last executing test programs: 8m36.816582571s ago: executing program 0 (id=15410): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, 0x0, 0x0) 8m36.642684775s ago: executing program 0 (id=15413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xce}}}, &(0x7f0000000080)='GPL\x00'}, 0x90) 8m36.482861098s ago: executing program 0 (id=15416): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x3, @sliced={0x3, [0xfffa, 0x3, 0x1000, 0x2, 0x100, 0x5, 0xea83, 0x9, 0x7ff, 0x1, 0xd, 0x800, 0x8, 0xf, 0x6, 0xd549, 0x96ce, 0x5, 0x4, 0x7fff, 0x9, 0x42ab, 0x9, 0x8, 0x0, 0x4, 0x400, 0x401, 0x628e, 0x3, 0x2, 0x183, 0xfffa, 0x8001, 0x7ff, 0x4, 0x8000, 0x8000, 0x0, 0x8, 0x1, 0x1a9e, 0x5cd6, 0xed95, 0x81, 0xd, 0xfffe, 0x8], 0x10}}) 8m36.350431361s ago: executing program 0 (id=15418): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1008804, &(0x7f0000000280)={[{@keep_last_dots}, {@errors_continue}, {@errors_remount}, {@errors_continue}, {@errors_remount}, {@umask={'umask', 0x3d, 0x26a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x9}}]}, 0x1, 0x1530, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJMmZJMktt2T9PxPzV6fO/5zzO538/mee7+fzfmY9s95n7WfPM+9+995z+bbL0BqNalZtQETwb8FLHxIAIBYABgLAdQAQAEDZuLJxGfPZJSb8exthf6xHkq92Bexq4v5nbdz/rI37n7Vx/7M27n/Wxv3P2rj/WRv3n7GsbPP0/NfzI+s++P5/Vsbv//9F0kuO/WptyRu7AsT8sync////4b+Ry/3/rxX8M0/i/mdt3P+sKvZqF8D+F+DXf1aQ7e/OcP+zNu4/Y1nZL+8Fx8LVvx/9Zz8g8p/8GYjvdemrfPX38+/uP2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wx9ic4669QAJA5vtp1McYYY4wxxhhj7I/js13tChhjjDHGGGOMMfafhyBAgoIAYiAbxEJ2yAECICZz/nqIgxsgN9wIeSAv5IP8EA8FoCBoMGCBIIRCUBiicBMUgZuhKBSD4lACHJSEUnALlIZboQzcBmXhdigHd0B5qAAVoRLcCZXhLqgCd0NVuAeqQXWoATXhXqgF90FtuB/qwANQFx6EevAQ1IeHoQE8Ag3hUWgEj0FjeByaQFNoBs2hxf8o/yXoAS9DT+gFCdAb+sAr0Bf6QX8YAAPhVRgEr8FgeB0SYQgMhTdgGLwJw+EtGAEjYRS8DaPhHRgDY2EcjIckmAAT4V2YBO/BZJgCU2EaJMN0mAHvw0yYBbPhA5gDH8JcmAfzYQGkwEewEBZBKnwMi+ETSIMlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBO+FT2AWfwW7YA3vhc9gHX/yL+Wf+Jr8rAgIKFKhQYQzGYCzGYg7MgTkxJ+bCXBjBCMZhHObG3JgH82A+zIfxGI8FsSAaNEhIWAgLYRSjWASLYFEsisWxODp0WApLYWm8FctgGSyLZbEclsPyWAErYCWshJWxMlbBKlgVq2I1rIY1sAbei/dib6yNtbEO1sG6WDfz9hQ2wAbYEBtiI2yEjbExNsEm2AybYQtsgS2xJbbCVtgG22BbbIvtsB22x/bYATtgR+yInbATdsbO2AW7YFfsht3SX8oG+DK+jL2wmuiNfbAP9sXEbP1xAA7AV3EQvoav4euYiENwKL6Bb+CbOBxP44iLI3EUjsLK4h0cg2ORxHhMwiSciBNxEk7CyTgFp+A0TMbpOANn4EychbPwA5yDH+KHOA/n4QJMwRRciIswFVNxMZ7BNFyCS3EZLscVuBxX4WpchWtxHa7FDbgBN+Em3IJbcBtuwx24Az9FBYCf4R7cg4m4D/fhftyPB/AAHsSDmI7peAgP4WE8jEfwCB7Fo3gMj+MJPI6n8BSexjN4Fs/ieTyPF/CF+K8bflpsTSKIDEooESNiRKyIFTlEDpFT5BS5RC4RERERJ+JEbpFb5BF5RD6RT8SLeFFQFBRGGEEizDhSiKiIiiKiiCgqioriorhwwolSopQoLUqLMqKMKCtuF+XEHaK8qCBau0qikqgs2rgq4m5RVVQV1UR1UUPUFDVFLVFL1Ba1RR1RR9QVdUU98ZCoL3pjf3xEZHSmkRiCjcVQbCKaCnn5CNVSDMdWorVoI54SI3EEthMtXXvxrOggxmBH8RcxFp8XncV47CJeFF1FN9FdvCR6iFaup+glJmNv0UdMw76in+gvBoiZWF18gHOy1xCvi0QxRAwVb4gF+KYYLt4SI8RIMUq8LUaLd8QYMVaME+NFkpggJop3xSTxnpgspoipYppIFtPFDPG+mClmidniAzFHfCjminlivlggUsRHYqFYJFLFx2Kx+ESkiSViqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLHWKn+FTsEp+J3WKP2Cs+F/vEF2K/+FIcEF+Jg+KvIl18LQ6Jb8Rh8a04Ir4TR8X34pg4Lk6Ik+KU+EGcFmfEWXFOnBc/igviJ3FReAESpZBSKhnIGJlNxsrsMoe8RuaUQebxX8bJG2RueaPMI/PKfDK/jJcFZEGppZFWkgxlIVlYRuVNsoi8WRaVxWRxWUI6WVKWkrfI0vJWWUbeJsvK22U5eYcsLyvIirKSvFNWlndJiFzaRjVZXdaQNeW9MgHuk7Xl/bKOfEDWlQ/KevIhWV8+LBvIR2RD+ahsJB+TjeXjsolsKpvJ5rKFfEK2lE/KVrK1bCOfkm3l07KdfEa2l8/KDtJf/hZ5XnaWL8gu8kXZVXaT3eVP8qL0sqfsJaE3yD7yFdlX9pP95QA5UL4qB8nX5GD5ukyUQ+RQ+YYcJt+Uw+VbcoQcKUfJt+Vo+Y4cI8fKcXK8TJIT5ET5rpwk35OT5RQ5VU6TyXK67H95pdlS/sP8d38nf/DPW98kN8stcqvcJrfLHXKn/FTukrvkbrlb7pV75T65T+6X++UBeUAelAdlukyXh+QheVgelkfkEXlUHpXH5HF5Tp6Up+QP8rQ8I8/Ic/K8PC8vXP4agEIllFRKBSpGZVOxKrvKoa5ROdW1Kpe6TkXU9SpO3aByqxtVHpVX5VP5VbwqoAoqrYyyilSoCqnCKqpuwsvfMKq4KqGcKqlKqVv+lXxVRN2siqpiv8rPrC/h79TXQrVQLVVL1Uq1Um1UG9VWtVXtVDvVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVVXVV3VV31UP1UD1VT5WgElQf9Yrqq/qp/mqAGqheFRn7MFgNVokqUQ1VQ9UwNUwNV8PVCDVCjVKj1Gg1Wo1RY9Q4NU4lqSQ1UU1UUk1Sk9VkNVVNVckqWc1QM9RMNVPNVrPVHDVHzVVz1Xw1X6WoFLVQLVSpKlUtVotVmlqilqhlaplaoVaoVWqVWqPWqHVqndqgNqg0tVltVlvVVrVdbVc71U61S+1Su9VutVftVfvUPrVf7VcH1AF1UB1U6SpdHVKH1GF1WB1RR9RRdVQdU8fUCXVCnVKn1Gl1Wp1VZ9V5dV5dUBfURXUx47QvEIEIVKCCmCAmiA1igxxBjiBnkDPIFeQKIkEkiAvigtzBjUGeIG+QL8gfxAcFgoKBDkxgA3G56dHgpqBIcHNQNCgWFA9KBC4oGZQKbglKB7cGZYLbgrLB7UG54I6gfFAhqBhUCu4MKgd3BVWCu4OqwT1BtaB6UCOoGdwb1AruC2oH9wd1ggeCusGDQb3goaB+8HDQIHgkaBg8GjQKHgsaB48HTYKmQbOgedDiD13f+9N5n3Q9dS+doHvrPvoV3Vf30/31AD1Qv6oH6df0YP26TtRD9FD9hh6m39TD9Vt6hB6pR+m39Wj9jh6jx+pxerxO0hP0RP2unqTf05P1FD1VT9PJerqeod/XM/UsPVt/oOfoD/VcPU/P1wt0iv5IL9SLdKr+WC/Wn+g0vUQv1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Un+pd+jO9W+/Re/Xnep/+Qu/XX+oD+it9UP9Vp+uv9SH9jT6sv9VH9Hf6qP5eH9PHdRl9Up/SP+jT+ow+q8/p8/pHfUH/pC9qn3Fyn/H2bpRRJsbEmFgTa3KYHCanyWlymVwmYiImzsSZ3Ca3yWPymHwmn4k38aagKWgykCFTyBQyURM1RUwRU9QUNcVNceOMM6VMKVPalDZlTBlT1pQ15Uw5U96UNxVNRXOnudPcZe4yd5u7zT3mHlPdVDc1TU1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDHNTDPTwrQwLU1L08q0Mm1MG9PWtDXtTDvT3rQ3HUwH09F0NJ1MJ9PZdDZdTBfT1XQ13U1308P0MD1NT5NgEkwf08f0NX1Nf9PfDDQDzSAzyAw2g02iSTRDzVAzzAwzw81wM8KMNKMyTlTNO2aMGWvGmfEmySSZiWaimWQmmclmsplqpppkk2xmmBlmpplpZpvZZo6ZY+aauWa+mW9STIpZaBaaVJNqFpvFJs2kmaVmqVlulpuVZqVZbVabtWatWQ/rzUaz0Ww2m81Ws9VsN9vNTrPT7DK7zG6z2+w1e80+s8/sN/vNAXPAHDQHTbpJN4fMIXPYHDZHzBFz1Bw1x8wxc8KcMKfMKXPanDZnzVlz3uS9/H7pTazNbnPYa2xOe63NZa+zfxvns/ltvC1gC1pt89i8v4qNtbaoLWaL2xLW2ZK2lL3lN3F5W8FWtJXsnbayvctW+U1cy95na9v7bR37gK1p7/1VXNc+aOvZx2x9RADb1Da0zW0j+5htbB+3TWxT28w2t23t07adfca2t8/aDva538QL7SK72q6xa+06u9vusWftOXvYfmvP2x9tT9vLDrSv2kH2NTvYvm4T7ZDfxKPs23a0fceOsWPtODv+N/FUO80m2+l2hn3fzrSzfhOn2I/sHJtq59p5dr5d8HOcUVOq/dgutp/YNBvAUrvMLrcr7Eq76v/WusxusBvtJrvLfma32m12u91hd2aeCNs9dq/93O6zX9hD9ht7wH5lD9ojNt1+/XOcsX9H7Hf2qP3eHrPH7Ql70p6yP6jM7Ix9P2l/shett0BIQJIUBRRD2SiWslMOuoZy0rWUi66jCF1PcXQD5aYbKQ/lpXyUn+KpABUkTYYsEYVUiApTlG6izPKKUwlyVJJK0S1Umm6lMnQblaXbqRzdQeWpAlWkSnQnVaa7qArdTVXpHqpG1akG1aR7qRbdR7XpfqpDD1BdepDq0UNUnx6mBvQINaRHqRE9Ro3pcWpCTakZNacW9AS1pCepFbWmNvQUtaWnqR09Q+3pWepAz1FH+gt1ouepM71AXehF6krdqDu9RD3oZepJvSiBelMfeoX6Uj/qTwNoIL1Kg+g1GkyvUyINoaH0Bg2jN2k4vUUjaCSNordpNL1DY2gsjaPxlEQTaCK9S5PoPZpMU2gqTaNkmk4z6H2aSbNoNn1Ac+hDmkvzaD4toBT6iBbSIkqlj2kxfUJptISW0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOO2gnfUq76DPaTXtoL31O++gL2k9f0gH6ig7SXymdvqZD9A0dpm/pCH3ne9H3dIyO0wk6SafoBzpNZ+gsnaPz9CNdoJ/oInmCEEMRylCFQRgTZgtjw+xhjvCaMGd4bZgrvC6MhNeHceENYe7wxjBPmDfMF+YP48MCYcFQhya0IYVhWCgsHEbDm8Ii4c1h0bBYWDwsEbqwZFgqvCUsHd4alglvC8uGt4flwjvC8mGF8LEHKoV3hpXDu8Iq4d1h1fCesFpYPawR1gzvDWuF94W1w/vDOuEDYZnwwbBe+FBYP3w4bBA+EjYMHw0bhY+FjcPHwyZh07BZ2DxsET4RtgyfDFuFrcM24TVh2/DpsF34TNg+fDbsED738/yDizLnn/rNfELYO+wTvhK+Enp/v5wfXRBNiX4UXRhdFE2NfhxdHP0kmhZdEl0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y3RT1vmY2cOiEk065wMW4bC7WZXc53DUup7vW5XLXuYi73sW5G1xud6PL4/K6fC6/i3cFXEGnnXHWkQtdIVfYRd1Nroi72RV1xVxxV8I5V9KVcs1dC9fCtXRPulautWvjnnJPuafd0+4Z94x71nVwz7mO7i+uk3vedXYvuBfci66r6+a6u5dcDzch16XXZILr4/q4vq6v6+/6u4FuoBvkBrnBbrBLdIluqBvqhrlhbrgb7ka4EW6UG+VGu9FujBvjxrlxLskluYluopvkJrnJbrKb6qa6ZJfsZrgZbqab6SrPurSVuW6um+/muxSX4ha6jHPGVLfYLXZpLs0tdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O90ut8vt9tddWtTtc/vdfnfAHXAH3V9duvvaHXLfuMPuW3fEfeeOuu/dMXfcnXAn3Sn3gzvtzriz7pw77350F9xP7qLzLikyITIx8m5kUuS9yOTIlMjUyLRIcmR6ZEbk/cjMyKzI7MgHkTmRDyNzI/Mi8yMLIimRjyILI4siqZGPI4sjn0TSIksiSyPLIssjKyLeF9ga+kK+sI/6m3wRf7Mv6ov54r6Ed76kL+Vv8aUv1Z3m/e2+nL/Dl/cVfEX/uG/im/pmvrlv4Z/wLf2TvpVv7dv4p3xb/7Rv55/x7f2zvoN/znf0f/Gd/PO+s3/Bd/Ev+q6+m+/uX/I9/Mu+p+/lE3xv38e/4vv6fr6/H+AH+lf9IP+aH+xf94l+iB/q3/DD/Jt+uH/Lj/Aj/aiYt/3ozEtkGO+T/AQ/0b/rJ/n3/GQ/xU/103yyn+5n+Pf9TD/Lz/Yf+Dn+Qz/Xz/Pz/QKf4j/yC/0in+o/9ov9Jz7NL8m8aexX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u9/hd/pP/S7/md/t9/i9/nO/z3/h9/sv/YGLmX+B9rU/5L/xh/23/oj/zh/13/tj/rg/4U/6U/4Hf9qf8Wf9OX/e/+gv+J/8Rf6bNcYYY4yxf8qEK0Px65lLt/N7/06O+MWT+wDAtdvyp/9yPuOMcn2eS+N+Ij424+Ozvbo8kvmoVi0hIeHyc9MkBIXnAWT+JCjDz796cDleAm3gaWgPraH079bfT3Q7T/9g/ejtADl+kZNRUGZ8Zf0vATDhd9Z/4qlRC8uFZ+P+H+vPAyha+EpOdrgSL4E2P99faQ1l/k79eVv+g/qzf5UE0OoXOTnhSnyl/lLwJDwH7X/1TMYYY4wxxhhj7JJ+omKnzOvPzN/4/L3r83h1JScbXIn/0fU5Y4wxxhhjjDHGrr7nu3V/5on27Vt3+tcHVf5HWf/0oDH8p1bmwe8OvAfI/IwCgH9zQYCMgfwz92LLn7KtxMsvnb+dWn7OB/C/o5V/xOAqH5gYY4wxxhhjf7grJ/2//ry6WgUxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGNZ0J/x78Su9j4yxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9v/CQAA//9F2vrQ") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) 8m35.93502115s ago: executing program 0 (id=15423): r0 = syz_io_uring_setup(0x2a37, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x19, 0x20000000, 0x0) 8m35.535129089s ago: executing program 0 (id=15428): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)) 8m35.059495729s ago: executing program 32 (id=15428): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)) 1.994183196s ago: executing program 4 (id=23341): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x1, 0x2, 0x2, "b8f7436e6cceee1467d9c13fbc03fe2171408043c4b9f39e907c612296c208a3", 0x39555659}) 1.831918749s ago: executing program 2 (id=23342): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000180)={0x3, {0x40, 0x0, 0x7fffffff, 0x3}}) 1.743265101s ago: executing program 4 (id=23345): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x28041) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f000001fac0)={0x0, 0xd, 0x3017, 0x1}) 1.655863443s ago: executing program 2 (id=23346): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f00000004c0)=0x2c) 1.448977777s ago: executing program 4 (id=23350): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000fcffffff00000000"]}, 0x108) 1.448459297s ago: executing program 2 (id=23351): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000200025a726bd7000fddbdf250a0000cdff0000010200010008000600000000000c000c00e5"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 1.407123829s ago: executing program 3 (id=23352): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) 1.280840781s ago: executing program 2 (id=23354): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x20108c0, &(0x7f00000018c0)=ANY=[], 0x1, 0x61f5, &(0x7f00000075c0)="$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") symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.273569271s ago: executing program 4 (id=23355): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 1.185106174s ago: executing program 3 (id=23357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a01010000000000000000010002000900010073797a30000000000900030073797a300000000028010000030a05000000000000000000010000050c00024000000000000000010900010073797a30"], 0x1a4}, 0x1, 0x0, 0x0, 0xc021}, 0x0) 1.104767305s ago: executing program 4 (id=23358): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8002, &(0x7f00000000c0)=ANY=[], 0x1, 0x62a7, &(0x7f0000012f40)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 1.043178017s ago: executing program 1 (id=23359): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000ac0)={0x0, 0x0, 0x5, 0x0, 0x4}) 972.127078ms ago: executing program 3 (id=23360): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000440)={0x0, @sdr={0x34565559, 0x8}}) 891.24123ms ago: executing program 1 (id=23361): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@updsa={0x144, 0x1a, 0xffffffffffffffff, 0x70bd2a, 0x3, {{@in=@private=0xa010101, @in6=@loopback, 0x0, 0xfffd, 0x4e24, 0x0, 0x0, 0x20, 0xa0, 0x11}, {@in=@multicast1, 0x4d4, 0x6c}, @in6=@private1, {0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x7ff, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0x0, 0x0, 0xfffffffffffffffe, 0xa6}, {0x936d, 0x3d49, 0x4000}, 0x80, 0x3503, 0xa, 0x0, 0x4, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x144}}, 0x0) 778.192522ms ago: executing program 3 (id=23362): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x150, 0x10, 0x713, 0x70bd2b, 0x25dfdbfc, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x11}, 0x4, 0xb6e, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2c}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0xd43}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "66d38547aa140d000000000000000086cae9fb4f"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2094) 724.783784ms ago: executing program 1 (id=23363): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100001, 0x5, 0x3, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 596.056807ms ago: executing program 3 (id=23364): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020201030e00000000070000fcdbdf2504000900a800000053bb467d04f5ccf81ec4860c303200000000009feb00000003000600000000000200100000000000000000000000000002000100000000000000060d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x800) 464.238109ms ago: executing program 1 (id=23365): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001800599c6d0eab070004000523"], 0xfe33) 442.61193ms ago: executing program 3 (id=23366): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) writev(r0, &(0x7f0000000bc0)=[{&(0x7f0000000800)="0c62ac5320869432b694c16f76a1f98f8ffc53a8dfb753b0159438117347b5fa61cc18d3183d5e6d8ad3676586e79bc82491b5df3e990fd7d029bd3cf88cfe89aa7d50327a4be119892183e296a469ca037c1b8e7c65c784006c1e0156008a877bc270c34b95f4322781bbd472ff6dbe088cabdfa2d9fa16020e23a83daa8128a0aa8927f3dbba78eb4457fff99bf8a2d56c7b33a1fe2dcc9499ed68bff4ed40019bf3ee7de75c9a9c346ac66e68093844956c80f08bba8af07b7ace1e180293f810bba294", 0xc5}, {&(0x7f00000005c0)="2034b6f89c0f0be500fcfc91c45699ca9f7a654ad409e9f47b4d0953eb12ad31439b486f06ee066ce95102cb1296244a53b3f3d2e3412cfe05a1947d15c60bd7f17923e5d5f356b994ab229957ceab1e40a3b120dc54facd97840a97c286681e24e022b2a4434fa58709c5449989203565216a828c955b7f169061c4b1b33878323c2001a5dcd764cfae869532459fede3e48256fd72f91360b05213e1c15d87bd48da2cbd32b92cfc241df070e7071c4580e8da73db08f1265df70f72d335a9b3dfc197347206d2e8b59ad5639873797c5be08fa63f4167aa084fb0db460bb5f4b39e5f4b258dabde671dc5553ecb76f745f95742a678", 0xf7}, {&(0x7f0000000c40)="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"/435, 0xfffffe7c}, {&(0x7f0000000fc0)="15a3ca0b2112b5f460d6ad096d4e2a685b4970f3f7b31a6b57af6580bcd6cff7b7f5a674ba418d9c9e1fbf3d8e8423d403c27b0a6d0d3038320ef736842a6f5d85ddfee24bbd47a59a385210c2ba441ea582355d952ef0708a45dca57b42234e6b540d9751c9d725603e8977165d10de885826044ec23626b298c70114755090099bb1e3fcab718eeface72c4e3511d40b8fdf845c8cbd26bb39b0d6644638a1f2ab1ecf0f44dfcc3904ea93d7fbd70bb2419eef3667322044e5cee62e69b40877474309ffac656d2a71519fccafe31f3bfeb456f24fdfae000cecaf8e404e2e6419f6f0af44be05966b225eddbf3c993f4983d7d06e4a413c830962e6c4a794c3b2dea43646cdddff87232dda621d3a011556173d883e3d01d012880a7bf9d11370b2cf825a9e5212d9248776ea616a09b1d1cc1456d2e63bb4ae566ce8bbee6f255dac03f225f8e87dd0a219702ae10b6f3dd037c5b061cf084085e1baf64c7e9e2162a8855de980a9f78baea5a4dca3ef64bb7121e2dcdef8ba0394cb85c6ee8956dc060c0c9cd37b89737d", 0xcc}, {&(0x7f0000000a00)="3447f3a2decd386c3fc65b190e7207d4f6b784ed0323e99425504e305006ddbf7710ce84ed0d93d815544ed7dcc4304e129dc03295e11d563be92d236af535d9788d732a8853fb3e73271902aa2d8b3f9a506266b573df8d8d475fa18cdeb3e642cbec9f59537cd8c20fa5f2a8f2295a866d773bf8664e9dd7777475a13ed4da4ba39192f295e91c93cb27e4", 0x8c}, {&(0x7f0000000ac0)="809a5c70f82ca38e86321702760795d11f1ededcff2b7d30bc75bcfd228473f88518e2a781dc358d594c7a13b1763ecffc00c1574d80c3e250bca1fed3af82eff3366fccf0a2af5eaef8ca1c1f8679c126d12498816dd8168b1cc2b80a8d01d6040000965baa2dc009bf0245fd47a5fa1db6ef6e9f83b36e5e7b01635cca34e03d100ce16c11de8498a9fdc8f53d0d8bc93958e4672aa6d01ff675d9ea37661d2cda72f3cdbff158ed5f68f664fc48604143ef7e4ae7ae82443a8bbaa352ee64e4c70c9b803e81d51d87a4", 0xcb}], 0x6) 365.632272ms ago: executing program 1 (id=23367): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000300)=0x2) 231.496975ms ago: executing program 2 (id=23368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000090900010073797a30000000000900030073797a30000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002d05000200070000003c0001800c00010062697477697365002c000280080002400000000a08000340000000010800064000000000080001400000001204000580040004800900010073797a30"], 0x110}}, 0x0) 125.969817ms ago: executing program 1 (id=23369): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) socket$netlink(0x10, 0x3, 0x8000000004) 644.84µs ago: executing program 2 (id=23370): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x40003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x32, 0x1, 0x8, "d30000000000000000000000400040000000000000000000000000005cc7d019", 0x42303159}) 0s ago: executing program 4 (id=23371): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfa, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}}) kernel console output (not intermixed with test programs): ble returned -22 [ 1862.867928][T26793] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1863.158615][ T7278] usb 4-1: USB disconnect, device number 39 [ 1863.164987][T26802] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1863.616975][T26879] bond9: entered promiscuous mode [ 1863.640614][T26879] bond9: entered allmulticast mode [ 1863.646182][T26879] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1863.699662][T26916] loop2: detected capacity change from 0 to 1024 [ 1864.227276][T26935] loop2: detected capacity change from 0 to 8192 [ 1864.273113][T26957] netlink: 'syz.4.21713': attribute type 1 has an invalid length. [ 1864.316202][T26935] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1864.327862][T30813] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1864.366882][T26935] FAT-fs (loop2): Filesystem has been set read-only [ 1864.554503][T30813] usb 4-1: config 1 has an invalid descriptor of length 78, skipping remainder of the config [ 1864.591148][T30813] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1864.611542][T26969] netlink: 766 bytes leftover after parsing attributes in process `syz.2.21717'. [ 1864.654734][T30813] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1864.699519][T30813] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1864.717297][T30813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1864.749038][T30813] usb 4-1: SerialNumber: syz [ 1864.781743][T30813] cdc_acm 4-1:1.0: skipping garbage [ 1864.809078][T30813] cdc_acm 4-1:1.0: invalid descriptor buffer length [ 1864.815831][T30813] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1864.885632][T30813] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 1864.892151][T30813] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 1865.031032][ T7278] usb 4-1: USB disconnect, device number 40 [ 1866.204641][T27055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21739'. [ 1866.426698][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/3817.tmp-b7:1' failed: Read-only file system [ 1866.441902][T17661] udevd[17661]: symlink '../../loop2' '/dev/disk/by-diskseq/3832.tmp-b7:2' failed: Read-only file system [ 1866.518404][ T7050] udevd[7050]: symlink '../../loop4' '/dev/disk/by-diskseq/3828.tmp-b7:4' failed: Read-only file system [ 1866.578678][T17661] udevd[17661]: symlink '../../loop3' '/dev/disk/by-diskseq/3826.tmp-b7:3' failed: Read-only file system [ 1866.644721][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/3817.tmp-b7:1' failed: Read-only file system [ 1866.680975][T17661] udevd[17661]: symlink '../../loop2' '/dev/disk/by-diskseq/3832.tmp-b7:2' failed: Read-only file system [ 1866.708205][ T7054] udevd[7054]: symlink '../../loop4' '/dev/disk/by-diskseq/3828.tmp-b7:4' failed: Read-only file system [ 1866.761372][ T7050] udevd[7050]: symlink '../../loop2' '/dev/disk/by-diskseq/3832.tmp-b7:2' failed: Read-only file system [ 1866.787065][T17661] udevd[17661]: symlink '../../loop3' '/dev/disk/by-diskseq/3826.tmp-b7:3' failed: Read-only file system [ 1866.799052][T27091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21752'. [ 1866.799665][ T7054] udevd[7054]: symlink '../../loop1' '/dev/disk/by-diskseq/3817.tmp-b7:1' failed: Read-only file system [ 1866.886565][T27096] loop1: detected capacity change from 0 to 128 [ 1866.929950][T27096] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1866.970228][T27096] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1867.075426][T27096] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 1867.130174][T27105] loop4: detected capacity change from 0 to 2048 [ 1867.160366][T27116] overlayfs: cannot append lower layer [ 1867.247608][ T6185] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1867.331145][T27105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1867.684483][ T27] audit: type=1326 audit(1785293169.777:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27140 comm="syz.2.21766" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1867.779538][ T27] audit: type=1326 audit(1785293169.777:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27140 comm="syz.2.21766" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1867.863278][ T27] audit: type=1326 audit(1785293169.787:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27140 comm="syz.2.21766" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1867.908295][T27156] netlink: 'syz.2.21771': attribute type 2 has an invalid length. [ 1867.913537][ T27] audit: type=1326 audit(1785293169.787:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27140 comm="syz.2.21766" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1868.492474][T27188] netlink: 'syz.1.21782': attribute type 1 has an invalid length. [ 1868.610559][T27196] loop2: detected capacity change from 0 to 2048 [ 1868.657924][T27196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1869.333661][T27243] netlink: 'syz.2.21799': attribute type 21 has an invalid length. [ 1869.341975][T27243] netlink: 'syz.2.21799': attribute type 1 has an invalid length. [ 1869.401342][T27243] netlink: 144 bytes leftover after parsing attributes in process `syz.2.21799'. [ 1869.514156][ T27] audit: type=1326 audit(1785293171.708:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27254 comm="syz.3.21803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433b39de99 code=0x7ffc0000 [ 1869.624550][ T27] audit: type=1326 audit(1785293171.708:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27254 comm="syz.3.21803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433b39de99 code=0x7ffc0000 [ 1869.707342][ T27] audit: type=1326 audit(1785293171.750:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27254 comm="syz.3.21803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433b39de99 code=0x7ffc0000 [ 1869.797434][T27271] loop3: detected capacity change from 0 to 1024 [ 1869.801915][ T27] audit: type=1326 audit(1785293171.750:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27254 comm="syz.3.21803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f433b39de99 code=0x7ffc0000 [ 1869.881889][ T27] audit: type=1326 audit(1785293171.750:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27254 comm="syz.3.21803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433b39de99 code=0x7ffc0000 [ 1870.020093][ T27] audit: type=1326 audit(1785293171.750:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27254 comm="syz.3.21803" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f433b39de99 code=0x7ffc0000 [ 1870.383894][ T55] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1870.553218][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 1870.563209][ T55] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.591272][ T55] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1870.613216][ T55] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1870.628653][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.660704][ T55] usb 5-1: Product: syz [ 1870.676699][ T55] usb 5-1: Manufacturer: syz [ 1870.681839][ T55] usb 5-1: SerialNumber: syz [ 1870.695712][ T55] usb 5-1: config 0 descriptor?? [ 1870.723754][ T55] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1870.936388][ T55] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 1870.958541][ T55] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1870.978158][ T55] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 1870.987003][T27342] tmpfs: User quota inode hardlimit too large. [ 1871.008913][T27341] loop3: detected capacity change from 0 to 2048 [ 1871.027797][T27341] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=301129, location=301129 [ 1871.055208][T27341] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1871.188953][ T55] usb 5-1: USB disconnect, device number 37 [ 1871.236387][ T7050] udevd[7050]: symlink '../../loop3' '/dev/disk/by-diskseq/3842.tmp-b7:3' failed: Read-only file system [ 1871.266460][ T7050] udevd[7050]: symlink '../../loop3' '/dev/disk/by-diskseq/3842.tmp-b7:3' failed: Read-only file system [ 1871.322450][ T7050] udevd[7050]: symlink '../../loop3' '/dev/disk/by-diskseq/3843.tmp-b7:3' failed: Read-only file system [ 1871.348230][T17661] udevd[17661]: symlink '../../loop1' '/dev/disk/by-diskseq/3835.tmp-b7:1' failed: Read-only file system [ 1871.397942][ T7050] udevd[7050]: symlink '../../loop2' '/dev/disk/by-diskseq/3838.tmp-b7:2' failed: Read-only file system [ 1871.454440][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/3835.tmp-b7:1' failed: Read-only file system [ 1871.500884][T17661] udevd[17661]: symlink '../../loop3' '/dev/disk/by-diskseq/3843.tmp-b7:3' failed: Read-only file system [ 1871.516668][T27373] netlink: 'syz.1.21836': attribute type 1 has an invalid length. [ 1871.527219][T27373] netlink: 'syz.1.21836': attribute type 3 has an invalid length. [ 1871.553480][T27373] netlink: 224 bytes leftover after parsing attributes in process `syz.1.21836'. [ 1871.597721][ T7050] udevd[7050]: symlink '../../loop3' '/dev/disk/by-diskseq/3843.tmp-b7:3' failed: Read-only file system [ 1871.628479][T17661] udevd[17661]: symlink '../../loop2' '/dev/disk/by-diskseq/3838.tmp-b7:2' failed: Read-only file system [ 1871.642757][T27381] loop3: detected capacity change from 0 to 8 [ 1871.684744][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/3835.tmp-b7:1' failed: Read-only file system [ 1871.732611][T27381] SQUASHFS error: Failed to read block 0x4de: -5 [ 1871.742749][T27381] SQUASHFS error: Failed to read block 0x4de: -5 [ 1871.749925][T27381] SQUASHFS error: Failed to read block 0x4de: -5 [ 1871.782215][T27381] SQUASHFS error: Failed to read block 0x4de: -5 [ 1871.802728][T27381] SQUASHFS error: Failed to read block 0x4de: -5 [ 1872.902140][T27445] netlink: 'syz.1.21860': attribute type 64 has an invalid length. [ 1873.188937][T27465] loop3: detected capacity change from 0 to 512 [ 1873.214150][T27465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1873.281256][T27465] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1873.320696][T27472] netlink: 220 bytes leftover after parsing attributes in process `syz.2.21865'. [ 1873.350650][T27465] EXT4-fs (loop3): 1 truncate cleaned up [ 1873.372980][ T55] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1873.382835][T27465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1873.401092][T27472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21865'. [ 1873.495035][T27472] tc_dump_action: action bad kind [ 1873.583899][ T6191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1873.591670][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 1873.602377][ T55] usb 5-1: config index 0 descriptor too short (expected 26, got 18) [ 1873.621931][ T55] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1873.668738][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.676821][ T55] usb 5-1: Product: syz [ 1873.683124][ T55] usb 5-1: Manufacturer: syz [ 1873.690917][ T55] usb 5-1: SerialNumber: syz [ 1873.703527][ T55] usb 5-1: config 0 descriptor?? [ 1873.714430][ T55] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1874.108548][ T55] gspca_sq930x: ucbus_write failed -71 [ 1874.195536][T27508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21874'. [ 1874.335313][ T55] gspca_sq930x: Sensor ov9630 not yet treated [ 1874.359525][ T55] sq930x: probe of 5-1:0.0 failed with error -22 [ 1874.391834][ T55] usb 5-1: USB disconnect, device number 38 [ 1874.643298][T27535] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21882'. [ 1874.686654][T27535] netlink: 96 bytes leftover after parsing attributes in process `syz.1.21882'. [ 1874.795855][T27544] loop4: detected capacity change from 0 to 1024 [ 1874.833092][T27544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1874.858753][T27544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1874.906539][T27544] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1874.964708][T27544] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1875.051916][T27544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1875.188399][T27573] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21893'. [ 1875.340368][ T6947] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1875.363990][T30813] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1875.587467][T30813] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1875.611452][T30813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.619513][T30813] usb 2-1: Product: syz [ 1875.642694][T30813] usb 2-1: Manufacturer: syz [ 1875.647767][T30813] usb 2-1: SerialNumber: syz [ 1875.668849][T30813] usb 2-1: config 0 descriptor?? [ 1875.691115][T30813] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1875.744237][T27597] loop3: detected capacity change from 0 to 1024 [ 1876.025720][ T7050] udevd[7050]: symlink '../../loop3' '/dev/disk/by-diskseq/3850.tmp-b7:3' failed: Read-only file system [ 1876.036556][T27606] Non-string source [ 1876.072312][ T7050] udevd[7050]: symlink '../../loop3' '/dev/disk/by-diskseq/3851.tmp-b7:3' failed: Read-only file system [ 1876.080996][T17661] udevd[17661]: symlink '../../loop2' '/dev/disk/by-diskseq/3838.tmp-b7:2' failed: Read-only file system [ 1876.095723][T30813] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1876.113361][T30813] sq905c 2-1:0.0: Reading version command failed [ 1876.124987][T30813] sq905c: probe of 2-1:0.0 failed with error -71 [ 1876.163067][ T7050] udevd[7050]: symlink '../../loop3' '/dev/disk/by-diskseq/3851.tmp-b7:3' failed: Read-only file system [ 1876.177033][T30813] usb 2-1: USB disconnect, device number 45 [ 1876.280240][ T7050] udevd[7050]: symlink '../../loop2' '/dev/disk/by-diskseq/3838.tmp-b7:2' failed: Read-only file system [ 1876.388250][ T7050] udevd[7050]: symlink '../../loop3' '/dev/disk/by-diskseq/3851.tmp-b7:3' failed: Read-only file system [ 1876.445396][T27588] loop4: detected capacity change from 0 to 32768 [ 1876.510802][T27588] ERROR: (device loop4): diAllocAG: numfree > numinos [ 1876.510802][T27588] [ 1876.519722][T17661] udevd[17661]: symlink '../../loop2' '/dev/disk/by-diskseq/3838.tmp-b7:2' failed: Read-only file system [ 1876.545131][T27588] ERROR: (device loop4): remounting filesystem as read-only [ 1876.578387][ T7054] udevd[7054]: symlink '../../loop3' '/dev/disk/by-diskseq/3851.tmp-b7:3' failed: Read-only file system [ 1876.582725][T27588] ialloc: diAlloc returned -5! [ 1876.661220][T17661] udevd[17661]: symlink '../../loop1' '/dev/disk/by-diskseq/3835.tmp-b7:1' failed: Read-only file system [ 1876.753490][T17661] udevd[17661]: symlink '../../loop3' '/dev/disk/by-diskseq/3851.tmp-b7:3' failed: Read-only file system [ 1877.230611][ T55] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1877.421827][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 1877.429566][ T55] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 1877.446395][ T55] usb 3-1: config 4 has no interface number 0 [ 1877.455960][ T55] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1877.495684][ T55] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1877.549481][ T55] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1877.583613][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.604780][ T55] hub 3-1:4.128: USB hub found [ 1877.835236][ T55] hub 3-1:4.128: 21 ports detected [ 1877.849703][ T55] hub 3-1:4.128: Using single TT (err -22) [ 1877.876630][ T55] hub 3-1:4.128: insufficient power available to use all downstream ports [ 1878.026801][ T55] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 1878.046908][T27661] loop4: detected capacity change from 0 to 32768 [ 1878.053874][ T55] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 1878.082105][T27661] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.21910 (27661) [ 1878.105890][T27658] loop3: detected capacity change from 0 to 32768 [ 1878.136394][T27661] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1878.152424][T27661] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1878.156460][ T55] usb 3-1: USB disconnect, device number 43 [ 1878.161801][T27661] BTRFS info (device loop4): using free space tree [ 1878.214773][T27658] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1878.345023][T27661] BTRFS info (device loop4): enabling ssd optimizations [ 1878.352127][T27661] BTRFS info (device loop4): auto enabling async discard [ 1878.398578][T27658] XFS (loop3): Ending clean mount [ 1878.459187][T27658] XFS (loop3): Quotacheck needed: Please wait. [ 1878.616312][ T6947] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1878.645757][T27658] XFS (loop3): Quotacheck: Done. [ 1878.787875][ T6191] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1878.920444][ T7050] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (7050) [ 1879.277158][ C0] vkms_vblank_simulate: vblank timer overrun [ 1879.609476][ C0] vkms_vblank_simulate: vblank timer overrun [ 1879.619448][T27758] loop2: detected capacity change from 0 to 4096 [ 1879.819866][T27758] ntfs3: loop2: ino=5, "/" directory corrupted [ 1879.856525][T27758] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1880.276491][ C0] vkms_vblank_simulate: vblank timer overrun [ 1880.466931][ C0] vkms_vblank_simulate: vblank timer overrun [ 1880.546745][T27803] loop3: detected capacity change from 0 to 16 [ 1880.561875][T27803] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1880.873813][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/3835.tmp-b7:1' failed: Read-only file system [ 1880.879498][T27818] netlink: 'syz.3.21948': attribute type 1 has an invalid length. [ 1880.961969][ T7050] udevd[7050]: symlink '../../loop4' '/dev/disk/by-diskseq/3857.tmp-b7:4' failed: Read-only file system [ 1881.016681][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/3835.tmp-b7:1' failed: Read-only file system [ 1881.066686][T17661] udevd[17661]: symlink '../../loop3' '/dev/disk/by-diskseq/3861.tmp-b7:3' failed: Read-only file system [ 1881.149816][ T7050] udevd[7050]: symlink '../../loop4' '/dev/disk/by-diskseq/3857.tmp-b7:4' failed: Read-only file system [ 1881.212564][T17661] udevd[17661]: symlink '../../loop3' '/dev/disk/by-diskseq/3861.tmp-b7:3' failed: Read-only file system [ 1881.225920][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/3835.tmp-b7:1' failed: Read-only file system [ 1881.260667][T27789] loop2: detected capacity change from 0 to 32768 [ 1881.284857][T27836] netlink: 'syz.4.21953': attribute type 1 has an invalid length. [ 1881.315014][T27789] ERROR: (device loop2): diAllocAG: numfree > numinos [ 1881.315014][T27789] [ 1881.364547][T27789] ERROR: (device loop2): remounting filesystem as read-only [ 1881.371220][T17661] udevd[17661]: symlink '../../loop1' '/dev/disk/by-diskseq/3835.tmp-b7:1' failed: Read-only file system [ 1881.395797][T27789] ialloc: diAlloc returned -5! [ 1881.474410][T17661] udevd[17661]: symlink '../../loop3' '/dev/disk/by-diskseq/3861.tmp-b7:3' failed: Read-only file system [ 1881.487731][ T7054] udevd[7054]: symlink '../../loop4' '/dev/disk/by-diskseq/3857.tmp-b7:4' failed: Read-only file system [ 1881.839827][T27865] xt_hashlimit: invalid interval [ 1882.321433][T27895] binder: BC_ATTEMPT_ACQUIRE not supported [ 1882.356278][T27895] binder: 27894:27895 ioctl c0306201 2000000003c0 returned -22 [ 1882.559511][T27914] loop3: detected capacity change from 0 to 512 [ 1882.685283][T27914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1882.701612][T27914] ext4 filesystem being mounted at /5438/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1882.844612][ T6191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1883.397982][T27967] overlayfs: conflicting options: nfs_export=on,index=off [ 1884.213202][T28022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22013'. [ 1884.232360][T28022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22013'. [ 1884.241365][T28022] netlink: 17 bytes leftover after parsing attributes in process `syz.4.22013'. [ 1884.410800][T28023] loop3: detected capacity change from 0 to 4096 [ 1884.471418][T28023] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1884.607562][T28023] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1884.659410][T28023] ntfs3: loop3: Failed to load $Extend (-22). [ 1884.666193][T28023] ntfs3: loop3: Failed to initialize $Extend. [ 1884.725349][T28023] ntfs3: loop3: ino=0, attr_set_size [ 1885.378621][T28085] netlink: 'syz.4.22032': attribute type 11 has an invalid length. [ 1885.641327][T28100] loop2: detected capacity change from 0 to 16 [ 1885.644052][ T7050] udevd[7050]: symlink '../../loop2' '/dev/disk/by-diskseq/3863.tmp-b7:2' failed: Read-only file system [ 1885.664224][T28100] erofs: (device loop2): mounted with root inode @ nid 36. [ 1885.699292][T28100] erofs: (device loop2): erofs_init_inode_xattrs: xattr_isize 12 of nid 86 is not supported yet [ 1885.723166][ T7050] udevd[7050]: symlink '../../loop2' '/dev/disk/by-diskseq/3868.tmp-b7:2' failed: Read-only file system [ 1885.757651][ T7050] udevd[7050]: symlink '../../loop2' '/dev/disk/by-uuid/de08ee7d-c14c-4657-8f5d-a5ca07e02e09.tmp-b7:2' failed: Read-only file system [ 1885.779659][T17661] udevd[17661]: symlink '../../loop4' '/dev/disk/by-diskseq/3857.tmp-b7:4' failed: Read-only file system [ 1885.790393][T28062] loop3: detected capacity change from 0 to 32768 [ 1885.833987][T28062] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1885.851133][T17661] udevd[17661]: symlink '../../loop1' '/dev/disk/by-diskseq/3835.tmp-b7:1' failed: Read-only file system [ 1885.887036][T17661] udevd[17661]: symlink '../../loop2' '/dev/disk/by-diskseq/3868.tmp-b7:2' failed: Read-only file system [ 1885.955938][T28062] XFS (loop3): Ending clean mount [ 1885.972554][ T7054] udevd[7054]: symlink '../../loop4' '/dev/disk/by-diskseq/3857.tmp-b7:4' failed: Read-only file system [ 1885.973279][T17661] udevd[17661]: symlink '../../loop2' '/dev/disk/by-diskseq/3868.tmp-b7:2' failed: Read-only file system [ 1886.067553][ T7054] udevd[7054]: symlink '../../loop1' '/dev/disk/by-diskseq/3835.tmp-b7:1' failed: Read-only file system [ 1886.121784][ T6191] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1886.154616][T17661] udevd[17661]: symlink '../../loop2' '/dev/disk/by-diskseq/3870.tmp-b7:2' failed: Read-only file system [ 1886.581691][T28146] overlayfs: conflicting options: metacopy=off,verity=on [ 1886.773285][T28157] loop4: detected capacity change from 0 to 256 [ 1886.880451][T28157] FAT-fs (loop4): Directory bread(block 64) failed [ 1886.887045][T28157] FAT-fs (loop4): Directory bread(block 65) failed [ 1886.944333][T28157] FAT-fs (loop4): Directory bread(block 66) failed [ 1886.968652][T28157] FAT-fs (loop4): Directory bread(block 67) failed [ 1886.988884][T28157] FAT-fs (loop4): Directory bread(block 68) failed [ 1887.005750][T28157] FAT-fs (loop4): Directory bread(block 69) failed [ 1887.032893][T28157] FAT-fs (loop4): Directory bread(block 70) failed [ 1887.052337][T28157] FAT-fs (loop4): Directory bread(block 71) failed [ 1887.059038][T28157] FAT-fs (loop4): Directory bread(block 72) failed [ 1887.098384][T28157] FAT-fs (loop4): Directory bread(block 73) failed [ 1887.226108][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1887.226124][ T27] audit: type=1800 audit(1785293190.311:1280): pid=28157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.22052" name="file1" dev="loop4" ino=1048785 res=0 errno=0 [ 1887.811551][T28219] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.22073'. [ 1888.013907][T28233] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1888.023474][T28233] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1888.031756][T28233] overlayfs: missing 'lowerdir' [ 1888.198744][T28239] loop2: detected capacity change from 0 to 2048 [ 1888.226364][T28227] Process accounting paused [ 1888.243963][T28239] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1888.978109][T28293] overlayfs: conflicting options: nfs_export=on,index=off [ 1888.992379][T28290] loop4: detected capacity change from 0 to 1024 [ 1889.016810][T28290] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1889.055401][T28290] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1889.090585][T28290] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1889.144306][T28290] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1889.152641][T28290] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.22094: Inode bitmap for bg 0 marked uninitialized [ 1889.173642][T28290] EXT4-fs (loop4): Remounting filesystem read-only [ 1889.182500][T28290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1889.230266][ T6947] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1889.541490][T28324] loop1: detected capacity change from 0 to 1024 [ 1889.786703][T28340] netlink: 'syz.1.22109': attribute type 2 has an invalid length. [ 1889.794516][T28338] loop2: detected capacity change from 0 to 1024 [ 1889.802464][T28340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22109'. [ 1889.832907][T28338] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 1889.865552][T28338] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1889.890337][T28338] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1889.921649][T28338] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1890.004980][T28338] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.22108: Inode bitmap for bg 0 marked uninitialized [ 1890.052983][T28338] EXT4-fs (loop2): Remounting filesystem read-only [ 1890.068584][T28338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1890.101473][T28357] binfmt_misc: register: failed to install interpreter file ./file0 [ 1890.122409][ T6187] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1890.309563][ T55] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1890.421676][T28381] sctp: [Deprecated]: syz.4.22120 (pid 28381) Use of int in maxseg socket option. [ 1890.421676][T28381] Use struct sctp_assoc_value instead [ 1890.434516][T28383] bond0: Error: CAN devices cannot be enslaved [ 1890.458766][ T7050] udevd[7050]: symlink '../../loop2' '/dev/disk/by-diskseq/3881.tmp-b7:2' failed: Read-only file system [ 1890.509475][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 1890.519284][ T55] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1890.542572][ T7050] udevd[7050]: symlink '../../loop4' '/dev/disk/by-diskseq/3877.tmp-b7:4' failed: Read-only file system [ 1890.544742][ T55] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1890.585203][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.608941][T17661] udevd[17661]: symlink '../../loop3' '/dev/disk/by-diskseq/3871.tmp-b7:3' failed: Read-only file system [ 1890.622044][ T55] usb 2-1: Product: syz [ 1890.631516][ T55] usb 2-1: Manufacturer: syz [ 1890.641403][ T55] usb 2-1: SerialNumber: syz [ 1890.645445][ T7054] udevd[7054]: symlink '../../loop2' '/dev/disk/by-diskseq/3881.tmp-b7:2' failed: Read-only file system [ 1890.674670][ T55] usb 2-1: config 0 descriptor?? [ 1890.752615][T17661] udevd[17661]: symlink '../../loop4' '/dev/disk/by-diskseq/3877.tmp-b7:4' failed: Read-only file system [ 1890.797708][ T7054] udevd[7054]: symlink '../../loop3' '/dev/disk/by-diskseq/3871.tmp-b7:3' failed: Read-only file system [ 1890.880649][T17661] udevd[17661]: symlink '../../loop2' '/dev/disk/by-diskseq/3881.tmp-b7:2' failed: Read-only file system [ 1890.918517][ T7054] udevd[7054]: symlink '../../loop4' '/dev/disk/by-diskseq/3877.tmp-b7:4' failed: Read-only file system [ 1890.990105][ T55] msi2500 2-1:0.0: Registered as swradio24 [ 1891.000686][ T55] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1891.027378][T17661] udevd[17661]: symlink '../../loop4' '/dev/disk/by-diskseq/3877.tmp-b7:4' failed: Read-only file system [ 1891.062885][ T55] usb 2-1: USB disconnect, device number 46 [ 1891.093654][T17661] udevd[17661]: symlink '../../loop2' '/dev/disk/by-diskseq/3881.tmp-b7:2' failed: Read-only file system [ 1891.385911][T28440] netlink: 'syz.2.22132': attribute type 21 has an invalid length. [ 1891.393925][T28440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22132'. [ 1891.547019][T28451] loop2: detected capacity change from 0 to 256 [ 1891.637341][T28451] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1892.205780][T30813] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1892.423805][T30813] usb 3-1: Using ep0 maxpacket: 16 [ 1892.435525][T30813] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1892.469443][T30813] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1892.489789][T30813] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1892.511968][T30813] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1892.522778][T30813] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1892.534413][T30813] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1892.541190][T30813] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1892.562874][T30813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.571197][T14623] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1892.588028][T30813] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1892.758121][T14623] usb 2-1: Using ep0 maxpacket: 8 [ 1892.765680][T14623] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1892.824460][T14623] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.834886][T30813] scsi host1: usb-storage 3-1:1.0 [ 1892.850641][T14623] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 1892.894752][T28544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22160'. [ 1892.900751][T14623] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1892.934177][T14623] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 1892.969778][T14623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.980300][T30813] usb 3-1: USB disconnect, device number 44 [ 1893.015886][T14623] usb 2-1: Product: syz [ 1893.020136][T14623] usb 2-1: Manufacturer: syz [ 1893.029229][T14623] usb 2-1: SerialNumber: syz [ 1893.251719][T14623] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1893.278513][T14623] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 1893.380669][T14623] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 1893.398794][T14623] usb 2-1: USB disconnect, device number 47 [ 1893.835629][T28624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22175'. [ 1894.167028][T28644] loop1: detected capacity change from 0 to 8 [ 1894.237521][T28644] SQUASHFS error: Failed to read block 0x6de: -5 [ 1894.262254][T28644] SQUASHFS error: Unable to read metadata cache entry [6dc] [ 1894.301563][T28653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22184'. [ 1894.318727][T28644] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1894.437759][T28657] loop3: detected capacity change from 0 to 512 [ 1894.472629][T28657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1894.509696][T28657] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003e01c, mo2=0002] [ 1894.545128][T28657] System zones: 1-12 [ 1894.647913][T28657] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33261: comm syz.3.22185: invalid block [ 1894.706172][T28657] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.22185: invalid indirect mapped block 8 (level 2) [ 1894.761834][T28657] EXT4-fs (loop3): 1 truncate cleaned up [ 1894.769907][T28657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1894.777082][ T27] audit: type=1326 audit(1785293198.216:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28677 comm="syz.4.22190" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe4839de99 code=0x0 [ 1894.972228][ T6191] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1895.172592][T28700] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1895.247416][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/3886.tmp-b7:1' failed: Read-only file system [ 1895.303923][T17661] udevd[17661]: symlink '../../loop4' '/dev/disk/by-diskseq/3877.tmp-b7:4' failed: Read-only file system [ 1895.341269][T28704] loop3: detected capacity change from 0 to 4096 [ 1895.357608][ T7050] udevd[7050]: symlink '../../loop2' '/dev/disk/by-diskseq/3883.tmp-b7:2' failed: Read-only file system [ 1895.363834][T28704] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1895.476592][T28704] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1895.552649][ T7050] udevd[7050]: symlink '../../loop4' '/dev/disk/by-diskseq/3877.tmp-b7:4' failed: Read-only file system [ 1895.586497][T17661] udevd[17661]: symlink '../../loop2' '/dev/disk/by-diskseq/3883.tmp-b7:2' failed: Read-only file system [ 1895.643991][ C1] sd 0:0:1:0: [sda] tag#6203 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1895.648724][ T7054] udevd[7054]: symlink '../../loop3' '/dev/disk/by-diskseq/3888.tmp-b7:3' failed: Read-only file system [ 1895.654488][ C1] sd 0:0:1:0: [sda] tag#6203 CDB: Read(6) 08 00 00 00 03 44 [ 1895.689707][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/3886.tmp-b7:1' failed: Read-only file system [ 1895.742239][ T7050] udevd[7050]: symlink '../../loop4' '/dev/disk/by-diskseq/3877.tmp-b7:4' failed: Read-only file system [ 1895.755535][ T7054] udevd[7054]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1895.799626][T17661] udevd[17661]: symlink '../../loop2' '/dev/disk/by-diskseq/3883.tmp-b7:2' failed: Read-only file system [ 1896.254759][T28763] binder: 28762:28763 ioctl c0306201 200000000280 returned -14 [ 1896.358552][T28772] usb usb1: usbfs: process 28772 (syz.3.22215) did not claim interface 0 before use [ 1896.376271][T28773] netlink: 'syz.1.22217': attribute type 29 has an invalid length. [ 1897.105401][T28818] tipc: Can't bind to reserved service type 32 [ 1897.758050][ T27] audit: type=1326 audit(1785293201.344:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28859 comm="syz.2.22247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1897.861654][ T27] audit: type=1326 audit(1785293201.344:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28859 comm="syz.2.22247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1897.930196][ T27] audit: type=1326 audit(1785293201.355:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28859 comm="syz.2.22247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1897.995287][ T27] audit: type=1326 audit(1785293201.355:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28859 comm="syz.2.22247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1898.094437][ T27] audit: type=1326 audit(1785293201.355:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28859 comm="syz.2.22247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1898.123270][ T27] audit: type=1326 audit(1785293201.355:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28859 comm="syz.2.22247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1898.221192][ T27] audit: type=1326 audit(1785293201.355:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28859 comm="syz.2.22247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1898.305792][ T27] audit: type=1326 audit(1785293201.355:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28859 comm="syz.2.22247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1898.379223][T28895] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 1898.379223][T28895] program syz.2.22257 not setting count and/or reply_len properly [ 1898.413497][ T27] audit: type=1326 audit(1785293201.355:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28859 comm="syz.2.22247" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1898.414320][T28898] [U] ^C [ 1898.440689][ C1] vkms_vblank_simulate: vblank timer overrun [ 1898.700500][T28914] bond0: entered allmulticast mode [ 1898.717524][T28914] bond_slave_0: entered allmulticast mode [ 1898.723900][T28914] bond_slave_1: entered allmulticast mode [ 1898.769975][T28918] loop3: detected capacity change from 0 to 8 [ 1898.943291][T28930] loop4: detected capacity change from 0 to 256 [ 1898.964979][T28933] netlink: 'syz.1.22269': attribute type 8 has an invalid length. [ 1899.150771][T28930] FAT-fs (loop4): Directory bread(block 64) failed [ 1899.157389][T28930] FAT-fs (loop4): Directory bread(block 65) failed [ 1899.202592][T28930] FAT-fs (loop4): Directory bread(block 66) failed [ 1899.223807][T28930] FAT-fs (loop4): Directory bread(block 67) failed [ 1899.233896][T28930] FAT-fs (loop4): Directory bread(block 68) failed [ 1899.249823][T28930] FAT-fs (loop4): Directory bread(block 69) failed [ 1899.250841][T28944] loop3: detected capacity change from 0 to 512 [ 1899.261452][T28930] FAT-fs (loop4): Directory bread(block 70) failed [ 1899.275009][T28944] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1899.295073][T28930] FAT-fs (loop4): Directory bread(block 71) failed [ 1899.310122][T28930] FAT-fs (loop4): Directory bread(block 72) failed [ 1899.337389][T28930] FAT-fs (loop4): Directory bread(block 73) failed [ 1899.397290][T28944] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1899.853336][T28980] sit2: entered allmulticast mode [ 1900.021227][ T7050] udevd[7050]: symlink '../../loop4' '/dev/disk/by-diskseq/3895.tmp-b7:4' failed: Read-only file system [ 1900.029795][T17661] udevd[17661]: symlink '../../loop3' '/dev/disk/by-diskseq/3894.tmp-b7:3' failed: Read-only file system [ 1900.109270][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/3886.tmp-b7:1' failed: Read-only file system [ 1900.171676][T17661] udevd[17661]: symlink '../../loop4' '/dev/disk/by-diskseq/3895.tmp-b7:4' failed: Read-only file system [ 1900.213635][ T7054] udevd[7054]: symlink '../../loop2' '/dev/disk/by-diskseq/3883.tmp-b7:2' failed: Read-only file system [ 1900.278038][ T7050] udevd[7050]: symlink '../../loop3' '/dev/disk/by-diskseq/3894.tmp-b7:3' failed: Read-only file system [ 1900.310346][T17661] udevd[17661]: symlink '../../loop2' '/dev/disk/by-diskseq/3883.tmp-b7:2' failed: Read-only file system [ 1900.364912][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/3886.tmp-b7:1' failed: Read-only file system [ 1900.401325][T17661] udevd[17661]: symlink '../../loop4' '/dev/disk/by-diskseq/3895.tmp-b7:4' failed: Read-only file system [ 1900.458864][ T7054] udevd[7054]: symlink '../../loop2' '/dev/disk/by-diskseq/3883.tmp-b7:2' failed: Read-only file system [ 1901.517112][T29075] loop4: detected capacity change from 0 to 4096 [ 1901.537548][T29075] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1901.587869][T30813] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1901.633979][T29075] ntfs: volume version 3.1. [ 1901.711285][T29075] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1901.744030][T29075] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1901.788063][T30813] usb 4-1: Using ep0 maxpacket: 8 [ 1901.799294][T30813] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1901.822558][T29075] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to map page. [ 1901.827839][T29090] netlink: 'syz.2.22315': attribute type 9 has an invalid length. [ 1901.833457][T30813] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1901.851269][T29075] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 1901.862903][T30813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.872249][T30813] usb 4-1: Product: syz [ 1901.876870][T29075] ntfs: (device loop4): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 1901.898292][T30813] usb 4-1: Manufacturer: syz [ 1901.903421][T30813] usb 4-1: SerialNumber: syz [ 1901.917986][T29090] netlink: 911 bytes leftover after parsing attributes in process `syz.2.22315'. [ 1901.938313][T30813] usb 4-1: config 0 descriptor?? [ 1902.069967][T30813] msi2500 4-1:0.0: Registered as swradio24 [ 1902.070181][ T6947] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1902.100716][T30813] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1902.169315][T30813] usb 4-1: USB disconnect, device number 41 [ 1902.511633][ T6132] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1902.564302][T29135] loop4: detected capacity change from 0 to 4096 [ 1902.587433][T29135] EXT4-fs: inline encryption not supported [ 1902.595109][T29135] EXT4-fs: inline encryption not supported [ 1902.619040][T29135] ext4: Unknown parameter 'fowner' [ 1902.658884][T29135] exfat: Deprecated parameter 'debug' [ 1902.677725][T29135] exFAT-fs (loop4): invalid boot record signature [ 1902.697249][T29144] loop1: detected capacity change from 0 to 64 [ 1902.697554][T29135] exFAT-fs (loop4): failed to read boot sector [ 1902.706419][ T6132] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.717757][T29135] exFAT-fs (loop4): failed to recognize exfat type [ 1902.750753][ T6132] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1902.777892][ T6132] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1902.807130][ T6132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1902.822663][ T6132] usb 3-1: SerialNumber: syz [ 1903.009341][T29161] team0: entered promiscuous mode [ 1903.014494][T29161] team0: entered allmulticast mode [ 1903.056326][ T6132] usb 3-1: 0:2 : does not exist [ 1903.095101][ T6132] usb 3-1: USB disconnect, device number 45 [ 1903.226321][T17803] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1903.249468][T29180] loop4: detected capacity change from 0 to 1024 [ 1903.336168][T29180] hfsplus: request for non-existent node 211 in B*Tree [ 1903.364060][T29180] hfsplus: request for non-existent node 211 in B*Tree [ 1903.468998][T17803] usb 2-1: Using ep0 maxpacket: 32 [ 1903.505216][T17803] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1903.541176][T17803] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1903.559588][T17803] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1903.576665][T17803] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1903.588059][T17803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.600725][T17803] usb 2-1: Product: syz [ 1903.604984][T17803] usb 2-1: Manufacturer: syz [ 1903.615170][T17803] usb 2-1: SerialNumber: syz [ 1903.643598][T29202] netlink: 'syz.3.22333': attribute type 10 has an invalid length. [ 1903.660935][T29202] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.22333'. [ 1904.031628][T29227] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22341'. [ 1904.059471][T17803] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1904.142743][T17803] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1904.163530][T17803] usb 2-1: USB disconnect, device number 48 [ 1904.580855][T29266] 9pnet: Found fid 0 not clunked [ 1904.849079][ T7050] udevd[7050]: symlink '../../loop2' '/dev/disk/by-diskseq/3883.tmp-b7:2' failed: Read-only file system [ 1904.883268][T17661] udevd[17661]: symlink '../../loop4' '/dev/disk/by-diskseq/3903.tmp-b7:4' failed: Read-only file system [ 1904.937500][ T7054] udevd[7054]: symlink '../../loop3' '/dev/disk/by-diskseq/3894.tmp-b7:3' failed: Read-only file system [ 1905.052211][ T7050] udevd[7050]: symlink '../../loop3' '/dev/disk/by-diskseq/3894.tmp-b7:3' failed: Read-only file system [ 1905.084740][T17661] udevd[17661]: symlink '../../loop2' '/dev/disk/by-diskseq/3883.tmp-b7:2' failed: Read-only file system [ 1905.099845][T29286] loop4: detected capacity change from 0 to 2048 [ 1905.118387][T29294] netlink: 'syz.2.22358': attribute type 1 has an invalid length. [ 1905.167988][T29286] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1905.175755][T29297] loop3: detected capacity change from 0 to 256 [ 1905.269696][ T7050] udevd[7050]: symlink '../../loop4' '/dev/disk/by-diskseq/3904.tmp-b7:4' failed: Read-only file system [ 1905.310830][T17661] udevd[17661]: symlink '../../loop3' '/dev/disk/by-diskseq/3905.tmp-b7:3' failed: Read-only file system [ 1905.318492][ T7050] udevd[7050]: symlink '../../loop4' '/dev/disk/by-label/LinuxUDF.tmp-b7:4' failed: Read-only file system [ 1905.360161][T29297] FAT-fs (loop3): Directory bread(block 64) failed [ 1905.366757][T29297] FAT-fs (loop3): Directory bread(block 65) failed [ 1905.368704][ T7054] udevd[7054]: symlink '../../loop2' '/dev/disk/by-diskseq/3883.tmp-b7:2' failed: Read-only file system [ 1905.395009][T29297] FAT-fs (loop3): Directory bread(block 66) failed [ 1905.406799][T29297] FAT-fs (loop3): Directory bread(block 67) failed [ 1905.424947][ T7050] udevd[7050]: symlink '../../loop4' '/dev/disk/by-diskseq/3904.tmp-b7:4' failed: Read-only file system [ 1905.432452][T29297] FAT-fs (loop3): Directory bread(block 68) failed [ 1905.451028][T29297] FAT-fs (loop3): Directory bread(block 69) failed [ 1905.459708][T29302] netlink: 'syz.2.22360': attribute type 1 has an invalid length. [ 1905.461619][T29297] FAT-fs (loop3): Directory bread(block 70) failed [ 1905.482529][T29297] FAT-fs (loop3): Directory bread(block 71) failed [ 1905.491339][T29297] FAT-fs (loop3): Directory bread(block 72) failed [ 1905.493330][T29302] netlink: 248 bytes leftover after parsing attributes in process `syz.2.22360'. [ 1905.506297][T29297] FAT-fs (loop3): Directory bread(block 73) failed [ 1905.756545][T29315] netlink: 'syz.2.22363': attribute type 58 has an invalid length. [ 1905.770095][T29315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22363'. [ 1905.820002][T29278] loop1: detected capacity change from 0 to 32768 [ 1905.861508][T29278] ialloc: diAlloc returned -5! [ 1905.939587][T29326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22364'. [ 1905.968818][T29328] netlink: 34 bytes leftover after parsing attributes in process `syz.3.22365'. [ 1906.397596][T29350] loop4: detected capacity change from 0 to 1024 [ 1906.405092][T29351] netlink: 'syz.2.22372': attribute type 1 has an invalid length. [ 1906.437654][T29351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22372'. [ 1906.455648][T29351] netlink: 'syz.2.22372': attribute type 1 has an invalid length. [ 1906.628840][T29361] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1906.908316][T29380] netlink: 'syz.4.22381': attribute type 5 has an invalid length. [ 1907.507463][ T27] audit: type=1326 audit(1785293211.601:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29417 comm="syz.4.22393" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4839de99 code=0x7ffc0000 [ 1907.549624][T29420] netlink: 'syz.2.22392': attribute type 1 has an invalid length. [ 1907.570469][T29420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22392'. [ 1907.591456][ T27] audit: type=1326 audit(1785293211.601:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29417 comm="syz.4.22393" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4839de99 code=0x7ffc0000 [ 1907.645694][ T27] audit: type=1326 audit(1785293211.622:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29417 comm="syz.4.22393" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fbe4839de99 code=0x7ffc0000 [ 1907.715261][ T27] audit: type=1326 audit(1785293211.622:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29417 comm="syz.4.22393" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4839de99 code=0x7ffc0000 [ 1907.860789][T29431] loop3: detected capacity change from 0 to 4096 [ 1907.893035][T29431] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1907.944036][T29431] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1908.614405][T29482] cgroup: release_agent respecified [ 1908.741259][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1908.866439][T17803] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1909.088407][T17803] usb 2-1: Using ep0 maxpacket: 16 [ 1909.113799][T17803] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1909.124829][T17803] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1909.160971][T17803] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1909.216706][T17803] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1909.239939][T17803] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1909.256303][T17803] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1909.259137][T29526] autofs4:pid:29526:autofs_fill_super: called with bogus options [ 1909.263143][T17803] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1909.318861][T17803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.369875][T17803] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 1909.598958][T17803] scsi host1: usb-storage 2-1:1.0 [ 1909.622163][ T7050] udevd[7050]: symlink '../../loop4' '/dev/disk/by-diskseq/3911.tmp-b7:4' failed: Read-only file system [ 1909.641570][T17661] udevd[17661]: symlink '../../loop3' '/dev/disk/by-diskseq/3913.tmp-b7:3' failed: Read-only file system [ 1909.697279][ T7050] udevd[7050]: symlink '../../loop2' '/dev/disk/by-diskseq/3883.tmp-b7:2' failed: Read-only file system [ 1909.754000][ T7050] udevd[7050]: symlink '../../loop4' '/dev/disk/by-diskseq/3911.tmp-b7:4' failed: Read-only file system [ 1909.806742][T17661] udevd[17661]: symlink '../../loop3' '/dev/disk/by-diskseq/3913.tmp-b7:3' failed: Read-only file system [ 1909.874696][ T6132] usb 2-1: USB disconnect, device number 49 [ 1909.875152][T29566] netlink: 'syz.3.22436': attribute type 1 has an invalid length. [ 1909.925032][T17661] udevd[17661]: symlink '../../loop2' '/dev/disk/by-diskseq/3883.tmp-b7:2' failed: Read-only file system [ 1909.964712][ T7054] udevd[7054]: symlink '../../loop4' '/dev/disk/by-diskseq/3911.tmp-b7:4' failed: Read-only file system [ 1910.023468][T29577] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1910.089531][T17661] udevd[17661]: symlink '../../loop3' '/dev/disk/by-diskseq/3913.tmp-b7:3' failed: Read-only file system [ 1910.111935][ T7054] udevd[7054]: symlink '../../loop2' '/dev/disk/by-diskseq/3883.tmp-b7:2' failed: Read-only file system [ 1910.194778][ T7050] udevd[7050]: symlink '../../loop3' '/dev/disk/by-diskseq/3913.tmp-b7:3' failed: Read-only file system [ 1910.696125][T29623] loop4: detected capacity change from 0 to 164 [ 1910.773941][T29623] Unsupported NM flag settings (240) [ 1910.858316][T29631] bridge10: entered promiscuous mode [ 1910.871934][ T27] audit: type=1326 audit(1785293215.128:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29632 comm="syz.2.22454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1910.948670][ T27] audit: type=1326 audit(1785293215.160:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29632 comm="syz.2.22454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1910.972938][ C1] vkms_vblank_simulate: vblank timer overrun [ 1911.050766][ T27] audit: type=1326 audit(1785293215.181:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29632 comm="syz.2.22454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1911.151702][ T27] audit: type=1326 audit(1785293215.181:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29632 comm="syz.2.22454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc079de99 code=0x7ffc0000 [ 1911.176059][ C1] vkms_vblank_simulate: vblank timer overrun [ 1911.273836][ T27] audit: type=1326 audit(1785293215.548:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29649 comm="syz.4.22460" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4839de99 code=0x7ffc0000 [ 1911.298180][ C1] vkms_vblank_simulate: vblank timer overrun [ 1911.389737][ T27] audit: type=1326 audit(1785293215.590:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29649 comm="syz.4.22460" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe4839de99 code=0x7ffc0000 [ 1911.414032][ C1] vkms_vblank_simulate: vblank timer overrun [ 1911.670349][T29669] netlink: 'syz.3.22465': attribute type 1 has an invalid length. [ 1911.693965][T29625] loop1: detected capacity change from 0 to 32768 [ 1911.703780][T29669] netlink: 'syz.3.22465': attribute type 2 has an invalid length. [ 1911.720686][T29625] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1911.732493][T29669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22465'. [ 1912.016863][ T7050] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1912.226554][T29697] loop3: detected capacity change from 0 to 4096 [ 1912.278406][T29697] ntfs: volume version 3.1. [ 1912.310032][T29697] __ntfs_error: 13 callbacks suppressed [ 1912.310050][T29697] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1912.347307][T29697] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1912.384378][T29697] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1912.399670][ T6132] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1912.490833][T29697] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 1912.561732][T29697] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 1912.588019][T29697] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1912.608879][ T6132] usb 3-1: Using ep0 maxpacket: 8 [ 1912.619430][ T6132] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1912.639030][ T6132] usb 3-1: config 86 has an invalid interface number: 78 but max is 0 [ 1912.656980][T29719] Unsupported ieee802154 address type: 0 [ 1912.667874][ T6132] usb 3-1: config 86 has an invalid descriptor of length 0, skipping remainder of the config [ 1912.698906][ T6132] usb 3-1: config 86 has no interface number 0 [ 1912.716908][ T6132] usb 3-1: config 86 interface 78 altsetting 128 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1912.730832][T29697] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 1912.756751][ T6132] usb 3-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 0 [ 1912.776369][ T6132] usb 3-1: config 86 interface 78 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1912.807492][T29697] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 1912.825584][ T6132] usb 3-1: config 86 interface 78 has no altsetting 0 [ 1912.832843][T29697] ntfs: (device loop3): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 1912.846832][ T6132] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 1912.856223][ T6132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.864240][ T6132] usb 3-1: Product: syz [ 1912.868699][ T6132] usb 3-1: Manufacturer: syz [ 1912.873347][ T6132] usb 3-1: SerialNumber: syz [ 1913.138623][ T6132] kvaser_usb 3-1:86.78: Cannot get usb endpoint(s) [ 1913.162943][ T6132] usb 3-1: USB disconnect, device number 46 [ 1913.453421][T29770] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~¢)–„VÌ' [ 1913.484825][T29770] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 1913.493255][T29770] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 1913.513983][T29770] ALSA: mixer_oss: invalid OSS volume 'eQCÈ¡*«±§qµpA˜ÚœøÄe ¦TÒú|Kˆ' [ 1913.540489][T29770] ALSA: mixer_oss: invalid OSS volume ':ÀaøËz’´Äã]¶q³°e£X×fb]݆›BäÜ.' [ 1913.562213][T29770] ALSA: mixer_oss: invalid OSS volume '¯Þj|‡ÓâÚÕq⩃˚[Òw3ù^.¸Œî×’ø' [ 1913.578302][T29770] ALSA: mixer_oss: invalid OSS volume 'Ü"PÞ¸àøÛœåÂÏo[ç8>ú7|¤YMeÃp»ñq' [ 1913.587198][T29770] ALSA: mixer_oss: invalid OSS volume '¨ÿwI þ×·Ë#Þt\ÞW˜,ãbP=&ež' [ 1913.605742][T29770] ALSA: mixer_oss: invalid OSS volume ']÷“á´Õz‘a›-¯!)ŸÙüúÏ»à²vC¤YpsÆÚ' [ 1913.628992][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1913.666330][T29770] ALSA: mixer_oss: invalid OSS volume 'L¹Eá]DþÒxtÎéÝ‚OY3f£¸k$T ÓÝ"' [ 1913.684987][T29770] ALSA: mixer_oss: invalid OSS volume 'î[' [ 1913.691019][T29770] ALSA: mixer_oss: invalid OSS volume '‡¾ö3ÍÉûA14IN—+|¦\' [ 1913.720488][T29770] ALSA: mixer_oss: invalid OSS volume '·$ 1 [ 1965.489257][ T319] netlink: 144 bytes leftover after parsing attributes in process `syz.3.23286'. [ 1965.626139][T26802] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1965.631591][ T55] usb 2-1: USB disconnect, device number 53 [ 1965.640146][T26802] Bluetooth: hci4: hardware error 0x51 [ 1965.929890][ T349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23294'. [ 1966.268793][ T372] loop1: detected capacity change from 0 to 8 [ 1966.693140][ T393] loop3: detected capacity change from 0 to 2048 [ 1966.758354][ T393] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1966.795964][ T407] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 1966.817243][ T407] (unnamed net_device) (uninitialized): option use_carrier: invalid value (6) [ 1967.228953][T14623] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1967.233284][ T7050] udevd[7050]: symlink '../../loop3' '/dev/disk/by-diskseq/4033.tmp-b7:3' failed: Read-only file system [ 1967.268823][T17661] udevd[17661]: symlink '../../loop1' '/dev/disk/by-diskseq/4031.tmp-b7:1' failed: Read-only file system [ 1967.332672][ T7050] udevd[7050]: symlink '../../loop3' '/dev/disk/by-diskseq/4033.tmp-b7:3' failed: Read-only file system [ 1967.378079][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/4031.tmp-b7:1' failed: Read-only file system [ 1967.404629][ T55] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1967.417619][T14623] usb 3-1: Using ep0 maxpacket: 32 [ 1967.435923][T14623] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1967.447800][T14623] usb 3-1: config 0 has no interface number 0 [ 1967.454049][T14623] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1967.466432][T14623] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1967.479658][ T450] netlink: 'syz.1.23322': attribute type 1 has an invalid length. [ 1967.488697][T14623] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1967.498242][T14623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.506945][T14623] usb 3-1: Product: syz [ 1967.511672][T14623] usb 3-1: Manufacturer: syz [ 1967.521154][T14623] usb 3-1: SerialNumber: syz [ 1967.530181][ T7050] udevd[7050]: symlink '../../loop3' '/dev/disk/by-diskseq/4033.tmp-b7:3' failed: Read-only file system [ 1967.553242][T14623] usb 3-1: config 0 descriptor?? [ 1967.578409][ T455] program syz.3.23323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1967.600778][ T55] usb 5-1: too many configurations: 37, using maximum allowed: 8 [ 1967.618670][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/4031.tmp-b7:1' failed: Read-only file system [ 1967.663218][ T55] usb 5-1: string descriptor 0 read error: -71 [ 1967.682340][ T55] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1967.708811][ T7054] udevd[7054]: symlink '../../loop3' '/dev/disk/by-diskseq/4033.tmp-b7:3' failed: Read-only file system [ 1967.720728][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.743199][ T55] usb 5-1: can't set config #1, error -71 [ 1967.772349][T14623] radio-si470x 3-1:0.35: this is not a si470x device. [ 1967.782239][ T55] usb 5-1: USB disconnect, device number 41 [ 1967.795731][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/4031.tmp-b7:1' failed: Read-only file system [ 1967.898395][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/4031.tmp-b7:1' failed: Read-only file system [ 1967.973139][T14623] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1967.994249][T14623] usb 3-1: USB disconnect, device number 51 [ 1968.036937][ T7050] udevd[7050]: symlink '../../loop1' '/dev/disk/by-diskseq/4031.tmp-b7:1' failed: Read-only file system [ 1968.808538][ T518] loop3: detected capacity change from 0 to 64 [ 1968.826115][ T520] SET target dimension over the limit! [ 1969.715439][ T576] netlink: 252 bytes leftover after parsing attributes in process `syz.3.23357'. [ 1970.420212][ T569] loop2: detected capacity change from 0 to 32768 [ 1970.537757][ T579] loop4: detected capacity change from 0 to 32768 [ 1970.577872][ T579] [ 1970.577872][ T579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1970.577872][ T579] [ 1970.743778][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1970.743796][ T27] audit: type=1326 audit(2000000062.368:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.1.23369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256579de99 code=0x50000 [ 1970.805706][T20193] [ 1970.805706][T20193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1970.805706][T20193] [ 1970.846597][ T27] audit: type=1326 audit(2000000062.368:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.1.23369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256579de99 code=0x50000 [ 1970.846633][T20193] [ 1970.846633][T20193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1970.846633][T20193] [ 1970.946537][ T6947] [ 1970.946537][ T6947] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1970.946537][ T6947] [ 1970.968130][ T27] audit: type=1326 audit(2000000062.368:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.1.23369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256579de99 code=0x50000 [ 1970.974412][ T114] [ 1970.974412][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1970.974412][ T114] [ 1971.009573][ T6947] [ 1971.009573][ T6947] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1971.009573][ T6947] [ 1971.048000][ T114] ================================================================== [ 1971.052986][ T27] audit: type=1326 audit(2000000062.368:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.1.23369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256579de99 code=0x50000 [ 1971.056187][ T114] BUG: KASAN: slab-use-after-free in txEnd+0x32d/0x520 [ 1971.086838][ T114] Write of size 8 at addr ffff88807cec3840 by task jfsCommit/114 [ 1971.094773][ T114] [ 1971.097111][ T114] CPU: 1 PID: 114 Comm: jfsCommit Not tainted syzkaller #0 [ 1971.104328][ T114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1971.108433][ T27] audit: type=1326 audit(2000000062.368:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.1.23369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256579de99 code=0x50000 [ 1971.114569][ T114] Call Trace: [ 1971.114580][ T114] [ 1971.114589][ T114] dump_stack_lvl+0x18c/0x250 [ 1971.149303][ T114] ? __lock_acquire+0x7d80/0x7d80 [ 1971.154560][ T114] ? show_regs_print_info+0x20/0x20 [ 1971.160136][ T114] ? load_image+0x420/0x420 [ 1971.164783][ T114] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1971.169920][ T27] audit: type=1326 audit(2000000062.368:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.1.23369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256579de99 code=0x50000 [ 1971.170358][ T114] ? __virt_addr_valid+0x10c/0x380 [ 1971.199356][ T114] ? __virt_addr_valid+0x10c/0x380 [ 1971.201544][ T27] audit: type=1326 audit(2000000062.368:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.1.23369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256579de99 code=0x50000 [ 1971.204567][ T114] ? __virt_addr_valid+0x10c/0x380 [ 1971.204597][ T114] ? __virt_addr_valid+0x10c/0x380 [ 1971.204616][ T114] print_report+0xa8/0x210 [ 1971.204639][ T114] ? txEnd+0x32d/0x520 [ 1971.240735][ T27] audit: type=1326 audit(2000000062.368:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.1.23369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256579de99 code=0x50000 [ 1971.243231][ T114] kasan_report+0x117/0x150 [ 1971.247415][ T27] audit: type=1326 audit(2000000062.368:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.1.23369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256579de99 code=0x50000 [ 1971.271074][ T114] ? txEnd+0x32d/0x520 [ 1971.271106][ T114] kasan_check_range+0x241/0x290 [ 1971.271127][ T114] txEnd+0x32d/0x520 [ 1971.271145][ T114] jfs_lazycommit+0x5c3/0xaa0 [ 1971.271166][ T114] ? txFreelock+0x5a0/0x5a0 [ 1971.271183][ T114] ? do_task_dead+0xd0/0xd0 [ 1971.271215][ T114] ? _raw_spin_unlock+0x40/0x40 [ 1971.271236][ T114] ? __kthread_parkme+0x71/0x1c0 [ 1971.271254][ T114] ? __kthread_parkme+0x15b/0x1c0 [ 1971.271272][ T114] kthread+0x2fa/0x390 [ 1971.271288][ T114] ? txFreelock+0x5a0/0x5a0 [ 1971.271308][ T114] ? kthread_blkcg+0xd0/0xd0 [ 1971.271324][ T114] ret_from_fork+0x48/0x80 [ 1971.271344][ T114] ? kthread_blkcg+0xd0/0xd0 [ 1971.271360][ T114] ret_from_fork_asm+0x11/0x20 [ 1971.271406][ T114] [ 1971.271413][ T114] [ 1971.271417][ T114] Allocated by task 579: [ 1971.271431][ T114] kasan_set_track+0x4e/0x70 [ 1971.271447][ T114] __kasan_kmalloc+0x8f/0xa0 [ 1971.271462][ T114] lmLogOpen+0x2df/0xfa0 [ 1971.284224][ T27] audit: type=1326 audit(2000000062.368:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.1.23369" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256579de99 code=0x50000 [ 1971.299961][ T114] jfs_mount_rw+0xf4/0x670 [ 1971.299990][ T114] jfs_fill_super+0x581/0xab0 [ 1971.300007][ T114] mount_bdev+0x21c/0x2c0 [ 1971.300020][ T114] legacy_get_tree+0xea/0x180 [ 1971.300056][ T114] vfs_get_tree+0x8c/0x280 [ 1971.300069][ T114] do_new_mount+0x24a/0xa40 [ 1971.300083][ T114] __se_sys_mount+0x2e7/0x3d0 [ 1971.300097][ T114] do_syscall_64+0x55/0xb0 [ 1971.300117][ T114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1971.300147][ T114] [ 1971.300152][ T114] Freed by task 6947: [ 1971.300159][ T114] kasan_set_track+0x4e/0x70 [ 1971.300175][ T114] kasan_save_free_info+0x28/0x40 [ 1971.300194][ T114] ____kasan_slab_free+0x126/0x1f0 [ 1971.300210][ T114] slab_free_freelist_hook+0x130/0x1a0 [ 1971.300225][ T114] __kmem_cache_free+0xba/0x1f0 [ 1971.300245][ T114] lmLogClose+0x296/0x530 [ 1971.300262][ T114] jfs_umount+0x2ca/0x3a0 [ 1971.300282][ T114] jfs_put_super+0x8c/0x190 [ 1971.300300][ T114] generic_shutdown_super+0x134/0x2b0 [ 1971.300315][ T114] kill_block_super+0x44/0x90 [ 1971.300331][ T114] deactivate_locked_super+0x97/0x100 [ 1971.300344][ T114] cleanup_mnt+0x3d7/0x460 [ 1971.300358][ T114] task_work_run+0x1d4/0x260 [ 1971.526821][ T114] exit_to_user_mode_loop+0xe6/0x110 [ 1971.532135][ T114] exit_to_user_mode_prepare+0xee/0x180 [ 1971.537739][ T114] syscall_exit_to_user_mode+0x1a/0x50 [ 1971.543225][ T114] do_syscall_64+0x61/0xb0 [ 1971.547670][ T114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1971.553677][ T114] [ 1971.556101][ T114] Last potentially related work creation: [ 1971.561828][ T114] kasan_save_stack+0x3e/0x60 [ 1971.566532][ T114] __kasan_record_aux_stack+0xaf/0xc0 [ 1971.571930][ T114] kvfree_call_rcu+0xee/0x780 [ 1971.576643][ T114] batadv_hard_if_event+0x7e0/0x1570 [ 1971.582072][ T114] notifier_call_chain+0x18f/0x380 [ 1971.587209][ T114] unregister_netdevice_many_notify+0x1037/0x1910 [ 1971.593691][ T114] rtnl_dellink+0x4fe/0x7c0 [ 1971.598395][ T114] rtnetlink_rcv_msg+0x843/0xf90 [ 1971.603363][ T114] netlink_rcv_skb+0x235/0x4c0 [ 1971.608268][ T114] netlink_unicast+0x7b1/0x930 [ 1971.613066][ T114] netlink_sendmsg+0x8d0/0xbf0 [ 1971.617860][ T114] ____sys_sendmsg+0x61b/0x980 [ 1971.622753][ T114] ___sys_sendmsg+0x2a6/0x360 [ 1971.627471][ T114] __se_sys_sendmsg+0x1d0/0x2c0 [ 1971.632339][ T114] do_syscall_64+0x55/0xb0 [ 1971.636758][ T114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1971.642664][ T114] [ 1971.645017][ T114] The buggy address belongs to the object at ffff88807cec3800 [ 1971.645017][ T114] which belongs to the cache kmalloc-1k of size 1024 [ 1971.659431][ T114] The buggy address is located 64 bytes inside of [ 1971.659431][ T114] freed 1024-byte region [ffff88807cec3800, ffff88807cec3c00) [ 1971.673520][ T114] [ 1971.675837][ T114] The buggy address belongs to the physical page: [ 1971.682415][ T114] page:ffffea0001f3b000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cec0 [ 1971.692705][ T114] head:ffffea0001f3b000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1971.701875][ T114] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1971.710534][ T114] page_type: 0xffffffff() [ 1971.715051][ T114] raw: 00fff00000000840 ffff888017c41dc0 0000000000000000 dead000000000001 [ 1971.723762][ T114] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1971.732348][ T114] page dumped because: kasan: bad access detected [ 1971.738794][ T114] page_owner tracks the page as allocated [ 1971.744574][ T114] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6185, tgid 6185 (syz-executor), ts 80078918585, free_ts 77442482507 [ 1971.767532][ T114] post_alloc_hook+0x1c1/0x200 [ 1971.772349][ T114] get_page_from_freelist+0x2181/0x22a0 [ 1971.778035][ T114] __alloc_pages+0x1f0/0x460 [ 1971.782894][ T114] alloc_slab_page+0x5d/0x180 [ 1971.787600][ T114] new_slab+0x87/0x2d0 [ 1971.791716][ T114] ___slab_alloc+0xc5c/0x12f0 [ 1971.796405][ T114] __kmem_cache_alloc_node+0x11f/0x250 [ 1971.801867][ T114] kmalloc_trace+0x2a/0xe0 [ 1971.806299][ T114] afs_alloc_call+0x75/0x360 [ 1971.810928][ T114] afs_charge_preallocation+0x22e/0x4f0 [ 1971.816569][ T114] afs_open_socket+0x2b7/0x360 [ 1971.821341][ T114] afs_net_init+0x7bc/0x9a0 [ 1971.825872][ T114] ops_init+0x391/0x640 [ 1971.830081][ T114] setup_net+0x3b6/0xa20 [ 1971.834355][ T114] copy_net_ns+0x35e/0x5d0 [ 1971.838978][ T114] create_new_namespaces+0x3ce/0x700 [ 1971.844290][ T114] page last free stack trace: [ 1971.848994][ T114] free_unref_page_prepare+0x7d7/0x8f0 [ 1971.854477][ T114] free_unref_page+0x32/0x2e0 [ 1971.859173][ T114] __slab_free+0x35a/0x400 [ 1971.863693][ T114] qlist_free_all+0x75/0xd0 [ 1971.868203][ T114] kasan_quarantine_reduce+0x143/0x160 [ 1971.874037][ T114] __kasan_slab_alloc+0x22/0x80 [ 1971.879056][ T114] slab_post_alloc_hook+0x6a/0x4d0 [ 1971.884280][ T114] __kmem_cache_alloc_node+0x194/0x250 [ 1971.889753][ T114] __kmalloc+0xa7/0x240 [ 1971.893934][ T114] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1971.899546][ T114] tomoyo_check_open_permission+0x224/0x460 [ 1971.905521][ T114] security_file_open+0x62/0xa0 [ 1971.910528][ T114] do_dentry_open+0x32b/0x14b0 [ 1971.915398][ T114] path_openat+0x284f/0x3270 [ 1971.920015][ T114] do_filp_open+0x1f2/0x430 [ 1971.924531][ T114] do_sys_openat2+0x134/0x1d0 [ 1971.929236][ T114] [ 1971.931546][ T114] Memory state around the buggy address: [ 1971.937266][ T114] ffff88807cec3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1971.945414][ T114] ffff88807cec3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1971.953495][ T114] >ffff88807cec3800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1971.961562][ T114] ^ [ 1971.967712][ T114] ffff88807cec3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1971.975768][ T114] ffff88807cec3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1971.983832][ T114] ================================================================== [ 1972.003442][ T114] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1972.010684][ T114] CPU: 1 PID: 114 Comm: jfsCommit Not tainted syzkaller #0 [ 1972.017897][ T114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1972.028006][ T114] Call Trace: [ 1972.031285][ T114] [ 1972.034217][ T114] dump_stack_lvl+0x18c/0x250 [ 1972.038911][ T114] ? show_regs_print_info+0x20/0x20 [ 1972.044113][ T114] ? load_image+0x420/0x420 [ 1972.048622][ T114] panic+0x2ca/0x720 [ 1972.052526][ T114] ? bpf_jit_dump+0xd0/0xd0 [ 1972.057025][ T114] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1972.063014][ T114] ? _raw_spin_unlock+0x40/0x40 [ 1972.067863][ T114] ? print_memory_metadata+0x314/0x400 [ 1972.073409][ T114] ? txEnd+0x32d/0x520 [ 1972.077472][ T114] check_panic_on_warn+0x84/0xa0 [ 1972.082406][ T114] ? txEnd+0x32d/0x520 [ 1972.086557][ T114] end_report+0x6f/0x130 [ 1972.090897][ T114] kasan_report+0x128/0x150 [ 1972.095483][ T114] ? txEnd+0x32d/0x520 [ 1972.099550][ T114] kasan_check_range+0x241/0x290 [ 1972.104579][ T114] txEnd+0x32d/0x520 [ 1972.108481][ T114] jfs_lazycommit+0x5c3/0xaa0 [ 1972.113258][ T114] ? txFreelock+0x5a0/0x5a0 [ 1972.117768][ T114] ? do_task_dead+0xd0/0xd0 [ 1972.122290][ T114] ? _raw_spin_unlock+0x40/0x40 [ 1972.127158][ T114] ? __kthread_parkme+0x71/0x1c0 [ 1972.132117][ T114] ? __kthread_parkme+0x15b/0x1c0 [ 1972.137149][ T114] kthread+0x2fa/0x390 [ 1972.141334][ T114] ? txFreelock+0x5a0/0x5a0 [ 1972.145846][ T114] ? kthread_blkcg+0xd0/0xd0 [ 1972.150433][ T114] ret_from_fork+0x48/0x80 [ 1972.154853][ T114] ? kthread_blkcg+0xd0/0xd0 [ 1972.159443][ T114] ret_from_fork_asm+0x11/0x20 [ 1972.164212][ T114] [ 1972.167464][ T114] Kernel Offset: disabled [ 1972.171781][ T114] Rebooting in 86400 seconds..