last executing test programs:

1m34.994951182s ago: executing program 2 (id=555):
r0 = socket(0x40000000015, 0x5, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x7800, 0x1, 0x8, 0x42c8, {{0x5, 0x4, 0x3, 0x37, 0x14, 0x67, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}})

1m34.993458788s ago: executing program 2 (id=556):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@null, 0x9, 'pim6reg\x00'})

1m34.875699863s ago: executing program 2 (id=558):
syz_open_procfs(0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)

1m33.430058744s ago: executing program 2 (id=576):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[@ANYBLOB="766f6c756d653d3030303030303030303036332c696f636861727365743d6d6163677265656b2c696f636861727365743d6b6f69382d72752c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c6e6f7672732c6e6f7672732c66696c657365743d30303030303030303030303030303030303030342c646d6f64653d30303030303030303030303030303030303030303131362c007732be3442cd163f564b8a695afa1b16eefc0b9d590fbf9ab8391b97ea4c0cf06c797f1a493380ce6975738b912f61be3a342f9b9ee8b8bee4aa2b525fd11b2212573ec6e7f3235ad950c58d6bf8d5318071bd000000004c67990370b984f0b3bf4b8ee680536ebf6c9386b8e46872d639e0de679325aa384473cb1be572c732000000000000000020b00e44de83eb12e1addb51edd821f23ab83af360c42a3a64f4e227479c5dd61952d5fcb0bcfee33d3832a050f83cc04ac5025adbf5d9fc1d72fb565aa4734eec868691025f3a382de96d325d0f56d2859781ea76aea7305d7661f8bd5650b7e9dcc1af8c0daef9686f8a1a5637c77b000b423d659049a769bbd8ac3ec13220fb30c2cbcc5f045b71395d17d76da531a330468bfd2dd4b7f6d9991ec27e0485b36bff71689d333fd4b5b6d8dfabb206dd573227856bdd7661d970d01bf6639b3177b0fd9d80ce94358a17b72a27def19e853c337df0e8a1a8f27d44010f9399f8feae412a6c3d07f8f9e24f8948"], 0xfe, 0xc2d, &(0x7f00000001c0)="$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")
sync()
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1m33.25583462s ago: executing program 2 (id=579):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m32.254844341s ago: executing program 2 (id=585):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94)

1m17.039798578s ago: executing program 32 (id=585):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x94)

35.035470926s ago: executing program 0 (id=1077):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r1, 0x20, 0x0, 0x8000)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

34.826533208s ago: executing program 0 (id=1079):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4)
syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0)

34.576277092s ago: executing program 0 (id=1084):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000080)={[{@nofavordynmods}]})

34.508951878s ago: executing program 0 (id=1086):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000000, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@sys_tz}, {@utf8}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_remount}, {@zero_size_dir}, {@errors_remount}, {@keep_last_dots}]}, 0x3, 0x152c, &(0x7f0000000400)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

34.292024069s ago: executing program 0 (id=1091):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100))
rmdir(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

34.200308105s ago: executing program 0 (id=1093):
r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd')

33.989900825s ago: executing program 33 (id=1093):
r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd')

20.095290916s ago: executing program 3 (id=1192):
r0 = eventfd2(0x0, 0x0)
writev(r0, &(0x7f0000002740)=[{&(0x7f0000000000)="ffffffffffffffff", 0x8}], 0x1)

20.033379509s ago: executing program 3 (id=1193):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB='memory_recursiveprot,nsdelegate,favordynmods'])

20.033027208s ago: executing program 3 (id=1194):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x4e20, 0x7, @remote, 0x3}, r1, 0x5}}, 0x48)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r1, 0x1000}}, 0x10)

19.954762446s ago: executing program 3 (id=1195):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000200)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2080, 0x0)
io_setup(0x4, &(0x7f0000010440)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xfdfe, 0x100000000000000}])

19.760236381s ago: executing program 3 (id=1199):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0)

19.425234783s ago: executing program 3 (id=1207):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x8}, 0x8)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

19.238627896s ago: executing program 34 (id=1207):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x8}, 0x8)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

2.682084889s ago: executing program 5 (id=1333):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890)

2.60435199s ago: executing program 5 (id=1334):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.604051147s ago: executing program 4 (id=1335):
mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000000)={[{@metacopy_off}, {@upperdir, 0x5c}]})

2.536182356s ago: executing program 4 (id=1336):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)

2.363875194s ago: executing program 4 (id=1338):
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x40004, @dev={0xfe, 0x80, '\x00', 0x48}}, 0x1c)

2.283885469s ago: executing program 4 (id=1341):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f00000001c0)={[{@checkpoint_diasble}, {@noinline_dentry}, {@usrjquota={'usrjquota', 0x3d, '\x00'}}, {@block_mode}, {@noheap}, {@jqfmt_vfsold}, {@fsync_mode_posix}, {@whint_mode_off}]}, 0x3, 0x550a, &(0x7f00000079c0)="$eJzs3E1rY9UbAPBz+zLv//kXceHOC4PQwiQ0fRl0V3UGX7BDGXXhStPkNmQmyS1NmtauXLgUF34TUXDl0s/gwrU7caG4E5Tcc6tTX0Bpmtjp7wc3zz0nJ899ThgGnntLAnBhLaQ//ZCEm+FqCGE2hHAjhOI8KY/CRgzPlMfMY0dSzv02cSmEcC2EcHOUPOZMyrc+uT28tf796z9++fXlueuffvHN9HYNTNtzIYTubjw/6MaYt2J8WM7Xh+0idteGZYxvdB+V4zzGg2y7yHBQP15XL+JqK67Pd/f7o7jTqTdGsdXeKeZ3e/GC/WHrOE/xgYf1vWLczLaL2O7nRWwdxboOj+L/bUf9QczTLPO9X6QPg8FxjPPZYRb3s/uoiI3eoJyPefNmdjiKwzKWlwuNvNMs6tg+zTf93/ZGu7d/mA6zvX4776Xr1drz1dqdSm0vb2aDbK1S7zbvrKWLrc5oWWWQ1bsbrTxvdbJqI+8upYutRqNSq6WLd7Ptdr2X1mrV1epyZX2pPLudvnL/7bTTTBdH8aV2b3/Q7vTTnXwvjZ9YSleqqy8spbdq6ZubW+nWg3v3NrfeevfuO/df3Hzt5XLRn8pKF1eWV1YqteXKSm3pAu3/w7LoMe4fTiWZdgEA58+/7f9T/T8wBmfX/+89COHs+/+g/x+Lc9X/XvT+/wz2D6ei/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLC+nf/s1eJkIY6vl/P/K6eeKsdJCGEmhPDLX5gNl07knC3zzP/N+vk/1PBVEooMo2tcLo9rIYSN8vj5/2f9LQAAAMCT6/MPnv04duvxZWHaBTFJ8abNzI33xpQvCSHML3w3pmwzo5enx5Ss+Pc9Fw7HlK24gXVlTMniLbe5cWX7R2ZPhCuPhSSGmYmWAwAATMTJTmCyXQgAAACT9NG0C2A6knD8KPP4WXDxl/e/PxC8emIEAAAAnEPJtAsAAAAAzlzR//v9PwAAAHiyxd//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBf2bmf28SBKA7AzwYv7D8tWu19W9kblLEl7HGPEQWkCQrIgbSQBqiB3FJCBBEeh0DEIZLHthJ9n+RMxjI/3iA4zIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECX7qv14vbq93XbnN2+nTyjAQAAAC7ZVutF/c8s9b829783t342/SIiyoi4NHcfxaezzFGTU708f3P6fPWqhruIOuHwHpPm+hIRf5rr8UfXnwIAAAB8XJvlap5m6+nPbOiC6FNatCm//c2UV0RENXvIlFYe8n5lCqu/3+P4nymtXsCaZgpLS27jXGlvUv/cj6t205OmSE158WXHIrONHQAA6NHorOl3FgIAAECf/g1dAMMo4nkr87gVOElNs733+awHAAAAvEPF0AUAAAAAnavn/z2d/7d3/h8AAAAMI53/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJe21XqxWa7mbXN2+3byjAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntifdxQIgTAIg73rO5O5/2GlQVNTkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPii3/3yf2JqnEnmThtLxyPJ2lVj66qx96Bx9GC8/RsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYuf+feOm4gCAP9vnKy0gjoBuCEIgMcBCr9fS0g0xgCIG/gSkKL2W0Cs/2gy0qhBZ2FDmLghGhJBAYev/kDmRsoQtww1BYgbZZ+ecHxIHBPtIPh/p+X3Pst77Pp9a5evnBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0ujtSZxkh844jotzm3sPl7J+61Cfeby2PZ+1LI7qTPr/4cXqh6jbXCIAAACcHUlZ34cQdtL1hayPO3n9n5bXZDX/t0+P47KeP1z3l31Z+2ftl593n9+fqDOeJxv05vJwcOloKq3/bpWz7Zm/vKKV3/n82UuSfyHxe6vPjdL8fkZfb2y8087Dc3VkCwD8ExfLvgjKn4eyvt9kYgCcGa1K4V3W/0mn2ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6jBaDU+WcRRCmG9N4szW3sOl4/rHa9vzZbv26NFa+HIyZjZEGkK4uTwcXKp1NbPt3v0HtxeHw8Hd+oOXQghNzf5WsfzbH0xxcQiN3B/BCQVx8WWf7MitJv/t1BA0+J8SAACnUlq0rK7fSdcXsnPRXAh/fHew/n+1Eocp6//dD69tVueq1v/92lY4+3ordz7t3bv/4PXlO4u3BrcGH79xuf9m/8r1q1ev9/JnJT1PTAAAAPh32kWr1v/x3NH9/wuVOExZ/3/2Tf+L6lyJ+v9Yk02/pjMBAAA42559+fffomPOR+12+HxxZeVuf3zc/3x5fGwg1b/tXNGq9X8y13RWAAAAQB1Gq9GB/f8blThMuf//1Pcv/FgdMwkhnC/2/y8ufTK8Ud9yZlodv07c9BoBAABo1vmiVff/0/z9/3j/lYc4hPDaK+O4+DOAU9X/ybtf/VCdq/r+/5X6ljiT4u74fuR9N4RWt+mMAAAAOM2eKFpW7P+ari989NOF99ve/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo258BAAD//4h9Pbk=")

1.574597005s ago: executing program 5 (id=1346):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20})

1.478512547s ago: executing program 5 (id=1347):
r0 = openat$vcs(0xffffff9c, &(0x7f0000001100), 0x6a201, 0x0)
write$UHID_INPUT(r0, 0x0, 0x0)

1.373564921s ago: executing program 5 (id=1348):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904"], 0x0)

1.302836696s ago: executing program 4 (id=1349):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280))

1.137756401s ago: executing program 1 (id=1350):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x18)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@offload={0xc, 0x1c, {r2, 0x4}}]}, 0xc4}}, 0x0)

1.137235836s ago: executing program 1 (id=1351):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

1.023885671s ago: executing program 1 (id=1352):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.023588062s ago: executing program 1 (id=1353):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0xfff2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

893.277393ms ago: executing program 1 (id=1354):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x14b800, 0x6abac60bab6c66fb)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
creat(&(0x7f00000000c0)='./file0\x00', 0x0)

892.949516ms ago: executing program 1 (id=1355):
syz_open_dev$tty20(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)

104.120942ms ago: executing program 4 (id=1356):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xd}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x1, 0x10, 0xfff, 0x55b}, &(0x7f00000000c0)=0x18)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=""/189, 0x0, 0xbd, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x85, &(0x7f0000000a80)=""/133, 0x41100, 0x65, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x2, 0x1, 0xe, 0x3}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x4}, 0x18)
unshare(0x2a020400)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r6}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1df3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}, {0x0}, {0x0}], 0x3)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x44885)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r8, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)

0s ago: executing program 5 (id=1357):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0xb, r0, &(0x7f0000001280)=""/134, 0x86)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'dt2815\x00', [0x4f27, 0x5, 0x3, 0x4018004, 0x5, 0xcc9, 0xf, 0x2fd0, 0xa, 0x8001, 0x2, 0xfffffff9, 0xfffffffe, 0x1, 0x3, 0x0, 0x0, 0x1a449, 0x3, 0x8, 0x99, 0x8, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x6, 0x7, 0x0, 0xfffffff8]})
syz_clone3(&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4112, 0x1010, 0x0, 0x0}, 0x32)
add_key$keyring(&(0x7f0000000240), &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, r0)
syz_usb_connect(0x5, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0001fc00000009040f0001e711e100090583ff03"], 0x0)

kernel console output (not intermixed with test programs):

): invalid crc value
[  140.688592][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system
[  140.723876][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system
[  140.749012][ T7661] loop0: detected capacity change from 0 to 32768
[  140.753020][ T7661] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.690 (7661)
[  140.775479][ T7661] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  140.779253][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:0' failed: Read-only file system
[  140.779388][ T7661] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  140.788765][ T7653] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  140.792374][ T7661] BTRFS info (device loop0): disk space caching is enabled
[  140.792592][ T7661] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  140.804754][ T7653] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  140.829575][   T33] audit: type=1800 audit(1755248112.939:29): pid=7653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.685" name="bus" dev="loop1" ino=10 res=0 errno=0
[  140.886798][ T5993] syz-executor: attempt to access beyond end of device
[  140.886798][ T5993] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  140.897410][ T7661] BTRFS info (device loop0): rebuilding free space tree
[  140.900896][ T5993] CPU: 0 UID: 0 PID: 5993 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  140.900916][ T5993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.900924][ T5993] Call Trace:
[  140.900931][ T5993]  <TASK>
[  140.900937][ T5993]  dump_stack_lvl+0x189/0x250
[  140.900962][ T5993]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.900977][ T5993]  ? __pfx_queue_work_on+0x10/0x10
[  140.900990][ T5993]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  140.901007][ T5993]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.901035][ T5993]  f2fs_handle_critical_error+0x37c/0x540
[  140.901061][ T5993]  f2fs_write_end_io+0x886/0xb60
[  140.901091][ T5993]  __submit_merged_bio+0x27a/0x6a0
[  140.901116][ T5993]  __submit_merged_write_cond+0x255/0x530
[  140.901141][ T5993]  f2fs_write_data_pages+0x261d/0x3000
[  140.901193][ T5993]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  140.901259][ T5993]  ? __mod_zone_page_state+0xd7/0x140
[  140.901288][ T5993]  ? folios_put_refs+0x560/0x640
[  140.901315][ T5993]  ? __lock_acquire+0xab9/0xd20
[  140.901343][ T5993]  ? do_raw_spin_lock+0x121/0x290
[  140.901370][ T5993]  ? do_raw_spin_unlock+0x4d/0x240
[  140.901386][ T5993]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  140.901407][ T5993]  do_writepages+0x32e/0x550
[  140.901435][ T5993]  ? do_raw_spin_unlock+0x4d/0x240
[  140.901455][ T5993]  filemap_fdatawrite+0x199/0x240
[  140.901473][ T5993]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  140.901528][ T5993]  ? do_raw_spin_unlock+0x4d/0x240
[  140.901550][ T5993]  f2fs_sync_dirty_inodes+0x31f/0x830
[  140.901576][ T5993]  f2fs_write_checkpoint+0x95a/0x1df0
[  140.901613][ T5993]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  140.901671][ T5993]  ? kill_f2fs_super+0x298/0x6c0
[  140.901690][ T5993]  kill_f2fs_super+0x2c3/0x6c0
[  140.901710][ T5993]  ? __pfx_kill_f2fs_super+0x10/0x10
[  140.901745][ T5993]  ? radix_tree_delete_item+0x2b6/0x400
[  140.901773][ T5993]  ? shrinker_free+0x2ce/0x3e0
[  140.901791][ T5993]  deactivate_locked_super+0xbc/0x130
[  140.901811][ T5993]  cleanup_mnt+0x425/0x4c0
[  140.901827][ T5993]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.901847][ T5993]  task_work_run+0x1d4/0x260
[  140.901869][ T5993]  ? __pfx_task_work_run+0x10/0x10
[  140.901884][ T5993]  ? __x64_sys_umount+0x122/0x160
[  140.901906][ T5993]  ? exit_to_user_mode_loop+0x40/0x110
[  140.901929][ T5993]  exit_to_user_mode_loop+0xec/0x110
[  140.901948][ T5993]  do_syscall_64+0x2bd/0x3b0
[  140.901966][ T5993]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.901981][ T5993]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.901995][ T5993]  ? exc_page_fault+0x9f/0xf0
[  140.902015][ T5993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.902027][ T5993] RIP: 0033:0x7f88c558ff17
[  140.902040][ T5993] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  140.902051][ T5993] RSP: 002b:00007ffc323f8e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  140.902065][ T5993] RAX: 0000000000000000 RBX: 00007f88c5611c05 RCX: 00007f88c558ff17
[  140.902074][ T5993] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc323f8f50
[  140.902082][ T5993] RBP: 00007ffc323f8f50 R08: 0000000000000020 R09: 0000000000000000
[  140.902089][ T5993] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc323f9fe0
[  140.902098][ T5993] R13: 00007f88c5611c05 R14: 00000000000225c4 R15: 00007ffc323fa020
[  140.902123][ T5993]  </TASK>
[  140.902129][ T5993] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  140.988134][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:0' failed: Read-only file system
[  141.016704][ T7661] BTRFS info (device loop0): disabling free space tree
[  141.048553][ T7661] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  141.053146][ T7661] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  141.087246][   T33] audit: type=1800 audit(1755248113.199:30): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.690" name="file1" dev="loop0" ino=260 res=0 errno=0
[  141.142766][ T5985] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  141.496323][ T7690] loop0: detected capacity change from 0 to 2048
[  141.502851][ T7690] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.518026][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-label/LinuxUDF.tmp-b7:0' failed: Read-only file system
[  141.528532][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-uuid/1234567812345678.tmp-b7:0' failed: Read-only file system
[  141.546297][ T7692] loop1: detected capacity change from 0 to 4096
[  141.555102][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-label/LinuxUDF.tmp-b7:0' failed: Read-only file system
[  141.563405][ T7692] EXT4-fs: Ignoring removed nomblk_io_submit option
[  141.565978][ T7692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  141.571649][ T7692] EXT4-fs (loop1): Test dummy encryption mode enabled
[  141.572619][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-uuid/1234567812345678.tmp-b7:0' failed: Read-only file system
[  141.579806][ T5997] udevd[5997]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  141.585016][ T7692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.599396][ T7692] EXT4-fs: Ignoring removed nomblk_io_submit option
[  141.602245][ T7692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  141.606503][ T7692] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  141.609085][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  141.610872][ T7696] loop0: detected capacity change from 0 to 47
[  141.659867][ T5993] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.136634][ T7712] loop1: detected capacity change from 0 to 32768
[  142.153853][ T7712] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  142.172092][ T7712] XFS (loop1): Ending clean mount
[  142.223360][ T5993] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  142.504184][ T7738] loop1: detected capacity change from 0 to 512
[  142.714588][ T7750] sctp: [Deprecated]: syz.1.717 (pid 7750) Use of int in max_burst socket option deprecated.
[  142.714588][ T7750] Use struct sctp_assoc_value instead
[  142.803975][ T7754] loop1: detected capacity change from 0 to 128
[  143.251913][ T7763] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  143.362193][ T7768] loop1: detected capacity change from 0 to 8
[  143.388012][ T7768] SQUASHFS error: Failed to read block 0x1ec: -5
[  143.392831][ T7768] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  145.367360][ T7791] unsupported nla_type 52263
[  145.372353][ T7791] loop0: detected capacity change from 0 to 65
[  145.384577][ T7791] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  145.387310][ T7791] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  145.586855][ T5991] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  145.593141][ T5991] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  145.597028][ T5991] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  145.601076][ T5991] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  145.604604][ T5991] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  145.627770][ T5973] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.786932][ T7800] loop0: detected capacity change from 0 to 1024
[  145.787948][ T5973] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.804185][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  145.820409][ T7800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.825093][ T7800] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.838718][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  145.882982][ T7800] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #14: comm syz.0.735: attempt to clear invalid blocks 1886221359 len 1
[  145.895307][ T5973] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.927921][ T5985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.012995][ T5973] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.082119][   T24] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[  146.082319][ T7793] chnl_net:caif_netlink_parms(): no params data found
[  146.243758][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  146.253054][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.263008][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  146.278063][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.287859][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  146.294651][ T5973] bridge_slave_1: left allmulticast mode
[  146.296930][ T5973] bridge_slave_1: left promiscuous mode
[  146.301001][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.305566][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.312031][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  146.321877][ T5973] bridge_slave_0: left allmulticast mode
[  146.324425][ T5973] bridge_slave_0: left promiscuous mode
[  146.327022][   T24] usb 2-1: string descriptor 0 read error: -22
[  146.331976][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  146.336256][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.339202][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.591879][  T791] usb 2-1: USB disconnect, device number 9
[  146.779018][ T5973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.786220][ T5973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.791680][ T5973] bond0 (unregistering): Released all slaves
[  146.802337][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.805468][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.808512][ T7793] bridge_slave_0: entered allmulticast mode
[  146.813484][ T7793] bridge_slave_0: entered promiscuous mode
[  146.833008][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.838018][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.841519][ T7793] bridge_slave_1: entered allmulticast mode
[  146.845716][ T7793] bridge_slave_1: entered promiscuous mode
[  146.895615][ T5973] tipc: Left network mode
[  146.924262][ T7793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.000533][ T7793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.189686][ T7793] team0: Port device team_slave_0 added
[  147.195140][ T7793] team0: Port device team_slave_1 added
[  147.281208][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.284018][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.295164][ T7793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.383962][ T7830] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  147.659688][ T5988] Bluetooth: hci1: command tx timeout
[  147.745781][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.748540][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.757805][ T7793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.798268][ T5973] hsr_slave_0: left promiscuous mode
[  147.802203][ T5973] hsr_slave_1: left promiscuous mode
[  147.804962][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.807889][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.814514][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.817161][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.832915][ T5973] veth1_macvtap: left promiscuous mode
[  147.835141][ T5973] veth0_macvtap: left promiscuous mode
[  147.837501][ T5973] veth1_vlan: left promiscuous mode
[  147.839893][ T5973] veth0_vlan: left promiscuous mode
[  148.220757][ T7836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.745'.
[  148.356336][ T7834] loop1: detected capacity change from 0 to 32768
[  148.375127][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:1' failed: Read-only file system
[  148.407156][ T7834] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  148.436388][ T7834] XFS (loop1): Ending clean mount
[  148.456666][ T7834] XFS (loop1): Quotacheck needed: Please wait.
[  148.487868][ T7834] XFS (loop1): Quotacheck: Done.
[  148.512933][   T33] audit: type=1800 audit(1755250698.638:31): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.744" name="bus" dev="loop1" ino=4426 res=0 errno=0
[  148.572350][ T5973] team0 (unregistering): Port device team_slave_1 removed
[  148.620847][ T5973] team0 (unregistering): Port device team_slave_0 removed
[  148.640919][ T5993] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  148.883197][ T7850] loop1: detected capacity change from 0 to 1024
[  148.886714][ T7850] EXT4-fs: Ignoring removed bh option
[  148.892886][ T7850] EXT4-fs: inline encryption not supported
[  148.897925][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:1' failed: Read-only file system
[  148.904388][ T7850] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  148.921192][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:1' failed: Read-only file system
[  148.925795][ T7850] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  148.932872][ T7850] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.748: lblock 2 mapped to illegal pblock 2 (length 1)
[  148.952179][ T7850] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  148.955287][ T7850] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.748: lblock 0 mapped to illegal pblock 48 (length 1)
[  148.962393][ T7850] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  148.966074][ T7850] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.748: Failed to acquire dquot type 0
[  148.979336][ T7850] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  148.994871][ T7850] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.748: mark_inode_dirty error
[  149.012766][ T7850] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  149.019699][ T7850] EXT4-fs (loop1): 1 orphan inode deleted
[  149.023463][ T7850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.060960][ T1088] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  149.074331][ T1088] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  149.077657][ T1088] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u9:4: Failed to release dquot type 0
[  149.088471][ T7850] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.748: lblock 0 mapped to illegal pblock 48 (length 1)
[  149.099434][ T7850] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117
[  149.140369][ T5993] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.337440][ T7793] hsr_slave_0: entered promiscuous mode
[  149.344627][ T7793] hsr_slave_1: entered promiscuous mode
[  149.350355][ T7793] debugfs: 'hsr0' already exists in 'hsr'
[  149.352662][ T7793] Cannot create hsr debugfs directory
[  149.730266][ T5988] Bluetooth: hci1: command tx timeout
[  149.739409][   T52] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  149.843740][ T7793] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  149.899170][   T52] usb 1-1: Using ep0 maxpacket: 8
[  149.902495][   T52] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[  149.913644][ T7793] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  149.914304][   T52] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  149.920759][   T52] usb 1-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  149.926433][   T52] usb 1-1: Product: syz
[  149.927277][ T7793] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  149.927786][   T52] usb 1-1: Manufacturer: syz
[  149.937369][   T52] usb 1-1: SerialNumber: syz
[  149.941140][ T7793] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  149.953320][   T52] usb 1-1: config 0 descriptor??
[  149.968428][   T52] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  150.116895][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.136071][ T7793] 8021q: adding VLAN 0 to HW filter on device team0
[  150.145276][ T7617] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.147892][ T7617] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.164799][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.167360][ T7617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.173994][   T52] gspca_zc3xx: reg_w_i err -71
[  150.566488][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.713975][ T7793] veth0_vlan: entered promiscuous mode
[  150.744777][ T7793] veth1_vlan: entered promiscuous mode
[  150.761168][   T52] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  150.765895][   T52] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71

syzkaller
syzkaller login: [  150.792105][ T7793] veth0_macvtap: entered promiscuous mode
[  150.806894][ T7793] veth1_macvtap: entered promiscuous mode
[  150.815170][   T52] usb 1-1: USB disconnect, device number 8
[  150.827051][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.869223][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.914518][ T5973] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.917534][ T5973] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.927033][ T5973] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.934007][ T5973] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.308297][ T6118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.322780][ T6118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.397542][ T6118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.404351][ T6118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.581313][   T52] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  151.674504][ T7917] loop3: detected capacity change from 0 to 1024
[  151.711269][ T7917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  151.716053][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  151.716049][ T7917] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.751585][   T52] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  151.751839][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:3' failed: Read-only file system
[  151.755614][   T52] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  151.765371][   T52] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  151.769904][   T52] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  151.778883][   T52] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  151.788036][   T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.809762][ T7793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  151.821662][ T5988] Bluetooth: hci1: command tx timeout
[  151.832694][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  151.838548][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:3' failed: Read-only file system
[  151.892168][   T52] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  151.895730][   T52] usb 1-1: invalid MIDI out EP 0
[  152.026026][ T7932] loop3: detected capacity change from 0 to 256
[  152.057623][ T7932] FAT-fs (loop3): Directory bread(block 64) failed
[  152.066209][ T7932] FAT-fs (loop3): Directory bread(block 65) failed
[  152.077825][ T7932] FAT-fs (loop3): Directory bread(block 66) failed
[  152.084988][ T7932] FAT-fs (loop3): Directory bread(block 67) failed
[  152.087591][ T7932] FAT-fs (loop3): Directory bread(block 68) failed
[  152.091289][ T7932] FAT-fs (loop3): Directory bread(block 69) failed
[  152.093873][ T7932] FAT-fs (loop3): Directory bread(block 70) failed
[  152.102035][ T7932] FAT-fs (loop3): Directory bread(block 71) failed
[  152.106509][ T7932] FAT-fs (loop3): Directory bread(block 72) failed
[  152.111370][ T7932] FAT-fs (loop3): Directory bread(block 73) failed
[  152.161586][   T52] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  152.179114][   T52] usb 1-1: USB disconnect, device number 9
[  152.245892][ T7940] loop3: detected capacity change from 0 to 1024
[  152.260017][ T7940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.273377][ T5997] udevd[5997]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  152.316447][ T7793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.320478][ T5997] udevd[5997]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  152.345667][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  152.712631][ T7960] netlink: 176 bytes leftover after parsing attributes in process `syz.0.774'.
[  152.904616][ T7945] loop1: detected capacity change from 0 to 32768
[  152.955887][ T6297] udevd[6297]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system
[  153.005878][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system
[  153.030608][ T7945] read_mapping_page failed!
[  153.033039][ T7945] ERROR: (device loop1): txCommit: 
[  153.033039][ T7945] 
[  153.036375][ T7945] ERROR: (device loop1): remounting filesystem as read-only
[  153.138712][   T52] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  153.175456][ T7977] loop1: detected capacity change from 0 to 128
[  153.179307][ T7977] EXT4-fs: Ignoring removed nomblk_io_submit option
[  153.187231][ T7977] EXT4-fs: Ignoring removed nomblk_io_submit option
[  153.190547][ T7977] EXT4-fs (loop1): Test dummy encryption mode enabled
[  153.194555][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:1' failed: Read-only file system
[  153.214049][ T7977] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  153.221320][ T7977] ext4 filesystem being mounted at /241/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  153.272732][ T7977] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  153.289387][   T52] usb 4-1: Using ep0 maxpacket: 8
[  153.295367][   T52] usb 4-1: unable to get BOS descriptor or descriptor too short
[  153.312081][   T52] usb 4-1: config 17 has an invalid interface number: 8 but max is 1
[  153.323956][ T5993] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  153.328203][   T52] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2
[  153.345622][   T52] usb 4-1: config 17 has no interface number 0
[  153.348196][   T52] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 170, changing to 7
[  153.370969][   T52] usb 4-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 33185, setting to 1024
[  153.375479][   T52] usb 4-1: config 17 interface 8 has no altsetting 0
[  153.406267][   T52] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  153.414649][   T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.417752][   T52] usb 4-1: Product: syz
[  153.425311][   T52] usb 4-1: Manufacturer: syz
[  153.427296][   T52] usb 4-1: SerialNumber: syz
[  153.660798][   T52] usb 4-1: selecting invalid altsetting 0
[  153.663102][   T52] usb 4-1: 8:6 : no UAC_FORMAT_TYPE desc
[  153.665332][   T52] usb 4-1: selecting invalid altsetting 0
[  153.719860][   T52] usb 4-1: USB disconnect, device number 2
[  153.792280][ T8006] loop0: detected capacity change from 0 to 2048
[  153.797473][ T8006] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  153.804048][ T8006] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  153.816800][ T8006] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.889081][ T5988] Bluetooth: hci1: command tx timeout
[  154.011700][ T8008] ieee802154 phy0 wpan0: encryption failed: -22
[  154.902808][ T8037] loop1: detected capacity change from 0 to 4096
[  154.910989][ T8037] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  155.068558][ T8037] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  155.405362][ T8046] loop0: detected capacity change from 0 to 65536
[  155.501549][ T8046] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  155.556184][ T8046] XFS (loop0): Ending clean mount
[  155.671024][ T8046] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  155.675500][ T8046] XFS (loop0): Unmount and run xfs_repair
[  155.677759][ T8046] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  155.680806][ T8046] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  155.684255][ T8046] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  155.687644][ T8046] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  155.691491][ T8046] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  155.694986][ T8046] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  155.698524][ T8046] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  155.701969][ T8046] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  155.705254][ T8046] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  155.709246][ T8046] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  155.713912][ T8046] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  155.719493][ T8046] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  156.148805][ T5985] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  156.153236][ T8065] loop3: detected capacity change from 0 to 1024
[  156.161849][ T8065] EXT4-fs: Ignoring removed orlov option
[  156.187240][ T8065] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  156.254494][ T8065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.520146][ T7793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.898963][   T52] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[  157.049554][   T52] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.054264][   T52] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  157.057471][   T52] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  157.072223][   T52] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  157.075700][   T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.088413][ T6086] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  157.091439][   T52] hub 4-1:1.0: bad descriptor, ignoring hub
[  157.093795][   T52] hub 4-1:1.0: probe with driver hub failed with error -5
[  157.103233][   T52] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  157.272077][ T6086] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[  157.275260][ T6086] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.287726][ T6086] usb 1-1: config 0 has no interface number 0
[  157.290737][ T6086] usb 1-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30
[  157.296923][ T6086] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239
[  157.305511][ T6086] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46
[  157.311494][ T6086] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.314870][ T6086] usb 1-1: Product: syz
[  157.317741][ T6086] usb 1-1: Manufacturer: syz
[  157.320252][ T6086] usb 1-1: SerialNumber: syz
[  157.328622][ T6086] usb 1-1: config 0 descriptor??
[  157.352070][ T6086] HFC-S_USB 1-1:0.117: probe with driver HFC-S_USB failed with error -5
[  157.470564][   T52] usb 4-1: USB disconnect, device number 3
[  157.643400][ T5848] usb 1-1: USB disconnect, device number 10
[  158.383095][ T8116] loop0: detected capacity change from 0 to 512
[  158.386297][ T8116] EXT4-fs: Ignoring removed mblk_io_submit option
[  158.393877][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  158.401354][ T8116] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  158.411387][ T8116] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002]
[  158.414489][ T8116] System zones: 1-12
[  158.420207][ T8116] EXT4-fs (loop0): 1 truncate cleaned up
[  158.424037][ T8116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.599830][ T6086] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  158.678050][ T6061] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  158.758065][ T6086] usb 4-1: Using ep0 maxpacket: 8
[  158.763614][ T6086] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.771952][ T6086] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  158.775740][ T6086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.779455][ T6086] usb 4-1: Product: syz
[  158.781300][ T6086] usb 4-1: Manufacturer: syz
[  158.783814][ T6086] usb 4-1: SerialNumber: syz
[  158.788647][ T6086] usb 4-1: config 0 descriptor??
[  158.795848][ T6086] gspca_main: stk014-2.14.0 probing 05e1:0893
[  158.798456][ T6086] usb 4-1: selecting invalid altsetting 1
[  158.828065][ T6061] usb 1-1: Using ep0 maxpacket: 32
[  158.832942][ T6061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.837354][ T6061] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.841480][ T6061] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  158.845310][ T6061] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.855925][ T6061] usb 1-1: config 0 descriptor??
[  158.866532][ T6061] hub 1-1:0.0: USB hub found
[  158.998006][ T6086] gspca_stk014: reg_r err -71
[  159.001408][ T6086] stk014 4-1:0.0: probe with driver stk014 failed with error -71
[  159.010777][ T6086] usb 4-1: USB disconnect, device number 4
[  159.069433][ T6061] hub 1-1:0.0: 1 port detected
[  159.278425][ T6061] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  159.281289][ T6061] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  159.316803][ T6061] usbhid 1-1:0.0: can't add hid device: -71
[  159.320890][ T6061] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  159.361829][ T6061] usb 1-1: USB disconnect, device number 11
[  159.696647][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'.
[  159.897371][ T8133] smb3: Unexpected value for 'rdma'
[  159.960004][ T5985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.405055][ T8139] loop0: detected capacity change from 0 to 8192
[  160.452378][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system
[  160.469795][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-uuid/1DC8-0B3B.tmp-b7:0' failed: Read-only file system
[  160.769473][ T8149] loop3: detected capacity change from 0 to 512
[  160.774031][ T8149] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  160.782528][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  160.790180][ T8149] EXT4-fs (loop3): 1 truncate cleaned up
[  160.793810][ T8149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.833530][ T7793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.970380][   T52] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  160.974898][ T8160] loop3: detected capacity change from 0 to 256
[  160.999886][ T8160] FAT-fs (loop3): Directory bread(block 64) failed
[  161.002381][ T8160] FAT-fs (loop3): Directory bread(block 65) failed
[  161.012030][ T8160] FAT-fs (loop3): Directory bread(block 66) failed
[  161.014560][ T8160] FAT-fs (loop3): Directory bread(block 67) failed
[  161.018578][ T8160] FAT-fs (loop3): Directory bread(block 68) failed
[  161.021044][ T8160] FAT-fs (loop3): Directory bread(block 69) failed
[  161.024246][ T8160] FAT-fs (loop3): Directory bread(block 70) failed
[  161.027001][ T8160] FAT-fs (loop3): Directory bread(block 71) failed
[  161.039124][ T8160] FAT-fs (loop3): Directory bread(block 72) failed
[  161.045628][ T8160] FAT-fs (loop3): Directory bread(block 73) failed
[  161.119578][   T52] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  161.123260][   T52] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  161.126500][ T8165] loop3: detected capacity change from 0 to 256
[  161.150233][   T52] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.177345][   T52] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  161.181476][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.184568][   T52] usb 2-1: Product: syz
[  161.186260][   T52] usb 2-1: Manufacturer: syz
[  161.191011][   T52] usb 2-1: SerialNumber: syz
[  161.212644][   T52] hub 2-1:1.0: bad descriptor, ignoring hub
[  161.215146][   T52] hub 2-1:1.0: probe with driver hub failed with error -5
[  161.290236][ T5979] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  161.333397][ T8170] netlink: 14 bytes leftover after parsing attributes in process `syz.3.842'.
[  161.406605][   T52] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  161.440428][ T5979] usb 1-1: unable to get BOS descriptor or descriptor too short
[  161.450045][ T5979] usb 1-1: not running at top speed; connect to a high speed hub
[  161.454787][ T5979] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.460243][ T5979] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  161.463647][ T5979] usb 1-1: config 1 has no interface number 1
[  161.466004][ T5979] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  161.480938][ T5979] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  161.490604][ T5979] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  161.494077][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.497068][ T5979] usb 1-1: Product: syz
[  161.500439][ T5979] usb 1-1: Manufacturer: syz
[  161.502289][ T5979] usb 1-1: SerialNumber: syz
[  161.715166][ T8174] loop3: detected capacity change from 0 to 32768
[  161.741021][ T8174] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  161.755345][ T5979] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  161.759763][ T5997] udevd[5997]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system
[  161.770874][ T8174] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  161.792427][ T5997] udevd[5997]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system
[  161.848843][ T8174] syz.3.844 (8174) used greatest stack depth: 18928 bytes left
[  161.856424][ T5979] usb 1-1: USB disconnect, device number 12
[  161.889194][ T7793] ocfs2: Unmounting device (7,3) on (node local)
[  161.908884][   T52] usb 2-1: reset high-speed USB device number 10 using dummy_hcd
[  162.168360][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.849'.
[  162.309498][ T8190] loop3: detected capacity change from 0 to 256
[  162.322483][ T8190] MINIX-fs: mounting file system with errors, running fsck is recommended
[  162.395940][ T8194] loop3: detected capacity change from 0 to 512
[  162.414784][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  162.420768][ T6086] usb 2-1: USB disconnect, device number 10
[  162.429145][ T8194] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  162.432194][ T8194] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  162.434336][ T6086] usblp0: removed
[  162.435283][ T8194] System zones: 0-1, 15-15, 18-18, 34-34
[  162.439168][ T8194] EXT4-fs (loop3): orphan cleanup on readonly fs
[  162.441152][ T8194] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  162.444662][ T8194] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  162.446299][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  162.450504][ T8194] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  162.457278][ T8194] EXT4-fs (loop3): 1 truncate cleaned up
[  162.460798][ T8194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  162.472036][ T8194] fscrypt (loop3, inode 16): Error -61 getting encryption context
[  162.479956][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  162.487362][ T7793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.495312][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  162.598089][ T6086] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  162.751660][ T6086] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.755738][ T6086] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  162.762843][ T6086] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  162.766647][ T6086] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  162.772011][ T6086] usb 1-1: SerialNumber: syz
[  162.989241][ T8205] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  162.992174][ T8205] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  163.004361][ T6086] usb 1-1: 0:2 : does not exist
[  163.006994][ T8205] vhci_hcd vhci_hcd.0: Device attached
[  163.035632][ T6086] usb 1-1: USB disconnect, device number 13
[  163.177602][   T52] vhci_hcd: vhci_device speed not set
[  163.237507][   T52] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  163.257510][  T791] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  163.409988][ T5979] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  163.410266][  T791] usb 4-1: config 0 has no interfaces?
[  163.415409][  T791] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  163.419169][  T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.424550][  T791] usb 4-1: config 0 descriptor??
[  163.574946][ T5979] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  163.578643][ T5979] usb 2-1: config 0 has no interface number 0
[  163.581152][ T5979] usb 2-1: config 0 interface 113 has no altsetting 0
[  163.586056][ T5979] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  163.590909][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.594121][ T5979] usb 2-1: Product: syz
[  163.595781][ T5979] usb 2-1: Manufacturer: syz
[  163.598627][ T5979] usb 2-1: SerialNumber: syz
[  163.602730][ T5979] usb 2-1: config 0 descriptor??
[  163.639078][ T8212] vhci_hcd: unknown pdu 2
[  163.645734][ T5706] vhci_hcd: stop threads
[  163.648157][ T5706] vhci_hcd: release socket
[  163.651865][ T5706] vhci_hcd: disconnect device
[  163.673052][ T8205] 8021q: adding VLAN 0 to HW filter on device bond1
[  163.691595][ T5848] usb 4-1: USB disconnect, device number 5
[  163.707449][   T52] vhci_hcd: vhci_device speed not set
[  163.808952][  T791] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  163.813720][    C1] usb 2-1: NFC: Urb failure (status -71)
[  163.818648][    C1] usb 2-1: NFC: Urb failure (status -71)
[  163.823131][ T5979] usb 2-1: NFC: Unable to get FW version
[  163.826796][ T5979] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -71
[  163.843108][ T5979] usb 2-1: USB disconnect, device number 11
[  163.970407][  T791] usb 1-1: Using ep0 maxpacket: 8
[  163.974626][  T791] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  163.981581][  T791] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  163.985581][  T791] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  163.989669][  T791] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  163.994713][  T791] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  163.998650][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.217165][  T791] usb 1-1: GET_CAPABILITIES returned 0
[  164.229544][  T791] usbtmc 1-1:16.0: can't read capabilities
[  164.383636][ T8247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.863'.
[  164.429360][  T791] usb 1-1: USB disconnect, device number 14
[  164.589724][ T8257] loop3: detected capacity change from 0 to 512
[  164.608542][ T8257] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  164.632270][ T5997] udevd[5997]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  164.640955][ T8257] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  164.650214][ T5997] udevd[5997]: symlink '../../loop3' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000000007.tmp-b7:3' failed: Read-only file system
[  164.655778][ T8257] EXT4-fs (loop3): orphan cleanup on readonly fs
[  164.660497][ T8257] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.867: bg 0: block 361: padding at end of block bitmap is not set
[  164.678651][ T8257] EXT4-fs (loop3): Remounting filesystem read-only
[  164.684578][ T8263] loop1: detected capacity change from 0 to 2048
[  164.691907][ T8257] EXT4-fs (loop3): 1 truncate cleaned up
[  164.695487][ T8257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  164.720431][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-label/LinuxUDF.tmp-b7:1' failed: Read-only file system
[  164.726643][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-uuid/1234567812345678.tmp-b7:1' failed: Read-only file system
[  164.734527][ T8263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.911865][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-label/LinuxUDF.tmp-b7:1' failed: Read-only file system
[  164.918057][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-uuid/1234567812345678.tmp-b7:1' failed: Read-only file system
[  165.019984][ T8271] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.867: dx entry: limit 0 != root limit 125
[  165.024765][ T8271] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.867: Corrupt directory, running e2fsck is recommended
[  165.030695][ T8271] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.867: dx entry: limit 0 != root limit 125
[  165.035099][ T8271] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.867: Corrupt directory, running e2fsck is recommended
[  165.040596][ T8271] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.867: dx entry: limit 0 != root limit 125
[  165.045656][ T8271] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.867: Corrupt directory, running e2fsck is recommended
[  165.050945][ T8271] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.867: dx entry: limit 0 != root limit 125
[  165.055577][ T8271] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.867: Corrupt directory, running e2fsck is recommended
[  165.968555][ T7793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  166.068805][ T8276] loop0: detected capacity change from 0 to 1024
[  166.129259][ T8276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  166.149182][ T8276] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.173503][ T5997] udevd[5997]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  166.190896][   T33] audit: type=1800 audit(1755250716.310:32): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.870" name="file1" dev="loop0" ino=15 res=0 errno=0
[  166.195368][ T8276] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.870: lblock 0 mapped to illegal pblock 0 (length 1)
[  166.207503][ T5997] udevd[5997]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:0' failed: Read-only file system
[  166.222565][ T8276] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  166.226850][ T5997] udevd[5997]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  166.237045][ T8276] EXT4-fs (loop0): This should not happen!! Data will be lost
[  166.237045][ T8276] 
[  166.243517][ T5997] udevd[5997]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:0' failed: Read-only file system
[  166.306774][ T8287] syz.1.871 (8287) used obsolete PPPIOCDETACH ioctl
[  166.322773][ T5985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  166.461680][ T8290] loop3: detected capacity change from 0 to 4096
[  166.678852][ T8304] loop1: detected capacity change from 0 to 1024
[  166.739700][ T8304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.771452][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.879'.
[  166.879700][ T5993] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.081198][ T8328] loop1: detected capacity change from 0 to 2048
[  167.095351][ T8328] hpfs: filesystem error: invalid size in superblock: ffffffff; already mounted read-only
[  167.162782][ T8330] netlink: 'syz.1.885': attribute type 10 has an invalid length.
[  167.171972][ T8330] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  167.417984][ T8335] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  167.425556][ T8335] team0: Device macvtap1 is already an upper device of the team interface
[  167.849925][ T8341] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  167.853083][ T8341] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  167.929373][ T8345] loop0: detected capacity change from 0 to 2048
[  167.934772][ T8345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.429260][ T8360] vlan2: entered allmulticast mode
[  170.206800][ T5991] Bluetooth: hci1: command 0x0405 tx timeout
[  170.521200][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'.
[  170.761593][ T8404] loop3: detected capacity change from 0 to 256
[  170.764860][ T8404] exfat: Deprecated parameter 'utf8'
[  170.766768][ T8403] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  170.780742][ T8404] exfat: Deprecated parameter 'utf8'
[  170.792087][ T8404] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d)
[  170.811701][ T8406] loop1: detected capacity change from 0 to 64
[  170.830791][ T8406] MINIX-fs: bad superblock
[  170.953116][ T8416] loop3: detected capacity change from 0 to 1024
[  170.983156][ T8416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.002332][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  171.011884][ T8416] EXT4-fs (loop3): shut down requested (2)
[  171.032632][ T8425] loop0: detected capacity change from 0 to 128
[  171.043187][ T8425] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  171.046819][ T7793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.049223][ T8425] ext4 filesystem being mounted at /317/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  171.125666][ T8428] input: syz1 as /devices/virtual/input/input13
[  171.139249][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:0' failed: Read-only file system
[  171.139493][ T5985] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  171.170566][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:0' failed: Read-only file system
[  171.194259][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:0' failed: Read-only file system
[  171.236784][ T6086] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  171.273320][ T8434] netlink: 224 bytes leftover after parsing attributes in process `syz.0.931'.
[  171.387126][ T6086] usb 2-1: Using ep0 maxpacket: 32
[  171.393840][ T6086] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  171.397895][ T6086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.400983][ T6086] usb 2-1: Product: syz
[  171.402787][ T6086] usb 2-1: Manufacturer: syz
[  171.404664][ T6086] usb 2-1: SerialNumber: syz
[  171.411057][ T6086] usb 2-1: config 0 descriptor??
[  171.416221][ T6086] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  171.496470][   T52] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  171.566558][   T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  171.646967][   T52] usb 4-1: Using ep0 maxpacket: 8
[  171.651731][   T52] usb 4-1: unable to get BOS descriptor or descriptor too short
[  171.656078][   T52] usb 4-1: config 6 has an invalid interface number: 70 but max is 0
[  171.660346][   T52] usb 4-1: config 6 has no interface number 0
[  171.662851][   T52] usb 4-1: config 6 interface 70 altsetting 118 has an endpoint descriptor with address 0x29, changing to 0x9
[  171.668572][   T52] usb 4-1: config 6 interface 70 altsetting 118 endpoint 0x9 has invalid wMaxPacketSize 0
[  171.672587][   T52] usb 4-1: config 6 interface 70 has no altsetting 0
[  171.680352][   T52] usb 4-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=63.7b
[  171.683919][   T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.687238][   T52] usb 4-1: Product: syz
[  171.689018][   T52] usb 4-1: Manufacturer: syz
[  171.690806][   T52] usb 4-1: SerialNumber: syz
[  171.740809][   T10] usb 1-1: config 0 has an invalid interface number: 93 but max is 0
[  171.744061][   T10] usb 1-1: config 0 has no interface number 0
[  171.749355][   T10] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  171.752978][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.756151][   T10] usb 1-1: Product: syz
[  171.758431][   T10] usb 1-1: Manufacturer: syz
[  171.761452][   T10] usb 1-1: SerialNumber: syz
[  171.768663][   T10] usb 1-1: config 0 descriptor??
[  171.915067][   T52] HFC-S_USB 4-1:6.70: probe with driver HFC-S_USB failed with error -5
[  171.925509][   T52] usb 4-1: USB disconnect, device number 6
[  171.974317][   T10] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware
[  171.997250][   T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  172.000646][   T10] dib0700: firmware download failed at 7 with -22
[  172.008727][   T10] usb 1-1: USB disconnect, device number 15
[  172.477982][ T8438] loop3: detected capacity change from 0 to 512
[  172.505609][ T5997] udevd[5997]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  172.530030][ T8438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.539229][ T8438] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  172.539453][ T5997] udevd[5997]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  172.592712][ T7793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.630388][ T6086] gspca_topro: reg_w err -71
[  172.667746][ T6086] gspca_topro: Sensor soi763a
[  172.680668][ T6086] usb 2-1: USB disconnect, device number 12
[  172.873162][ T8455] loop3: detected capacity change from 0 to 47
[  172.906022][ T8455] MINIX-fs: deleted inode referenced: 9
[  172.916805][ T8455] MINIX-fs: deleted inode referenced: 9
[  172.957067][ T8459] loop0: detected capacity change from 0 to 2048
[  172.961051][ T8459] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  172.965177][ T8459] NILFS (loop0): mounting unchecked fs
[  172.993239][ T6214] udevd[6214]: incorrect nilfs2 checksum on /dev/loop0
[  173.002538][ T8459] NILFS (loop0): recovery complete
[  173.015369][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:0' failed: Read-only file system
[  173.025140][ T8462] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  173.131592][ T8465] loop0: detected capacity change from 0 to 4096
[  173.145884][ T8465] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  173.162191][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  173.178314][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:0' failed: Read-only file system
[  173.289859][ T8473] netlink: 'syz.1.946': attribute type 7 has an invalid length.
[  173.294071][ T8473] netlink: 'syz.1.946': attribute type 8 has an invalid length.
[  173.661365][ T5993] block device autoloading is deprecated and will be removed.
[  174.196267][   T52] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  174.325855][ T8497] loop1: detected capacity change from 0 to 32768
[  174.338804][ T8497] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.957 (8497)
[  174.350559][ T8497] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  174.352636][   T52] usb 1-1: config 0 has an invalid interface number: 186 but max is 1
[  174.354888][ T8497] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  174.361836][ T8497] BTRFS info (device loop1): using free-space-tree
[  174.365661][   T52] usb 1-1: config 0 has no interface number 1
[  174.378438][   T52] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83
[  174.385452][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.390847][   T52] usb 1-1: Product: syz
[  174.392792][   T52] usb 1-1: Manufacturer: syz
[  174.394911][   T52] usb 1-1: SerialNumber: syz
[  174.399478][   T52] usb 1-1: config 0 descriptor??
[  174.406245][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  174.561421][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  174.565267][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  174.574929][ T5993] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  174.579874][   T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  174.582599][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  174.585204][   T10] usb 4-1: SerialNumber: syz
[  174.626068][   T52] usb 1-1: USB disconnect, device number 16
[  174.818197][   T10] usb 4-1: 0:2 : does not exist
[  174.844258][   T10] usb 4-1: USB disconnect, device number 7
[  175.008535][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'.
[  175.276316][   T52] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  175.453590][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'.
[  175.454430][   T52] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  175.460893][   T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.466743][   T52] usb 2-1: config 0 descriptor??
[  175.479808][   T52] ums-realtek 2-1:0.0: USB Mass Storage device detected
[  175.536205][ T5848] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  175.681919][   T52] usb 2-1: USB disconnect, device number 13
[  175.686505][ T5848] usb 1-1: Using ep0 maxpacket: 8
[  175.699522][ T5848] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  175.702961][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.707871][ T5848] usb 1-1: Product: syz
[  175.709584][ T5848] usb 1-1: Manufacturer: syz
[  175.711462][ T5848] usb 1-1: SerialNumber: syz
[  175.715493][ T5848] usb 1-1: config 0 descriptor??
[  175.723088][ T5848] gspca_main: se401-2.14.0 probing 047d:5003
[  176.016065][   T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  176.125791][ T5848] gspca_se401: Too many frame sizes
[  176.168435][   T10] usb 4-1: config 0 has no interfaces?
[  176.170587][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  176.174347][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.180534][   T10] usb 4-1: config 0 descriptor??
[  176.396980][ T5848] usb 4-1: USB disconnect, device number 8
[  176.477686][   T10] usb 1-1: USB disconnect, device number 17
[  177.012118][ T8576] loop3: detected capacity change from 0 to 512
[  177.027926][ T8576] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  177.033323][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-uuid/1DDD-580F.tmp-b7:3' failed: Read-only file system
[  177.038121][ T8576] FAT-fs (loop3): Filesystem has been set read-only
[  177.087564][ T8580] loop0: detected capacity change from 0 to 128
[  177.098384][ T8580] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  177.103245][ T8580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.159006][ T8584] loop3: detected capacity change from 0 to 128
[  177.162602][ T8584] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  177.166772][ T8586] input: syz1 as /devices/virtual/input/input14
[  177.169370][ T8586] input: failed to attach handler leds to device input14, error: -6
[  177.175152][ T8584] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  177.607695][ T8591] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  177.610600][ T5979] IPVS: starting estimator thread 0...
[  177.696055][ T8594] IPVS: using max 45 ests per chain, 108000 per kthread
[  177.895051][   T33] audit: type=1326 audit(2000000002.940:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.1000" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5638ebe9 code=0x7ffc0000
[  177.931318][   T33] audit: type=1326 audit(2000000002.940:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.1000" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda5638ebe9 code=0x7ffc0000
[  177.940476][   T33] audit: type=1326 audit(2000000002.940:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.1000" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5638ebe9 code=0x7ffc0000
[  177.957058][   T33] audit: type=1326 audit(2000000002.940:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.1000" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda5638ebe9 code=0x7ffc0000
[  177.967170][   T33] audit: type=1326 audit(2000000002.940:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.1000" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5638ebe9 code=0x7ffc0000
[  177.980392][   T33] audit: type=1326 audit(2000000002.940:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.1000" exe="/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fda5638ebe9 code=0x7ffc0000
[  178.163621][   T33] audit: type=1326 audit(2000000002.940:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.1000" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5638ebe9 code=0x7ffc0000
[  178.182024][   T33] audit: type=1326 audit(2000000002.940:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.1000" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fda5638ebe9 code=0x7ffc0000
[  178.196144][   T26] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  178.205251][   T33] audit: type=1326 audit(2000000002.940:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.1000" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5638ebe9 code=0x7ffc0000
[  178.524010][ T8635] loop3: detected capacity change from 0 to 16
[  178.530431][ T8635] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  178.540858][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-label/Compressed.tmp-b7:3' failed: Read-only file system
[  178.564940][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-label/Compressed.tmp-b7:3' failed: Read-only file system
[  179.693400][ T8637] loop3: detected capacity change from 0 to 32768
[  179.812792][ T8637] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  179.870286][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system
[  179.894358][ T8637] XFS (loop3): Ending clean mount
[  179.905539][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system
[  179.908508][ T8637] XFS (loop3): Quotacheck needed: Please wait.
[  180.014810][ T8637] XFS (loop3): Quotacheck: Done.
[  180.062041][ T7793] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  180.557658][ T5848] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  180.750452][ T5848] usb 4-1: config index 0 descriptor too short (expected 149, got 148)
[  180.753689][ T5848] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.757897][ T5848] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  180.763263][ T5848] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  180.767471][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  180.796700][ T8654] loop0: detected capacity change from 0 to 32768
[  180.815643][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:0' failed: Read-only file system
[  180.841091][ T8654] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  180.846014][ T5848] usb 4-1: SerialNumber: syz
[  180.870773][ T5848] usb 4-1: 0:2 : does not exist
[  180.916561][ T5985] ocfs2: Unmounting device (7,0) on (node local)
[  181.057582][ T5848] usb 4-1: USB disconnect, device number 9
[  181.109845][ T6214] udevd[6214]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  181.547394][ T8665] loop0: detected capacity change from 0 to 32768
[  181.563332][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:0' failed: Read-only file system
[  181.809415][ T8670] loop3: detected capacity change from 0 to 4096
[  181.853083][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  181.859688][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:3' failed: Read-only file system
[  181.884728][ T8673] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1025'.
[  182.714352][ T8692] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1033'.
[  183.089036][   T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  183.244298][ T8709] loop0: detected capacity change from 0 to 16
[  183.246963][   T10] usb 4-1: Using ep0 maxpacket: 8
[  183.252867][   T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  183.256571][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.261463][ T8709] erofs (device loop0): mounted with root inode @ nid 36.
[  183.265249][   T10] usb 4-1: Product: syz
[  183.268639][   T10] usb 4-1: Manufacturer: syz
[  183.269032][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-uuid/dc080000-0000-0000-00db-a5c46e0e7dba.tmp-b7:0' failed: Read-only file system
[  183.272560][   T10] usb 4-1: SerialNumber: syz
[  183.285642][   T10] usb 4-1: config 0 descriptor??
[  183.500671][   T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  183.923800][   T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  183.931817][   T10] usb 4-1: USB disconnect, device number 10
[  184.246248][ T8737] loop1: detected capacity change from 0 to 32768
[  184.255567][ T8737] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  184.266491][ T8737] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  184.271043][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:1' failed: Read-only file system
[  184.283667][ T8737] (syz.1.1045,8737,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9
[  184.319897][ T5993] ocfs2: Unmounting device (7,1) on (node local)
[  184.364899][ T8723] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  185.566569][ T5988] Bluetooth: hci0: command 0x0401 tx timeout
[  186.363935][ T5848] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  186.442774][ T8780] loop0: detected capacity change from 0 to 1024
[  186.463831][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  186.477268][ T8780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.481573][ T8780] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.506812][ T5985] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.518080][ T5848] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  186.527932][ T5848] usb 4-1: config 179 has no interface number 0
[  186.530493][ T5848] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  186.534706][ T5848] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[  186.564003][ T5848] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  186.568617][ T5848] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64
[  186.572958][ T5848] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  186.589224][ T5848] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  186.599413][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.616473][ T8770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  186.619815][ T8770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  186.865844][   T33] audit: type=1326 audit(2000000011.910:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5638ebe9 code=0x7ffc0000
[  186.884813][   T33] audit: type=1326 audit(2000000011.910:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5638ebe9 code=0x7ffc0000
[  186.891486][ T5848] usb 4-1: USB disconnect, device number 11
[  186.892267][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  186.892300][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  186.896452][   T33] audit: type=1326 audit(2000000011.940:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fda5638ebe9 code=0x7ffc0000
[  186.927569][   T33] audit: type=1326 audit(2000000011.940:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5638ebe9 code=0x7ffc0000
[  186.939162][   T33] audit: type=1326 audit(2000000011.950:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8801 comm="syz.0.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5638ebe9 code=0x7ffc0000
[  187.062714][ T8812] loop0: detected capacity change from 0 to 1024
[  187.079324][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  187.093971][ T8812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  187.096898][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:0' failed: Read-only file system
[  187.102269][ T8812] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.112378][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  187.118286][ T8812] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  187.127355][ T6214] udevd[6214]: symlink '../../loop0' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:0' failed: Read-only file system
[  187.136332][ T8812] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 35 with error 28
[  187.150745][ T8812] EXT4-fs (loop0): This should not happen!! Data will be lost
[  187.150745][ T8812] 
[  187.154420][ T8812] EXT4-fs (loop0): Total free blocks count 0
[  187.163263][ T8812] EXT4-fs (loop0): Free/Dirty block details
[  187.165626][ T8812] EXT4-fs (loop0): free_blocks=4293918720
[  187.169183][ T8812] EXT4-fs (loop0): dirty_blocks=64
[  187.171220][ T8812] EXT4-fs (loop0): Block reservation details
[  187.173679][ T8812] EXT4-fs (loop0): i_reserved_data_blocks=4
[  187.174123][ T8818] loop1: detected capacity change from 0 to 2048
[  187.184161][ T8818] EXT4-fs: Ignoring removed nobh option
[  187.199264][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  187.217817][ T7619] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 28
[  187.225272][ T8818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.242595][ T8818] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.250229][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  187.270149][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  187.295515][ T5993] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.429204][ T8828] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1081'.
[  187.583009][ T8840] loop0: detected capacity change from 0 to 256
[  187.587740][ T8840] exfat: Deprecated parameter 'utf8'
[  187.603729][ T8840] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  187.729834][ T8848] syz.3.1088: attempt to access beyond end of device
[  187.729834][ T8848] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0
[  187.750137][ T8848] vxfs: unable to read disk superblock at 1
[  187.765145][ T8848] syz.3.1088: attempt to access beyond end of device
[  187.765145][ T8848] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0
[  187.788575][ T8848] vxfs: unable to read disk superblock at 8
[  187.791300][ T8848] vxfs: can't find superblock.
[  188.036041][   T52] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  188.187116][   T52] usb 2-1: Using ep0 maxpacket: 16
[  188.197456][   T52] usb 2-1: config 0 has no interfaces?
[  188.201138][   T52] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  188.203784][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.209373][   T52] usb 2-1: Product: syz
[  188.210624][   T52] usb 2-1: Manufacturer: syz
[  188.211997][   T52] usb 2-1: SerialNumber: syz
[  188.222241][   T52] r8152-cfgselector 2-1: Unknown version 0x0000
[  188.224446][   T52] r8152-cfgselector 2-1: config 0 descriptor??
[  188.313018][ T5991] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.318471][ T5991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.325179][ T5991] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.330961][ T5991] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.335077][ T5991] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  188.372577][ T5973] bridge_slave_1: left allmulticast mode
[  188.374248][ T5973] bridge_slave_1: left promiscuous mode
[  188.377427][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.382506][ T5973] bridge_slave_0: left allmulticast mode
[  188.386393][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.452843][ T5979] r8152-cfgselector 2-1: USB disconnect, device number 14
[  188.979211][ T5973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  188.997596][ T5973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.003290][ T5973] bond0 (unregistering): Released all slaves
[  189.218147][ T5979] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  189.366102][ T5979] usb 4-1: Using ep0 maxpacket: 16
[  189.370549][ T5979] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.375365][ T5979] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.379299][ T5979] usb 4-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  189.391265][ T5979] usb 4-1: config 0 interface 0 has no altsetting 0
[  189.396015][ T5979] usb 4-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.00
[  189.402355][ T5979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.427665][ T5979] usb 4-1: config 0 descriptor??
[  189.432932][ T5979] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15
[  189.574695][ T5997] udevd[5997]: Error opening device "/dev/input/event3": No such file or directory
[  189.580167][ T5997] udevd[5997]: Unable to EVIOCGABS device "/dev/input/event3"
[  189.584243][ T5997] udevd[5997]: Unable to EVIOCGABS device "/dev/input/event3"
[  189.592085][ T5997] udevd[5997]: Unable to EVIOCGABS device "/dev/input/event3"
[  189.595360][ T5997] udevd[5997]: Unable to EVIOCGABS device "/dev/input/event3"
[  189.598920][ T5973] hsr_slave_0: left promiscuous mode
[  189.602089][ T5973] hsr_slave_1: left promiscuous mode
[  189.605447][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.610251][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.613509][ T5973] batman_adv: batadv0: Removing interface: macvtap0
[  189.656139][   T10] usb 4-1: USB disconnect, device number 12
[  190.118971][ T5973] team0 (unregistering): Port device team_slave_1 removed
[  190.163128][ T5973] team0 (unregistering): Port device team_slave_0 removed
[  190.367502][ T5988] Bluetooth: hci0: command tx timeout
[  191.159522][ T8858] chnl_net:caif_netlink_parms(): no params data found
[  191.206128][ T6086] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  191.367253][ T6086] usb 4-1: Using ep0 maxpacket: 16
[  191.385290][ T6086] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  191.392576][ T6086] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.397777][ T6086] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  191.404519][ T6086] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  191.411106][ T6086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.414267][ T6086] usb 4-1: Product: syz
[  191.426403][ T6086] usb 4-1: Manufacturer: syz
[  191.449121][ T6086] usb 4-1: SerialNumber: syz
[  191.494167][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.519558][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.549470][ T8858] bridge_slave_0: entered allmulticast mode
[  191.560954][ T8858] bridge_slave_0: entered promiscuous mode
[  191.573555][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1113'.
[  191.582790][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.587602][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.596342][ T8858] bridge_slave_1: entered allmulticast mode
[  191.606598][ T8858] bridge_slave_1: entered promiscuous mode
[  191.676364][ T6086] usb 4-1: 0:2 : does not exist
[  191.698278][ T6086] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1)
[  191.732772][ T5973] IPVS: stop unused estimator thread 0...
[  191.741560][ T8858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.753665][ T6086] usb 4-1: USB disconnect, device number 13
[  191.759255][ T8858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.818529][ T6214] udevd[6214]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  191.905295][ T8858] team0: Port device team_slave_0 added
[  191.917359][ T8858] team0: Port device team_slave_1 added
[  191.954721][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.957869][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.966508][ T8858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.979362][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.981822][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.992501][ T8858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.063581][ T8858] hsr_slave_0: entered promiscuous mode
[  192.069664][ T8858] hsr_slave_1: entered promiscuous mode
[  192.497652][ T5988] Bluetooth: hci0: command tx timeout
[  192.812475][ T8858] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  192.874953][ T8858] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  192.895715][ T8858] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  192.920932][ T8858] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  193.043761][ T8858] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.059850][ T8858] 8021q: adding VLAN 0 to HW filter on device team0
[  193.066331][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.068954][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.091660][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.094033][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.216213][ T6086] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  193.271435][ T8858] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.378998][ T6086] usb 2-1: Using ep0 maxpacket: 16
[  193.382601][ T6086] usb 2-1: config 5 has an invalid interface number: 206 but max is 0
[  193.385544][ T6086] usb 2-1: config 5 has no interface number 0
[  193.396906][ T6086] usb 2-1: config 5 interface 206 has no altsetting 0
[  193.401577][ T6086] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44
[  193.404674][ T6086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.415694][ T6086] usb 2-1: Product: syz
[  193.423433][ T6086] usb 2-1: Manufacturer: syz
[  193.425046][ T6086] usb 2-1: SerialNumber: syz
[  193.518247][ T8858] veth0_vlan: entered promiscuous mode
[  193.528297][ T8858] veth1_vlan: entered promiscuous mode
[  193.554237][ T8858] veth0_macvtap: entered promiscuous mode
[  193.559429][ T8858] veth1_macvtap: entered promiscuous mode
[  193.573311][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.590394][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.608978][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.612799][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.622961][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.629993][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.657701][ T6086] usb_ehset_test 2-1:5.206: probe with driver usb_ehset_test failed with error -32
[  193.682347][ T6086] usb 2-1: USB disconnect, device number 15
[  193.733519][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.741210][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.770463][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.773098][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.042204][ T9007] loop4: detected capacity change from 0 to 2048
[  194.051993][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.054388][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.071989][ T6214] udevd[6214]: symlink '../../loop4' '/dev/disk/by-label/LinuxUDF.tmp-b7:4' failed: Read-only file system
[  194.076803][ T9007] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  194.085597][ T6214] udevd[6214]: symlink '../../loop4' '/dev/disk/by-uuid/1234567812345678.tmp-b7:4' failed: Read-only file system
[  194.094158][ T9007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  194.105312][ T6214] udevd[6214]: symlink '../../loop4' '/dev/disk/by-label/LinuxUDF.tmp-b7:4' failed: Read-only file system
[  194.112391][   T33] audit: type=1800 audit(2000000019.160:47): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1129" name="file1" dev="loop4" ino=1346 res=0 errno=0
[  194.117008][ T6214] udevd[6214]: symlink '../../loop4' '/dev/disk/by-uuid/1234567812345678.tmp-b7:4' failed: Read-only file system
[  194.536312][ T5988] Bluetooth: hci0: command tx timeout
[  194.626332][   T52] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  194.780654][   T52] usb 2-1: Using ep0 maxpacket: 8
[  194.790011][   T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 11008, setting to 64
[  194.819361][   T52] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  194.826406][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.833509][   T52] usb 2-1: Product: syz
[  194.835241][   T52] usb 2-1: Manufacturer: syz
[  194.841006][   T52] usb 2-1: SerialNumber: syz
[  194.859708][   T52] usb 2-1: config 0 descriptor??
[  194.865251][   T52] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200
[  195.077646][ T5979] usb 2-1: USB disconnect, device number 16
[  195.129607][ T9032] loop4: detected capacity change from 0 to 40427
[  195.136709][ T9032] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 117440513)
[  195.140031][ T9032] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  195.170705][ T6214] udevd[6214]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  195.180264][ T9032] F2FS-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement.
[  195.192555][ T9053] loop3: detected capacity change from 0 to 512
[  195.211386][ T5997] udevd[5997]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  195.220191][ T9053] EXT4-fs (loop3): orphan cleanup on readonly fs
[  195.238046][ T9053] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  195.249975][ T5997] udevd[5997]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  195.262944][ T9053] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  195.268463][ T9053] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1144: Failed to acquire dquot type 1
[  195.281609][ T9053] EXT4-fs (loop3): 1 truncate cleaned up
[  195.289435][ T9053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  195.306982][ T9053] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  195.318271][ T9053] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8
[  195.388026][ T7793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.488602][ T9061] loop4: detected capacity change from 0 to 4096
[  195.517281][ T6214] udevd[6214]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  195.523073][ T9061] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  195.640772][ T5993] block device autoloading is deprecated and will be removed.
[  195.645559][ T6214] udevd[6214]: setting mode of /dev/loop1 to 060660 failed: Read-only file system
[  195.651446][ T6214] udevd[6214]: setting owner of /dev/loop1 to uid=0, gid=6 failed: Read-only file system
[  195.728583][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  195.816066][ T5979] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  195.900839][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  195.903839][    T9] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  195.907973][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.914131][    T9] usb 4-1: config 0 descriptor??
[  195.974114][ T5979] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  195.977755][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.980930][ T5979] usb 5-1: Product: syz
[  195.982963][ T5979] usb 5-1: Manufacturer: syz
[  195.984769][ T5979] usb 5-1: SerialNumber: syz
[  195.991603][ T5979] usb 5-1: config 0 descriptor??
[  196.056236][ T6086] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  196.206848][ T6086] usb 2-1: Using ep0 maxpacket: 8
[  196.220657][ T6086] usb 2-1: unable to get BOS descriptor or descriptor too short
[  196.225225][ T6086] usb 2-1: config 250 has an invalid interface number: 4 but max is 0
[  196.229695][ T6086] usb 2-1: config 250 has no interface number 0
[  196.232267][ T6086] usb 2-1: config 250 interface 4 altsetting 43 endpoint 0x6 has invalid wMaxPacketSize 0
[  196.236396][ T6086] usb 2-1: config 250 interface 4 has no altsetting 0
[  196.241958][ T6086] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=1b.8a
[  196.246866][ T6086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.250072][ T6086] usb 2-1: Product: syz
[  196.251818][ T6086] usb 2-1: Manufacturer: syz
[  196.253754][ T6086] usb 2-1: SerialNumber: syz
[  196.331855][    T9] zeroplus 0003:0C12:0005.0006: unknown main item tag 0x0
[  196.344744][    T9] zeroplus 0003:0C12:0005.0006: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.3-1/input0
[  196.350541][    T9] zeroplus 0003:0C12:0005.0006: no inputs found
[  196.471182][ T6086] powermate 2-1:250.4: probe with driver powermate failed with error -5
[  196.482376][ T6086] usb 2-1: USB disconnect, device number 17
[  196.530101][   T52] usb 4-1: USB disconnect, device number 14
[  196.607023][ T5988] Bluetooth: hci0: command tx timeout
[  197.025244][   T33] audit: type=1326 audit(2000000022.070:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.1.1152" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c558ebe9 code=0x7ffc0000
[  197.035565][   T33] audit: type=1326 audit(2000000022.080:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.1.1152" exe="/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f88c558ebe9 code=0x7ffc0000
[  197.044541][   T33] audit: type=1326 audit(2000000022.080:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.1.1152" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c558ebe9 code=0x7ffc0000
[  197.054236][   T33] audit: type=1326 audit(2000000022.080:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.1.1152" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c558ebe9 code=0x7ffc0000
[  197.400185][ T9086] loop3: detected capacity change from 0 to 1024
[  197.403514][ T9086] EXT4-fs: inline encryption not supported
[  197.405849][ T9086] EXT4-fs: Ignoring removed bh option
[  197.424195][ T5997] udevd[5997]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  197.440565][ T5979] usb 5-1: f81604_read: reg: 200f failed: -EPROTO
[  197.457546][ T5979] usb 5-1: USB disconnect, device number 2
[  197.484334][ T5997] udevd[5997]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  197.485482][ T9086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.499202][ T5979] usb 5-1: f81604_read: reg: 100f failed: -ENODEV
[  197.614865][ T5979] usb 5-1: f81604_read: reg: 200f failed: -ENODEV
[  197.820528][ T7793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.251406][ T9107] loop3: detected capacity change from 0 to 32768
[  198.272098][ T9107] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  198.279169][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system
[  198.297082][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system
[  198.308733][ T9107] XFS (loop3): Ending clean mount
[  198.320543][ T9107] XFS (loop3): Quotacheck needed: Please wait.
[  198.375822][ T9107] XFS (loop3): Quotacheck: Done.
[  198.381995][ T9131] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  198.485179][ T7793] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  199.231891][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'.
[  199.234926][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'.
[  199.346182][   T52] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  199.516110][   T52] usb 4-1: Using ep0 maxpacket: 32
[  199.522551][   T52] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  199.594861][   T52] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  199.615842][   T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.625156][   T52] usb 4-1: config 0 descriptor??
[  200.057243][   T52] zydacron 0003:13EC:0006.0007: unknown main item tag 0x0
[  200.061486][   T52] zydacron 0003:13EC:0006.0007: unknown main item tag 0x0
[  200.063957][   T52] zydacron 0003:13EC:0006.0007: unknown main item tag 0x0
[  200.068859][   T52] zydacron 0003:13EC:0006.0007: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0
[  200.236407][ T9159] loop4: detected capacity change from 0 to 512
[  200.247990][ T9159] EXT4-fs: Ignoring removed nomblk_io_submit option
[  200.251649][ T9159] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  200.267092][ T9159] EXT4-fs (loop4): 1 truncate cleaned up
[  200.268983][ T6214] udevd[6214]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  200.274536][ T9159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.277104][   T10] usb 4-1: USB disconnect, device number 15
[  200.311143][   T33] audit: type=1800 audit(2000000025.350:52): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1180" name="file1" dev="loop4" ino=15 res=0 errno=0
[  200.378381][ T8858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.916195][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  201.091781][   T10] usb 5-1: Using ep0 maxpacket: 32
[  201.171887][   T10] usb 5-1: config 8 has an invalid interface number: 203 but max is 0
[  201.181056][   T10] usb 5-1: config 8 has no interface number 0
[  201.190562][   T10] usb 5-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83
[  201.203316][   T10] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024
[  201.213025][   T10] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023
[  201.222702][   T10] usb 5-1: config 8 interface 203 has no altsetting 0
[  201.230775][   T10] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  201.234033][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.238191][   T10] usb 5-1: Product: syz
[  201.239534][   T10] usb 5-1: Manufacturer: syz
[  201.241355][   T10] usb 5-1: SerialNumber: syz
[  201.255289][ T9176] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  201.261075][ T9176] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  201.390171][ T9186] loop3: detected capacity change from 0 to 32768
[  201.395540][ T9186] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1189 (9186)
[  201.405470][ T9186] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  201.410037][ T9186] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  201.413429][ T9186] BTRFS info (device loop3): using free-space-tree
[  201.427627][ T5997] udevd[5997]: symlink '../../loop3' '/dev/disk/by-uuid/3d39d0ba-bdae-447e-827b-b091e1a68885.tmp-b7:3' failed: Read-only file system
[  201.585984][    C0] port100 5-1:8.203: NFC: Urb failure (status -71)
[  201.591089][    C0] port100 5-1:8.203: NFC: Urb failure (status -71)
[  201.594401][   T10] port100 5-1:8.203: NFC: Could not get supported command types
[  201.618572][   T10] usb 5-1: USB disconnect, device number 3
[  201.629582][ T5997] udevd[5997]: symlink '../../loop3' '/dev/disk/by-uuid/3d39d0ba-bdae-447e-827b-b091e1a68885.tmp-b7:3' failed: Read-only file system
[  201.683177][   T33] audit: type=1800 audit(2000000026.730:53): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1189" name="file1" dev="loop3" ino=260 res=0 errno=0
[  201.743827][ T7793] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  202.134143][ T9219] loop3: detected capacity change from 0 to 1024
[  202.142346][ T5997] udevd[5997]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  202.172492][ T9219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.211667][ T9225] loop4: detected capacity change from 0 to 1764
[  202.335044][ T7793] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  202.342489][ T7793] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  202.581343][ T7793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.715306][ T5973] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.766137][   T52] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  202.811195][ T5973] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.898494][ T5973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.914225][ T9244] loop1: detected capacity change from 0 to 8192
[  202.939745][ T9244] FAT-fs (loop1): bogus logical sector size 0
[  202.942337][ T9244] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  202.949151][   T52] usb 5-1: config 0 has an invalid interface number: 216 but max is 0
[  202.952508][ T9244] FAT-fs (loop1): Can't find a valid FAT filesystem
[  202.952690][   T52] usb 5-1: config 0 has no interface number 0
[  202.963077][   T52] usb 5-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  202.976639][   T52] usb 5-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  202.996229][   T52] usb 5-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7
[  203.002712][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.010998][   T52] usb 5-1: Product: syz
[  203.013700][   T52] usb 5-1: Manufacturer: syz
[  203.017750][ T5973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.021972][   T52] usb 5-1: SerialNumber: syz
[  203.057059][   T52] usb 5-1: config 0 descriptor??
[  203.071881][   T52] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  203.088962][   T52] snd-usb-audio 5-1:0.216: probe with driver snd-usb-audio failed with error -2
[  203.245508][ T6214] udevd[6214]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  203.598948][ T5991] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  203.606247][ T5991] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  203.610664][ T5991] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  203.614023][ T5991] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  203.620829][ T5991] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  203.623529][   T10] usb 5-1: USB disconnect, device number 4
[  203.705174][ T5973] bridge_slave_1: left allmulticast mode
[  203.707348][ T5973] bridge_slave_1: left promiscuous mode
[  203.710784][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.718668][ T5973] bridge_slave_0: left allmulticast mode
[  203.721115][ T5973] bridge_slave_0: left promiscuous mode
[  203.723094][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.574226][ T5973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.613144][ T5973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.623811][ T9264] loop1: detected capacity change from 0 to 32768
[  204.632417][ T9264] bcachefs (/dev/loop1): error validating superblock: Not a bcachefs superblock layout
[  204.633111][ T5973] bond0 (unregistering): Released all slaves
[  204.643401][ T9264] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout
[  204.974003][ T9271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1217'.
[  205.083362][ T5973] bond1 (unregistering): Released all slaves
[  205.417358][ T9277] loop1: detected capacity change from 0 to 8
[  205.726283][ T5991] Bluetooth: hci1: command tx timeout
[  205.952313][ T5973] hsr_slave_0: left promiscuous mode
[  206.021085][ T9287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1222'.
[  206.026755][ T5973] hsr_slave_1: left promiscuous mode
[  206.029496][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.033105][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.053418][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.069792][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.089233][ T9290] loop4: detected capacity change from 0 to 136
[  206.103990][ T9285] loop1: detected capacity change from 0 to 4096
[  206.116166][ T9285] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  206.128589][ T5997] udevd[5997]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  206.135111][ T9290] Attempt to read inode for relocated directory
[  206.138633][ T6214] udevd[6214]: symlink '../../loop4' '/dev/disk/by-label/CDROM.tmp-b7:4' failed: Read-only file system
[  206.143218][ T5973] veth1_macvtap: left promiscuous mode
[  206.145450][ T5973] veth0_macvtap: left promiscuous mode
[  206.146904][ T5997] udevd[5997]: symlink '../../loop1' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:1' failed: Read-only file system
[  206.149580][ T6214] udevd[6214]: symlink '../../loop4' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:4' failed: Read-only file system
[  206.157027][ T5973] veth1_vlan: left promiscuous mode
[  206.159236][ T5973] veth0_vlan: left promiscuous mode
[  206.171930][ T6214] udevd[6214]: symlink '../../loop4' '/dev/disk/by-label/CDROM.tmp-b7:4' failed: Read-only file system
[  206.178130][ T6214] udevd[6214]: symlink '../../loop4' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:4' failed: Read-only file system
[  206.201198][ T5997] udevd[5997]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  206.211483][ T5997] udevd[5997]: symlink '../../loop1' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:1' failed: Read-only file system
[  206.212943][ T9285] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  206.223534][ T9292] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.315597][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  206.751083][ T5973] team0 (unregistering): Port device team_slave_1 removed
[  206.784118][ T5973] team0 (unregistering): Port device team_slave_0 removed
[  207.345051][ T9309] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  207.445519][ T9249] chnl_net:caif_netlink_parms(): no params data found
[  207.763389][ T9249] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.766368][ T9249] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.769110][ T9249] bridge_slave_0: entered allmulticast mode
[  207.780017][ T9249] bridge_slave_0: entered promiscuous mode
[  207.785584][ T9249] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.788580][ T9249] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.791367][ T9249] bridge_slave_1: entered allmulticast mode
[  207.806129][ T5991] Bluetooth: hci1: command tx timeout
[  208.143766][ T9249] bridge_slave_1: entered promiscuous mode
[  208.224328][ T9249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.235697][ T9249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.322345][ T9249] team0: Port device team_slave_0 added
[  208.338628][ T9249] team0: Port device team_slave_1 added
[  208.342854][ T9337] input input16: cannot allocate more than FF_MAX_EFFECTS effects
[  208.593491][ T9331] syz.1.1232 (9331): drop_caches: 2
[  208.677690][ T9249] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.680493][ T9249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.716024][ T9249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.724034][ T9249] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.769544][ T9249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.795641][ T9249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.081601][ T9249] hsr_slave_0: entered promiscuous mode
[  209.086582][ T9249] hsr_slave_1: entered promiscuous mode
[  209.090918][ T9249] debugfs: 'hsr0' already exists in 'hsr'
[  209.092933][ T9249] Cannot create hsr debugfs directory
[  209.642518][ T9249] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  209.668136][ T9249] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  209.677665][ T9249] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  209.688376][ T9249] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  209.878484][ T9249] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.886537][ T5991] Bluetooth: hci1: command tx timeout
[  209.919021][ T9249] 8021q: adding VLAN 0 to HW filter on device team0
[  209.940987][ T7623] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.943755][ T7623] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.970149][ T7623] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.973034][ T7623] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.199487][ T9359] loop4: detected capacity change from 0 to 32768
[  210.202797][ T9359] XFS: attr2 mount option is deprecated.
[  210.212912][ T9359] XFS: attr2 mount option is deprecated.
[  210.243520][ T9359] XFS (loop4): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  210.257308][ T6214] udevd[6214]: symlink '../../loop4' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:4' failed: Read-only file system
[  210.269046][ T9249] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.338552][ T9400] loop1: detected capacity change from 0 to 256
[  210.351564][ T9400] exfat: Deprecated parameter 'utf8'
[  210.360715][ T9400] exfat: Deprecated parameter 'namecase'
[  210.363061][ T9400] exfat: Deprecated parameter 'utf8'
[  210.372801][ T8858] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  210.384446][ T9400] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  210.723699][ T9417] loop1: detected capacity change from 0 to 1024
[  210.775057][ T9249] veth0_vlan: entered promiscuous mode
[  210.787694][ T9249] veth1_vlan: entered promiscuous mode
[  210.840237][ T9249] veth0_macvtap: entered promiscuous mode
[  210.855804][ T9249] veth1_macvtap: entered promiscuous mode
[  210.886055][   T52] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  210.888305][ T9249] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.898559][ T9249] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.932476][ T5706] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.939986][ T5706] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.945725][ T5706] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.951816][ T5706] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.039077][   T52] usb 5-1: Using ep0 maxpacket: 8
[  211.044392][   T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.051975][   T52] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  211.055030][   T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.066209][ T7619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.068727][ T7619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.077352][   T52] usb 5-1: config 0 descriptor??
[  211.089371][   T52] gspca_main: vc032x-2.14.0 probing 046d:0892
[  211.109399][ T7619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.112614][ T7619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.796312][ T6086] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  211.953531][ T6086] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  211.965663][ T6086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.969207][ T5991] Bluetooth: hci1: command tx timeout
[  211.982290][ T6086] usb 6-1: Product: syz
[  211.984372][ T6086] usb 6-1: Manufacturer: syz
[  211.989538][ T6086] usb 6-1: SerialNumber: syz
[  212.016186][ T6086] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  212.099245][    T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  212.323571][   T52] gspca_vc032x: reg_w err -71
[  212.325609][   T52] vc032x 5-1:0.0: probe with driver vc032x failed with error -71
[  212.345362][   T52] usb 5-1: USB disconnect, device number 5
[  212.568140][  T791] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  212.751613][  T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.757905][  T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.761785][  T791] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  212.769616][  T791] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  212.774383][  T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.784331][  T791] usb 2-1: config 0 descriptor??
[  213.245730][  T791] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  213.406168][    T9] usb 6-1: Service connection timeout for: 256
[  213.408743][    T9] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  213.423581][ T5979] usb 2-1: USB disconnect, device number 18
[  213.451268][    T9] ath9k_htc: Failed to initialize the device
[  213.472461][    T9] usb 6-1: ath9k_htc: USB layer deinitialized
[  213.726024][   T52] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  213.876084][   T52] usb 5-1: Using ep0 maxpacket: 8
[  213.883422][   T52] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  213.887221][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.890482][   T52] usb 5-1: Product: syz
[  213.891868][   T52] usb 5-1: Manufacturer: syz
[  213.893500][   T52] usb 5-1: SerialNumber: syz
[  213.897739][   T52] usb 5-1: config 0 descriptor??
[  214.111776][   T52] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  214.489557][ T5979] usb 6-1: USB disconnect, device number 2
[  214.543801][ T9531] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode active-backup(1)
[  214.591946][ T5974] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  214.694229][ T9536] loop5: detected capacity change from 0 to 8192
[  214.713894][ T9536] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  214.731398][ T5997] udevd[5997]: symlink '../../loop5' '/dev/disk/by-label/SYZKALLER.tmp-b7:5' failed: Read-only file system
[  214.753472][ T5974] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.766504][ T5974] usb 2-1: config 0 interface 0 has no altsetting 0
[  214.772682][ T5974] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  214.789021][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.818633][ T5974] usb 2-1: config 0 descriptor??
[  215.056213][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  215.122433][   T52] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  215.131545][   T52] usb 5-1: USB disconnect, device number 6
[  215.210027][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.213818][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.217590][    T9] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  215.220520][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.224495][    T9] usb 6-1: config 0 descriptor??
[  215.249451][ T5974] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0009/input/input17
[  215.262738][ T5974] sony 0003:054C:03D5.0009: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0
[  215.438944][   T52] usb 2-1: USB disconnect, device number 19
[  215.638850][    T9] hkems 0003:2006:0118.000A: unknown main item tag 0x2
[  215.650988][    T9] hkems 0003:2006:0118.000A: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.5-1/input0
[  215.656908][    T9] hkems 0003:2006:0118.000A: no inputs found
[  215.659398][    T9] hkems 0003:2006:0118.000A: force feedback init failed
[  215.837373][   T52] usb 6-1: USB disconnect, device number 3
[  216.173750][ T9568] loop4: detected capacity change from 0 to 256
[  216.253326][ T9568] FAT-fs (loop4): codepage cp86 not found
[  216.454676][ T9580] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1291'.
[  216.596376][ T9583] loop5: detected capacity change from 0 to 4096
[  216.608609][ T9583] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  216.621182][ T6214] udevd[6214]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  216.637007][ T6214] udevd[6214]: symlink '../../loop5' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:5' failed: Read-only file system
[  216.672661][ T6214] udevd[6214]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  216.683502][ T6214] udevd[6214]: symlink '../../loop5' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:5' failed: Read-only file system
[  216.869376][ T6214] udevd[6214]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  216.891920][ T9589] bond0: option mode: unable to set because the bond device has slaves
[  217.151629][ T9600] ALSA: mixer_oss: invalid OSS volume ''
[  217.293940][ T9608] loop1: detected capacity change from 0 to 2048
[  217.340008][ T6214]  loop1: p3 < > p4 < >
[  217.341276][ T6214] loop1: partition table partially beyond EOD, truncated
[  217.343840][ T6214] loop1: p3 start 4284289 is beyond EOD, truncated
[  217.350351][ T9608]  loop1: p3 < > p4 < >
[  217.352118][ T9608] loop1: partition table partially beyond EOD, truncated
[  217.354867][ T9608] loop1: p3 start 4284289 is beyond EOD, truncated
[  217.366120][  T791] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  217.380317][ T6214] udevd[6214]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  217.401995][ T6214] udevd[6214]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  217.442644][ T6214] udevd[6214]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  217.479930][ T9614] loop1: detected capacity change from 0 to 512
[  217.503201][ T6214] udevd[6214]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  217.505331][ T9614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  217.514604][ T9614] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.531619][  T791] usb 5-1: config 39 has an invalid interface number: 2 but max is 0
[  217.534857][  T791] usb 5-1: config 39 has no interface number 0
[  217.540104][ T9614] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  217.540775][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  217.546428][ T9614] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  217.551591][ T9614] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1307: Failed to acquire dquot type 0
[  217.558096][  T791] usb 5-1: config 39 interface 2 has no altsetting 0
[  217.564338][  T791] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36
[  217.571853][  T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.575044][  T791] usb 5-1: Product: syz
[  217.582224][  T791] usb 5-1: Manufacturer: syz
[  217.584463][  T791] usb 5-1: SerialNumber: syz
[  217.596651][ T5993] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  217.726087][    T9] usb 6-1: Using ep0 maxpacket: 16
[  217.732675][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  217.741878][    T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  217.744738][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.762986][    T9] usb 6-1: config 0 descriptor??
[  217.808838][  T791] mdc800 5-1:39.2: probe fails -> wrong Interface
[  217.824625][  T791] usb 5-1: USB disconnect, device number 7
[  218.179795][    T9] hid (null): unknown global tag 0xd
[  218.186490][    T9] hid (null): global environment stack underflow
[  218.385296][   T52] usb 6-1: USB disconnect, device number 4
[  218.944346][ T9665] o2cb: This node has not been configured.
[  218.947170][ T9665] o2cb: Cluster check failed. Fix errors before retrying.
[  218.950181][ T9665] (syz.1.1322,9665,0):user_dlm_register:674 ERROR: status = -22
[  218.953363][ T9665] (syz.1.1322,9665,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[  219.301119][ T9678] loop5: detected capacity change from 0 to 1024
[  219.321801][ T9678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.359003][ T9249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.464415][ T9691] overlayfs: empty lowerdir
[  220.527447][ T9709] loop4: detected capacity change from 0 to 40427
[  220.532828][ T9709] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  220.538930][ T9709] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  220.543700][ T9709] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288)
[  220.554701][ T9709] F2FS-fs (loop4): invalid crc value
[  220.567100][ T6214] udevd[6214]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  220.645047][ T9709] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  220.650831][ T9709] F2FS-fs (loop4): Start checkpoint disabled!
[  220.690627][ T9709] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  220.693212][ T9709] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  221.026313][   T52] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  221.177625][   T52] usb 6-1: Using ep0 maxpacket: 8
[  221.181441][   T52] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  221.203755][   T52] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  221.215315][   T52] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  221.228074][   T52] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  221.232084][   T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.235178][   T52] usb 6-1: Product: syz
[  221.237697][   T52] usb 6-1: Manufacturer: syz
[  221.239461][   T52] usb 6-1: SerialNumber: syz
[  221.469049][   T52] adutux 6-1:168.0: interrupt endpoints not found
[  221.486503][   T52] usb 6-1: USB disconnect, device number 5
[  221.906606][   T33] audit: type=1326 audit(2000000046.960:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9739 comm="syz.4.1349" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3b58ebe9 code=0x7fc00000
[  222.071662][ T9750] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  222.104070][ T9750] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  222.132296][ T9752] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  222.137204][ T9752] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  222.140783][ T9752] CPU: 1 UID: 0 PID: 9752 Comm: syz.5.1357 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  222.146581][ T9752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  222.150671][ T9752] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  222.152983][ T9752] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 39 5e 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 5e 36 f9 4d 8b 24 24 48 83 c3
[  222.160848][ T9752] RSP: 0018:ffffc9000387fa60 EFLAGS: 00010206
[  222.163320][ T9752] RAX: 0000000000000005 RBX: ffff88801bb0d000 RCX: 0000000000080000
[  222.166408][ T9752] RDX: ffffc9000a539000 RSI: 00000000000003d1 RDI: 00000000000003d2
[  222.169687][ T9752] RBP: 0000000000000001 R08: ffff888021cc812f R09: 1ffff11004399025
[  222.172888][ T9752] R10: dffffc0000000000 R11: ffffffff88ec9110 R12: 0000000000000028
[  222.176148][ T9752] R13: dffffc0000000000 R14: ffff888021cc8000 R15: dffffc0000000000
[  222.179354][ T9752] FS:  00007fec69e696c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  222.183002][ T9752] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  222.185681][ T9752] CR2: 0000001b2ec22ff8 CR3: 0000000114cf2000 CR4: 00000000000006f0
[  222.188871][ T9752] Call Trace:
[  222.190235][ T9752]  <TASK>
[  222.191654][ T9752]  pcl818_detach+0x66/0xd0
[  222.193548][ T9752]  comedi_device_detach_locked+0x178/0x750
[  222.195934][ T9752]  comedi_unlocked_ioctl+0xcde/0x1020
[  222.198088][ T9752]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  222.200497][ T9752]  ? __lock_acquire+0xab9/0xd20
[  222.202514][ T9752]  ? __fget_files+0x2a/0x420
[  222.204449][ T9752]  ? __fget_files+0x2a/0x420
[  222.206387][ T9752]  ? __fget_files+0x3a0/0x420
[  222.208343][ T9752]  ? __fget_files+0x2a/0x420
[  222.210189][ T9752]  ? bpf_lsm_file_ioctl+0x9/0x20
[  222.212196][ T9752]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  222.214546][ T9752]  __se_sys_ioctl+0xfc/0x170
[  222.216494][ T9752]  do_syscall_64+0xfa/0x3b0
[  222.218356][ T9752]  ? lockdep_hardirqs_on+0x9c/0x150
[  222.220415][ T9752]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.222845][ T9752]  ? exc_page_fault+0x9f/0xf0
[  222.224825][ T9752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.227296][ T9752] RIP: 0033:0x7fec68f8ebe9
[  222.229138][ T9752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.236757][ T9752] RSP: 002b:00007fec69e69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  222.240176][ T9752] RAX: ffffffffffffffda RBX: 00007fec691b5fa0 RCX: 00007fec68f8ebe9
[  222.243172][ T9752] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[  222.246162][ T9752] RBP: 00007fec69011e19 R08: 0000000000000000 R09: 0000000000000000
[  222.249207][ T9752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.252415][ T9752] R13: 00007fec691b6038 R14: 00007fec691b5fa0 R15: 00007ffecb330c58
[  222.255517][ T9752]  </TASK>
[  222.256801][ T9752] Modules linked in:
[  222.258586][    C1] vkms_vblank_simulate: vblank timer overrun
[  222.261951][ T9752] ---[ end trace 0000000000000000 ]---
[  222.271253][ T9752] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  222.273458][ T9752] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 39 5e 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 5e 36 f9 4d 8b 24 24 48 83 c3
[  222.280768][ T9752] RSP: 0018:ffffc9000387fa60 EFLAGS: 00010206
[  222.283131][ T9752] RAX: 0000000000000005 RBX: ffff88801bb0d000 RCX: 0000000000080000
[  222.286308][ T9752] RDX: ffffc9000a539000 RSI: 00000000000003d1 RDI: 00000000000003d2
[  222.289460][ T9752] RBP: 0000000000000001 R08: ffff888021cc812f R09: 1ffff11004399025
[  222.292463][ T9752] R10: dffffc0000000000 R11: ffffffff88ec9110 R12: 0000000000000028
[  222.295569][ T9752] R13: dffffc0000000000 R14: ffff888021cc8000 R15: dffffc0000000000
[  222.299252][ T9752] FS:  00007fec69e696c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  222.303919][ T9752] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  222.306947][ T9752] CR2: 0000200000001000 CR3: 0000000114cf2000 CR4: 00000000000006f0
[  222.310618][ T9752] Kernel panic - not syncing: Fatal exception
[  222.313725][ T9752] Kernel Offset: disabled
[  222.315474][ T9752] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:56:34  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8920207b RBX=ffff8880218c9e30 RCX=0000000000000000 RDX=ffff88801cb23980
RSI=0000000000000001 RDI=0000000000000000 RBP=1ffff11004083203 RSP=ffffc90000edf910
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff520001dbf08
R12=dffffc0000000000 R13=0000000000000001 R14=ffff888020419000 R15=ffff888020419038
RIP=ffffffff8920207b RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001000 CR3=000000002ff1e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000004b9ffb9 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 0000000000000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000163c RDI=000000000000163d RBP=00000000000003f8 RSP=ffffc9000387f1f0
R8 =ffff8881062a8237 R9 =1ffff11020c55046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98e2 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fec69e696c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ec22ff8 CR3=0000000114cf2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fec69187498 00007fec69187470 XMM03=00007fec691874a8 00007fec691874a0
XMM04=00007fec69ced100 00007fec69187460 XMM05=00007fec69187478 00007fec691874c0
XMM06=00007fec691874b8 00007fec691874b0 XMM07=00007fec691874a8 00007fec691874a0
XMM08=0000000000000000 00007fec69012ee7 XMM09=0000000000000000 00007fec69012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
