last executing test programs:

5m5.861118646s ago: executing program 0 (id=424):
socket$igmp(0x2, 0x3, 0x2)
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f00000001c0))
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

5m5.807841225s ago: executing program 0 (id=425):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x400000000000000d}, 0x18)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a44000000001010902"], 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18)

5m2.734744366s ago: executing program 0 (id=458):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TCFLSH(r0, 0x540b, 0x2)

5m2.674377766s ago: executing program 0 (id=459):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESOCT=0x0, @ANYBLOB='\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0x1, 0x489, &(0x7f0000000580)="$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")
socket$inet(0x2, 0x2, 0x1)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000002f40)={0x2020}, 0x2020)

5m2.549574646s ago: executing program 0 (id=461):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000940)=ANY=[@ANYBLOB="600601"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

5m2.164848066s ago: executing program 0 (id=463):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x201088a, &(0x7f0000000840)=ANY=[@ANYBLOB='nodiscard,iocharset=cp861,nodiscard,iocharset=macroman,nointegrity,errors=remount-ro,nointegrity\x00iocharset=ascii,nodiscard,umask=0xfffffffffffffffd,nodiscard,errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="0087997eddfe262c258cc464583d629220511a3d1bc3d46d648abc90f6538788ab3497e3d01477fd8c4381b6ff4efe7bc916b9e232fd94a49a240af6c7f54c252f278f84e6b52a000a9f1acd00422a562996f100c25190549b261c197b5606bd50f05e38f22cb30aae0622bf93cbaa876455c9ba217409a9b21b7dac85bdfffc4e6bc72559fc9441c8b97483caf57066464dfc8d302d74a627a84ed3726fafd68f71d70baa59c7a4c50ee33db58e8785d4da74f21bfe423b996d78a3adf872da8b387d926f6d53195e1260c34cca00"/219, @ANYBLOB="2c6e687ed7cc92413591118b4c90c38ce6717086f74110d64c905e04106d03caec62ca1fecda507871eca727d8f39b9d782da9a7d0d28312cc6ed5b00392b37b96c8d4cc83a017fa5fca263b"], 0x7, 0x6161, &(0x7f0000000a80)="$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")
setxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@random={'os2.', 'jfs\x00'}, 0x0, 0x0, 0x2)

5m2.035504744s ago: executing program 32 (id=463):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x201088a, &(0x7f0000000840)=ANY=[@ANYBLOB='nodiscard,iocharset=cp861,nodiscard,iocharset=macroman,nointegrity,errors=remount-ro,nointegrity\x00iocharset=ascii,nodiscard,umask=0xfffffffffffffffd,nodiscard,errors=remount-ro,gid=', @ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="0087997eddfe262c258cc464583d629220511a3d1bc3d46d648abc90f6538788ab3497e3d01477fd8c4381b6ff4efe7bc916b9e232fd94a49a240af6c7f54c252f278f84e6b52a000a9f1acd00422a562996f100c25190549b261c197b5606bd50f05e38f22cb30aae0622bf93cbaa876455c9ba217409a9b21b7dac85bdfffc4e6bc72559fc9441c8b97483caf57066464dfc8d302d74a627a84ed3726fafd68f71d70baa59c7a4c50ee33db58e8785d4da74f21bfe423b996d78a3adf872da8b387d926f6d53195e1260c34cca00"/219, @ANYBLOB="2c6e687ed7cc92413591118b4c90c38ce6717086f74110d64c905e04106d03caec62ca1fecda507871eca727d8f39b9d782da9a7d0d28312cc6ed5b00392b37b96c8d4cc83a017fa5fca263b"], 0x7, 0x6161, &(0x7f0000000a80)="$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")
setxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@random={'os2.', 'jfs\x00'}, 0x0, 0x0, 0x2)

4m52.759549213s ago: executing program 1 (id=583):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002740)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x2c}}, 0x0)

4m52.651888891s ago: executing program 1 (id=586):
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000)
preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

4m52.053678778s ago: executing program 1 (id=592):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000000200000009000100feffffff"], 0x20}}, 0x0)

4m52.053460549s ago: executing program 1 (id=593):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x101)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)

4m51.933323264s ago: executing program 1 (id=594):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x5, @f={0x4, 0x1, 0x2, 0x5, {0x9, 0x1, '/'}, 0x1}}, 0xb)

4m51.083026989s ago: executing program 1 (id=608):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x4468, &(0x7f0000010780)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x5, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x8, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x1, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xd, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x7751c64, 0x7a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x6, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)

4m50.748455541s ago: executing program 33 (id=608):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x4468, &(0x7f0000010780)="$eJzs3c9rG1ceAPA3spPY2SRrZxPIwsIKNrDL7mLsnHbrQB3H+WEnborbhNKLIttK4la2gi2XHnJwb4GeCj2UHkIK7cmnkEOv6Z/QSw89pKceQttDoRQKoS6SRrZmZNVKsGycfj4Hj+a9ee99re/M6I1AM5lY+dbcUnZuKZtfyJZmbiydyr5TKi7PF0JmhyTG74nH37dz49OeTuwnu73v/ZFdOXv+tWunQvhi9qsna2tra6GiO2xqqOH1zz/emWlc1mVSbSr9bt7bdnkzhHCsKa6KrhDCG5+HEIUQzsRlo/GyN4RwONTqrt15/3p2m6J58LhwOvd08u7D4ZMTq/cetv7foxA+Lv71vzfnv/9H1/A3/96m4QEAAAAAAAAAAAAAAAAA2OMuTF25+urgUHgUhe7VqOH3ur1xfbxdq9/Hrm2bv7eM8bv0j4oBAAAAAAAAAAAAAAAAAADgBbPx+/9sdDRqfl73WLwcadF+7eXOx0jnjL9yZezc4FD8/Peoqf5/cdEPZ7pC/ybPfU8///1Mqv3mz39vHud51eOrj9sXosxAYj2TGRgI4ZP4we8nooOZYmmp/J8bpeWF2W0LY89K5r92o41EduJ7b7Sb/9FU/51//v9fmvamyvr17dvFXmjJ/He13O7T96K28n821W4n8v+s3E5mQzL/3dWy3sYNRmrvViX/H3Rvnf+xVP9t5b/32eM+EkLIRpWm2cQZoDKHqZS3mq+QlMz/vmpZ4tQZv5Gtjv9fUvk/l+p/t87/K+kPIjaVzP/+allPYouN47//p/hWXb9z/J9P9b8b+a/Ev1ItnPqss2Pvfcn8H6gVdic2qb6T7Z7/LySa7u9Y/q9m4jiPRIk9YDWqlbe6Xx1Jyfz3NNVvXP9l2pr/XUy136nrv/q4fSFUr//qp/9/RbXrPzaXzH/TROzr4/GFVLvH/3iqg06f/0eq8z+eVzL/B6tlyblzX/Vvu/mfSPWfzv+3f9qeuKuzkp56/jfOJ78eqJXfN/9rSzL/cXIyjd8DrFT/Vud/0dbz/0up/ndj/lfZOVZSF/n7OxvEnpXM/6F09fHh+EUl/1+28fl/OdVB5/MfwqDv+p5bMv+HW25XPf57ts7/ZKpdp/P/zy3q059HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+a0XjZF6LMQGI9kxkYCOFsvH4iHIym87O56WJp5u2lEMbi8mw4Gt0slqbzxdzcQmm2kMsXi6WZEM7F9cdCT7RULJVz8/nb59f76o1uFfKL5elCvhxCuBCX/y0crvc1PVeez98OIVxcr/tzprR4+1Z+ITc7t/jS4ODgYBhfj6E/KrxbLiyUa6PXakOYWG/bFzUEV62+tB7Loeit0vLiQr5YLb/c0KZYmskXG9pMxnUfhv6ovLi8MJMvF3LF0s36eLtpJF6OjU+9PnV5qKn+elRbju5sWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8o0fD//8ohNBdW8uEEEbqL6LNtn/wuHA693Ty7sPhkxOr9+4/abUdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVdukYJWIgCgPwm7GJncewCklnG1FECyOCJ9BjeBg9ipfwDhYWtlaCzCxhdwLb7Fbf10zIT/IezA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs5+ZxfnoYxogUXY6Ij5fPr2V+V863y/b3J0fYkcO5vZ+vroex3HvayS/Kq+8p/6e/P6/P0Tir962ebPqUlv+uz6ere7X61jXKVverc88i5T4ippKfp5z7fnUMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W2fRtQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzAoAAP//v5Ynrg==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x5, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x8, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x1, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xd, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x7751c64, 0x7a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x6, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)

1m51.997793018s ago: executing program 3 (id=2301):
r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
sendto$inet(r0, &(0x7f0000000480)="48d1", 0x2, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @private=0xa010102}, 0x10)
sendto$inet(r0, &(0x7f0000000380)="bf", 0x1, 0x24008083, &(0x7f00000000c0)={0x2, 0x4e1f, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xc, 0x9, 0xfff}, 0x10)

1m51.027971356s ago: executing program 3 (id=2303):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

1m50.850888462s ago: executing program 3 (id=2306):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x79, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x2, 0x55595659, 0x0, 0x5, [{}, {}, {}, {0x5}, {}, {}, {0x4000000}, {0x40000000}], 0x0, 0x5}})

1m50.724346746s ago: executing program 3 (id=2308):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c002, &(0x7f0000000a00)=ANY=[@ANYBLOB='discard,discard=0x0000000000020001,discard,iocharset=cp857,errors=remount-ro,iocharset=iso8859-2,uid=', @ANYRESHEX=0xee00, @ANYRES64=0x0], 0x23, 0x61c3, &(0x7f000000c9c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

1m50.462266724s ago: executing program 3 (id=2312):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r0})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1})

1m50.004380916s ago: executing program 3 (id=2313):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @mcast2, 0x5}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x4, 0x4)

1m49.762715046s ago: executing program 34 (id=2313):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @mcast2, 0x5}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x4, 0x4)

1m14.575349361s ago: executing program 5 (id=2737):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

1m14.491384218s ago: executing program 5 (id=2738):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/172, 0xac}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000004000)=""/4073, 0xfe9}, {&(0x7f0000002940)=""/4112, 0x1010}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000940)=""/199, 0xc7}, {&(0x7f0000000240)=""/107, 0x6b}], 0x7}, 0x40012100)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)

1m14.436506112s ago: executing program 5 (id=2739):
recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x3, 0x100000001, 0x0, 0x6, 0x1, [0xf55, 0x6a, 0x0, 0xf09]})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000d40)="3ce2", 0x2, 0x4000805, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0)

1m14.436152364s ago: executing program 5 (id=2740):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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")
r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_setup(0xb54, &(0x7f0000000080)={0x0, 0x28ba1, 0x1000, 0x3, 0x1ad})
ptrace(0x10, r0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0})

1m14.270256668s ago: executing program 5 (id=2741):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m13.903464915s ago: executing program 5 (id=2744):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f00000003c0)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m13.5910723s ago: executing program 35 (id=2744):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000deffffff6a0a00ff00000000850000002b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c5c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f772fd0e17c9b9101644f8c06b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583f76e412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19002cc93c1c13ca67fdc6c238342033070000004a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000140eb2e9c15b6c8f6198282df27badac8500bc7d202e099009ca515007e5f009735200040000001896d46cdac0abb841d9f96e2e6a19b7bf661c01800000d77d6165f253683cd8dc926518c699a2b14fb2bb40425dee631368340711a8c47318d5d13085938c3ec5c39b540b34157b0330aa16bd0998607f0ecea84919712d36"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f00000003c0)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)

49.158993978s ago: executing program 6 (id=3032):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r1, 0x0, 0x24080}, [@IFLA_CARRIER={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x3000c054}, 0x24000004)

49.09881143s ago: executing program 6 (id=3033):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x81, 0x4)

49.098542959s ago: executing program 6 (id=3034):
r0 = io_uring_setup(0x294d, &(0x7f0000000100))
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001400)=[{0xfffffffffffffffc, 0x2000000}], &(0x7f0000001440), 0x1}, 0x20)

49.023769276s ago: executing program 6 (id=3035):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00')
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00')

49.023326835s ago: executing program 6 (id=3036):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @bt={0x8, 0xfffff6d7, 0x5, 0x4, 0x7, 0x0, 0x1b, 0xc}})

48.690795233s ago: executing program 6 (id=3037):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51a2f195aca4ce79a3b534f3fa12c4e1790181917f9b22d45f7d86339c33c4a5e4f7224ec19", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7a, &(0x7f0000000980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x80186e82, &(0x7f0000000800)={@id={0x20000000, 0x0, @auto="2cd6411e860e00000100"}})

48.567384899s ago: executing program 36 (id=3037):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51a2f195aca4ce79a3b534f3fa12c4e1790181917f9b22d45f7d86339c33c4a5e4f7224ec19", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7a, &(0x7f0000000980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x80186e82, &(0x7f0000000800)={@id={0x20000000, 0x0, @auto="2cd6411e860e00000100"}})

2.425814643s ago: executing program 2 (id=3662):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000040)=0x2, 0x4)

2.425550918s ago: executing program 2 (id=3663):
syz_mount_image$erofs(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f0000000200)=ANY=[], 0x3, 0x208, &(0x7f0000000840)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x1001)
fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0)
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/241, 0xf1}], 0x1)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000500)=""/169, 0xa9}], 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x110)

1.627494948s ago: executing program 7 (id=3677):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x60, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x7, 0x34, @random="7677ae"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "40fd2cad9ee68885bce3d1518e"}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4804)

1.531680878s ago: executing program 7 (id=3678):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe})
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="9e9374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

1.53136483s ago: executing program 7 (id=3679):
syz_usb_connect(0x5, 0x3d, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xce, 0x1d, 0x2e, 0x8, 0xeb1a, 0xe357, 0x8586, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x2, 0x6, 0x2, 0xd0, 0x3, [{{0x9, 0x4, 0xd5, 0x0, 0x1, 0x81, 0x17, 0x3b, 0x2, [], [{{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x8, 0x9, 0xb, [@generic={0x7, 0x5, "a30d68e83f"}]}}]}}, {{0x9, 0x4, 0xd3, 0x6a, 0x0, 0x6e, 0xfa, 0xb6, 0x8a}}]}}]}}, 0x0)

1.434770867s ago: executing program 2 (id=3680):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 0'], 0x2a, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

1.382003375s ago: executing program 2 (id=3681):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000480)={0x201ff, 0x200, 0x1, {0x6, @raw_data="7a8397dfb0f00495212704a4012fe422ce78d2aa99825f5a612f1277ca5b1e6e680b152aa3b465a036501df5262356ba12cb75e0ac74e0b5cff80113780e3d5149866b64037dd4301adc4b72395ab0bee9da66de50a63ac634f34e4848782c4d5e8943126e00c80daabaa0f65af13097de0bb21929c5dca94c01161c1f59af059749ed16e90f1a01258cc8aeb46ca369882b3b9cb5161f1ef3aef856935568c823a0db557c435e84fe989063ef99227e5419381e478f9be987363757c53d6b91e01f1e658496ce83"}, 0x9})

1.324608108s ago: executing program 2 (id=3684):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0)

1.113924548s ago: executing program 4 (id=3688):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGABS20(r0, 0x40044591, 0x0)
unshare(0x24040400)
ppoll(&(0x7f0000000500)=[{r0, 0x2}], 0x1, 0x0, 0x0, 0x0)

195.418537ms ago: executing program 4 (id=3689):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000240)={0x1})

194.997658ms ago: executing program 4 (id=3690):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x2f)
fcntl$notify(r0, 0x402, 0x6)
fcntl$notify(r0, 0x402, 0x100000000)

126.411175ms ago: executing program 4 (id=3691):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000300)="9597b357aad133c1f7b9a6000016", 0x0, 0x1, 0x23, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

122.488693ms ago: executing program 7 (id=3692):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000003000)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

54.29983ms ago: executing program 7 (id=3693):
r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1040, 0x0, 0x3d5}, &(0x7f0000000100), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000440), 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0)

54.085068ms ago: executing program 4 (id=3694):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)

53.396119ms ago: executing program 2 (id=3695):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee6889900", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x4e20, 0x0, 0x2}, {0x0, 0x15000000000000, 0x0, 0x1, 0x8001, 0x7, 0x0, 0xd3d}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
syz_open_dev$vim2m(&(0x7f0000000000), 0x79, 0x2)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xa}, @local=@item_012={0x0, 0x2, 0x2}, @main=@item_4={0x3, 0x0, 0xc, "f53f0587"}]}}, 0x0}, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000)

53.229338ms ago: executing program 7 (id=3696):
r0 = socket(0x2a, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000140)=')', 0x1}], 0x2}}], 0x1, 0x0)

0s ago: executing program 4 (id=3697):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0)

kernel console output (not intermixed with test programs):

306.130458][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.132860][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.136229][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.139258][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.156366][   T12] veth1_macvtap: left promiscuous mode
[  306.158124][   T12] veth0_macvtap: left promiscuous mode
[  306.160293][   T12] veth1_vlan: left promiscuous mode
[  306.162740][   T12] veth0_vlan: left promiscuous mode
[  306.284883][   T55] Bluetooth: hci0: command tx timeout
[  306.470912][   T27] smc: removing ib device syz2
[  306.772604][   T12] team_slave_1 (unregistering): left allmulticast mode
[  306.777420][   T12] team0 (unregistering): Port device team_slave_1 removed
[  306.819228][   T12] team_slave_0 (unregistering): left allmulticast mode
[  306.824848][   T12] team0 (unregistering): Port device team_slave_0 removed
[  307.192647][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  307.353025][    T9] usb 6-1: Using ep0 maxpacket: 16
[  307.363044][    T9] usb 6-1: config 0 descriptor has 1 excess byte, ignoring
[  307.374551][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  307.378140][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  307.386998][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.390151][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  307.399963][    T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  307.402828][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.405770][    T9] usb 6-1: Product: syz
[  307.415396][    T9] usb 6-1: Manufacturer: syz
[  307.419017][   T47] syz2: Port: 1 Link DOWN
[  307.420816][    T9] usb 6-1: SerialNumber: syz
[  307.439447][    T9] usb 6-1: config 0 descriptor??
[  307.447629][T12490] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  307.543308][    T9] mcba_usb 6-1:0.0 can0: couldn't setup read URBs
[  307.549711][    T9] mcba_usb 6-1:0.0 can0: couldn't start device: -90
[  307.684788][    T9] mcba_usb 6-1:0.0: probe with driver mcba_usb failed with error -90
[  307.713289][    T9] usb 6-1: USB disconnect, device number 3
[  307.962414][  T793] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  308.129076][  T793] usb 3-1: Using ep0 maxpacket: 16
[  308.134406][  T793] usb 3-1: config 5 has an invalid interface number: 206 but max is 0
[  308.137770][  T793] usb 3-1: config 5 has no interface number 0
[  308.139764][  T793] usb 3-1: config 5 interface 206 has no altsetting 0
[  308.150931][  T793] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44
[  308.154512][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.171778][  T793] usb 3-1: Product: syz
[  308.173592][  T793] usb 3-1: Manufacturer: syz
[  308.191975][  T793] usb 3-1: SerialNumber: syz
[  308.431741][  T793] usb_ehset_test 3-1:5.206: probe with driver usb_ehset_test failed with error -32
[  308.442085][  T793] usb 3-1: USB disconnect, device number 42
[  308.469653][T12540] syz.4.2418 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  308.547067][T12546] netlink: 'syz.4.2420': attribute type 12 has an invalid length.
[  308.553185][T12546] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2420'.
[  308.849898][ T5915] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  309.020016][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  309.024708][ T5915] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  309.027566][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.047014][ T5915] usb 6-1: config 0 descriptor??
[  309.110567][T12575] loop2: detected capacity change from 0 to 256
[  309.166012][T12575] FAT-fs (loop2): Directory bread(block 64) failed
[  309.168080][T12575] FAT-fs (loop2): Directory bread(block 65) failed
[  309.170150][T12575] FAT-fs (loop2): Directory bread(block 66) failed
[  309.173477][T12575] FAT-fs (loop2): Directory bread(block 67) failed
[  309.175946][T12575] FAT-fs (loop2): Directory bread(block 68) failed
[  309.178133][T12575] FAT-fs (loop2): Directory bread(block 69) failed
[  309.180575][T12575] FAT-fs (loop2): Directory bread(block 70) failed
[  309.183161][T12575] FAT-fs (loop2): Directory bread(block 71) failed
[  309.185355][T12575] FAT-fs (loop2): Directory bread(block 72) failed
[  309.187739][T12575] FAT-fs (loop2): Directory bread(block 73) failed
[  309.336686][T12586] netlink: 'syz.4.2431': attribute type 2 has an invalid length.
[  309.340097][T12586] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2431'.
[  309.344239][T12586] nbd: must specify a device to reconfigure
[  309.501533][ T5915] input: HID 28bd:0933 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0933.0015/input/input19
[  309.520457][ T5915] uclogic 0003:28BD:0933.0015: input,hidraw0: USB HID v0.01 Mouse [HID 28bd:0933] on usb-dummy_hcd.5-1/input0
[  309.543570][T12597] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  309.703086][    T9] usb 6-1: USB disconnect, device number 4
[  309.805396][ T5880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  310.307039][T12642] loop2: detected capacity change from 0 to 512
[  310.327695][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  310.352504][T12642] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  310.359005][T12642] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  310.362737][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  310.367283][T12642] System zones: 0-1, 15-15, 18-18, 34-34
[  310.370675][T12642] EXT4-fs (loop2): orphan cleanup on readonly fs
[  310.373085][T12642] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  310.376026][T12642] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  310.383378][T12642] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  310.386470][T12642] EXT4-fs (loop2): 1 truncate cleaned up
[  310.389664][T12642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  310.408940][T12642] fscrypt (loop2, inode 16): Error -61 getting encryption context
[  310.413539][T12642] fscrypt (loop2, inode 16): Error -61 getting encryption context
[  310.427725][ T5860] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.686643][T12669] loop5: detected capacity change from 0 to 128
[  310.730464][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-uuid/8AF2-7630.tmp-b7:5' failed: Read-only file system
[  310.743464][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-uuid/8AF2-7630.tmp-b7:5' failed: Read-only file system
[  310.748765][T12674] netlink: 'syz.4.2466': attribute type 4 has an invalid length.
[  310.754780][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-uuid/8AF2-7630.tmp-b7:5' failed: Read-only file system
[  310.822022][T12676] netlink: 'syz.4.2467': attribute type 8 has an invalid length.
[  310.844269][T12676] bridge1: entered allmulticast mode
[  311.320626][T12683] loop2: detected capacity change from 0 to 32768
[  311.335712][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:2' failed: Read-only file system
[  311.347991][   T33] audit: type=1800 audit(1755247885.344:50): pid=12683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2470" name="file1" dev="loop2" ino=4 res=0 errno=0
[  311.365306][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:2' failed: Read-only file system
[  311.493313][T12683] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[  311.493313][T12683] 
[  311.497797][T12683] ERROR: (device loop2): remounting filesystem as read-only
[  313.806723][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'.
[  313.902547][T12734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2490'.
[  313.960991][T12740] loop5: detected capacity change from 0 to 64
[  314.012959][   T33] audit: type=1326 audit(1755247887.833:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12744 comm="syz.2.2496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0518ebe9 code=0x7ffc0000
[  314.029418][   T33] audit: type=1326 audit(1755247887.833:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12744 comm="syz.2.2496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0518ebe9 code=0x7ffc0000
[  314.056150][   T33] audit: type=1326 audit(1755247887.842:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12744 comm="syz.2.2496" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f9b0518ebe9 code=0x7ffc0000
[  314.062802][   T33] audit: type=1326 audit(1755247887.842:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12744 comm="syz.2.2496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0518ebe9 code=0x7ffc0000
[  314.090460][   T33] audit: type=1326 audit(1755247887.842:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12744 comm="syz.2.2496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0518ebe9 code=0x7ffc0000
[  314.344662][   T47] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  314.381503][T12762] infiniband syz!: set active
[  314.383080][T12762] infiniband syz!: added team_slave_0
[  314.411300][T12762] RDS/IB: syz!: added
[  314.412641][T12762] smc: adding ib device syz! with port count 1
[  314.414589][T12762] smc:    ib device syz! port 1 has pnetid 
[  314.504979][   T47] usb 6-1: Using ep0 maxpacket: 32
[  314.514987][   T47] usb 6-1: config 4 has an invalid interface number: 228 but max is 0
[  314.517880][   T47] usb 6-1: config 4 has no interface number 0
[  314.519922][   T47] usb 6-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  314.523262][   T47] usb 6-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0
[  314.535062][   T47] usb 6-1: config 4 interface 228 has no altsetting 0
[  314.539586][   T47] usb 6-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  314.542654][   T47] usb 6-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  314.545597][   T47] usb 6-1: Product: syz
[  314.546939][   T47] usb 6-1: Manufacturer: syz
[  314.548519][   T47] usb 6-1: SerialNumber: syz
[  314.579894][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  314.798369][   T47] usb 6-1: USB disconnect, device number 5
[  314.818856][ T9299] udevd[9299]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  314.905047][T12768] veth1_macvtap: left promiscuous mode
[  314.906937][T12768] macsec0: entered promiscuous mode
[  314.996021][T12774] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.2509'.
[  315.378317][T12788] loop2: detected capacity change from 0 to 32768
[  315.737719][T12795] netlink: 'syz.5.2518': attribute type 34 has an invalid length.
[  315.806289][T12800] loop2: detected capacity change from 0 to 2048
[  315.822717][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:2' failed: Read-only file system
[  315.842953][T12803] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  315.852450][   T33] audit: type=1800 audit(1755247889.563:56): pid=12800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2517" name="file1" dev="loop2" ino=15 res=0 errno=0
[  317.275134][   T47] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  317.435419][   T47] usb 3-1: Using ep0 maxpacket: 8
[  317.443566][   T47] usb 3-1: config 6 has an invalid interface number: 2 but max is 0
[  317.448246][   T47] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  317.469797][   T47] usb 3-1: config 6 has no interface number 0
[  317.475749][   T47] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  317.483986][   T47] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  317.495361][   T47] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  317.503920][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.508774][   T47] usb 3-1: Product: syz
[  317.514269][   T47] usb 3-1: Manufacturer: syz
[  317.518097][   T47] usb 3-1: SerialNumber: syz
[  317.528982][   T47] hso 3-1:6.2: Failed to find INT IN ep
[  317.748769][ T1272] usb 3-1: USB disconnect, device number 43
[  318.022573][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2540'.
[  318.030055][T12854] pim6reg: entered allmulticast mode
[  318.034008][T12854] pim6reg: left allmulticast mode
[  318.229632][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2543'.
[  318.271397][T12865] loop5: detected capacity change from 0 to 256
[  318.733520][T12876] loop2: detected capacity change from 0 to 40427
[  318.737401][T12876] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  318.740100][T12876] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  318.748065][T12876] F2FS-fs (loop2): invalid crc value
[  318.767605][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system
[  318.790817][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system
[  318.800965][T12876] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  318.806249][T12876] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  318.808836][T12876] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  318.963253][T12876] syz.2.2550: attempt to access beyond end of device
[  318.963253][T12876] loop2: rw=2049, sector=53248, nr_sectors = 3360 limit=40427
[  318.974840][T12876] syz.2.2550: attempt to access beyond end of device
[  318.974840][T12876] loop2: rw=2049, sector=56608, nr_sectors = 736 limit=40427
[  318.983751][T12876] syz.2.2550: attempt to access beyond end of device
[  318.983751][T12876] loop2: rw=2049, sector=49152, nr_sectors = 928 limit=40427
[  319.059268][ T5860] syz-executor: attempt to access beyond end of device
[  319.059268][ T5860] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  319.067534][ T5860] CPU: 0 UID: 0 PID: 5860 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  319.067559][ T5860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  319.067568][ T5860] Call Trace:
[  319.067574][ T5860]  <TASK>
[  319.067581][ T5860]  dump_stack_lvl+0x189/0x250
[  319.067606][ T5860]  ? __pfx_dump_stack_lvl+0x10/0x10
[  319.067622][ T5860]  ? __pfx_queue_work_on+0x10/0x10
[  319.067636][ T5860]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  319.067655][ T5860]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  319.067682][ T5860]  f2fs_handle_critical_error+0x37c/0x540
[  319.067706][ T5860]  f2fs_write_end_io+0x886/0xb60
[  319.067733][ T5860]  __submit_merged_bio+0x27a/0x6a0
[  319.067757][ T5860]  __submit_merged_write_cond+0x255/0x530
[  319.067779][ T5860]  f2fs_write_data_pages+0x261d/0x3000
[  319.067825][ T5860]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  319.067844][ T5860]  ? is_bpf_text_address+0x26/0x2b0
[  319.067873][ T5860]  ? arch_stack_walk+0xfc/0x150
[  319.067914][ T5860]  ? __lock_acquire+0xab9/0xd20
[  319.067973][ T5860]  ? __pfx_css_rstat_updated+0x10/0x10
[  319.067997][ T5860]  ? __lock_acquire+0xab9/0xd20
[  319.068029][ T5860]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  319.068051][ T5860]  do_writepages+0x32e/0x550
[  319.068078][ T5860]  ? do_raw_spin_unlock+0x4d/0x240
[  319.068099][ T5860]  filemap_fdatawrite+0x199/0x240
[  319.068118][ T5860]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  319.068174][ T5860]  ? do_raw_spin_unlock+0x4d/0x240
[  319.068195][ T5860]  f2fs_sync_dirty_inodes+0x31f/0x830
[  319.068222][ T5860]  f2fs_write_checkpoint+0x95a/0x1df0
[  319.068257][ T5860]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  319.068309][ T5860]  ? kill_f2fs_super+0x298/0x6c0
[  319.068328][ T5860]  kill_f2fs_super+0x2c3/0x6c0
[  319.068347][ T5860]  ? __pfx_kill_f2fs_super+0x10/0x10
[  319.068358][ T5860]  ? radix_tree_delete_item+0x2b6/0x400
[  319.068382][ T5860]  ? shrinker_free+0x2ce/0x3e0
[  319.068400][ T5860]  deactivate_locked_super+0xbc/0x130
[  319.068419][ T5860]  cleanup_mnt+0x425/0x4c0
[  319.068464][ T5860]  ? lockdep_hardirqs_on+0x9c/0x150
[  319.068484][ T5860]  task_work_run+0x1d4/0x260
[  319.068506][ T5860]  ? __pfx_task_work_run+0x10/0x10
[  319.068527][ T5860]  ? __x64_sys_umount+0x122/0x160
[  319.068550][ T5860]  ? exit_to_user_mode_loop+0x40/0x110
[  319.068572][ T5860]  exit_to_user_mode_loop+0xec/0x110
[  319.068592][ T5860]  do_syscall_64+0x2bd/0x3b0
[  319.068609][ T5860]  ? lockdep_hardirqs_on+0x9c/0x150
[  319.068626][ T5860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.068639][ T5860]  ? exc_page_fault+0x9f/0xf0
[  319.068658][ T5860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.068672][ T5860] RIP: 0033:0x7f9b0518ff17
[  319.068687][ T5860] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  319.068699][ T5860] RSP: 002b:00007ffe7939c068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  319.068715][ T5860] RAX: 0000000000000000 RBX: 00007f9b05211c05 RCX: 00007f9b0518ff17
[  319.068724][ T5860] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7939c120
[  319.068732][ T5860] RBP: 00007ffe7939c120 R08: 0000000000000000 R09: 0000000000000000
[  319.068740][ T5860] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7939d1b0
[  319.068748][ T5860] R13: 00007f9b05211c05 R14: 000000000004c3ef R15: 00007ffe7939d1f0
[  319.068770][ T5860]  </TASK>
[  319.070071][ T5860] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  319.714485][T12899] loop5: detected capacity change from 0 to 4096
[  319.724220][T12899] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  319.727489][T12899] EXT4-fs (loop5): Test dummy encryption mode enabled
[  319.736567][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  319.757484][T12899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.792840][T12228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.895103][T12911] loop2: detected capacity change from 0 to 4096
[  319.913379][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  319.920050][T12911] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  319.925895][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:2' failed: Read-only file system
[  319.970539][T12911] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  319.989647][T12911] ntfs3(loop2): ino=1f, "file2" failed to open parent directory r=5 to update
[  320.045808][   T79] ntfs3(loop2): ino=1f, failed to open parent directory r=5 to update
[  320.201731][T12937] netlink: 'syz.4.2569': attribute type 21 has an invalid length.
[  320.582149][T12959] netem: change failed
[  321.051541][T12985] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  321.400519][ T5915] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  321.572336][ T5915] usb 3-1: Using ep0 maxpacket: 16
[  321.576452][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.580603][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.584729][ T5915] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00
[  321.590304][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.596657][ T5915] usb 3-1: config 0 descriptor??
[  322.048187][ T5915] uclogic 0003:28BD:0074.0016: interface is invalid, ignoring
[  322.272081][ T5915] usb 3-1: USB disconnect, device number 44
[  323.948043][T13079] loop2: detected capacity change from 0 to 1024
[  323.971920][   T33] audit: type=1800 audit(1755247897.158:57): pid=13079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2611" name="file1" dev="loop2" ino=20 res=0 errno=0
[  323.972692][T13079] hfsplus: request for non-existent node 16777216 in B*Tree
[  323.993887][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  323.994490][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system
[  323.997825][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  324.003458][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  324.013204][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:2' failed: Read-only file system
[  324.025155][T13079] hfsplus: request for non-existent node 16777216 in B*Tree
[  324.065522][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system
[  324.078905][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:2' failed: Read-only file system
[  324.080636][   T33] audit: type=1800 audit(1755247897.261:58): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2611" name="file1" dev="loop2" ino=20 res=0 errno=0
[  324.100204][T13086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2614'.
[  324.103879][T13086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2614'.
[  324.206541][T13088] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  324.216731][T13088] macsec1: entered promiscuous mode
[  324.232564][T13088] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  324.461566][T13098] loop2: detected capacity change from 0 to 4096
[  324.474178][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  324.484040][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:2' failed: Read-only file system
[  324.489329][T13098] ntfs3(loop2): ino=0, ni_load_mi_ex
[  324.504514][T13098] ntfs3(loop2): ino=0, ni_load_mi_ex
[  324.506722][T13098] ntfs3(loop2): Failed to load $MFT (-22).
[  325.724711][T13131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2633'.
[  325.740965][T13131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2633'.
[  325.744428][T13131] netlink: 'syz.4.2633': attribute type 6 has an invalid length.
[  325.791095][T13135] tipc: Enabled bearer <udp:syz2>, priority 10
[  325.895375][T13141] loop2: detected capacity change from 0 to 512
[  325.907348][T13143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2639'.
[  325.938757][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  325.948486][T13141] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.2637: corrupted inode contents
[  325.966114][T13141] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.2637: mark_inode_dirty error
[  325.985339][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  325.990717][T13141] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.2637: corrupted inode contents
[  325.995859][T13141] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.2637: mark_inode_dirty error
[  326.003380][T13150] loop5: detected capacity change from 0 to 2048
[  326.009665][T13150] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  326.030653][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-uuid/8d5b9604-d7b7-4ece-ae00-6b765044cdb8.tmp-b7:5' failed: Read-only file system
[  326.036267][T13141] Quota error (device loop2): write_blk: dquota write failed
[  326.041514][T13153] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  326.047045][T13141] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  326.047622][T13150] syz.5.2642: attempt to access beyond end of device
[  326.047622][T13150] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  326.052691][T13141] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2637: Failed to acquire dquot type 0
[  326.065244][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-uuid/8d5b9604-d7b7-4ece-ae00-6b765044cdb8.tmp-b7:5' failed: Read-only file system
[  326.070455][T13141] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2637: corrupted inode contents
[  326.083149][T13141] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.2637: mark_inode_dirty error
[  326.089450][T13141] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2637: corrupted inode contents
[  326.099152][T13141] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.2637: mark_inode_dirty error
[  326.104125][T13141] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2637: corrupted inode contents
[  326.118324][T13150] syz.5.2642: attempt to access beyond end of device
[  326.118324][T13150] loop5: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  326.121421][T13141] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  326.136920][T13141] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2637: corrupted inode contents
[  326.142068][T13150] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=3)
[  326.149606][T13141] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.2637: mark_inode_dirty error
[  326.158038][T13150] NILFS (loop5): error -5 reading inode: ino=15
[  326.164570][T13141] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  326.166410][T13150] syz.5.2642: attempt to access beyond end of device
[  326.166410][T13150] loop5: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  326.175513][T13141] EXT4-fs (loop2): 1 truncate cleaned up
[  326.178835][T13150] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=3)
[  326.182722][T13150] NILFS (loop5): error -5 reading inode: ino=15
[  326.185332][T13141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.201446][T13141] ext4 filesystem being mounted at /804/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.236093][ T5860] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.316796][T13160] loop2: detected capacity change from 0 to 512
[  326.407247][T13160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  326.412202][T13160] ext4 filesystem being mounted at /805/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.432683][T13160] EXT4-fs (loop2): shut down requested (2)
[  326.481692][ T5860] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  326.984075][  T793] tipc: Node number set to 1
[  327.098644][   T47] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  327.261219][T13209] netlink: 'syz.4.2666': attribute type 1 has an invalid length.
[  327.264450][T13209] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2666'.
[  327.291355][   T47] usb 3-1: Using ep0 maxpacket: 8
[  327.297051][   T47] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  327.299980][   T47] usb 3-1: config 0 has no interface number 0
[  327.308302][   T47] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  327.313824][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.319408][   T47] usb 3-1: Product: syz
[  327.320966][   T47] usb 3-1: Manufacturer: syz
[  327.330069][   T47] usb 3-1: SerialNumber: syz
[  327.334650][   T47] usb 3-1: config 0 descriptor??
[  327.373900][T13213] loop5: detected capacity change from 0 to 164
[  327.400448][T13215] : entered promiscuous mode
[  327.564684][   T47] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22
[  327.589578][   T47] usb 3-1: USB disconnect, device number 45
[  327.595670][T13225] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2673'.
[  327.733978][T13235] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2679'.
[  327.911110][ T5915] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  328.224908][T13243] rtc_cmos 00:04: Alarms can be up to one day in the future
[  328.257468][T13245] loop2: detected capacity change from 0 to 512
[  328.260033][T13245] EXT4-fs: Ignoring removed nomblk_io_submit option
[  328.276753][T13245] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  328.284472][T13245] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  328.301795][T13245] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2682: Allocating blocks 41-42 which overlap fs metadata
[  328.309915][T13245] EXT4-fs (loop2): Remounting filesystem read-only
[  328.312011][T13245] Quota error (device loop2): write_blk: dquota write failed
[  328.314913][T13245] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  328.318179][T13245] Quota error (device loop2): write_blk: dquota write failed
[  328.322858][T13245] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  328.326200][T13245] EXT4-fs (loop2): 1 truncate cleaned up
[  328.330284][T13245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.357023][ T5860] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.360557][ T5915] usb 6-1: Using ep0 maxpacket: 16
[  328.365470][ T5915] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  328.374496][ T5915] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  328.382240][ T5915] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  328.385827][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.388793][ T5915] usb 6-1: Product: syz
[  328.390418][ T5915] usb 6-1: Manufacturer: syz
[  328.394720][ T5915] usb 6-1: SerialNumber: syz
[  328.409152][T13249] vim2m vim2m.0: vidioc_s_fmt queue busy
[  328.526739][T13253] loop2: detected capacity change from 0 to 1024
[  328.548287][T13253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.566167][   T33] audit: type=1800 audit(1755247901.452:59): pid=13253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2685" name="bus" dev="loop2" ino=19 res=0 errno=0
[  328.581185][T13253] Trying to write to read-only block-device loop2
[  328.613612][ T5860] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.632946][ T5915] usb 6-1: 0:2 : does not exist
[  328.671264][ T5915] usb 6-1: USB disconnect, device number 6
[  328.707859][ T5749] rtc_cmos 00:04: Alarms can be up to one day in the future
[  328.711971][ T5749] rtc_cmos 00:04: Alarms can be up to one day in the future
[  328.724296][ T5749] rtc_cmos 00:04: Alarms can be up to one day in the future
[  328.727565][ T5749] rtc_cmos 00:04: Alarms can be up to one day in the future
[  328.730324][ T5749] rtc rtc0: __rtc_set_alarm: err=-22
[  328.743412][T13257] loop2: detected capacity change from 0 to 4096
[  328.809129][T13257] overlayfs: overlapping lowerdir path
[  328.901572][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2689'.
[  329.504528][ T5915] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  329.511424][T13284] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2696'.
[  329.626210][T13291] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  329.630194][T13291] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  329.635852][T13291] overlayfs: fs on './bus' does not support file handles, falling back to xino=off.
[  329.639330][T13291] overlayfs: conflicting lowerdir path
[  329.666250][ T5915] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  329.672049][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.685068][ T5915] usb 3-1: config 0 descriptor??
[  329.912398][ T5893] usb 3-1: USB disconnect, device number 46
[  331.278327][T13357] 9pnet_fd: Insufficient options for proto=fd
[  331.409649][T13347] loop5: detected capacity change from 0 to 32768
[  331.421062][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:5' failed: Read-only file system
[  331.439402][T13347] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  331.459662][T13347] XFS (loop5): Ending clean mount
[  331.499377][T12228] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  331.567985][T13355] loop2: detected capacity change from 0 to 32768
[  331.869793][T13369] loop5: detected capacity change from 0 to 32768
[  331.876160][T13369] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2726 (13369)
[  331.884371][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-uuid/14d642db-7b15-43e4-81e6-4b8fac6a25f8.tmp-b7:5' failed: Read-only file system
[  331.886045][T13369] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  331.897371][T13369] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  331.903115][T13369] BTRFS info (device loop5): using free-space-tree
[  331.980329][   T33] audit: type=1800 audit(1755247904.651:60): pid=13369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2726" name="file1" dev="loop5" ino=260 res=0 errno=0
[  332.032362][T12228] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  332.117733][ T3641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.122306][ T3641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.226835][T13403] loop5: detected capacity change from 0 to 8
[  332.239086][T13403] SQUASHFS error: xz decompression failed, data probably corrupt
[  332.249320][T13403] SQUASHFS error: Failed to read block 0x108: -5
[  332.251305][T13403] SQUASHFS error: Unable to read metadata cache entry [106]
[  332.260502][T13403] SQUASHFS error: Unable to read inode 0x11f
[  332.331658][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2736'.
[  332.334560][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2736'.
[  332.409392][T13412] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2738'.
[  332.416966][T13412] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2738'.
[  332.420277][T13412] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2738'.
[  332.501520][T13417] loop5: detected capacity change from 0 to 512
[  332.504055][T13417] EXT4-fs: Ignoring removed nobh option
[  332.508611][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  332.514330][T13417] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2740: iget: bad i_size value: 38620345925642
[  332.519746][T13417] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2740: couldn't read orphan inode 15 (err -117)
[  332.524635][T13417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.816970][T13420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.007172][ T5880] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.145488][ T5880] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.383906][ T5880] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.521364][ T5880] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.860523][ T5880] bridge_slave_1: left allmulticast mode
[  333.866923][ T5880] bridge_slave_1: left promiscuous mode
[  333.871291][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.923447][ T5880] bridge_slave_0: left allmulticast mode
[  333.930755][ T5880] bridge_slave_0: left promiscuous mode
[  333.941686][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.967460][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  333.972696][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  333.975786][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  333.978860][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  333.982383][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  334.427567][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.432466][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.436577][ T5880] bond0 (unregistering): Released all slaves
[  334.852558][T13462] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  334.870902][ T5893] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  334.943675][ T5880] hsr_slave_0: left promiscuous mode
[  334.946220][ T5880] hsr_slave_1: left promiscuous mode
[  334.948381][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  334.950837][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  334.953834][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  334.957454][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  334.975070][ T5880] veth1_macvtap: left promiscuous mode
[  334.977225][ T5880] veth0_macvtap: left promiscuous mode
[  334.985239][ T5880] veth1_vlan: left promiscuous mode
[  334.987259][ T5880] veth0_vlan: left promiscuous mode
[  335.441758][ T5880] team0 (unregistering): Port device team_slave_1 removed
[  335.482506][ T5880] team0 (unregistering): Port device team_slave_0 removed
[  335.796268][ T5893] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  335.985442][T13435] chnl_net:caif_netlink_parms(): no params data found
[  336.228508][ T5236] Bluetooth: hci0: command tx timeout
[  336.267771][T13435] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.274438][T13435] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.277423][T13435] bridge_slave_0: entered allmulticast mode
[  336.287591][T13435] bridge_slave_0: entered promiscuous mode
[  336.305415][T13435] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.308286][T13435] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.311230][T13435] bridge_slave_1: entered allmulticast mode
[  336.339167][T13435] bridge_slave_1: entered promiscuous mode
[  336.384151][T13501] loop2: detected capacity change from 0 to 1024
[  336.418169][T13501] loop2: detected capacity change from 0 to 512
[  336.421495][T13501] EXT4-fs: Ignoring removed orlov option
[  336.423349][T13501] EXT4-fs: Ignoring removed nomblk_io_submit option
[  336.428903][T13435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.461257][T13435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  336.544614][T13435] team0: Port device team_slave_0 added
[  336.555109][T13435] team0: Port device team_slave_1 added
[  336.609501][T13435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  336.612747][T13435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.623892][T13435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  336.630111][T13435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  336.632884][T13435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  336.655058][T13435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  336.750260][T13435] hsr_slave_0: entered promiscuous mode
[  336.752642][T13516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2774'.
[  336.762501][T13435] hsr_slave_1: entered promiscuous mode
[  337.030579][ T5893] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  337.033838][T13435] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  337.058397][T13435] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  337.064287][T13435] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  337.095068][T13435] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  337.197326][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.201961][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.205812][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  337.210706][ T5893] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  337.228693][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.237859][ T5893] usb 3-1: config 0 descriptor??
[  337.247778][T13435] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.282193][T13435] 8021q: adding VLAN 0 to HW filter on device team0
[  337.304483][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.307455][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  337.336436][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.339375][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  337.663887][T13435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  337.711861][ T5893] hid-udraw 0003:20D6:CB17.0017: unbalanced collection at end of report description
[  337.718648][ T5893] hid-udraw 0003:20D6:CB17.0017: parse failed
[  337.721272][ T5893] hid-udraw 0003:20D6:CB17.0017: probe with driver hid-udraw failed with error -22
[  337.909063][T13435] veth0_vlan: entered promiscuous mode
[  337.914289][T13435] veth1_vlan: entered promiscuous mode
[  337.921303][ T5893] usb 3-1: USB disconnect, device number 47
[  337.947978][T13435] veth0_macvtap: entered promiscuous mode
[  337.953582][T13435] veth1_macvtap: entered promiscuous mode
[  337.966081][T13435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.973141][T13435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.980587][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.992638][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.999039][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.010359][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.081933][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.094368][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.123033][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.125569][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.441850][ T5236] Bluetooth: hci0: command tx timeout
[  338.503530][T13611] netlink: 'syz.4.2792': attribute type 1 has an invalid length.
[  338.511426][T13611] netlink: 'syz.4.2792': attribute type 1 has an invalid length.
[  338.599989][T13614] loop2: detected capacity change from 0 to 4096
[  338.635159][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:2' failed: Read-only file system
[  338.736298][T13625] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  338.982190][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2804'.
[  339.029899][T13641] input: syz1 as /devices/virtual/input/input20
[  339.278722][T13654] loop6: detected capacity change from 0 to 1024
[  339.296197][T13654] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  339.305004][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  339.321913][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  339.333722][T13654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.344795][T13654] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.2811: missing EA_INODE flag
[  339.355601][T13654] EXT4-fs (loop6): Remounting filesystem read-only
[  339.379420][T13435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.408492][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  339.415433][ T5900] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[  339.450964][T13660] loop6: detected capacity change from 0 to 2048
[  339.460827][T13660] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  339.464961][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-label/LinuxUDF.tmp-b7:6' failed: Read-only file system
[  339.477026][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-uuid/1234567812345678.tmp-b7:6' failed: Read-only file system
[  339.493744][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-label/LinuxUDF.tmp-b7:6' failed: Read-only file system
[  339.499372][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-uuid/1234567812345678.tmp-b7:6' failed: Read-only file system
[  339.581179][ T5900] usb 3-1: unable to get BOS descriptor or descriptor too short
[  339.584287][ T5900] usb 3-1: not running at top speed; connect to a high speed hub
[  339.589929][ T5900] usb 3-1: config 3 has an invalid interface number: 106 but max is 0
[  339.593205][ T5900] usb 3-1: config 3 has no interface number 0
[  339.606097][ T5900] usb 3-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64
[  339.609917][ T5900] usb 3-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  339.613807][ T5900] usb 3-1: config 3 interface 106 has no altsetting 0
[  339.634311][ T5900] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a
[  339.637903][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.641250][ T5900] usb 3-1: Product: syz
[  339.642701][ T5900] usb 3-1: Manufacturer: syz
[  339.644328][ T5900] usb 3-1: SerialNumber: syz
[  339.648480][T13645] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  339.660225][T13645] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  339.892933][ T5900] kobil_sct 3-1:3.106: KOBIL USB smart card terminal converter detected
[  339.900733][ T5900] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  339.920464][ T5900] usb 3-1: USB disconnect, device number 48
[  339.930024][ T5900] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  339.938732][ T5900] kobil_sct 3-1:3.106: device disconnected
[  340.471736][T13693] bond0: Removing last ns target with arp_interval on
[  340.476247][ T5880] bond0: (slave bond_slave_0): interface is now down
[  340.481879][ T5880] bond0: (slave bond_slave_1): interface is now down
[  340.508952][ T5880] bond0: now running without any active interface!
[  340.667457][ T5236] Bluetooth: hci0: command tx timeout
[  340.854230][T13710] loop2: detected capacity change from 0 to 8
[  340.881537][T13710] SQUASHFS error: xz decompression failed, data probably corrupt
[  340.895837][T13710] SQUASHFS error: Failed to read block 0x108: -5
[  340.905451][T13710] SQUASHFS error: Unable to read metadata cache entry [106]
[  340.910260][T13710] SQUASHFS error: Unable to read inode 0x0
[  341.140355][T13716] netlink: 'syz.6.2836': attribute type 12 has an invalid length.
[  341.143586][T13716] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2836'.
[  341.262181][T13720] loop6: detected capacity change from 0 to 4096
[  341.292859][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:6' failed: Read-only file system
[  341.294608][T13722] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  341.327716][   T33] audit: type=1800 audit(1755247913.388:61): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2838" name="file2" dev="loop6" ino=16 res=0 errno=0
[  341.328347][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:6' failed: Read-only file system
[  341.400195][T13725] netlink: 'syz.2.2839': attribute type 1 has an invalid length.
[  341.408210][T13725] netlink: 'syz.2.2839': attribute type 4 has an invalid length.
[  341.421060][T13725] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2839'.
[  341.424242][T13725] NCSI netlink: No device for ifindex 3088861696
[  341.547112][T13733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  341.549440][T13733] IPv6: NLM_F_CREATE should be set when creating new route
[  341.589334][T13735] delete_channel: no stack
[  341.915991][ T5749] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  341.979975][ T5914] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  342.110398][ T5749] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  342.115167][ T5749] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  342.124838][ T5749] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  342.129396][ T5749] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  342.141165][ T5914] usb 7-1: Using ep0 maxpacket: 16
[  342.147293][ T5749] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  342.151548][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.155477][ T5749] usb 3-1: Product: syz
[  342.157609][ T5749] usb 3-1: Manufacturer: syz
[  342.159902][ T5914] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  342.163723][ T5749] usb 3-1: SerialNumber: syz
[  342.166967][ T5914] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  342.175287][T13741] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  342.179076][ T5914] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  342.187365][ T5749] cdc_mbim 3-1:1.0: skipping garbage
[  342.194953][ T5914] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  342.198581][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.201836][ T5914] usb 7-1: Product: syz
[  342.203680][ T5914] usb 7-1: Manufacturer: syz
[  342.211407][ T5914] usb 7-1: SerialNumber: syz
[  342.403097][T13741] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  342.406496][T13741] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  342.659242][ T5914] usb 7-1: 0:2 : does not exist
[  342.889415][ T5236] Bluetooth: hci0: command tx timeout
[  343.145325][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  343.199561][T13741] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  343.202500][T13741] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  343.205389][ T5749] cdc_mbim 3-1:1.0: setting tx_max = 184
[  343.216029][ T5749] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  343.234859][ T5749] wwan wwan0: port wwan0mbim0 attached
[  343.250080][ T5749] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 16:a7:36:d5:f6:ff
[  343.427494][ T5914] usb 7-1: USB disconnect, device number 2
[  343.438759][ T5915] usb 3-1: USB disconnect, device number 49
[  343.452886][ T5915] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  343.567866][ T5915] wwan wwan0: port wwan0mbim0 disconnected
[  343.760574][T13778] netlink: ct family unspecified
[  343.762353][T13778] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  343.987304][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2862'.
[  344.588589][ T5900] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  344.751229][ T5900] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  344.754597][ T5900] usb 3-1: config 0 has no interface number 0
[  344.757199][ T5900] usb 3-1: config 0 interface 188 has no altsetting 0
[  344.760182][ T5900] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=dc.ab
[  344.763832][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.769925][ T5900] usb 3-1: config 0 descriptor??
[  344.783676][ T5900] ftdi_sio 3-1:0.188: FTDI USB Serial Device converter detected
[  344.788567][ T5900] ftdi_sio ttyUSB0: unknown device type: 0xdcab
[  345.003485][ T5900] usb 3-1: USB disconnect, device number 50
[  345.009791][ T5900] ftdi_sio 3-1:0.188: device disconnected
[  345.405655][T13808] loop6: detected capacity change from 0 to 32768
[  345.409901][T13808] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2870 (13808)
[  345.427536][T13808] BTRFS info (device loop6 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  345.431907][T13808] BTRFS info (device loop6 state S): using crc32c (crc32c-lib) checksum algorithm
[  345.437441][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:6' failed: Read-only file system
[  345.491069][  T396] BTRFS warning (device loop6 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  345.502857][   T40] BTRFS warning (device loop6 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  345.511763][  T396] BTRFS warning (device loop6 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  345.519415][   T40] BTRFS warning (device loop6 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored
[  345.539069][T13808] BTRFS error (device loop6 state S): logical 6881280 len 1638400 found bg but no related chunk
[  345.630720][T13435] BTRFS info (device loop6 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  345.657038][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:6' failed: Read-only file system
[  346.070677][T13845] loop6: detected capacity change from 0 to 512
[  346.103494][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  346.105184][T13845] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2877: casefold flag without casefold feature
[  346.115219][T13845] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2877: couldn't read orphan inode 15 (err -117)
[  346.115891][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  346.123124][T13845] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.133011][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  346.146561][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  346.158297][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  346.215912][ T5893] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  346.242594][T13435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.280303][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  346.386244][ T5893] usb 3-1: Using ep0 maxpacket: 16
[  346.391282][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.399257][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  346.403142][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  346.409237][ T5893] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  346.412831][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.420547][ T5893] usb 3-1: config 0 descriptor??
[  346.516308][T13857] loop6: detected capacity change from 0 to 2048
[  346.531453][T13857] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  346.538399][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-label/LinuxUDF.tmp-b7:6' failed: Read-only file system
[  346.564981][T13857] UDF-fs: unknown compression code (0)
[  346.572148][T13857] UDF-fs: unknown compression code (0)
[  346.575321][T13857] UDF-fs: unknown compression code (0)
[  346.580183][T13857] UDF-fs: unknown compression code (0)
[  346.582479][T13857] UDF-fs: unknown compression code (0)
[  346.794026][T13865] ieee802154 phy0 wpan0: encryption failed: -22
[  346.873181][ T5893] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  346.877495][ T5893] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  346.880542][ T5893] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  346.883554][ T5893] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  346.886570][ T5893] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  346.893158][ T5893] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  346.896246][ T5893] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  346.900650][ T5893] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  346.904024][ T5893] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  346.907254][ T5893] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  346.922915][ T5893] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  346.927794][ T5893] microsoft 0003:045E:07DA.0018: no inputs found
[  346.933594][ T5893] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway
[  347.104142][ T5900] usb 3-1: USB disconnect, device number 51
[  347.512042][ T5893] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  347.686592][ T5893] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.690704][ T5893] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  347.695208][ T5893] usb 7-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  347.698037][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.706138][ T5893] usb 7-1: config 0 descriptor??
[  347.706349][T13908] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  347.732964][T13910] mac80211_hwsim hwsim11 `: renamed from wlan1
[  348.384538][ T5893] usb 7-1: USB disconnect, device number 3
[  349.037050][ T5893] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  349.064563][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2920'.
[  349.225153][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  349.233078][ T5893] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  349.236857][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  349.254801][ T5893] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  349.271355][ T5893] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  349.274437][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.280904][ T5893] usb 3-1: config 0 descriptor??
[  349.507766][ T5893] hdpvr 3-1:0.0: firmware version 0x65 dated 
[  349.510170][ T5893] hdpvr 3-1:0.0: untested firmware, the driver might not work.
[  349.722351][ T5893] hdpvr 3-1:0.0: device init failed
[  349.725377][ T5893] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[  349.743996][ T5893] usb 3-1: USB disconnect, device number 52
[  349.946259][T13974] loop6: detected capacity change from 0 to 32768
[  349.956930][T13974] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2933 (13974)
[  349.963981][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:6' failed: Read-only file system
[  349.968108][T13974] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  349.971802][T13974] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  349.974811][T13974] BTRFS info (device loop6): disk space caching is enabled
[  349.977196][T13974] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  350.007704][T13974] BTRFS info (device loop6): rebuilding free space tree
[  350.037995][T13974] BTRFS info (device loop6): disabling free space tree
[  350.043113][T13974] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  350.051480][T13974] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  350.133834][T13435] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  350.390135][T14003] loop6: detected capacity change from 0 to 2048
[  350.433135][T14003] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  350.764697][T14022] loop6: detected capacity change from 0 to 256
[  350.856696][T14022] FAT-fs (loop6): Directory bread(block 64) failed
[  350.858811][T14022] FAT-fs (loop6): Directory bread(block 65) failed
[  350.860985][T14022] FAT-fs (loop6): Directory bread(block 66) failed
[  350.863013][T14022] FAT-fs (loop6): Directory bread(block 67) failed
[  350.869908][T14022] FAT-fs (loop6): Directory bread(block 68) failed
[  350.875778][T14022] FAT-fs (loop6): Directory bread(block 69) failed
[  350.880445][T14022] FAT-fs (loop6): Directory bread(block 70) failed
[  350.887617][T14022] FAT-fs (loop6): Directory bread(block 71) failed
[  350.890800][T14008] loop2: detected capacity change from 0 to 32768
[  350.892808][T14022] FAT-fs (loop6): Directory bread(block 72) failed
[  350.896269][T14022] FAT-fs (loop6): Directory bread(block 73) failed
[  350.950180][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:2' failed: Read-only file system
[  351.090848][T14040] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2949'.
[  351.138089][T14043] IPv6: Can't replace route, no match found
[  351.281574][ T1272] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  351.460890][ T1272] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  351.466428][ T1272] usb 3-1: config 0 has no interface number 0
[  351.468563][ T1272] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  351.486640][ T1272] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  351.490822][ T1272] usb 3-1: config 0 interface 255 has no altsetting 0
[  351.501188][ T1272] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  351.513608][ T1272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.528244][ T1272] usb 3-1: config 0 descriptor??
[  351.532656][ T1272] ums-realtek 3-1:0.255: USB Mass Storage device detected
[  351.602679][T14090] loop6: detected capacity change from 0 to 128
[  351.607172][T14090] ufs: You didn't specify the type of your ufs filesystem
[  351.607172][T14090] 
[  351.607172][T14090] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  351.607172][T14090] 
[  351.607172][T14090] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  351.624351][T14090] ufs: ufstype=old is supported read-only
[  351.629847][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-uuid/7b318cd97b318cda.tmp-b7:6' failed: Read-only file system
[  351.683972][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-uuid/7b318cd97b318cda.tmp-b7:6' failed: Read-only file system
[  351.690154][T14090] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  351.775027][ T1272] usb 3-1: USB disconnect, device number 53
[  352.066073][T14108] loop6: detected capacity change from 0 to 32768
[  352.076926][T14108] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2970 (14108)
[  352.090858][ T9299] udevd[9299]: symlink '../../loop6' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:6' failed: Read-only file system
[  352.096077][T14108] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  352.099911][T14108] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  352.102582][T14108] BTRFS info (device loop6): using free-space-tree
[  352.134743][T13435] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  352.580730][T14138] loop6: detected capacity change from 0 to 32768
[  352.692537][T14138] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  352.692564][T14138]   allowing incompatible features above 0.0: (unknown version)
[  352.692574][T14138]   features: 
[  352.706013][T14138] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  352.709375][T14138] bcachefs (loop6): initializing new filesystem
[  352.721687][T14138] bcachefs (loop6): going read-write
[  352.743012][T14138] bcachefs (loop6): marking superblocks
[  352.751109][T14138] bcachefs (loop6): initializing freespace
[  352.754217][T14138] bcachefs (loop6): done initializing freespace
[  352.756480][T14138] bcachefs (loop6): reading snapshots table
[  352.756523][T14138] bcachefs (loop6): reading snapshots done
[  352.810500][T14138] bcachefs (loop6): done starting filesystem
[  352.865563][   T33] audit: type=1800 audit(1755247924.173:62): pid=14138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2975" name="file1" dev="loop6" ino=4098 res=0 errno=0
[  352.964771][T13435] bcachefs (loop6): shutting down
[  352.966414][T13435] bcachefs (loop6): going read-only
[  352.968020][T13435] bcachefs (loop6): finished waiting for writes to stop
[  352.978710][T13435] bcachefs (loop6): flushing journal and stopping allocators, journal seq 4
[  353.032021][T13435] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 5
[  353.036478][T13435] bcachefs (loop6): clean shutdown complete, journal seq 6
[  353.039184][T13435] bcachefs (loop6): marking filesystem clean
[  353.074693][T13435] bcachefs (loop6): shutdown complete
[  353.107039][T14168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.648405][ T1272] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  354.825201][ T1272] usb 3-1: unable to get BOS descriptor or descriptor too short
[  354.828983][ T1272] usb 3-1: not running at top speed; connect to a high speed hub
[  354.834573][ T1272] usb 3-1: config 1 has an invalid interface number: 138 but max is 0
[  354.838238][ T1272] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  354.844642][ T1272] usb 3-1: config 1 has no interface number 0
[  354.847271][ T1272] usb 3-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  354.853682][ T1272] usb 3-1: config 1 interface 138 has no altsetting 0
[  354.859962][ T1272] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[  354.864801][ T1272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.868566][ T1272] usb 3-1: Product: syz
[  354.870072][ T1272] usb 3-1: Manufacturer: syz
[  354.875576][ T1272] usb 3-1: SerialNumber: syz
[  355.112870][ T1272] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  355.151023][ T1272] usb 3-1: USB disconnect, device number 54
[  355.184784][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  355.318593][T14211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3001'.
[  355.409620][T14215] syz_tun: entered allmulticast mode
[  355.424040][T14214] syz_tun: left allmulticast mode
[  356.565150][T14247] loop2: detected capacity change from 0 to 8
[  356.993500][T14257] loop2: detected capacity change from 0 to 1024
[  357.015729][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system
[  357.026244][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/77546d12-b9b4-3a96-8b3c-e2850aad7140.tmp-b7:2' failed: Read-only file system
[  357.310452][ T5900] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  357.475065][ T5900] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  357.491583][ T5900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  357.497133][T14269] netdevsim netdevsim4: Direct firmware load for .. failed with error -2
[  357.498506][ T5900] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  357.504914][T14269] netdevsim netdevsim4: Falling back to sysfs fallback for: ..
[  357.530200][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  357.533414][ T5900] usb 3-1: SerialNumber: syz
[  357.792014][ T5900] usb 3-1: 0:2 : does not exist
[  357.816381][ T5900] usb 3-1: USB disconnect, device number 55
[  357.850430][ T9299] udevd[9299]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  358.245859][ T5880] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.361206][ T5880] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.465605][T14288] netlink: 'syz.2.3039': attribute type 3 has an invalid length.
[  358.534899][ T5880] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.651235][ T5880] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.714410][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  358.720504][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  358.737801][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  358.744994][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  358.756457][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  358.783989][T14308] loop2: detected capacity change from 0 to 8
[  359.197109][T14305] chnl_net:caif_netlink_parms(): no params data found
[  359.337260][T14305] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.339803][T14305] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.345500][T14305] bridge_slave_0: entered allmulticast mode
[  359.348647][T14305] bridge_slave_0: entered promiscuous mode
[  359.353522][T14305] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.355832][T14305] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.358814][T14305] bridge_slave_1: entered allmulticast mode
[  359.362125][T14305] bridge_slave_1: entered promiscuous mode
[  359.417253][T14305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.423196][T14305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.444415][T14305] team0: Port device team_slave_0 added
[  359.447991][T14305] team0: Port device team_slave_1 added
[  359.732320][T14305] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.735052][T14305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.743429][T14305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.748345][T14305] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.750814][T14305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.761666][T14305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.809410][T14305] hsr_slave_0: entered promiscuous mode
[  359.813239][T14305] hsr_slave_1: entered promiscuous mode
[  359.815668][T14305] debugfs: 'hsr0' already exists in 'hsr'
[  359.817785][T14305] Cannot create hsr debugfs directory
[  360.071290][T14305] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  360.080121][T14305] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  360.095476][T14305] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  360.107224][T14305] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  360.228232][T14305] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.266983][T14305] 8021q: adding VLAN 0 to HW filter on device team0
[  360.272044][T14362] input: syz0 as /devices/virtual/input/input22
[  360.298128][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.300602][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  360.318475][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.320836][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  360.371094][T14305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  360.527269][T14305] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.945330][   T55] Bluetooth: hci0: command tx timeout
[  361.027431][ T5880] bridge_slave_1: left allmulticast mode
[  361.029246][ T5880] bridge_slave_1: left promiscuous mode
[  361.037850][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.046511][ T5880] bridge_slave_0: left allmulticast mode
[  361.048422][ T5880] bridge_slave_0: left promiscuous mode
[  361.060207][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.824149][   T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  361.862402][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  361.867870][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  361.872285][ T5880] bond0 (unregistering): Released all slaves
[  362.031226][   T10] usb 3-1: Using ep0 maxpacket: 32
[  362.040239][   T10] usb 3-1: config 8 has an invalid interface number: 203 but max is 0
[  362.043221][   T10] usb 3-1: config 8 has no interface number 0
[  362.045709][   T10] usb 3-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023
[  362.057665][   T10] usb 3-1: config 8 interface 203 has no altsetting 0
[  362.096001][   T10] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  362.098907][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.106225][T14305] veth0_vlan: entered promiscuous mode
[  362.122268][T14305] veth1_vlan: entered promiscuous mode
[  362.137677][   T10] usb 3-1: Product: syz
[  362.139042][   T10] usb 3-1: Manufacturer: syz
[  362.140750][   T10] usb 3-1: SerialNumber: syz
[  362.155160][T14398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  362.233011][T14410] netlink: 'syz.4.3079': attribute type 8 has an invalid length.
[  362.258295][T14305] veth0_macvtap: entered promiscuous mode
[  362.297888][T14305] veth1_macvtap: entered promiscuous mode
[  362.303048][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  362.367795][T14305] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.380505][T14305] batman_adv: batadv0: Interface activated: batadv_slave_1
[  362.390092][   T10] port100 3-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint
[  362.396199][   T10] usb 3-1: USB disconnect, device number 56
[  362.450326][ T5871] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  362.455733][ T5871] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  362.465590][ T5871] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  362.468818][ T5871] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  362.607294][ T5880] hsr_slave_0: left promiscuous mode
[  362.610346][ T5880] hsr_slave_1: left promiscuous mode
[  362.622595][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  362.626689][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  362.630324][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  362.633686][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.663001][ T5880] veth1_macvtap: left promiscuous mode
[  362.665384][ T5880] veth0_macvtap: left promiscuous mode
[  362.668994][ T5880] veth1_vlan: left promiscuous mode
[  362.671248][ T5880] veth0_vlan: left promiscuous mode
[  363.024555][   T10] kernel write not supported for file /2027/attr/exec (pid: 10 comm: kworker/0:1)
[  363.166959][   T55] Bluetooth: hci0: command tx timeout
[  363.579939][ T5880] team0 (unregistering): Port device team_slave_1 removed
[  363.648638][ T5880] team0 (unregistering): Port device team_slave_0 removed
[  364.296787][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.299468][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.375381][T14461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3098'.
[  364.412470][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.423459][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.438073][   T55] Bluetooth: hci0: command tx timeout
[  365.857574][T14522] loop7: detected capacity change from 0 to 8
[  365.921179][T14522] SQUASHFS error: Unable to read inode 0x11f
[  366.292936][T14548] Bluetooth: MGMT ver 1.23
[  366.383994][T14556] loop7: detected capacity change from 0 to 256
[  366.396305][T14556] exfat: Deprecated parameter 'namecase'
[  366.416536][T14556] exfat: Deprecated parameter 'namecase'
[  366.423550][T14556] exfat: Deprecated parameter 'namecase'
[  366.427581][T14556] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  366.431518][   T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  366.439128][T14556] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  366.595449][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  366.609361][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  366.618843][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  366.626957][   T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  366.630597][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.648164][   T10] usb 3-1: config 0 descriptor??
[  367.061784][T14594] syz_tun: entered allmulticast mode
[  367.089765][T14594] dvmrp1: entered allmulticast mode
[  367.153766][   T10] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  367.168890][T14593] syz_tun: left allmulticast mode
[  367.232067][   T24] libceph: connect (1)[c::]:6789 error -101
[  367.238036][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  367.259100][T14599] ceph: No mds server is up or the cluster is laggy
[  367.281771][   T24] libceph: connect (1)[c::]:6789 error -101
[  367.290554][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  367.318312][   T24] usb 3-1: USB disconnect, device number 57
[  367.609468][   T55] Bluetooth: hci0: command tx timeout
[  367.824684][T14639] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3157'.
[  368.043211][T14652] loop2: detected capacity change from 0 to 512
[  368.048189][T14652] EXT4-fs: Ignoring removed bh option
[  368.058444][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  368.091743][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  370.069039][T14706] loop7: detected capacity change from 0 to 1024
[  370.078542][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  370.087872][T14706] EXT4-fs: Ignoring removed nobh option
[  370.090427][T14706] EXT4-fs: inline encryption not supported
[  370.108357][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  370.136586][T14706] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  370.203620][T14305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.251626][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  370.453601][T14736] loop7: detected capacity change from 0 to 4096
[  370.476951][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  370.491125][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:7' failed: Read-only file system
[  370.504192][T14736] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[  370.530201][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  370.537102][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:7' failed: Read-only file system
[  370.591904][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  370.670352][T14742] loop7: detected capacity change from 0 to 1024
[  370.720620][T14742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  370.732559][T14742] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.3198: missing EA_INODE flag
[  370.743591][T14742] EXT4-fs (loop7): Remounting filesystem read-only
[  370.748570][ T5900] usb 3-1: new full-speed USB device number 58 using dummy_hcd
[  370.763539][T14305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.916178][ T5900] usb 3-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=90.d6
[  370.920275][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.923584][ T5900] usb 3-1: Product: syz
[  370.925679][ T5900] usb 3-1: Manufacturer: syz
[  370.927526][ T5900] usb 3-1: SerialNumber: syz
[  370.932917][ T5900] usb 3-1: config 0 descriptor??
[  370.938125][ T5900] aiptek 3-1:0.0: interface has no int in endpoints, but must have minimum 1
[  371.099721][T14749] loop7: detected capacity change from 0 to 65536
[  371.112419][T14749] XFS (loop7): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  371.125357][T14749] XFS (loop7): Ending clean mount
[  371.132769][T14749] XFS (loop7): Quotacheck needed: Please wait.
[  371.157316][ T5900] usb 3-1: USB disconnect, device number 58
[  371.178870][T14749] XFS (loop7): Quotacheck: Done.
[  371.203848][T14305] XFS (loop7): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  371.703370][T14775] use of bytesused == 0 is deprecated and will be removed in the future,
[  371.706470][T14775] use the actual size instead.
[  371.767617][T14776] overlayfs: failed to clone upperpath
[  372.958743][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3226'.
[  372.962497][T14821] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3226'.
[  373.191331][T14833] loop2: detected capacity change from 0 to 1024
[  373.253323][T14825] loop7: detected capacity change from 0 to 65536
[  373.309827][T14825] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  373.324532][T14825] XFS (loop7): Ending clean mount
[  373.333251][T14825] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  373.338305][T14825] XFS (loop7): Unmount and run xfs_repair
[  373.340455][T14825] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  373.343209][T14825] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  373.346684][T14825] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  373.350487][T14825] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  373.353389][T14825] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  373.356179][T14825] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  373.358913][T14825] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  373.362104][T14825] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  373.364808][T14825] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  373.368020][T14825] XFS (loop7): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  373.382564][T14825] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  373.386877][T14825] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  373.576652][T14305] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  373.634302][T14861] CIFS mount error: No usable UNC path provided in device string!
[  373.634302][T14861] 
[  373.641628][T14861] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  373.855732][T14871] netlink: 'syz.4.3245': attribute type 29 has an invalid length.
[  373.883106][T14871] netlink: 'syz.4.3245': attribute type 29 has an invalid length.
[  374.062863][ T5900] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  374.141422][T14893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3254'.
[  374.244367][ T5900] usb 3-1: Using ep0 maxpacket: 32
[  374.260762][ T5900] usb 3-1: config 2 has an invalid interface number: 157 but max is 0
[  374.269234][ T5900] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[  374.273072][ T5900] usb 3-1: config 2 has no interface number 1
[  374.281540][ T5900] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[  374.433087][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.437051][ T5900] usb 3-1: Product: syz
[  374.438787][ T5900] usb 3-1: Manufacturer: syz
[  374.440657][ T5900] usb 3-1: SerialNumber: syz
[  374.448869][ T5900] imon 3-1:2.157: inconsistent driver matching
[  374.451377][ T5900] imon 3-1:2.157: unable to register, err -22
[  374.453813][ T5900] imon 3-1:2.157: probe with driver imon failed with error -22
[  374.459907][ T5900] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  374.465945][ T5900] imon 3-1:2.0: unable to initialize intf0, err -19
[  374.468749][ T5900] imon:imon_probe: failed to initialize context!
[  374.471226][ T5900] imon 3-1:2.0: unable to register, err -19
[  374.793053][ T5900] usb 3-1: USB disconnect, device number 59
[  374.887552][   T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  375.046646][   T10] usb 8-1: Using ep0 maxpacket: 32
[  375.050045][   T10] usb 8-1: config 0 has an invalid interface number: 75 but max is 0
[  375.052839][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  375.055970][   T10] usb 8-1: config 0 has no interface number 0
[  375.061257][   T10] usb 8-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=7b.41
[  375.064564][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.067100][   T10] usb 8-1: Product: syz
[  375.069535][   T10] usb 8-1: Manufacturer: syz
[  375.071009][   T10] usb 8-1: SerialNumber: syz
[  375.073962][   T10] usb 8-1: config 0 descriptor??
[  375.078872][   T10] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  375.081025][   T10] gspca_stv06xx: st6422 sensor detected
[  375.551947][T14930] random: crng reseeded on system resumption
[  375.810289][   T10] STV06xx 8-1:0.75: probe with driver STV06xx failed with error -71
[  375.993467][T14943] netlink: 'syz.4.3275': attribute type 25 has an invalid length.
[  375.997256][T14943] netlink: 'syz.4.3275': attribute type 7 has an invalid length.
[  376.380952][   T33] audit: type=1326 audit(1755247946.173:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14944 comm="syz.4.3276" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb84878ebe9 code=0x0
[  376.533061][   T10] usb 8-1: USB disconnect, device number 2
[  376.597463][T14952] netlink: 'syz.2.3278': attribute type 24 has an invalid length.
[  377.068560][T14973] loop7: detected capacity change from 0 to 32768
[  377.094794][T14973] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  377.106932][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:7' failed: Read-only file system
[  377.132773][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:7' failed: Read-only file system
[  377.158267][T14305] ocfs2: Unmounting device (7,7) on (node local)
[  377.386633][T14993] vlan2: entered promiscuous mode
[  377.390424][T14993] hsr0: entered promiscuous mode
[  377.519991][T14995] loop7: detected capacity change from 0 to 512
[  377.532471][T14995] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  377.538814][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/SYZKALLER.tmp-b7:7' failed: Read-only file system
[  377.544154][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/1DDD-580F.tmp-b7:7' failed: Read-only file system
[  377.571144][   T33] audit: type=1800 audit(1755247947.296:64): pid=14995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3297" name="file1" dev="loop7" ino=1048686 res=0 errno=0
[  377.716347][   T33] audit: type=1800 audit(1755247947.427:65): pid=14991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3295" name="bus" dev="tmpfs" ino=5108 res=0 errno=0
[  377.945046][ T5749] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  378.027206][T15017] loop2: detected capacity change from 0 to 512
[  378.103592][ T5749] usb 8-1: Using ep0 maxpacket: 8
[  378.110786][ T5749] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  378.116500][ T5749] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  378.119937][ T5749] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 49526, setting to 1024
[  378.123397][ T5749] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  378.129879][ T5749] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  378.138198][ T5749] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  378.141315][ T5749] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.147488][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3310'.
[  378.363884][T15030] ubi0: attaching mtd0
[  378.370520][ T5749] usb 8-1: GET_CAPABILITIES returned 0
[  378.373608][ T5749] usbtmc 8-1:16.0: can't read capabilities
[  378.593723][ T5749] usb 8-1: USB disconnect, device number 3
[  378.771177][   T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  378.937518][   T24] usb 3-1: Using ep0 maxpacket: 32
[  378.943049][   T24] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe
[  378.946539][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.949945][   T24] usb 3-1: Product: syz
[  378.952152][   T24] usb 3-1: Manufacturer: syz
[  378.953641][   T24] usb 3-1: SerialNumber: syz
[  378.956708][   T24] usb 3-1: config 0 descriptor??
[  379.186351][ T5749] usb 3-1: USB disconnect, device number 60
[  379.418913][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  379.653935][   T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  379.845697][   T24] usb 8-1: Using ep0 maxpacket: 32
[  379.855683][   T24] usb 8-1: config 0 has an invalid interface number: 132 but max is 0
[  379.861256][T15090] input: syz0 as /devices/virtual/input/input25
[  379.866905][   T24] usb 8-1: config 0 has no interface number 0
[  379.877681][   T24] usb 8-1: config 0 interface 132 has no altsetting 0
[  379.888995][   T24] usb 8-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.0f
[  379.893364][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.897206][   T24] usb 8-1: Product: syz
[  379.900487][   T24] usb 8-1: Manufacturer: syz
[  379.902374][   T24] usb 8-1: SerialNumber: syz
[  379.917078][   T24] usb 8-1: config 0 descriptor??
[  379.931111][   T24] ftdi_sio 8-1:0.132: FTDI USB Serial Device converter detected
[  379.944016][   T24] usb 8-1: Detected SIO
[  379.976997][   T24] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  380.157144][   T24] usb 8-1: USB disconnect, device number 4
[  380.162367][   T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  380.176289][   T24] ftdi_sio 8-1:0.132: device disconnected
[  381.105384][T15143] loop7: detected capacity change from 0 to 1024
[  381.117833][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system
[  381.125434][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:7' failed: Read-only file system
[  381.147170][ T1090] hfsplus: b-tree write err: -5, ino 4
[  381.174481][T15145] loop7: detected capacity change from 0 to 512
[  381.207098][T15145] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  381.241488][T15145] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.3346: bad orphan inode 11
[  381.245529][T15145] ext4_test_bit(bit=10, block=4) = 1
[  381.247811][T15145] is_bad_inode(inode)=0
[  381.249147][T15145] NEXT_ORPHAN(inode)=2080374784
[  381.251093][T15145] max_ino=32
[  381.252257][T15145] i_nlink=0
[  381.253366][T15145] EXT4-fs (loop7): 1 truncate cleaned up
[  381.255926][T15145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.278208][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  381.320313][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  381.366513][T14305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.388945][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  381.449234][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  381.727870][   T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  381.898185][   T24] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  381.902100][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.904890][   T24] usb 8-1: Product: syz
[  381.906206][   T24] usb 8-1: Manufacturer: syz
[  381.908489][   T24] usb 8-1: SerialNumber: syz
[  381.923700][   T24] usb 8-1: config 0 descriptor??
[  382.464323][   T24] usb 8-1: f81604_write: reg: 105 data: 8a failed: -EPROTO
[  382.472018][   T24] f81604 8-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  382.479468][   T24] f81604 8-1:0.0: probe with driver f81604 failed with error -71
[  382.485625][   T24] usb 8-1: USB disconnect, device number 5
[  383.241151][T15202] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.3368'.
[  383.287329][T15204] loop7: detected capacity change from 0 to 512
[  383.290636][   T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  383.321604][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/\x86\x5b.tmp-b7:7' failed: Read-only file system
[  383.333119][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/\x86\x5b.tmp-b7:7' failed: Read-only file system
[  383.348662][T15204] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  383.351678][T15204] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  383.355565][T15204] EXT4-fs (loop7): 1 truncate cleaned up
[  383.358442][T15204] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.414953][T14305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.474476][   T24] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  383.477160][   T24] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  383.486168][   T24] usb 3-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config
[  383.490676][   T24] usb 3-1: config 220 has no interface number 2
[  383.497206][   T24] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  383.498126][T15214] loop7: detected capacity change from 0 to 256
[  383.501996][   T24] usb 3-1: config 220 interface 0 has no altsetting 0
[  383.502017][   T24] usb 3-1: config 220 interface 76 has no altsetting 0
[  383.510410][   T24] usb 3-1: config 220 interface 1 has no altsetting 0
[  383.518554][   T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  383.522280][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.525647][   T24] usb 3-1: Product: syz
[  383.527100][T15214] exFAT-fs (loop7): bogus number of FAT structure
[  383.529777][T15214] exFAT-fs (loop7): failed to read boot sector
[  383.530210][   T24] usb 3-1: Manufacturer: syz
[  383.532216][T15214] exFAT-fs (loop7): failed to recognize exfat type
[  383.536631][   T24] usb 3-1: SerialNumber: syz
[  383.622057][T15218] vlan2: entered promiscuous mode
[  383.629076][T15218] vlan2: entered allmulticast mode
[  383.634710][T15218] hsr_slave_1: entered allmulticast mode
[  383.784194][   T24] usb 3-1: selecting invalid altsetting 0
[  383.787175][   T24] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  383.789680][   T24] usb 3-1: No valid video chain found.
[  383.804497][   T24] usb 3-1: selecting invalid altsetting 0
[  383.806871][   T24] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  383.817220][   T24] usb 3-1: USB disconnect, device number 61
[  383.830285][T15224] loop7: detected capacity change from 0 to 2048
[  383.838560][T15224] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  383.865379][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/LinuxUDF.tmp-b7:7' failed: Read-only file system
[  383.885171][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/1234567812345678.tmp-b7:7' failed: Read-only file system
[  383.929324][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/LinuxUDF.tmp-b7:7' failed: Read-only file system
[  383.939135][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/1234567812345678.tmp-b7:7' failed: Read-only file system
[  384.611805][T15230] loop2: detected capacity change from 0 to 2048
[  385.030184][T15242] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4.
[  385.268279][   T10] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  385.440125][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  385.443976][   T10] usb 3-1: not running at top speed; connect to a high speed hub
[  385.450395][   T10] usb 3-1: config 1 has an invalid interface number: 17 but max is 0
[  385.453833][   T10] usb 3-1: config 1 has no interface number 0
[  385.459939][   T10] usb 3-1: New USB device found, idVendor=07ca, idProduct=a110, bcdDevice= 7.fd
[  385.463770][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.467170][   T10] usb 3-1: Product: syz
[  385.469009][   T10] usb 3-1: Manufacturer: syz
[  385.471945][   T10] usb 3-1: SerialNumber: syz
[  386.087085][   T10] usb 3-1: USB disconnect, device number 62
[  387.468105][T15281] loop2: detected capacity change from 0 to 131072
[  388.294781][T15316] netlink: 'syz.7.3419': attribute type 3 has an invalid length.
[  389.067232][T15331] sctp: [Deprecated]: syz.7.3424 (pid 15331) Use of struct sctp_assoc_value in delayed_ack socket option.
[  389.067232][T15331] Use struct sctp_sack_info instead
[  389.187595][T15336] loop2: detected capacity change from 0 to 1024
[  389.217096][T15336] EXT4-fs: Ignoring removed nobh option
[  389.666331][T15345] netlink: 'syz.7.3429': attribute type 10 has an invalid length.
[  389.674658][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  389.676852][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  390.527925][T15359] loop7: detected capacity change from 0 to 64
[  390.582527][T15359] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing
[  390.667579][T15363] loop7: detected capacity change from 0 to 256
[  390.683799][T15363] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x467a0815, utbl_chksum : 0xe619d30d)
[  390.697952][T15363] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  390.724574][T15363] exFAT-fs (loop7): error, invalid access to FAT free cluster (entry 0x00000006)
[  390.994959][T15368] loop7: detected capacity change from 0 to 32768
[  390.999513][T15368] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3440 (15368)
[  391.008579][T15368] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  391.012867][T15368] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  391.016520][T15368] BTRFS info (device loop7): using free-space-tree
[  391.051022][T15368] BTRFS info (device loop7): rebuilding free space tree
[  391.054705][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:7' failed: Read-only file system
[  391.173657][T15396] overlayfs: failed to clone upperpath
[  391.234201][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:7' failed: Read-only file system
[  391.251838][T14305] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  391.670088][   T33] audit: type=1804 audit(1755247960.466:66): pid=15408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3451" name="/newroot/1020/file1" dev="fuse" ino=1 res=1 errno=0
[  391.677705][   T33] audit: type=1800 audit(1755247960.466:67): pid=15408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3451" name="/" dev="fuse" ino=1 res=0 errno=0
[  391.729954][T15410] loop7: detected capacity change from 0 to 512
[  391.734640][   T33] audit: type=1800 audit(1755247960.466:68): pid=15407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3451" name="/" dev="fuse" ino=1 res=0 errno=0
[  391.748859][T15410] EXT4-fs (loop7): fragment/cluster size (4096) != block size (1024)
[  392.260742][T15412] loop2: detected capacity change from 0 to 32768
[  392.279644][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:2' failed: Read-only file system
[  392.950541][T15455] loop7: detected capacity change from 0 to 2048
[  393.008388][T15455] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  393.012137][T15455] FAT-fs (loop7): Filesystem has been set read-only
[  393.157845][T15459] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  393.242331][T15453] loop2: detected capacity change from 0 to 32768
[  393.262573][T15453] bcachefs (/dev/loop2): error reading superblock: error opening /dev/loop2: EACCES
[  393.284862][T15453] bcachefs: bch2_fs_get_tree() error: EACCES
[  393.466766][T15467] overlay: filesystem on ./bus is read-only
[  393.670738][ T5914] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  393.875062][ T5914] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  393.878726][ T5914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.881923][ T5914] usb 8-1: Product: syz
[  393.885762][ T5914] usb 8-1: Manufacturer: syz
[  393.887704][ T5914] usb 8-1: SerialNumber: syz
[  393.905501][ T5914] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  393.987119][ T5914] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  394.040832][T15495] loop2: detected capacity change from 0 to 2048
[  394.159413][T15500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3495'.
[  394.286043][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3498'.
[  394.631248][   T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  394.817710][   T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  394.820593][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.828794][   T10] usb 3-1: config 0 descriptor??
[  395.055051][   T10] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  395.270096][   T10] [drm:udl_init] *ERROR* Selecting channel failed
[  395.297567][   T10] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 3
[  395.299753][   T10] [drm] Initialized udl on minor 3
[  395.308579][   T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  395.323828][   T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  395.333903][  T793] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  395.340419][   T10] usb 3-1: USB disconnect, device number 63
[  395.344150][  T793] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  395.411978][ T5914] usb 8-1: Service connection timeout for: 256
[  395.414063][ T5914] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services
[  395.449677][ T5914] ath9k_htc: Failed to initialize the device
[  395.463957][ T5914] usb 8-1: ath9k_htc: USB layer deinitialized
[  395.479997][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3506'.
[  395.696913][ T5914] usb 8-1: USB disconnect, device number 6
[  395.766801][   T33] audit: type=1326 audit(1755247964.320:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15537 comm="syz.4.3513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84878ebe9 code=0x7ffc0000
[  395.776994][   T33] audit: type=1326 audit(1755247964.320:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15537 comm="syz.4.3513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84878ebe9 code=0x7ffc0000
[  395.786042][   T33] audit: type=1326 audit(1755247964.320:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15537 comm="syz.4.3513" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb84878d550 code=0x7ffc0000
[  395.798327][   T33] audit: type=1326 audit(1755247964.320:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15537 comm="syz.4.3513" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb84878d550 code=0x7ffc0000
[  395.806780][   T33] audit: type=1326 audit(1755247964.320:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15537 comm="syz.4.3513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84878ebe9 code=0x7ffc0000
[  395.819840][   T33] audit: type=1326 audit(1755247964.320:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15537 comm="syz.4.3513" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84878ebe9 code=0x7ffc0000
[  395.829631][   T33] audit: type=1326 audit(1755247964.320:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15537 comm="syz.4.3513" exe="/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fb84878ebe9 code=0x7ffc0000
[  395.884837][T15542] loop2: detected capacity change from 0 to 2048
[  395.899418][T15542] NILFS (loop2): invalid segment: Checksum error in segment payload
[  395.902420][T15542] NILFS (loop2): trying rollback from an earlier position
[  395.908395][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:2' failed: Read-only file system
[  395.908668][T15542] NILFS (loop2): invalid segment: Checksum error in segment payload
[  395.913441][T15544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.925233][T15542] NILFS (loop2): error -22 while searching super root
[  395.927425][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:2' failed: Read-only file system
[  396.026361][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3520'.
[  397.235129][T15579] loop7: detected capacity change from 0 to 131072
[  397.244597][T15579] F2FS-fs (loop7): Test dummy encryption mode enabled
[  397.249617][T15579] F2FS-fs (loop7): invalid crc value
[  397.307848][T15579] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  397.323048][T15579] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  397.363784][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:7' failed: Read-only file system
[  397.436424][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:7' failed: Read-only file system
[  398.165705][T15650] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only
[  398.171409][T15650] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  398.377568][T15659] loop7: detected capacity change from 0 to 16
[  398.392378][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:7' failed: Read-only file system
[  398.399183][T15659] erofs (device loop7): mounted with root inode @ nid 36.
[  398.413931][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:7' failed: Read-only file system
[  398.478052][T15657] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3565'.
[  398.682181][T15673] netlink: 'syz.2.3572': attribute type 1 has an invalid length.
[  398.684998][T15673] netlink: 'syz.2.3572': attribute type 5 has an invalid length.
[  398.993188][   T10] usb 3-1: new full-speed USB device number 64 using dummy_hcd
[  399.109327][T15698] loop7: detected capacity change from 0 to 1024
[  399.116652][T15698] EXT4-fs: inline encryption not supported
[  399.126669][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  399.132344][T15698] EXT4-fs: Ignoring removed bh option
[  399.157929][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  399.159031][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  399.168759][   T10] usb 3-1: not running at top speed; connect to a high speed hub
[  399.170001][T15698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.173118][   T10] usb 3-1: config 1 interface 0 has no altsetting 0
[  399.205368][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40
[  399.209985][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.213469][   T10] usb 3-1: Product: syz
[  399.215352][   T10] usb 3-1: Manufacturer: syz
[  399.217210][   T10] usb 3-1: SerialNumber: syz
[  399.289139][T14305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.335749][ T7049] udevd[7049]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  399.451498][   T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input26
[  399.461262][   T10] usb 3-1: USB disconnect, device number 64
[  399.784214][ T5893] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  399.947278][ T5893] usb 8-1: config 220 has an invalid interface number: 76 but max is 2
[  399.950969][ T5893] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  399.955232][ T5893] usb 8-1: config 220 has no interface number 2
[  399.958264][ T5893] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  399.963669][ T5893] usb 8-1: config 220 interface 0 has no altsetting 0
[  399.966840][ T5893] usb 8-1: config 220 interface 76 has no altsetting 0
[  399.969551][ T5893] usb 8-1: config 220 interface 1 has no altsetting 0
[  399.974909][ T5893] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  399.979025][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.981560][ T5893] usb 8-1: Product: syz
[  399.982938][ T5893] usb 8-1: Manufacturer: syz
[  399.984531][ T5893] usb 8-1: SerialNumber: syz
[  400.077621][T15725] overlayfs: empty lowerdir
[  400.150848][T15730] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  400.224640][ T5893] usb 8-1: selecting invalid altsetting 0
[  400.227365][ T5893] usb 8-1: Found UVC 7.01 device syz (8086:0b07)
[  400.236465][ T5893] usb 8-1: No valid video chain found.
[  400.243141][ T5893] usb 8-1: selecting invalid altsetting 0
[  400.251326][ T5893] usbtest 8-1:220.1: probe with driver usbtest failed with error -22
[  400.259615][ T5893] usb 8-1: USB disconnect, device number 7
[  400.490539][   T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  400.651843][   T24] usb 3-1: Using ep0 maxpacket: 16
[  400.662853][   T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.667056][   T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.670668][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  400.682309][   T24] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  400.685552][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.693591][   T24] usb 3-1: config 0 descriptor??
[  401.162753][   T24] cougar 0003:060B:500A.001A: unexpected long global item
[  401.167939][   T24] cougar 0003:060B:500A.001A: parse failed
[  401.170207][   T24] cougar 0003:060B:500A.001A: probe with driver cougar failed with error -22
[  401.211097][T15757] loop7: detected capacity change from 0 to 40427
[  401.214404][T15757] F2FS-fs: heap/no_heap options were deprecated
[  401.221947][T15757] F2FS-fs (loop7): invalid crc value
[  401.241198][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system
[  401.299617][T15757] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  401.305956][T15757] F2FS-fs (loop7): Start checkpoint disabled!
[  401.309967][T15757] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  401.345670][   T24] usb 3-1: USB disconnect, device number 65
[  401.649361][T15771] openvswitch: netlink: Missing valid actions attribute.
[  401.652050][T15771] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.943894][   T24] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  402.105604][   T24] usb 8-1: config index 0 descriptor too short (expected 539, got 27)
[  402.108490][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4
[  402.112155][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 15692, setting to 1023
[  402.119886][   T24] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  402.122693][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.126055][   T24] usb 8-1: Product: syz
[  402.127700][   T24] usb 8-1: Manufacturer: syz
[  402.129352][   T24] usb 8-1: SerialNumber: syz
[  402.132344][   T24] usb 8-1: config 0 descriptor??
[  402.138720][   T24] hub 8-1:0.0: bad descriptor, ignoring hub
[  402.140889][   T24] hub 8-1:0.0: probe with driver hub failed with error -5
[  402.147700][   T24] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input27
[  402.155123][   T24] usbtouchscreen 8-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22
[  402.165766][   T24] usbtouchscreen 8-1:0.0: probe with driver usbtouchscreen failed with error -22
[  402.214390][T15777] loop2: detected capacity change from 0 to 32768
[  402.227227][T15777] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3619 (15777)
[  402.247045][ T7049] udevd[7049]: symlink '../../loop2' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:2' failed: Read-only file system
[  402.254298][T15777] BTRFS error: failed to open device for path /dev/loop2 with flags 0x23: -13
[  402.491145][   T24] usb 8-1: USB disconnect, device number 8
[  403.047012][T15826] loop7: detected capacity change from 0 to 2048
[  403.059232][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  403.065730][T15820] loop2: detected capacity change from 0 to 32768
[  403.074886][T15826] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  403.100480][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:2' failed: Read-only file system
[  403.700562][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3651'.
[  403.703397][T15826] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3641: bg 0: block 234: padding at end of block bitmap is not set
[  403.734381][T15826] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 2048 with error 117
[  403.739338][T15826] EXT4-fs (loop7): This should not happen!! Data will be lost
[  403.739338][T15826] 
[  403.805880][T15832] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 2066 with max blocks 2048 with error 28
[  403.811017][T15832] EXT4-fs (loop7): This should not happen!! Data will be lost
[  403.811017][T15832] 
[  403.817111][T15832] EXT4-fs (loop7): Total free blocks count 0
[  403.819392][T15832] EXT4-fs (loop7): Free/Dirty block details
[  403.821610][T15832] EXT4-fs (loop7): free_blocks=0
[  403.823496][T15832] EXT4-fs (loop7): dirty_blocks=6128
[  403.826540][T15832] EXT4-fs (loop7): Block reservation details
[  403.874914][T15857] netlink: 'syz.2.3654': attribute type 1 has an invalid length.
[  404.037541][T15863] netlink: 'syz.2.3657': attribute type 12 has an invalid length.
[  404.042353][T15863] netlink: 'syz.2.3657': attribute type 29 has an invalid length.
[  404.044863][T15863] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3657'.
[  404.136581][T15865] loop2: detected capacity change from 0 to 8192
[  404.284419][T15867] ieee802154 phy0 wpan0: encryption failed: -22
[  404.346424][T15871] loop2: detected capacity change from 0 to 128
[  404.385978][T15871] loop2: detected capacity change from 0 to 2048
[  404.396385][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system
[  404.413686][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:2' failed: Read-only file system
[  404.495473][T15879] loop2: detected capacity change from 0 to 16
[  404.507234][ T9299] udevd[9299]: symlink '../../loop2' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:2' failed: Read-only file system
[  404.746276][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  404.746292][   T33] audit: type=1800 audit(1755247972.720:77): pid=15890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3668" name="file0" dev="tmpfs" ino=5935 res=0 errno=0
[  404.783836][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  405.102944][T15906] netlink: 'syz.7.3675': attribute type 5 has an invalid length.
[  405.179433][T15908] loop7: detected capacity change from 0 to 4096
[  405.191562][T15908] ntfs3(loop7): ino=0, mi_enum_attr
[  405.199451][T15908] ntfs3(loop7): ino=0, mi_enum_attr
[  405.201526][T15908] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  405.210382][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  405.225234][ T9299] udevd[9299]: symlink '../../loop7' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:7' failed: Read-only file system
[  405.262772][ T9299] udevd[9299]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  405.465844][   T33] audit: type=1800 audit(1755247973.384:78): pid=15895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3669" name="file1" dev="tmpfs" ino=5941 res=0 errno=0
[  405.709133][   T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  405.867056][ T5914] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  405.867669][   T24] usb 8-1: Using ep0 maxpacket: 8
[  405.874258][   T24] usb 8-1: config 6 has an invalid interface number: 213 but max is 1
[  405.877522][   T24] usb 8-1: config 6 has an invalid interface number: 211 but max is 1
[  405.881016][   T24] usb 8-1: config 6 has no interface number 0
[  405.883763][   T24] usb 8-1: config 6 has no interface number 1
[  405.886467][   T24] usb 8-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  405.890951][   T24] usb 8-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  405.895294][   T24] usb 8-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 63, changing to 7
[  405.899789][   T24] usb 8-1: config 6 interface 213 altsetting 0 endpoint 0x83 has invalid maxpacket 57448, setting to 1024
[  405.904168][   T24] usb 8-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  405.909032][   T24] usb 8-1: config 6 interface 211 has no altsetting 0
[  405.914359][   T24] usb 8-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86
[  405.917977][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.922227][   T24] usb 8-1: Product: syz
[  405.923967][   T24] usb 8-1: Manufacturer: syz
[  405.925739][   T24] usb 8-1: SerialNumber: syz
[  406.027486][ T5914] usb 3-1: Using ep0 maxpacket: 32
[  406.033285][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.037874][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  406.042751][ T5914] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  406.047574][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.056096][ T5914] usb 3-1: config 0 descriptor??
[  406.162141][   T24] em28xx 8-1:6.213: New device syz syz @ 480 Mbps (eb1a:e357, interface 213, class 213)
[  406.165966][   T24] em28xx 8-1:6.213: Audio interface 213 found (Vendor Class)
[  406.231155][   T24] em28xx 8-1:6.213: unknown em28xx chip ID (0)
[  406.234147][   T24] em28xx 8-1:6.213: Config register raw data: 0xfffffffb
[  406.237433][   T24] em28xx 8-1:6.213: AC97 chip type couldn't be determined
[  406.240249][   T24] em28xx 8-1:6.213: No AC97 audio processor
[  406.256037][   T24] usb 8-1: USB disconnect, device number 9
[  406.266897][   T24] em28xx 8-1:6.213: Disconnecting em28xx
[  406.279545][   T24] em28xx 8-1:6.213: Freeing device
[  406.292080][ T5914] usbhid 3-1:0.0: can't add hid device: -71
[  406.299887][ T5914] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  406.308660][ T5914] usb 3-1: USB disconnect, device number 66
[  406.930784][T15951] ==================================================================
[  406.934107][T15951] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  406.937276][T15951] Read of size 1 at addr ffff888020fd0c30 by task syz.2.3695/15951
[  406.941639][T15951] 
[  406.942570][T15951] CPU: 1 UID: 0 PID: 15951 Comm: syz.2.3695 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  406.942592][T15951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  406.942603][T15951] Call Trace:
[  406.942611][T15951]  <TASK>
[  406.942620][T15951]  dump_stack_lvl+0x189/0x250
[  406.942643][T15951]  ? __kasan_check_byte+0x12/0x40
[  406.942669][T15951]  ? __pfx_dump_stack_lvl+0x10/0x10
[  406.942705][T15951]  ? lock_release+0x4b/0x3e0
[  406.942731][T15951]  ? __virt_addr_valid+0x4a5/0x5c0
[  406.942750][T15951]  print_report+0xca/0x240
[  406.942765][T15951]  ? xfrm_state_find+0x2cf2/0x5400
[  406.942786][T15951]  kasan_report+0x118/0x150
[  406.942809][T15951]  ? xfrm_state_find+0x2cf2/0x5400
[  406.942837][T15951]  xfrm_state_find+0x2cf2/0x5400
[  406.942864][T15951]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  406.942889][T15951]  ? xfrm_state_find+0x1da/0x5400
[  406.942913][T15951]  ? __pfx_xfrm_state_find+0x10/0x10
[  406.942935][T15951]  ? kasan_save_stack+0x4d/0x60
[  406.942952][T15951]  ? kasan_save_stack+0x3e/0x60
[  406.942970][T15951]  ? kasan_record_aux_stack+0xbd/0xd0
[  406.942987][T15951]  ? ip_route_output_key_hash_rcu+0x18eb/0x23d0
[  406.943006][T15951]  ? ip_route_output_key_hash+0x1b9/0x2e0
[  406.943021][T15951]  ? __ip4_datagram_connect+0x8f4/0x1270
[  406.943036][T15951]  ? __ip6_datagram_connect+0x9f0/0x1150
[  406.943054][T15951]  ? ip6_datagram_connect_v6_only+0x63/0xa0
[  406.943073][T15951]  ? __x64_sys_connect+0x7a/0x90
[  406.943095][T15951]  ? do_syscall_64+0xfa/0x3b0
[  406.943117][T15951]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.943135][T15951]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  406.943163][T15951]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  406.943182][T15951]  ? __lock_acquire+0xab9/0xd20
[  406.943211][T15951]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  406.943233][T15951]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  406.943251][T15951]  ? xfrm_expand_policies+0x41f/0x6a0
[  406.943270][T15951]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  406.943287][T15951]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  406.943303][T15951]  ? rcuref_put+0x1b7/0x210
[  406.943320][T15951]  ? __pfx_rcuref_put+0x10/0x10
[  406.943370][T15951]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  406.943395][T15951]  xfrm_lookup_route+0x3c/0x1c0
[  406.943415][T15951]  __ip4_datagram_connect+0x9a5/0x1270
[  406.943439][T15951]  __ip6_datagram_connect+0x9f0/0x1150
[  406.943463][T15951]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  406.943483][T15951]  ? __local_bh_enable_ip+0x12d/0x1c0
[  406.943499][T15951]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  406.943519][T15951]  ip6_datagram_connect_v6_only+0x63/0xa0
[  406.943540][T15951]  __sys_connect+0x316/0x440
[  406.943561][T15951]  ? __pfx___sys_connect+0x10/0x10
[  406.943586][T15951]  ? rcu_is_watching+0x15/0xb0
[  406.943603][T15951]  __x64_sys_connect+0x7a/0x90
[  406.943623][T15951]  do_syscall_64+0xfa/0x3b0
[  406.943643][T15951]  ? lockdep_hardirqs_on+0x9c/0x150
[  406.943661][T15951]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.943675][T15951]  ? exc_page_fault+0x9f/0xf0
[  406.943702][T15951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.943717][T15951] RIP: 0033:0x7f9b0518ebe9
[  406.943732][T15951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  406.943746][T15951] RSP: 002b:00007f9b0600f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  406.943763][T15951] RAX: ffffffffffffffda RBX: 00007f9b053b5fa0 RCX: 00007f9b0518ebe9
[  406.943775][T15951] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005
[  406.943786][T15951] RBP: 00007f9b05211e19 R08: 0000000000000000 R09: 0000000000000000
[  406.943796][T15951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  406.943805][T15951] R13: 00007f9b053b6038 R14: 00007f9b053b5fa0 R15: 00007ffe7939cdd8
[  406.943821][T15951]  </TASK>
[  406.943827][T15951] 
[  407.090351][T15951] Allocated by task 9532:
[  407.092032][T15951]  kasan_save_track+0x3e/0x80
[  407.093512][T15951]  __kasan_slab_alloc+0x6c/0x80
[  407.094911][T15951]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  407.096653][T15951]  xfrm_state_alloc+0x24/0x2f0
[  407.098556][T15951]  xfrm_state_find+0x37d4/0x5400
[  407.100513][T15951]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  407.102944][T15951]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  407.104628][T15951]  xfrm_lookup_route+0x3c/0x1c0
[  407.106643][T15951]  rawv6_sendmsg+0xdab/0x1820
[  407.108750][T15951]  __sock_sendmsg+0x19c/0x270
[  407.110820][T15951]  ____sys_sendmsg+0x52d/0x830
[  407.112865][T15951]  ___sys_sendmsg+0x21f/0x2a0
[  407.114762][T15951]  __sys_sendmmsg+0x227/0x430
[  407.116605][T15951]  __x64_sys_sendmmsg+0xa0/0xc0
[  407.118654][T15951]  do_syscall_64+0xfa/0x3b0
[  407.120590][T15951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.123115][T15951] 
[  407.124148][T15951] Freed by task 793:
[  407.125835][T15951]  kasan_save_track+0x3e/0x80
[  407.127901][T15951]  kasan_save_free_info+0x46/0x50
[  407.130058][T15951]  __kasan_slab_free+0x5b/0x80
[  407.132132][T15951]  kmem_cache_free+0x18f/0x400
[  407.134138][T15951]  xfrm_state_gc_task+0x52d/0x6b0
[  407.136031][T15951]  process_scheduled_works+0xae1/0x17b0
[  407.137818][T15951]  worker_thread+0x8a0/0xda0
[  407.139355][T15951]  kthread+0x711/0x8a0
[  407.140744][T15951]  ret_from_fork+0x3fc/0x770
[  407.142283][T15951]  ret_from_fork_asm+0x1a/0x30
[  407.144184][T15951] 
[  407.145216][T15951] The buggy address belongs to the object at ffff888020fd0900
[  407.145216][T15951]  which belongs to the cache xfrm_state of size 928
[  407.150557][T15951] The buggy address is located 816 bytes inside of
[  407.150557][T15951]  freed 928-byte region [ffff888020fd0900, ffff888020fd0ca0)
[  407.155481][T15951] 
[  407.156381][T15951] The buggy address belongs to the physical page:
[  407.158781][T15951] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888020fd3180 pfn:0x20fd0
[  407.162776][T15951] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  407.165647][T15951] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  407.168498][T15951] page_type: f5(slab)
[  407.170209][T15951] raw: 00fff00000000040 ffff88801db423c0 dead000000000122 0000000000000000
[  407.173732][T15951] raw: ffff888020fd3180 00000000800e0002 00000000f5000000 0000000000000000
[  407.176751][T15951] head: 00fff00000000040 ffff88801db423c0 dead000000000122 0000000000000000
[  407.180183][T15951] head: ffff888020fd3180 00000000800e0002 00000000f5000000 0000000000000000
[  407.183854][T15951] head: 00fff00000000002 ffffea000083f401 00000000ffffffff 00000000ffffffff
[  407.187540][T15951] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  407.190980][T15951] page dumped because: kasan: bad access detected
[  407.193061][T15951] page_owner tracks the page as allocated
[  407.194848][T15951] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6451, tgid 6443 (syz.2.199), ts 86093090791, free_ts 85920476144
[  407.200844][T15951]  post_alloc_hook+0x240/0x2a0
[  407.202389][T15951]  get_page_from_freelist+0x21e4/0x22c0
[  407.204077][T15951]  __alloc_frozen_pages_noprof+0x181/0x370
[  407.205918][T15951]  alloc_pages_mpol+0x232/0x4a0
[  407.207512][T15951]  allocate_slab+0x8a/0x370
[  407.209217][T15951]  ___slab_alloc+0xbeb/0x1410
[  407.211074][T15951]  kmem_cache_alloc_noprof+0x283/0x3c0
[  407.213220][T15951]  xfrm_state_alloc+0x24/0x2f0
[  407.214896][T15951]  xfrm_state_find+0x37d4/0x5400
[  407.216907][T15951]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  407.219357][T15951]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  407.221512][T15951]  xfrm_lookup_route+0x3c/0x1c0
[  407.223141][T15951]  udp_sendmsg+0x142e/0x2170
[  407.224673][T15951]  __sock_sendmsg+0x19c/0x270
[  407.226156][T15951]  ____sys_sendmsg+0x52d/0x830
[  407.227650][T15951]  ___sys_sendmsg+0x21f/0x2a0
[  407.229064][T15951] page last free pid 6444 tgid 6443 stack trace:
[  407.231429][T15951]  __free_frozen_pages+0xbc4/0xd30
[  407.233149][T15951]  stack_depot_save_flags+0x436/0x860
[  407.234848][T15951]  kasan_save_track+0x4f/0x80
[  407.236771][T15951]  __kasan_kmalloc+0x93/0xb0
[  407.238535][T15951]  __kmalloc_cache_noprof+0x230/0x3d0
[  407.240515][T15951]  ref_tracker_alloc+0x133/0x460
[  407.242149][T15951]  sk_alloc+0x1b1/0x370
[  407.243788][T15951]  pfkey_create+0xdc/0x570
[  407.245464][T15951]  __sock_create+0x4b3/0x9f0
[  407.247386][T15951]  __sys_socket+0xd7/0x1b0
[  407.249244][T15951]  __x64_sys_socket+0x7a/0x90
[  407.250940][T15951]  do_syscall_64+0xfa/0x3b0
[  407.252761][T15951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.254775][T15951] 
[  407.255649][T15951] Memory state around the buggy address:
[  407.257770][T15951]  ffff888020fd0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  407.260721][T15951]  ffff888020fd0b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  407.263745][T15951] >ffff888020fd0c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  407.267161][T15951]                                      ^
[  407.269446][T15951]  ffff888020fd0c80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  407.272146][T15951]  ffff888020fd0d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  407.275565][T15951] ==================================================================
[  407.287521][T15951] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  407.290016][T15951] CPU: 1 UID: 0 PID: 15951 Comm: syz.2.3695 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  407.294316][T15951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  407.298182][T15951] Call Trace:
[  407.299535][T15951]  <TASK>
[  407.300549][T15951]  dump_stack_lvl+0x99/0x250
[  407.301952][T15951]  ? __asan_memcpy+0x40/0x70
[  407.303455][T15951]  ? __pfx_dump_stack_lvl+0x10/0x10
[  407.305181][T15951]  ? __pfx__printk+0x10/0x10
[  407.306981][T15951]  vpanic+0x281/0x750
[  407.308291][T15951]  ? preempt_schedule+0xae/0xc0
[  407.310416][T15951]  ? __pfx_vpanic+0x10/0x10
[  407.312367][T15951]  ? preempt_schedule_common+0x83/0xd0
[  407.314665][T15951]  ? preempt_schedule+0xae/0xc0
[  407.316744][T15951]  ? __pfx_preempt_schedule+0x10/0x10
[  407.318601][T15951]  panic+0xb9/0xc0
[  407.319848][T15951]  ? __pfx_panic+0x10/0x10
[  407.321326][T15951]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  407.323951][T15951]  ? xfrm_state_find+0x2cf2/0x5400
[  407.326055][T15951]  check_panic_on_warn+0x89/0xb0
[  407.328101][T15951]  ? xfrm_state_find+0x2cf2/0x5400
[  407.329843][T15951]  end_report+0x78/0x160
[  407.331233][T15951]  kasan_report+0x129/0x150
[  407.332896][T15951]  ? xfrm_state_find+0x2cf2/0x5400
[  407.334713][T15951]  xfrm_state_find+0x2cf2/0x5400
[  407.336377][T15951]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  407.338447][T15951]  ? xfrm_state_find+0x1da/0x5400
[  407.340066][T15951]  ? __pfx_xfrm_state_find+0x10/0x10
[  407.342432][T15951]  ? kasan_save_stack+0x4d/0x60
[  407.344569][T15951]  ? kasan_save_stack+0x3e/0x60
[  407.346496][T15951]  ? kasan_record_aux_stack+0xbd/0xd0
[  407.348863][T15951]  ? ip_route_output_key_hash_rcu+0x18eb/0x23d0
[  407.350848][T15951]  ? ip_route_output_key_hash+0x1b9/0x2e0
[  407.352572][T15951]  ? __ip4_datagram_connect+0x8f4/0x1270
[  407.354251][T15951]  ? __ip6_datagram_connect+0x9f0/0x1150
[  407.356045][T15951]  ? ip6_datagram_connect_v6_only+0x63/0xa0
[  407.357934][T15951]  ? __x64_sys_connect+0x7a/0x90
[  407.359634][T15951]  ? do_syscall_64+0xfa/0x3b0
[  407.361316][T15951]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.363435][T15951]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  407.365576][T15951]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  407.367642][T15951]  ? __lock_acquire+0xab9/0xd20
[  407.369171][T15951]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  407.371111][T15951]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  407.373019][T15951]  ? xfrm_expand_policies+0x41f/0x6a0
[  407.374995][T15951]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  407.376659][T15951]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  407.378778][T15951]  ? rcuref_put+0x1b7/0x210
[  407.380421][T15951]  ? __pfx_rcuref_put+0x10/0x10
[  407.382131][T15951]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  407.383965][T15951]  xfrm_lookup_route+0x3c/0x1c0
[  407.385518][T15951]  __ip4_datagram_connect+0x9a5/0x1270
[  407.387689][T15951]  __ip6_datagram_connect+0x9f0/0x1150
[  407.389525][T15951]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  407.391311][T15951]  ? __local_bh_enable_ip+0x12d/0x1c0
[  407.392936][T15951]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  407.394886][T15951]  ip6_datagram_connect_v6_only+0x63/0xa0
[  407.396656][T15951]  __sys_connect+0x316/0x440
[  407.398067][T15951]  ? __pfx___sys_connect+0x10/0x10
[  407.399682][T15951]  ? rcu_is_watching+0x15/0xb0
[  407.401151][T15951]  __x64_sys_connect+0x7a/0x90
[  407.402659][T15951]  do_syscall_64+0xfa/0x3b0
[  407.404324][T15951]  ? lockdep_hardirqs_on+0x9c/0x150
[  407.406456][T15951]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.408942][T15951]  ? exc_page_fault+0x9f/0xf0
[  407.410914][T15951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.413217][T15951] RIP: 0033:0x7f9b0518ebe9
[  407.415045][T15951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  407.422140][T15951] RSP: 002b:00007f9b0600f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  407.425052][T15951] RAX: ffffffffffffffda RBX: 00007f9b053b5fa0 RCX: 00007f9b0518ebe9
[  407.428047][T15951] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005
[  407.431275][T15951] RBP: 00007f9b05211e19 R08: 0000000000000000 R09: 0000000000000000
[  407.434320][T15951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  407.436935][T15951] R13: 00007f9b053b6038 R14: 00007f9b053b5fa0 R15: 00007ffe7939cdd8
[  407.440065][T15951]  </TASK>
[  407.441870][T15951] Kernel Offset: disabled
[  407.443377][T15951] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:53:06  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820afea4 RBX=00000000000007f0 RCX=ffff8880200d5640 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc9000444fdd0 RSP=ffffc9000444fc00
R8 =0000000000000004 R9 =0000000000000004 R10=ffffc9000444fd0c R11=fffff52000889faa
R12=dffffc0000000000 R13=ffff888020325b00 R14=0000000000000000 R15=ffff88802315cf80
RIP=ffffffff820b0048 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555fdc3500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc1fc85b78 CR3=0000000022290000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fb848812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000017c7 RDI=00000000000017c8 RBP=00000000000003f8 RSP=ffffc90002b2ed10
R8 =ffff888020170237 R9 =1ffff1100402e046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9914 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9b0600f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2fd5e7 CR3=00000001065ce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9b05387498 00007f9b05387470 XMM03=00007f9b053874a8 00007f9b053874a0
XMM04=00007f9b05eed100 00007f9b05387460 XMM05=00007f9b05387478 00007f9b053874c0
XMM06=00007f9b053874b8 00007f9b053874b0 XMM07=00007f9b053874a8 00007f9b053874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f9b05212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
