last executing test programs: 3.117359456s ago: executing program 0 (id=9739): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) 2.673773496s ago: executing program 0 (id=9745): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x2f}, 0x48, 0xfffffffffffffffd) keyctl$link(0x8, r0, r0) 2.453083124s ago: executing program 0 (id=9748): syz_mount_image$minix(&(0x7f0000000540), &(0x7f0000000080)='./file1\x00', 0x8040, &(0x7f0000000c00)=ANY=[@ANYRES16=0x0], 0x1, 0x1df, &(0x7f0000000280)="$eJzs3Ftu00AUxvHPjmu3XMT9hVeQ4IWaFAmLB0S7E6rULRUuIMpLq0oNQmIfbIStsIFGohvAyHbi2AZS18WXpP+fVPUcZ8ZzJpLjmUiOAFxaNyUZMqRlKQzD4zcPwxtt1wSgGaF+hWW9nPQBsCB6P8/V3JCGtdUCoEmjjZ4Z39SH0o/To8HJ+G+psE5YyWVWGo02ku7rkk4y/e2S64/RZyP+f9/K93cUb0nOXr98S/o/mowflXZ6NMjVW5xMcXz/e5Jkxr9Suv5k/o8f5Ou/KumapOvRRJxp+1uSbv9l/lv598+5V3J84CIMrRbz3AFT27uB/zTNl7Rty++nuR2/vlbIn6W5E+erg/fBVl1TAFCR+cf1/9rM5j1FC/7p9W/F13O/uQIB1Gb/4PDtZhD4H6sExrBcYyMKvl5srG4F4XEnyjhXYGlGG7sLFVYKos1dB8ooBF/M/3Ce5UZrjnbOmSOFD4qyG3oAc8P9tPfB3T84fLK7t7nj7/jv1rwXnif1n3tuvPN38/v/xIwv1ADMjcndf6XtQgAAAAAAAAAAAAAAQGV3JN2dputt1gIAAACgXmc9GKTxz/3MfHjo1fhk/2jT8hQBAAAAAAAAAAAAAAAAAACAhfE7AAD///6dOHw=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) 2.07684456s ago: executing program 0 (id=9754): mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x77b) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x0, 0x0) 1.969165265s ago: executing program 2 (id=9755): r0 = fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) 1.779599583s ago: executing program 0 (id=9757): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000580)=""/241) 1.726300404s ago: executing program 2 (id=9758): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc01000000000000000000000000000100000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c0014006469676573745f6e756c6c"], 0x1a0}}, 0x404c0d0) 1.623361009s ago: executing program 0 (id=9761): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000000c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c67727071756f74612c696e6f646536342c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c6c6f63616c666c6f636b732c00a5ac95942a38e6bfeea96108fa50b58440ef6041bea5aa31e2dd2532458d802e41aa4599ba680aa7bd6d04004258b7a8902f078e686e0ad0017a9f40cab7e8ed9483c468cbe8b5111b52c62ae7bd99dde7768746459302ef1adff359935a901d9a93c2ee3190699fae61911c9956efa1b72ad683a0acc6d36539173f0f11dd2011263c662522d12cca07a4a3d593ee6ca5954cd0b5674f92faa9f828438f930b721d144e46001a56724219f14c2c58ef31aee3852b15bddc24bade32ed8f3cba254e2dbc6baf27"], 0x0, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') 1.319602933s ago: executing program 1 (id=9763): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 1.13841387s ago: executing program 2 (id=9764): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x100000003) 1.088727412s ago: executing program 1 (id=9766): prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) 914.72582ms ago: executing program 2 (id=9767): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x3, 0x1]}, {0xffffffffffffffff}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 914.0446ms ago: executing program 3 (id=9768): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x30) 873.270641ms ago: executing program 1 (id=9769): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c56100000000000000000000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 713.844539ms ago: executing program 3 (id=9770): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001114230927bd7000fcdbdf25080043"], 0x30}, 0x1, 0x0, 0x0, 0x400e0c5}, 0x4040004) 689.20291ms ago: executing program 1 (id=9771): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001bc0)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0x0, 0x148, 0x150, 0x148, 0x208, 0x240, 0x240, 0x208, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0_to_hsr\x00', {}, {}, 0x1}, 0x0, 0xe0, 0x150, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8c01"}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@loopback}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "2c2445857e134b549c58d782f8bd46db72b3114fa3975e31b75a4b76381cbf3fb56998f3b4cb555b5f7ba56227e1a7b6e9c265bc06e70cb2f34666bc7b9dfbff"}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 634.750512ms ago: executing program 2 (id=9772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000010201040000000000000000020000002400028014000180080001"], 0x80}}, 0x0) 567.370815ms ago: executing program 1 (id=9773): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfff7fffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 454.85057ms ago: executing program 3 (id=9774): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="18020000000000000000000000008000850000006100000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x23, 0x0, &(0x7f0000000380)="243c42e8680d85ffff03762f080071127b58425ee36c16708758f21d7c8def7894bee8", 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 327.650846ms ago: executing program 3 (id=9775): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', ',$', 0x20, 0x3ff}, 0x2d, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 222.13204ms ago: executing program 3 (id=9776): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x140, 0x0) read$FUSE(r0, 0x0, 0x0) 203.298301ms ago: executing program 2 (id=9777): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) 191.186982ms ago: executing program 1 (id=9778): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r0, &(0x7f0000000480)="4d4287ac770767f7429748", 0xb) 0s ago: executing program 3 (id=9779): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xa3020000) kernel console output (not intermixed with test programs): 1541] vhci_hcd: connection closed [ 633.710283][ T990] vhci_hcd: stop threads [ 633.745017][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 633.745022][ T23] usb 2-1: USB disconnect, device number 25 [ 633.773294][ T5877] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 633.784648][ T990] vhci_hcd: release socket [ 633.801545][ T990] vhci_hcd: disconnect device [ 634.857631][T31592] netlink: 'syz.2.7309': attribute type 2 has an invalid length. [ 634.990334][T31568] loop0: detected capacity change from 0 to 32768 [ 635.049108][T31568] (syz.0.7302,31568,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 635.103204][T31568] (syz.0.7302,31568,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 635.180814][T31568] (syz.0.7302,31568,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x729e4f9c, computed 0x295f958d. Applying ECC. [ 635.243897][T31568] JBD2: Ignoring recovery information on journal [ 635.298768][T31605] loop3: detected capacity change from 0 to 4096 [ 635.355699][T31605] __ntfs_error: 89 callbacks suppressed [ 635.355721][T31605] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 635.391068][T31605] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 635.411100][T31568] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 635.431182][T31605] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 635.462745][T31568] (syz.0.7302,31568,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x729e4f9c, computed 0x295f958d. Applying ECC. [ 635.481470][T31605] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 635.552916][T31605] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 635.633965][T31605] ntfs: volume version 0.0. [ 635.638605][T31605] ntfs: (device loop3): load_system_files(): Disabling sparse support due to NTFS volume version 0.0 (need at least version 3.0). [ 635.703949][T31605] ntfs: (device loop3): ntfs_read_locked_inode(): Inode is not in use! [ 635.760723][T31605] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 635.825389][T31605] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 635.879637][T31568] (syz.0.7302,31568,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xa1ff4175. Applying ECC. [ 635.924911][T31568] (syz.0.7302,31568,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0xfd02ac81 [ 635.970298][T31605] ntfs: (device loop3): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 635.971220][T31568] (syz.0.7302,31568,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 635.996553][T31633] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7319'. [ 636.012147][T31568] (syz.0.7302,31568,1):ocfs2_quota_read:201 ERROR: status = -5 [ 636.020060][T31568] (syz.0.7302,31568,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 636.037046][T31568] (syz.0.7302,31568,1):ocfs2_mknod:314 ERROR: status = -5 [ 636.044819][T31568] (syz.0.7302,31568,1):ocfs2_mknod:502 ERROR: status = -5 [ 636.054594][T31568] (syz.0.7302,31568,1):ocfs2_create:676 ERROR: status = -5 [ 636.101861][ T9] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 636.186405][T31639] xt_TCPMSS: Only works on TCP SYN packets [ 636.192553][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 636.320069][ T9] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 636.347235][ T9] usb 3-1: config 0 has no interface number 0 [ 636.364217][ T9] usb 3-1: config 0 interface 110 has no altsetting 0 [ 636.383210][ T9] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 636.412464][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.420533][ T9] usb 3-1: Product: syz [ 636.435055][ T9] usb 3-1: Manufacturer: syz [ 636.439818][ T9] usb 3-1: SerialNumber: syz [ 636.458142][ T9] usb 3-1: config 0 descriptor?? [ 636.495658][T31649] loop3: detected capacity change from 0 to 4096 [ 636.559471][T31649] ntfs: volume version 3.1. [ 636.737615][ T9] cdc_subset: probe of 3-1:0.110 failed with error -22 [ 636.990161][ T23] usb 3-1: USB disconnect, device number 34 [ 637.339909][T31689] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 637.354435][T31689] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 637.364147][T31689] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 637.580222][T31663] loop1: detected capacity change from 0 to 40427 [ 637.608292][T31663] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384) [ 637.628144][T31663] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 637.697503][T31663] F2FS-fs (loop1): Found nat_bits in checkpoint [ 637.824790][T31701] loop3: detected capacity change from 0 to 4096 [ 637.831403][T31663] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 637.864588][T31663] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 637.889606][T31701] ntfs: volume version 3.1. [ 638.932488][ T5877] vhci_hcd: vhci_device speed not set [ 639.064097][T31750] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 639.073840][T31750] overlayfs: missing 'lowerdir' [ 639.171995][ T5852] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 639.392206][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 639.407689][ T5852] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 639.421479][ T5852] usb 1-1: config 254 has no interface number 0 [ 639.442136][ T5852] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 639.472037][ T5852] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 639.496863][T31766] loop3: detected capacity change from 0 to 4096 [ 639.497606][ T5852] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 639.551914][ T5852] usb 1-1: config 254 interface 235 has no altsetting 0 [ 639.574705][ T5852] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 639.581596][T31772] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 639.591808][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 639.613037][ T5852] usb 1-1: Product: syz [ 639.622191][ T5852] usb 1-1: Manufacturer: syz [ 639.631888][ T5852] usb 1-1: SerialNumber: syz [ 639.649232][T31742] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 639.692760][T31766] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 639.780743][T31766] Remounting filesystem read-only [ 639.892565][T31742] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 639.923929][ T5852] usbtest 1-1:254.235: Linux gadget zero [ 639.942427][ T5852] usbtest 1-1:254.235: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 640.171332][ T5877] usb 1-1: USB disconnect, device number 35 [ 641.394898][T31833] netlink: 'syz.2.7368': attribute type 10 has an invalid length. [ 641.487417][T31833] syz_tun: entered promiscuous mode [ 641.573187][T31833] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 641.684296][T31839] loop1: detected capacity change from 0 to 16 [ 641.711637][T31839] erofs: (device loop1): mounted with root inode @ nid 36. [ 642.176885][T31822] loop3: detected capacity change from 0 to 32768 [ 642.240984][T31822] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 642.437738][T31822] XFS (loop3): Ending clean mount [ 642.469779][T31822] XFS (loop3): Quotacheck needed: Please wait. [ 642.577881][T31836] loop0: detected capacity change from 0 to 32768 [ 642.608934][T31822] XFS (loop3): Quotacheck: Done. [ 642.713420][T31836] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 642.738881][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 643.022404][T31836] XFS (loop0): Ending clean mount [ 643.064644][T31836] XFS (loop0): Quotacheck needed: Please wait. [ 643.210847][T31836] XFS (loop0): Quotacheck: Done. [ 643.309062][T31909] loop1: detected capacity change from 0 to 1024 [ 643.483492][ T5790] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 643.534001][T31909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.652187][T31909] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #11: comm syz.1.7383: directory missing '.' [ 643.900872][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.216697][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 644.216713][ T27] audit: type=1326 audit(2000000528.990:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31941 comm="syz.3.7390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecaed8f749 code=0x7ffc0000 [ 644.297104][ T27] audit: type=1326 audit(2000000529.030:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31941 comm="syz.3.7390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecaed8f749 code=0x7ffc0000 [ 644.377403][ T27] audit: type=1326 audit(2000000529.040:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31941 comm="syz.3.7390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fecaed8f749 code=0x7ffc0000 [ 644.454105][ T27] audit: type=1326 audit(2000000529.040:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31941 comm="syz.3.7390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecaed8f749 code=0x7ffc0000 [ 644.559391][ T27] audit: type=1326 audit(2000000529.050:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31941 comm="syz.3.7390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecaed8f749 code=0x7ffc0000 [ 644.683565][T31966] loop3: detected capacity change from 0 to 128 [ 644.713515][T31966] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 644.791672][T31966] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 644.832246][T31966] FAT-fs (loop3): Filesystem has been set read-only [ 645.815403][T32018] loop1: detected capacity change from 0 to 4096 [ 645.829838][T32026] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 645.841290][T32018] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 645.938864][T32018] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 645.991442][T32018] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 646.205787][T32043] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 646.625257][T32063] openvswitch: netlink: Actions may not be safe on all matching packets [ 647.369650][T32105] netlink: 'syz.2.7438': attribute type 9 has an invalid length. [ 647.633882][T32117] netlink: 'syz.0.7441': attribute type 10 has an invalid length. [ 647.671226][T32117] syz_tun: entered promiscuous mode [ 647.728607][T32117] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 647.741946][ T11] bond0: (slave syz_tun): interface is now down [ 647.786002][ T990] bond0: (slave syz_tun): interface is now down [ 647.812433][ T990] bond0: now running without any active interface! [ 648.118649][T32099] loop3: detected capacity change from 0 to 32768 [ 648.212581][T32140] netlink: 'syz.0.7448': attribute type 1 has an invalid length. [ 648.843019][T32165] netlink: 'syz.3.7454': attribute type 10 has an invalid length. [ 648.875072][T32165] syz_tun: entered promiscuous mode [ 648.910551][T32165] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 649.099801][T32175] loop1: detected capacity change from 0 to 8 [ 649.475317][T32186] loop0: detected capacity change from 0 to 4096 [ 649.505365][T32186] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 649.638849][T32203] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7466'. [ 649.900190][T32214] netlink: 'syz.1.7469': attribute type 10 has an invalid length. [ 649.936225][T32214] syz_tun: entered promiscuous mode [ 650.001254][T32214] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 651.671631][T32297] loop3: detected capacity change from 0 to 1024 [ 651.699286][T32297] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 651.751893][T32297] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 651.761466][T32303] netlink: 'syz.1.7499': attribute type 8 has an invalid length. [ 651.761591][T32297] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 651.845882][T32297] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.7497: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 651.889302][T32266] loop0: detected capacity change from 0 to 32768 [ 651.906977][T32297] EXT4-fs (loop3): no journal found [ 651.918031][T32297] EXT4-fs (loop3): can't get journal size [ 651.924216][T32266] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.7487 (32266) [ 651.972915][T32297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 652.025553][T32266] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 652.071333][T32266] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 652.082082][T32266] BTRFS info (device loop0): force zlib compression, level 3 [ 652.091484][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.101945][T32266] BTRFS info (device loop0): turning on flush-on-commit [ 652.109019][T32266] BTRFS info (device loop0): max_inline at 4096 [ 652.196061][T32266] BTRFS info (device loop0): using free space tree [ 652.494266][T32266] BTRFS info (device loop0): enabling ssd optimizations [ 652.501305][T32266] BTRFS info (device loop0): auto enabling async discard [ 652.828835][ T5790] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 652.870446][T32361] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7509'. [ 653.252962][T32378] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7515'. [ 653.311362][ T5801] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop0 scanned by udevd (5801) [ 653.901674][T32405] netlink: 'syz.2.7525': attribute type 3 has an invalid length. [ 654.452597][ T23] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 654.482065][ T787] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 654.665471][ T787] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 654.676977][ T23] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 654.692772][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.706628][ T787] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 654.719841][ T23] usb 2-1: config 0 descriptor?? [ 654.732051][ T787] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 654.746384][ T23] cp210x 2-1:0.0: cp210x converter detected [ 654.762279][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.796223][T32425] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 654.827785][ T787] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 655.186863][ T23] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 655.211891][ T23] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 655.239676][ T23] usb 2-1: cp210x converter now attached to ttyUSB0 [ 655.269914][ T23] usb 2-1: USB disconnect, device number 26 [ 655.296536][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 655.332055][ T23] cp210x 2-1:0.0: device disconnected [ 655.338418][T32486] xt_policy: too many policy elements [ 655.512265][ T787] usb 4-1: USB disconnect, device number 38 [ 656.053188][T32533] netlink: 'syz.0.7549': attribute type 1 has an invalid length. [ 656.095304][T32533] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7549'. [ 656.131836][T32533] nbd: must specify at least one socket [ 656.184454][T32539] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7552'. [ 656.267768][T32539] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 656.365351][T32548] loop3: detected capacity change from 0 to 512 [ 656.438392][T32548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.464605][T32548] ext4 filesystem being mounted at /1831/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.615178][T32551] loop1: detected capacity change from 0 to 4096 [ 656.643848][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.653159][T32551] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 657.185123][T32589] autofs4:pid:32589:autofs_fill_super: called with bogus options [ 657.277806][T32593] netlink: 'syz.3.7567': attribute type 1 has an invalid length. [ 657.301192][T32593] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7567'. [ 657.810720][T32619] bond2: entered allmulticast mode [ 657.820009][T32619] 8021q: adding VLAN 0 to HW filter on device bond2 [ 658.123227][T32668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7580'. [ 658.162581][T32668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7580'. [ 658.239091][T32673] loop3: detected capacity change from 0 to 128 [ 658.305473][T32673] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 658.332378][T32673] System zones: 1-3, 19-19, 35-36 [ 658.375135][T32673] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 658.410774][T32673] ext4 filesystem being mounted at /1838/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 658.424856][T32681] netlink: 'syz.1.7583': attribute type 1 has an invalid length. [ 658.432772][T32681] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.7583'. [ 658.442202][T32681] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7583'. [ 658.570106][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 658.851689][T32705] genirq: Flags mismatch irq 9. 00000000 (dt2814) vs. 00000080 (acpi) [ 659.335939][T32729] loop1: detected capacity change from 0 to 1024 [ 659.523733][T32735] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7601'. [ 659.950649][T32754] loop1: detected capacity change from 0 to 4096 [ 659.980210][T32754] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 660.078042][T32754] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 660.115001][T32754] ntfs3: loop1: Failed to load $Extend (-22). [ 660.121183][T32754] ntfs3: loop1: Failed to initialize $Extend. [ 660.137589][ T302] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7609'. [ 660.548508][ T318] trusted_key: encrypted_key: master key parameter is missing [ 660.833431][ T330] syz.2.7619: attempt to access beyond end of device [ 660.833431][ T330] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 660.879101][ T330] syz.2.7619: attempt to access beyond end of device [ 660.879101][ T330] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 660.922234][ T330] syz.2.7619: attempt to access beyond end of device [ 660.922234][ T330] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 660.965043][ T330] syz.2.7619: attempt to access beyond end of device [ 660.965043][ T330] nbd2: rw=0, sector=18, nr_sectors = 2 limit=0 [ 661.009865][ T330] syz.2.7619: attempt to access beyond end of device [ 661.009865][ T330] nbd2: rw=0, sector=30, nr_sectors = 2 limit=0 [ 661.052101][ T330] syz.2.7619: attempt to access beyond end of device [ 661.052101][ T330] nbd2: rw=0, sector=36, nr_sectors = 2 limit=0 [ 661.080066][ T330] VFS: unable to find oldfs superblock on device nbd2 [ 661.170556][ T349] netlink: 'syz.1.7624': attribute type 21 has an invalid length. [ 661.180277][ T349] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7624'. [ 661.282290][ T787] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 661.338272][ T360] nfs: Unknown parameter 'ntext' [ 661.492590][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 661.509465][ T787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 661.519265][ T787] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 255 [ 661.548863][ T787] usb 4-1: config 8 interface 0 has no altsetting 0 [ 661.565091][ T787] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 661.576162][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.586148][ T787] usb 4-1: Product: syz [ 661.590365][ T787] usb 4-1: Manufacturer: syz [ 661.595466][ T787] usb 4-1: SerialNumber: syz [ 661.612847][ T342] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 661.887431][ T787] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 661.906846][ T787] usb 4-1: selecting invalid altsetting 0 [ 662.026363][ T787] usb 4-1: USB disconnect, device number 39 [ 662.185259][ T411] loop1: detected capacity change from 0 to 256 [ 662.270874][ T411] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 662.597564][ T437] loop3: detected capacity change from 0 to 164 [ 662.702018][ T446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7645'. [ 662.710959][ T446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7645'. [ 663.306122][ T470] loop0: detected capacity change from 0 to 2048 [ 663.353025][ T481] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 663.414761][ T470] syz.0.7653: attempt to access beyond end of device [ 663.414761][ T470] loop0: rw=0, sector=2199023255622, nr_sectors = 2 limit=2048 [ 663.462883][ T470] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=0) [ 663.606928][ T481] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 663.681088][ T481] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 663.727371][ T481] Remounting filesystem read-only [ 663.749122][ T2918] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 663.773139][ T2918] NILFS (loop0): discard dirty block: blocknr=1099511627811, size=1024 [ 663.781475][ T2918] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 663.813137][ T2918] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 663.820512][ T2918] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 663.847764][ T2918] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 663.861763][ T2918] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 663.882704][ T500] loop3: detected capacity change from 0 to 1024 [ 663.886773][ T2918] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 663.898640][ T2918] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 663.908123][ T2918] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 663.918360][ T2918] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 663.923272][ T500] EXT4-fs: Ignoring removed mblk_io_submit option [ 663.925945][ T2918] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 663.939543][ T2918] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 663.950472][ T2918] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 663.974030][ T2918] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 663.991958][ T2918] NILFS (loop0): discard dirty page: offset=131072, ino=3 [ 664.003007][ T2918] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 664.003735][ T500] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 664.021995][ T2918] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 664.035972][ T510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7665'. [ 664.045195][ T2918] NILFS (loop0): discard dirty block: blocknr=46, size=1024 [ 664.055320][ T2918] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 664.075660][ T2918] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 664.081063][ T500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.104072][ T2918] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 664.137640][ T2918] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 664.170932][ T2918] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 664.178896][ T515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7666'. [ 664.213763][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.222091][ T787] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 664.243153][ T2918] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 664.283474][ T2918] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 664.335953][ T2918] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 664.362279][ T2918] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 664.389162][ T2918] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 664.405905][ T2918] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 664.417565][ T5790] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 664.439777][ T787] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 664.461245][ T5790] NILFS (loop0): discard dirty page: offset=0, ino=12 [ 664.468136][ T787] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 664.468236][ T787] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 664.468262][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.501362][ T503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 664.515888][ T5790] NILFS (loop0): discard dirty block: blocknr=17, size=1024 [ 664.544097][ T787] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 664.560636][ T5790] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 664.577806][ T5790] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 664.598782][ T5790] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 664.633430][ T5790] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 664.650465][ T5790] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 664.658502][ T5790] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 664.706969][ T5790] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 664.739658][ T5790] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 665.005196][ T28] usb 3-1: USB disconnect, device number 35 [ 665.182476][ T581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7676'. [ 665.191630][ T581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7676'. [ 665.238992][ T586] loop1: detected capacity change from 0 to 16 [ 665.264308][ T586] erofs: (device loop1): mounted with root inode @ nid 36. [ 665.308868][ T586] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 665.394485][ T586] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -32 in[46, 4050] out[1851] [ 665.415794][ T586] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 665.688364][ T607] loop0: detected capacity change from 0 to 512 [ 665.693311][ T608] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7683'. [ 665.737799][ T608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7683'. [ 665.773508][ T607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.774797][ T608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7683'. [ 665.823858][ T607] ext4 filesystem being mounted at /1906/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.827370][ T617] netlink: 'syz.2.7686': attribute type 30 has an invalid length. [ 665.884331][ T617] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 665.893782][ T617] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 665.903671][ T620] netlink: 'syz.3.7687': attribute type 63 has an invalid length. [ 665.947199][ T607] EXT4-fs error (device loop0): ext4_xattr_block_get:600: inode #15: comm syz.0.7684: corrupted xattr block 33: invalid ea_ino [ 666.001864][ T607] fscrypt (loop0, inode 15): Error -117 getting encryption context [ 666.194935][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.078401][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.100140][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.141402][ T726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.159543][ T27] audit: type=1326 audit(2000000552.930:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.1.7723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136098f749 code=0x7ffc0000 [ 668.166688][ T729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.200893][ T27] audit: type=1326 audit(2000000552.930:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.1.7723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136098f749 code=0x7ffc0000 [ 668.223196][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.260086][ T27] audit: type=1326 audit(2000000552.970:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.1.7723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f136098f749 code=0x7ffc0000 [ 668.295697][ T27] audit: type=1326 audit(2000000552.970:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.1.7723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136098f749 code=0x7ffc0000 [ 668.321021][ T27] audit: type=1326 audit(2000000552.970:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.1.7723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136098f749 code=0x7ffc0000 [ 668.728521][ T747] loop1: detected capacity change from 0 to 16 [ 668.743137][ T747] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 670.200772][ T802] loop1: detected capacity change from 0 to 256 [ 670.275278][ T802] FAT-fs (loop1): Directory bread(block 64) failed [ 670.296340][ T802] FAT-fs (loop1): Directory bread(block 65) failed [ 670.312372][ T802] FAT-fs (loop1): Directory bread(block 66) failed [ 670.324439][ T802] FAT-fs (loop1): Directory bread(block 67) failed [ 670.344738][ T802] FAT-fs (loop1): Directory bread(block 68) failed [ 670.361635][ T802] FAT-fs (loop1): Directory bread(block 69) failed [ 670.372068][ T802] FAT-fs (loop1): Directory bread(block 70) failed [ 670.402136][ T802] FAT-fs (loop1): Directory bread(block 71) failed [ 670.419488][ T802] FAT-fs (loop1): Directory bread(block 72) failed [ 670.441440][ T802] FAT-fs (loop1): Directory bread(block 73) failed [ 670.711035][ T789] loop3: detected capacity change from 0 to 32768 [ 670.750285][ T789] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.7739 (789) [ 670.817472][ T789] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 670.864335][ T789] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 670.887978][ T789] BTRFS info (device loop3): using free space tree [ 671.052450][ T789] BTRFS info (device loop3): enabling ssd optimizations [ 671.059527][ T789] BTRFS info (device loop3): auto enabling async discard [ 671.347976][ T854] netlink: 'syz.0.7753': attribute type 8 has an invalid length. [ 671.376947][ T5786] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 671.712344][ T869] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 672.415466][ T892] IPv6: Can't replace route, no match found [ 672.840745][ T873] loop1: detected capacity change from 0 to 32768 [ 672.872625][ T873] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7758 (873) [ 672.931926][ T873] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 672.962272][ T873] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 672.970987][ T873] BTRFS info (device loop1): using free space tree [ 673.234336][ T873] BTRFS info (device loop1): enabling ssd optimizations [ 673.241415][ T873] BTRFS info (device loop1): auto enabling async discard [ 673.516851][ T5787] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 674.314440][ T1009] loop1: detected capacity change from 0 to 256 [ 674.348905][ T1009] exfat: Deprecated parameter 'utf8' [ 674.376510][ T1009] exfat: Deprecated parameter 'utf8' [ 674.448071][ T1009] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 674.550214][ T1009] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 674.621873][ T28] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 674.821929][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 674.843990][ T28] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 674.860474][ T1046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.863267][ T28] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 674.892468][ T1049] netlink: 'syz.2.7803': attribute type 12 has an invalid length. [ 674.925319][ T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 674.951894][ T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 674.981319][ T28] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.997036][ T28] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 675.007152][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.045922][ T1055] erspan0: left promiscuous mode [ 675.051021][ T1055] erspan0: left allmulticast mode [ 675.072215][ T1055] syz_tun: left promiscuous mode [ 675.088351][ T1055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 675.441812][ T28] usb 1-1: USB disconnect, device number 36 [ 677.127230][ T1147] loop3: detected capacity change from 0 to 4096 [ 677.173324][ T1147] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 677.265613][ T1147] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 677.375120][ T1129] loop1: detected capacity change from 0 to 32768 [ 677.429953][ T1129] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt [ 677.429953][ T1129] [ 677.465780][ T1129] ERROR: (device loop1): remounting filesystem as read-only [ 677.495599][ T1129] jfs_lookup: dtSearch returned -5 [ 677.731989][ T1162] netlink: 'syz.3.7827': attribute type 26 has an invalid length. [ 677.834682][ T1171] overlay: Bad value for 'verity' [ 678.098750][ T1180] loop0: detected capacity change from 0 to 1024 [ 678.280694][ T1186] loop3: detected capacity change from 0 to 1024 [ 678.292000][ T1180] hfsplus: catalog searching failed [ 678.329400][ T1188] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 678.357549][ T1188] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 678.546322][ T1186] hfsplus: invalid extended attribute record [ 678.572324][ T1199] netlink: 'syz.0.7836': attribute type 2 has an invalid length. [ 678.687004][ T42] hfsplus: b-tree write err: -5, ino 4 [ 678.717179][ T1204] netlink: zone id is out of range [ 678.752207][ T1204] netlink: del zone limit has 8 unknown bytes [ 679.881126][ T1266] : renamed from bond_slave_0 (while UP) [ 680.055421][ T1276] __nla_validate_parse: 2 callbacks suppressed [ 680.055440][ T1276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7861'. [ 680.137750][ T1276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7861'. [ 681.158276][ T1340] netlink: 'syz.1.7880': attribute type 1 has an invalid length. [ 681.454930][ T1356] loop0: detected capacity change from 0 to 64 [ 681.576995][ T1364] x_tables: duplicate entry at hook 2 [ 681.912364][ T1378] vcan0: entered promiscuous mode [ 681.938711][ T1378] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 683.012144][ T1411] loop0: detected capacity change from 0 to 1024 [ 683.257195][ T1424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7905'. [ 683.458537][ T1431] loop1: detected capacity change from 0 to 256 [ 683.552387][ T1431] exfat: Deprecated parameter 'namecase' [ 683.639737][ T1431] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 683.994629][ T1457] vlan0: entered promiscuous mode [ 684.245431][ T1466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7917'. [ 684.287620][ T1466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7917'. [ 684.298999][ T1466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7917'. [ 684.314085][ T1466] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7917'. [ 684.323859][ T1466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7917'. [ 684.334747][ T1472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7920'. [ 684.551896][ T1482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7923'. [ 685.004029][ T1511] comedi comedi4: comedi_config --init_data is deprecated [ 686.277512][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.299932][ T1578] dlm: non-version read from control device 0 [ 686.730565][ T1598] loop1: detected capacity change from 0 to 4096 [ 686.804053][ T1608] netlink: 'syz.0.7964': attribute type 5 has an invalid length. [ 687.192920][ T1598] ntfs3: loop1: ino=5, "/" directory corrupted [ 687.779602][ T1652] __nla_validate_parse: 1 callbacks suppressed [ 687.779623][ T1652] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7978'. [ 689.350535][ T1735] loop1: detected capacity change from 0 to 64 [ 689.384373][ T1737] netlink: 'syz.3.8007': attribute type 4 has an invalid length. [ 689.456736][ T1735] Trying to free block not in datazone [ 689.633874][ T1747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8010'. [ 689.844171][ T1757] xt_TPROXY: Can be used only with -p tcp or -p udp [ 691.202200][ T1817] xt_TCPMSS: Only works on TCP SYN packets [ 691.835880][ T1854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8048'. [ 692.078337][ T1864] bridge4: entered promiscuous mode [ 692.580082][ T1889] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8059'. [ 692.612726][ T1889] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8059'. [ 692.894340][ T1852] loop0: detected capacity change from 0 to 32768 [ 693.080571][ T1907] Process accounting resumed [ 693.262071][ T1921] netlink: 'syz.3.8068': attribute type 1 has an invalid length. [ 693.276849][ T1921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8068'. [ 693.949028][ T1945] loop3: detected capacity change from 0 to 1764 [ 694.026552][ T1945] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 694.158083][ T1955] binder: 1953:1955 ioctl c018620c 200000001180 returned -22 [ 694.260828][ T1917] loop0: detected capacity change from 0 to 32768 [ 694.392279][ T1917] ERROR: (device loop0): diAllocAG: error reading iag [ 694.392279][ T1917] [ 694.435309][ T1917] ialloc: diAlloc returned -5! [ 695.117032][ T2002] loop3: detected capacity change from 0 to 1024 [ 695.153795][ T2002] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 695.282908][ T2002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.372752][ T2002] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2872: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 695.390205][ T2002] EXT4-fs error (device loop3): ext4_xattr_inode_iget:444: inode #11: comm syz.3.8093: missing EA_INODE flag [ 695.429682][ T2002] EXT4-fs (loop3): Remounting filesystem read-only [ 695.532212][ T2019] cgroup: release_agent respecified [ 695.609606][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.385228][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8111'. [ 696.419821][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8111'. [ 696.451289][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8111'. [ 696.481878][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8111'. [ 696.510622][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8111'. [ 696.552734][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8111'. [ 696.575705][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8111'. [ 696.620928][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8111'. [ 696.647767][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8111'. [ 697.326389][ T2113] bridge8: entered promiscuous mode [ 699.696171][ T2236] loop1: detected capacity change from 0 to 8 [ 699.760904][ T2236] SQUASHFS error: Unknown inode type 257 in squashfs_iget! [ 700.485438][ T2274] overlay: Unknown parameter '\' [ 701.312875][ T2320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 701.388050][ T2323] loop0: detected capacity change from 0 to 512 [ 701.404992][ T2323] EXT4-fs: Ignoring removed nomblk_io_submit option [ 701.434412][ T2323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 701.469301][ T2323] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 701.482165][ T2323] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002] [ 701.501782][ T787] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 701.508632][ T2323] System zones: 0-1, 15-15, 18-18, 34-34 [ 701.542737][ T2323] EXT4-fs (loop0): orphan cleanup on readonly fs [ 701.590133][ T2323] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 701.630599][ T2323] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 701.693616][ T2323] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 701.703769][ T787] usb 2-1: config index 0 descriptor too short (expected 61256, got 72) [ 701.714638][ T2323] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.8191: bg 0: block 40: padding at end of block bitmap is not set [ 701.731927][ T787] usb 2-1: config 1 has an invalid interface number: 0 but max is -1 [ 701.758037][ T2323] EXT4-fs (loop0): Remounting filesystem read-only [ 701.762718][ T787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.778720][ T2323] EXT4-fs (loop0): 1 truncate cleaned up [ 701.800778][ T2323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 701.802053][ T787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 701.861890][ T787] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 701.933413][ T2313] loop3: detected capacity change from 0 to 32768 [ 701.952239][ T787] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 701.967140][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 702.011023][ T787] usb 2-1: SerialNumber: syz [ 702.037493][ T787] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 702.057781][ T787] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 702.071791][ T787] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 702.101741][ T2313] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 702.174718][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.202660][ T2313] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280 [ 702.251392][ T2313] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 702.261919][ T5877] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 702.275879][ T2313] OCFS2: File system is now read-only. [ 702.281462][ T2313] (syz.3.8190,2313,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 702.348415][ T786] usb 2-1: USB disconnect, device number 27 [ 702.387667][ T2313] (syz.3.8190,2313,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 702.412838][ T2313] (syz.3.8190,2313,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 702.431993][ T2313] (syz.3.8190,2313,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 702.437748][ T2356] loop0: detected capacity change from 0 to 1024 [ 702.440501][ T2313] (syz.3.8190,2313,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 702.479312][ T2313] (syz.3.8190,2313,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 702.486472][ T5877] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 702.509985][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.530120][ T5877] usb 3-1: Product: syz [ 702.536535][ T2356] syz.0.8196: attempt to access beyond end of device [ 702.536535][ T2356] loop0: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 702.540468][ T2313] (syz.3.8190,2313,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 702.553847][ T5877] usb 3-1: Manufacturer: syz [ 702.564101][ T5877] usb 3-1: SerialNumber: syz [ 702.568859][ T2356] buffer_io_error: 14 callbacks suppressed [ 702.568873][ T2356] Buffer I/O error on dev loop0, logical block 100663296, async page read [ 702.601099][ T2313] (syz.3.8190,2313,1):ocfs2_mknod:385 ERROR: status = -30 [ 702.601549][ T5877] usb 3-1: config 0 descriptor?? [ 702.620365][ T2356] syz.0.8196: attempt to access beyond end of device [ 702.620365][ T2356] loop0: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 702.641239][ T5877] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 702.656805][ T2356] Buffer I/O error on dev loop0, logical block 100663296, async page read [ 702.662892][ T2313] (syz.3.8190,2313,1):ocfs2_mknod:502 ERROR: status = -30 [ 702.692198][ T2313] (syz.3.8190,2313,1):ocfs2_create:676 ERROR: status = -30 [ 702.807042][ T5786] ocfs2: Unmounting device (7,3) on (node local) [ 703.119646][ T5877] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 703.142856][ T5877] sq905c 3-1:0.0: Reading version command failed [ 703.168021][ T5877] sq905c: probe of 3-1:0.0 failed with error -71 [ 703.211056][ T5877] usb 3-1: USB disconnect, device number 36 [ 703.245521][ T2382] loop0: detected capacity change from 0 to 128 [ 703.322137][ T2393] __nla_validate_parse: 43 callbacks suppressed [ 703.322157][ T2393] netlink: 11 bytes leftover after parsing attributes in process `syz.1.8202'. [ 703.346989][ T5791] blk_print_req_error: 17 callbacks suppressed [ 703.347007][ T5791] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 703.590811][ T2410] netlink: 'syz.3.8205': attribute type 1 has an invalid length. [ 703.965352][ T2432] tmpfs: Bad value for 'mpol' [ 704.017715][ T2437] loop1: detected capacity change from 0 to 512 [ 704.093916][ T2444] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 704.134894][ T2437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.208006][ T2437] ext4 filesystem being mounted at /2070/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 704.295279][ T2437] EXT4-fs error (device loop1): ext4_ext_remove_space:2929: inode #15: comm syz.1.8212: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 704.345630][ T2437] EXT4-fs (loop1): Remounting filesystem read-only [ 704.431456][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.688080][ T2485] program syz.1.8220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 705.422010][ T5852] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 705.624452][ T5852] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 705.645301][ T5852] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 705.679173][ T5852] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 705.697661][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 705.721752][ T5852] usb 2-1: SerialNumber: syz [ 705.790608][ T2519] loop0: detected capacity change from 0 to 32768 [ 705.832070][ T2519] (syz.0.8231,2519,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 705.862217][ T2519] (syz.0.8231,2519,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 705.906611][ T2519] (syz.0.8231,2519,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xecaf217e, computed 0x51d812ae. Applying ECC. [ 705.956810][ T5852] usb 2-1: 0:2 : does not exist [ 705.962964][ T5852] usb 2-1: unit 5: unexpected type 0x03 [ 705.999904][ T5852] usb 2-1: USB disconnect, device number 28 [ 706.027326][ T2519] JBD2: Ignoring recovery information on journal [ 706.144975][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 706.202810][ T2519] (syz.0.8231,2519,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xecaf217e, computed 0x51d812ae. Applying ECC. [ 706.250757][ T2519] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 706.356931][ T2527] loop3: detected capacity change from 0 to 32768 [ 706.416407][ T2527] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 706.579140][ T2527] XFS (loop3): Ending clean mount [ 706.645654][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 706.822802][ T5786] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 707.157559][ T2593] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 707.306667][ T27] audit: type=1326 audit(2000000592.080:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2600 comm="syz.0.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2a58f749 code=0x7ffc0000 [ 707.369054][ T27] audit: type=1326 audit(2000000592.080:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2600 comm="syz.0.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2a58f749 code=0x7ffc0000 [ 707.461809][ T27] audit: type=1326 audit(2000000592.080:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2600 comm="syz.0.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6a2a58f749 code=0x7ffc0000 [ 707.569341][ T27] audit: type=1326 audit(2000000592.080:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2600 comm="syz.0.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2a58f749 code=0x7ffc0000 [ 707.652115][ T27] audit: type=1326 audit(2000000592.080:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2600 comm="syz.0.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2a58f749 code=0x7ffc0000 [ 707.919844][ T2638] netlink: 'syz.1.8251': attribute type 17 has an invalid length. [ 707.941328][ T2638] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8251'. [ 708.002069][T22922] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 708.203929][T22922] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 708.221866][T22922] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 42769, setting to 64 [ 708.262069][T22922] usb 1-1: config 0 interface 0 has no altsetting 0 [ 708.294495][T22922] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 708.310765][T22922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.344353][T22922] usb 1-1: Product: syz [ 708.348602][T22922] usb 1-1: Manufacturer: syz [ 708.379605][T22922] usb 1-1: SerialNumber: syz [ 708.387331][T22922] usb 1-1: config 0 descriptor?? [ 708.435311][T22922] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 708.659654][T22922] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 708.690262][ T27] audit: type=1107 audit(2000000593.450:398): pid=2679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 708.698711][T22922] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 709.008534][T22922] usb 1-1: USB disconnect, device number 37 [ 709.287937][ T2726] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8271'. [ 709.991986][ T2761] netlink: 'syz.1.8281': attribute type 21 has an invalid length. [ 710.026489][ T2761] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8281'. [ 710.070651][ T2767] delete_channel: no stack [ 710.076654][ T2761] netlink: 'syz.1.8281': attribute type 1 has an invalid length. [ 710.715444][ T2803] loop1: detected capacity change from 0 to 2048 [ 710.740182][ T2803] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 710.990815][ T2833] kAFS: unable to lookup cell '@mTsyz0' [ 711.303844][ T27] audit: type=1800 audit(2000000596.070:399): pid=2827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.8298" name="/newroot/2020/file0" dev="tmpfs" ino=10291 res=0 errno=0 [ 711.355125][ T2853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8303'. [ 711.381895][ T2853] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 711.504460][ T2861] netlink: 'syz.3.8306': attribute type 28 has an invalid length. [ 711.517992][ T2861] netlink: 'syz.3.8306': attribute type 3 has an invalid length. [ 711.557698][ T2861] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8306'. [ 712.153102][ T2884] loop3: detected capacity change from 0 to 4096 [ 712.207411][ T2884] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 712.256419][ T2884] ntfs3: loop3: Failed to load $Extend (-22). [ 712.303000][ T2884] ntfs3: loop3: Failed to initialize $Extend. [ 712.958363][ T2933] x_tables: duplicate entry at hook 2 [ 714.379365][ T3011] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 714.445390][ T3011] CIFS mount error: No usable UNC path provided in device string! [ 714.445390][ T3011] [ 714.496814][ T3011] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 714.584917][ T3021] loop1: detected capacity change from 0 to 2048 [ 714.637093][ T3021] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 714.947428][ T3027] loop0: detected capacity change from 0 to 8192 [ 714.993109][ T3027] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 715.011928][T22922] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 715.040348][ T3027] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 715.092281][ T3027] REISERFS (device loop0): using ordered data mode [ 715.098957][ T3027] reiserfs: using flush barriers [ 715.125512][ T3050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8365'. [ 715.174995][ T3027] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 715.200206][ T3053] loop3: detected capacity change from 0 to 256 [ 715.221007][ T3027] REISERFS (device loop0): checking transaction log (loop0) [ 715.231915][T22922] usb 2-1: Using ep0 maxpacket: 8 [ 715.242911][T22922] usb 2-1: config 7 has an invalid interface number: 143 but max is 1 [ 715.251398][T22922] usb 2-1: config 7 has an invalid interface number: 217 but max is 1 [ 715.284573][ T3053] FAT-fs (loop3): Directory bread(block 64) failed [ 715.299187][T22922] usb 2-1: config 7 has an invalid descriptor of length 229, skipping remainder of the config [ 715.324707][ T3053] FAT-fs (loop3): Directory bread(block 65) failed [ 715.331525][ T3053] FAT-fs (loop3): Directory bread(block 66) failed [ 715.341799][T22922] usb 2-1: config 7 has no interface number 0 [ 715.347957][T22922] usb 2-1: config 7 has no interface number 1 [ 715.389350][ T3053] FAT-fs (loop3): Directory bread(block 67) failed [ 715.396501][T22922] usb 2-1: too many endpoints for config 7 interface 217 altsetting 0: 255, using maximum allowed: 30 [ 715.427366][ T3053] FAT-fs (loop3): Directory bread(block 68) failed [ 715.434284][T22922] usb 2-1: config 7 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 715.450596][ T3053] FAT-fs (loop3): Directory bread(block 69) failed [ 715.479192][ T3053] FAT-fs (loop3): Directory bread(block 70) failed [ 715.490009][T22922] usb 2-1: config 7 interface 143 has no altsetting 0 [ 715.517437][ T3053] FAT-fs (loop3): Directory bread(block 71) failed [ 715.543931][ T3053] FAT-fs (loop3): Directory bread(block 72) failed [ 715.546811][T22922] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=ba.35 [ 715.562664][ T3053] FAT-fs (loop3): Directory bread(block 73) failed [ 715.591918][T22922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.598018][ T3061] netlink: 'syz.2.8368': attribute type 1 has an invalid length. [ 715.599964][T22922] usb 2-1: Product: syz [ 715.599984][T22922] usb 2-1: Manufacturer: syz [ 715.600000][T22922] usb 2-1: SerialNumber: syz [ 715.646128][ T3027] REISERFS (device loop0): Using tea hash to sort names [ 715.680313][ T3027] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 715.858487][T22922] qmi_wwan: probe of 2-1:7.143 failed with error -22 [ 715.925626][T22922] usb 2-1: USB disconnect, device number 29 [ 716.076215][ T3084] netlink: zone id is out of range [ 716.081431][ T3084] netlink: get zone limit has 8 unknown bytes [ 716.102870][ T3085] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.8370'. [ 716.333206][ T3095] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8374'. [ 716.358740][ T3095] veth1_vlan: left promiscuous mode [ 716.459462][ T3103] xt_nfacct: accounting object `syz1' does not exist [ 717.176500][ T3135] xt_nfacct: accounting object `syz1' does not exist [ 717.730210][ T3111] loop0: detected capacity change from 0 to 32768 [ 717.792918][ T3111] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 717.842023][ T3111] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 718.127909][ T3191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8402'. [ 718.140023][ T3191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8402'. [ 718.192221][ T3194] PKCS7: Unknown OID: [4] 0.0 [ 718.197731][ T3194] PKCS7: Only support pkcs7_signedData type [ 718.341928][ T3111] XFS (loop0): Ending clean mount [ 718.360077][ T3111] XFS (loop0): Quotacheck needed: Please wait. [ 718.528635][ T3111] XFS (loop0): Quotacheck: Done. [ 718.854631][ T5790] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 718.970825][ T3215] loop3: detected capacity change from 0 to 1024 [ 719.089063][ T3177] loop1: detected capacity change from 0 to 32768 [ 719.209675][ T49] hfsplus: b-tree write err: -5, ino 4 [ 719.829590][ T3249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8416'. [ 721.576376][ T3340] Non-string source [ 721.696386][ T3350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8450'. [ 721.806744][ T3356] program syz.1.8452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 722.442651][ T787] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 722.631865][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 722.638859][ T3369] loop1: detected capacity change from 0 to 32768 [ 722.650654][ T787] usb 1-1: unable to get BOS descriptor or descriptor too short [ 722.676463][ T787] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 722.691826][ T787] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 722.708173][ T787] usb 1-1: config 4 has no interface number 0 [ 722.724334][ T787] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 722.772198][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.789133][ T787] usb 1-1: Product: syz [ 722.804944][ T787] usb 1-1: Manufacturer: syz [ 722.814979][ T3369] ERROR: (device loop1): duplicateIXtree: [ 722.814979][ T3369] [ 722.820002][ T787] usb 1-1: SerialNumber: syz [ 722.832295][ T3369] ERROR: (device loop1): remounting filesystem as read-only [ 722.871786][ T5877] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 723.074678][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 723.108243][ T3415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8467'. [ 723.112100][ T787] uvcvideo 1-1:4.147: Found multiple Units with ID 6 [ 723.121374][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.127451][ T787] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 723.141063][ T787] usb 1-1: No valid video chain found. [ 723.151460][ T787] usb 1-1: USB disconnect, device number 38 [ 723.169499][ T5877] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 723.191752][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.210435][ T5877] usb 3-1: config 0 descriptor?? [ 723.234199][ T5877] xbox_remote_probe: endpoint_in message size==0? [ 723.444996][ T5877] usbhid 3-1:0.0: can't add hid device: -71 [ 723.462970][ T5877] usbhid: probe of 3-1:0.0 failed with error -71 [ 723.496208][ T5877] usb 3-1: USB disconnect, device number 37 [ 724.059314][ T3470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8478'. [ 724.103419][ T3470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8478'. [ 724.193233][ T3479] netlink: 'syz.1.8481': attribute type 30 has an invalid length. [ 724.201267][ T3479] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 725.110450][ T3526] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8496'. [ 725.143864][ T3526] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8496'. [ 725.166395][ T3526] netlink: 'syz.1.8496': attribute type 6 has an invalid length. [ 725.205255][ T3526] netlink: 'syz.1.8496': attribute type 5 has an invalid length. [ 725.236394][ T3526] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8496'. [ 726.062253][ T3576] MPI: mpi too large (107144 bits) [ 726.411235][ T3588] 8021q: adding VLAN 0 to HW filter on device bond3 [ 726.414355][ T3589] loop0: detected capacity change from 0 to 4096 [ 726.598750][ T3589] ntfs3: loop0: ino=9, attr_set_size [ 727.885696][ T3702] netlink: 'syz.3.8543': attribute type 1 has an invalid length. [ 728.059244][ T3712] loop3: detected capacity change from 0 to 256 [ 728.324771][ T3722] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8548'. [ 728.357127][ T3722] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8548'. [ 728.598256][ T3735] program syz.3.8552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 728.837358][ T3746] loop0: detected capacity change from 0 to 128 [ 728.894112][ T3746] sysv_free_block: flc_count > flc_size [ 728.941948][ T3746] sysv_free_block: flc_count > flc_size [ 728.947592][ T3746] sysv_free_block: flc_count > flc_size [ 728.969375][ T3746] sysv_free_block: flc_count > flc_size [ 728.991443][ T3746] sysv_free_block: flc_count > flc_size [ 729.013616][ T3746] sysv_free_block: flc_count > flc_size [ 729.019244][ T3746] sysv_free_block: flc_count > flc_size [ 729.051650][ T3746] sysv_free_block: flc_count > flc_size [ 729.062878][ T3746] sysv_free_block: flc_count > flc_size [ 729.068508][ T3746] sysv_free_block: flc_count > flc_size [ 729.113394][ T3746] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 729.515122][ T3782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8565'. [ 729.857539][ T3798] netlink: 'syz.2.8572': attribute type 2 has an invalid length. [ 729.874707][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 729.914712][ T3798] netlink: 'syz.2.8572': attribute type 1 has an invalid length. [ 730.680889][ T3845] xt_cgroup: invalid path, errno=-2 [ 731.788283][ T3851] loop0: detected capacity change from 0 to 32768 [ 731.874799][ T3851] find_entry called with index = 0 [ 732.130304][ T3860] loop3: detected capacity change from 0 to 40427 [ 732.164547][ T3860] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 732.176888][ T3860] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 732.220387][ T3860] F2FS-fs (loop3): invalid crc value [ 732.260658][ T3860] F2FS-fs (loop3): Found nat_bits in checkpoint [ 732.477721][ T3860] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 732.486954][ T3860] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 733.094321][ T27] audit: type=1400 audit(2000000617.870:400): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=3935 comm="syz.0.8606" [ 733.271828][ T787] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 733.463662][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 733.483135][ T787] usb 3-1: unable to get BOS descriptor or descriptor too short [ 733.486195][ T3951] loop3: detected capacity change from 0 to 4096 [ 733.502290][ T787] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 733.524784][ T3951] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 733.530618][ T787] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 733.569508][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.596614][ T787] usb 3-1: Product: syz [ 733.603575][ T787] usb 3-1: Manufacturer: syz [ 733.609532][ T787] usb 3-1: SerialNumber: syz [ 733.807717][ T3963] netlink: 'syz.1.8620': attribute type 5 has an invalid length. [ 733.876354][ T787] usb 3-1: Not enough endpoints found in device, aborting! [ 734.137774][ T5877] usb 3-1: USB disconnect, device number 38 [ 734.541523][ T4007] loop1: detected capacity change from 0 to 64 [ 734.846451][ T27] audit: type=1400 audit(2000000619.620:401): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=4020 comm="syz.2.8637" [ 735.068731][ T4035] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 735.087004][ T4035] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 735.367947][ T4037] loop0: detected capacity change from 0 to 8192 [ 735.428511][ T4037] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 735.601581][ T4058] loop1: detected capacity change from 0 to 256 [ 735.640623][ T4058] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 735.698930][ T4058] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 735.758328][ T4058] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 735.992233][ T5877] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 736.201730][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 736.223587][ T5877] usb 3-1: config 0 has no interfaces? [ 736.237307][ T5877] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 736.255942][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.267457][ T5877] usb 3-1: Product: syz [ 736.278962][ T5877] usb 3-1: Manufacturer: syz [ 736.294112][ T5877] usb 3-1: SerialNumber: syz [ 736.303124][ T5877] r8152-cfgselector 3-1: config 0 descriptor?? [ 736.525101][ T5877] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 736.554999][ T4110] XFS (nullb0): Invalid superblock magic number [ 736.741525][ T5852] usb 3-1: USB disconnect, device number 39 [ 737.631907][ T5877] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 737.856816][ T5877] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 737.871750][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.897133][ T5877] usb 2-1: Product: syz [ 737.913279][ T5877] usb 2-1: Manufacturer: syz [ 737.917958][ T5877] usb 2-1: SerialNumber: syz [ 737.919064][ T4212] loop3: detected capacity change from 0 to 2048 [ 737.929696][ T4211] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 737.958462][ T4211] ip6gretap2: entered allmulticast mode [ 737.962185][ T4212] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 737.969506][ T5877] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 738.011507][ T786] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 738.315324][ T4231] loop3: detected capacity change from 0 to 256 [ 738.443426][ T4231] FAT-fs (loop3): Directory bread(block 64) failed [ 738.450071][ T4231] FAT-fs (loop3): Directory bread(block 65) failed [ 738.492328][ T4231] FAT-fs (loop3): Directory bread(block 66) failed [ 738.499890][ T4231] FAT-fs (loop3): Directory bread(block 67) failed [ 738.517389][ T4231] FAT-fs (loop3): Directory bread(block 68) failed [ 738.536379][ T4231] FAT-fs (loop3): Directory bread(block 69) failed [ 738.580312][ T4231] FAT-fs (loop3): Directory bread(block 70) failed [ 738.601964][ T4231] FAT-fs (loop3): Directory bread(block 71) failed [ 738.625477][ T5877] usb 2-1: USB disconnect, device number 30 [ 738.634795][ T4231] FAT-fs (loop3): Directory bread(block 72) failed [ 738.641407][ T4231] FAT-fs (loop3): Directory bread(block 73) failed [ 739.089020][ T786] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 739.112143][ T786] ath9k_htc: Failed to initialize the device [ 739.167338][ T5877] usb 2-1: ath9k_htc: USB layer deinitialized [ 739.722979][ T4298] loop0: detected capacity change from 0 to 4096 [ 739.751892][ T5877] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 739.837451][ T4304] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 739.969585][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 740.010964][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 740.054753][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 740.106664][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 740.130264][ T5877] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 740.161956][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.213238][ T5877] usb 2-1: Product: syz [ 740.235084][ T5877] usb 2-1: Manufacturer: syz [ 740.239774][ T5877] usb 2-1: SerialNumber: syz [ 740.276588][ T5877] usb 2-1: config 0 descriptor?? [ 740.402406][ T787] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 740.544327][ T5877] adutux 2-1:0.0: Could not retrieve serial number [ 740.551021][ T5877] adutux: probe of 2-1:0.0 failed with error -5 [ 740.592161][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 740.623379][ T787] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.644877][ T787] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.665597][ T787] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 740.686185][ T787] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 740.708311][ T787] usb 4-1: Product: syz [ 740.721885][ T787] usb 4-1: Manufacturer: syz [ 740.747227][ T787] hub 4-1:4.0: USB hub found [ 740.868456][ T786] usb 2-1: USB disconnect, device number 31 [ 740.960347][ T787] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 741.282928][T22922] usb 4-1: USB disconnect, device number 40 [ 741.455688][ T4347] loop0: detected capacity change from 0 to 32768 [ 741.893286][ T4390] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.8726'. [ 742.692204][ T4434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8737'. [ 742.738147][ T4434] bridge_slave_1: left allmulticast mode [ 742.764854][ T4434] bridge_slave_1: left promiscuous mode [ 742.770847][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.802457][ T4434] bridge_slave_0: left allmulticast mode [ 742.821853][ T4434] bridge_slave_0: left promiscuous mode [ 742.852116][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.118854][ T4449] netlink: 'syz.0.8741': attribute type 3 has an invalid length. [ 743.328576][ T4467] IPv6: NLM_F_CREATE should be specified when creating new route [ 743.956757][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8756'. [ 744.116476][ T787] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 744.179960][ T4510] netlink: 'syz.3.8759': attribute type 1 has an invalid length. [ 744.208649][ T4510] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8759'. [ 744.219709][ T4510] NCSI netlink: No device for ifindex 0 [ 744.320610][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 744.335240][ T787] usb 3-1: config 127 has an invalid interface number: 102 but max is 2 [ 744.344404][ T787] usb 3-1: config 127 has no interface number 2 [ 744.350757][ T787] usb 3-1: config 127 interface 0 has no altsetting 0 [ 744.358321][ T787] usb 3-1: config 127 interface 1 has no altsetting 0 [ 744.365804][ T787] usb 3-1: config 127 interface 102 has no altsetting 0 [ 744.377915][ T787] usb 3-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 744.393310][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.411831][ T787] usb 3-1: Product: syz [ 744.416068][ T787] usb 3-1: Manufacturer: syz [ 744.421097][ T787] usb 3-1: SerialNumber: syz [ 744.506540][ T5877] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 744.703789][ T787] usb 3-1: selecting invalid altsetting 0 [ 744.704635][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 744.722109][ T787] usb 3-1: Could not set interface, error -22 [ 744.729906][ T5877] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 744.741599][ T787] usb 3-1: selecting invalid altsetting 0 [ 744.750514][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 744.761907][ T787] usb 3-1: Could not set interface, error -22 [ 744.775185][ T787] usb 3-1: USB disconnect, device number 40 [ 744.816484][ T5877] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 744.836691][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.867650][ T5877] usb 1-1: Product: syz [ 744.882013][ T5877] usb 1-1: Manufacturer: syz [ 744.898745][ T5877] usb 1-1: SerialNumber: syz [ 744.926035][ T5877] usb 1-1: config 0 descriptor?? [ 744.938570][ T5877] kvaser_usb 1-1:0.0: Cannot get usb endpoint(s) [ 745.203389][ T787] usb 1-1: USB disconnect, device number 39 [ 745.366548][ T4584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8775'. [ 745.393954][ T4584] team0: left allmulticast mode [ 745.398910][ T4584] team_slave_0: left allmulticast mode [ 745.406764][ T4584] team_slave_1: left allmulticast mode [ 745.412660][ T4584] dummy0: left allmulticast mode [ 745.417878][ T4584] team0: left promiscuous mode [ 745.422822][ T4584] team_slave_0: left promiscuous mode [ 745.434422][ T4584] team_slave_1: left promiscuous mode [ 745.440168][ T4584] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 745.460859][ T4584] dummy0: left promiscuous mode [ 745.474656][ T4584] bridge0: port 3(team0) entered disabled state [ 745.526950][ T4584] bridge_slave_1: left allmulticast mode [ 745.542191][ T4584] bridge_slave_1: left promiscuous mode [ 745.555951][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.577841][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.811867][ T5877] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 745.985637][ T4613] syz.1.8784: attempt to access beyond end of device [ 745.985637][ T4613] nbd1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 746.015444][ T5877] usb 4-1: Using ep0 maxpacket: 16 [ 746.035505][ T5877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 746.051107][ T5877] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 746.077580][ T5877] usb 4-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 746.081943][ T4613] F2FS-fs (nbd1): Unable to read 1th superblock [ 746.092863][ T5877] usb 4-1: Product: syz [ 746.100516][ T5877] usb 4-1: Manufacturer: syz [ 746.104153][ T4613] syz.1.8784: attempt to access beyond end of device [ 746.104153][ T4613] nbd1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 746.113068][ T5877] usb 4-1: SerialNumber: syz [ 746.132700][ T4613] F2FS-fs (nbd1): Unable to read 2th superblock [ 746.140616][ T5877] usb 4-1: config 0 descriptor?? [ 746.310160][ T4618] bond6: entered allmulticast mode [ 746.320685][ T4658] loop0: detected capacity change from 0 to 64 [ 746.474591][ T5877] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 746.598187][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 746.789048][ T5877] usb 4-1: USB disconnect, device number 41 [ 746.956633][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8792'. [ 747.029321][ T4696] bridge_slave_1: left allmulticast mode [ 747.040712][ T4696] bridge_slave_1: left promiscuous mode [ 747.054157][ T4701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8795'. [ 747.061423][ T4696] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.070606][ T4701] netlink: 440 bytes leftover after parsing attributes in process `syz.1.8795'. [ 747.089906][ T4696] bridge_slave_0: left allmulticast mode [ 747.096951][ T4696] bridge_slave_0: left promiscuous mode [ 747.113468][ T4696] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.455668][ T4719] netlink: 'syz.0.8799': attribute type 1 has an invalid length. [ 747.468090][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8799'. [ 747.722947][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.846428][ T4728] loop1: detected capacity change from 0 to 4096 [ 747.982154][ T4728] ntfs: volume version 3.1. [ 748.109782][ T4728] ntfs: (device loop1): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80. Aborting truncate. [ 748.583727][ T4765] SET target dimension over the limit! [ 748.621951][ T786] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 748.786532][ T4774] loop3: detected capacity change from 0 to 2048 [ 748.831958][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 748.842467][ T4779] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 748.853401][ T786] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 748.877296][ T786] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 748.912857][ T786] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 748.912961][ T4774] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 748.944236][ T786] usb 1-1: config 0 has no interface number 0 [ 748.950425][ T786] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 748.960266][ T4774] Remounting filesystem read-only [ 749.021813][ T786] usb 1-1: config 0 interface 104 has no altsetting 1 [ 749.052602][ T786] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 749.072396][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.097180][ T786] usb 1-1: Product: syz [ 749.101429][ T786] usb 1-1: Manufacturer: syz [ 749.138691][ T786] usb 1-1: SerialNumber: syz [ 749.163030][ T786] usb 1-1: config 0 descriptor?? [ 749.381350][ T786] asix 1-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 749.428486][ T786] asix: probe of 1-1:0.104 failed with error -71 [ 749.492749][ T786] usb 1-1: USB disconnect, device number 40 [ 749.643375][ T4821] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 749.996155][ T4840] kernel read not supported for file /½ Iqî"ûIvÃQhþµ“3žJÇÈyûxÐîÃüv÷Lª=QÿW-™. Gaǹ”óW£ (pid: 4840 comm: syz.3.8833) [ 750.009914][ T27] audit: type=1800 audit(2000000634.790:402): pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8833" name=BD16204971EE22FB4976C3015168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D5118FF572D05992E1A09476115C7B9949DF357A3 dev="mqueue" ino=67002 res=0 errno=0 [ 750.170173][ T4845] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 750.199412][ T4845] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 750.401718][ T27] audit: type=1326 audit(2000000635.170:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.2.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc278f749 code=0x7ffc0000 [ 750.507455][ T27] audit: type=1326 audit(2000000635.170:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.2.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc278f749 code=0x7ffc0000 [ 750.563263][ T27] audit: type=1326 audit(2000000635.170:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.2.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7effc278f749 code=0x7ffc0000 [ 750.656044][ T27] audit: type=1326 audit(2000000635.170:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4856 comm="syz.2.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc278f749 code=0x7ffc0000 [ 751.032149][ T786] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 751.232133][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 751.250172][ T786] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 751.262482][ T4894] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8849'. [ 751.267109][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.281124][ T786] usb 2-1: Product: syz [ 751.290089][ T786] usb 2-1: Manufacturer: syz [ 751.297068][ T786] usb 2-1: SerialNumber: syz [ 751.313309][ T786] usb 2-1: config 0 descriptor?? [ 751.563788][ T786] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 751.591321][ T786] 5e 57 f9 3a eb 9a 47 80 [ 751.611720][ T786] snd-usb-6fire: probe of 2-1:0.0 failed with error -5 [ 751.848985][ T786] usb 2-1: USB disconnect, device number 32 [ 752.690489][ T4959] loop3: detected capacity change from 0 to 764 [ 752.735658][ T4959] rock: directory entry would overflow storage [ 752.766369][ T4959] rock: sig=0x4654, size=5, remaining=4 [ 752.782142][ T4964] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8868'. [ 753.388013][ T4997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8878'. [ 753.447255][ T5000] netlink: 'syz.0.8879': attribute type 4 has an invalid length. [ 753.455465][ T5000] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8879'. [ 753.494769][ T5000] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 753.852274][ T5011] xt_CT: No such helper "netbios-ns" [ 754.403837][ T5004] loop1: detected capacity change from 0 to 32768 [ 754.489060][ T5043] loop0: detected capacity change from 0 to 256 [ 754.506787][ T5043] exfat: Deprecated parameter 'utf8' [ 754.521932][ T5043] exfat: Deprecated parameter 'utf8' [ 754.640548][ T5043] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 754.693717][ T5049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8894'. [ 754.783656][ T5043] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 755.775834][ T5094] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 757.102414][ T5182] netlink: 'syz.1.8931': attribute type 6 has an invalid length. [ 757.120195][ T5184] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8932'. [ 757.236482][ T5187] loop1: detected capacity change from 0 to 2048 [ 757.243221][ T28] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 757.287749][ T5187] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 757.431833][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 757.474091][ T28] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 757.493704][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.514234][ T28] usb 1-1: Product: syz [ 757.518491][ T28] usb 1-1: Manufacturer: syz [ 757.524785][ T28] usb 1-1: SerialNumber: syz [ 757.542090][ T28] r8152-cfgselector 1-1: config 0 descriptor?? [ 757.976413][ T28] r8152-cfgselector 1-1: Unknown version 0x0000 [ 758.006990][ T28] r8152-cfgselector 1-1: USB disconnect, device number 41 [ 758.762681][ T5270] autofs4:pid:5270:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 759.126771][ T5291] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 759.143887][ T5852] kernel write not supported for file /4546/clear_refs (pid: 5852 comm: kworker/0:4) [ 760.544230][ T5370] ieee802154 phy1 wpan1: encryption failed: -22 [ 761.583701][ T5421] netlink: 'syz.2.9003': attribute type 21 has an invalid length. [ 761.617779][ T5421] netlink: 'syz.2.9003': attribute type 6 has an invalid length. [ 761.656321][ T5421] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9003'. [ 761.775532][ T5429] loop0: detected capacity change from 0 to 2048 [ 761.834145][ T5429] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 761.895609][ T5429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 763.402223][ T5556] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 764.435069][ T5610] ceph: No source [ 765.732279][ T5852] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 765.922226][ T5852] usb 1-1: Using ep0 maxpacket: 32 [ 765.934709][ T5852] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 765.945999][ T5852] usb 1-1: config 0 has no interface number 0 [ 765.965495][ T5852] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 765.985654][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.005915][ T5852] usb 1-1: Product: syz [ 766.010151][ T5852] usb 1-1: Manufacturer: syz [ 766.040458][ T5852] usb 1-1: SerialNumber: syz [ 766.082873][ T5852] usb 1-1: config 0 descriptor?? [ 766.111194][ T5852] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 766.135088][ T5852] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 766.304354][ T5852] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 766.317184][ T5704] xt_CT: No such helper "snmp_trap" [ 766.523042][ T5852] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 766.573472][ T5852] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 766.591365][ T5852] usb 1-1: USB disconnect, device number 42 [ 766.608644][ T5852] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 767.156761][ T5758] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 767.391428][ T5771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 767.472186][ T5779] netlink: 'syz.2.9097': attribute type 27 has an invalid length. [ 768.102814][ T27] audit: type=1400 audit(2000000652.880:407): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=5870 comm="syz.1.9108" [ 768.168656][ T27] audit: type=1326 audit(2000000652.940:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.2.9109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc278f749 code=0x7ffc0000 [ 768.191015][ C0] vkms_vblank_simulate: vblank timer overrun [ 768.305848][ T27] audit: type=1326 audit(2000000652.940:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.2.9109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc278f749 code=0x7ffc0000 [ 768.328136][ C0] vkms_vblank_simulate: vblank timer overrun [ 768.384921][ T27] audit: type=1326 audit(2000000652.990:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.2.9109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7effc278f749 code=0x7ffc0000 [ 768.407263][ C0] vkms_vblank_simulate: vblank timer overrun [ 768.507662][ T27] audit: type=1326 audit(2000000652.990:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.2.9109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc278f749 code=0x7ffc0000 [ 768.570946][ T27] audit: type=1326 audit(2000000652.990:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.2.9109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc278f749 code=0x7ffc0000 [ 768.593285][ C0] vkms_vblank_simulate: vblank timer overrun [ 768.781356][ T5906] netlink: 'syz.1.9119': attribute type 2 has an invalid length. [ 769.244695][ T5931] netlink: 'syz.1.9125': attribute type 11 has an invalid length. [ 769.254077][ T5931] netlink: 212832 bytes leftover after parsing attributes in process `syz.1.9125'. [ 769.422768][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9130'. [ 770.382020][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9146'. [ 770.663958][ T6042] 9pnet: Found fid 0 not clunked [ 771.168412][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9161'. [ 771.250103][ T6076] i2c i2c-0: Invalid block read size 255 [ 771.721875][ T6101] netlink: 'syz.0.9170': attribute type 32 has an invalid length. [ 772.220264][ T6129] trusted_key: encrypted_key: insufficient parameters specified [ 772.330654][ T6126] loop0: detected capacity change from 0 to 4096 [ 772.368003][ T6126] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 772.958110][ T6157] delete_channel: no stack [ 772.961236][ T6161] netlink: 'syz.1.9191': attribute type 1 has an invalid length. [ 772.971108][ T6161] netlink: 'syz.1.9191': attribute type 2 has an invalid length. [ 773.166906][ T27] audit: type=1107 audit(2000000657.920:413): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 773.702065][ T786] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 773.762294][ T5852] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 773.922071][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 773.934155][ T786] usb 2-1: config index 0 descriptor too short (expected 18, got 14) [ 773.949790][ T786] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 773.972147][ T5852] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 773.984043][ T786] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 774.001839][ T5852] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 774.012785][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.033294][ T786] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 774.054780][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.065756][ T5852] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 774.088523][ T786] usb 2-1: Product: syz [ 774.101799][ T786] usb 2-1: Manufacturer: syz [ 774.106470][ T786] usb 2-1: SerialNumber: syz [ 774.131004][ T786] r8152-cfgselector 2-1: config 0 descriptor?? [ 774.393297][ T786] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 774.529675][ T6250] loop0: detected capacity change from 0 to 16 [ 774.549607][ T6250] erofs: (device loop0): mounted with root inode @ nid 36. [ 774.593001][ T6250] erofs: (device loop0): z_erofs_read_folio: read error -95 @ 8200 of nid 36 [ 774.625083][T22922] usb 2-1: USB disconnect, device number 33 [ 775.130875][ T6282] loop0: detected capacity change from 0 to 2048 [ 775.154632][ T5852] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 775.177487][ T5852] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 775.200460][ T6282] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 775.221594][ T5852] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 775.252097][ T5852] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 775.273949][ T6282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 775.303415][ T5852] usb 3-1: USB disconnect, device number 41 [ 777.993906][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9275'. [ 778.058984][ T6444] netlink: 'syz.3.9274': attribute type 3 has an invalid length. [ 779.842038][ T28] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 780.051788][ T28] usb 4-1: Using ep0 maxpacket: 8 [ 780.085043][ T28] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 780.121006][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.131851][ T28] usb 4-1: Product: syz [ 780.136082][ T28] usb 4-1: Manufacturer: syz [ 780.140715][ T28] usb 4-1: SerialNumber: syz [ 780.160265][ T28] usb 4-1: config 0 descriptor?? [ 780.230154][ T28] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 780.516162][ T6570] netdevsim netdevsim1 ªªªªªª: renamed from netdevsim0 (while UP) [ 780.683838][ T28] gspca_m5602: Failed to find a sensor [ 780.689396][ T28] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 780.734148][ T28] usb 4-1: USB disconnect, device number 42 [ 780.849693][ T6590] xt_hashlimit: size too large, truncated to 1048576 [ 781.809406][ T6640] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 782.583956][ T6683] bond0: (slave syz_tun): Releasing backup interface [ 782.658629][ T6683] bond0: (slave bond_slave_0): Releasing backup interface [ 782.858629][ T6698] cgroup: subsys name conflicts with all [ 782.876472][ T6683] bond0: (slave bond_slave_1): Releasing backup interface [ 783.036481][ T6683] team0: Port device C removed [ 783.075864][ T6683] team0: Port device team_slave_1 removed [ 783.098520][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.115506][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.137410][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.163241][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.262466][ T6683] team0: Port device virt_wifi0 removed [ 784.138020][ T6747] vlan1: entered allmulticast mode [ 784.158568][ T6747] veth0_vlan: entered allmulticast mode [ 784.420138][ T6755] netlink: 'syz.1.9362': attribute type 13 has an invalid length. [ 784.435380][ T6718] loop3: detected capacity change from 0 to 32768 [ 784.556149][ T6718] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 784.683900][ T6718] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 784.749416][ T6718] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 784.800826][ T6718] OCFS2: File system is now read-only. [ 784.821114][ T6718] (syz.3.9349,6718,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 784.977554][ T5786] ocfs2: Unmounting device (7,3) on (node local) [ 785.025217][ T6738] loop0: detected capacity change from 0 to 32768 [ 785.198847][ T6738] JBD2: Ignoring recovery information on journal [ 785.392774][ T6738] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 785.599847][ T6738] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 785.653665][ T6738] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 785.677234][ T6738] OCFS2: File system is now read-only. [ 785.692292][ T5852] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 785.711218][ T6738] (syz.0.9356,6738,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 785.732955][ T6738] (syz.0.9356,6738,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 785.769732][ T6738] (syz.0.9356,6738,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 785.816627][ T6738] (syz.0.9356,6738,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 785.828611][ T6810] netlink: 'syz.2.9376': attribute type 21 has an invalid length. [ 785.832565][ T6738] (syz.0.9356,6738,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 785.843849][ T6810] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9376'. [ 785.849790][ T6738] (syz.0.9356,6738,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 785.861037][ T6810] netlink: 'syz.2.9376': attribute type 5 has an invalid length. [ 785.870063][ T6810] netlink: 'syz.2.9376': attribute type 6 has an invalid length. [ 785.881850][ T6738] (syz.0.9356,6738,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 785.887908][ T6810] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9376'. [ 785.889995][ T6738] (syz.0.9356,6738,1):ocfs2_mknod:385 ERROR: status = -30 [ 785.906895][ T6738] (syz.0.9356,6738,1):ocfs2_mknod:502 ERROR: status = -30 [ 785.914782][ T6738] (syz.0.9356,6738,1):ocfs2_create:676 ERROR: status = -30 [ 785.921933][ T5852] usb 4-1: Using ep0 maxpacket: 8 [ 785.931044][ T5852] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 785.950058][ T5852] usb 4-1: config 179 has no interface number 0 [ 785.965558][ T5852] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 785.977939][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 785.987483][ T5852] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 786.016698][ T5852] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 786.081963][ T5852] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 786.131721][ T5852] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 786.165765][ T5852] usb 4-1: config 179 interface 65 has no altsetting 0 [ 786.201762][ T5852] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 786.221239][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.260498][ T5852] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input48 [ 786.386588][ T5144] input input48: unable to receive magic message: -110 [ 786.471920][ T5144] input input48: unable to receive magic message: -32 [ 786.541883][ T5144] input input48: unable to receive magic message: -32 [ 786.658273][ T5144] input input48: unable to receive magic message: -32 [ 786.687222][ T5144] input input48: unable to receive magic message: -32 [ 786.741224][ T5144] input input48: unable to receive magic message: -32 [ 786.849826][ T28] usb 4-1: USB disconnect, device number 43 [ 786.850563][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 786.868442][ T28] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 787.321016][ T6883] netlink: 'syz.2.9394': attribute type 21 has an invalid length. [ 787.339487][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9394'. [ 787.572096][ T6899] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0) [ 787.811940][ T28] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 788.001993][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 788.023633][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 788.036994][ T28] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 788.059379][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.081448][ T28] usb 1-1: config 0 descriptor?? [ 788.082404][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9405'. [ 788.093953][ T28] pegasus_notetaker: probe of 1-1:0.0 failed with error -22 [ 788.350690][T22922] usb 1-1: USB disconnect, device number 43 [ 788.851421][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9419'. [ 789.538215][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9428'. [ 789.680732][ T7016] ALSA: mixer_oss: invalid OSS volume '' [ 789.712038][ T7020] sctp: [Deprecated]: syz.2.9432 (pid 7020) Use of struct sctp_assoc_value in delayed_ack socket option. [ 789.712038][ T7020] Use struct sctp_sack_info instead [ 789.802288][ T5852] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 789.978378][ T7029] netlink: 'syz.3.9435': attribute type 8 has an invalid length. [ 790.032034][ T5852] usb 2-1: Using ep0 maxpacket: 32 [ 790.041267][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.056711][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.092473][ T5852] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 790.101614][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.138024][ T6987] loop0: detected capacity change from 0 to 40427 [ 790.152857][ T5852] usb 2-1: config 0 descriptor?? [ 790.173679][ T7034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9436'. [ 790.175909][ T6987] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 790.194029][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9437'. [ 790.194088][ T5852] hub 2-1:0.0: USB hub found [ 790.209747][ T7034] unsupported nlmsg_type 40 [ 790.227899][ T6987] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 790.240750][ T6987] F2FS-fs (loop0): build fault injection attr: rate: 18446, type: 0x7ffff [ 790.258844][ T6987] F2FS-fs (loop0): invalid crc value [ 790.290004][ T6987] F2FS-fs (loop0): Found nat_bits in checkpoint [ 790.370535][ T5852] hub 2-1:0.0: config failed, hub has too many ports! (err -19) [ 790.432645][ T6987] F2FS-fs (loop0): Start checkpoint disabled! [ 790.466341][ T6987] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 790.486566][ T6987] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 790.595895][ T5852] usbhid 2-1:0.0: can't add hid device: -71 [ 790.621931][ T5852] usbhid: probe of 2-1:0.0 failed with error -71 [ 790.694592][ T5852] usb 2-1: USB disconnect, device number 34 [ 790.859909][ T42] kworker/u4:2: attempt to access beyond end of device [ 790.859909][ T42] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 790.916044][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 790.924986][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 792.721542][ T27] audit: type=1326 audit(2000000677.490:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.3.9466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecaed8f749 code=0x7ffc0000 [ 792.787178][ T27] audit: type=1326 audit(2000000677.490:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.3.9466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecaed8f749 code=0x7ffc0000 [ 792.852903][ T27] audit: type=1326 audit(2000000677.490:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.3.9466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fecaed8f749 code=0x7ffc0000 [ 792.916718][ T27] audit: type=1326 audit(2000000677.490:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7152 comm="syz.3.9466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecaed8f749 code=0x7ffc0000 [ 792.971810][ T5877] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 793.149219][ T7167] loop0: detected capacity change from 0 to 4096 [ 793.184952][ T7167] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 793.205135][ T5877] usb 3-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 793.226578][ T5877] usb 3-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid maxpacket 65278, setting to 1024 [ 793.261909][ T5877] usb 3-1: config 0 interface 0 altsetting 60 bulk endpoint 0xD has invalid maxpacket 1024 [ 793.307051][ T7180] loop1: detected capacity change from 0 to 16 [ 793.323054][ T5877] usb 3-1: config 0 interface 0 has no altsetting 0 [ 793.329801][ T5877] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 793.371138][ T7180] erofs: (device loop1): mounted with root inode @ nid 36. [ 793.380436][ T7167] ntfs3: loop0: ino=1e, "file1" ntfs3_write_inode failed, -22. [ 793.396067][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.432657][ T5877] usb 3-1: config 0 descriptor?? [ 793.451525][ T7136] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 793.473178][ T7180] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 793.579356][ T7180] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851] [ 793.659112][ T7180] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 793.707553][ T5877] usb 3-1: string descriptor 0 read error: -71 [ 793.730450][ T5877] usb 3-1: ucan: probing device on interface #0 [ 793.759734][ T5877] usb 3-1: ucan: invalid endpoint configuration [ 793.776825][ T5877] usb 3-1: ucan: probe failed; try to update the device firmware [ 793.826309][ T5877] usb 3-1: USB disconnect, device number 42 [ 795.621343][ T7229] loop3: detected capacity change from 0 to 40427 [ 795.671339][ T7229] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 795.689933][ T7280] loop0: detected capacity change from 0 to 4096 [ 795.712115][ T7229] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 795.745690][ T7280] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 795.800058][ T7229] F2FS-fs (loop3): Found nat_bits in checkpoint [ 795.858432][ T7280] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 796.113710][ T7229] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 796.120831][ T7229] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 796.311799][T22922] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 796.511859][T22922] usb 2-1: Using ep0 maxpacket: 8 [ 796.538035][T22922] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 796.561333][T22922] usb 2-1: config 179 has no interface number 0 [ 796.578872][T22922] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 796.610392][ T7315] loop0: detected capacity change from 0 to 4096 [ 796.621727][T22922] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 796.645620][T22922] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 796.657929][ T7315] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 796.684458][ T7315] ntfs3: loop0: It is recommened to use chkdsk. [ 796.692287][T22922] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 796.740600][T22922] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 796.792263][T22922] usb 2-1: config 179 interface 65 has no altsetting 0 [ 796.799327][T22922] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 796.831997][T22922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.924942][T22922] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input50 [ 797.042216][ T5144] input input50: unable to receive magic message: -110 [ 797.089611][ T5144] input input50: unable to receive magic message: -32 [ 797.134569][ T7406] input input50: unable to receive magic message: -32 [ 797.162121][ T5144] input input50: unable to receive magic message: -32 [ 797.203043][ T5144] input input50: unable to receive magic message: -32 [ 797.239955][ T5144] input input50: unable to receive magic message: -32 [ 797.299517][ T7343] loop0: detected capacity change from 0 to 4096 [ 797.334461][ T7343] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 797.357398][ T786] usb 2-1: USB disconnect, device number 35 [ 797.357561][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 797.375528][ T786] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 797.445119][ T7343] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 798.015870][ T7378] loop3: detected capacity change from 0 to 8 [ 798.830553][ T7422] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9524'. [ 798.928939][ T7429] IPVS: set_ctl: invalid protocol: 8 172.30.0.2:20002 [ 799.632374][ T7462] netlink: 'syz.1.9536': attribute type 11 has an invalid length. [ 799.640357][ T7462] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.9536'. [ 799.691010][ T7468] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9539'. [ 800.490310][ T7513] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 800.746853][ T7522] loop1: detected capacity change from 0 to 256 [ 801.119028][ T7531] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 801.332936][ T7540] xt_TPROXY: Can be used only with -p tcp or -p udp [ 801.399884][ C1] sd 0:0:1:0: [sda] tag#5952 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 801.410447][ C1] sd 0:0:1:0: [sda] tag#5952 CDB: Read(6) 08 00 00 00 03 44 [ 801.892712][ T7565] xt_l2tp: v2 doesn't support IP mode [ 802.381916][ T786] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 802.382312][ T7552] loop0: detected capacity change from 0 to 32768 [ 802.436253][ T7595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9577'. [ 802.437922][ T7552] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 802.445508][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9577'. [ 802.470720][ T7595] ip6gretap2: entered allmulticast mode [ 802.493035][ T7552] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 802.593494][ T786] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 802.612347][ T786] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 802.630038][ T786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 802.639482][ T786] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 802.651685][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 802.668468][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 135, setting to 8 [ 802.680139][ T786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 802.709275][ T7552] XFS (loop0): Ending clean mount [ 802.736701][ T786] usb 4-1: string descriptor 0 read error: -22 [ 802.746482][ T7552] XFS (loop0): Quotacheck needed: Please wait. [ 802.752240][ T786] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 802.781043][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.840493][ T786] usb 4-1: config 0 descriptor?? [ 802.879850][ T7577] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 802.895744][ T786] hub 4-1:0.0: bad descriptor, ignoring hub [ 802.909423][ T7552] XFS (loop0): Quotacheck: Done. [ 802.911853][ T786] hub: probe of 4-1:0.0 failed with error -5 [ 802.935570][ T786] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input51 [ 803.178729][ T5790] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 803.381800][ T5852] usb 4-1: USB disconnect, device number 44 [ 803.963936][ T7650] bond5: entered promiscuous mode [ 803.969069][ T7650] bond5: entered allmulticast mode [ 803.974820][ T7650] 8021q: adding VLAN 0 to HW filter on device bond5 [ 804.043093][ T27] audit: type=1326 audit(2000000688.820:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.0.9587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2a58f749 code=0x7ffc0000 [ 804.065382][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.072336][ T27] audit: type=1326 audit(2000000688.820:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.0.9587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2a58f749 code=0x7ffc0000 [ 804.101897][ T27] audit: type=1326 audit(2000000688.820:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.0.9587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f6a2a58f749 code=0x7ffc0000 [ 804.181550][ T27] audit: type=1326 audit(2000000688.820:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.0.9587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2a58f749 code=0x7ffc0000 [ 804.248637][ T27] audit: type=1326 audit(2000000688.820:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.0.9587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2a58f749 code=0x7ffc0000 [ 804.322067][ T27] audit: type=1326 audit(2000000688.990:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.3.9588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecaed8f749 code=0x0 [ 804.432575][ T7701] loop3: detected capacity change from 0 to 16 [ 804.456879][ T7701] erofs: (device loop3): mounted with root inode @ nid 36. [ 804.737708][ T7716] usb usb8: usbfs: process 7716 (syz.3.9596) did not claim interface 0 before use [ 804.904990][ T7726] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.9599'. [ 804.978516][ T7729] kAFS: unparsable volume name [ 805.099644][ T7736] binder: 7735:7736 ioctl c0306201 200000000080 returned -14 [ 805.367776][ T7751] tmpfs: Bad value for 'mpol' [ 806.410425][ T7808] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9626'. [ 806.431570][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9626'. [ 806.463546][ T7808] netlink: 31 bytes leftover after parsing attributes in process `syz.0.9626'. [ 806.503381][ T7808] netlink: 'syz.0.9626': attribute type 3 has an invalid length. [ 806.538127][ T7808] netlink: 'syz.0.9626': attribute type 2 has an invalid length. [ 806.557984][ T7808] netlink: 31 bytes leftover after parsing attributes in process `syz.0.9626'. [ 806.927666][ T7829] loop0: detected capacity change from 0 to 256 [ 806.973511][ T7829] FAT-fs (loop0): Directory bread(block 1285) failed [ 807.024371][ T7829] FAT-fs (loop0): Directory bread(block 1285) failed [ 807.049867][ T7829] FAT-fs (loop0): Directory bread(block 1285) failed [ 807.077660][ T7829] FAT-fs (loop0): Directory bread(block 1285) failed [ 807.167453][ T7835] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9634'. [ 807.180621][ T7835] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 807.432062][ T7848] team_slave_1: entered promiscuous mode [ 807.885540][ T7874] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 808.346958][ T7900] loop3: detected capacity change from 0 to 512 [ 808.429397][ T7900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.473315][ T7900] ext4 filesystem being mounted at /2382/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 808.697962][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.162637][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.739760][ T7922] loop1: detected capacity change from 0 to 32768 [ 810.453815][ T7997] netlink: 'syz.3.9684': attribute type 3 has an invalid length. [ 811.881821][ T787] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 812.033401][ T8076] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.9709'. [ 812.072287][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 812.084868][ T787] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 812.122597][ T787] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 812.144126][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 812.155194][ T787] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 812.172633][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.186637][ T787] usb 3-1: Product: syz [ 812.190880][ T787] usb 3-1: Manufacturer: syz [ 812.212303][ T787] usb 3-1: SerialNumber: syz [ 812.261978][ T787] usb 3-1: config 0 descriptor?? [ 812.283323][ T787] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 812.528649][ T787] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 812.551015][ T787] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 812.612218][ T787] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 812.791059][ T787] usb 3-1: USB disconnect, device number 43 [ 813.012632][ T8128] loop0: detected capacity change from 0 to 512 [ 813.027869][ T8128] EXT4-fs: Ignoring removed oldalloc option [ 813.057385][ T8128] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 813.097741][ T8128] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.9724: invalid indirect mapped block 4294967295 (level 0) [ 813.122283][ T8128] EXT4-fs (loop0): Remounting filesystem read-only [ 813.129813][ T8128] EXT4-fs (loop0): 1 orphan inode deleted [ 813.143253][ T8128] EXT4-fs (loop0): 1 truncate cleaned up [ 813.150857][ T8128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.315071][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.768355][ T8152] netlink: 'syz.2.9728': attribute type 9 has an invalid length. [ 813.778246][ T8148] loop0: detected capacity change from 0 to 4096 [ 813.781295][ T8129] loop3: detected capacity change from 0 to 32768 [ 813.798254][ T8152] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.9728'. [ 813.830430][ T8148] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 813.868067][ T8129] ERROR: (device loop3): diAllocBit: iag inconsistent [ 813.868067][ T8129] [ 813.911567][ T8129] ERROR: (device loop3): remounting filesystem as read-only [ 813.928138][ T8129] ialloc: diAlloc returned -5! [ 813.954630][ T8148] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 814.284244][ T8168] loop3: detected capacity change from 0 to 1024 [ 814.316710][ T8168] EXT4-fs: Ignoring removed bh option [ 814.413394][ T8168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.684138][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.733640][ T8195] netlink: 'syz.0.9739': attribute type 64 has an invalid length. [ 814.774719][ T8195] netlink: 'syz.0.9739': attribute type 4 has an invalid length. [ 814.811501][ T8195] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9739'. [ 814.888152][ T8200] netlink: 'syz.3.9740': attribute type 3 has an invalid length. [ 815.364372][ T8226] loop0: detected capacity change from 0 to 64 [ 815.399165][ T8226] MINIX-fs: mounting file system with errors, running fsck is recommended [ 815.634885][ T8238] netlink: 'syz.3.9753': attribute type 1 has an invalid length. [ 815.644345][ T8238] netlink: 10916 bytes leftover after parsing attributes in process `syz.3.9753'. [ 815.650599][ T8228] loop1: detected capacity change from 0 to 4096 [ 815.881498][ T8250] 9pnet_virtio: no channels available for device syz [ 816.730056][ T8286] __vm_enough_memory: pid: 8286, comm: syz.1.9766, not enough memory for the allocation [ 816.940253][ T8292] Timeout policy `syz1' can only be used by L3 protocol number 35067 [ 817.126072][ T8264] loop0: detected capacity change from 0 to 32768 [ 817.173389][ T8264] (syz.0.9761,8264,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 817.233125][ T8264] (syz.0.9761,8264,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 817.260737][ T8308] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9772'. [ 817.297524][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9772'. [ 817.307130][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9772'. [ 817.309621][ T8264] JBD2: Ignoring recovery information on journal [ 817.415168][ T8316] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 817.554220][ T8264] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 817.722699][ T8264] [ 817.725109][ T8264] ====================================================== [ 817.732202][ T8264] WARNING: possible circular locking dependency detected [ 817.739261][ T8264] syzkaller #0 Not tainted [ 817.743794][ T8264] ------------------------------------------------------ [ 817.750839][ T8264] syz.0.9761/8264 is trying to acquire lock: [ 817.756849][ T8264] ffff888059025be0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 817.768485][ T8264] [ 817.768485][ T8264] but task is already holding lock: [ 817.775887][ T8264] ffff888059025c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 817.786606][ T8264] [ 817.786606][ T8264] which lock already depends on the new lock. [ 817.786606][ T8264] [ 817.797129][ T8264] [ 817.797129][ T8264] the existing dependency chain (in reverse order) is: [ 817.799272][ T8329] futex_wake_op: syz.3.9779 tries to shift op by 32; fix this program [ 817.806151][ T8264] [ 817.806151][ T8264] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 817.806186][ T8264] down_read+0x46/0x2e0 [ 817.826878][ T8264] ocfs2_init_acl+0x2fa/0x720 [ 817.832128][ T8264] ocfs2_mknod+0x12e5/0x20f0 [ 817.837279][ T8264] vfs_mknod+0x32b/0x360 [ 817.842090][ T8264] do_mknodat+0x37e/0x4f0 [ 817.846983][ T8264] __x64_sys_mknod+0x8e/0xa0 [ 817.852145][ T8264] do_syscall_64+0x55/0xb0 [ 817.857131][ T8264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 817.863598][ T8264] [ 817.863598][ T8264] -> #3 (jbd2_handle){++++}-{0:0}: [ 817.870970][ T8264] start_this_handle+0x1e9d/0x20c0 [ 817.876663][ T8264] jbd2__journal_start+0x2bb/0x5b0 [ 817.882334][ T8264] jbd2_journal_start+0x2a/0x40 [ 817.887746][ T8264] ocfs2_start_trans+0x376/0x6c0 [ 817.893266][ T8264] ocfs2_modify_bh+0xe9/0x470 [ 817.898507][ T8264] ocfs2_local_read_info+0x13fd/0x1770 [ 817.904531][ T8264] dquot_load_quota_sb+0x757/0xb80 [ 817.910214][ T8264] dquot_load_quota_inode+0x2dc/0x5d0 [ 817.916154][ T8264] ocfs2_enable_quotas+0x1c7/0x440 [ 817.921829][ T8264] ocfs2_fill_super+0x3f6d/0x4d90 [ 817.927412][ T8264] mount_bdev+0x22b/0x2d0 [ 817.932303][ T8264] legacy_get_tree+0xea/0x180 [ 817.937546][ T8264] vfs_get_tree+0x8c/0x280 [ 817.942524][ T8264] do_new_mount+0x24b/0xa40 [ 817.947594][ T8264] __se_sys_mount+0x2da/0x3c0 [ 817.952832][ T8264] do_syscall_64+0x55/0xb0 [ 817.957820][ T8264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 817.964276][ T8264] [ 817.964276][ T8264] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 817.972841][ T8264] down_read+0x46/0x2e0 [ 817.977585][ T8264] ocfs2_start_trans+0x36a/0x6c0 [ 817.983184][ T8264] ocfs2_modify_bh+0xe9/0x470 [ 817.988422][ T8264] ocfs2_local_read_info+0x13fd/0x1770 [ 817.994531][ T8264] dquot_load_quota_sb+0x757/0xb80 [ 818.000246][ T8264] dquot_load_quota_inode+0x2dc/0x5d0 [ 818.006274][ T8264] ocfs2_enable_quotas+0x1c7/0x440 [ 818.011949][ T8264] ocfs2_fill_super+0x3f6d/0x4d90 [ 818.017724][ T8264] mount_bdev+0x22b/0x2d0 [ 818.022628][ T8264] legacy_get_tree+0xea/0x180 [ 818.027967][ T8264] vfs_get_tree+0x8c/0x280 [ 818.032958][ T8264] do_new_mount+0x24b/0xa40 [ 818.038105][ T8264] __se_sys_mount+0x2da/0x3c0 [ 818.043356][ T8264] do_syscall_64+0x55/0xb0 [ 818.048350][ T8264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.054810][ T8264] [ 818.054810][ T8264] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 818.062341][ T8264] ocfs2_start_trans+0x26b/0x6c0 [ 818.067856][ T8264] ocfs2_setattr+0x102f/0x1b20 [ 818.073192][ T8264] notify_change+0xb0d/0xe10 [ 818.078346][ T8264] chown_common+0x3f9/0x5a0 [ 818.083413][ T8264] do_fchownat+0x168/0x270 [ 818.088390][ T8264] __x64_sys_lchown+0x85/0x90 [ 818.093628][ T8264] do_syscall_64+0x55/0xb0 [ 818.098609][ T8264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.105062][ T8264] [ 818.105062][ T8264] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 818.113888][ T8264] __lock_acquire+0x2ddb/0x7c80 [ 818.119319][ T8264] lock_acquire+0x197/0x410 [ 818.124385][ T8264] down_write+0x97/0x1f0 [ 818.129205][ T8264] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 818.135755][ T8264] ocfs2_xattr_set+0x596/0x11f0 [ 818.141175][ T8264] ocfs2_set_acl+0x4e1/0x590 [ 818.146339][ T8264] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 818.151856][ T8264] vfs_remove_acl+0x4e3/0x740 [ 818.157107][ T8264] path_removexattr+0x23b/0x3f0 [ 818.162530][ T8264] __x64_sys_removexattr+0x60/0x70 [ 818.168215][ T8264] do_syscall_64+0x55/0xb0 [ 818.173203][ T8264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.179664][ T8264] [ 818.179664][ T8264] other info that might help us debug this: [ 818.179664][ T8264] [ 818.189924][ T8264] Chain exists of: [ 818.189924][ T8264] &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem [ 818.189924][ T8264] [ 818.203978][ T8264] Possible unsafe locking scenario: [ 818.203978][ T8264] [ 818.211468][ T8264] CPU0 CPU1 [ 818.216864][ T8264] ---- ---- [ 818.222270][ T8264] lock(&oi->ip_xattr_sem); [ 818.226898][ T8264] lock(jbd2_handle); [ 818.233521][ T8264] lock(&oi->ip_xattr_sem); [ 818.240666][ T8264] lock(&ocfs2_file_ip_alloc_sem_key); [ 818.246244][ T8264] [ 818.246244][ T8264] *** DEADLOCK *** [ 818.246244][ T8264] [ 818.254416][ T8264] 3 locks held by syz.0.9761/8264: [ 818.259646][ T8264] #0: ffff88807dab8418 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 818.269046][ T8264] #1: ffff888059025f58 (&type->i_mutex_dir_key#28){++++}-{3:3}, at: vfs_remove_acl+0xf4/0x740 [ 818.279478][ T8264] #2: ffff888059025c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 818.290599][ T8264] [ 818.290599][ T8264] stack backtrace: [ 818.296522][ T8264] CPU: 1 PID: 8264 Comm: syz.0.9761 Not tainted syzkaller #0 [ 818.303935][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 818.314211][ T8264] Call Trace: [ 818.317574][ T8264] [ 818.320545][ T8264] dump_stack_lvl+0x16c/0x230 [ 818.325280][ T8264] ? load_image+0x3b0/0x3b0 [ 818.329832][ T8264] ? show_regs_print_info+0x20/0x20 [ 818.335081][ T8264] ? print_circular_bug+0x12b/0x1a0 [ 818.340418][ T8264] check_noncircular+0x2bd/0x3c0 [ 818.345420][ T8264] ? look_up_lock_class+0x75/0x140 [ 818.350606][ T8264] ? print_deadlock_bug+0x5d0/0x5d0 [ 818.355855][ T8264] ? lockdep_lock+0xe0/0x220 [ 818.360492][ T8264] ? _find_first_zero_bit+0xd3/0x100 [ 818.365863][ T8264] __lock_acquire+0x2ddb/0x7c80 [ 818.370781][ T8264] ? verify_lock_unused+0x140/0x140 [ 818.376048][ T8264] ? verify_lock_unused+0x140/0x140 [ 818.381300][ T8264] lock_acquire+0x197/0x410 [ 818.385849][ T8264] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 818.392062][ T8264] ? __might_sleep+0xe0/0xe0 [ 818.396697][ T8264] ? read_lock_is_recursive+0x20/0x20 [ 818.402220][ T8264] down_write+0x97/0x1f0 [ 818.406523][ T8264] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 818.412725][ T8264] ? down_read_killable+0x340/0x340 [ 818.417981][ T8264] ? ocfs2_xattr_set+0x56f/0x11f0 [ 818.423041][ T8264] ? __lock_acquire+0x7c80/0x7c80 [ 818.428099][ T8264] ? ocfs2_xattr_block_find+0x154/0x4c0 [ 818.433691][ T8264] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 818.439723][ T8264] ? ocfs2_remove_refcount_tree+0xd50/0xd50 [ 818.445761][ T8264] ? up_write+0x1c3/0x410 [ 818.450139][ T8264] ocfs2_xattr_set+0x596/0x11f0 [ 818.455052][ T8264] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 818.460814][ T8264] ? mark_lock+0x94/0x320 [ 818.465188][ T8264] ? __lock_acquire+0x1334/0x7c80 [ 818.470267][ T8264] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 818.476040][ T8264] ? do_raw_spin_lock+0x121/0x2c0 [ 818.481125][ T8264] ? __rwlock_init+0x150/0x150 [ 818.485940][ T8264] ? do_raw_spin_unlock+0x121/0x230 [ 818.491188][ T8264] ? _raw_spin_unlock+0x28/0x40 [ 818.496073][ T8264] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 818.501816][ T8264] ? verify_lock_unused+0x140/0x140 [ 818.507028][ T8264] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 818.512585][ T8264] ocfs2_set_acl+0x4e1/0x590 [ 818.517198][ T8264] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 818.522209][ T8264] ? read_lock_is_recursive+0x20/0x20 [ 818.527610][ T8264] ? ocfs2_xattr_get+0x220/0x220 [ 818.532602][ T8264] ? evm_inode_set_acl+0xbb/0x410 [ 818.537663][ T8264] ? __mnt_want_write+0x68/0x2a0 [ 818.542655][ T8264] ? down_write+0x162/0x1f0 [ 818.547179][ T8264] ? down_read_killable+0x340/0x340 [ 818.552395][ T8264] ? evm_revalidate_status+0x4f/0xb0 [ 818.557706][ T8264] ? make_vfsuid+0x51/0xb0 [ 818.562158][ T8264] ? inode_owner_or_capable+0xf0/0x1c0 [ 818.567655][ T8264] vfs_remove_acl+0x4e3/0x740 [ 818.572377][ T8264] path_removexattr+0x23b/0x3f0 [ 818.577250][ T8264] ? listxattr+0x280/0x280 [ 818.581687][ T8264] ? do_futex+0x2ff/0x3e0 [ 818.586074][ T8264] ? lock_chain_count+0x20/0x20 [ 818.590946][ T8264] ? syscall_enter_from_user_mode+0x25/0x80 [ 818.596853][ T8264] __x64_sys_removexattr+0x60/0x70 [ 818.602003][ T8264] do_syscall_64+0x55/0xb0 [ 818.606437][ T8264] ? clear_bhb_loop+0x40/0x90 [ 818.611140][ T8264] ? clear_bhb_loop+0x40/0x90 [ 818.615835][ T8264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.621825][ T8264] RIP: 0033:0x7f6a2a58f749 [ 818.626245][ T8264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.645889][ T8264] RSP: 002b:00007f6a2b428038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 818.654320][ T8264] RAX: ffffffffffffffda RBX: 00007f6a2a7e5fa0 RCX: 00007f6a2a58f749 [ 818.662309][ T8264] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000200000000580 [ 818.670304][ T8264] RBP: 00007f6a2a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 818.678444][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.686428][ T8264] R13: 00007f6a2a7e6038 R14: 00007f6a2a7e5fa0 R15: 00007ffc71a41038 [ 818.694421][ T8264] [ 818.769498][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 819.391911][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!