last executing test programs: 6m9.27740132s ago: executing program 1 (id=11384): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080), 0x4) 6m9.158899731s ago: executing program 1 (id=11385): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x8, 0x2, 0x2, "07f500e1b0faa9b0070000000000000000000000000000000000d800", 0x20323159}) 6m8.935115625s ago: executing program 1 (id=11389): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000019c0)={&(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4000000) 6m8.750233407s ago: executing program 1 (id=11393): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000019c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000304,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=cp1251,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,fmask=00000000000000000000005,allow_utime=0000000000000002\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x152a, &(0x7f0000000340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 6m8.399042502s ago: executing program 1 (id=11398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20004000) 6m7.85524962s ago: executing program 1 (id=11408): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) 6m7.455754865s ago: executing program 32 (id=11408): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) 2m21.991338836s ago: executing program 3 (id=14590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) 2m21.450883184s ago: executing program 3 (id=14598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b000100736f636b657400001c000280080001400000000b080002400000000b08000300000000230900010073797a30"], 0xcc}}, 0x0) 2m21.177574118s ago: executing program 3 (id=14604): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) get_mempolicy(0x0, &(0x7f0000000800), 0xdaf, &(0x7f0000ffc000/0x4000)=nil, 0xc) 2m20.99703966s ago: executing program 3 (id=14608): r0 = socket(0x11, 0x2, 0x0) getsockopt$nfc_llcp(r0, 0x107, 0x0, 0x0, 0xffffffffffffff06) 2m20.741133954s ago: executing program 3 (id=14612): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m19.701120439s ago: executing program 3 (id=14623): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000), 0x8) 2m5.282154385s ago: executing program 33 (id=14623): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000), 0x8) 1m18.48788158s ago: executing program 6 (id=15505): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f00000002c0)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\b\x00\x00\x00\x00\x00\x00\x00MQ9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xcb\xab\xf70\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\x04\x95\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x01\x00\x00\x00\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1e\x00\x00c\xc5ke_\xa7\x11\"\x04\xd8.\xd1\x0e\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6r\xee\f\xc7\xd8\xdf\xef\xf7\x9c\x1a\x91O\xcc\x8am\x8b3.5\x89tm[7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o[\xb7\xa0\x03\xcc)7]\xdf\x9a\xd9', 0x0) 1m18.119850435s ago: executing program 6 (id=15511): r0 = eventfd(0x0) fgetxattr(r0, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) 1m17.863998169s ago: executing program 6 (id=15516): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getegid() 1m17.73392521s ago: executing program 6 (id=15518): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m17.309360296s ago: executing program 6 (id=15526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x20000000) 1m17.07349283s ago: executing program 6 (id=15529): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 1m2.700126763s ago: executing program 34 (id=15529): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 35.945371191s ago: executing program 0 (id=16066): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @local}, {0x2, 0x4, @empty}, {0x2, 0x0, @private}, 0x7e}) 35.705168974s ago: executing program 0 (id=16070): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000004800efff2dbd7000ffdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="000400000800020006000000140001"], 0x38}}, 0x0) 35.391924399s ago: executing program 0 (id=16074): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008aec1, &(0x7f00000000c0)=""/8) 35.190977952s ago: executing program 0 (id=16077): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031302c757466382c666d61736b3d30303030303030303030303030303030303030303030362c6572726f72733d636f6e74696e75652c7379735f747a2c616c6c6f775f7574696d653d30303030303030303030303030303030303134373036342c00968868822eaa4073da2a8bad3e75bf3fa58e5fe9023e2efe14b61e42154e792855b9c44517fcaf42990fa252a8fcc76df45041b88e383db02cc075636a6b415c49ee2ad1af7ecfc73f3809bce1541b2c780705cdd96cfb760a1f342582ee152abbe3f5828666937a000000800f62dc427b22ae7bd20a2fb9094ffaf7b7eda15af87283045448d6cabb51f8a411539d39a9d6db38d1409fe568885e22b71e7a4823804f8c350397801bc23742343cecb0758cec6286312c4d"], 0x1, 0x1545, &(0x7f0000001a00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 34.57790458s ago: executing program 0 (id=16085): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newlink={0x4c, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}]}}}]}, 0x4c}}, 0x0) 33.957634229s ago: executing program 0 (id=16093): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x808082, &(0x7f0000000200), 0xfe, 0x480, &(0x7f00000004c0)="$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") open(&(0x7f00000001c0)='./file0\x00', 0x2a4c0, 0x918d8ecf0d5d0600) 33.263404939s ago: executing program 35 (id=16093): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x808082, &(0x7f0000000200), 0xfe, 0x480, &(0x7f00000004c0)="$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") open(&(0x7f00000001c0)='./file0\x00', 0x2a4c0, 0x918d8ecf0d5d0600) 2.405318996s ago: executing program 4 (id=16404): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001040)=@filter={'filter\x00', 0xe, 0x3, 0x90, [0x0, 0x200000001300, 0x200000001330, 0x20000000147e], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x108) 2.119722271s ago: executing program 4 (id=16410): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x203, 0x0) 1.831104404s ago: executing program 8 (id=16415): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000000)={'bond0\x00', @ifru_addrs=@qipcrtr={0x2a, 0x4, 0x7fff}}) 1.669623207s ago: executing program 7 (id=16417): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="000404000000000900000000000000000600000000000000ff0100"], 0x28) 1.580389708s ago: executing program 8 (id=16418): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) 1.543557328s ago: executing program 2 (id=16419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) 1.467097909s ago: executing program 7 (id=16420): r0 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, 0x0) 1.44287713s ago: executing program 5 (id=16421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7f) 1.380074911s ago: executing program 8 (id=16422): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000000c0)=ANY=[], 0x80, 0x1503, &(0x7f0000000580)="$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") chmod(&(0x7f0000000080)='./file0\x00', 0x157) 1.308404732s ago: executing program 2 (id=16423): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x8, 0x0, &(0x7f0000bbdffc)) 1.234697303s ago: executing program 7 (id=16424): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x14, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f00000001c0), &(0x7f00000006c0)}, 0x20) 1.179983844s ago: executing program 5 (id=16425): r0 = syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) 1.138106444s ago: executing program 4 (id=16426): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000280)={[{@file_umask={'file_umask', 0x3d, 0x7}}, {@codepage={'codepage', 0x3d, 'maccyrillic'}}, {@file_umask}]}, 0xfd, 0x2f2, &(0x7f0000000300)="$eJzs3c1u00oYxvFnnOQ0/VCPT9sjJDagQiXYVHwtEJsglC17VojSpFLVqBVtkaAbCkKsEFsk9twCF8EGxA3AihUX0J3RTGzHbh2nQXHc0v9PamSPPeN3Yk88ryWwAJxZ95rfP978af+MVFFF0h3Jk1SXqpL+17n6083d9d1Ou5XdhHGfFVfD/tn1alyetLrZzmrA1nM1Qr5dq2omWYZiBEFw90fZQaB0bvRn8KSJcBy67fUxx1WUfelC2TGMW/IEmwMd6JlmSwwHAHAChPd/L7xNzLgiI8+TlsLbfnT/98qOdRQOyg5gtG51jhQFuRUS9383uwuMPb//uk29fM+lcHa7F2WJxwmmdmj9H3WvrNQE0wzIKruxeJNr61Utr75Uy9MrNUKJ3RbcZyt9WQ6IdjEjN01Hm9K/tZruT3V742aUh0Uhra132hN2ISP++awYhvm2h2U+m6/mofH1Qa14/lcNjO2467t/6Ex5NRv/tf4tTrtadi+FaX+j0Uj/SvznDnI+/e0O6GU9OyNJthk9INiPI8iL0x17TunHCt3eXR9Qaz6rlh+v9am1kKjV7Y091vLqVqffRV+gqIvmnXlgFvVLn9RMzP89G9+SEiMzL9Uzbs/wyuj25+i4capuT/9I5tgbLhfjCEITQ/cN0pBPy97qsW5rduf53kal02lv24WVjIUnM9smLKm9ljL3KX6hopx9tN8rCawXQXDcloMig7860gbt70dcYodPah87evY2Vuwoi2t54z5NZ2Wh+UV5F+TpWQgCqc+mwn6ncILsmOiku9WqJsuOCGNm7xxm601vvTurcymS/fBz5un5SWaUG4Rz7DiDS08F59zn1FAZ3HT/DC5xxBt9ckaXc126Il1OFBrlHtEP4/xLmKa+6RHP/wEAAAAAAAAAAAAAAAAAAE6bkf+7gvdhw4lNJXcRAAAAAAAAAAAAAAAAAAAAAIBT74/e/5v1f8S79//6o3n/b/Q2Jd7/CxTqdwAAAP//qbF0lw==") open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81000) 1.016203956s ago: executing program 2 (id=16427): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={0x0, 0x84f0, 0x80000}) 911.879878ms ago: executing program 7 (id=16428): r0 = socket(0x22, 0x2, 0x4) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) 900.013088ms ago: executing program 8 (id=16429): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b80)=@broute={'broute\x00', 0x30, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200002c0, 0x20000574], 0x0, 0x0, &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0xfeffff07, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x108) 895.636688ms ago: executing program 5 (id=16430): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x4e22, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x1, 0x32}, @in=@local, {0x8, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xffffffff}, {0x0, 0xfffffffffffffffc, 0x1, 0x2}, {0x10000}, 0x70bd29, 0x0, 0xa, 0x0, 0x0, 0x5}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in6=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x5e21, 0x0, @in6=@private1}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 736.70123ms ago: executing program 2 (id=16431): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e24, @multicast2}], 0x10) 688.052601ms ago: executing program 4 (id=16432): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000004800010300000000000000000a006000", @ANYRES32=r0, @ANYBLOB="0000000008000200ff0bffff140001"], 0x38}}, 0x0) 644.726401ms ago: executing program 7 (id=16433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 525.744023ms ago: executing program 8 (id=16434): r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0xb], [{0xfffffffd, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffb}, {}, {0x4, 0xfffffffe}, {}, {}, {0x7}, {}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x10}) 525.263903ms ago: executing program 5 (id=16435): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000019ffffff0000000000000000180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0xfed, &(0x7f0000001e00)=""/4077, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 444.188174ms ago: executing program 2 (id=16436): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, 0xa) 408.473114ms ago: executing program 4 (id=16437): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) 299.775736ms ago: executing program 7 (id=16438): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=[{0x10, 0x29, 0x2}], 0x10}}], 0x2, 0x0) 251.442617ms ago: executing program 5 (id=16439): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006bab9e3fe3d86e17aa31026b876c1d0000007ea60847160af36504000a0038001d000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4930400e7861000bdd7fcf50ea1e190b4714751d0c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8800) 229.251847ms ago: executing program 8 (id=16440): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040)=0x5, 0x4) 115.935459ms ago: executing program 2 (id=16441): pipe2(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mq_getsetattr(r0, 0x0, 0x0) 105.166789ms ago: executing program 4 (id=16442): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @p_u32=0x0}}) 0s ago: executing program 5 (id=16443): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r0, 0x5429, 0x0) kernel console output (not intermixed with test programs): an invalid length. [ 1541.647255][ T5909] netlink: 'syz.6.15045': attribute type 3 has an invalid length. [ 1541.664894][ T5909] netlink: 'syz.6.15045': attribute type 3 has an invalid length. [ 1541.726370][ T5909] netlink: 'syz.6.15045': attribute type 3 has an invalid length. [ 1541.760213][ T5909] netlink: 'syz.6.15045': attribute type 3 has an invalid length. [ 1541.809664][ T5909] netlink: 'syz.6.15045': attribute type 3 has an invalid length. [ 1541.817592][ T5909] netlink: 'syz.6.15045': attribute type 3 has an invalid length. [ 1541.838362][ T5916] x_tables: unsorted underflow at hook 3 [ 1542.202574][ T5923] kAFS: unparsable volume name [ 1542.487023][ T5897] loop4: detected capacity change from 0 to 32768 [ 1542.556427][ T5897] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.15040 (5897) [ 1542.657293][ T5897] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1542.700478][ T5897] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1542.735657][ T5897] BTRFS info (device loop4): using free space tree [ 1543.123541][ T5897] BTRFS info (device loop4): enabling ssd optimizations [ 1543.191529][ T26] audit: type=1326 audit(1558.245:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.5.15065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1543.273283][ T26] audit: type=1326 audit(1558.256:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.5.15065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1543.371818][ T5983] cgroup: name respecified [ 1543.397743][ T4304] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1543.408421][ T26] audit: type=1326 audit(1558.256:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.5.15065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1543.518738][ T26] audit: type=1326 audit(1558.256:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5979 comm="syz.5.15065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1544.398458][ T6004] xt_CT: No such helper "pptp" [ 1544.444258][ T6012] loop2: detected capacity change from 0 to 256 [ 1544.887423][ T6024] loop4: detected capacity change from 0 to 1024 [ 1545.012522][ T6024] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 1545.078027][ T6024] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1545.088240][ T6024] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.15083: Failed to acquire dquot type 0 [ 1545.174373][ C0] vkms_vblank_simulate: vblank timer overrun [ 1545.199264][ T6024] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1545.258278][ T6024] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.15083: corrupted inode contents [ 1545.315358][ T6024] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #13: comm syz.4.15083: mark_inode_dirty error [ 1545.362993][ T6024] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.15083: corrupted inode contents [ 1545.415277][ T6024] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #13: comm syz.4.15083: mark_inode_dirty error [ 1545.501324][ T6024] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.15083: corrupted inode contents [ 1545.553814][ T6024] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 1545.582696][ T6024] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #13: comm syz.4.15083: corrupted inode contents [ 1545.604006][ T6024] EXT4-fs error (device loop4): ext4_truncate:4312: inode #13: comm syz.4.15083: mark_inode_dirty error [ 1545.633423][ T6024] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 1545.695404][ T6024] EXT4-fs (loop4): 1 truncate cleaned up [ 1545.725369][ T6024] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1545.858052][ T6052] loop5: detected capacity change from 0 to 4096 [ 1545.921851][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 1545.935095][ T6052] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1545.982081][ T6052] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1546.053963][ T6052] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1546.090464][ T6062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15101'. [ 1546.125264][ T6052] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1546.192954][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15101'. [ 1546.213284][ T6052] ntfs: volume version 3.1. [ 1547.092785][ T6092] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1547.116029][ T6094] loop5: detected capacity change from 0 to 256 [ 1547.402025][ T6102] validate_nla: 44 callbacks suppressed [ 1547.402045][ T6102] netlink: 'syz.2.15120': attribute type 3 has an invalid length. [ 1547.440408][ T7189] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1547.640455][ T7189] usb 6-1: Using ep0 maxpacket: 32 [ 1547.659436][ T7189] usb 6-1: config 4 has an invalid interface number: 228 but max is 0 [ 1547.667696][ T7189] usb 6-1: config 4 has no interface number 0 [ 1547.736321][ T7189] usb 6-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 147, changing to 11 [ 1547.789046][ T7189] usb 6-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 41529, setting to 1024 [ 1547.803905][ T6114] ipt_CLUSTERIP: Please specify destination IP [ 1547.811912][ T7189] usb 6-1: config 4 interface 228 has no altsetting 0 [ 1547.847366][ T7189] usb 6-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 1547.884961][ T7189] usb 6-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 1547.899536][ T7189] usb 6-1: Product: syz [ 1547.903901][ T7189] usb 6-1: Manufacturer: syz [ 1547.965344][ T7189] usb 6-1: SerialNumber: syz [ 1548.140368][ T6122] loop0: detected capacity change from 0 to 2048 [ 1548.205747][ T6122] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1548.218025][ T7189] usb 6-1: invalid MIDI in EP 0 [ 1548.283636][ T6124] loop2: detected capacity change from 0 to 2048 [ 1548.293396][ T7189] snd-usb-audio: probe of 6-1:4.228 failed with error -22 [ 1548.340595][ T7189] usb 6-1: USB disconnect, device number 19 [ 1548.375277][ T6124] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1548.459649][ T6130] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1548.500208][ T6130] overlayfs: missing 'lowerdir' [ 1548.585427][ T4436] udevd[4436]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1548.983540][ T6138] loop2: detected capacity change from 0 to 4096 [ 1549.019640][ T6138] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1549.396792][ T6157] device vti0 entered promiscuous mode [ 1549.655556][ T6166] loop6: detected capacity change from 0 to 128 [ 1549.732025][ T6166] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1549.738628][ T6170] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15153'. [ 1549.992991][ T5503] EXT4-fs (loop6): unmounting filesystem. [ 1550.530092][ T6197] netlink: zone id is out of range [ 1550.545297][ T6197] netlink: get zone limit has 4 unknown bytes [ 1550.605999][ T6202] xt_HMARK: spi-set and port-set can't be combined [ 1550.690000][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1550.844556][ T6208] netlink: 200 bytes leftover after parsing attributes in process `syz.5.15171'. [ 1550.885070][ T6212] overlayfs: missing 'lowerdir' [ 1550.899580][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 1550.925541][ T7] usb 7-1: config 0 has an invalid interface number: 145 but max is 0 [ 1550.957738][ T7] usb 7-1: config 0 has no interface number 0 [ 1550.966737][ T7] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1550.994676][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.033820][ T7] usb 7-1: Product: syz [ 1551.038101][ T7] usb 7-1: Manufacturer: syz [ 1551.069841][ T7] usb 7-1: SerialNumber: syz [ 1551.098270][ T7] usb 7-1: config 0 descriptor?? [ 1551.106588][ T7] hub 7-1:0.145: bad descriptor, ignoring hub [ 1551.123793][ T7] hub: probe of 7-1:0.145 failed with error -5 [ 1551.175956][ T7] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.145/input/input110 [ 1551.590460][ T6236] netlink: 596 bytes leftover after parsing attributes in process `syz.4.15184'. [ 1551.662272][T20691] usb 7-1: USB disconnect, device number 2 [ 1552.274108][ T6255] loop4: detected capacity change from 0 to 4096 [ 1552.363506][ T6260] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1552.398941][ T6255] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1552.411588][ T9538] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1552.451287][ T6255] Remounting filesystem read-only [ 1552.597655][ T9538] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1552.614672][ T9538] usb 3-1: config 220 has an invalid interface descriptor of length 5, skipping [ 1552.624903][ T9538] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.677472][ T9538] usb 3-1: config 220 has no interface number 2 [ 1552.701373][ T9538] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1552.712827][ T6264] loop0: detected capacity change from 0 to 1024 [ 1552.748632][ T9538] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1552.755486][ T9538] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1552.776716][ T9538] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1552.792641][ T6266] xt_cgroup: xt_cgroup: no path or classid specified [ 1552.812588][ T6264] __quota_error: 12 callbacks suppressed [ 1552.812612][ T6264] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1552.845449][ T9538] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1552.888143][ T9538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.910306][ T6259] loop6: detected capacity change from 0 to 32768 [ 1552.919628][ T6264] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1552.930056][ T6264] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.15199: Failed to acquire dquot type 0 [ 1552.941692][ T9538] usb 3-1: Product: syz [ 1552.945755][ T6264] EXT4-fs (loop0): 1 truncate cleaned up [ 1552.951603][ T9538] usb 3-1: Manufacturer: syz [ 1552.951625][ T9538] usb 3-1: SerialNumber: syz [ 1552.972403][ T6264] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1552.993391][ T6259] ERROR: (device loop6): dbAlloc: the hint is outside the map [ 1552.993391][ T6259] [ 1553.021310][ T6264] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1553.048108][ T6264] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1553.071785][ T6264] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.15199: Failed to acquire dquot type 0 [ 1553.083214][ T6259] ERROR: (device loop6): remounting filesystem as read-only [ 1553.164187][ T9538] usb 3-1: selecting invalid altsetting 0 [ 1553.181096][ T9538] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1553.206965][ T9538] usb 3-1: No valid video chain found. [ 1553.259491][ T9538] usb 3-1: selecting invalid altsetting 0 [ 1553.271647][ T9538] usbtest: probe of 3-1:220.1 failed with error -22 [ 1553.313777][ T9538] usb 3-1: USB disconnect, device number 28 [ 1553.352396][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 1554.119176][ T6296] loop2: detected capacity change from 0 to 128 [ 1554.425556][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1554.637891][ T7] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 1554.663505][ T7] usb 1-1: config 0 has no interface number 1 [ 1554.669688][ T7] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1554.720005][ T7] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1554.746356][ T7] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1554.773482][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1554.790421][ T7] usb 1-1: SerialNumber: syz [ 1554.801392][ T7] usb 1-1: config 0 descriptor?? [ 1554.830797][ T7] usb 1-1: Found UVC 0.00 device (0002:0000) [ 1554.855934][ T7] usb 1-1: No valid video chain found. [ 1555.054843][ T9538] usb 1-1: USB disconnect, device number 12 [ 1555.379374][ T26] audit: type=1326 audit(1571.037:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.6.15232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870378e969 code=0x7ffc0000 [ 1555.512667][ T26] audit: type=1326 audit(1571.079:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.6.15232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f870378e969 code=0x7ffc0000 [ 1555.607558][ T6339] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1555.617419][ T26] audit: type=1326 audit(1571.079:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.6.15232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870378e969 code=0x7ffc0000 [ 1555.731084][ T26] audit: type=1326 audit(1571.079:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.6.15232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870378e969 code=0x7ffc0000 [ 1555.849927][ T6345] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1555.971674][ T6350] xt_l2tp: invalid flags combination: 4 [ 1556.260179][ T6359] loop4: detected capacity change from 0 to 1024 [ 1556.486289][T26170] hfsplus: b-tree write err: -5, ino 4 [ 1556.678375][ T7] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1556.784391][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15252'. [ 1556.876309][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1556.905677][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1556.944952][ T7] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1556.979383][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.007665][ T6385] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15257'. [ 1557.044979][ T7] usb 6-1: config 0 descriptor?? [ 1557.268842][ T7] usb 6-1: USB disconnect, device number 20 [ 1557.473610][ T6394] loop4: detected capacity change from 0 to 2048 [ 1557.510164][ T6394] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1557.592099][ T6397] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1557.744780][ T6399] loop0: detected capacity change from 0 to 256 [ 1557.905348][ T6399] FAT-fs (loop0): Directory bread(block 64) failed [ 1557.911961][ T6399] FAT-fs (loop0): Directory bread(block 65) failed [ 1557.961156][ T6399] FAT-fs (loop0): Directory bread(block 66) failed [ 1557.970451][ T6399] FAT-fs (loop0): Directory bread(block 67) failed [ 1557.978510][ T6399] FAT-fs (loop0): Directory bread(block 68) failed [ 1558.027592][ T6399] FAT-fs (loop0): Directory bread(block 69) failed [ 1558.049459][ T6399] FAT-fs (loop0): Directory bread(block 70) failed [ 1558.084093][ T6399] FAT-fs (loop0): Directory bread(block 71) failed [ 1558.113715][ T6399] FAT-fs (loop0): Directory bread(block 72) failed [ 1558.144365][ T6399] FAT-fs (loop0): Directory bread(block 73) failed [ 1558.339182][ T6417] netlink: 'syz.2.15272': attribute type 10 has an invalid length. [ 1558.561055][ T9540] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1558.700956][ T6420] loop4: detected capacity change from 0 to 4096 [ 1558.750798][ T6420] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 1558.761293][ T9540] usb 6-1: Using ep0 maxpacket: 32 [ 1558.769395][ T9540] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.811276][ T9540] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 1558.850242][ T9540] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.881826][ T9540] usb 6-1: Product: syz [ 1558.904261][ T9540] usb 6-1: Manufacturer: syz [ 1558.908966][ T9540] usb 6-1: SerialNumber: syz [ 1558.928370][ T9540] usb 6-1: config 0 descriptor?? [ 1559.039304][ T6433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15280'. [ 1559.155555][ T9540] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1559.348910][ T7189] usb 6-1: USB disconnect, device number 21 [ 1559.779545][ T6460] netlink: 56 bytes leftover after parsing attributes in process `syz.6.15292'. [ 1559.953582][ T6464] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1560.044029][ T6468] loop6: detected capacity change from 0 to 512 [ 1560.072499][ T6468] EXT4-fs: Ignoring removed i_version option [ 1560.100264][ T6468] EXT4-fs: Ignoring removed orlov option [ 1560.127496][ T6468] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1560.230095][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.261421][ T6468] EXT4-fs (loop6): 1 truncate cleaned up [ 1560.283042][ T6468] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1560.407455][ T6468] EXT4-fs error (device loop6): ext4_get_verity_descriptor_location:300: inode #15: comm syz.6.15296: verity file has no extents [ 1560.526857][ T6468] EXT4-fs (loop6): Remounting filesystem read-only [ 1560.552028][ T6468] fs-verity (loop6, inode 15): Error -117 getting verity descriptor size [ 1560.649183][ T6489] loop5: detected capacity change from 0 to 2048 [ 1560.674262][ T5503] EXT4-fs (loop6): unmounting filesystem. [ 1560.717834][ T6489] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1561.078645][ T6502] netdevsim netdevsim5: Direct firmware load for ..€ failed with error -2 [ 1561.105590][ T6502] netdevsim netdevsim5: Falling back to sysfs fallback for: ..€ [ 1561.643269][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.752858][ T6522] loop0: detected capacity change from 0 to 4096 [ 1561.792464][ T6522] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1561.927674][ T6522] ntfs3: loop0: failed to convert "c46c" to macturkish [ 1562.597715][ T6552] loop5: detected capacity change from 0 to 1024 [ 1562.782281][ T4291] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1562.929264][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15340'. [ 1562.972882][ T4291] usb 1-1: Using ep0 maxpacket: 16 [ 1562.984395][ T4291] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 1563.039953][ T4291] usb 1-1: config 0 has no interface number 0 [ 1563.066275][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15341'. [ 1563.079089][ T4291] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1563.116185][ T6567] netlink: 312 bytes leftover after parsing attributes in process `syz.5.15341'. [ 1563.120682][ T4291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.135632][ T6567] netlink: 'syz.5.15341': attribute type 1 has an invalid length. [ 1563.162799][ T4291] usb 1-1: Product: syz [ 1563.176102][ T4291] usb 1-1: Manufacturer: syz [ 1563.190980][ T4291] usb 1-1: SerialNumber: syz [ 1563.206745][ T4291] usb 1-1: config 0 descriptor?? [ 1563.250012][ T4291] hub 1-1:0.145: bad descriptor, ignoring hub [ 1563.272437][ T4291] hub: probe of 1-1:0.145 failed with error -5 [ 1563.299736][ T4291] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.145/input/input111 [ 1563.421670][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15347'. [ 1563.834678][T20691] usb 1-1: USB disconnect, device number 13 [ 1563.888476][ T6593] loop5: detected capacity change from 0 to 512 [ 1563.936677][ T6593] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1563.953246][ T6592] loop6: detected capacity change from 0 to 2048 [ 1563.993859][ T6593] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1564.043046][ T6593] EXT4-fs (loop5): 1 truncate cleaned up [ 1564.048770][ T6593] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1564.109160][ T6592] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1564.215039][ T6601] kernel read not supported for file /½ lhObíñ~åÑhþµ“3žJÇÈyûxÐîÃüv÷Lª=QäRúnÁ·$h®ÌÜf€ǹ”óW£FGr‚¥òqðςû~QV7¶·"qHâ—ÉdNn9µƒÝD0ª)g [ 1564.215039][ T6601] .j``~éäN@»Û€Ï žWâctéö\x•|êbÎEïVyS$’µPAXg¦8mRC“l†EtùTíTS_øm)ל- (pid: 6601 comm: syz.4.15358) [ 1564.246474][ T6602] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1564.300417][T30087] EXT4-fs (loop5): unmounting filesystem. [ 1564.402716][ T26] audit: type=1800 audit(1580.503:248): pid=6601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.15358" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B72468AECCDC668015C7B9949DF357A346477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E21197C9644E6E39B503831CDD4430AA29670A2E6A60601F7EE9E44E40BBDB80CF1E209E571302E26374E9F65C78957CEA62CE45EF5679532492B550415867A6386D5243936C864574F954ED9054535FF86D0729D79C2D dev="mqueue" ino=136014 res=0 errno=0 [ 1564.979914][ T6625] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15368'. [ 1565.026696][ T6625] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15368'. [ 1565.051113][ T6617] loop4: detected capacity change from 0 to 4096 [ 1565.069102][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15368'. [ 1565.084556][ T6617] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1565.290033][ T6629] loop6: detected capacity change from 0 to 4096 [ 1565.608257][ T6640] cgroup: name respecified [ 1565.705875][ T6642] loop2: detected capacity change from 0 to 512 [ 1565.769101][ T6642] EXT4-fs: Ignoring removed i_version option [ 1565.803507][ T6642] EXT4-fs: Ignoring removed orlov option [ 1565.857185][ T6642] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1565.946821][ T6645] loop4: detected capacity change from 0 to 4096 [ 1565.970456][ T6645] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1565.991806][ T6650] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 1566.060624][ T6642] EXT4-fs (loop2): 1 truncate cleaned up [ 1566.083914][ T6642] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1566.145280][ T6642] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:300: inode #15: comm syz.2.15377: verity file has no extents [ 1566.145390][ T6645] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 1566.198151][ T6631] loop5: detected capacity change from 0 to 32768 [ 1566.224797][ T6642] EXT4-fs (loop2): Remounting filesystem read-only [ 1566.238730][ T6645] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1566.254969][ T6645] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 1566.283964][ T6642] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 1566.294856][ T6631] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 1566.386945][ T6631] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1566.509833][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 1566.653847][ T6659] loop6: detected capacity change from 0 to 164 [ 1566.673443][T30087] ocfs2: Unmounting device (7,5) on (node local) [ 1566.713740][ T6659] rock: directory entry would overflow storage [ 1566.737808][ T6659] rock: sig=0x66, size=4, remaining=3 [ 1566.758195][ T6659] rock: directory entry would overflow storage [ 1566.764419][ T6659] rock: sig=0x66, size=4, remaining=3 [ 1567.025199][ T6669] netlink: 164 bytes leftover after parsing attributes in process `syz.4.15389'. [ 1567.100430][ T6669] netlink: 164 bytes leftover after parsing attributes in process `syz.4.15389'. [ 1567.145989][ T6669] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15389'. [ 1567.416160][ T6683] loop4: detected capacity change from 0 to 512 [ 1567.461345][ T6683] EXT4-fs: Ignoring removed i_version option [ 1567.468435][ T6683] EXT4-fs: Ignoring removed orlov option [ 1567.500166][ T6683] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1567.590008][ T6683] EXT4-fs (loop4): 1 truncate cleaned up [ 1567.650407][ T6683] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1567.725908][ T6683] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:300: inode #15: comm syz.4.15396: verity file has no extents [ 1567.785458][ T6683] EXT4-fs (loop4): Remounting filesystem read-only [ 1567.805359][ T6683] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 1567.881588][ T26] audit: type=1326 audit(1584.155:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.2.15404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd3b8e969 code=0x7ffc0000 [ 1567.951150][ T26] audit: type=1326 audit(1584.176:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.2.15404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f3cd3b8e969 code=0x7ffc0000 [ 1568.000784][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 1568.069730][ T26] audit: type=1326 audit(1584.176:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.2.15404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd3b8e969 code=0x7ffc0000 [ 1568.173861][ T26] audit: type=1326 audit(1584.176:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.2.15404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd3b8e969 code=0x7ffc0000 [ 1569.159995][ T26] audit: type=1326 audit(1585.498:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.5.15423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1569.250693][ T26] audit: type=1326 audit(1585.519:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.5.15423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1569.377521][ T26] audit: type=1326 audit(1585.519:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.5.15423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1569.423901][ T26] audit: type=1326 audit(1585.519:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.5.15423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1569.449832][ T6751] device veth3 entered promiscuous mode [ 1570.252472][ T6784] netlink: 96 bytes leftover after parsing attributes in process `syz.4.15441'. [ 1570.496242][ T6793] device geneve2 entered promiscuous mode [ 1570.820722][ T6806] device bridge2 entered promiscuous mode [ 1570.902346][ T6808] device sit0 entered promiscuous mode [ 1570.937048][ T6808] netlink: 'syz.2.15452': attribute type 1 has an invalid length. [ 1570.976160][ T6808] netlink: 1 bytes leftover after parsing attributes in process `syz.2.15452'. [ 1571.029230][ T6813] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.15457'. [ 1571.683311][ T6836] loop0: detected capacity change from 0 to 1024 [ 1571.944098][ T6836] hfsplus: bad catalog entry type [ 1572.846711][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15490'. [ 1572.862959][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15490'. [ 1572.875663][ T6882] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1572.902837][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15490'. [ 1572.912483][ T6882] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1573.172263][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15494'. [ 1573.301652][ T6893] loop4: detected capacity change from 0 to 64 [ 1573.597221][ T6903] netlink: 'syz.5.15501': attribute type 10 has an invalid length. [ 1573.611692][ T6903] device veth1_macvtap left promiscuous mode [ 1573.635682][ T6905] loop4: detected capacity change from 0 to 16 [ 1573.673833][ T6903] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 1573.682346][ T6905] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1573.716466][ T4635] udevd[4635]: incorrect cramfs checksum on /dev/loop4 [ 1573.753958][ T6907] loop0: detected capacity change from 0 to 64 [ 1573.817070][ T6909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15504'. [ 1573.937458][ T6913] CIFS: VFS: Malformed UNC in devname [ 1574.228613][ T6919] netlink: 'syz.0.15508': attribute type 2 has an invalid length. [ 1574.471441][ T6933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1574.708019][ T6938] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1574.715391][ T6938] IPv6: NLM_F_CREATE should be set when creating new route [ 1574.722719][ T6938] IPv6: NLM_F_CREATE should be set when creating new route [ 1574.746454][ T6943] loop0: detected capacity change from 0 to 256 [ 1574.858340][ T6943] FAT-fs (loop0): Directory bread(block 64) failed [ 1574.864946][ T6943] FAT-fs (loop0): Directory bread(block 65) failed [ 1574.933034][ T6943] FAT-fs (loop0): Directory bread(block 66) failed [ 1574.939703][ T6943] FAT-fs (loop0): Directory bread(block 67) failed [ 1574.973184][ T6943] FAT-fs (loop0): Directory bread(block 68) failed [ 1574.979785][ T6943] FAT-fs (loop0): Directory bread(block 69) failed [ 1575.040490][ T6943] FAT-fs (loop0): Directory bread(block 70) failed [ 1575.074025][ T6943] FAT-fs (loop0): Directory bread(block 71) failed [ 1575.084656][ T6943] FAT-fs (loop0): Directory bread(block 72) failed [ 1575.091276][ T6943] FAT-fs (loop0): Directory bread(block 73) failed [ 1575.277686][ T6952] loop5: detected capacity change from 0 to 4096 [ 1575.304841][ T6952] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1575.731672][ T6970] netlink: 'syz.4.15534': attribute type 29 has an invalid length. [ 1575.760306][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15534'. [ 1575.798296][ T6970] netlink: 'syz.4.15534': attribute type 29 has an invalid length. [ 1575.828526][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15534'. [ 1575.842249][ T951] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1575.895742][ T6973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15537'. [ 1576.027901][ T951] usb 1-1: Using ep0 maxpacket: 32 [ 1576.034995][ T951] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1576.084625][ T951] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1576.113770][ T951] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1576.162967][ T951] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1576.190109][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1576.218151][ T951] usb 1-1: SerialNumber: syz [ 1576.231039][ T6965] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1576.258421][ T951] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1576.324073][ T6959] loop6: detected capacity change from 0 to 32768 [ 1576.352683][ T6983] loop5: detected capacity change from 0 to 1024 [ 1576.383680][ T6959] (syz.6.15529,6959,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1576.441026][ T6959] (syz.6.15529,6959,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1576.461375][ T6965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1576.520068][ T6965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.530750][T26166] hfsplus: b-tree write err: -5, ino 4 [ 1576.563393][ T951] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1576.574099][ T951] usb 1-1: USB disconnect, device number 14 [ 1576.593122][ T6959] JBD2: Ignoring recovery information on journal [ 1576.670503][ T6959] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1576.863601][ T6999] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15548'. [ 1576.973344][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15549'. [ 1577.026251][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15549'. [ 1577.037720][ T7003] loop5: detected capacity change from 0 to 1024 [ 1577.038265][ T951] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1577.057308][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15549'. [ 1577.248150][ T951] usb 5-1: Using ep0 maxpacket: 16 [ 1577.255631][ T951] usb 5-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 1577.295941][ T951] usb 5-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 1577.332689][ T951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1577.333841][ T7009] CIFS mount error: No usable UNC path provided in device string! [ 1577.333841][ T7009] [ 1577.371825][ T951] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 1577.391429][ T7009] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1577.399362][ T951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.421315][ T951] usb 5-1: Product: syz [ 1577.425537][ T951] usb 5-1: Manufacturer: syz [ 1577.438566][ T951] usb 5-1: SerialNumber: syz [ 1577.463450][ T951] usb 5-1: config 0 descriptor?? [ 1577.484492][ T951] usb 5-1: cannot find UAC_HEADER [ 1577.547083][ T951] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 1577.575257][ T4635] udevd[4635]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1577.733561][ T9538] usb 5-1: USB disconnect, device number 32 [ 1577.789788][ T7020] netlink: 'syz.5.15557': attribute type 10 has an invalid length. [ 1577.809217][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.816622][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.871396][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.879557][ T7020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1577.890053][ T7020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.899718][ T7020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1577.959221][ T26] audit: type=1326 audit(1594.722:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.0.15562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96578e969 code=0x7ffc0000 [ 1577.990691][ T26] audit: type=1326 audit(1594.722:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.0.15562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96578e969 code=0x7ffc0000 [ 1578.034165][ T26] audit: type=1326 audit(1594.722:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.0.15562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7ff96578e969 code=0x7ffc0000 [ 1578.093622][ T7020] team0: Port device bridge0 added [ 1578.109684][ T26] audit: type=1326 audit(1594.722:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.0.15562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96578e969 code=0x7ffc0000 [ 1578.131624][ C0] vkms_vblank_simulate: vblank timer overrun [ 1578.138459][ T26] audit: type=1326 audit(1594.722:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.0.15562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96578e969 code=0x7ffc0000 [ 1578.160388][ C0] vkms_vblank_simulate: vblank timer overrun [ 1578.370481][ T7033] loop2: detected capacity change from 0 to 1764 [ 1578.557027][ T7041] loop2: detected capacity change from 0 to 64 [ 1578.610867][T20691] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1578.814303][T20691] usb 6-1: config 171 has an invalid interface number: 109 but max is 0 [ 1578.829914][T20691] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.850638][T20691] usb 6-1: config 171 has no interface number 0 [ 1578.861668][T20691] usb 6-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1578.881075][T20691] usb 6-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 16384, setting to 64 [ 1578.902747][T20691] usb 6-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1578.951198][T20691] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1578.979054][T20691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.997707][T20691] usb 6-1: Product: syz [ 1579.007621][T20691] usb 6-1: Manufacturer: syz [ 1579.016151][T20691] usb 6-1: SerialNumber: syz [ 1579.048802][ T7036] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1579.293567][T20691] ath6kl: Failed to submit usb control message: -71 [ 1579.315668][T20691] ath6kl: unable to send the bmi data to the device: -71 [ 1579.339697][T20691] ath6kl: Unable to send get target info: -71 [ 1579.354979][T20691] ath6kl: Failed to init ath6kl core: -71 [ 1579.468715][T20691] ath6kl_usb: probe of 6-1:171.109 failed with error -71 [ 1579.487593][T20691] usb 6-1: USB disconnect, device number 22 [ 1579.620326][ T7074] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new' [ 1579.797754][ T7082] netlink: 64 bytes leftover after parsing attributes in process `syz.0.15589'. [ 1579.838210][ T7084] device team0 left promiscuous mode [ 1579.886815][ T7084] bridge0: port 2(team0) entered disabled state [ 1579.935948][ T7084] bridge0: port 1(netdevsim0) entered disabled state [ 1580.017082][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.437123][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15600'. [ 1580.711337][ T7110] loop0: detected capacity change from 0 to 2048 [ 1580.734749][ T7110] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1580.777075][ T7110] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1580.814568][ T7092] loop4: detected capacity change from 0 to 32768 [ 1580.828435][ T7092] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.15594 (7092) [ 1580.868980][ T951] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1580.887050][ T7092] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1580.929368][ T7092] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1580.973510][ T7092] BTRFS info (device loop4): force clearing of disk cache [ 1580.984458][ T7092] BTRFS info (device loop4): enabling auto defrag [ 1580.990984][ T7092] BTRFS info (device loop4): max_inline at 0 [ 1581.021771][ T7092] BTRFS info (device loop4): enabling disk space caching [ 1581.049959][ T7092] BTRFS info (device loop4): disk space caching is enabled [ 1581.061479][ T951] usb 3-1: Using ep0 maxpacket: 16 [ 1581.072279][ T951] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1581.099856][ T951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.116761][ T951] usb 3-1: Product: syz [ 1581.135864][ T951] usb 3-1: Manufacturer: syz [ 1581.140520][ T951] usb 3-1: SerialNumber: syz [ 1581.184023][ T951] r8152-cfgselector 3-1: config 0 descriptor?? [ 1581.423080][ T7092] BTRFS info (device loop4): enabling ssd optimizations [ 1581.461271][ T7092] BTRFS info (device loop4): rebuilding free space tree [ 1581.505623][ T7144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15610'. [ 1581.516031][ T7144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15610'. [ 1581.530217][ T7092] BTRFS info (device loop4): disabling free space tree [ 1581.554575][ T7092] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1581.575083][ T7092] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1581.610406][ T951] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1581.627314][ T951] r8152-cfgselector 3-1: USB disconnect, device number 29 [ 1581.698492][ T4304] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1581.748576][ C0] vkms_vblank_simulate: vblank timer overrun [ 1581.977486][ T4291] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1582.018896][ T4635] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop4 scanned by udevd (4635) [ 1582.082432][ C0] vkms_vblank_simulate: vblank timer overrun [ 1582.193248][ T4291] usb 1-1: Using ep0 maxpacket: 16 [ 1582.201164][ T4291] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1582.220322][ T4291] usb 1-1: config 0 has no interface number 0 [ 1582.238690][ T4291] usb 1-1: config 0 interface 55 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1582.259255][ T4291] usb 1-1: config 0 interface 55 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1582.279999][ T4291] usb 1-1: config 0 interface 55 has no altsetting 0 [ 1582.310516][ T4291] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice=b4.92 [ 1582.323197][ T4291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.332244][ T4291] usb 1-1: Product: syz [ 1582.352015][ T4291] usb 1-1: Manufacturer: syz [ 1582.357298][ T4291] usb 1-1: SerialNumber: syz [ 1582.407949][ T4291] usb 1-1: config 0 descriptor?? [ 1582.422280][ T7148] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1582.430308][ T7148] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1582.449709][ T4291] spcp8x5 1-1:0.55: SPCP8x5 converter detected [ 1582.468320][ T4291] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 1582.654380][ T4291] usb 1-1: USB disconnect, device number 15 [ 1582.673824][ T4291] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1582.682698][ T7169] device bridge_slave_1 left promiscuous mode [ 1582.690077][ T4291] spcp8x5 1-1:0.55: device disconnected [ 1582.714380][ T7169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.759618][ T7169] device bridge_slave_0 left promiscuous mode [ 1582.782533][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.928529][ T7169] team0: Port device bridge0 removed [ 1583.025100][ T7182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15627'. [ 1583.042803][ T7182] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 1583.612293][ T7208] loop0: detected capacity change from 0 to 4096 [ 1583.615214][ T7212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15637'. [ 1583.638931][ T7208] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1583.665868][ T7208] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1583.853710][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15639'. [ 1584.356993][ T7232] loop2: detected capacity change from 0 to 64 [ 1584.665154][ T7238] loop4: detected capacity change from 0 to 1024 [ 1584.678261][ T7242] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15653'. [ 1584.815024][ T7238] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1584.965503][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 1585.010878][ T7252] loop0: detected capacity change from 0 to 1024 [ 1585.128181][ T7252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1585.215408][ T52] block nbd5: Attempted send on invalid socket [ 1585.221650][ T52] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1585.242470][ T1230] block nbd5: Attempted send on invalid socket [ 1585.248865][ T1230] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1585.253223][ T7266] loop2: detected capacity change from 0 to 256 [ 1585.258435][ T7264] Mount JFS Failure: -5 [ 1585.274937][ T7252] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.15655: inode #12: comm syz.0.15655: iget: illegal inode # [ 1585.276103][ T7266] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd0673bdb, utbl_chksum : 0xe619d30d) [ 1585.300529][ T7264] jfs_mount failed w/return code = -5 [ 1585.434028][ T4287] EXT4-fs (loop0): unmounting filesystem. [ 1585.784755][ T7276] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1585.802654][ T7276] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1585.975495][ T7282] loop4: detected capacity change from 0 to 2048 [ 1586.001683][ T7282] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1586.419272][ T7299] netlink: 19 bytes leftover after parsing attributes in process `syz.0.15676'. [ 1586.630266][ T7303] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component [ 1586.873119][ T7315] nfs: Unknown parameter 'no' [ 1587.753281][ T7349] loop2: detected capacity change from 0 to 128 [ 1587.815770][ T7349] FAT-fs (loop2): Directory bread(block 11554) failed [ 1587.830829][ T7349] FAT-fs (loop2): Directory bread(block 11555) failed [ 1587.891719][ T7349] FAT-fs (loop2): Directory bread(block 11556) failed [ 1587.909901][ T7349] FAT-fs (loop2): Directory bread(block 11557) failed [ 1587.920629][ T7349] FAT-fs (loop2): Directory bread(block 11558) failed [ 1587.949153][ T7349] FAT-fs (loop2): Directory bread(block 11559) failed [ 1587.956098][ T7349] FAT-fs (loop2): Directory bread(block 11560) failed [ 1588.003092][ T7349] FAT-fs (loop2): Directory bread(block 11561) failed [ 1588.026846][ T7349] FAT-fs (loop2): Directory bread(block 11562) failed [ 1588.043455][ T7349] FAT-fs (loop2): Directory bread(block 11563) failed [ 1588.129362][ T26] audit: type=1326 audit(1605.395:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.0.15708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96578e969 code=0x7ffc0000 [ 1588.151243][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.239797][ T26] audit: type=1326 audit(1605.395:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.0.15708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96578e969 code=0x7ffc0000 [ 1588.261659][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.321162][ T26] audit: type=1326 audit(1605.426:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.0.15708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7ff96578e969 code=0x7ffc0000 [ 1588.343005][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.425053][ T26] audit: type=1326 audit(1605.426:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.0.15708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96578e969 code=0x7ffc0000 [ 1588.487607][ T26] audit: type=1326 audit(1605.426:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.0.15708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96578e969 code=0x7ffc0000 [ 1589.057518][ T7393] loop5: detected capacity change from 0 to 256 [ 1589.267664][ T7399] loop0: detected capacity change from 0 to 128 [ 1589.320254][ T7399] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1590.001133][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1590.007559][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1590.493511][ T4309] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1590.508170][ T4309] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1590.522433][ T4309] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1590.531141][ T4309] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1590.542820][T30088] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1590.550381][T30088] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1590.580967][ T7405] loop5: detected capacity change from 0 to 32768 [ 1590.685775][ T7405] XFS (loop5): Mounting V5 Filesystem [ 1590.792953][ T7453] loop2: detected capacity change from 0 to 64 [ 1590.827871][ T7405] XFS (loop5): Ending clean mount [ 1590.859582][ T7433] chnl_net:caif_netlink_parms(): no params data found [ 1590.902035][ T26] audit: type=1800 audit(1608.301:267): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.15748" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 1590.933775][T30087] XFS (loop5): Unmounting Filesystem [ 1591.165149][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15753'. [ 1591.311490][ T7433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.319764][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.329392][ T7433] device bridge_slave_0 entered promiscuous mode [ 1591.339935][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.347767][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.356487][ T7433] device bridge_slave_1 entered promiscuous mode [ 1591.398096][ T7467] loop4: detected capacity change from 0 to 256 [ 1591.453310][ T7467] FAT-fs (loop4): Directory bread(block 64) failed [ 1591.480015][ T7467] FAT-fs (loop4): Directory bread(block 65) failed [ 1591.487144][ T7467] FAT-fs (loop4): Directory bread(block 66) failed [ 1591.494879][ T7467] FAT-fs (loop4): Directory bread(block 67) failed [ 1591.501567][ T7467] FAT-fs (loop4): Directory bread(block 68) failed [ 1591.519689][ T7467] FAT-fs (loop4): Directory bread(block 69) failed [ 1591.535562][ T7433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1591.565081][ T7467] FAT-fs (loop4): Directory bread(block 70) failed [ 1591.584041][ T7433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.593701][ T7467] FAT-fs (loop4): Directory bread(block 71) failed [ 1591.617204][ T7467] FAT-fs (loop4): Directory bread(block 72) failed [ 1591.644252][ T7467] FAT-fs (loop4): Directory bread(block 73) failed [ 1591.770215][ T7189] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1591.951283][ T7189] usb 3-1: Using ep0 maxpacket: 16 [ 1591.968304][ T7189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 1592.011965][ T7433] team0: Port device team_slave_0 added [ 1592.041428][ T7189] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1592.054348][ T7433] team0: Port device team_slave_1 added [ 1592.075728][ T7476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15758'. [ 1592.085879][ T7189] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1592.101732][ T7476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15758'. [ 1592.132006][ T7189] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1592.148683][ T7189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.167011][ T7189] usb 3-1: Product: syz [ 1592.175908][ T7189] usb 3-1: Manufacturer: syz [ 1592.187106][ T7433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1592.192202][ T7189] usb 3-1: SerialNumber: syz [ 1592.208690][ T7433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1592.223925][ T7189] usb 3-1: config 0 descriptor?? [ 1592.240250][ T7433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1592.253122][ T7433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1592.286203][ T7433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1592.301248][ T7469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1592.340383][ T7469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1592.364106][ C0] port100 3-1:0.0: NFC: Urb failure (status -71) [ 1592.370552][ C0] port100 3-1:0.0: NFC: Urb failure (status -71) [ 1592.380398][ T7433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1592.381859][ T7189] port100 3-1:0.0: NFC: Could not get supported command types [ 1592.514078][T30088] Bluetooth: hci6: command 0x0409 tx timeout [ 1592.523522][ T7433] device hsr_slave_0 entered promiscuous mode [ 1592.552650][ T7433] device hsr_slave_1 entered promiscuous mode [ 1592.560239][ T7433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1592.568191][ T7433] Cannot create hsr debugfs directory [ 1592.579904][ T7483] dlm: no local IP address has been set [ 1592.634594][ T7483] dlm: cannot start dlm midcomms -107 [ 1592.708422][ T7189] usb 3-1: USB disconnect, device number 30 [ 1593.069761][ T7492] loop4: detected capacity change from 0 to 512 [ 1593.083641][ T7492] EXT4-fs: Ignoring removed orlov option [ 1593.113250][ T7492] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1593.114878][ T7433] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1593.123603][ T7492] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1593.143460][ T7492] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 1593.178111][ T7479] loop0: detected capacity change from 0 to 32768 [ 1593.187758][ T7492] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.15766: Corrupt directory, running e2fsck is recommended [ 1593.205460][ T7433] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1593.226795][ T7433] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1593.237979][ T7479] [ 1593.237979][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1593.237979][ T7479] [ 1593.279793][ T7433] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1593.289722][ T7479] [ 1593.289722][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1593.289722][ T7479] [ 1593.304053][ T7479] [ 1593.304053][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1593.304053][ T7479] [ 1593.324682][ T7479] [ 1593.324682][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1593.324682][ T7479] [ 1593.339359][ T7495] loop5: detected capacity change from 0 to 764 [ 1593.353198][ T7492] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1593.379091][ T7492] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.15766: corrupted in-inode xattr [ 1593.392234][ T7479] [ 1593.392234][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1593.392234][ T7479] [ 1593.453354][ T7495] Symlink component flag not implemented [ 1593.458213][ T7479] [ 1593.458213][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1593.458213][ T7479] [ 1593.460097][ T7495] Symlink component flag not implemented (7) [ 1593.500809][ T7492] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.15766: couldn't read orphan inode 15 (err -117) [ 1593.510944][ T7479] [ 1593.510944][ T7479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1593.510944][ T7479] [ 1593.561564][ T7492] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1593.625319][ T107] [ 1593.625319][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1593.625319][ T107] [ 1593.669367][ T7433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1593.728852][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1593.745447][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1593.762291][ T4291] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1593.785211][ T7433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1593.813662][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1593.833715][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1593.840049][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 1593.842983][T26173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.855405][T26173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1593.877252][ T4287] [ 1593.877252][ T4287] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1593.877252][ T4287] [ 1593.890343][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1593.899802][ T4287] [ 1593.899802][ T4287] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1593.899802][ T4287] [ 1593.912489][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1593.923223][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1593.968500][ T4291] usb 3-1: Using ep0 maxpacket: 32 [ 1593.976227][ T4291] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 1594.015367][T26173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.022600][T26173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1594.031341][ T4291] usb 3-1: config 0 has no interface number 0 [ 1594.060031][ T4291] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1594.089926][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1594.098209][ T4291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.133974][ T4291] usb 3-1: Product: syz [ 1594.138229][ T4291] usb 3-1: Manufacturer: syz [ 1594.142856][ T4291] usb 3-1: SerialNumber: syz [ 1594.148165][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1594.168467][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1594.193175][ T4291] usb 3-1: config 0 descriptor?? [ 1594.213934][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1594.260407][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1594.277741][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1594.309464][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1594.335160][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1594.365957][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1594.409485][ T7433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1594.444831][ T7433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1594.468336][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1594.488410][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1594.505452][T30088] Bluetooth: hci6: command 0x041b tx timeout [ 1594.668669][ T4291] usb 3-1: USB disconnect, device number 31 [ 1594.766834][ T7519] bridge0: port 1(dummy0) entered disabled state [ 1594.883309][ C0] vkms_vblank_simulate: vblank timer overrun [ 1594.947432][ T5091] udevd[5091]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1595.315419][T20691] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1595.470457][T26166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1595.487528][T26166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1595.505972][T20691] usb 6-1: Using ep0 maxpacket: 16 [ 1595.512962][T20691] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1595.548882][T20691] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1595.564596][ T7433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1595.582544][T20691] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1595.605742][T20691] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1595.626390][T20691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.658851][T20691] usb 6-1: Product: syz [ 1595.663079][T20691] usb 6-1: Manufacturer: syz [ 1595.681786][ T7539] loop2: detected capacity change from 0 to 4096 [ 1595.688674][T20691] usb 6-1: SerialNumber: syz [ 1595.754877][ T7539] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1595.790673][ T7539] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1595.838092][ T7539] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1595.864650][ T7539] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1595.916211][ T7539] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1595.952144][ T7539] ntfs: volume version 3.1. [ 1595.976946][ T7539] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1596.018412][ T7539] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1596.064772][ T7539] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1596.122411][T20691] usb 6-1: 0:2 : does not exist [ 1596.135560][ T7539] ntfs: (device loop2): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 1596.162597][T20691] usb 6-1: USB disconnect, device number 23 [ 1596.182652][ T7539] ntfs: (device loop2): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 1596.284233][ T7552] loop4: detected capacity change from 0 to 2048 [ 1596.335820][ T7552] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1596.396648][ T7555] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1596.409200][ T7552] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1596.478138][T30088] Bluetooth: hci6: command 0x040f tx timeout [ 1596.486111][ T4435] udevd[4435]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1596.529801][ T7552] Remounting filesystem read-only [ 1596.774602][ T4304] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 1596.977176][T26170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1596.993687][T26170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1597.089257][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1597.103110][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1597.130970][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1597.186657][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1597.226201][ T7433] device veth0_vlan entered promiscuous mode [ 1597.261044][ T7433] device veth1_vlan entered promiscuous mode [ 1597.360474][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1597.378199][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1597.410901][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1597.428327][ T7583] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1597.439672][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1597.481820][ T7433] device veth0_macvtap entered promiscuous mode [ 1597.507603][ T7586] tmpfs: Bad value for 'mpol' [ 1597.539253][ T7433] device veth1_macvtap entered promiscuous mode [ 1597.611734][ T7433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.661379][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.694405][ T7433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.733039][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.768782][ T7433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1597.792413][T26166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1597.805920][T26166] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1597.827765][T26166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1597.854024][ T7594] loop2: detected capacity change from 0 to 4096 [ 1597.873479][T26166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1597.906775][ T7433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.939287][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.941161][ T7594] ntfs: volume version 3.1. [ 1597.960735][ T7433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1597.988589][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.002735][ T7433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1598.011284][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1598.045557][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1598.080536][ T7433] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.096399][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15814'. [ 1598.104024][ T7433] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.137722][ T7433] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.163779][ T7433] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.369196][ T7433] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 1598.410856][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.430024][ T7605] loop5: detected capacity change from 0 to 512 [ 1598.444283][ T7433] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 1598.460405][T30088] Bluetooth: hci6: command 0x0419 tx timeout [ 1598.471380][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.481630][ T7433] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 1598.491561][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.512653][T26150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.558395][T26164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.588711][T26150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.589125][T26164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.608657][ T7605] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1598.710674][T26173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1598.805336][T30087] EXT4-fs (loop5): unmounting filesystem. [ 1598.821604][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1599.113272][ T7619] loop2: detected capacity change from 0 to 4096 [ 1599.118044][ T7624] netlink: 'syz.7.15733': attribute type 1 has an invalid length. [ 1599.155713][ T7624] netlink: 224 bytes leftover after parsing attributes in process `syz.7.15733'. [ 1599.200208][ T7619] ntfs: volume version 3.1. [ 1599.282917][ T7629] netlink: 64 bytes leftover after parsing attributes in process `syz.5.15826'. [ 1599.346532][ T7629] netlink: 64 bytes leftover after parsing attributes in process `syz.5.15826'. [ 1599.720382][ T7643] netlink: 'syz.7.15833': attribute type 3 has an invalid length. [ 1599.755899][ T7643] netlink: 132 bytes leftover after parsing attributes in process `syz.7.15833'. [ 1600.079856][T20691] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1600.289525][T20691] usb 1-1: Using ep0 maxpacket: 8 [ 1600.299983][T20691] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1600.338604][T20691] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1600.375371][T20691] usb 1-1: Product: syz [ 1600.394392][T20691] usb 1-1: Manufacturer: syz [ 1600.413298][T20691] usb 1-1: SerialNumber: syz [ 1600.445780][T20691] usb 1-1: config 0 descriptor?? [ 1600.479187][T20691] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1600.528099][ T7675] kernel read not supported for file /  jT­ì5þE|( (pid: 7675 comm: syz.5.15849) [ 1600.552317][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 1600.552335][ T26] audit: type=1800 audit(1618.428:268): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15849" name=2004206A54ADEC35FE457C2808 dev="mqueue" ino=139229 res=0 errno=0 [ 1600.580600][ T7677] loop7: detected capacity change from 0 to 16 [ 1600.618808][ T7677] erofs: (device loop7): mounted with root inode @ nid 36. [ 1600.816027][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15852'. [ 1600.848097][T20691] gspca_zc3xx: reg_r err -71 [ 1600.861196][T20691] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 1600.886914][T20691] usb 1-1: USB disconnect, device number 16 [ 1600.906750][ T7685] netlink: 224 bytes leftover after parsing attributes in process `syz.7.15855'. [ 1600.947324][ T7685] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15855'. [ 1601.238173][ T7697] loop7: detected capacity change from 0 to 256 [ 1601.262711][ T7697] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1601.358406][ T7697] exFAT-fs (loop7): error, invalid access to FAT free cluster (entry 0x00000008) [ 1601.894698][ T7709] xt_CT: No such helper "pptp" [ 1602.231937][ T7693] loop4: detected capacity change from 0 to 32768 [ 1602.686646][ T7706] loop7: detected capacity change from 0 to 32768 [ 1602.862574][ T7734] ecryptfs_parse_options: eCryptfs: unrecognized option [l] [ 1602.869956][ T7734] ecryptfs_parse_options: eCryptfs: unrecognized option [io%bfq.io_serviced_recuÔèrsiÆ‹¡}͸ʼ(©zmÔbE1ôƬÐqd1 ˜K/dev/nullb0] [ 1602.891583][ T7734] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1602.996642][ T7714] loop5: detected capacity change from 0 to 32768 [ 1602.996732][ T7734] Error parsing options; rc = [-22] [ 1603.051805][ T7714] [ 1603.051805][ T7714] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1603.051805][ T7714] [ 1603.122008][ T7714] ERROR: (device loop5): diWrite: ixpxd invalid [ 1603.122008][ T7714] [ 1603.194305][ T7714] ERROR: (device loop5): txCommit: [ 1603.194305][ T7714] [ 1603.458733][T30087] [ 1603.458733][T30087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1603.458733][T30087] [ 1603.501053][T30087] [ 1603.501053][T30087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1603.501053][T30087] [ 1603.599844][ T7750] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1604.131983][ T7764] netlink: 132 bytes leftover after parsing attributes in process `syz.7.15893'. [ 1604.225459][ T5770] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 1604.418776][ T7742] loop0: detected capacity change from 0 to 40427 [ 1604.423165][ T5770] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1604.444697][ T7742] F2FS-fs (loop0): invalid crc value [ 1604.455455][ T5770] usb 6-1: no configurations [ 1604.460111][ T5770] usb 6-1: can't read configurations, error -22 [ 1604.493785][ T7742] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1604.649060][ T7742] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 1604.706412][ T7742] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1604.755026][ T7756] loop2: detected capacity change from 0 to 32768 [ 1604.817135][ T9540] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1605.035028][ T9540] usb 5-1: Using ep0 maxpacket: 32 [ 1605.048450][ T9540] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1605.094648][ T9540] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.131877][ T9540] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1605.151896][ T9540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.176715][ T9540] usb 5-1: Product: syz [ 1605.193938][ T9540] usb 5-1: Manufacturer: syz [ 1605.216827][ T9540] usb 5-1: SerialNumber: syz [ 1605.453761][ T9540] usb 5-1: Limiting number of CPorts to U8_MAX [ 1605.476644][ T9540] usb 5-1: Not enough endpoints found in device, aborting! [ 1605.687090][ T951] usb 5-1: USB disconnect, device number 33 [ 1606.814381][ T7834] loop0: detected capacity change from 0 to 256 [ 1606.822356][ T7833] xt_TCPMSS: Only works on TCP SYN packets [ 1606.983160][ T7834] FAT-fs (loop0): Directory bread(block 64) failed [ 1607.017304][ T7834] FAT-fs (loop0): Directory bread(block 65) failed [ 1607.054860][ T7834] FAT-fs (loop0): Directory bread(block 66) failed [ 1607.081908][ T7834] FAT-fs (loop0): Directory bread(block 67) failed [ 1607.122357][ T7834] FAT-fs (loop0): Directory bread(block 68) failed [ 1607.129009][ T7834] FAT-fs (loop0): Directory bread(block 69) failed [ 1607.170280][ T7834] FAT-fs (loop0): Directory bread(block 70) failed [ 1607.176923][ T7834] FAT-fs (loop0): Directory bread(block 71) failed [ 1607.227012][ T7834] FAT-fs (loop0): Directory bread(block 72) failed [ 1607.258191][ T7834] FAT-fs (loop0): Directory bread(block 73) failed [ 1607.442974][ T7852] netlink: 'syz.7.15935': attribute type 2 has an invalid length. [ 1607.549711][ T52] block nbd5: Attempted send on invalid socket [ 1607.556219][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1607.566214][ T7857] hpfs: hpfs_map_sector(): read error [ 1607.785651][ T7862] program syz.7.15939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1608.067799][ T7877] loop5: detected capacity change from 0 to 256 [ 1608.919705][ T7910] loop2: detected capacity change from 0 to 512 [ 1608.953014][ T7910] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1608.972011][ T7910] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.15963: inline data xattr refers to an external xattr inode [ 1609.066505][ T7910] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.15963: couldn't read orphan inode 12 (err -117) [ 1609.114082][ T7910] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1609.147685][ T7910] EXT4-fs (loop2): unmounting filesystem. [ 1609.622162][ T7931] loop0: detected capacity change from 0 to 4096 [ 1609.649697][ T7931] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1610.756073][ T7963] netlink: 'syz.0.15989': attribute type 32 has an invalid length. [ 1610.862163][ T7967] overlayfs: option "workdir=./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1610.862425][ T7967] overlayfs: missing 'lowerdir' [ 1610.869535][ T7969] loop2: detected capacity change from 0 to 64 [ 1610.949441][ C0] vkms_vblank_simulate: vblank timer overrun [ 1611.693686][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16002'. [ 1611.729307][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16002'. [ 1611.866528][ T7996] netlink: 168 bytes leftover after parsing attributes in process `syz.5.16005'. [ 1611.986847][ T7999] loop7: detected capacity change from 0 to 1024 [ 1612.023660][ T7999] hfsplus: failed to load root directory [ 1612.082059][ T4635] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1612.203816][ T8008] netlink: 288 bytes leftover after parsing attributes in process `syz.2.16011'. [ 1612.311135][ T7974] loop0: detected capacity change from 0 to 32768 [ 1612.386221][ T26] audit: type=1800 audit(1630.853:269): pid=7974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15993" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 1612.462717][ T8012] netlink: 'syz.5.16013': attribute type 11 has an invalid length. [ 1612.515549][ T8012] netlink: 216 bytes leftover after parsing attributes in process `syz.5.16013'. [ 1612.645203][ T8016] loop7: detected capacity change from 0 to 1024 [ 1612.704275][ T8019] loop4: detected capacity change from 0 to 256 [ 1612.770969][ T8016] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1612.870860][ T8019] FAT-fs (loop4): Directory bread(block 64) failed [ 1612.928351][ T8016] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #2: block 16: comm syz.7.16015: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=41827, size=1024 fake=1 [ 1612.944662][ T8019] FAT-fs (loop4): Directory bread(block 65) failed [ 1612.993030][ T8019] FAT-fs (loop4): Directory bread(block 66) failed [ 1612.999631][ T8019] FAT-fs (loop4): Directory bread(block 67) failed [ 1613.015495][ T8028] netlink: 'syz.0.16018': attribute type 7 has an invalid length. [ 1613.043568][ T8028] netlink: 'syz.0.16018': attribute type 8 has an invalid length. [ 1613.073807][ T8019] FAT-fs (loop4): Directory bread(block 68) failed [ 1613.125710][ T8019] FAT-fs (loop4): Directory bread(block 69) failed [ 1613.144929][ T8019] FAT-fs (loop4): Directory bread(block 70) failed [ 1613.151542][ T8019] FAT-fs (loop4): Directory bread(block 71) failed [ 1613.194188][ T8019] FAT-fs (loop4): Directory bread(block 72) failed [ 1613.221042][ T8019] FAT-fs (loop4): Directory bread(block 73) failed [ 1613.267956][ T7433] EXT4-fs (loop7): unmounting filesystem. [ 1613.689950][ T8047] netlink: 80 bytes leftover after parsing attributes in process `syz.0.16025'. [ 1614.084737][ T8058] loop2: detected capacity change from 0 to 1024 [ 1614.087300][ T8063] loop7: detected capacity change from 0 to 256 [ 1614.100397][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16033'. [ 1614.180824][ T8063] exfat: Deprecated parameter 'namecase' [ 1614.253080][ T8063] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1614.390470][ T8058] hfsplus: extend alloc file! (8192,512,16777721) [ 1614.416664][ T8071] netlink: 'syz.4.16037': attribute type 10 has an invalid length. [ 1614.557106][ T8071] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1614.850978][ T8083] openvswitch: netlink: Message has 1 unknown bytes. [ 1615.210042][ T8098] netlink: 172 bytes leftover after parsing attributes in process `syz.7.16048'. [ 1616.042465][ T8128] loop0: detected capacity change from 0 to 16 [ 1616.101539][ T8128] erofs: (device loop0): mounted with root inode @ nid 36. [ 1616.649905][ T8148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16068'. [ 1616.718317][ T8148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16068'. [ 1616.926903][ T8158] loop4: detected capacity change from 0 to 47 [ 1617.254768][ T8172] loop0: detected capacity change from 0 to 256 [ 1617.319148][ T8172] exfat: Deprecated parameter 'namecase' [ 1617.324938][ T8172] exfat: Deprecated parameter 'utf8' [ 1617.387721][ T8174] loop4: detected capacity change from 0 to 2048 [ 1617.431458][ T8172] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1617.499593][ T8181] Lens B: ================= START STATUS ================= [ 1617.518827][ T8181] Lens B: Focus, Absolute: 0 [ 1617.559284][ T8174] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1617.559545][ T8181] Lens B: ================== END STATUS ================== [ 1617.636079][ T8186] netlink: 'syz.7.16084': attribute type 11 has an invalid length. [ 1617.683819][ T8186] netlink: 228 bytes leftover after parsing attributes in process `syz.7.16084'. [ 1617.696861][ T26] audit: type=1800 audit(1636.425:270): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16079" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 1618.017661][ T8193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1618.307323][ T8200] loop2: detected capacity change from 0 to 256 [ 1618.465133][ T8200] FAT-fs (loop2): Directory bread(block 64) failed [ 1618.484606][ T8200] FAT-fs (loop2): Directory bread(block 65) failed [ 1618.515405][ T8200] FAT-fs (loop2): Directory bread(block 66) failed [ 1618.541416][T26164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.562980][ T8200] FAT-fs (loop2): Directory bread(block 67) failed [ 1618.592597][ T8200] FAT-fs (loop2): Directory bread(block 68) failed [ 1618.636492][ T8200] FAT-fs (loop2): Directory bread(block 69) failed [ 1618.661243][ T8202] loop7: detected capacity change from 0 to 4096 [ 1618.672523][ T8200] FAT-fs (loop2): Directory bread(block 70) failed [ 1618.679136][ T8200] FAT-fs (loop2): Directory bread(block 71) failed [ 1618.700514][ T8200] FAT-fs (loop2): Directory bread(block 72) failed [ 1618.707252][ T8200] FAT-fs (loop2): Directory bread(block 73) failed [ 1618.768318][ C0] vkms_vblank_simulate: vblank timer overrun [ 1618.915984][T26164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.006601][ T8202] ntfs: (device loop7): parse_options(): NLS character set cp not found. Using previous one iso8859-14. [ 1619.100688][ T8202] ntfs: volume version 3.1. [ 1619.192243][T26164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.435731][ T26] audit: type=1326 audit(1638.251:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.5.16102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1619.524840][ T26] audit: type=1326 audit(1638.272:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.5.16102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1619.547423][T26164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.608553][ T26] audit: type=1326 audit(1638.272:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.5.16102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1619.709498][ T26] audit: type=1326 audit(1638.283:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.5.16102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1620.293624][ T4302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1620.329830][ T4302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1620.341420][ T4309] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1620.354363][ T4302] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1620.362913][ T4302] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1620.377397][ T4302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1620.975717][ T8268] loop2: detected capacity change from 0 to 128 [ 1621.002700][ T8268] FAT-fs (loop2): Directory bread(block 3236) failed [ 1621.021991][ T8268] FAT-fs (loop2): Directory bread(block 3237) failed [ 1621.054047][ T8268] FAT-fs (loop2): Directory bread(block 3238) failed [ 1621.077695][ T8268] FAT-fs (loop2): Directory bread(block 3239) failed [ 1621.120936][ T8268] FAT-fs (loop2): Directory bread(block 3240) failed [ 1621.127710][ T8268] FAT-fs (loop2): Directory bread(block 3241) failed [ 1621.164767][ T8268] FAT-fs (loop2): Directory bread(block 3242) failed [ 1621.187051][T30619] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1621.203713][ T8272] loop4: detected capacity change from 0 to 64 [ 1621.210539][ T8268] FAT-fs (loop2): Directory bread(block 3243) failed [ 1621.246627][ T8268] FAT-fs (loop2): Directory bread(block 3236) failed [ 1621.301800][ T8268] FAT-fs (loop2): Directory bread(block 3237) failed [ 1621.371027][T30619] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1621.388157][T30619] usb 8-1: not running at top speed; connect to a high speed hub [ 1621.426693][T30619] usb 8-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 1621.463867][T30619] usb 8-1: config 219 interface 0 has no altsetting 0 [ 1621.479484][T30619] usb 8-1: config 219 interface 0 has no altsetting 1 [ 1621.532119][T30619] usb 8-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 1621.549290][T30619] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.577234][T30619] usb 8-1: Product: syz [ 1621.591430][T30619] usb 8-1: Manufacturer: syz [ 1621.596131][T30619] usb 8-1: SerialNumber: syz [ 1621.629346][ T8281] loop2: detected capacity change from 0 to 256 [ 1621.778534][ T8281] FAT-fs (loop2): Directory bread(block 64) failed [ 1621.785211][ T8281] FAT-fs (loop2): Directory bread(block 65) failed [ 1621.792270][ T8283] netlink: 'syz.4.16125': attribute type 11 has an invalid length. [ 1621.845073][ T8283] netlink: 216 bytes leftover after parsing attributes in process `syz.4.16125'. [ 1621.845085][ T8281] FAT-fs (loop2): Directory bread(block 66) failed [ 1621.845121][ T8281] FAT-fs (loop2): Directory bread(block 67) failed [ 1621.902713][T30619] usb 8-1: selecting invalid altsetting 0 [ 1621.940108][ T8281] FAT-fs (loop2): Directory bread(block 68) failed [ 1621.946879][ T8281] FAT-fs (loop2): Directory bread(block 69) failed [ 1621.973291][ T8281] FAT-fs (loop2): Directory bread(block 70) failed [ 1621.985120][ T8281] FAT-fs (loop2): Directory bread(block 71) failed [ 1621.992385][ T8281] FAT-fs (loop2): Directory bread(block 72) failed [ 1621.999375][ T8281] FAT-fs (loop2): Directory bread(block 73) failed [ 1622.033334][ T8257] loop5: detected capacity change from 0 to 32768 [ 1622.070896][T30619] snd-usb-audio: probe of 8-1:219.0 failed with error -22 [ 1622.107808][ T8257] XFS (loop5): Mounting V5 Filesystem [ 1622.131635][T30619] usb 8-1: USB disconnect, device number 2 [ 1622.135018][ T4436] udevd[4436]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1622.282017][ T8257] XFS (loop5): Ending clean mount [ 1622.320187][ T8257] XFS (loop5): Quotacheck needed: Please wait. [ 1622.327344][T30088] Bluetooth: hci0: command 0x0409 tx timeout [ 1622.426388][ T8257] XFS (loop5): Quotacheck: Done. [ 1622.623075][ T8240] chnl_net:caif_netlink_parms(): no params data found [ 1622.654195][T30087] XFS (loop5): Unmounting Filesystem [ 1622.721348][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.184044][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.263908][ T8240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.271613][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.284751][ T8240] device bridge_slave_0 entered promiscuous mode [ 1623.322474][ T8240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.329633][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.339412][ T8240] device bridge_slave_1 entered promiscuous mode [ 1623.463881][ T8323] loop4: detected capacity change from 0 to 512 [ 1623.519024][T20691] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1623.563778][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.647098][ T8323] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1623.666894][ T26] audit: type=1326 audit(1642.680:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.7.16139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880198e969 code=0x50000 [ 1623.724806][T20691] usb 3-1: Using ep0 maxpacket: 8 [ 1623.744703][T20691] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1623.748331][T26164] team0: Port device wlan1 removed [ 1623.820106][T20691] usb 3-1: config 8 has an invalid interface number: 255 but max is 0 [ 1623.839030][ T8240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.865178][T20691] usb 3-1: config 8 has no interface number 0 [ 1623.868210][ T26] audit: type=1326 audit(1642.732:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.7.16139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880198e969 code=0x50000 [ 1623.871327][T20691] usb 3-1: config 8 interface 255 has no altsetting 0 [ 1623.951536][ T26] audit: type=1326 audit(1642.732:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.7.16139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880198e969 code=0x50000 [ 1623.970822][T20691] usb 3-1: string descriptor 0 read error: -22 [ 1623.984980][ T8240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.998477][ T26] audit: type=1326 audit(1642.732:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.7.16139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880198e969 code=0x50000 [ 1624.014920][T20691] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1624.046548][ T26] audit: type=1326 audit(1642.732:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.7.16139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880198e969 code=0x50000 [ 1624.059951][T20691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.094036][ T26] audit: type=1326 audit(1642.732:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.7.16139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880198e969 code=0x50000 [ 1624.136343][ C0] vkms_vblank_simulate: vblank timer overrun [ 1624.166948][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 1624.185480][ T26] audit: type=1326 audit(1642.732:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.7.16139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880198e969 code=0x50000 [ 1624.248781][ T26] audit: type=1326 audit(1642.732:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.7.16139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880198e969 code=0x50000 [ 1624.310878][ T26] audit: type=1326 audit(1642.732:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.7.16139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880198e969 code=0x50000 [ 1624.322286][T30088] Bluetooth: hci0: command 0x041b tx timeout [ 1624.421782][T26164] batman_adv: batadv0: Interface deactivated: wlan0 [ 1624.454962][ T26] audit: type=1326 audit(1642.732:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8332 comm="syz.7.16139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880198e969 code=0x50000 [ 1624.487315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1624.636171][T20691] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.2-1, 00:00:00:00:00:00. [ 1624.770804][ C0] vkms_vblank_simulate: vblank timer overrun [ 1624.894120][T26164] batman_adv: batadv0: Removing interface: wlan0 [ 1624.919860][ T8345] loop4: detected capacity change from 0 to 4096 [ 1624.938431][ T8240] team0: Port device team_slave_0 added [ 1625.002414][T20691] usb 3-1: USB disconnect, device number 32 [ 1625.063174][ T8240] team0: Port device team_slave_1 added [ 1625.300631][T26164] device hsr_slave_0 left promiscuous mode [ 1625.316931][ T8345] ntfs: volume version 3.1. [ 1625.334007][T26164] device hsr_slave_1 left promiscuous mode [ 1625.374927][T26164] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1625.408831][T26164] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1625.562699][T26164] device veth1_macvtap left promiscuous mode [ 1625.568842][T26164] device veth0_macvtap left promiscuous mode [ 1625.591521][T26164] device veth1_vlan left promiscuous mode [ 1625.650137][ T8355] usb usb1: usbfs: process 8355 (syz.5.16145) did not claim interface 63 before use [ 1625.932576][ T951] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1626.115524][ T951] usb 5-1: config 0 has an invalid interface number: 207 but max is 0 [ 1626.134578][ T951] usb 5-1: config 0 has no interface number 0 [ 1626.153326][ T951] usb 5-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1626.199689][ T951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.208519][ T951] usb 5-1: Product: syz [ 1626.227927][ T951] usb 5-1: Manufacturer: syz [ 1626.233330][ T951] usb 5-1: SerialNumber: syz [ 1626.244806][ T951] usb 5-1: config 0 descriptor?? [ 1626.278231][ T951] qmi_wwan 5-1:0.207: bogus CDC Union: master=0, slave=1 [ 1626.295054][T30088] Bluetooth: hci0: command 0x040f tx timeout [ 1626.480867][ T951] qmi_wwan: probe of 5-1:0.207 failed with error -22 [ 1626.597674][ T8371] loop2: detected capacity change from 0 to 1024 [ 1626.703136][T20691] usb 5-1: USB disconnect, device number 34 [ 1626.839411][ T8248] hfsplus: b-tree write err: -5, ino 4 [ 1626.840956][T26164] bond1 (unregistering): Released all slaves [ 1627.200443][T20691] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1627.343286][ C0] vkms_vblank_simulate: vblank timer overrun [ 1627.403840][T20691] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1627.436210][T20691] usb 3-1: not running at top speed; connect to a high speed hub [ 1627.479317][T20691] usb 3-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 1627.509389][T20691] usb 3-1: config 219 interface 0 has no altsetting 0 [ 1627.524262][T20691] usb 3-1: config 219 interface 0 has no altsetting 1 [ 1627.542926][T20691] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 1627.563489][ T8390] loop7: detected capacity change from 0 to 128 [ 1627.586844][ T8390] FAT-fs (loop7): Directory bread(block 3236) failed [ 1627.591032][T20691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.603857][T20691] usb 3-1: Product: syz [ 1627.610680][T20691] usb 3-1: Manufacturer: syz [ 1627.613759][ T8390] FAT-fs (loop7): Directory bread(block 3237) failed [ 1627.622074][T20691] usb 3-1: SerialNumber: syz [ 1627.638079][ T8390] FAT-fs (loop7): Directory bread(block 3238) failed [ 1627.653448][ T8390] FAT-fs (loop7): Directory bread(block 3239) failed [ 1627.662138][ T8390] FAT-fs (loop7): Directory bread(block 3240) failed [ 1627.678596][ T8390] FAT-fs (loop7): Directory bread(block 3241) failed [ 1627.685393][ T8390] FAT-fs (loop7): Directory bread(block 3242) failed [ 1627.692791][ T8390] FAT-fs (loop7): Directory bread(block 3243) failed [ 1627.732055][ T8390] FAT-fs (loop7): Directory bread(block 3236) failed [ 1627.739234][ T8390] FAT-fs (loop7): Directory bread(block 3237) failed [ 1627.787939][ C0] vkms_vblank_simulate: vblank timer overrun [ 1627.914693][T20691] usb 3-1: selecting invalid altsetting 0 [ 1628.029027][T20691] snd-usb-audio: probe of 3-1:219.0 failed with error -22 [ 1628.045173][T20691] usb 3-1: USB disconnect, device number 33 [ 1628.267344][ T4810] udevd[4810]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1628.286344][T30088] Bluetooth: hci0: command 0x0419 tx timeout [ 1628.823466][ T8417] loop4: detected capacity change from 0 to 256 [ 1628.833161][ T8415] loop7: detected capacity change from 0 to 512 [ 1628.833432][ T8419] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16176'. [ 1628.849419][ T8419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16176'. [ 1628.895214][ T8417] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1628.896408][ T8415] EXT4-fs: Ignoring removed nobh option [ 1628.916573][ T8417] FAT-fs (loop4): Filesystem has been set read-only [ 1629.004605][ T8415] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.16174: invalid indirect mapped block 256 (level 2) [ 1629.034940][ T8415] EXT4-fs (loop7): 2 truncates cleaned up [ 1629.041986][ T8415] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1629.259371][ T7433] EXT4-fs (loop7): unmounting filesystem. [ 1629.724957][ T8425] loop4: detected capacity change from 0 to 32768 [ 1629.776584][ T8425] jfs_strtoUCS: char2uni returned -22. [ 1629.784675][ T8425] charset = cp932, char = 0xfc [ 1630.281820][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16185'. [ 1630.704665][ T8447] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1630.710627][ C0] vkms_vblank_simulate: vblank timer overrun [ 1630.728579][ T8447] gfs2: error 10 reading superblock [ 1630.790223][ C0] vkms_vblank_simulate: vblank timer overrun [ 1631.396451][ T8460] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.16195'. [ 1631.696760][T26164] bond0 (unregistering): Released all slaves [ 1631.758273][ T8240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1631.770861][ T8240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1631.796788][ C0] vkms_vblank_simulate: vblank timer overrun [ 1631.844226][ T8240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1631.891960][ T8427] netlink: 'syz.2.16180': attribute type 7 has an invalid length. [ 1631.911303][ T8240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1631.939625][ T8240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1631.965597][ C0] vkms_vblank_simulate: vblank timer overrun [ 1632.117405][ T8240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1632.184363][ T8480] xt_bpf: check failed: parse error [ 1632.351635][ T8240] device hsr_slave_0 entered promiscuous mode [ 1632.432446][ T8240] device hsr_slave_1 entered promiscuous mode [ 1632.452915][ T8240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1632.479524][ T8240] Cannot create hsr debugfs directory [ 1632.487909][ T8489] xt_TCPMSS: Only works on TCP SYN packets [ 1632.668117][ T8495] loop5: detected capacity change from 0 to 164 [ 1632.768474][ T8495] rock: directory entry would overflow storage [ 1632.785551][ T8495] rock: sig=0x66, size=4, remaining=3 [ 1632.955343][ T8502] loop4: detected capacity change from 0 to 512 [ 1632.993189][ T8502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1633.040303][ T8502] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.16212: casefold flag without casefold feature [ 1633.072291][ T8507] xt_connbytes: Forcing CT accounting to be enabled [ 1633.079003][ T8507] xt_bpf: check failed: parse error [ 1633.136393][ T8502] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.16212: couldn't read orphan inode 15 (err -117) [ 1633.151376][ T8502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1633.156398][T20691] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1633.252391][ T4304] EXT4-fs (loop4): unmounting filesystem. [ 1633.306035][ T8513] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1633.388460][T20691] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1633.413931][T20691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.468924][T20691] usb 6-1: config 0 descriptor?? [ 1633.515090][ T8240] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1633.524676][T20691] usb 6-1: selecting invalid altsetting 1 [ 1633.574549][ T8240] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1633.613656][T20691] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1633.633013][ T8240] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1633.676949][ T8240] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1633.739101][T20691] usb 6-1: USB disconnect, device number 26 [ 1633.957327][ T4635] udevd[4635]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1634.014938][ T8240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1634.068066][T26156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1634.087913][T26156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1634.139727][ T8240] 8021q: adding VLAN 0 to HW filter on device team0 [ 1634.164795][T26156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1634.175924][T26156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1634.202464][T26156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1634.209736][T26156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1634.280681][T26156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1634.361536][T26170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1634.397200][T26170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1634.441424][T26170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1634.448640][T26170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1634.494339][T26170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1634.521069][T26170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1634.569143][T26170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1634.614038][T30619] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1634.617649][T26170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1634.641486][T26170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1634.705489][T26170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1634.748205][ T8549] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 1634.777496][T26170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1634.796772][T26170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1634.804726][T30619] usb 8-1: Using ep0 maxpacket: 32 [ 1634.806721][T30619] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1634.825854][T26170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1634.854250][T26170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1634.861936][T30619] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.881953][T26170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1634.899187][T30619] usb 8-1: config 0 descriptor?? [ 1634.930390][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1634.941841][T30619] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1635.134398][T30619] gspca_sq930x: reg_r 001f failed -71 [ 1635.141056][T30619] sq930x: probe of 8-1:0.0 failed with error -71 [ 1635.184280][ T26] kauditd_printk_skb: 2163 callbacks suppressed [ 1635.184308][ T26] audit: type=1326 audit(1654.769:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.2.16234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd3b8e969 code=0x7ffc0000 [ 1635.189243][T30619] usb 8-1: USB disconnect, device number 3 [ 1635.204372][ T26] audit: type=1326 audit(1654.779:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.2.16234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f3cd3b8e969 code=0x7ffc0000 [ 1635.377609][ T26] audit: type=1326 audit(1654.905:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.2.16234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd3b8e969 code=0x7ffc0000 [ 1635.453118][ T26] audit: type=1326 audit(1654.905:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.2.16234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd3b8e969 code=0x7ffc0000 [ 1635.960390][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1635.994646][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1636.023770][ T8591] netlink: 176 bytes leftover after parsing attributes in process `syz.2.16244'. [ 1636.039388][ T8240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1636.428288][ T8606] loop7: detected capacity change from 0 to 164 [ 1636.595531][ T8611] loop4: detected capacity change from 0 to 2048 [ 1636.693669][ T8611] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1636.789013][ T8611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1636.928928][ T26] audit: type=1800 audit(1656.605:2451): pid=8611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16251" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 1637.854629][T26156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1637.888742][T26156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1637.954416][ T8658] netlink: 16 bytes leftover after parsing attributes in process `syz.7.16270'. [ 1637.964059][ T8240] device veth0_vlan entered promiscuous mode [ 1638.043913][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1638.064732][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1638.122908][ T8240] device veth1_vlan entered promiscuous mode [ 1638.124232][ T26] audit: type=1326 audit(1657.865:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.5.16272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1638.168585][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1638.177257][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1638.201365][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1638.234870][ T26] audit: type=1326 audit(1657.917:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.5.16272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1638.332289][T26161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1638.350225][T26161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1638.368656][ T26] audit: type=1326 audit(1657.917:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.5.16272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1638.386931][T26161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1638.455785][ T8240] device veth0_macvtap entered promiscuous mode [ 1638.481606][ T26] audit: type=1326 audit(1657.917:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.5.16272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439d18e969 code=0x7ffc0000 [ 1638.515107][ T8240] device veth1_macvtap entered promiscuous mode [ 1638.623226][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1638.666893][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.712003][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1638.731213][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.769558][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1638.788305][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.818280][ T8240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1638.835762][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16278'. [ 1638.864513][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1638.884279][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1638.906923][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1638.925024][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1638.972368][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.998425][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1639.053567][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1639.105817][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1639.141724][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1639.179534][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1639.233502][ T8240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1639.267558][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1639.284410][T26150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1639.327956][ T8240] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.360468][ T8240] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.390085][ T8240] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.416858][ T8240] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.673375][ T8240] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 1639.731217][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1639.765136][ T8240] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 1639.796022][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1639.947152][T26164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.995711][T26164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.059939][T26170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.064622][T26156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1640.093567][T26170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.187819][T26158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1640.631009][ T8743] ptrace attach of "./syz-executor exec"[30087] was attempted by "./syz-executor exec"[8743] [ 1641.506444][ T8774] netlink: 'syz.7.16318': attribute type 10 has an invalid length. [ 1641.679605][ T8774] team0: Port device syz_tun added [ 1641.703469][ T8739] loop8: detected capacity change from 0 to 32768 [ 1641.778199][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16321'. [ 1641.821752][ T8739] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 1641.947964][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16323'. [ 1641.968440][ T8794] loop7: detected capacity change from 0 to 256 [ 1641.979056][ T8739] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1642.047654][ T8794] FAT-fs (loop7): Directory bread(block 64) failed [ 1642.109393][ T8739] (syz.8.16096,8739,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 1642.115741][ T8794] FAT-fs (loop7): Directory bread(block 65) failed [ 1642.174046][ T8794] FAT-fs (loop7): Directory bread(block 66) failed [ 1642.179911][ T8739] (syz.8.16096,8739,1):ocfs2_xattr_block_find:2835 ERROR: status = -12 [ 1642.203373][ T8794] FAT-fs (loop7): Directory bread(block 67) failed [ 1642.244683][ T8794] FAT-fs (loop7): Directory bread(block 68) failed [ 1642.281542][ T8794] FAT-fs (loop7): Directory bread(block 69) failed [ 1642.325472][ T8794] FAT-fs (loop7): Directory bread(block 70) failed [ 1642.354732][ T8794] FAT-fs (loop7): Directory bread(block 71) failed [ 1642.426166][ T8794] FAT-fs (loop7): Directory bread(block 72) failed [ 1642.450515][ T8240] ocfs2: Unmounting device (7,8) on (node local) [ 1642.457500][ T8794] FAT-fs (loop7): Directory bread(block 73) failed [ 1642.674717][ T8809] loop5: detected capacity change from 0 to 1764 [ 1643.095230][ T951] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1643.288470][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16338'. [ 1643.303154][ T951] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 1643.312339][ T951] usb 5-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 1643.334043][ T951] usb 5-1: config 0 has no interface number 0 [ 1643.341228][ T951] usb 5-1: config 0 interface 95 altsetting 0 endpoint 0x1 has an invalid bInterval 114, changing to 10 [ 1643.395800][ T951] usb 5-1: config 0 interface 95 altsetting 0 endpoint 0x1 has invalid maxpacket 33648, setting to 1024 [ 1643.456077][ T951] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 1643.500985][ T951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.532663][ T951] usb 5-1: Product: syz [ 1643.572618][ T951] usb 5-1: Manufacturer: syz [ 1643.604060][ T951] usb 5-1: SerialNumber: syz [ 1643.621776][ T951] usb 5-1: config 0 descriptor?? [ 1643.709949][ T8835] loop5: detected capacity change from 0 to 4096 [ 1643.762107][ T8835] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 10) do not match. Run ntfsfix or chkdsk. [ 1643.810809][ T8835] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1643.829609][ T951] usb 5-1: MIDIStreaming interface descriptor not found [ 1643.861877][ T8835] ntfs: (device loop5): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 1643.914405][ T8835] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1643.920232][ T951] usb 5-1: USB disconnect, device number 35 [ 1643.986796][ T8835] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1644.052057][ T8835] ntfs: volume version 3.1. [ 1644.211880][ T8816] loop7: detected capacity change from 0 to 32768 [ 1644.339793][ T8816] syz.7.16335: attempt to access beyond end of device [ 1644.339793][ T8816] loop7: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 1644.391294][ T8816] metapage_write_end_io: I/O error [ 1644.402460][ T8816] blkno = 8ed2c, nblocks = 1 [ 1644.417828][ T8816] ERROR: (device loop7): dbUpdatePMap: blocks are outside the map [ 1644.417828][ T8816] [ 1644.490474][ T8846] vivid-000: disconnect [ 1644.502197][ T8816] ERROR: (device loop7): remounting filesystem as read-only [ 1644.540149][ T8816] UFO tlock:0xffffc9000288a048 [ 1644.546912][ T8845] vivid-000: reconnect [ 1644.743210][ T106] blkno = 8ed2c, nblocks = 4 [ 1644.748426][ T106] ERROR: (device loop7): dbUpdatePMap: blocks are outside the map [ 1644.748426][ T106] [ 1644.799079][ T7433] syz-executor: attempt to access beyond end of device [ 1644.799079][ T7433] loop7: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 1644.822372][ T8855] netlink: 'syz.2.16347': attribute type 10 has an invalid length. [ 1644.848678][ T7433] metapage_write_end_io: I/O error [ 1644.854219][ T7433] JFS: metapage_get_blocks failed [ 1644.877037][ T7433] JFS: metapage_get_blocks failed [ 1644.882157][ T7433] JFS: metapage_get_blocks failed [ 1644.935982][ T7433] JFS: metapage_get_blocks failed [ 1644.960999][ T8855] team0: Port device syz_tun added [ 1645.213674][ T8869] loop4: detected capacity change from 0 to 64 [ 1645.658656][T30088] Bluetooth: hci5: command 0x0406 tx timeout [ 1646.160484][ T8898] loop2: detected capacity change from 0 to 512 [ 1646.193291][ T8898] EXT4-fs: Ignoring removed nobh option [ 1646.280283][ T8898] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #3: comm syz.2.16364: corrupted inode contents [ 1646.317136][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 1646.331453][ T8898] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #3: comm syz.2.16364: mark_inode_dirty error [ 1646.345320][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 1646.352885][T30619] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1646.397291][ T8913] loop7: detected capacity change from 0 to 512 [ 1646.401017][ T8898] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #3: comm syz.2.16364: corrupted inode contents [ 1646.427564][ T8913] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1646.500206][ T8913] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #17: comm syz.7.16369: iget: bad i_size value: -6917529027641081756 [ 1646.536727][T30619] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1646.563665][T30619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.574572][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 1646.581177][ T8898] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.16364: mark_inode_dirty error [ 1646.598282][ T8913] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.16369: couldn't read orphan inode 17 (err -117) [ 1646.603005][T30619] usb 6-1: config 0 descriptor?? [ 1646.640570][ T8913] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1646.646607][T30619] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1646.657183][ T8911] loop8: detected capacity change from 0 to 4096 [ 1646.670657][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 1646.711090][ T8911] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512) [ 1646.721636][ T8898] Quota error (device loop2): write_blk: dquota write failed [ 1646.750624][ T8911] ntfs3: loop8: mft corrupted [ 1646.755630][ T8898] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1646.785177][ T8911] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1646.794319][ T8898] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.16364: Failed to acquire dquot type 0 [ 1646.817745][ T8911] ntfs3: loop8: Failed to load $MFT. [ 1646.867451][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 1646.929129][ T8923] loop4: detected capacity change from 0 to 256 [ 1646.935764][ T7433] EXT4-fs (loop7): unmounting filesystem. [ 1646.982636][ T8898] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.16364: corrupted inode contents [ 1647.026493][T30619] gspca_stv06xx: I2C: Read error writing address: -71 [ 1647.057324][ T8923] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 1647.069733][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 1647.069846][ T8898] EXT4-fs error (device loop2): ext4_dirty_inode:6118: inode #16: comm syz.2.16364: mark_inode_dirty error [ 1647.100438][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 1647.118006][T30619] usb 6-1: USB disconnect, device number 27 [ 1647.141904][ T8898] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.16364: corrupted inode contents [ 1647.203286][ T26] audit: type=1326 audit(1667.393:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.7.16372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880198e969 code=0x7ffc0000 [ 1647.250390][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 1647.277048][ T8898] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.16364: mark_inode_dirty error [ 1647.283497][ T26] audit: type=1326 audit(1667.393:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.7.16372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880198e969 code=0x7ffc0000 [ 1647.310468][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.351303][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 1647.374320][ T8898] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.16364: corrupted inode contents [ 1647.428673][ T26] audit: type=1326 audit(1667.393:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.7.16372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f880198d2d0 code=0x7ffc0000 [ 1647.450921][ C0] vkms_vblank_simulate: vblank timer overrun [ 1647.478519][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 1647.486315][ T8898] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 1647.535046][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 1647.566221][ T8898] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #16: comm syz.2.16364: corrupted inode contents [ 1647.620888][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 1647.652267][ T8898] EXT4-fs error (device loop2): ext4_truncate:4312: inode #16: comm syz.2.16364: mark_inode_dirty error [ 1647.711781][ T8938] loop8: detected capacity change from 0 to 256 [ 1647.732185][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 1647.755747][ T8938] exfat: Deprecated parameter 'utf8' [ 1647.761230][ T8938] exfat: Deprecated parameter 'namecase' [ 1647.770267][ T8898] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 1647.813107][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 1647.825526][ T8938] exfat: Deprecated parameter 'namecase' [ 1647.842138][ T8938] exfat: Deprecated parameter 'utf8' [ 1647.849496][ T8898] EXT4-fs (loop2): 1 truncate cleaned up [ 1647.878646][ T8898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1647.893642][ T8938] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1648.154524][ T8898] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #12: block 13: comm syz.2.16364: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 1648.256240][ T8898] EXT4-fs (loop2): Remounting filesystem read-only [ 1648.450265][ T8963] loop5: detected capacity change from 0 to 256 [ 1648.460337][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 1648.501723][T26158] EXT4-fs error (device loop2): ext4_release_dquot:6838: comm kworker/u4:14: Failed to release dquot type 1 [ 1648.548683][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1648.555421][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1648.566659][T26158] EXT4-fs (loop2): Remounting filesystem read-only [ 1648.623938][ T8963] FAT-fs (loop5): Directory bread(block 64) failed [ 1648.679189][ T8963] FAT-fs (loop5): Directory bread(block 65) failed [ 1648.726771][ T8963] FAT-fs (loop5): Directory bread(block 66) failed [ 1648.733378][ T8963] FAT-fs (loop5): Directory bread(block 67) failed [ 1648.798504][ T8963] FAT-fs (loop5): Directory bread(block 68) failed [ 1648.846962][ T8963] FAT-fs (loop5): Directory bread(block 69) failed [ 1648.908154][ T8963] FAT-fs (loop5): Directory bread(block 70) failed [ 1648.944934][ T8963] FAT-fs (loop5): Directory bread(block 71) failed [ 1648.966421][ T8963] FAT-fs (loop5): Directory bread(block 72) failed [ 1649.022508][ T8963] FAT-fs (loop5): Directory bread(block 73) failed [ 1649.190118][ T8981] loop2: detected capacity change from 0 to 1024 [ 1649.436877][ T8987] loop4: detected capacity change from 0 to 256 [ 1649.492091][ T8989] xt_bpf: check failed: parse error [ 1649.506020][ T8987] exfat: Deprecated parameter 'utf8' [ 1649.542750][T26150] hfsplus: b-tree write err: -5, ino 4 [ 1649.587994][ T8987] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1649.920165][ T8999] futex_wake_op: syz.7.16402 tries to shift op by -1; fix this program [ 1649.989833][ T9003] netlink: 'syz.8.16403': attribute type 5 has an invalid length. [ 1650.480858][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16412'. [ 1651.024618][ T9049] loop8: detected capacity change from 0 to 256 [ 1651.160901][ T9049] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1651.361903][ T9057] loop4: detected capacity change from 0 to 64 [ 1651.547988][ T9065] netlink: 'syz.5.16430': attribute type 32 has an invalid length. [ 1652.214993][ T28] INFO: task syz-executor:4298 blocked for more than 143 seconds. [ 1652.222861][ T28] Not tainted 6.1.140-syzkaller #0 [ 1652.252692][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1652.299000][ T28] task:syz-executor state:D stack:22080 pid:4298 ppid:1 flags:0x00004004 [ 1652.330999][ T28] Call Trace: [ 1652.344615][ T28] [ 1652.375452][ T28] __schedule+0x10e9/0x40d0 [ 1652.394919][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 1652.417074][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1652.454086][ T28] ? lock_chain_count+0x20/0x20 [ 1652.459206][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 1652.480469][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1652.500544][ T28] schedule+0xb9/0x180 [ 1652.504725][ T28] io_schedule+0x7c/0xd0 [ 1652.509021][ T28] folio_wait_bit_common+0x6e1/0xf60 [ 1652.533462][ T28] ? folio_wait_bit+0x30/0x30 [ 1652.538224][ T28] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 1652.552958][ T28] ? folio_mapping+0x1ba/0x4d0 [ 1652.557972][ T28] truncate_inode_pages_range+0x9a2/0xff0 [ 1652.563777][ T28] ? mapping_evict_folio+0x520/0x520 [ 1652.573341][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1652.582306][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1652.587719][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1652.592971][ T28] evict+0x498/0x870 [ 1652.597017][ T28] ? proc_nr_inodes+0x2f0/0x2f0 [ 1652.601922][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 1652.607420][ T28] ? _raw_spin_unlock+0x24/0x40 [ 1652.612329][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 1652.625726][ T28] evict_inodes+0x604/0x690 [ 1652.630314][ T28] ? clear_inode+0x150/0x150 [ 1652.641299][ T28] ? dput+0x1c9/0x1d0 [ 1652.647546][ T28] ? sync_filesystem+0x103/0x220 [ 1652.653686][ T28] generic_shutdown_super+0x93/0x340 [ 1652.659030][ T28] kill_block_super+0x7c/0xe0 [ 1652.664054][ T28] deactivate_locked_super+0x93/0xf0 [ 1652.669389][ T28] cleanup_mnt+0x463/0x4f0 [ 1652.673987][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1652.679246][ T28] task_work_run+0x1ca/0x250 [ 1652.685284][ T28] ? task_work_cancel+0x230/0x230 [ 1652.690375][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 1652.698837][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 1652.704250][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 1652.718529][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 1652.724160][ T28] do_syscall_64+0x58/0xa0 [ 1652.728636][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1652.741887][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1652.746648][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1652.762143][ T28] RIP: 0033:0x7f005db8fc97 [ 1652.766634][ T28] RSP: 002b:00007ffe20adbe08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1652.785769][ T28] RAX: 0000000000000000 RBX: 00007f005dc1089d RCX: 00007f005db8fc97 [ 1652.806754][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe20adbec0 [ 1652.834216][ T28] RBP: 00007ffe20adbec0 R08: 0000000000000000 R09: 0000000000000000 [ 1652.842259][ T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe20adcf50 [ 1652.860742][ T28] R13: 00007f005dc1089d R14: 00000000001748d2 R15: 00007ffe20adcf90 [ 1652.870407][ T28] [ 1652.882871][ T28] [ 1652.882871][ T28] Showing all locks held in the system: [ 1652.890646][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1652.912436][ T28] #0: ffffffff8c92b4b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1652.928380][ T28] 1 lock held by rcu_tasks_trace/13: [ 1652.936969][ T28] #0: ffffffff8c92bcd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1652.958680][ T28] 1 lock held by khungtaskd/28: [ 1652.963592][ T28] #0: ffffffff8c92ab20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1652.973864][ T28] 2 locks held by getty/4014: [ 1652.978691][ T28] #0: ffff88814d04d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1652.988639][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 1652.998928][ T28] 1 lock held by syz-executor/4298: [ 1653.004160][ T28] #0: ffff8880764de0e0 (&type->s_umount_key#67){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 1653.020182][ T28] 1 lock held by syz.6.15529/6959: [ 1653.029643][ T28] #0: ffff8880764de0e0 (&type->s_umount_key#67){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 1653.049566][ T28] 2 locks held by sed/9104: [ 1653.056734][ T28] [ 1653.059119][ T28] ============================================= [ 1653.059119][ T28] [ 1653.090577][ T28] NMI backtrace for cpu 1 [ 1653.094972][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.140-syzkaller #0 [ 1653.102895][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1653.112982][ T28] Call Trace: [ 1653.116289][ T28] [ 1653.119248][ T28] dump_stack_lvl+0x168/0x22e [ 1653.123980][ T28] ? irq_work_queue+0xb8/0x140 [ 1653.128786][ T28] ? show_regs_print_info+0x12/0x12 [ 1653.134028][ T28] ? load_image+0x3b0/0x3b0 [ 1653.138609][ T28] ? vprintk_emit+0x571/0x680 [ 1653.143423][ T28] ? printk_sprint+0x460/0x460 [ 1653.148325][ T28] nmi_cpu_backtrace+0x3f4/0x470 [ 1653.153313][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1653.159512][ T28] ? _printk+0xcc/0x110 [ 1653.163704][ T28] ? load_image+0x3b0/0x3b0 [ 1653.168250][ T28] ? load_image+0x3b0/0x3b0 [ 1653.172796][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1653.178913][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1653.184941][ T28] watchdog+0xeee/0xf30 [ 1653.189139][ T28] ? watchdog+0x1ed/0xf30 [ 1653.193507][ T28] kthread+0x29d/0x330 [ 1653.197623][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1653.202686][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1653.207326][ T28] ret_from_fork+0x1f/0x30 [ 1653.211798][ T28] [ 1653.215729][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1653.221056][ C0] NMI backtrace for cpu 0 [ 1653.221067][ C0] CPU: 0 PID: 4318 Comm: kworker/0:8 Not tainted 6.1.140-syzkaller #0 [ 1653.221087][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1653.221098][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 1653.221123][ C0] RIP: 0010:__read_once_word_nocheck+0x3/0x10 [ 1653.221146][ C0] Code: 8c c6 fc ff ff 4c 89 e7 e8 ba ce 99 00 48 ba 00 00 00 00 00 fc ff df e9 af fc ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 48 8b 07 00 00 cc cc 00 00 cc cc 00 00 cc cc 31 c0 81 ff 03 00 00 40 0f [ 1653.221161][ C0] RSP: 0018:ffffc90003f37048 EFLAGS: 00000002 [ 1653.221175][ C0] RAX: ffffffff810049ff RBX: ffffc90003f37128 RCX: 1ffff920007e6e01 [ 1653.221189][ C0] RDX: ffffc90003f37f58 RSI: ffffffff8e0ea79c RDI: ffffc90003f37f50 [ 1653.221203][ C0] RBP: ffffc90003f37f50 R08: 0000000000000001 R09: 0000000000000009 [ 1653.221215][ C0] R10: fffff520007e6e31 R11: 1ffff920007e6e2f R12: 1ffff920007e6e26 [ 1653.221228][ C0] R13: 1ffff920007e6e27 R14: ffffc90003f30000 R15: ffffc90003f38000 [ 1653.221242][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1653.221257][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1653.221270][ C0] CR2: 00007f444fbbe008 CR3: 000000000c68e000 CR4: 00000000003506f0 [ 1653.221286][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1653.221297][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1653.221308][ C0] Call Trace: [ 1653.221313][ C0] [ 1653.221319][ C0] unwind_next_frame+0xb0a/0x20b0 [ 1653.221344][ C0] ? kthread+0x29d/0x330 [ 1653.221372][ C0] ? stack_trace_save+0xe0/0xe0 [ 1653.221392][ C0] arch_stack_walk+0x10c/0x140 [ 1653.221415][ C0] ? kthread+0x29d/0x330 [ 1653.221441][ C0] stack_trace_save+0x98/0xe0 [ 1653.221461][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 1653.221487][ C0] kasan_save_stack+0x3a/0x60 [ 1653.221512][ C0] ? kasan_save_stack+0x3a/0x60 [ 1653.221536][ C0] ? __kasan_record_aux_stack+0xb2/0xc0 [ 1653.221553][ C0] ? insert_work+0x54/0x3c0 [ 1653.221568][ C0] ? __queue_work+0xba3/0xfb0 [ 1653.221592][ C0] ? queue_work_on+0x11d/0x1d0 [ 1653.221615][ C0] ? wg_queue_enqueue_per_peer_tx+0x1ec/0x4a0 [ 1653.221633][ C0] ? wg_packet_encrypt_worker+0x1183/0x1550 [ 1653.221651][ C0] ? process_one_work+0x898/0x1160 [ 1653.221668][ C0] ? worker_thread+0xaa2/0x1250 [ 1653.221685][ C0] ? kthread+0x29d/0x330 [ 1653.221728][ C0] ? __phys_addr+0xb6/0x170 [ 1653.221751][ C0] __kasan_record_aux_stack+0xb2/0xc0 [ 1653.221769][ C0] insert_work+0x54/0x3c0 [ 1653.221788][ C0] __queue_work+0xba3/0xfb0 [ 1653.221814][ C0] ? __queue_work+0xeb/0xfb0 [ 1653.221848][ C0] queue_work_on+0x11d/0x1d0 [ 1653.221874][ C0] ? wq_worker_last_func+0x40/0x40 [ 1653.221902][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1653.221927][ C0] ? __lock_acquire+0x13c0/0x7c50 [ 1653.221952][ C0] wg_queue_enqueue_per_peer_tx+0x1ec/0x4a0 [ 1653.221973][ C0] wg_packet_encrypt_worker+0x1183/0x1550 [ 1653.222005][ C0] ? wg_packet_tx_worker+0x7c0/0x7c0 [ 1653.222024][ C0] ? is_dynamic_key+0x260/0x260 [ 1653.222084][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1653.222110][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1653.222133][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1653.222158][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1653.222183][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1653.222209][ C0] ? process_one_work+0x7a1/0x1160 [ 1653.222227][ C0] process_one_work+0x898/0x1160 [ 1653.222253][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1653.222274][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 1653.222298][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1653.222322][ C0] ? kthread_data+0x4b/0xc0 [ 1653.222348][ C0] worker_thread+0xaa2/0x1250 [ 1653.222375][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1653.222402][ C0] kthread+0x29d/0x330 [ 1653.222425][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1653.222442][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1653.222468][ C0] ret_from_fork+0x1f/0x30 [ 1653.222498][ C0] [ 1653.243450][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1653.243469][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.140-syzkaller #0 [ 1653.243492][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1653.243506][ T28] Call Trace: [ 1653.243514][ T28] [ 1653.243524][ T28] dump_stack_lvl+0x168/0x22e [ 1653.243561][ T28] ? memcpy+0x3c/0x60 [ 1653.243586][ T28] ? show_regs_print_info+0x12/0x12 [ 1653.243621][ T28] ? load_image+0x3b0/0x3b0 [ 1653.243658][ T28] panic+0x2c9/0x710 [ 1653.243693][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1653.243726][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1653.243762][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 1653.243800][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1653.243834][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1653.243867][ T28] watchdog+0xf2d/0xf30 [ 1653.243898][ T28] ? watchdog+0x1ed/0xf30 [ 1653.243928][ T28] kthread+0x29d/0x330 [ 1653.243959][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1653.243984][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1653.244019][ T28] ret_from_fork+0x1f/0x30 [ 1653.244063][ T28] [ 1653.245574][ T28] Kernel Offset: disabled [ 1653.726107][ T28] Rebooting in 86400 seconds..