f70ba381034ca395f35eec44a1cb4fdca06c0e000000000000b1d43ee44fbf6fc93f080825"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.57031221s ago: executing program 1 (id=1112): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0xeb}, 0xa) 1.501371362s ago: executing program 1 (id=1114): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, r0, 0xf03, 0x70bd2b, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x40010) 1.342930477s ago: executing program 1 (id=1116): socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/198, 0xc6}, {&(0x7f0000000400)=""/49, 0x31}, {&(0x7f00000005c0)=""/13, 0xd}], 0x3) 1.219727051s ago: executing program 1 (id=1118): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c636f686572656e63793d66756c6c2c6865617274626561743d6e6f6e652c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f757365725f78617474722c008e1d54758732e066b2e39f7bd9e6e2dab460"], 0x1, 0x446c, &(0x7f00000044c0)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, 0x0, 0x0) 1.157411453s ago: executing program 3 (id=1119): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='sysfs\x00', 0x808406, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 999.621828ms ago: executing program 3 (id=1122): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f0000002140)) 889.468461ms ago: executing program 3 (id=1124): setresgid(0xee00, 0xee01, 0x0) setfsgid(0x0) setfsgid(0x0) 770.293805ms ago: executing program 3 (id=1126): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000000c0)) 632.33276ms ago: executing program 3 (id=1128): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x60002, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) 618.89499ms ago: executing program 5 (id=1129): setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) setresuid(0xee01, 0xee00, 0x0) 607.486201ms ago: executing program 4 (id=1130): mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000a00)) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1400, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000001880)=""/196) 511.048793ms ago: executing program 5 (id=1131): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="4f4741494e20274c69988cdc6b4acc7485667a5765681562136e65204361707475726520537769"], 0x37) close(r0) 506.875093ms ago: executing program 4 (id=1132): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="280000001200010a26bd70000000000090b6"], 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 493.798574ms ago: executing program 3 (id=1133): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$dsp(r0, &(0x7f0000000300)=""/238, 0xee) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000080)) 407.370016ms ago: executing program 5 (id=1134): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000340)) 396.125857ms ago: executing program 4 (id=1135): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000580)={0x6, {{0x2, 0x4e25, @multicast2}}, 0x1}, 0x90) 285.52094ms ago: executing program 5 (id=1136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 285.410591ms ago: executing program 4 (id=1137): r0 = socket(0x23, 0x5, 0x0) connect$inet6(r0, 0x0, 0x0) connect$bt_rfcomm(r0, 0x0, 0x0) 193.099703ms ago: executing program 4 (id=1138): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000030600000400000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000004001"], 0x48}}, 0x0) 186.367783ms ago: executing program 5 (id=1139): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000014c0)={0x30, 0x10, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xd, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}, @generic="1d"]}]}, 0x30}], 0x1}, 0x20000000) 67.835827ms ago: executing program 4 (id=1140): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 0s ago: executing program 5 (id=1141): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f00000003c0)={[{}, {@discard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@discard}, {@order_relaxed}, {}], [], 0x2c}, 0x3, 0xeea, &(0x7f0000001e40)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) kernel console output (not intermixed with test programs): T4432] fido_id[4432]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 78.483175][ T4435] System zones: 1-12 [ 78.498485][ T4435] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.510581][ T4435] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33619980: comm syz.2.72: invalid block [ 78.523805][ T4431] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.70: bg 0: block 217: padding at end of block bitmap is not set [ 78.538792][ T4437] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 78.558569][ T4435] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.72: invalid indirect mapped block 2 (level 2) [ 78.601280][ T4431] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 78.610391][ T4440] loop3: detected capacity change from 0 to 736 [ 78.632322][ T4435] EXT4-fs (loop2): 1 truncate cleaned up [ 78.658011][ T4435] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,data=writeback,grpquota,abort,errors=continue. Quota mode: writeback. [ 78.833628][ T4435] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.907077][ T4435] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 79.303915][ T4464] loop3: detected capacity change from 0 to 4096 [ 79.353042][ T4231] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.393479][ T4478] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.431304][ T4481] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 79.753883][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.804122][ T4231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.880705][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 79.882214][ T4231] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 79.950389][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.958816][ T4502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'. [ 80.004007][ T4231] usb 5-1: config 0 descriptor?? [ 80.184520][ T4515] netlink: 88 bytes leftover after parsing attributes in process `syz.3.108'. [ 80.202883][ T4517] loop1: detected capacity change from 0 to 736 [ 80.252843][ T4519] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 80.309463][ T4519] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 80.542243][ T4534] netlink: 52 bytes leftover after parsing attributes in process `syz.0.116'. [ 80.592539][ T4536] loop2: detected capacity change from 0 to 256 [ 80.637763][ T4536] exfat: Deprecated parameter 'utf8' [ 80.694965][ T4536] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 80.713147][ T4281] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 80.733441][ T4231] hid-led: probe of 0003:1D34:000A.0002 failed with error -71 [ 80.769407][ T4231] usb 5-1: USB disconnect, device number 3 [ 81.073329][ T4281] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 81.101617][ T4281] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.119333][ T4281] usb 4-1: config 0 has no interface number 0 [ 81.167710][ T4559] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 81.195613][ T4559] hpfs: filesystem error: improperly stopped [ 81.209347][ T4559] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 81.229499][ T4559] hpfs: You really don't want any checks? You are crazy... [ 81.243279][ T4281] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 81.262800][ T4281] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 81.271191][ T4559] hpfs: hpfs_map_sector(): read error [ 81.291287][ T4559] hpfs: code page support is disabled [ 81.303090][ T4559] hpfs: hpfs_map_4sectors(): unaligned read [ 81.309096][ T4559] hpfs: hpfs_map_4sectors(): unaligned read [ 81.314201][ T4281] usb 4-1: Manufacturer: syz [ 81.349385][ T4281] usb 4-1: SerialNumber: syz [ 81.357963][ T4559] hpfs: filesystem error: unable to find root dir [ 81.380889][ T4281] usb 4-1: config 0 descriptor?? [ 81.660957][ T4578] EXT4-fs (loop0): Ignoring removed bh option [ 81.697673][ T4281] usb 4-1: USB disconnect, device number 3 [ 81.712282][ T4579] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.713798][ T4575] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 81.765600][ T4575] Remounting filesystem read-only [ 81.783660][ T4578] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 82.282527][ T4587] set_capacity_and_notify: 3 callbacks suppressed [ 82.282542][ T4587] loop1: detected capacity change from 0 to 1024 [ 82.469888][ T4589] loop0: detected capacity change from 0 to 8192 [ 82.552841][ T4589] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 82.583596][ T4589] REISERFS (device loop0): using ordered data mode [ 82.687025][ T4589] reiserfs: using flush barriers [ 82.728704][ T4589] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 82.783710][ T4589] REISERFS (device loop0): checking transaction log (loop0) [ 82.801427][ T4576] loop2: detected capacity change from 0 to 32768 [ 83.002780][ T4589] REISERFS (device loop0): Using tea hash to sort names [ 83.016471][ T4576] XFS (loop2): Mounting V5 Filesystem [ 83.025140][ T4589] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 83.212576][ T4576] XFS (loop2): Ending clean mount [ 83.303560][ T4576] XFS (loop2): Quotacheck needed: Please wait. [ 83.333591][ T4624] loop3: detected capacity change from 0 to 4096 [ 83.397371][ T4576] XFS (loop2): Quotacheck: Done. [ 83.418951][ T4624] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 83.476072][ T4624] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 83.546778][ T4624] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 83.609363][ T4624] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 83.669677][ T4635] loop4: detected capacity change from 0 to 512 [ 83.687360][ T4624] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 83.715678][ T4195] XFS (loop2): Unmounting Filesystem [ 83.737854][ T4639] netlink: 200 bytes leftover after parsing attributes in process `syz.1.160'. [ 83.755820][ T4637] loop0: detected capacity change from 0 to 512 [ 83.755875][ T4635] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 83.773400][ T4624] ntfs: volume version 3.1. [ 83.797392][ T4637] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.813052][ T4635] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 83.824457][ T4624] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 83.840194][ T4635] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 83.873522][ T4624] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 83.913275][ T4635] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 83.928315][ T4635] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8802c198, mo2=0000] [ 83.935760][ T4624] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 83.948537][ T4624] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 83.961784][ T4624] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 83.990907][ T4635] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.998737][ T4637] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 84.068113][ T4635] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.159: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 84.087939][ T4637] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.154: Failed to acquire dquot type 1 [ 84.125921][ T4637] EXT4-fs (loop0): 1 truncate cleaned up [ 84.131634][ T4637] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,inode_readahead_blks=0x0000000002000000,resgid=0x0000000000000000,norecovery,quota,auto_da_alloc,auto_da_alloc=0x0000000000000001,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 84.158994][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.185388][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 84.200192][ T4635] EXT4-fs error (device loop4): ext4_quota_enable:6447: comm syz.4.159: Bad quota inode: 4, type: 1 [ 84.283169][ T4635] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.300629][ T4637] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.154: Failed to acquire dquot type 1 [ 84.349428][ T4635] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 84.361321][ T4635] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,bsddf,nodioread_nolock,acl,debug,noblock_validity,usrjquota=,minixdf,min_batch_time=0x0000000000000008,resgid=0x0000000000000000,sysvgroups,,errors=continue. Quota mode: writeback. [ 84.941177][ T4672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 84.956664][ T4671] loop4: detected capacity change from 0 to 1024 [ 85.048863][ T4675] loop1: detected capacity change from 0 to 256 [ 85.101308][ T4680] loop0: detected capacity change from 0 to 512 [ 85.158972][ T4671] hfsplus: bad catalog file entry [ 85.178771][ T4680] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 85.291361][ T4680] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.177: corrupted in-inode xattr [ 85.315483][ T4680] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.177: couldn't read orphan inode 15 (err -117) [ 85.384366][ T154] hfsplus: bad catalog file entry [ 85.409786][ T4680] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,inode_readahead_blks=0x0000000000000001,grpid,noload,delalloc,max_batch_time=0x0000000000000001,discard,inode_readahead_blks=0x0000000000004000,nomblk_io_submit,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 85.512273][ T4696] loop1: detected capacity change from 0 to 1024 [ 85.627930][ T4696] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 85.727501][ T4709] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.841153][ T4711] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 85.866917][ T4702] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 85.913072][ T4702] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 85.936604][ T4702] Remounting filesystem read-only [ 85.941751][ T4702] NILFS (loop4): error -5 truncating bmap (ino=12) [ 86.091059][ T4196] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 86.555705][ T4743] EXT4-fs (loop0): Ignoring removed bh option [ 86.592202][ T4743] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 86.628812][ T1110] cfg80211: failed to load regulatory.db [ 86.717994][ T4743] EXT4-fs error (device loop0): empty_inline_dir:1873: inode #12: block 7: comm syz.0.205: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 86.754534][ T4743] EXT4-fs (loop0): Remounting filesystem read-only [ 86.761271][ T4743] EXT4-fs warning (device loop0): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 86.789301][ T4754] netlink: 'syz.3.210': attribute type 2 has an invalid length. [ 86.805380][ T4755] erofs: (device loop1): mounted with root inode @ nid 36. [ 87.383316][ T4770] netlink: 'syz.4.218': attribute type 8 has an invalid length. [ 87.408040][ T4775] set_capacity_and_notify: 7 callbacks suppressed [ 87.408055][ T4775] loop1: detected capacity change from 0 to 128 [ 87.519842][ T4775] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 87.621000][ T4775] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.849862][ T4789] loop3: detected capacity change from 0 to 256 [ 87.878146][ T4791] loop2: detected capacity change from 0 to 64 [ 88.073065][ T4229] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.429507][ T4816] loop2: detected capacity change from 0 to 256 [ 88.467454][ T4816] exfat: Deprecated parameter 'utf8' [ 88.486861][ T4816] exfat: Deprecated parameter 'utf8' [ 88.513552][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.531102][ T4816] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 88.565333][ T4819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.240'. [ 88.615387][ T4229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.641176][ T4229] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 88.699246][ T4229] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 24 [ 88.913329][ T4229] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 88.953125][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.990445][ T4839] loop4: detected capacity change from 0 to 64 [ 88.993231][ T4229] usb 1-1: Product: syz [ 89.013066][ T4229] usb 1-1: Manufacturer: syz [ 89.017742][ T4229] usb 1-1: SerialNumber: syz [ 89.052752][ T4229] usb 1-1: config 0 descriptor?? [ 89.083436][ T4785] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.092863][ T4785] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.133006][ C1] usb 1-1: NFC: Urb failure (status -71) [ 89.152981][ C1] usb 1-1: NFC: Urb failure (status -71) [ 89.162724][ T4229] usb 1-1: NFC: Unable to get FW version [ 89.183883][ T4229] pn533_usb: probe of 1-1:0.0 failed with error -71 [ 89.319137][ T4849] loop1: detected capacity change from 0 to 512 [ 89.355171][ T1110] usb 1-1: USB disconnect, device number 2 [ 89.392599][ T4849] EXT4-fs (loop1): Ignoring removed nobh option [ 89.409963][ T4849] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 89.449859][ T4849] EXT4-fs (loop1): orphan cleanup on readonly fs [ 89.461706][ T4849] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 89.502343][ T4849] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.254: attempt to clear invalid blocks 2 len 1 [ 89.531074][ T4849] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 89.631794][ T4849] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.254: invalid indirect mapped block 1819239214 (level 0) [ 89.709202][ T4849] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.254: invalid indirect mapped block 1819239214 (level 1) [ 89.798651][ T4849] EXT4-fs (loop1): 1 truncate cleaned up [ 89.820035][ T4849] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,nobh,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 89.975545][ T4849] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work [ 90.405541][ T4885] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 90.432843][ T4854] loop4: detected capacity change from 0 to 32768 [ 90.658235][ T154] attempt to access beyond end of device [ 90.658235][ T154] loop4: rw=1, want=2621800, limit=32768 [ 90.688072][ T277] blkno = 5002c, nblocks = 1 [ 90.695735][ T277] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 90.695735][ T277] [ 90.765261][ T277] ERROR: (device loop4): remounting filesystem as read-only [ 90.792099][ T4879] loop3: detected capacity change from 0 to 32768 [ 90.842216][ T4879] XFS (loop3): Mounting V5 Filesystem [ 90.937918][ T4879] XFS (loop3): Ending clean mount [ 90.954714][ T4879] XFS (loop3): Quotacheck needed: Please wait. [ 91.041913][ T4879] XFS (loop3): Quotacheck: Done. [ 91.265248][ T4197] XFS (loop3): Unmounting Filesystem [ 91.622643][ T4932] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.290'. [ 91.916610][ T4945] loop4: detected capacity change from 0 to 256 [ 91.954269][ T4950] loop0: detected capacity change from 0 to 64 [ 92.033133][ T4950] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 92.056531][ T4947] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 92.066034][ T4950] hfs: filesystem is marked locked, mounting read-only. [ 92.136173][ T4947] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 92.241747][ T4948] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 92.311970][ T4948] REISERFS (device loop3): using ordered data mode [ 92.344813][ T4948] reiserfs: using flush barriers [ 92.370712][ T9] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 92.387100][ T4948] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.407017][ T4948] REISERFS (device loop3): checking transaction log (loop3) [ 92.417236][ T4189] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 92.424508][ T4948] REISERFS (device loop3): Using r5 hash to sort names [ 92.453573][ T4189] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 92.463200][ T4189] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 92.470358][ T4948] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 92.485420][ T4956] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 92.530125][ T4956] REISERFS (device loop0): using ordered data mode [ 92.537090][ T154] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 92.542585][ T4956] reiserfs: using flush barriers [ 92.573005][ T4956] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.594049][ T4189] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 92.727014][ T4968] set_capacity_and_notify: 3 callbacks suppressed [ 92.727031][ T4968] loop2: detected capacity change from 0 to 64 [ 92.753773][ T4956] REISERFS (device loop0): checking transaction log (loop0) [ 92.793380][ T4956] REISERFS (device loop0): Using tea hash to sort names [ 92.833346][ T4956] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 93.143162][ T4229] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 93.152349][ T4985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 93.320346][ T4993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 93.470640][ T5001] nbd: must specify a device to reconfigure [ 93.553378][ T4229] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.571694][ T4229] usb 4-1: config 0 has no interface number 0 [ 93.663083][ T4281] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.773356][ T4229] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 93.804095][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.812202][ T4229] usb 4-1: Product: syz [ 93.841846][ T4229] usb 4-1: Manufacturer: syz [ 93.847006][ T4229] usb 4-1: SerialNumber: syz [ 93.879834][ T4229] usb 4-1: config 0 descriptor?? [ 93.945588][ T4229] usb 4-1: selecting invalid altsetting 1 [ 93.956986][ T4229] dvb_ttusb_budget: ttusb_init_controller: error [ 93.991735][ T4229] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 94.112421][ T4229] DVB: Unable to find symbol stv0299_attach() [ 94.119834][ T4281] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 94.150577][ T4281] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 32 [ 94.189682][ T4281] usb 5-1: config 1 interface 0 has no altsetting 0 [ 94.239610][ T4229] DVB: Unable to find symbol tda8083_attach() [ 94.253080][ T4229] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 94.296585][ T4229] usb 4-1: USB disconnect, device number 4 [ 94.383270][ T4281] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.402763][ T4281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.431841][ T4281] usb 5-1: Product: syz [ 94.448349][ T4281] usb 5-1: Manufacturer: syz [ 94.463587][ T4281] usb 5-1: SerialNumber: syz [ 94.463793][ T5040] netlink: 80 bytes leftover after parsing attributes in process `syz.1.339'. [ 94.503992][ T4996] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 94.511700][ T4996] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 94.558210][ T5019] loop2: detected capacity change from 0 to 32768 [ 94.665154][ T154] attempt to access beyond end of device [ 94.665154][ T154] loop2: rw=1, want=2621800, limit=32768 [ 94.691261][ T277] blkno = 5002c, nblocks = 1 [ 94.696134][ T277] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 94.696134][ T277] [ 94.733251][ T277] ERROR: (device loop2): remounting filesystem as read-only [ 94.845739][ T4281] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 94.879625][ T4281] usb 5-1: USB disconnect, device number 4 [ 95.125167][ T5042] loop1: detected capacity change from 0 to 32768 [ 95.162047][ T5042] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.340 (5042) [ 95.259881][ T5044] loop0: detected capacity change from 0 to 32768 [ 95.351096][ T5042] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 95.391699][ T5042] BTRFS info (device loop1): using free space tree [ 95.433462][ T5052] loop4: detected capacity change from 0 to 2048 [ 95.463271][ T5042] BTRFS info (device loop1): has skinny extents [ 95.477094][ T5052] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.537659][ T5044] XFS (loop0): Mounting V5 Filesystem [ 95.559502][ T5058] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.589370][ T5052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'. [ 95.710547][ T5044] XFS (loop0): Ending clean mount [ 95.718863][ T5044] XFS (loop0): Quotacheck needed: Please wait. [ 95.805478][ T5044] XFS (loop0): Quotacheck: Done. [ 95.841487][ T5077] loop3: detected capacity change from 0 to 1024 [ 95.893048][ T5042] BTRFS info (device loop1): enabling ssd optimizations [ 95.951957][ T5077] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 95.984282][ T5042] BTRFS error (device loop1): balance: mixed groups data and metadata options must be the same [ 96.021252][ T4188] XFS (loop0): Unmounting Filesystem [ 96.151163][ T5094] EXT4-fs warning (device loop3): empty_inline_dir:1862: bad inline directory (dir #12) - no `..' [ 96.410913][ T5107] Zero length message leads to an empty skb [ 96.646848][ T4182] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop1 scanned by udevd (4182) [ 96.820560][ T5120] loop4: detected capacity change from 0 to 512 [ 97.084471][ T5120] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.362: inode #1: comm syz.4.362: iget: illegal inode # [ 97.138111][ T5120] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.362: error while reading EA inode 1 err=-117 [ 97.199804][ T5120] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.362: inode #1: comm syz.4.362: iget: illegal inode # [ 97.239072][ T5120] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.362: error while reading EA inode 1 err=-117 [ 97.292734][ T5120] EXT4-fs (loop4): 1 orphan inode deleted [ 97.300017][ T5120] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 97.345099][ T5143] loop3: detected capacity change from 0 to 4096 [ 97.413144][ T5146] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.425151][ T5143] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 97.446581][ T5120] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.362: deleted inode referenced: 15 [ 97.493540][ T5143] Remounting filesystem read-only [ 97.498602][ T5148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 97.539997][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'. [ 97.586784][ T5148] netlink: 'syz.2.370': attribute type 14 has an invalid length. [ 97.734356][ T5152] loop3: detected capacity change from 0 to 64 [ 98.173466][ T5174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.383'. [ 98.203558][ T5174] netlink: 16 bytes leftover after parsing attributes in process `syz.4.383'. [ 98.325057][ T5145] loop1: detected capacity change from 0 to 32768 [ 98.417681][ T5186] loop2: detected capacity change from 0 to 512 [ 98.477135][ T5145] XFS (loop1): Mounting V5 Filesystem [ 98.536596][ T5186] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.389: invalid indirect mapped block 256 (level 2) [ 98.614250][ T5204] loop3: detected capacity change from 0 to 256 [ 98.637966][ T5191] loop4: detected capacity change from 0 to 4096 [ 98.646678][ T5186] EXT4-fs (loop2): 2 truncates cleaned up [ 98.652450][ T5186] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,nombcache,,errors=continue. Quota mode: writeback. [ 98.721451][ T5191] EXT4-fs (loop4): Ignoring removed bh option [ 98.732525][ T5191] EXT4-fs (loop4): Test dummy encryption mode enabled [ 98.784080][ T5191] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 98.792301][ T5191] System zones: 0-5 [ 98.871945][ T5191] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,bh,test_dummy_encryption,nodiscard,nojournal_checksum,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 98.991086][ T5145] XFS (loop1): Ending clean mount [ 98.996497][ T5213] tipc: Started in network mode [ 99.011702][ T5213] tipc: Node identity , cluster identity 4711 [ 99.018391][ T5145] XFS (loop1): Quotacheck needed: Please wait. [ 99.163359][ T5145] XFS (loop1): Quotacheck: Done. [ 99.332783][ T5229] loop4: detected capacity change from 0 to 24 [ 99.503456][ T5235] program syz.2.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.571239][ T5240] loop4: detected capacity change from 0 to 164 [ 99.618431][ T4189] XFS (loop1): Unmounting Filesystem [ 99.670063][ T5240] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 99.947653][ T5258] vivid-008: disconnect [ 99.964161][ T5257] loop2: detected capacity change from 0 to 512 [ 99.978889][ T5256] vivid-008: reconnect [ 100.058936][ T5255] loop0: detected capacity change from 0 to 4096 [ 100.186916][ T5257] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 100.219085][ T5257] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.425501][ T5255] ntfs3: loop0: failed to convert "0080" to maciceland [ 101.679434][ T5296] loop3: detected capacity change from 0 to 32768 [ 101.809158][ T5296] JBD2: Ignoring recovery information on journal [ 102.035376][ T5286] F2FS-fs (loop1): invalid crc value [ 102.054041][ T5296] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 102.073583][ T5325] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.124661][ T5325] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 102.140085][ T5286] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.225552][ T5296] (syz.3.434,5296,1):ocfs2_reflink_ioctl:4454 ERROR: status = -14 [ 102.290406][ T5337] netlink: 32 bytes leftover after parsing attributes in process `syz.2.450'. [ 102.407750][ T4197] ocfs2: Unmounting device (7,3) on (node local) [ 102.417889][ T5286] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 102.467197][ T5286] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.689179][ T5127] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.804792][ T5350] set_capacity_and_notify: 2 callbacks suppressed [ 102.804808][ T5350] loop3: detected capacity change from 0 to 4096 [ 102.837867][ T5350] EXT4-fs (loop3): Ignoring removed bh option [ 102.850199][ T5350] EXT4-fs (loop3): Test dummy encryption mode enabled [ 102.905205][ T5350] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 102.935016][ T5350] System zones: 0-5 [ 102.971887][ T5350] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,bh,test_dummy_encryption,nodiscard,nojournal_checksum,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 103.003404][ T5127] usb 5-1: Using ep0 maxpacket: 32 [ 103.036811][ T5347] loop2: detected capacity change from 0 to 32768 [ 103.143442][ T5127] usb 5-1: config 10 has an invalid interface number: 251 but max is 0 [ 103.155405][ T5127] usb 5-1: config 10 has no interface number 0 [ 103.175652][ T5127] usb 5-1: config 10 interface 251 has no altsetting 0 [ 103.324717][ T5355] loop3: detected capacity change from 0 to 136 [ 103.373450][ T5127] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= 5.ff [ 103.404907][ T5127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.443216][ T5127] usb 5-1: Product: syz [ 103.453910][ T5127] usb 5-1: Manufacturer: syz [ 103.474320][ T5127] usb 5-1: SerialNumber: syz [ 103.586527][ T5365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 103.828097][ T5127] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 103.867454][ T5379] tipc: Enabling of bearer rejected, failed to enable media [ 103.873793][ T5127] gspca_sunplus: reg_r err -71 [ 103.880679][ T5127] sunplus: probe of 5-1:10.251 failed with error -71 [ 103.932817][ T5127] usb 5-1: USB disconnect, device number 5 [ 104.103089][ T5119] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.361607][ T5391] netlink: 48 bytes leftover after parsing attributes in process `syz.4.475'. [ 104.513349][ T5119] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 104.527285][ T5119] usb 3-1: config 0 has no interface number 0 [ 104.551514][ T5119] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 104.562613][ T5119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.599005][ T5403] loop0: detected capacity change from 0 to 128 [ 104.606641][ T5119] usb 3-1: config 0 descriptor?? [ 104.637123][ T5403] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.654609][ T5119] ums-realtek 3-1:0.4: USB Mass Storage device detected [ 104.698955][ T5403] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.835356][ T5409] loop4: detected capacity change from 0 to 2048 [ 104.871765][ T5127] usb 3-1: USB disconnect, device number 2 [ 104.896934][ T144] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.975244][ T5409] EXT4-fs (loop4): Unrecognized mount option "obj_role=seclabel" or missing value [ 105.136841][ T5428] loop4: detected capacity change from 0 to 512 [ 105.232456][ T5435] loop0: detected capacity change from 0 to 256 [ 105.268699][ T5428] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,grpquota,,errors=continue. Quota mode: writeback. [ 105.293784][ T5428] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.375734][ T5119] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.494344][ T5428] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.491: Directory hole found for htree leaf block 0 [ 105.686546][ T5119] usb 4-1: Using ep0 maxpacket: 32 [ 105.814321][ T5455] loop4: detected capacity change from 0 to 8 [ 105.830760][ T5119] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.852353][ T5119] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.855397][ T5455] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 105.886048][ T5119] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.924816][ T4498] udevd[4498]: incorrect cramfs checksum on /dev/loop4 [ 105.940687][ T5455] cramfs: Error -3 while decompressing! [ 105.972315][ T5460] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.979891][ T5455] cramfs: ffffffff964040c8(26)->ffff888057d24000(4096) [ 105.998258][ T4180] udevd[4180]: incorrect cramfs checksum on /dev/loop4 [ 106.033886][ T5455] cramfs: Error -5 while decompressing! [ 106.039572][ T5455] cramfs: ffffffff964040e2(26)->ffff888057d0b000(4096) [ 106.047071][ T5460] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 106.079087][ T4180] udevd[4180]: incorrect cramfs checksum on /dev/loop4 [ 106.110173][ T5455] cramfs: Error 2 while decompressing! [ 106.135443][ T4180] udevd[4180]: incorrect cramfs checksum on /dev/loop4 [ 106.151376][ T5470] loop2: detected capacity change from 0 to 64 [ 106.158267][ T5455] cramfs: ffffffff964040fc(16)->ffff888057d0a000(4096) [ 106.173637][ T5119] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 106.194126][ T5455] cramfs: Error -3 while decompressing! [ 106.196111][ T5119] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 106.223431][ T5455] cramfs: ffffffff964040c8(26)->ffff888057d24000(4096) [ 106.246906][ T4180] udevd[4180]: incorrect cramfs checksum on /dev/loop4 [ 106.256832][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 106.256845][ T26] audit: type=1800 audit(1778709697.092:16): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.504" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 106.274953][ T5119] usb 4-1: Product: syz [ 106.315968][ T5119] usb 4-1: Manufacturer: syz [ 106.331373][ T4180] udevd[4180]: incorrect cramfs checksum on /dev/loop4 [ 106.351129][ T5119] usb 4-1: SerialNumber: syz [ 106.419170][ T5119] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6 [ 106.624643][ T1107] usb 4-1: USB disconnect, device number 5 [ 106.721375][ T5486] loop1: detected capacity change from 0 to 2048 [ 106.724145][ T1107] appletouch 4-1:1.0: input: appletouch disconnected [ 106.812215][ T5486] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.870411][ T26] audit: type=1800 audit(1778709697.702:17): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.517" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 106.895445][ T5482] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 106.933658][ T5482] REISERFS (device loop2): using ordered data mode [ 106.940483][ T5482] reiserfs: using flush barriers [ 106.963001][ T5482] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.045125][ T5482] REISERFS (device loop2): checking transaction log (loop2) [ 107.065693][ T5482] REISERFS (device loop2): Using r5 hash to sort names [ 107.072866][ T5482] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 107.145429][ T5506] netlink: 32 bytes leftover after parsing attributes in process `syz.4.528'. [ 107.186123][ T5501] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 107.256002][ T5510] syz.3.530 uses obsolete (PF_INET,SOCK_PACKET) [ 107.454770][ T5521] PKCS8: Unsupported PKCS#8 version [ 107.807695][ T5524] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 107.857294][ T5524] REISERFS (device loop1): using ordered data mode [ 107.865526][ T5524] reiserfs: using flush barriers [ 107.871621][ T5524] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.889679][ T5524] REISERFS (device loop1): checking transaction log (loop1) [ 107.900095][ T5524] REISERFS (device loop1): Using rupasov hash to sort names [ 107.925271][ T5524] REISERFS (device loop1): using 3.5.x disk format [ 107.933147][ T5535] hfsplus: bad catalog entry type [ 107.946498][ T5524] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 107.979858][ T5524] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 108.013610][ T5524] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 108.090560][ T4797] hfsplus: b-tree write err: -5, ino 25 [ 108.112212][ T5524] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 108.124334][ T4797] hfsplus: b-tree write err: -5, ino 4 [ 108.129909][ T4797] hfsplus: b-tree write err: -5, ino 2 [ 108.308921][ T5524] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "noload" [ 108.325822][ T5550] set_capacity_and_notify: 5 callbacks suppressed [ 108.325837][ T5550] loop0: detected capacity change from 0 to 256 [ 108.408857][ T5552] netlink: 536 bytes leftover after parsing attributes in process `syz.4.551'. [ 108.464362][ T5550] FAT-fs (loop0): Directory bread(block 64) failed [ 108.484685][ T5550] FAT-fs (loop0): Directory bread(block 65) failed [ 108.491305][ T5550] FAT-fs (loop0): Directory bread(block 66) failed [ 108.554281][ T5550] FAT-fs (loop0): Directory bread(block 67) failed [ 108.560941][ T5550] FAT-fs (loop0): Directory bread(block 68) failed [ 108.604994][ T5550] FAT-fs (loop0): Directory bread(block 69) failed [ 108.663155][ T5550] FAT-fs (loop0): Directory bread(block 70) failed [ 108.669746][ T5550] FAT-fs (loop0): Directory bread(block 71) failed [ 108.720779][ T5550] FAT-fs (loop0): Directory bread(block 72) failed [ 108.753104][ T5550] FAT-fs (loop0): Directory bread(block 73) failed [ 108.918928][ T5568] xt_HMARK: spi-set and port-set can't be combined [ 108.926247][ T5569] netlink: 60 bytes leftover after parsing attributes in process `syz.4.559'. [ 109.136994][ T5544] loop2: detected capacity change from 0 to 32768 [ 109.270712][ T5544] JBD2: Ignoring recovery information on journal [ 109.423384][ T5544] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 109.518280][ T5595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 109.539934][ T5597] loop3: detected capacity change from 0 to 64 [ 109.603144][ T5544] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 109.695343][ T5601] loop1: detected capacity change from 0 to 164 [ 109.702084][ T5544] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 109.743354][ T5544] OCFS2: File system is now read-only. [ 109.761110][ T5544] (syz.2.547,5544,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 109.848490][ T5544] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 109.915961][ T5544] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 109.946168][ T5544] (syz.2.547,5544,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 109.989637][ T5544] (syz.2.547,5544,1):ocfs2_mknod:502 ERROR: status = -30 [ 110.019397][ T5544] (syz.2.547,5544,1):ocfs2_create:676 ERROR: status = -30 [ 110.108159][ T5615] loop0: detected capacity change from 0 to 4096 [ 110.127656][ T5621] loop4: detected capacity change from 0 to 256 [ 110.146730][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 110.178247][ T5615] EXT4-fs (loop0): Test dummy encryption mode enabled [ 110.184926][ T5621] exfat: Deprecated parameter 'utf8' [ 110.218618][ T5621] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 110.290553][ T5615] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 110.480670][ T5615] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 111.111858][ T5661] mmap: syz.0.602 (5661) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 111.195074][ T5663] loop3: detected capacity change from 0 to 2048 [ 111.350415][ T5675] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.401268][ T5680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 111.451353][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 111.586531][ T5688] binder: 5687:5688 ioctl c0306201 2000000001c0 returned -22 [ 111.657142][ T5692] netlink: 'syz.2.617': attribute type 2 has an invalid length. [ 111.986395][ T5701] loop1: detected capacity change from 0 to 4096 [ 112.152193][ T5701] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 112.207832][ T5701] ntfs3: loop1: Failed to load $Extend. [ 112.348665][ T5712] loop2: detected capacity change from 0 to 8192 [ 112.613160][ T4281] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 112.909722][ T5696] loop3: detected capacity change from 0 to 32768 [ 112.973246][ T4281] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 112.993006][ T4281] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 113.005359][ T4281] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.018961][ T4281] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.028355][ T4281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.100922][ T5714] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 113.127213][ T5714] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 113.135966][ T5714] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x1ffff [ 113.145919][ T5714] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x7 [ 113.164139][ T5714] F2FS-fs (loop0): invalid crc value [ 113.171520][ T4281] usb 5-1: invalid MIDI out EP 0 [ 113.187808][ T5714] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.234245][ T5696] XFS (loop3): Mounting V5 Filesystem [ 113.342506][ T5714] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 113.353338][ T5714] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.378382][ T5696] XFS (loop3): Ending clean mount [ 113.386704][ T5119] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 [ 113.403702][ T5119] XFS (loop3): Unmount and run xfs_repair [ 113.409603][ T5119] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 113.421456][ T5119] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 113.432025][ T5119] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 113.445323][ T5119] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 113.455534][ T5119] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 113.464538][ T5119] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 113.473654][ T5119] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.482530][ T5119] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 113.492039][ T5119] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.501457][ T5696] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74 [ 113.521740][ T5696] XFS (loop3): Failed to initialize disk quotas. [ 113.591480][ T4197] XFS (loop3): Unmounting Filesystem [ 113.674579][ T5119] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.767780][ T4281] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 113.789668][ T4281] usb 5-1: USB disconnect, device number 6 [ 113.819561][ T4188] attempt to access beyond end of device [ 113.819561][ T4188] loop0: rw=2049, want=45104, limit=40427 [ 114.054360][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.077854][ T5761] netlink: 16 bytes leftover after parsing attributes in process `syz.4.647'. [ 114.126467][ T5119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.150460][ T5119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.190854][ T5119] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 114.200323][ T5119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.211145][ T5119] usb 3-1: config 0 descriptor?? [ 114.352322][ T5771] set_capacity_and_notify: 1 callbacks suppressed [ 114.352336][ T5771] loop4: detected capacity change from 0 to 512 [ 114.405582][ T5774] loop3: detected capacity change from 0 to 1024 [ 114.471402][ T5771] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 114.549196][ T5771] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 114.623312][ T5771] System zones: 1-12 [ 114.628054][ T5771] EXT4-fs (loop4): orphan cleanup on readonly fs [ 114.650052][ T5784] loop1: detected capacity change from 0 to 512 [ 114.667626][ T5771] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.650: invalid indirect mapped block 12 (level 1) [ 114.689708][ T5771] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.650: invalid indirect mapped block 2 (level 2) [ 114.707000][ T5119] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x3 [ 114.715744][ T5119] arvo 0003:1E7D:30D4.0003: item fetching failed at offset 5/7 [ 114.724561][ T5119] arvo 0003:1E7D:30D4.0003: parse failed [ 114.734687][ T5771] EXT4-fs (loop4): 1 truncate cleaned up [ 114.741270][ T5771] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nobarrier,,,errors=continue. Quota mode: writeback. [ 114.763877][ T5119] arvo: probe of 0003:1E7D:30D4.0003 failed with error -22 [ 114.851328][ T5784] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 114.863947][ T5784] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.947474][ T4256] usb 3-1: USB disconnect, device number 3 [ 115.031360][ T5799] tipc: Enabling of bearer rejected, failed to enable media [ 115.104226][ T5804] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.409037][ T5818] loop0: detected capacity change from 0 to 256 [ 115.485753][ T5818] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 115.659866][ T5828] loop1: detected capacity change from 0 to 2048 [ 115.688497][ T5834] loop2: detected capacity change from 0 to 64 [ 115.702474][ T5833] loop3: detected capacity change from 0 to 16 [ 115.713976][ T4281] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 115.783166][ T5833] erofs: (device loop3): mounted with root inode @ nid 36. [ 115.847350][ T5828] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.946956][ T5834] MINIX-fs: deleted inode referenced: 6 [ 116.011248][ T5842] loop0: detected capacity change from 0 to 256 [ 116.030617][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 116.045121][ T5834] MINIX-fs: deleted inode referenced: 6 [ 116.073144][ T4281] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.104569][ T5842] FAT-fs (loop0): Directory bread(block 64) failed [ 116.112800][ T4281] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.134079][ T5842] FAT-fs (loop0): Directory bread(block 65) failed [ 116.151923][ T5842] FAT-fs (loop0): Directory bread(block 66) failed [ 116.173334][ T5842] FAT-fs (loop0): Directory bread(block 67) failed [ 116.183156][ T4281] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.186757][ T5846] loop3: detected capacity change from 0 to 512 [ 116.206339][ T5842] FAT-fs (loop0): Directory bread(block 68) failed [ 116.219146][ T5842] FAT-fs (loop0): Directory bread(block 69) failed [ 116.226563][ T4281] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.227932][ T5842] FAT-fs (loop0): Directory bread(block 70) failed [ 116.240094][ T5842] FAT-fs (loop0): Directory bread(block 71) failed [ 116.245644][ T4281] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 116.258418][ T5842] FAT-fs (loop0): Directory bread(block 72) failed [ 116.261359][ T4281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.299528][ T5842] FAT-fs (loop0): Directory bread(block 73) failed [ 116.305951][ T4281] usb 5-1: config 0 descriptor?? [ 116.363465][ T5846] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 116.423525][ T5855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.685'. [ 116.597040][ T5846] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz.3.683: Directory block failed checksum [ 116.630570][ T5864] loop0: detected capacity change from 0 to 1024 [ 116.827432][ T4281] holtek 0003:1241:5015.0004: invalid report_count -253143550 [ 116.858071][ T4281] holtek 0003:1241:5015.0004: item 0 4 1 9 parsing failed [ 116.872879][ T4281] holtek 0003:1241:5015.0004: parse failed [ 116.879138][ T4281] holtek: probe of 0003:1241:5015.0004 failed with error -22 [ 116.918523][ T5874] tipc: Enabling not permitted [ 116.924562][ T5874] tipc: Enabling of bearer rejected, failed to enable media [ 116.967750][ T5866] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 116.978144][ T5866] REISERFS (device loop1): using ordered data mode [ 116.985400][ T5866] reiserfs: using flush barriers [ 116.997091][ T5866] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 11, max trans age 11 [ 117.029328][ T5872] SQUASHFS error: Unable to read directory block [2c0:35] [ 117.043416][ T5866] REISERFS (device loop1): checking transaction log (loop1) [ 117.049423][ T5115] usb 5-1: USB disconnect, device number 7 [ 117.064865][ T5866] REISERFS (device loop1): Using r5 hash to sort names [ 117.074491][ T5866] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 117.130029][ T5866] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 117.869793][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'. [ 117.905524][ T5903] device gretap0 entered promiscuous mode [ 117.905759][ T5903] device vlan2 entered promiscuous mode [ 117.939334][ T5895] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 117.965587][ T5895] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 117.969452][ T5895] ntfs3: loop1: Failed to load $Extend. [ 118.513389][ T5119] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.639257][ T5934] EXT4-fs (loop0): Ignoring removed orlov option [ 118.701602][ T5934] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000003,,errors=continue. Quota mode: writeback. [ 118.913248][ T5119] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.938390][ T5119] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.002132][ T5916] XFS (loop3): Mounting V5 Filesystem [ 119.043463][ T5119] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.052853][ T5119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 119.061671][ T5119] usb 3-1: SerialNumber: syz [ 119.121009][ T5916] XFS (loop3): Ending clean mount [ 119.197306][ T5964] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.219471][ T4281] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 119.227959][ T4197] XFS (loop3): Unmounting Filesystem [ 119.369566][ T5119] usb 3-1: 0:2 : does not exist [ 119.384975][ T5119] usb 3-1: USB disconnect, device number 4 [ 119.473784][ T4281] usb 5-1: Using ep0 maxpacket: 16 [ 119.593229][ T4281] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.626819][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.637538][ T5980] netlink: 'syz.0.740': attribute type 4 has an invalid length. [ 119.650901][ T4281] usb 5-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 119.650931][ T4281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.720138][ T5980] netlink: 17 bytes leftover after parsing attributes in process `syz.0.740'. [ 119.735833][ T4281] usb 5-1: config 0 descriptor?? [ 119.743189][ T5983] set_capacity_and_notify: 6 callbacks suppressed [ 119.743203][ T5983] loop1: detected capacity change from 0 to 64 [ 119.790337][ T5983] hfs: bad catalog folder thread [ 119.961396][ T5993] loop2: detected capacity change from 0 to 64 [ 120.115795][ T5989] loop3: detected capacity change from 0 to 8192 [ 120.145623][ T5989] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 120.164148][ T5989] REISERFS (device loop3): using ordered data mode [ 120.170718][ T5989] reiserfs: using flush barriers [ 120.234880][ T4281] betop 0003:8380:1850.0005: unknown global tag 0xe [ 120.241562][ T4281] betop 0003:8380:1850.0005: item 0 4 1 14 parsing failed [ 120.262696][ T5989] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 11, max trans age 11 [ 120.265070][ T4281] betop 0003:8380:1850.0005: parse failed [ 120.293023][ T4281] betop: probe of 0003:8380:1850.0005 failed with error -22 [ 120.362873][ T5989] REISERFS (device loop3): checking transaction log (loop3) [ 120.423865][ T5989] REISERFS (device loop3): Using r5 hash to sort names [ 120.441450][ T5989] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 120.479332][ T4281] usb 5-1: USB disconnect, device number 8 [ 120.519078][ T5989] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 120.726535][ T6012] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 120.741575][ T6012] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 120.748621][ T6012] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 120.761639][ T6012] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 120.772113][ T6012] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 120.813529][ T6012] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 120.830904][ T6012] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 120.871399][ T6012] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 120.880330][ T6012] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 120.887410][ T6012] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 120.894655][ T6012] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 120.901396][ T6012] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 120.908295][ T6012] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 120.916559][ T6012] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 120.926315][ T6012] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 120.939238][ T6012] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 120.947534][ T6012] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 120.971181][ T6012] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 120.978378][ T5999] loop0: detected capacity change from 0 to 32768 [ 120.993101][ T6012] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 121.000651][ T6001] loop1: detected capacity change from 0 to 32768 [ 121.057224][ T5999] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.748 (5999) [ 121.077981][ T5999] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 121.097574][ T6001] XFS (loop1): Mounting V5 Filesystem [ 121.117198][ T5999] BTRFS info (device loop0): setting nodatasum [ 121.125637][ T5999] BTRFS info (device loop0): enabling auto defrag [ 121.189031][ T6001] XFS (loop1): Ending clean mount [ 121.189037][ T6030] loop4: detected capacity change from 0 to 8 [ 121.192848][ T5999] BTRFS info (device loop0): disabling tree log [ 121.194220][ T5999] BTRFS info (device loop0): using free space tree [ 121.194238][ T5999] BTRFS info (device loop0): has skinny extents [ 121.310699][ T4189] XFS (loop1): Unmounting Filesystem [ 121.316279][ T5124] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 121.349021][ T6038] loop2: detected capacity change from 0 to 256 [ 121.504059][ T6038] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.651398][ T5999] BTRFS info (device loop0): enabling ssd optimizations [ 121.773300][ T5124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.803527][ T5124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.873913][ T5124] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 121.913159][ T5124] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 121.931511][ T5124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.973597][ T5124] usb 4-1: config 0 descriptor?? [ 122.089037][ T6065] loop2: detected capacity change from 0 to 4096 [ 122.156323][ T6065] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 122.259576][ T6073] loop1: detected capacity change from 0 to 256 [ 122.373736][ T6065] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 122.391118][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.769'. [ 122.422030][ T6065] ntfs3: loop2: Inode r=b is not in use! [ 122.458789][ T6065] ntfs3: loop2: Failed to load $Extend. [ 122.475660][ T5124] steelseries_srws1 0003:1038:1410.0006: unknown main item tag 0x1 [ 122.499845][ T5124] steelseries_srws1 0003:1038:1410.0006: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 122.630820][ T6086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.773'. [ 122.701219][ T5124] usb 4-1: USB disconnect, device number 6 [ 122.859275][ T6094] loop4: detected capacity change from 0 to 1024 [ 122.933559][ T6078] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.949666][ T6096] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.967654][ T6094] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 2: comm syz.4.777: lblock 2 mapped to illegal pblock 2 (length 1) [ 123.048995][ T6094] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 123.119667][ T6094] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.777: lblock 0 mapped to illegal pblock 48 (length 1) [ 123.173772][ T6094] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 123.193122][ T6094] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.777: Failed to acquire dquot type 0 [ 123.213465][ T6078] usb 2-1: Using ep0 maxpacket: 32 [ 123.263561][ T6094] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 123.332405][ T6100] EXT4-fs (loop0): inline encryption not supported [ 123.341749][ T6094] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.777: mark_inode_dirty error [ 123.362314][ T6100] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.387887][ T4498] udevd[4498]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 123.393752][ T6078] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 123.404199][ T6094] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 123.424726][ T6100] EXT4-fs (loop0): orphan cleanup on readonly fs [ 123.441400][ T6078] usb 2-1: config 0 has no interface number 0 [ 123.448024][ T6094] EXT4-fs (loop4): 1 orphan inode deleted [ 123.493449][ T6100] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.779: Allocating blocks 41-42 which overlap fs metadata [ 123.512757][ T4266] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 123.551065][ T6094] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 123.595246][ T4266] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 123.611679][ T4498] udevd[4498]: symlink '../../loop0' '/dev/disk/by-diskseq/316.tmp-b7:0' failed: Read-only file system [ 123.628802][ T4266] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 123.641197][ T6100] EXT4-fs (loop0): Remounting filesystem read-only [ 123.661165][ T6100] Quota error (device loop0): write_blk: dquota write failed [ 123.669274][ T6078] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 123.676987][ T4498] udevd[4498]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 123.697483][ T6078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.725938][ T6100] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 123.752543][ T6078] usb 2-1: Product: syz [ 123.763032][ T6100] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.779: Failed to acquire dquot type 0 [ 123.774595][ T6078] usb 2-1: Manufacturer: syz [ 123.779254][ T6078] usb 2-1: SerialNumber: syz [ 123.812404][ T6078] usb 2-1: config 0 descriptor?? [ 123.823320][ T6100] EXT4-fs (loop0): Remounting filesystem read-only [ 123.863176][ T6100] EXT4-fs (loop0): 1 truncate cleaned up [ 123.872720][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-diskseq/317.tmp-b7:0' failed: Read-only file system [ 123.896158][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 123.908616][ T6078] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 123.919917][ T6100] EXT4-fs (loop0): pa ffff888026513460: logic 1, phys. 41, len 23 [ 123.927901][ T6100] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 123.939006][ T4266] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 123.955270][ T6100] EXT4-fs (loop0): Remounting filesystem read-only [ 123.979990][ T4266] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 123.996289][ T4266] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 124.016413][ T6100] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,noblock_validity,grpjquota=,barrier=0x0000000000000000,usrjquota=,resgid=0x000000000000ee01,noinit_itable,errors=remount-ro,journal_dev=0x00000000000000072. Quota mode: writeback. [ 124.044849][ T4196] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 124.080513][ T4196] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 124.098061][ T4196] EXT4-fs error (device loop4): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 124.135827][ T6078] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 124.177358][ T6078] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 124.195463][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-diskseq/317.tmp-b7:0' failed: Read-only file system [ 124.226390][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 124.458144][ T4498] udevd[4498]: symlink '../../loop0' '/dev/disk/by-diskseq/317.tmp-b7:0' failed: Read-only file system [ 124.540061][ T4498] udevd[4498]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 124.597135][ T5124] usb 2-1: USB disconnect, device number 2 [ 124.603366][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 124.633419][ T6078] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 124.654644][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-diskseq/319.tmp-b7:0' failed: Read-only file system [ 124.685418][ T5124] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 124.719389][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-diskseq/320.tmp-b7:0' failed: Read-only file system [ 124.732247][ T5124] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 124.757677][ T5124] quatech2 2-1:0.51: device disconnected [ 124.791089][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-diskseq/320.tmp-b7:0' failed: Read-only file system [ 124.838877][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-diskseq/320.tmp-b7:0' failed: Read-only file system [ 124.900751][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-diskseq/320.tmp-b7:0' failed: Read-only file system [ 124.913284][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 124.946065][ T6078] usb 5-1: Using ep0 maxpacket: 8 [ 125.067051][ T6126] set_capacity_and_notify: 3 callbacks suppressed [ 125.067066][ T6126] loop0: detected capacity change from 0 to 32768 [ 125.084314][ T6078] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 125.092466][ T6078] usb 5-1: config 0 has no interface number 0 [ 125.136045][ T26] audit: type=1800 audit(1778709715.972:18): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.789" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 125.243250][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-diskseq/322.tmp-b7:0' failed: Read-only file system [ 125.274766][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:0' failed: Read-only file system [ 125.313306][ T6130] loop1: detected capacity change from 0 to 4096 [ 125.329146][ T6078] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 125.354226][ T6130] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 125.365003][ T6078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.389713][ T6078] usb 5-1: Product: syz [ 125.404821][ T6078] usb 5-1: Manufacturer: syz [ 125.420196][ T6078] usb 5-1: SerialNumber: syz [ 125.433246][ T13] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 125.444448][ T6078] usb 5-1: config 0 descriptor?? [ 125.459208][ T6130] ntfs: volume version 3.1. [ 125.467637][ T13] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 125.482064][ T6130] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 125.506544][ T13] usb 4-1: Product: syz [ 125.512634][ T6130] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota. [ 125.522986][ T13] usb 4-1: Manufacturer: syz [ 125.527640][ T13] usb 4-1: SerialNumber: syz [ 125.560693][ T4498] udevd[4498]: symlink '../../loop1' '/dev/disk/by-diskseq/323.tmp-b7:1' failed: Read-only file system [ 125.574182][ T13] usb 4-1: config 0 descriptor?? [ 125.595680][ T4498] udevd[4498]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 125.614286][ T13] ch341 4-1:0.0: ch341-uart converter detected [ 125.638952][ T4498] udevd[4498]: symlink '../../loop1' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:1' failed: Read-only file system [ 125.744563][ T5124] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.759359][ T6078] usb 5-1: USB disconnect, device number 9 [ 126.023238][ T5124] usb 1-1: Using ep0 maxpacket: 16 [ 126.153111][ T5124] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 126.161250][ T5124] usb 1-1: config 0 has no interface number 0 [ 126.190002][ T5124] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 126.234250][ T5124] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 126.268489][ T13] usb 4-1: failed to send control message: -71 [ 126.290442][ T13] ch341-uart: probe of ttyUSB0 failed with error -71 [ 126.298900][ T13] usb 4-1: USB disconnect, device number 7 [ 126.337169][ T13] ch341 4-1:0.0: device disconnected [ 126.445513][ T5124] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 126.483041][ T5124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.491104][ T5124] usb 1-1: Product: syz [ 126.504597][ T5124] usb 1-1: Manufacturer: syz [ 126.509253][ T5124] usb 1-1: SerialNumber: syz [ 126.538666][ T5124] usb 1-1: config 0 descriptor?? [ 126.545330][ T6154] loop4: detected capacity change from 0 to 64 [ 126.573423][ T6134] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 126.593993][ T6134] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 126.652379][ T6154] process 'syz.4.804' launched './file1' with NULL argv: empty string added [ 126.828733][ T6134] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 126.850345][ T6134] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 126.883603][ T6162] loop3: detected capacity change from 0 to 2048 [ 126.996887][ T6162] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.333411][ T5124] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 127.375384][ T5124] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 127.405126][ T5124] asix: probe of 1-1:0.34 failed with error -71 [ 127.447952][ T5124] usb 1-1: USB disconnect, device number 3 [ 127.511397][ T6182] loop1: detected capacity change from 0 to 512 [ 127.586885][ T6184] loop3: detected capacity change from 0 to 512 [ 127.625495][ T6182] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 127.676417][ T6182] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.738767][ T6184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 127.768153][ T6184] System zones: 1-12 [ 127.819684][ T6182] EXT4-fs error (device loop1): ext4_remount:6062: comm syz.1.818: Abort forced by user [ 127.840164][ T6184] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.819: corrupted in-inode xattr [ 127.904666][ T6182] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 127.939584][ T6184] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.819: couldn't read orphan inode 15 (err -117) [ 127.973484][ T6184] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 128.199872][ T6196] netem: change failed [ 128.262553][ T6198] loop1: detected capacity change from 0 to 512 [ 128.328185][ T6200] loop3: detected capacity change from 0 to 1024 [ 128.335809][ T6198] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (33162!=33349) [ 128.368569][ T6198] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 128.397886][ T6198] System zones: 1-12 [ 128.403358][ T6198] EXT4-fs (loop1): orphan cleanup on readonly fs [ 128.409822][ T6198] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.824: Inode bitmap for bg 0 marked uninitialized [ 128.463489][ T6198] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 128.671113][ T6198] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 5: comm syz.1.824: lblock 0 mapped to illegal pblock 5 (length 1) [ 128.743548][ T6198] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.824: error -117 reading directory block [ 129.151002][ T6223] loop0: detected capacity change from 0 to 4096 [ 129.219015][ T6232] loop4: detected capacity change from 0 to 256 [ 129.271165][ T6223] ntfs: volume version 3.1. [ 129.298464][ T6232] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 129.334273][ T6223] __ntfs_error: 6 callbacks suppressed [ 129.334288][ T6223] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 129.435559][ T6223] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 129.472966][ T6223] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 129.576273][ T6223] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 129.618875][ T6239] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 129.667724][ T6223] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 129.694109][ T4498] udevd[4498]: symlink '../../loop4' '/dev/disk/by-diskseq/339.tmp-b7:4' failed: Read-only file system [ 129.708628][ T4498] udevd[4498]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 129.733245][ T6223] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 129.736029][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-diskseq/338.tmp-b7:0' failed: Read-only file system [ 129.773539][ T6237] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 129.825483][ T6239] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.843: Unimplemented hash flags: 0x0001 [ 129.849675][ T6239] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.843: Corrupt directory, running e2fsck is recommended [ 129.856899][ T6237] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 129.896212][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 129.921312][ T4498] udevd[4498]: symlink '../../loop4' '/dev/disk/by-diskseq/339.tmp-b7:4' failed: Read-only file system [ 129.953038][ T6237] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 129.973145][ T6237] ntfs3: loop3: Failed to load $Bitmap. [ 129.977403][ T4180] udevd[4180]: symlink '../../loop0' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:0' failed: Read-only file system [ 129.979563][ T6237] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 130.030851][ T4498] udevd[4498]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 130.062308][ T4182] udevd[4182]: symlink '../../loop3' '/dev/disk/by-diskseq/342.tmp-b7:3' failed: Read-only file system [ 130.092968][ T6237] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 130.120060][ T4182] udevd[4182]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 130.159147][ T4498] udevd[4498]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 130.170914][ T6237] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 130.209316][ T6233] set_capacity_and_notify: 2 callbacks suppressed [ 130.209332][ T6233] loop1: detected capacity change from 0 to 32768 [ 130.292979][ T6076] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.312552][ T6233] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.840 (6233) [ 130.420564][ T6233] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 130.435148][ T6233] BTRFS info (device loop1): using free space tree [ 130.483060][ T6233] BTRFS info (device loop1): has skinny extents [ 130.505249][ T6250] loop4: detected capacity change from 0 to 2048 [ 130.563407][ T6250] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.573297][ T6076] usb 1-1: Using ep0 maxpacket: 32 [ 130.693521][ T6076] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.711792][ T6076] usb 1-1: config 0 has no interface number 0 [ 130.807454][ T6233] BTRFS info (device loop1): enabling ssd optimizations [ 130.883069][ T6076] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 130.902418][ T6076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.911117][ T6076] usb 1-1: Product: syz [ 130.915638][ T6076] usb 1-1: Manufacturer: syz [ 130.920272][ T6076] usb 1-1: SerialNumber: syz [ 130.937534][ T6076] usb 1-1: config 0 descriptor?? [ 130.977988][ T6233] 9pnet_virtio: no channels available for device syz [ 130.995296][ T6076] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 131.026444][ T6076] usb 1-1: selecting invalid altsetting 1 [ 131.045343][ T6076] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 131.095080][ T6076] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.139476][ T6076] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 131.182974][ T6076] usb 1-1: media controller created [ 131.222494][ T6076] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.291692][ T6258] loop3: detected capacity change from 0 to 32768 [ 131.408912][ T6258] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.849 (6258) [ 131.488493][ T6076] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 131.503291][ T6076] zl10353_read_register: readreg error (reg=127, ret==-71) [ 131.632998][ T6076] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 131.728304][ T6258] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 131.770728][ T6258] BTRFS info (device loop3): enabling auto defrag [ 131.807492][ T6076] usb 1-1: USB disconnect, device number 4 [ 131.808332][ T6258] BTRFS info (device loop3): turning on async discard [ 131.851040][ T6258] BTRFS info (device loop3): max_inline at 4096 [ 131.877993][ T6258] BTRFS info (device loop3): using free space tree [ 131.904890][ T6258] BTRFS info (device loop3): has skinny extents [ 132.373872][ T6258] BTRFS info (device loop3): enabling ssd optimizations [ 132.386840][ T6333] loop4: detected capacity change from 0 to 8192 [ 132.449740][ T26] audit: type=1800 audit(1778709723.282:19): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.862" name="file1" dev="loop4" ino=1048670 res=0 errno=0 [ 132.678617][ T6343] loop0: detected capacity change from 0 to 16 [ 132.691642][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.698014][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.858980][ T6343] erofs: (device loop0): mounted with root inode @ nid 36. [ 133.391158][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 133.415935][ T6357] loop3: detected capacity change from 0 to 2048 [ 133.517641][ T6357] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.720349][ T6362] netlink: 116 bytes leftover after parsing attributes in process `syz.3.876'. [ 133.744978][ T6339] loop1: detected capacity change from 0 to 32768 [ 133.856770][ T6339] XFS (loop1): Mounting V5 Filesystem [ 134.012856][ T6339] XFS (loop1): Ending clean mount [ 134.026513][ T6339] XFS (loop1): Quotacheck needed: Please wait. [ 134.091716][ T6374] loop3: detected capacity change from 0 to 2048 [ 134.143367][ T6339] XFS (loop1): Quotacheck: Done. [ 134.228550][ T6376] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.274197][ T6360] loop4: detected capacity change from 0 to 32768 [ 134.339821][ T4189] XFS (loop1): Unmounting Filesystem [ 134.412184][ T6360] JBD2: Ignoring recovery information on journal [ 134.434635][ T6360] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 134.499485][ T6360] JBD2: bad block at offset 32 [ 134.559954][ T6360] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 134.732440][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 134.821372][ T4180] udevd[4180]: symlink '../../loop4' '/dev/disk/by-diskseq/360.tmp-b7:4' failed: Read-only file system [ 134.838692][ T4498] udevd[4498]: symlink '../../loop1' '/dev/disk/by-diskseq/358.tmp-b7:1' failed: Read-only file system [ 134.853765][ T6078] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.878998][ T4180] udevd[4180]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system [ 134.902791][ T4498] udevd[4498]: symlink '../../loop1' '/dev/disk/by-diskseq/358.tmp-b7:1' failed: Read-only file system [ 135.047887][ T6380] loop0: detected capacity change from 0 to 32768 [ 135.103163][ T6078] usb 4-1: Using ep0 maxpacket: 16 [ 135.180362][ T6392] SQUASHFS error: Unable to read directory block [629:ff26] [ 135.223520][ T6078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.243006][ T6078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.261088][ T4182] udevd[4182]: symlink '../../loop1' '/dev/disk/by-diskseq/365.tmp-b7:1' failed: Read-only file system [ 135.301857][ T6078] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.358375][ T4180] udevd[4180]: symlink '../../loop4' '/dev/disk/by-diskseq/360.tmp-b7:4' failed: Read-only file system [ 135.373305][ T6078] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.382407][ T6078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.399566][ T4498] udevd[4498]: symlink '../../loop0' '/dev/disk/by-diskseq/364.tmp-b7:0' failed: Read-only file system [ 135.436516][ T6078] usb 4-1: config 0 descriptor?? [ 135.444002][ T4498] udevd[4498]: symlink '../../loop0' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:0' failed: Read-only file system [ 135.467833][ T4180] udevd[4180]: symlink '../../loop4' '/dev/disk/by-diskseq/360.tmp-b7:4' failed: Read-only file system [ 135.498388][ T4181] udevd[4181]: symlink '../../loop1' '/dev/disk/by-diskseq/365.tmp-b7:1' failed: Read-only file system [ 135.576927][ T6398] netlink: 'syz.4.889': attribute type 3 has an invalid length. [ 135.762297][ T6408] set_capacity_and_notify: 1 callbacks suppressed [ 135.762313][ T6408] loop4: detected capacity change from 0 to 256 [ 135.975053][ T6078] microsoft 0003:045E:07DA.0007: unbalanced delimiter at end of report description [ 136.029221][ T6078] microsoft 0003:045E:07DA.0007: parse failed [ 136.047947][ T6078] microsoft: probe of 0003:045E:07DA.0007 failed with error -22 [ 136.195242][ T6296] usb 4-1: USB disconnect, device number 8 [ 136.211019][ T6420] loop0: detected capacity change from 0 to 256 [ 136.335508][ T6420] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 1) [ 136.356441][ T6420] exFAT-fs (loop0): failed to load alloc-bitmap [ 136.379145][ T6420] exFAT-fs (loop0): failed to recognize exfat type [ 136.518282][ T6428] comedi: No check for data length of config insn id 8 is implemented [ 136.531634][ T6430] device veth1_macvtap left promiscuous mode [ 136.599670][ T6428] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 136.629147][ T6428] comedi: Assuming n=86 is correct [ 136.629325][ T6420] netlink: 666 bytes leftover after parsing attributes in process `syz.0.899'. [ 136.931740][ T6443] netlink: 596 bytes leftover after parsing attributes in process `syz.4.910'. [ 137.371368][ T6463] loop3: detected capacity change from 0 to 1024 [ 137.401749][ T6459] loop4: detected capacity change from 0 to 4096 [ 137.486379][ T6463] EXT4-fs (loop3): inline encryption not supported [ 137.489345][ T6459] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 137.556473][ T6463] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.920: lblock 2 mapped to illegal pblock 2 (length 1) [ 137.594706][ T6463] EXT4-fs (loop3): Remounting filesystem read-only [ 137.601301][ T6463] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 137.635889][ T6459] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 137.673048][ T6463] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.920: lblock 0 mapped to illegal pblock 48 (length 1) [ 137.713865][ T6463] EXT4-fs (loop3): Remounting filesystem read-only [ 137.759628][ T6463] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 137.813239][ T6469] loop1: detected capacity change from 0 to 512 [ 137.846570][ T6463] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.920: Failed to acquire dquot type 0 [ 137.858797][ T4196] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 137.884153][ T4196] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 137.894870][ T6463] EXT4-fs (loop3): Remounting filesystem read-only [ 137.911710][ T6463] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 137.939982][ T6463] EXT4-fs (loop3): Remounting filesystem read-only [ 137.999116][ T6463] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.920: mark_inode_dirty error [ 138.023755][ T6469] EXT4-fs (loop1): 1 truncate cleaned up [ 138.029472][ T6469] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 138.141609][ T6469] EXT4-fs (loop1): Online resizing not supported with sparse_super2 [ 138.183231][ T6463] EXT4-fs (loop3): Remounting filesystem read-only [ 138.189897][ T6463] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 138.233694][ T6463] EXT4-fs (loop3): 1 orphan inode deleted [ 138.239577][ T6463] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,noblock_validity,grpquota,errors=remount-ro,auto_da_alloc,inlinecrypt,. Quota mode: writeback. [ 138.262745][ T3058] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 138.299010][ T3058] EXT4-fs (loop3): Remounting filesystem read-only [ 138.333015][ T3058] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 138.364321][ T3058] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0 [ 138.394458][ T6463] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 16: comm syz.3.920: lblock 0 mapped to illegal pblock 16 (length 1) [ 138.486785][ T26] audit: type=1326 audit(1778709729.322:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.928" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6562309e59 code=0x7ffc0000 [ 138.513109][ T3058] EXT4-fs (loop3): Remounting filesystem read-only [ 138.518070][ T6463] EXT4-fs (loop3): Remounting filesystem read-only [ 138.572958][ T26] audit: type=1326 audit(1778709729.382:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.928" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6562309e59 code=0x7ffc0000 [ 138.666314][ T4197] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 138.738406][ T4197] EXT4-fs (loop3): Remounting filesystem read-only [ 138.749051][ T26] audit: type=1326 audit(1778709729.382:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.0.928" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6562309e59 code=0x7ffc0000 [ 138.794753][ T4197] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 138.828841][ T4197] EXT4-fs (loop3): Remounting filesystem read-only [ 138.842491][ T4197] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 138.856867][ T4197] EXT4-fs (loop3): Remounting filesystem read-only [ 138.963467][ T6494] loop0: detected capacity change from 0 to 512 [ 139.084192][ T6494] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.151874][ T6494] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.165889][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.190978][ T6500] loop1: detected capacity change from 0 to 512 [ 139.204630][ T6496] loop3: detected capacity change from 0 to 4096 [ 139.219189][ T6494] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.933: Invalid block bitmap block 0 in block_group 0 [ 139.279609][ T6494] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 139.319338][ T6500] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.934: inode has both inline data and extents flags [ 139.398058][ T6496] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 139.412760][ T6494] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.933: attempt to clear invalid blocks 983261 len 1 [ 139.440840][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.473109][ T6500] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.934: couldn't read orphan inode 15 (err -117) [ 139.487888][ T6508] loop4: detected capacity change from 0 to 128 [ 139.494717][ T6494] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.933: Invalid inode table block 0 in block_group 0 [ 139.517823][ T6494] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 139.560120][ T6494] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 139.572009][ T6508] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 139.575371][ T6500] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 139.630457][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.649515][ T6508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.663439][ T6494] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.933: Invalid inode table block 0 in block_group 0 [ 139.703913][ T6482] chnl_net:caif_netlink_parms(): no params data found [ 139.723457][ T6494] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 139.778783][ T26] audit: type=1800 audit(1778709730.612:23): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.937" name="file2" dev="loop4" ino=105 res=0 errno=0 [ 139.780932][ T6494] EXT4-fs error (device loop0): ext4_truncate:4286: inode #11: comm syz.0.933: mark_inode_dirty error [ 139.859461][ T4498] udevd[4498]: symlink '../../loop1' '/dev/disk/by-diskseq/380.tmp-b7:1' failed: Read-only file system [ 139.894767][ T6500] EXT4-fs (loop1): can't change dax mount option while remounting [ 139.911448][ T4180] udevd[4180]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 139.931567][ T4498] udevd[4498]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 139.949865][ T6494] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 139.971643][ T4180] udevd[4180]: symlink '../../loop3' '/dev/disk/by-diskseq/381.tmp-b7:3' failed: Read-only file system [ 139.995128][ T6494] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.933: Invalid inode table block 0 in block_group 0 [ 139.997104][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.034732][ T4182] udevd[4182]: symlink '../../loop4' '/dev/disk/by-diskseq/382.tmp-b7:4' failed: Read-only file system [ 140.056500][ T4180] udevd[4180]: symlink '../../loop3' '/dev/disk/by-diskseq/381.tmp-b7:3' failed: Read-only file system [ 140.057684][ T6494] EXT4-fs (loop0): 1 truncate cleaned up [ 140.119216][ T4498] udevd[4498]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 140.145555][ T4180] udevd[4180]: symlink '../../loop3' '/dev/disk/by-diskseq/381.tmp-b7:3' failed: Read-only file system [ 140.161780][ T6494] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 140.193909][ T4498] udevd[4498]: symlink '../../loop1' '/dev/disk/by-diskseq/380.tmp-b7:1' failed: Read-only file system [ 140.243681][ T4182] udevd[4182]: symlink '../../loop4' '/dev/disk/by-diskseq/382.tmp-b7:4' failed: Read-only file system [ 140.345453][ T6521] x_tables: ip_tables: ah match: only valid for protocol 51 [ 140.522425][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.532985][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.546583][ T6482] device bridge_slave_0 entered promiscuous mode [ 140.564408][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.571688][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.580359][ T6482] device bridge_slave_1 entered promiscuous mode [ 140.603319][ T6296] Bluetooth: hci2: command 0x0409 tx timeout [ 140.725836][ T6482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.765459][ T6482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.870489][ T6482] team0: Port device team_slave_0 added [ 140.905406][ T6482] team0: Port device team_slave_1 added [ 140.988776][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.011569][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.117999][ T6482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.197897][ T6482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.223417][ T6482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.321522][ T6482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.352234][ T6542] netlink: 60 bytes leftover after parsing attributes in process `syz.4.951'. [ 141.639773][ T6536] loop0: detected capacity change from 0 to 32768 [ 141.690944][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.957'. [ 141.736650][ T6482] device hsr_slave_0 entered promiscuous mode [ 141.794152][ T6552] loop3: detected capacity change from 0 to 4096 [ 141.837484][ T6482] device hsr_slave_1 entered promiscuous mode [ 141.859520][ T6536] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 141.871513][ T6552] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 141.933675][ T6482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.954771][ T6482] Cannot create hsr debugfs directory [ 142.000589][ T6552] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 142.065478][ T6536] XFS (loop0): ro->rw transition prohibited on norecovery mount [ 142.135804][ T6552] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 142.232692][ T6552] ntfs: volume version 3.1. [ 142.273285][ T4188] XFS (loop0): Unmounting Filesystem [ 142.529058][ T6580] set match dimension is over the limit! [ 142.703237][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 142.807919][ T6482] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.873059][ T6592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.966'. [ 142.896353][ T6482] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.949508][ T6594] loop4: detected capacity change from 0 to 256 [ 143.068744][ T6482] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.101056][ T6546] loop1: detected capacity change from 0 to 32768 [ 143.113720][ T6482] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.243745][ T6546] JBD2: Ignoring recovery information on journal [ 143.375028][ T6605] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 143.500016][ T6609] loop3: detected capacity change from 0 to 512 [ 143.533731][ T6546] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 143.636286][ T6613] loop0: detected capacity change from 0 to 64 [ 143.679220][ T6609] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.971: inode has both inline data and extents flags [ 143.769852][ T6609] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.971: couldn't read orphan inode 15 (err -117) [ 143.852466][ T6609] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.906042][ T6622] loop4: detected capacity change from 0 to 1024 [ 143.953711][ T6609] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #2: comm syz.3.971: invalid size [ 143.972267][ T6482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.046554][ T6622] EXT4-fs (loop4): Ignoring removed bh option [ 144.052742][ T6622] EXT4-fs (loop4): inline encryption not supported [ 144.076688][ T6628] loop0: detected capacity change from 0 to 256 [ 144.121504][ T6482] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.155730][ T6622] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 2: comm syz.4.974: lblock 2 mapped to illegal pblock 2 (length 1) [ 144.190584][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.203747][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.287625][ T6622] __quota_error: 18 callbacks suppressed [ 144.287641][ T6622] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 144.363130][ T6622] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.974: Invalid inode table block 1 in block_group 0 [ 144.390649][ T26] audit: type=1800 audit(1778709735.222:25): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.952" name="file1" dev="loop1" ino=30722 res=0 errno=0 [ 144.491977][ T6622] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 144.517472][ T6622] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.974: mark_inode_dirty error [ 144.553450][ T6622] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 144.562285][ T6622] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.974: Failed to acquire dquot type 0 [ 144.682520][ T6622] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 144.763237][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 144.794430][ T6622] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.974: mark_inode_dirty error [ 144.814351][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.828624][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.837620][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 144.858331][ T4797] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.865528][ T4797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.876001][ T6622] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 144.905235][ T6622] EXT4-fs (loop4): 1 orphan inode deleted [ 144.916535][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.927660][ T4266] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 144.948622][ T6622] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,noblock_validity,bh,max_batch_time=0x00000000000008c9,inlinecrypt,noquota,,errors=continue. Quota mode: none. [ 144.983627][ T4180] udevd[4180]: symlink '../../loop3' '/dev/disk/by-diskseq/399.tmp-b7:3' failed: Read-only file system [ 145.001410][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.021916][ T4797] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.029089][ T4797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.031906][ T4266] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 145.066518][ T4498] udevd[4498]: symlink '../../loop1' '/dev/disk/by-diskseq/392.tmp-b7:1' failed: Read-only file system [ 145.122972][ T4266] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 145.161941][ T4180] udevd[4180]: symlink '../../loop4' '/dev/disk/by-diskseq/396.tmp-b7:4' failed: Read-only file system [ 145.181465][ T4498] udevd[4498]: symlink '../../loop1' '/dev/disk/by-diskseq/392.tmp-b7:1' failed: Read-only file system [ 145.213368][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.264987][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.276564][ T4182] udevd[4182]: symlink '../../loop0' '/dev/disk/by-diskseq/400.tmp-b7:0' failed: Read-only file system [ 145.303925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.356559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.367627][ T4196] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 145.383481][ T4180] udevd[4180]: symlink '../../loop3' '/dev/disk/by-diskseq/399.tmp-b7:3' failed: Read-only file system [ 145.418536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.433128][ T4196] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 145.455375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.463887][ T4196] EXT4-fs error (device loop4): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 145.519183][ T4180] udevd[4180]: symlink '../../loop3' '/dev/disk/by-diskseq/399.tmp-b7:3' failed: Read-only file system [ 145.547205][ T4498] udevd[4498]: symlink '../../loop4' '/dev/disk/by-diskseq/396.tmp-b7:4' failed: Read-only file system [ 145.624062][ T4180] udevd[4180]: symlink '../../loop4' '/dev/disk/by-diskseq/396.tmp-b7:4' failed: Read-only file system [ 145.674805][ T144] device hsr_slave_0 left promiscuous mode [ 145.689939][ T144] device hsr_slave_1 left promiscuous mode [ 145.707566][ T4180] udevd[4180]: symlink '../../loop4' '/dev/disk/by-diskseq/402.tmp-b7:4' failed: Read-only file system [ 145.731315][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.762745][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.811431][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.856798][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.890706][ T144] device bridge_slave_1 left promiscuous mode [ 145.915898][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.992575][ T144] device bridge_slave_0 left promiscuous mode [ 146.027657][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.188885][ T144] device veth1_macvtap left promiscuous mode [ 146.199341][ T144] device veth0_macvtap left promiscuous mode [ 146.218664][ T144] device veth1_vlan left promiscuous mode [ 146.236684][ T144] device veth0_vlan left promiscuous mode [ 146.352122][ T6675] loop4: detected capacity change from 0 to 4096 [ 146.502009][ T6675] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 146.816145][ T144] team0 (unregistering): Port device team_slave_1 removed [ 146.841235][ T144] team0 (unregistering): Port device team_slave_0 removed [ 146.848636][ T4256] Bluetooth: hci2: command 0x0419 tx timeout [ 146.866772][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.883337][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.961255][ T144] bond0 (unregistering): Released all slaves [ 147.033238][ T6669] netlink: 60 bytes leftover after parsing attributes in process `syz.1.979'. [ 147.043345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.064634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.083777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.109571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.151723][ T6482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.210839][ T6482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.227525][ T6691] loop0: detected capacity change from 0 to 1024 [ 147.253574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.277157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.298425][ T6695] loop4: detected capacity change from 0 to 256 [ 147.386785][ T6691] EXT4-fs (loop0): Ignoring removed bh option [ 147.406109][ T6691] EXT4-fs (loop0): inline encryption not supported [ 147.472737][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1001'. [ 147.497746][ T6691] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.993: lblock 2 mapped to illegal pblock 2 (length 1) [ 147.526990][ T6691] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 147.539980][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1001'. [ 147.573861][ T6691] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.993: Invalid inode table block 1 in block_group 0 [ 147.587110][ T6691] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 147.597131][ T6691] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.993: mark_inode_dirty error [ 147.608781][ T6691] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 147.632970][ T6691] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.993: Failed to acquire dquot type 0 [ 147.674079][ T6691] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 147.751634][ T6691] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.993: mark_inode_dirty error [ 147.807291][ T6691] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 147.822397][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.834204][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.846846][ T6482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.863101][ T6691] EXT4-fs (loop0): 1 orphan inode deleted [ 147.913019][ T6691] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,noblock_validity,bh,max_batch_time=0x00000000000008c9,inlinecrypt,noquota,,errors=continue. Quota mode: none. [ 147.943841][ T6623] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.003642][ T6623] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 148.012306][ T6623] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 148.055575][ T6727] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1008'. [ 148.164041][ T4188] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 148.265668][ T4188] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 148.352486][ T4188] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 148.570160][ T6744] loop1: detected capacity change from 0 to 2048 [ 148.682357][ T6744] Alternate GPT is invalid, using primary GPT. [ 148.702616][ T6744] loop1: p1 p2 p3 [ 148.889702][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.919238][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.002648][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.026029][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.063652][ T6482] device veth0_vlan entered promiscuous mode [ 149.096755][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.117774][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.152139][ T6482] device veth1_vlan entered promiscuous mode [ 149.175171][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.263687][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.312817][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.341257][ T6774] loop3: detected capacity change from 0 to 8 [ 149.370946][ T6482] device veth0_macvtap entered promiscuous mode [ 149.418475][ T6482] device veth1_macvtap entered promiscuous mode [ 149.509937][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.533115][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.582254][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.615799][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.653390][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.709068][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.745751][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.790472][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.812593][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.825482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.840622][ T6786] loop1: detected capacity change from 0 to 512 [ 149.850853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.887191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.931996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.970424][ T6786] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 149.985019][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.999409][ T4182] udevd[4182]: symlink '../../loop0' '/dev/disk/by-diskseq/409.tmp-b7:0' failed: Read-only file system [ 150.010259][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.020974][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.031892][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.042301][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.051532][ T4180] udevd[4180]: symlink '../../loop1' '/dev/disk/by-diskseq/412.tmp-b7:1' failed: Read-only file system [ 150.054844][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.074111][ T6482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.085022][ T6482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.097002][ T6482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.106939][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.125643][ T3058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.129769][ T4498] udevd[4498]: symlink '../../loop3' '/dev/disk/by-diskseq/410.tmp-b7:3' failed: Read-only file system [ 150.135106][ T6786] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.161479][ T6482] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.182871][ T4180] udevd[4180]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 150.199930][ T6482] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.213412][ T6482] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.255440][ T4182] udevd[4182]: symlink '../../loop0' '/dev/disk/by-diskseq/409.tmp-b7:0' failed: Read-only file system [ 150.276893][ T6482] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.300585][ T4180] udevd[4180]: symlink '../../loop1' '/dev/disk/by-diskseq/412.tmp-b7:1' failed: Read-only file system [ 150.338300][ T4498] udevd[4498]: symlink '../../loop3' '/dev/disk/by-diskseq/413.tmp-b7:3' failed: Read-only file system [ 150.404175][ T4180] udevd[4180]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 150.482103][ T4498] udevd[4498]: symlink '../../loop0' '/dev/disk/by-diskseq/409.tmp-b7:0' failed: Read-only file system [ 150.552291][ T4180] udevd[4180]: symlink '../../loop1' '/dev/disk/by-diskseq/412.tmp-b7:1' failed: Read-only file system [ 150.662070][ T6803] loop1: detected capacity change from 0 to 128 [ 150.698859][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.761448][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.807782][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.847751][ T6807] devpts: called with bogus options [ 150.894636][ T4797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.903285][ T4797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.910861][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.177166][ T6815] loop5: detected capacity change from 0 to 1764 [ 151.253041][ T6782] loop4: detected capacity change from 0 to 32768 [ 151.487607][ T6782] XFS (loop4): Mounting V5 Filesystem [ 151.697780][ T6792] loop3: detected capacity change from 0 to 32768 [ 151.706544][ T6841] loop5: detected capacity change from 0 to 256 [ 151.749800][ T6782] XFS (loop4): Ending clean mount [ 151.768587][ T6782] XFS (loop4): Quotacheck needed: Please wait. [ 151.855744][ T6792] JBD2: Ignoring recovery information on journal [ 151.895343][ T6841] FAT-fs (loop5): Directory bread(block 64) failed [ 151.901954][ T6841] FAT-fs (loop5): Directory bread(block 65) failed [ 152.004349][ T6841] FAT-fs (loop5): Directory bread(block 66) failed [ 152.010957][ T6841] FAT-fs (loop5): Directory bread(block 67) failed [ 152.045576][ T6841] FAT-fs (loop5): Directory bread(block 68) failed [ 152.083063][ T6841] FAT-fs (loop5): Directory bread(block 69) failed [ 152.093302][ T6841] FAT-fs (loop5): Directory bread(block 70) failed [ 152.153194][ T6841] FAT-fs (loop5): Directory bread(block 71) failed [ 152.159899][ T6841] FAT-fs (loop5): Directory bread(block 72) failed [ 152.184165][ T6782] XFS (loop4): Quotacheck: Done. [ 152.197567][ T6841] FAT-fs (loop5): Directory bread(block 73) failed [ 152.268641][ T6850] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.287928][ T6792] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 152.438519][ T6792] (syz.3.1027,6792,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 152.476477][ T4196] XFS (loop4): Unmounting Filesystem [ 152.830570][ T4197] ocfs2: Unmounting device (7,3) on (node local) [ 152.903407][ T6837] set_capacity_and_notify: 1 callbacks suppressed [ 152.903423][ T6837] loop1: detected capacity change from 0 to 32768 [ 153.144271][ T6837] [ 153.144271][ T6837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.144271][ T6837] [ 153.304176][ T4797] [ 153.304176][ T4797] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.304176][ T4797] [ 153.359089][ T4797] [ 153.359089][ T4797] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.359089][ T4797] [ 153.433259][ T6837] [ 153.433259][ T6837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.433259][ T6837] [ 153.506430][ T276] [ 153.506430][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.506430][ T276] [ 153.551881][ T6837] [ 153.551881][ T6837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.551881][ T6837] [ 153.723924][ T4189] [ 153.723924][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.723924][ T4189] [ 153.778647][ T4189] [ 153.778647][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.778647][ T4189] [ 153.858226][ T6891] loop4: detected capacity change from 0 to 2048 [ 153.959347][ T6891] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.370220][ T6914] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 154.690250][ T6880] loop3: detected capacity change from 0 to 32768 [ 154.725643][ T6924] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1073'. [ 154.896486][ T6934] netlink: 'syz.5.1075': attribute type 4 has an invalid length. [ 154.916068][ T6880] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 154.979794][ T4306] (kworker/u4:6,4306,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=0, inode=72, rec_len=65296, name_len=7 [ 155.055883][ T6945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1079'. [ 155.102660][ T4498] udevd[4498]: symlink '../../loop5' '/dev/disk/by-diskseq/426.tmp-b7:5' failed: Read-only file system [ 155.119874][ T4180] udevd[4180]: symlink '../../loop3' '/dev/disk/by-diskseq/431.tmp-b7:3' failed: Read-only file system [ 155.146773][ T4197] ocfs2: Unmounting device (7,3) on (node local) [ 155.182323][ T4498] udevd[4498]: symlink '../../loop0' '/dev/disk/by-diskseq/423.tmp-b7:0' failed: Read-only file system [ 155.194235][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.214825][ T4180] udevd[4180]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system [ 155.237890][ T6950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1082'. [ 155.241563][ T4182] udevd[4182]: symlink '../../loop1' '/dev/disk/by-diskseq/429.tmp-b7:1' failed: Read-only file system [ 155.325953][ T4498] udevd[4498]: symlink '../../loop0' '/dev/disk/by-diskseq/423.tmp-b7:0' failed: Read-only file system [ 155.367103][ T6956] loop1: detected capacity change from 0 to 1024 [ 155.396901][ T4181] udevd[4181]: symlink '../../loop5' '/dev/disk/by-diskseq/426.tmp-b7:5' failed: Read-only file system [ 155.480048][ T4182] udevd[4182]: symlink '../../loop1' '/dev/disk/by-diskseq/429.tmp-b7:1' failed: Read-only file system [ 155.530464][ T6964] loop3: detected capacity change from 0 to 16 [ 155.581858][ T4182] udevd[4182]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system [ 155.651668][ T6964] erofs: (device loop3): mounted with root inode @ nid 36. [ 155.656791][ T4182] udevd[4182]: symlink '../../loop1' '/dev/disk/by-uuid/89204a28-3dc1-3311-9d08-7ea374525680.tmp-b7:1' failed: Read-only file system [ 155.739213][ T6916] loop4: detected capacity change from 0 to 32768 [ 155.813295][ T6960] loop0: detected capacity change from 0 to 8192 [ 155.840026][ T6916] (syz.4.1069,6916,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 155.928565][ T6916] (syz.4.1069,6916,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 155.960328][ T6960] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 155.996190][ T6960] REISERFS (device loop0): using ordered data mode [ 156.013032][ T6960] reiserfs: using flush barriers [ 156.041819][ T6960] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.153358][ T6960] REISERFS (device loop0): checking transaction log (loop0) [ 156.179120][ T6916] JBD2: Ignoring recovery information on journal [ 156.383903][ T6916] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 156.637564][ T6960] REISERFS (device loop0): Using tea hash to sort names [ 156.675758][ T6962] loop5: detected capacity change from 0 to 40427 [ 156.693531][ T6960] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 156.813262][ T6962] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 156.821190][ T6962] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 156.846274][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 156.874448][ T6962] F2FS-fs (loop5): invalid crc value [ 156.937550][ T6962] F2FS-fs (loop5): Found nat_bits in checkpoint [ 157.212047][ T6962] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 157.248271][ T6962] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 157.367126][ T7019] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.488153][ T7075] netlink: 'syz.4.1125': attribute type 29 has an invalid length. [ 158.538086][ T7075] netlink: 'syz.4.1125': attribute type 29 has an invalid length. [ 158.592298][ T7076] netlink: 'syz.4.1125': attribute type 29 has an invalid length. [ 158.842128][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 158.986723][ T7055] loop1: detected capacity change from 0 to 32768 [ 159.067974][ T7055] JBD2: Ignoring recovery information on journal [ 159.157337][ T7106] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1139'. [ 159.206369][ T7055] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 159.275780][ T7055] (syz.1.1118,7055,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 159.305250][ T7113] [ 159.307657][ T7113] ===================================================== [ 159.314612][ T7113] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 159.322096][ T7113] syzkaller #0 Not tainted [ 159.326539][ T7113] ----------------------------------------------------- [ 159.333520][ T7113] syz.4.1140/7113 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 159.341182][ T7113] ffff88802b82b538 (&f->f_owner.lock){....}-{2:2}, at: send_sigio+0x2f/0x330 [ 159.350015][ T7113] [ 159.350015][ T7113] and this task is already holding: [ 159.357392][ T7113] ffff8880748960c0 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x16d/0x490 [ 159.366144][ T7113] which would create a new lock dependency: [ 159.372047][ T7113] (&new->fa_lock){....}-{2:2} -> (&f->f_owner.lock){....}-{2:2} [ 159.379836][ T7113] [ 159.379836][ T7113] but this new dependency connects a HARDIRQ-irq-safe lock: [ 159.389301][ T7113] (&dev->event_lock#2){-...}-{2:2} [ 159.389342][ T7113] [ 159.389342][ T7113] ... which became HARDIRQ-irq-safe at: [ 159.402278][ T7113] lock_acquire+0x19e/0x400 [ 159.406909][ T7113] _raw_spin_lock_irqsave+0xb0/0x100 [ 159.412307][ T7113] input_event+0x76/0xb0 [ 159.416680][ T7113] psmouse_report_standard_packet+0x4f/0x200 [ 159.422784][ T7113] psmouse_process_byte+0x42b/0x620 [ 159.428108][ T7113] psmouse_handle_byte+0x43/0x490 [ 159.433257][ T7113] psmouse_interrupt+0x699/0x1130 [ 159.438397][ T7113] serio_interrupt+0x87/0x130 [ 159.443195][ T7113] i8042_interrupt+0x363/0x710 [ 159.448077][ T7113] __handle_irq_event_percpu+0x299/0x9d0 [ 159.453835][ T7113] handle_irq_event+0xa5/0x220 [ 159.458714][ T7113] handle_edge_irq+0x243/0xb20 [ 159.463595][ T7113] __common_interrupt+0xd7/0x1e0 [ 159.468647][ T7113] common_interrupt+0xb0/0xd0 [ 159.473448][ T7113] asm_common_interrupt+0x22/0x40 [ 159.478617][ T7113] default_idle+0xb/0x10 [ 159.482984][ T7113] default_idle_call+0x81/0xc0 [ 159.487946][ T7113] do_idle+0x3a1/0x650 [ 159.492137][ T7113] cpu_startup_entry+0x14/0x20 [ 159.497021][ T7113] start_secondary+0x330/0x430 [ 159.501901][ T7113] secondary_startup_64_no_verify+0xb1/0xbb [ 159.507917][ T7113] [ 159.507917][ T7113] to a HARDIRQ-irq-unsafe lock: [ 159.514953][ T7113] (tasklist_lock){.+.+}-{2:2} [ 159.514982][ T7113] [ 159.514982][ T7113] ... which became HARDIRQ-irq-unsafe at: [ 159.517437][ T7114] loop5: detected capacity change from 0 to 4096 [ 159.519761][ T7113] ... [ 159.519767][ T7113] lock_acquire+0x19e/0x400 [ 159.519799][ T7113] _raw_read_lock+0x32/0x40 [ 159.545842][ T7113] do_wait+0x293/0xac0 [ 159.550034][ T7113] kernel_wait+0xd3/0x1c0 [ 159.554478][ T7113] call_usermodehelper_exec_work+0xb5/0x220 [ 159.560476][ T7113] process_one_work+0x85f/0x1010 [ 159.565537][ T7113] worker_thread+0xaa6/0x1290 [ 159.570330][ T7113] kthread+0x436/0x520 [ 159.574514][ T7113] ret_from_fork+0x1f/0x30 [ 159.579051][ T7113] [ 159.579051][ T7113] other info that might help us debug this: [ 159.579051][ T7113] [ 159.589295][ T7113] Chain exists of: [ 159.589295][ T7113] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 159.589295][ T7113] [ 159.602272][ T7113] Possible interrupt unsafe locking scenario: [ 159.602272][ T7113] [ 159.610613][ T7113] CPU0 CPU1 [ 159.615984][ T7113] ---- ---- [ 159.621355][ T7113] lock(tasklist_lock); [ 159.625609][ T7113] local_irq_disable(); [ 159.632372][ T7113] lock(&dev->event_lock#2); [ 159.639580][ T7113] lock(&new->fa_lock); [ 159.646356][ T7113] [ 159.649811][ T7113] lock(&dev->event_lock#2); [ 159.654670][ T7113] [ 159.654670][ T7113] *** DEADLOCK *** [ 159.654670][ T7113] [ 159.662811][ T7113] 8 locks held by syz.4.1140/7113: [ 159.667927][ T7113] #0: ffff888148752110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x17c/0x490 [ 159.677082][ T7113] #1: ffff888146c70230 (&dev->event_lock#2){-...}-{2:2}, at: input_inject_event+0x9e/0x2c0 [ 159.687195][ T7113] #2: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 159.696532][ T7113] #3: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 159.705867][ T7113] #4: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 159.715198][ T7113] #5: ffff88801db3a028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0 [ 159.725396][ T7113] #6: ffffffff8c31eb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 159.734825][ T7113] #7: ffff8880748960c0 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x16d/0x490 [ 159.743992][ T7113] [ 159.743992][ T7113] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 159.754420][ T7113] -> (&dev->event_lock#2){-...}-{2:2} { [ 159.760178][ T7113] IN-HARDIRQ-W at: [ 159.764347][ T7113] lock_acquire+0x19e/0x400 [ 159.770865][ T7113] _raw_spin_lock_irqsave+0xb0/0x100 [ 159.778172][ T7113] input_event+0x76/0xb0 [ 159.784432][ T7113] psmouse_report_standard_packet+0x4f/0x200 [ 159.792430][ T7113] psmouse_process_byte+0x42b/0x620 [ 159.799653][ T7113] psmouse_handle_byte+0x43/0x490 [ 159.806688][ T7113] psmouse_interrupt+0x699/0x1130 [ 159.813725][ T7113] serio_interrupt+0x87/0x130 [ 159.820441][ T7113] i8042_interrupt+0x363/0x710 [ 159.827234][ T7113] __handle_irq_event_percpu+0x299/0x9d0 [ 159.834891][ T7113] handle_irq_event+0xa5/0x220 [ 159.841671][ T7113] handle_edge_irq+0x243/0xb20 [ 159.848461][ T7113] __common_interrupt+0xd7/0x1e0 [ 159.855420][ T7113] common_interrupt+0xb0/0xd0 [ 159.862109][ T7113] asm_common_interrupt+0x22/0x40 [ 159.869276][ T7113] default_idle+0xb/0x10 [ 159.875538][ T7113] default_idle_call+0x81/0xc0 [ 159.882313][ T7113] do_idle+0x3a1/0x650 [ 159.888407][ T7113] cpu_startup_entry+0x14/0x20 [ 159.895193][ T7113] start_secondary+0x330/0x430 [ 159.901967][ T7113] secondary_startup_64_no_verify+0xb1/0xbb [ 159.909875][ T7113] INITIAL USE at: [ 159.913957][ T7113] lock_acquire+0x19e/0x400 [ 159.920397][ T7113] _raw_spin_lock_irqsave+0xb0/0x100 [ 159.927630][ T7113] input_inject_event+0x9e/0x2c0 [ 159.934503][ T7113] led_trigger_event+0x10a/0x1e0 [ 159.941359][ T7113] kbd_led_trigger_activate+0xb9/0x100 [ 159.948752][ T7113] led_trigger_set+0x50c/0x910 [ 159.955433][ T7113] led_trigger_set_default+0x19c/0x1e0 [ 159.962812][ T7113] led_classdev_register_ext+0x6df/0x8c0 [ 159.970500][ T7113] input_leds_connect+0x51d/0x750 [ 159.977502][ T7113] input_register_device+0xda7/0x1140 [ 159.984815][ T7113] atkbd_connect+0x766/0xa20 [ 159.991331][ T7113] serio_driver_probe+0x76/0x90 [ 159.998103][ T7113] really_probe+0x284/0xc80 [ 160.004531][ T7113] __driver_probe_device+0x18c/0x330 [ 160.011735][ T7113] driver_probe_device+0x4f/0x420 [ 160.018679][ T7113] __driver_attach+0x46b/0x670 [ 160.025380][ T7113] bus_for_each_dev+0x182/0x1f0 [ 160.032152][ T7113] serio_handle_event+0x29c/0x840 [ 160.039096][ T7113] process_one_work+0x85f/0x1010 [ 160.045956][ T7113] worker_thread+0xaa6/0x1290 [ 160.052578][ T7113] kthread+0x436/0x520 [ 160.058567][ T7113] ret_from_fork+0x1f/0x30 [ 160.064917][ T7113] } [ 160.067629][ T7113] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 160.076847][ T7113] -> (&client->buffer_lock){....}-{2:2} { [ 160.082682][ T7113] INITIAL USE at: [ 160.086691][ T7113] lock_acquire+0x19e/0x400 [ 160.092956][ T7113] _raw_spin_lock+0x2a/0x40 [ 160.099201][ T7113] evdev_pass_values+0xcb/0xab0 [ 160.105806][ T7113] evdev_events+0x1c0/0x2f0 [ 160.112075][ T7113] input_pass_values+0x87e/0x1210 [ 160.118850][ T7113] input_handle_event+0xb3f/0x1490 [ 160.125711][ T7113] input_inject_event+0x1b9/0x2c0 [ 160.132490][ T7113] evdev_write+0x35b/0x490 [ 160.138658][ T7113] vfs_write+0x30b/0xd60 [ 160.144652][ T7113] ksys_write+0x152/0x260 [ 160.150719][ T7113] do_syscall_64+0x4c/0xa0 [ 160.156892][ T7113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.164540][ T7113] } [ 160.167145][ T7113] ... key at: [] evdev_open.__key.22+0x0/0x20 [ 160.175401][ T7113] ... acquired at: [ 160.179302][ T7113] _raw_spin_lock+0x2a/0x40 [ 160.183989][ T7113] evdev_pass_values+0xcb/0xab0 [ 160.189020][ T7113] evdev_events+0x1c0/0x2f0 [ 160.193711][ T7113] input_pass_values+0x87e/0x1210 [ 160.198923][ T7113] input_handle_event+0xb3f/0x1490 [ 160.204216][ T7113] input_inject_event+0x1b9/0x2c0 [ 160.209424][ T7113] evdev_write+0x35b/0x490 [ 160.214025][ T7113] vfs_write+0x30b/0xd60 [ 160.218446][ T7113] ksys_write+0x152/0x260 [ 160.222958][ T7113] do_syscall_64+0x4c/0xa0 [ 160.227562][ T7113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.233647][ T7113] [ 160.235974][ T7113] -> (&new->fa_lock){....}-{2:2} { [ 160.241110][ T7113] INITIAL USE at: [ 160.245006][ T7113] lock_acquire+0x19e/0x400 [ 160.251086][ T7113] _raw_write_lock_irq+0xab/0xf0 [ 160.257594][ T7113] fasync_remove_entry+0xf0/0x1c0 [ 160.264194][ T7113] sock_fasync+0x84/0xf0 [ 160.270003][ T7113] __fput+0x7c4/0x930 [ 160.275557][ T7113] task_work_run+0x125/0x1a0 [ 160.281717][ T7113] exit_to_user_mode_loop+0x10f/0x130 [ 160.288656][ T7113] exit_to_user_mode_prepare+0xee/0x180 [ 160.295785][ T7113] syscall_exit_to_user_mode+0x16/0x40 [ 160.302822][ T7113] do_syscall_64+0x58/0xa0 [ 160.308809][ T7113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.316287][ T7113] INITIAL READ USE at: [ 160.320618][ T7113] lock_acquire+0x19e/0x400 [ 160.327127][ T7113] _raw_read_lock_irqsave+0xb8/0x100 [ 160.334419][ T7113] kill_fasync+0x16d/0x490 [ 160.340850][ T7113] evdev_pass_values+0x54b/0xab0 [ 160.347790][ T7113] evdev_events+0x1c0/0x2f0 [ 160.354302][ T7113] input_pass_values+0x87e/0x1210 [ 160.361333][ T7113] input_handle_event+0xb3f/0x1490 [ 160.368471][ T7113] input_inject_event+0x1b9/0x2c0 [ 160.375506][ T7113] evdev_write+0x35b/0x490 [ 160.381933][ T7113] vfs_write+0x30b/0xd60 [ 160.388183][ T7113] ksys_write+0x152/0x260 [ 160.394523][ T7113] do_syscall_64+0x4c/0xa0 [ 160.400955][ T7113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.408857][ T7113] } [ 160.411356][ T7113] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 160.420047][ T7113] ... acquired at: [ 160.423861][ T7113] _raw_read_lock_irqsave+0xb8/0x100 [ 160.429454][ T7113] kill_fasync+0x16d/0x490 [ 160.434086][ T7113] evdev_pass_values+0x54b/0xab0 [ 160.439217][ T7113] evdev_events+0x1c0/0x2f0 [ 160.443911][ T7113] input_pass_values+0x87e/0x1210 [ 160.449116][ T7113] input_handle_event+0xb3f/0x1490 [ 160.454430][ T7113] input_inject_event+0x1b9/0x2c0 [ 160.459693][ T7113] evdev_write+0x35b/0x490 [ 160.464307][ T7113] vfs_write+0x30b/0xd60 [ 160.468734][ T7113] ksys_write+0x152/0x260 [ 160.473259][ T7113] do_syscall_64+0x4c/0xa0 [ 160.477859][ T7113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.483935][ T7113] [ 160.486267][ T7113] [ 160.486267][ T7113] the dependencies between the lock to be acquired [ 160.486275][ T7113] and HARDIRQ-irq-unsafe lock: [ 160.499803][ T7113] -> (tasklist_lock){.+.+}-{2:2} { [ 160.505020][ T7113] HARDIRQ-ON-R at: [ 160.509183][ T7113] lock_acquire+0x19e/0x400 [ 160.515550][ T7113] _raw_read_lock+0x32/0x40 [ 160.521887][ T7113] do_wait+0x293/0xac0 [ 160.527780][ T7113] kernel_wait+0xd3/0x1c0 [ 160.533954][ T7113] call_usermodehelper_exec_work+0xb5/0x220 [ 160.541678][ T7113] process_one_work+0x85f/0x1010 [ 160.548463][ T7113] worker_thread+0xaa6/0x1290 [ 160.554970][ T7113] kthread+0x436/0x520 [ 160.560869][ T7113] ret_from_fork+0x1f/0x30 [ 160.567117][ T7113] SOFTIRQ-ON-R at: [ 160.571191][ T7113] lock_acquire+0x19e/0x400 [ 160.577552][ T7113] _raw_read_lock+0x32/0x40 [ 160.583886][ T7113] do_wait+0x293/0xac0 [ 160.589780][ T7113] kernel_wait+0xd3/0x1c0 [ 160.595932][ T7113] call_usermodehelper_exec_work+0xb5/0x220 [ 160.603661][ T7113] process_one_work+0x85f/0x1010 [ 160.610428][ T7113] worker_thread+0xaa6/0x1290 [ 160.616941][ T7113] kthread+0x436/0x520 [ 160.622840][ T7113] ret_from_fork+0x1f/0x30 [ 160.629103][ T7113] INITIAL USE at: [ 160.633097][ T7113] lock_acquire+0x19e/0x400 [ 160.639382][ T7113] _raw_write_lock_irq+0xab/0xf0 [ 160.646070][ T7113] copy_process+0x236f/0x3e20 [ 160.652493][ T7113] kernel_clone+0x23f/0x990 [ 160.658742][ T7113] kernel_thread+0xfa/0x160 [ 160.664993][ T7113] rest_init+0x21/0x330 [ 160.670906][ T7113] start_kernel+0x489/0x540 [ 160.677151][ T7113] secondary_startup_64_no_verify+0xb1/0xbb [ 160.684797][ T7113] INITIAL READ USE at: [ 160.689213][ T7113] lock_acquire+0x19e/0x400 [ 160.695918][ T7113] _raw_read_lock+0x32/0x40 [ 160.702624][ T7113] do_wait+0x293/0xac0 [ 160.708890][ T7113] kernel_wait+0xd3/0x1c0 [ 160.715424][ T7113] call_usermodehelper_exec_work+0xb5/0x220 [ 160.723516][ T7113] process_one_work+0x85f/0x1010 [ 160.730645][ T7113] worker_thread+0xaa6/0x1290 [ 160.737506][ T7113] kthread+0x436/0x520 [ 160.743761][ T7113] ret_from_fork+0x1f/0x30 [ 160.750354][ T7113] } [ 160.752950][ T7113] ... key at: [] tasklist_lock+0x18/0x40 [ 160.760772][ T7113] ... acquired at: [ 160.764753][ T7113] _raw_read_lock+0x32/0x40 [ 160.769436][ T7113] send_sigurg+0xcb/0x390 [ 160.773955][ T7113] sk_send_sigurg+0x6b/0xc0 [ 160.778646][ T7113] queue_oob+0x622/0x800 [ 160.783078][ T7113] unix_stream_sendmsg+0xb71/0xc90 [ 160.788369][ T7113] ____sys_sendmsg+0x5b7/0x8f0 [ 160.793320][ T7113] ___sys_sendmsg+0x236/0x2e0 [ 160.798182][ T7113] __se_sys_sendmsg+0x1af/0x290 [ 160.803217][ T7113] do_syscall_64+0x4c/0xa0 [ 160.807826][ T7113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.813904][ T7113] [ 160.816235][ T7113] -> (&f->f_owner.lock){....}-{2:2} { [ 160.821639][ T7113] INITIAL USE at: [ 160.825542][ T7113] lock_acquire+0x19e/0x400 [ 160.831623][ T7113] _raw_write_lock_irq+0xab/0xf0 [ 160.838133][ T7113] __f_setown+0x37/0x330 [ 160.843962][ T7113] f_setown+0x120/0x1c0 [ 160.849771][ T7113] sock_ioctl+0x5ac/0x710 [ 160.855668][ T7113] __se_sys_ioctl+0xfa/0x170 [ 160.861831][ T7113] do_syscall_64+0x4c/0xa0 [ 160.867904][ T7113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.875377][ T7113] INITIAL READ USE at: [ 160.879715][ T7113] lock_acquire+0x19e/0x400 [ 160.886230][ T7113] _raw_read_lock_irqsave+0xb8/0x100 [ 160.893539][ T7113] send_sigurg+0x25/0x390 [ 160.899877][ T7113] sk_send_sigurg+0x6b/0xc0 [ 160.906391][ T7113] queue_oob+0x622/0x800 [ 160.912649][ T7113] unix_stream_sendmsg+0xb71/0xc90 [ 160.919780][ T7113] ____sys_sendmsg+0x5b7/0x8f0 [ 160.926561][ T7113] ___sys_sendmsg+0x236/0x2e0 [ 160.933259][ T7113] __se_sys_sendmsg+0x1af/0x290 [ 160.940119][ T7113] do_syscall_64+0x4c/0xa0 [ 160.946536][ T7113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.954475][ T7113] } [ 160.956990][ T7113] ... key at: [] __alloc_file.__key+0x0/0x10 [ 160.965067][ T7113] ... acquired at: [ 160.968883][ T7113] _raw_read_lock_irqsave+0xb8/0x100 [ 160.974354][ T7113] send_sigio+0x2f/0x330 [ 160.978783][ T7113] kill_fasync+0x20a/0x490 [ 160.983396][ T7113] evdev_pass_values+0x54b/0xab0 [ 160.988520][ T7113] evdev_events+0x1c0/0x2f0 [ 160.993203][ T7113] input_pass_values+0x87e/0x1210 [ 160.998413][ T7113] input_handle_event+0xb3f/0x1490 [ 161.003704][ T7113] input_inject_event+0x1b9/0x2c0 [ 161.008910][ T7113] evdev_write+0x35b/0x490 [ 161.013507][ T7113] vfs_write+0x30b/0xd60 [ 161.017935][ T7113] ksys_write+0x152/0x260 [ 161.022453][ T7113] do_syscall_64+0x4c/0xa0 [ 161.027052][ T7113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.033125][ T7113] [ 161.035455][ T7113] [ 161.035455][ T7113] stack backtrace: [ 161.041361][ T7113] CPU: 1 PID: 7113 Comm: syz.4.1140 Not tainted syzkaller #0 [ 161.048741][ T7113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.058813][ T7113] Call Trace: [ 161.062107][ T7113] [ 161.065076][ T7113] dump_stack_lvl+0x188/0x250 [ 161.069778][ T7113] ? load_image+0x400/0x400 [ 161.074306][ T7113] ? show_regs_print_info+0x20/0x20 [ 161.079529][ T7113] ? load_image+0x400/0x400 [ 161.084046][ T7113] ? print_shortest_lock_dependencies+0xf0/0x160 [ 161.090398][ T7113] __lock_acquire+0x6688/0x7d10 [ 161.095283][ T7113] ? verify_lock_unused+0x140/0x140 [ 161.100524][ T7113] lock_acquire+0x19e/0x400 [ 161.105036][ T7113] ? send_sigio+0x2f/0x330 [ 161.109466][ T7113] ? read_lock_is_recursive+0x10/0x10 [ 161.114856][ T7113] ? read_lock_is_recursive+0x10/0x10 [ 161.120241][ T7113] _raw_read_lock_irqsave+0xb8/0x100 [ 161.125535][ T7113] ? send_sigio+0x2f/0x330 [ 161.129963][ T7113] ? _raw_read_lock+0x40/0x40 [ 161.134654][ T7113] ? _raw_read_lock_irqsave+0xc4/0x100 [ 161.140113][ T7113] ? _raw_read_lock+0x40/0x40 [ 161.144783][ T7113] ? do_raw_spin_lock+0x128/0x2f0 [ 161.149837][ T7113] send_sigio+0x2f/0x330 [ 161.154115][ T7113] kill_fasync+0x20a/0x490 [ 161.158541][ T7113] evdev_pass_values+0x54b/0xab0 [ 161.163490][ T7113] ? evdev_pass_values+0x581/0xab0 [ 161.168611][ T7113] evdev_events+0x1c0/0x2f0 [ 161.173130][ T7113] ? evdev_event+0xe0/0xe0 [ 161.177559][ T7113] input_pass_values+0x87e/0x1210 [ 161.182601][ T7113] ? read_lock_is_recursive+0x10/0x10 [ 161.187985][ T7113] input_handle_event+0xb3f/0x1490 [ 161.193115][ T7113] input_inject_event+0x1b9/0x2c0 [ 161.198247][ T7113] evdev_write+0x35b/0x490 [ 161.202799][ T7113] ? evdev_read+0xb90/0xb90 [ 161.207327][ T7113] ? end_current_label_crit_section+0x14b/0x170 [ 161.213590][ T7113] ? common_file_perm+0x171/0x1c0 [ 161.218638][ T7113] ? fsnotify_perm+0x5d/0x560 [ 161.223334][ T7113] ? security_file_permission+0x75/0xa0 [ 161.228900][ T7113] ? evdev_read+0xb90/0xb90 [ 161.233524][ T7113] vfs_write+0x30b/0xd60 [ 161.237783][ T7113] ? file_end_write+0x250/0x250 [ 161.242645][ T7113] ? __fget_files+0x40f/0x480 [ 161.247331][ T7113] ? __fdget_pos+0x1e2/0x370 [ 161.252108][ T7113] ? ksys_write+0x71/0x260 [ 161.256572][ T7113] ksys_write+0x152/0x260 [ 161.260915][ T7113] ? __ia32_sys_read+0x80/0x80 [ 161.265691][ T7113] ? lockdep_hardirqs_on+0x94/0x140 [ 161.270911][ T7113] do_syscall_64+0x4c/0xa0 [ 161.275429][ T7113] ? clear_bhb_loop+0x30/0x80 [ 161.280140][ T7113] ? clear_bhb_loop+0x30/0x80 [ 161.284834][ T7113] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.290763][ T7113] RIP: 0033:0x7f9a4466ae59 [ 161.295192][ T7113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.314806][ T7113] RSP: 002b:00007f9a428c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.323234][ T7113] RAX: ffffffffffffffda RBX: 00007f9a448e3fa0 RCX: 00007f9a4466ae59 [ 161.331213][ T7113] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000003 [ 161.339190][ T7113] RBP: 00007f9a44700d6f R08: 0000000000000000 R09: 0000000000000000 [ 161.347176][ T7113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.355158][ T7113] R13: 00007f9a448e4038 R14: 00007f9a448e3fa0 R15: 00007fff277e3548 [ 161.363142][ T7113] [ 161.387662][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 161.441780][ T4182] udevd[4182]: symlink '../../loop0' '/dev/disk/by-diskseq/441.tmp-b7:0' failed: Read-only file system [ 161.487344][ T4181] udevd[4181]: symlink '../../loop3' '/dev/disk/by-diskseq/438.tmp-b7:3' failed: Read-only file system [ 161.499362][ T4180] udevd[4180]: symlink '../../loop1' '/dev/disk/by-diskseq/443.tmp-b7:1' failed: Read-only file system [ 161.514600][ T4498] udevd[4498]: symlink '../../loop5' '/dev/disk/by-diskseq/444.tmp-b7:5' failed: Read-only file system [ 161.526906][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1142'. [ 161.539593][ T4180] udevd[4180]: symlink '../../loop1' '/dev/disk/by-uuid/805fce0c-ac78-492f-ad66-cd1bf6eb4f90.tmp-b7:1' failed: Read-only file system [ 161.543188][ T7120] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.558591][ T4498] udevd[4498]: symlink '../../loop5' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:5' failed: Read-only file system [ 161.614742][ T4498] udevd[4498]: symlink '../../loop4' '/dev/disk/by-diskseq/440.tmp-b7:4' failed: Read-only file system [ 161.698073][ T4498] udevd[4498]: symlink '../../loop5' '/dev/disk/by-diskseq/444.tmp-b7:5' failed: Read-only file system [ 161.722330][ T4498] udevd[4498]: symlink '../../loop5' '/dev/disk/by-diskseq/444.tmp-b7:5' failed: Read-only file system [ 161.740392][ T4498] udevd[4498]: symlink '../../loop5' '/dev/disk/by-diskseq/446.tmp-b7:5' failed: Read-only file system