last executing test programs:

1m19.71384489s ago: executing program 2 (id=266):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1m19.705700076s ago: executing program 2 (id=267):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a31d34b5cb9f53e1"], 0x0)

1m18.477913942s ago: executing program 2 (id=291):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
getpeername$l2tp6(r0, 0x0, 0x0)

1m18.413717413s ago: executing program 2 (id=294):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x3810082, &(0x7f0000001880)={[{@noadinicb}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x400}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@gid_forget}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@longad}]}, 0xfd, 0xc32, &(0x7f0000001a40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x4000, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000ac0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]})

1m18.333566343s ago: executing program 2 (id=296):
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x87, 0xa7, 0x0, 0x40, 0x3f0, 0x307, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x10, [{{0x9, 0x4, 0x17, 0x0, 0x2, 0x44, 0xb1, 0xb6, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xfe}}]}}]}}]}}, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)

1m18.008731253s ago: executing program 2 (id=301):
syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0)

1m17.835096011s ago: executing program 32 (id=301):
syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0)

1.629234603s ago: executing program 3 (id=1314):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x14, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x50}}, 0x0)

1.542574166s ago: executing program 3 (id=1316):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd0903280005001400000060000000402811"], 0xfdef)

1.439877213s ago: executing program 3 (id=1319):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5"], 0x1, 0x442f, &(0x7f0000004480)="$eJzs3c9rHFUcAPA3k7RJan8ktYcKggsWFJWQ9KRGME3TH0lbI9UWESHdJNs2ssmWZCMeeog3wZPgQTwUBW85SQ5e65/gxaOeC3rwIghiZHdn053JLlnrbmLL53PYt/N+J9+Z2TeH3RcnyrcXV3OLq7n8cq40f3P1dO6jUnFtqRDiPdJ0/AN7Nz7t6cZ50kafff995jQzc/b8O9dPh/DDwk8Ptra2tkJFb2hqtOH9H7/fnW9M6+JMm0q/zXvrlPdDCCd2zKuiJ4Tw3vchRCGEM0neRJIOhBCOhFrZ9buf3ch1aDZ9Sbo5dmp6495m6789CuGr4jOv3Fr69fmesV9e6tDwAAAAAAAAAAAAAAAAAAA85i5cnbn29shouB+F3o2o9n3dvsbyJG31/ditjnluD/5aAAAAAAAAAAAAAAAAAAAA+H96+P3/XHQ82rlf92SSjrdov/Vm9+dI90y9NTN5bmQ02f89aiiZOVZ5fTXJ+u1MTxhqsu97dv/3M5n+m+//HnVs/vX51ccdDFE8nDqO4+HhEL5JNn4/GR2Ki6XV8ss3S2vLCx2bxmMrHf/a7v2p6CQb+rcb/4lM/93f///pHWdT5fhG506xJ1o6/j0t6/WHqK34n82024v48+jS8e+t5g00Vhiv3QC+/SQKn/fuHv/JTP/div/REEIuqsw1l7oDVNYwlfxW6xXS0vE/UM1L3TqTf2Ql/s2u/z8z8T+X6X+/7v/r2Q8imkrH/2A1rz9V4+H1PxTvfv2fz/S/H/GvzH/d539b0vFPfvmtN1Wl+p9s9/5/IdN/t+J/LU7meTRKnQEbUS2/1e/VkZaOf/+O8ofPf3Fb67+LmfZ79fxXH7f+/Fe//b8Y1Z7/aC4d/4GW9dq9/qcy7bp9/x+vrv94VOn4H6rmpdfOg9XXduM/nem/O/E/uP1uPLP+/7uvtgD42vqvLen4P1XLjBtrrFdfq+u/aPf1/6VM//ux/qvMfz3u7qhPinT8D7esV4n/j218/l/OtOt+/EMYsdZ/ZOn4H2lZr3r99+8e/yuZdt2O/wvd7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgMTCRpIMhiodTx3E8PBzC2eT4ZDgUzeUXZueKpfkPVkOYTPJz4Xh0q1iayxdnF5dLC4XZfLFYmg/hXFJ+IvRHq8VSeXYpf+f8dl8D0e1CfqU8V8iXQwgXkvxnw5F6X3OL5aX8nRDCxe2yY3Fp5c7t/PLswuLK6yMjIyNhansOQ1Hh43JhuVwbvVYawvR228GoYXLV4kvbczkcfVhaW1nOF6v5lxvaFEvz+WJDmytJ2RdhKCqvrC3P58uF2WLpVn28/TSepJNTV9+9enl0R/mNqJZO7O20AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiX7o+99mUIobd2FIcQxutvomb1v/u58MbsX1c+3Rw7Nb1xb/NBq3oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWGXjlEqBoIwAM+uRazEY1iFpLONKKKFEcETaO0JPIwexUt4BwsLWwsR4gYkL3mkea/6vmZgf3Z2YAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1rm86+9vmzYixeFPVcXb4/vH//y61Jez+fsHe5iR3bm66c8vmrb8e9rIT8vRZ5eH9Pvr+SFm6uh1sifTffozNH062jLX0r4tzTe+exwp1xHRlfwk5VzX63oBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8sgMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUXfBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArwAAAP//hykaaw==")
symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.069123368s ago: executing program 3 (id=1328):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000194c0)='numa_maps\x00')
pread64(r0, 0x0, 0x0, 0x0)

805.96919ms ago: executing program 3 (id=1331):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000004c0)={0x30, 0x0, 0x2000000, 0x0, 0x0, 0x10000, 0x6, 0x0})

739.836681ms ago: executing program 3 (id=1333):
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRES32, @ANYBLOB=',wf', @ANYRESHEX, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e55"])
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1000905"], 0x0)

489.9634ms ago: executing program 0 (id=1339):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x89)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

489.688612ms ago: executing program 0 (id=1340):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x202, 0x158}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0, 0x8000000006, 0x0, 0xe448})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{0x0}], 0x1)
io_uring_enter(r0, 0x26c8, 0x0, 0x1, 0x0, 0x10)

379.470762ms ago: executing program 0 (id=1341):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440), &(0x7f0000000180)=@v2={0x2000000, [{0x4, 0xfffffff7}, {0xfffffffd, 0x2}]}, 0x14, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11)

299.534528ms ago: executing program 0 (id=1342):
r0 = syz_open_dev$radio(&(0x7f00000019c0), 0x3, 0x2)
ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000002c00)={0x0, "7df68ef20d5c78394e8e01b1661f6e3f13ca611cd732be191b657b5bdf2c9d16", 0x80, 0xffff, 0x1c, 0x19, 0x5})

238.491584ms ago: executing program 0 (id=1343):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="ffffffff0a000200e1"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x200000c0)
r2 = socket(0x10, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26000411}, 0x800)

238.289813ms ago: executing program 1 (id=1344):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000000e0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)

157.452223ms ago: executing program 0 (id=1345):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private1, 0x7fff}]}, &(0x7f0000000000)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000001580)={0x0, @in6={{0xa, 0x0, 0x0, @private1}}}, &(0x7f0000001640)=0x90)

157.194948ms ago: executing program 1 (id=1346):
lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), 0x0, 0xfe37, 0x0)

157.104996ms ago: executing program 1 (id=1347):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000380)={'veth1_to_bond\x00'})

79.77515ms ago: executing program 1 (id=1348):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000200000850000000500000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)

79.580741ms ago: executing program 1 (id=1349):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0xffffffffffffff52}}, 0x1006)

0s ago: executing program 1 (id=1350):
syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000100)='./bus\x00', 0xa18008, &(0x7f0000000480)=ANY=[@ANYBLOB="6167655f657874656e745f63616368652c6e6f6c617a7974696d652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c61636c2c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c6261636b67726f756e645f67633d6f66662c6e6f626172726965722c636f6d70726573735f63616368652c6d6f64653d6c66732c00a0f136a7b12c237938b84e413b4410176f83a54dc492582695e005d110d725abbe2adec1ac2f6f77d172f0a20b3c1a8f19a6b28a8e0ba53dc3bf8ebe1ba50407cd64781927026076251050bd3ce7"], 0x1, 0x5505, &(0x7f00000079c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)

kernel console output (not intermixed with test programs):

831b3f791
[   75.738658][ T6084] XFS (loop0): Ending clean mount
[   75.742657][ T6084] XFS (loop0): Quotacheck needed: Please wait.
[   75.763232][ T6084] XFS (loop0): Quotacheck: Done.
[   75.793887][ T5844] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   75.856435][ T5895] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   75.992794][ T6103] loop0: detected capacity change from 0 to 8
[   76.012911][ T5895] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.014607][ T6103] SQUASHFS error: lzo decompression failed, data probably corrupt
[   76.020000][ T6103] SQUASHFS error: Failed to read block 0x91: -5
[   76.022502][ T6103] SQUASHFS error: Unable to read metadata cache entry [8f]
[   76.025334][ T6103] SQUASHFS error: Unable to read inode 0x11f
[   76.039224][ T5895] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   76.060627][ T5895] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[   76.064254][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   76.078869][ T5895] usb 2-1: SerialNumber: syz
[   76.103330][ T5895] usb 2-1: 0:2 : does not exist
[   76.248236][ T6117] loop2: detected capacity change from 0 to 16
[   76.261360][ T6117] erofs (device loop2): mounted with root inode @ nid 36.
[   76.504968][   T24] usb 2-1: USB disconnect, device number 3
[   76.571626][ T6135] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.344960][ T6145] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[   77.415799][ T6149] loop1: detected capacity change from 0 to 1024
[   77.430044][ T6149] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   77.462706][ T6149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.498521][ T6149] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.100: missing EA_INODE flag
[   77.506103][ T6149] EXT4-fs (loop1): Remounting filesystem read-only
[   77.511462][ T6149] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   77.558219][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.563661][ T6162] input: syz1 as /devices/virtual/input/input5
[   77.770802][ T6177] loop1: detected capacity change from 0 to 512
[   77.782710][ T6177] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.112: casefold flag without casefold feature
[   77.787744][ T6177] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.112: couldn't read orphan inode 15 (err -117)
[   77.792353][ T6177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.855424][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.920643][ T6180] sit1: entered promiscuous mode
[   77.923675][ T6180] sit1: entered allmulticast mode
[   77.954456][ T6182] loop0: detected capacity change from 0 to 2048
[   78.139546][ T6190] loop1: detected capacity change from 0 to 8
[   78.254104][ T6194] loop1: detected capacity change from 0 to 4096
[   78.297898][ T6194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.327594][ T6194] fs-verity (loop1, inode 16): Unsupported log_blocksize: 13
[   78.359262][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.626727][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   78.786543][   T24] usb 1-1: Using ep0 maxpacket: 32
[   78.792341][   T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[   78.795583][   T24] usb 1-1: config 0 has no interface number 0
[   78.798340][   T24] usb 1-1: config 0 interface 184 has no altsetting 0
[   78.803262][   T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   78.807405][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.816950][   T24] usb 1-1: Product: syz
[   78.818641][   T24] usb 1-1: Manufacturer: syz
[   78.820368][   T24] usb 1-1: SerialNumber: syz
[   78.841139][   T24] usb 1-1: config 0 descriptor??
[   78.848714][   T24] smsc75xx v1.0.0
[   78.864819][ T6222] loop1: detected capacity change from 0 to 128
[   78.886772][ T6222] qnx6: wrong signature (magic) in superblock #1.
[   79.466558][   T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   79.471083][   T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   79.501559][ T6245] loop1: detected capacity change from 0 to 8
[   80.485769][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.141'.
[   80.553071][ T6253] loop1: detected capacity change from 0 to 512
[   80.558835][ T6253] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   80.749082][   T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   80.761350][   T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71
[   80.776386][   T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   80.780459][   T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[   80.799426][   T24] usb 1-1: USB disconnect, device number 3
[   80.823156][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'.
[   80.854982][ T6263] loop1: detected capacity change from 0 to 512
[   80.865562][ T6263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.929885][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.969382][ T6269] loop1: detected capacity change from 0 to 128
[   80.978289][ T6269] hpfs: Bad version 183,140. Mount readonly to go around
[   80.981563][ T6269] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz
[   81.150957][ T5910] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   81.328346][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.332952][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.337481][ T5910] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[   81.340798][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.354228][ T5910] usb 3-1: config 0 descriptor??
[   81.354400][ T6284] loop1: detected capacity change from 0 to 4096
[   81.372509][ T6284] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   81.380696][ T6284] ntfs3(loop1): mft corrupted
[   81.382783][ T6284] ntfs3(loop1): Failed to load $MFT.
[   81.634973][ T6295] loop0: detected capacity change from 0 to 1024
[   81.704452][   T33] audit: type=1800 audit(1755042712.547:4): pid=6295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.161" name="file1" dev="loop0" ino=20 res=0 errno=0
[   81.770366][ T5910] razer 0003:1532:010E.0001: unknown main item tag 0x3
[   81.772658][ T5910] razer 0003:1532:010E.0001: unbalanced collection at end of report description
[   81.800656][ T5910] razer 0003:1532:010E.0001: probe with driver razer failed with error -22
[   81.941837][ T6311] loop0: detected capacity change from 0 to 4096
[   81.969295][ T5312] usb 3-1: USB disconnect, device number 4
[   82.014188][ T6314] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   82.044249][ T6311] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[   82.051314][ T6311] Remounting filesystem read-only
[   82.470780][ T6341] loop1: detected capacity change from 0 to 256
[   82.584493][ T6347] loop0: detected capacity change from 0 to 2048
[   82.604452][ T6351] capability: warning: `syz.2.188' uses 32-bit capabilities (legacy support in use)
[   82.644112][ T6354] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   82.683568][ T6356] netlink: 132 bytes leftover after parsing attributes in process `syz.1.190'.
[   82.966295][ T5909] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   82.976386][ T5910] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   83.126385][ T5910] usb 1-1: Using ep0 maxpacket: 16
[   83.127191][ T5909] usb 3-1: Using ep0 maxpacket: 16
[   83.131317][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.135975][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.141868][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.142660][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   83.145874][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.145898][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   83.145934][ T5909] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   83.152623][ T5910] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   83.157331][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.168974][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.174416][ T5909] usb 3-1: config 0 descriptor??
[   83.175799][ T5910] usb 1-1: config 0 descriptor??
[   83.594934][ T5909] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   83.603027][ T5909] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max
[   83.607483][ T5910] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[   83.610317][ T5910] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max
[   83.627319][ T5909] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   83.630295][ T5909] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   83.633307][ T5909] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   83.645634][ T5909] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   83.650002][ T5909] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   83.655165][ T5909] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   83.661340][ T5909] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   83.802841][ T5910] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   83.808613][ T5910] microsoft 0003:045E:07DA.0002: no inputs found
[   83.811546][ T5910] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway
[   83.822420][ T5909] microsoft 0003:045E:07DA.0003: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[   83.826120][ T5909] microsoft 0003:045E:07DA.0003: no inputs found
[   83.827144][ T5910] usb 1-1: USB disconnect, device number 4
[   83.831306][ T5909] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway
[   84.025464][ T5909] usb 3-1: USB disconnect, device number 5
[   84.237487][ T6379] sd 0:0:0:0: PR command failed: 1026
[   84.239750][ T6379] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[   84.242516][ T6379] sd 0:0:0:0: Add. Sense: Invalid command operation code
[   84.653030][ T6407] loop1: detected capacity change from 0 to 1024
[   84.689555][ T6407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   84.694586][ T6407] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.710074][ T6407] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.214: lblock 0 mapped to illegal pblock 0 (length 1)
[   84.717623][ T6407] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   84.723025][ T6407] EXT4-fs (loop1): This should not happen!! Data will be lost
[   84.723025][ T6407] 
[   84.734252][ T6407] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.214: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   84.743373][ T6407] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem
[   84.768798][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   84.842493][ T6416] loop1: detected capacity change from 0 to 2048
[   84.849223][ T6416] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.287884][ T6431] loop1: detected capacity change from 0 to 8
[   86.303456][ T6431] SQUASHFS error: Unable to read inode 0x127
[   86.459403][   T10] cfg80211: failed to load regulatory.db
[   87.107238][ T6442] loop2: detected capacity change from 0 to 256
[   87.116905][ T6427] loop0: detected capacity change from 0 to 32768
[   87.154102][ T6427] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   87.161043][ T6442] FAT-fs (loop2): Directory bread(block 64) failed
[   87.176734][ T6442] FAT-fs (loop2): Directory bread(block 65) failed
[   87.189635][ T6442] FAT-fs (loop2): Directory bread(block 66) failed
[   87.207520][ T6442] FAT-fs (loop2): Directory bread(block 67) failed
[   87.210088][ T6442] FAT-fs (loop2): Directory bread(block 68) failed
[   87.212384][ T6442] FAT-fs (loop2): Directory bread(block 69) failed
[   87.220511][ T6427] XFS (loop0): Ending clean mount
[   87.231724][ T6442] FAT-fs (loop2): Directory bread(block 70) failed
[   87.234060][ T6442] FAT-fs (loop2): Directory bread(block 71) failed
[   87.241923][ T6442] FAT-fs (loop2): Directory bread(block 72) failed
[   87.244056][ T6442] FAT-fs (loop2): Directory bread(block 73) failed
[   87.349148][ T5844] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   87.667886][ T6454] loop2: detected capacity change from 0 to 1024
[   87.685014][ T6454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.635420][ T6479] netlink: 'syz.1.242': attribute type 10 has an invalid length.
[   88.710633][ T6469] loop0: detected capacity change from 0 to 32768
[   88.747664][ T6469] JBD2: Ignoring recovery information on journal
[   88.820322][ T6469] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   88.923350][ T5844] ocfs2: Unmounting device (7,0) on (node local)
[   89.078905][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.434361][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'.
[   89.485029][ T6509] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526
[   89.866446][ T5910] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   90.018458][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.022334][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0
[   90.027825][ T5910] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[   90.031012][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.033627][ T5910] usb 1-1: Product: syz
[   90.035254][ T5910] usb 1-1: Manufacturer: syz
[   90.037568][ T5910] usb 1-1: SerialNumber: syz
[   90.040798][ T5910] usb 1-1: config 0 descriptor??
[   90.045340][ T5910] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[   90.055031][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   90.059981][ T5910] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[   90.062887][ T5910] usb 1-1: media controller created
[   90.078348][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   90.117087][ T5910] DVB: Unable to find symbol tda10046_attach()
[   90.119336][ T5910] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[   90.122179][ T5910] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[   90.451667][ T5910] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[   90.457532][ T5910] usb 1-1: USB disconnect, device number 5
[   90.841296][ T6542] netlink: 'syz.2.265': attribute type 16 has an invalid length.
[   90.844557][ T6542] netlink: 'syz.2.265': attribute type 17 has an invalid length.
[   91.226514][ T5894] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   91.291710][ T6550] loop0: detected capacity change from 0 to 32768
[   91.301218][ T6550] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section members_v2: device 0: freespace initialized but fs has no alloc info
[   91.301218][ T6550] members_v2 (size 152):
[   91.301218][ T6550] Device:                        0
[   91.301218][ T6550]   Label:                       (none)
[   91.301218][ T6550]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[   91.301218][ T6550]   Size:                        16777216
[   91.301218][ T6550]   read errors:                 0
[   91.301218][ T6550]   write errors:                0
[   91.301218][ T6550]   checksum errors:             0
[   91.301218][ T6550]   seqread iops:                0
[   91.301218][ T6550]   seqwrite iops:               0
[   91.301218][ T6550]   randread iops:               0
[   91.301218][ T6550]   randwrite iops:              0
[   91.301218][ T6550]   Bucket size:                 131072
[   91.301218][ T6550]   First bucket:                0
[   91.301218][ T6550]   Buckets:                     128
[   91.301218][ T6550]   Last mount:                  1714681267
[   91.301218][ T6550]   Last superblock write:       42
[   91.301218][ T6550]   State:                       rw
[   91.301218][ T6550]   Data allowed:                journal,btree,user
[   91.301218][ T6550]   Has data:                    (none)
[   91.301218][ T6550]   Btree allocated bitmap blocksize:256
[   91.301218][ T6550]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[   91.301218][ T6550]  
[   91.301351][ T6550] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[   91.346756][    C1] vkms_vblank_simulate: vblank timer overrun
[   91.380780][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[   91.384595][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 203, changing to 4
[   91.396585][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 46388, setting to 1023
[   91.400091][ T5894] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[   91.402979][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.417628][ T5894] usb 3-1: config 0 descriptor??
[   91.625517][ T5894] ath6kl: Failed to submit usb control message: -71
[   91.635535][ T5894] ath6kl: unable to send the bmi data to the device: -71
[   91.639676][ T5894] ath6kl: Unable to send get target info: -71
[   91.657348][ T5894] ath6kl: Failed to init ath6kl core: -71
[   91.667042][ T5894] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[   91.691183][ T5894] usb 3-1: USB disconnect, device number 6
[   92.272499][ T6602] loop2: detected capacity change from 0 to 2048
[   92.285170][ T6602] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   92.298413][ T6602] overlayfs: upper fs needs to support d_type.
[   92.302088][ T6602] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   92.304870][ T6602] overlayfs: failed to set xattr on upper
[   92.308181][ T6602] overlayfs: ...falling back to redirect_dir=nofollow.
[   92.310423][ T6602] overlayfs: ...falling back to index=off.
[   92.326713][ T5853] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[   92.332364][ T5853] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[   92.506352][  T792] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   92.619335][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.656284][  T792] usb 1-1: Using ep0 maxpacket: 8
[   92.667343][  T792] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[   92.669870][  T792] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   92.672892][  T792] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   92.675937][  T792] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   92.683953][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.688391][  T792] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   92.694381][  T792] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   92.698916][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.752783][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.811513][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.926751][  T792] usb 1-1: usb_control_msg returned -32
[   92.929842][  T792] usbtmc 1-1:16.0: can't read capabilities
[   92.973252][   T13] bridge_slave_1: left allmulticast mode
[   92.979049][   T13] bridge_slave_1: left promiscuous mode
[   92.984042][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.992141][   T13] bridge_slave_0: left allmulticast mode
[   92.994036][   T13] bridge_slave_0: left promiscuous mode
[   92.995954][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.150625][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.153992][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.160543][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.165829][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.169001][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.291229][ T6624] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[   93.333864][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.339285][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.342940][   T13] bond0 (unregistering): Released all slaves
[   93.494867][  T792] usb 1-1: USB disconnect, device number 6
[   93.629202][ T6620] chnl_net:caif_netlink_parms(): no params data found
[   93.898747][ T6647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   93.901486][ T6647] IPv6: NLM_F_CREATE should be set when creating new route
[   94.076807][   T13] hsr_slave_0: left promiscuous mode
[   94.082202][   T13] hsr_slave_1: left promiscuous mode
[   94.084463][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.087927][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.091357][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.100540][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.124431][   T13] veth1_macvtap: left promiscuous mode
[   94.128183][   T13] veth0_macvtap: left promiscuous mode
[   94.130086][   T13] veth1_vlan: left promiscuous mode
[   94.132763][   T13] veth0_vlan: left promiscuous mode
[   94.462785][ T6654] loop0: detected capacity change from 0 to 32768
[   94.472829][ T6654] bcachefs (/dev/loop0): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 1497488896)
[   94.479571][ T6654] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[   94.717880][   T13] team0 (unregistering): Port device team_slave_1 removed
[   94.853219][   T13] team0 (unregistering): Port device team_slave_0 removed
[   95.236703][ T5851] Bluetooth: hci2: command tx timeout
[   95.700799][ T6620] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.703168][ T6620] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.705503][ T6620] bridge_slave_0: entered allmulticast mode
[   95.714539][ T6620] bridge_slave_0: entered promiscuous mode
[   95.777578][ T6620] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.779900][ T6620] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.794930][ T6620] bridge_slave_1: entered allmulticast mode
[   95.803156][ T6620] bridge_slave_1: entered promiscuous mode
[   95.905763][ T6620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.926012][ T6620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.061537][ T6620] team0: Port device team_slave_0 added
[   96.088903][ T6620] team0: Port device team_slave_1 added
[   96.181768][ T6620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.184310][ T6620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.193666][ T6620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.217986][ T6620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.220910][ T6620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.239872][ T6620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.418785][ T6620] hsr_slave_0: entered promiscuous mode
[   96.422281][ T6620] hsr_slave_1: entered promiscuous mode
[   96.425086][ T6620] debugfs: 'hsr0' already exists in 'hsr'
[   96.430743][ T6620] Cannot create hsr debugfs directory
[   96.440824][ T6688] loop0: detected capacity change from 0 to 2048
[   96.445233][ T6688] UDF-fs: warning (device loop0): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[   97.231664][ T6620] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   97.245248][ T6620] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   97.265531][ T6620] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   97.278656][ T6620] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   97.311326][ T5851] Bluetooth: hci2: command tx timeout
[   97.441379][ T6620] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.479380][ T6719] tipc: Started in network mode
[   97.482581][ T6719] tipc: Node identity ac1414aa, cluster identity 4711
[   97.491477][ T6719] tipc: Enabled bearer <udp:syz2>, priority 10
[   97.500997][ T6620] 8021q: adding VLAN 0 to HW filter on device team0
[   97.517311][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.520157][ T6042] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.539255][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.541583][ T6042] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.711637][   T33] audit: type=1326 audit(1755042728.567:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.0.329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6142f8ebe9 code=0x7ffc0000
[   97.748505][   T33] audit: type=1326 audit(1755042728.597:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.0.329" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6142f8d550 code=0x7ffc0000
[   97.771545][   T33] audit: type=1326 audit(1755042728.597:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.0.329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6142f8ebe9 code=0x7ffc0000
[   97.774848][ T6737] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.330'.
[   97.796983][   T33] audit: type=1326 audit(1755042728.597:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.0.329" exe="/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f6142f8ebe9 code=0x7ffc0000
[   97.805537][   T33] audit: type=1326 audit(1755042728.597:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.0.329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6142f8ebe9 code=0x7ffc0000
[   97.824066][ T6620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.915619][ T6620] veth0_vlan: entered promiscuous mode
[   97.934533][ T6620] veth1_vlan: entered promiscuous mode
[   98.003006][ T6620] veth0_macvtap: entered promiscuous mode
[   98.020231][ T6620] veth1_macvtap: entered promiscuous mode
[   98.031037][ T6749] capability: warning: `syz.1.335' uses deprecated v2 capabilities in a way that may be insecure
[   98.048578][ T6749] 9pnet_rdma: rdma_create_trans (6749): problem binding to privport: 13
[   98.053964][ T6620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.065697][ T6620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.119708][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.143432][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.151164][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.154906][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.188262][ T6757] tipc: Failed to remove unknown binding: 66,1,1/0:1788566586/1788566588
[   98.213760][ T6757] tipc: Failed to remove unknown binding: 66,1,1/0:1788566586/1788566588
[   98.323651][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.329995][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.350589][ T6764] netlink: 104 bytes leftover after parsing attributes in process `syz.0.338'.
[   98.438448][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.449809][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.647422][ T5894] tipc: Node number set to 2886997162
[   98.769277][ T6787] overlayfs: failed to clone lowerpath
[   98.850419][ T6788] overlayfs: failed to clone upperpath
[   99.307967][ T6795] loop3: detected capacity change from 0 to 32768
[   99.315466][ T6795] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.348 (6795)
[   99.347194][ T6795] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   99.351723][ T6795] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[   99.355540][ T6795] BTRFS info (device loop3): using free-space-tree
[   99.386643][ T5851] Bluetooth: hci2: command tx timeout
[   99.612390][ T6620] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   99.884870][ T6842] nftables ruleset with unbound set
[  100.217872][ T6848] loop0: detected capacity change from 0 to 32768
[  100.221427][ T6850] loop3: detected capacity change from 0 to 32768
[  100.272717][ T6850] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  100.331659][ T6620] ocfs2: Unmounting device (7,3) on (node local)
[  101.043849][ T6881] loop0: detected capacity change from 0 to 32768
[  101.063224][ T6881] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type clock overruns end of section
[  101.063224][ T6881] clean (size 2912):
[  101.063224][ T6881] flags:          0
[  101.063224][ T6881] journal_seq:    10
[  101.063224][ T6881] dev_usage: 
[  101.063224][ T6881] usage: type=key_version v=0
[  101.063224][ T6881] (unknown jset_entry_type 255)
[  101.063224][ T6881] usage: type=reserved v=0
[  101.063224][ T6881] usage: type=reserved v=0
[  101.063224][ T6881] usage: type=reserved v=0
[  101.063224][ T6881] data_usage: btree: 1/1 [0]=2816
[  101.063224][ T6881] data_usage: journal: 1/1 [0]=0
[  101.063224][ T6881] data_usage: user: 1/1 [0]=16
[  101.063224][ T6881] dev_usage: dev=0  
[  101.063224][ T6881]   free: buckets=83 sectors=0 fragmented=0
[  101.063224][ T6881]   sb: buckets=25 sectors=6152 fragmented=248
[  101.063224][ T6881]   journal: buckets=8 sectors=2048 fragmented=0
[  101.063224][ T6881]   btree: buckets=11 sectors=2816 fragmented=0
[  101.063224][ T6881]   user: buckets=1 sectors=16 fragmented=240
[  101.063224][ T6881]   cached: buckets=0 sectors=0 fragmented=0
[  101.063224][ T6881]   parity: buckets=0 sectors=0 fragmented=0
[  101.063224][ T6881]   stripe: buckets=0 sectors=0 fragmented=0
[  101.063224][ T6881]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  101.063224][ T6881]   need_discard: buckets=0 sectors=0 fragmented=0
[  101.063224][ T6881] 
[  101.115391][ T6881] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  101.251583][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.384'.
[  101.294331][ T6901] loop3: detected capacity change from 0 to 4096
[  101.314571][ T6901] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  101.466365][ T5851] Bluetooth: hci2: command tx timeout
[  101.604137][ T6916] loop0: detected capacity change from 0 to 1024
[  101.691643][   T52] hfsplus: b-tree write err: -5, ino 3
[  101.700493][ T5844] hfsplus: node 4:3 still has 1 user(s)!
[  101.845408][ T6920] netlink: 'syz.0.391': attribute type 1 has an invalid length.
[  101.855936][ T6920] netlink: 88 bytes leftover after parsing attributes in process `syz.0.391'.
[  101.943749][ T6922] loop0: detected capacity change from 0 to 512
[  101.993434][ T6922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.011810][ T6922] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.027642][ T6901] ntfs3(loop3): ino=19, mi_enum_attr
[  102.032800][ T6901] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  102.104508][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.230764][ T6935] ptrace attach of "/syz-executor exec"[6620] was attempted by "\x22"[6935]
[  102.257231][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'.
[  102.289176][ T6935] loop3: detected capacity change from 0 to 4096
[  102.361190][   T33] audit: type=1800 audit(1755042733.217:10): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.397" name="file1" dev="loop3" ino=33 res=0 errno=0
[  102.835844][ T6935] ntfs3(loop3): ino=1f, mi_enum_attr
[  103.061285][ T5910] kernel write not supported for file [eventfd] (pid: 5910 comm: kworker/1:5)
[  103.512900][ T6988] overlayfs: conflicting options: userxattr,redirect_dir=follow
[  103.577101][ T6992] loop0: detected capacity change from 0 to 128
[  103.582281][ T6992] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  103.591418][ T6992] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  103.817055][ T5910] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  103.906416][  T792] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  103.987885][ T5910] usb 4-1: config 0 has an invalid interface number: 83 but max is 0
[  103.990582][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.997298][ T5910] usb 4-1: config 0 has no interface number 0
[  103.999459][ T5910] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  104.002352][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.008505][ T5910] usb 4-1: config 0 descriptor??
[  104.017103][ T5910] ttusbir 4-1:0.83: cannot find expected altsetting
[  104.057142][  T792] usb 1-1: Using ep0 maxpacket: 16
[  104.061721][  T792] usb 1-1: unable to get BOS descriptor or descriptor too short
[  104.071116][  T792] usb 1-1: config 9 has an invalid interface number: 111 but max is 0
[  104.074240][  T792] usb 1-1: config 9 has no interface number 0
[  104.077997][  T792] usb 1-1: config 9 interface 111 has no altsetting 0
[  104.083310][  T792] usb 1-1: New USB device found, idVendor=05ac, idProduct=2536, bcdDevice=e0.5e
[  104.085138][ T7004] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  104.089239][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.090616][ T7004] overlayfs: failed to set xattr on upper
[  104.092835][  T792] usb 1-1: Product: syz
[  104.094655][ T7004] overlayfs: ...falling back to index=off.
[  104.094662][ T7004] overlayfs: ...falling back to uuid=null.
[  104.097148][  T792] usb 1-1: Manufacturer: syz
[  104.103716][  T792] usb 1-1: SerialNumber: syz
[  104.232146][ T5312] usb 4-1: USB disconnect, device number 2
[  104.337515][  T792] usb 1-1: USB disconnect, device number 7
[  104.708627][ T7030] netlink: 'syz.1.440': attribute type 83 has an invalid length.
[  104.816687][ T7037] loop3: detected capacity change from 0 to 1024
[  104.820299][ T7037] EXT4-fs: inline encryption not supported
[  104.823375][ T7037] EXT4-fs: Ignoring removed i_version option
[  104.852198][ T7037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.935777][ T6620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.203157][ T7064] syz.1.454 uses obsolete (PF_INET,SOCK_PACKET)
[  105.256879][ T5910] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  105.455377][ T5910] usb 4-1: unable to get BOS descriptor or descriptor too short
[  105.479432][ T5910] usb 4-1: not running at top speed; connect to a high speed hub
[  105.487509][ T5910] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  105.490518][ T5910] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  105.538075][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  105.544614][ T5910] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  105.548341][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.551404][ T5910] usb 4-1: Product: syz
[  105.553074][ T5910] usb 4-1: Manufacturer: syz
[  105.555027][ T5910] usb 4-1: SerialNumber: syz
[  105.778259][ T7074] ceph: No mds server is up or the cluster is laggy
[  105.794769][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.455'.
[  105.798780][ T7078] netlink: 52 bytes leftover after parsing attributes in process `syz.0.455'.
[  106.305111][ T5910] usb 4-1: 0:2 : does not exist
[  106.327896][ T5910] usb 4-1: USB disconnect, device number 3
[  106.389516][ T6087] udevd[6087]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  106.621762][ T7111] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.716396][ T5312] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  106.876517][ T5312] usb 1-1: Using ep0 maxpacket: 8
[  106.883396][ T5312] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  106.887348][ T5312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.889990][ T5312] usb 1-1: Product: syz
[  106.891423][ T5312] usb 1-1: Manufacturer: syz
[  106.893014][ T5312] usb 1-1: SerialNumber: syz
[  106.897197][ T5312] usb 1-1: config 0 descriptor??
[  106.902237][ T5312] usbtest 1-1:0.0: FX2 device
[  106.903930][ T5312] usbtest 1-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  107.096317][ T5910] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  107.117558][  T792] usb 1-1: USB disconnect, device number 8
[  107.246304][ T5910] usb 4-1: Using ep0 maxpacket: 16
[  107.307200][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.312081][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  107.321157][ T5910] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  107.324066][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.327804][ T5910] usb 4-1: Product: syz
[  107.329136][ T5910] usb 4-1: Manufacturer: syz
[  107.330642][ T5910] usb 4-1: SerialNumber: syz
[  107.544821][ T5910] usb 4-1: 0:2 : does not exist
[  107.567341][ T5910] usb 4-1: USB disconnect, device number 4
[  107.584587][ T6087] udevd[6087]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  107.896368][  T792] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  108.046530][  T792] usb 1-1: Using ep0 maxpacket: 32
[  108.052164][  T792] usb 1-1: config 0 interface 0 has no altsetting 0
[  108.057907][  T792] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  108.062241][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.068482][  T792] usb 1-1: Product: syz
[  108.070228][  T792] usb 1-1: Manufacturer: syz
[  108.072408][  T792] usb 1-1: SerialNumber: syz
[  108.080432][  T792] usb 1-1: config 0 descriptor??
[  108.299222][  T792] gs_usb 1-1:0.0: Couldn't send data format (err=-71)
[  108.302919][  T792] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71
[  108.314203][  T792] usb 1-1: USB disconnect, device number 9
[  108.456801][ T5312] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  108.606348][ T5312] usb 4-1: Using ep0 maxpacket: 16
[  108.611570][ T5312] usb 4-1: unable to get BOS descriptor or descriptor too short
[  108.616757][ T5312] usb 4-1: config 8 has an invalid interface number: 132 but max is 0
[  108.620406][ T5312] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  108.624483][ T5312] usb 4-1: config 8 has no interface number 0
[  108.627540][ T5312] usb 4-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  108.636868][ T5312] usb 4-1: config 8 interface 132 has no altsetting 0
[  108.644052][ T5312] usb 4-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b
[  108.648995][ T5312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.652439][ T5312] usb 4-1: Product: syz
[  108.654235][ T5312] usb 4-1: Manufacturer: syz
[  108.656130][ T5312] usb 4-1: SerialNumber: syz
[  108.673880][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'.
[  108.688582][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'.
[  108.688772][ T5908] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.695936][ T5908] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.702507][ T5908] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.703036][ T7149] Zero length message leads to an empty skb
[  108.706572][ T5908] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.882711][ T5312] usb-storage 4-1:8.132: USB Mass Storage device detected
[  108.897516][ T5312] usb-storage 4-1:8.132: Quirks match for vid 07cf pid 1001: a
[  108.943140][ T5312] usb 4-1: USB disconnect, device number 5
[  109.216332][  T792] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  109.366297][  T792] usb 1-1: Using ep0 maxpacket: 32
[  109.370088][  T792] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  109.372899][  T792] usb 1-1: config 0 has no interface number 0
[  109.378979][  T792] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  109.382808][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.385359][  T792] usb 1-1: Product: syz
[  109.386901][  T792] usb 1-1: Manufacturer: syz
[  109.388384][  T792] usb 1-1: SerialNumber: syz
[  109.392164][  T792] usb 1-1: config 0 descriptor??
[  109.398187][  T792] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  109.609766][  T792] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  109.616068][  T792] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  109.736249][ T5312] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  109.915823][ T5312] usb 4-1: config 9 has an invalid interface number: 252 but max is 0
[  109.920878][ T5312] usb 4-1: config 9 has no interface number 0
[  109.923684][ T5312] usb 4-1: config 9 interface 252 has no altsetting 0
[  109.936941][ T5312] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice=dd.7c
[  109.940722][ T5312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.943864][ T5312] usb 4-1: Product: syz
[  109.956291][ T5312] usb 4-1: Manufacturer: syz
[  109.958354][ T5312] usb 4-1: SerialNumber: syz
[  110.018379][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  110.018804][  T791] usb 1-1: USB disconnect, device number 10
[  110.039892][  T791] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  110.071567][  T791] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  110.083814][  T791] quatech2 1-1:0.51: device disconnected
[  110.191416][ T5312] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.252/input/input7
[  110.222935][ T5279] bcm5974 4-1:9.252: could not read from device
[  110.230367][ T7189] netlink: 392 bytes leftover after parsing attributes in process `syz.1.503'.
[  110.238388][ T5279] bcm5974 4-1:9.252: could not read from device
[  110.242392][ T5312] usb 4-1: USB disconnect, device number 6
[  110.249141][ T5279] bcm5974 4-1:9.252: could not read from device
[  110.773345][ T7225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.512'.
[  111.245830][ T7263] loop3: detected capacity change from 0 to 4096
[  111.251970][ T7263] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  111.263658][ T7263] ntfs3(loop3): failed to replay log file. Can't mount rw!
[  112.321804][ T7292] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.533'.
[  112.638402][ T7302] loop0: detected capacity change from 0 to 1024
[  112.664966][ T7302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.685012][ T7302] EXT4-fs warning (device loop0): ext4_empty_dir:3103: inode #11: comm syz.0.537: directory missing '..'
[  112.721588][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.854196][ T7319] sctp: [Deprecated]: syz.0.544 (pid 7319) Use of int in max_burst socket option deprecated.
[  112.854196][ T7319] Use struct sctp_assoc_value instead
[  112.917602][ T7324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.546'.
[  112.926030][ T7325] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  113.029134][ T7331] loop0: detected capacity change from 0 to 512
[  113.082603][ T7331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.087961][ T7331] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.385696][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.513595][ T7344] loop0: detected capacity change from 0 to 1024
[  113.571346][   T52] hfsplus: b-tree write err: -5, ino 8
[  113.577331][ T5910] Process accounting resumed
[  113.752011][ T7348] loop0: detected capacity change from 0 to 32768
[  113.755966][ T7348] (syz.0.555,7348,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  113.761491][ T7348] (syz.0.555,7348,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  113.773567][ T7348] JBD2: Ignoring recovery information on journal
[  113.818093][ T7348] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  113.885077][ T7357] loop3: detected capacity change from 0 to 256
[  113.919599][ T7357] FAT-fs (loop3): Directory bread(block 64) failed
[  113.921727][ T7357] FAT-fs (loop3): Directory bread(block 65) failed
[  113.933956][ T7357] FAT-fs (loop3): Directory bread(block 66) failed
[  113.937162][ T7357] FAT-fs (loop3): Directory bread(block 67) failed
[  113.939429][ T7357] FAT-fs (loop3): Directory bread(block 68) failed
[  113.941976][ T7357] FAT-fs (loop3): Directory bread(block 69) failed
[  113.944321][ T7357] FAT-fs (loop3): Directory bread(block 70) failed
[  113.947851][ T7357] FAT-fs (loop3): Directory bread(block 71) failed
[  113.950388][ T7357] FAT-fs (loop3): Directory bread(block 72) failed
[  113.952714][ T7357] FAT-fs (loop3): Directory bread(block 73) failed
[  114.011775][ T7348] syz.0.555 (7348) used greatest stack depth: 19272 bytes left
[  114.091446][ T5844] ocfs2: Unmounting device (7,0) on (node local)
[  114.153792][   T10] IPVS: starting estimator thread 0...
[  114.256471][ T7363] IPVS: using max 61 ests per chain, 146400 per kthread
[  114.901194][ T7377] overlayfs: failed to clone upperpath
[  115.201597][ T7389] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.570'.
[  115.421162][ T7393] loop3: detected capacity change from 0 to 32768
[  115.489459][ T7393] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  115.489475][ T7393]   allowing incompatible features above 0.0: (unknown version)
[  115.489481][ T7393]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  115.505531][ T7393] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  115.509268][ T7393] bcachefs (loop3): initializing new filesystem
[  115.543960][ T7393] bcachefs (loop3): going read-write
[  115.567161][ T7393] bcachefs (loop3): marking superblocks
[  115.590589][ T7393] bcachefs (loop3): initializing freespace
[  115.613964][ T7393] bcachefs (loop3): done initializing freespace
[  115.624475][ T7393] bcachefs (loop3): reading snapshots table
[  115.635694][ T7393] bcachefs (loop3): reading snapshots done
[  115.686476][ T7393] bcachefs (loop3): done starting filesystem
[  115.754971][ T7393] syz.3.572 (7393) used greatest stack depth: 17448 bytes left
[  115.768784][ T6620] bcachefs (loop3): shutting down
[  115.771467][ T6620] bcachefs (loop3): going read-only
[  115.775062][ T6620] bcachefs (loop3): finished waiting for writes to stop
[  115.781240][ T6620] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  115.824214][ T6620] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  115.832019][ T6620] bcachefs (loop3): clean shutdown complete, journal seq 4
[  115.835781][ T6620] bcachefs (loop3): marking filesystem clean
[  115.879637][ T6620] bcachefs (loop3): shutdown complete
[  116.020252][ T7430] syz_tun: entered allmulticast mode
[  116.027559][ T7429] syz_tun: left allmulticast mode
[  116.134268][ T7436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  116.136559][ T7436] IPv6: NLM_F_CREATE should be set when creating new route
[  116.139154][ T7436] IPv6: NLM_F_CREATE should be set when creating new route
[  116.141626][ T7436] IPv6: NLM_F_CREATE should be set when creating new route
[  116.526578][ T7447] loop0: detected capacity change from 0 to 256
[  116.560492][ T7447] FAT-fs (loop0): Directory bread(block 64) failed
[  116.563449][ T7447] FAT-fs (loop0): Directory bread(block 65) failed
[  116.567485][ T7447] FAT-fs (loop0): Directory bread(block 66) failed
[  116.570265][ T7447] FAT-fs (loop0): Directory bread(block 67) failed
[  116.573111][ T7447] FAT-fs (loop0): Directory bread(block 68) failed
[  116.576053][ T7447] FAT-fs (loop0): Directory bread(block 69) failed
[  116.579614][ T7447] FAT-fs (loop0): Directory bread(block 70) failed
[  116.582446][ T7447] FAT-fs (loop0): Directory bread(block 71) failed
[  116.585280][ T7447] FAT-fs (loop0): Directory bread(block 72) failed
[  116.589732][ T7447] FAT-fs (loop0): Directory bread(block 73) failed
[  116.610941][   T33] audit: type=1800 audit(1755042747.467:11): pid=7447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.592" name="file2" dev="loop0" ino=1048602 res=0 errno=0
[  116.851716][ T7451] loop0: detected capacity change from 0 to 8192
[  116.881898][ T7451] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  116.952072][ T7451] ntfs3(loop0): $Secure::$SII is corrupted.
[  116.954257][ T7451] ntfs3(loop0): Failed to initialize $Secure (-22).
[  117.223282][ T7462] loop0: detected capacity change from 0 to 32768
[  117.229920][ T7462] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.598 (7462)
[  117.261694][ T7462] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  117.265194][ T7462] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  117.266308][  T791] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  117.273630][ T7462] BTRFS info (device loop0): using free-space-tree
[  117.330071][ T7462] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  117.442793][  T791] usb 4-1: config 0 has an invalid interface number: 171 but max is 0
[  117.454521][  T791] usb 4-1: config 0 has no interface number 0
[  117.459074][  T791] usb 4-1: config 0 interface 171 has no altsetting 0
[  117.481197][  T791] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00
[  117.486831][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.497212][  T791] usb 4-1: Product: syz
[  117.498939][  T791] usb 4-1: Manufacturer: syz
[  117.500539][  T791] usb 4-1: SerialNumber: syz
[  117.516907][  T791] usb 4-1: config 0 descriptor??
[  117.527437][  T791] usb-storage 4-1:0.171: USB Mass Storage device detected
[  117.744737][  T791] usb 4-1: USB disconnect, device number 7
[  117.767331][  T792] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  117.939231][  T792] usb 1-1: unable to get BOS descriptor or descriptor too short
[  117.943217][  T792] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 157, changing to 11
[  117.947477][  T792] usb 1-1: config 1 interface 0 has no altsetting 0
[  117.951819][  T792] usb 1-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40
[  117.955115][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.958382][  T792] usb 1-1: Product: syz
[  117.959762][  T792] usb 1-1: Manufacturer: syz
[  117.961294][  T792] usb 1-1: SerialNumber: syz
[  118.178423][  T792] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8
[  118.184844][ T5279] bcm5974 1-1:1.0: could not read from device
[  118.190177][ T5279] bcm5974 1-1:1.0: could not read from device
[  118.195346][  T792] usb 1-1: USB disconnect, device number 11
[  118.199368][ T5279] bcm5974 1-1:1.0: could not read from device
[  118.204242][ T5279] bcm5974 1-1:1.0: could not read from device
[  118.335348][ T7502] loop3: detected capacity change from 0 to 24
[  118.340776][ T7502] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  118.348134][ T7502] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  119.349897][ T7531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.622'.
[  119.366342][ T7531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.622'.
[  120.000825][ T7563] futex_wake_op: syz.1.637 tries to shift op by -1; fix this program
[  120.049749][ T7565] batadv_slave_0: entered promiscuous mode
[  120.052821][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'.
[  120.056633][ T7565] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.100819][ T7565] batadv_slave_0 (unregistering): left promiscuous mode
[  120.103916][ T7565] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.343163][ T7575] netlink: 'syz.1.643': attribute type 3 has an invalid length.
[  120.348074][ T7575] netlink: 188 bytes leftover after parsing attributes in process `syz.1.643'.
[  121.290414][ T7596] loop0: detected capacity change from 0 to 16
[  121.306783][ T7596] erofs (device loop0): unidentified algorithms fff0, please upgrade kernel
[  121.715127][ T7607] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.658'.
[  121.721337][ T7607] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  122.026453][ T5234] Bluetooth: hci2: command 0x0405 tx timeout
[  122.566407][ T5910] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  122.895615][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  122.977996][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  122.983141][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  123.029302][ T5910] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  123.032952][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.036709][ T5910] usb 4-1: Product: syz
[  123.044187][ T5910] usb 4-1: Manufacturer: syz
[  123.045892][ T5910] usb 4-1: SerialNumber: syz
[  123.053439][ T5910] usb 4-1: config 0 descriptor??
[  123.055968][ T7631] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  123.064223][ T7631] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  123.070434][ T5910] usb 4-1: ucan: probing device on interface #0
[  123.097020][ T7651] ubi0: attaching mtd0
[  123.216472][   T33] audit: type=1326 audit(1755042754.067:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.680" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6142f8ebe9 code=0x7ffc0000
[  123.228715][   T33] audit: type=1326 audit(1755042754.077:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.680" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6142f8ebe9 code=0x7ffc0000
[  123.236710][   T33] audit: type=1326 audit(1755042754.077:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.680" exe="/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6142f8ebe9 code=0x7ffc0000
[  123.245304][   T33] audit: type=1326 audit(1755042754.077:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.680" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6142f8ebe9 code=0x7ffc0000
[  123.270324][   T33] audit: type=1326 audit(1755042754.077:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.680" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6142f8ebe9 code=0x7ffc0000
[  123.281347][   T33] audit: type=1326 audit(1755042754.077:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.680" exe="/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f6142f8ebe9 code=0x7ffc0000
[  123.303143][   T33] audit: type=1326 audit(1755042754.077:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.680" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6142f8ebe9 code=0x7ffc0000
[  123.852162][ T7631] loop3: detected capacity change from 0 to 2048
[  123.859456][ T7631] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  123.888191][ T7664] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  123.894420][ T7631] syz.3.669: attempt to access beyond end of device
[  123.894420][ T7631] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  124.107310][ T5234] Bluetooth: hci2: command 0x0405 tx timeout
[  124.115565][ T5910] ucan 4-1:0.0: probe with driver ucan failed with error -71
[  124.133072][ T5910] usb 4-1: USB disconnect, device number 8
[  124.150947][ T7673] process 'syz.1.686' launched './file1' with NULL argv: empty string added
[  124.324213][ T7681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.689'.
[  124.510234][ T7691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.513422][ T7691] IPv6: NLM_F_CREATE should be set when creating new route
[  124.523669][ T7691] lo: entered allmulticast mode
[  124.529362][ T7691] tunl0: entered allmulticast mode
[  124.533548][ T7691] gre0: entered allmulticast mode
[  124.545328][ T7691] gretap0: entered allmulticast mode
[  124.552007][ T7691] erspan0: entered allmulticast mode
[  124.559407][ T7691] ip_vti0: entered allmulticast mode
[  124.563334][ T7691] ip6_vti0: entered allmulticast mode
[  124.567615][ T7691] sit0: entered allmulticast mode
[  124.574098][ T7691] ip6tnl0: entered allmulticast mode
[  124.582033][ T7691] ip6gre0: entered allmulticast mode
[  124.588087][ T7691] syz_tun: entered allmulticast mode
[  124.599182][ T7691] ip6gretap0: entered allmulticast mode
[  124.613246][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.617380][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.623007][ T7691] bridge0: entered allmulticast mode
[  124.631341][ T7691] vcan0: entered allmulticast mode
[  124.640667][ T7691] bond0: entered allmulticast mode
[  124.650713][ T7691] bond_slave_0: entered allmulticast mode
[  124.663082][ T7691] bond_slave_1: entered allmulticast mode
[  124.682053][ T7691] team0: entered allmulticast mode
[  124.684022][ T7691] team_slave_0: entered allmulticast mode
[  124.703308][ T7691] team_slave_1: entered allmulticast mode
[  124.712789][ T7691] dummy0: entered allmulticast mode
[  124.736938][ T7691] nlmon0: entered allmulticast mode
[  124.741880][ T7691] caif0: entered allmulticast mode
[  124.744272][ T7691] batadv0: entered allmulticast mode
[  124.751012][ T7691] vxcan0: entered allmulticast mode
[  124.754403][ T7691] vxcan1: entered allmulticast mode
[  124.769627][ T7691] veth0: entered allmulticast mode
[  124.775203][ T7691] veth1: entered allmulticast mode
[  124.792737][ T7702] loop3: detected capacity change from 0 to 512
[  124.796102][ T7703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.800904][ T7702] EXT4-fs: Ignoring removed nobh option
[  124.809796][ T7691] wg0: entered allmulticast mode
[  124.812684][ T7702] EXT4-fs (loop3): Test dummy encryption mode enabled
[  124.822903][ T7691] wg1: entered allmulticast mode
[  124.834912][ T7691] wg2: entered allmulticast mode
[  124.842925][ T7691] veth0_to_bridge: entered allmulticast mode
[  124.849285][ T7702] EXT4-fs error (device loop3): __ext4_iget:5464: inode #11: block 1: comm syz.3.701: invalid block
[  124.850409][ T7691] veth1_to_bridge: entered allmulticast mode
[  124.864204][ T7702] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.701: couldn't read orphan inode 11 (err -117)
[  124.873763][ T7691] veth0_to_bond: entered allmulticast mode
[  124.876682][ T7702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.881852][ T7691] veth1_to_bond: entered allmulticast mode
[  124.889218][ T7702] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.912383][ T7691] veth0_to_team: entered allmulticast mode
[  124.942908][ T7691] veth1_to_team: entered allmulticast mode
[  124.950576][ T7702] loop3: detected capacity change from 0 to 128
[  124.959619][ T7691] veth0_to_batadv: entered allmulticast mode
[  124.963644][ T7691] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.963716][ T7702] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  124.975895][ T7691] batadv_slave_0: entered allmulticast mode
[  124.991473][ T7691] veth1_to_batadv: entered allmulticast mode
[  124.992172][ T7702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.995337][ T7691] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.001767][ T7691] batadv_slave_1: entered allmulticast mode
[  125.006469][ T7691] xfrm0: entered allmulticast mode
[  125.010238][ T7691] veth0_to_hsr: entered allmulticast mode
[  125.015235][ T7691] hsr_slave_0: entered allmulticast mode
[  125.019647][ T7691] veth1_to_hsr: entered allmulticast mode
[  125.024891][ T7691] hsr_slave_1: entered allmulticast mode
[  125.028700][ T5851] Bluetooth: hci2: unexpected event for opcode 0x080d
[  125.037104][ T7691] hsr0: entered allmulticast mode
[  125.050244][ T7691] veth1_virt_wifi: entered allmulticast mode
[  125.063526][ T7691] veth0_virt_wifi: entered allmulticast mode
[  125.070140][ T7691] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  125.073564][ T7691] veth1_vlan: entered allmulticast mode
[  125.078350][ T7691] veth0_vlan: entered allmulticast mode
[  125.088563][ T7691] vlan0: entered allmulticast mode
[  125.091089][ T7691] vlan1: entered allmulticast mode
[  125.100139][ T7691] macvlan0: entered allmulticast mode
[  125.104991][ T7691] macvlan1: entered allmulticast mode
[  125.113177][ T7691] ipvlan0: entered allmulticast mode
[  125.120397][ T7691] ipvlan1: entered allmulticast mode
[  125.122966][ T7691] veth1_macvtap: entered allmulticast mode
[  125.137904][ T7691] veth0_macvtap: entered allmulticast mode
[  125.150595][ T7691] macvtap0: entered allmulticast mode
[  125.169632][ T7691] macsec0: entered allmulticast mode
[  125.193492][ T7691] geneve0: entered allmulticast mode
[  125.211957][ T7691] geneve1: entered allmulticast mode
[  125.218618][ T7691] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  125.245100][ T7691] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[  125.259357][ T7691] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  125.284242][ T7691] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[  125.314913][ T7691] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  125.364658][ T7691] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  125.400144][ T5908] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.404013][ T5908] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.434419][ T5908] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.441714][ T5908] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.534790][ T7721] loop3: detected capacity change from 0 to 512
[  125.549793][ T7721] EXT4-fs (loop3): Test dummy encryption mode enabled
[  125.552864][ T7721] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  125.572281][ T7721] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  125.577122][ T7721] EXT4-fs (loop3): SIPHASH is not a valid default hash value
[  125.640822][ T7725] loop0: detected capacity change from 0 to 2048
[  125.670676][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'.
[  125.674666][ T7727] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  125.679573][ T7725] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.700437][ T7727] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.126623][ T5894] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  126.178498][ T7750] loop3: detected capacity change from 0 to 32768
[  126.255312][ T7750] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=gzip,str_hash=crc32c,journal_flush_disabled,recovery_pass_last=set_may_go_rw,reconstruct_alloc
[  126.255356][ T7750]   allowing incompatible features above 0.0: (unknown version)
[  126.255362][ T7750]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  126.271857][ T7750] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  126.274787][ T7750] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  126.277690][ T7750] bcachefs (loop3): Version upgrade required:
[  126.277690][ T7750] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  126.277690][ T7750] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  126.277690][ T7750]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  126.286374][ T5894] usb 1-1: Using ep0 maxpacket: 32
[  126.303038][    C0] vkms_vblank_simulate: vblank timer overrun
[  126.304221][ T7750] bcachefs (loop3): dropping and reconstructing all alloc info
[  126.309748][ T5894] usb 1-1: config 0 has an invalid interface number: 225 but max is 0
[  126.313191][ T5894] usb 1-1: config 0 has no interface number 0
[  126.315143][ T5894] usb 1-1: config 0 interface 225 altsetting 130 endpoint 0xD has invalid maxpacket 512, setting to 64
[  126.322248][ T5894] usb 1-1: config 0 interface 225 altsetting 130 endpoint 0x4 has invalid maxpacket 5950, setting to 1024
[  126.325872][ T5894] usb 1-1: config 0 interface 225 altsetting 130 bulk endpoint 0x4 has invalid maxpacket 1024
[  126.326709][ T7750] bcachefs (loop3): accounting_read...
[  126.329776][ T5894] usb 1-1: config 0 interface 225 altsetting 130 endpoint 0xF has an invalid bInterval 0, changing to 7
[  126.337512][ T7750]  done
[  126.338254][ T5894] usb 1-1: config 0 interface 225 has no altsetting 0
[  126.338605][ T7750] bcachefs (loop3): alloc_read... done
[  126.342897][ T5894] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0105, bcdDevice=dc.79
[  126.343243][ T7750] bcachefs (loop3): snapshots_read... done
[  126.348929][ T7750] bcachefs (loop3): check_allocations...
[  126.349506][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.354573][ T5894] usb 1-1: Product: syz
[  126.355973][ T5894] usb 1-1: Manufacturer: syz
[  126.358740][ T5894] usb 1-1: SerialNumber: syz
[  126.364113][ T5894] usb 1-1: config 0 descriptor??
[  126.366042][ T7750]  done
[  126.368521][ T7750] bcachefs (loop3): going read-write
[  126.369510][ T7739] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  126.374294][ T5894] kvaser_usb 1-1:0.225: error -ENODEV: Cannot get usb endpoint(s)
[  126.390480][ T7750] bcachefs (loop3): done starting filesystem
[  126.412252][   T28] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  126.412308][   T28]   u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing
[  126.461467][   T28] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  126.461487][   T28]   u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing
[  126.468735][ T7750] bcachefs (loop3): inode 536870912 truncated to 0 but i_blocks 8 (ondisk 8)
[  126.474242][   T28] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  126.474255][   T28]   u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing
[  126.481517][   T28] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  126.481532][   T28]   u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing
[  126.488693][   T28] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  126.488705][   T28]   u64s 5 type deleted 0:40:0 len 0 ver 0, , continuing
[  126.494031][ T6620] bcachefs (loop3): shutting down
[  126.497339][ T6620] bcachefs (loop3): going read-only
[  126.499085][ T6620] bcachefs (loop3): finished waiting for writes to stop
[  126.502589][ T6620] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11
[  126.515943][ T3226] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  126.515956][ T3226]   u64s 5 type deleted 0:47:0 len 0 ver 0, , continuing
[  126.530156][ T6620] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11
[  126.543102][ T6620] bcachefs (loop3): unclean shutdown complete, journal seq 12
[  126.550163][ T6620] bcachefs (loop3): done going read-only, filesystem not clean
[  126.567336][ T6620] bcachefs (loop3): shutdown complete
[  127.089910][   T24] usb 1-1: USB disconnect, device number 12
[  127.679077][ T7806] loop0: detected capacity change from 0 to 512
[  127.707178][ T7808] loop3: detected capacity change from 0 to 1024
[  128.497591][ T7845] loop0: detected capacity change from 0 to 32768
[  128.500801][ T7845] XFS: ikeep mount option is deprecated.
[  128.545415][ T7845] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  128.591744][ T7845] XFS (loop0): Ending clean mount
[  128.598504][ T7845] XFS (loop0): Quotacheck needed: Please wait.
[  128.651323][ T7845] XFS (loop0): Quotacheck: Done.
[  128.727559][ T5844] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  129.068488][ T5851] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  129.071712][ T5851] Bluetooth: hci2: Injecting HCI hardware error event
[  129.075654][ T5234] Bluetooth: hci2: hardware error 0x00
[  129.181850][ T7873] overlayfs: failed to clone upperpath
[  129.184777][ T7875] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  129.255662][ T7881] netlink: 'syz.1.775': attribute type 10 has an invalid length.
[  129.262798][ T7881] team0: Port device dummy0 added
[  129.269210][ T7881] netlink: 'syz.1.775': attribute type 10 has an invalid length.
[  129.283967][ T7881] team0: Port device dummy0 removed
[  129.288867][ T7881] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  129.346591][   T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  129.496456][   T24] usb 1-1: Using ep0 maxpacket: 16
[  129.503026][   T24] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2
[  129.507422][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.510537][   T24] usb 1-1: Product: syz
[  129.512145][   T24] usb 1-1: Manufacturer: syz
[  129.513996][   T24] usb 1-1: SerialNumber: syz
[  129.518361][   T24] usb 1-1: config 0 descriptor??
[  129.524561][   T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  129.541127][   T24] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[  129.564258][ T6087] udevd[6087]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.686283][ T5910] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  129.734758][   T24] usb 1-1: USB disconnect, device number 13
[  129.836290][ T5910] usb 4-1: Using ep0 maxpacket: 32
[  129.840486][ T5910] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  129.843944][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.851288][ T5910] usb 4-1: config 0 descriptor??
[  129.857481][ T5910] gspca_main: nw80x-2.14.0 probing 055f:d001
[  130.057622][ T5910] gspca_nw80x: reg_w err -71
[  130.059517][ T5910] nw80x 4-1:0.0: probe with driver nw80x failed with error -71
[  130.065915][ T5910] usb 4-1: USB disconnect, device number 9
[  130.290184][ T7901] openvswitch: netlink: Tunnel attr 5 has unexpected len 4 expected 0
[  130.398095][ T5851] Bluetooth: hci0: Malformed Event: 0x13
[  130.445609][ T7911] syz.0.789: attempt to access beyond end of device
[  130.445609][ T7911] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0
[  130.462765][ T7911] qnx6: unable to read the first superblock
[  130.465450][ T7911] syz.0.789: attempt to access beyond end of device
[  130.465450][ T7911] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[  130.487224][ T7911] qnx6: unable to read the first superblock
[  130.489670][ T7911] qnx6: unable to read the first superblock
[  131.146813][ T5234] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  131.347691][ T7937] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  131.386573][   T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  131.553352][   T10] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  131.562685][   T10] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  131.571032][ T7947] sctp: [Deprecated]: syz.0.806 (pid 7947) Use of int in maxseg socket option.
[  131.571032][ T7947] Use struct sctp_assoc_value instead
[  131.577637][   T10] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  131.582640][   T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  131.593001][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.606656][ T7933] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  131.664764][ T7949] openvswitch: netlink: IP tunnel TTL not specified.
[  132.092879][ T7951] loop0: detected capacity change from 0 to 32768
[  132.106846][ T7951] XFS: ikeep mount option is deprecated.
[  132.130435][ T7951] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.186133][ T7951] XFS (loop0): Ending clean mount
[  132.194730][ T7951] XFS (loop0): Quotacheck needed: Please wait.
[  132.228782][ T7951] XFS (loop0): Quotacheck: Done.
[  132.275380][ T5844] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.511354][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.514109][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.544076][   T33] audit: type=1804 audit(1755042763.397:19): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.820" name="/newroot/249/bus/file0" dev="overlay" ino=1340 res=1 errno=0
[  132.649523][   T10] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  132.660041][   T10] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input9
[  132.756994][    C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  132.760391][   T10] usb 4-1: USB disconnect, device number 10
[  132.792878][ T7994] loop0: detected capacity change from 0 to 512
[  132.810199][ T7994] EXT4-fs (loop0): Test dummy encryption mode enabled
[  132.819112][ T7994] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  132.824743][ T7994] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  132.838302][ T7994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.881089][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.978716][ T8034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.837'.
[  134.340037][ T8063] openvswitch: netlink: Missing key (keys=40, expected=80)
[  134.646570][  T792] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  134.800211][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.803679][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.807285][  T792] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  134.810691][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.815046][  T792] usb 4-1: config 0 descriptor??
[  134.895540][ T8096] loop0: detected capacity change from 0 to 256
[  134.910564][ T8096] exfat: Deprecated parameter 'utf8'
[  134.941644][ T8096] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  135.265066][  T792] hid_mf 0003:0079:1846.0004: report_id 393985501 is invalid
[  135.274822][  T792] hid_mf 0003:0079:1846.0004: item 0 4 1 8 parsing failed
[  135.284816][  T792] hid_mf 0003:0079:1846.0004: HID parse failed.
[  135.289022][  T792] hid_mf 0003:0079:1846.0004: probe with driver hid_mf failed with error -22
[  135.410452][ T8120] loop0: detected capacity change from 0 to 2048
[  135.433519][ T8120] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.464159][  T792] usb 4-1: USB disconnect, device number 11
[  135.733079][ T8128] tipc: Started in network mode
[  135.735150][ T8128] tipc: Node identity 825d83f54ba2, cluster identity 4711
[  135.742836][ T8128] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.746911][ T8128] syzkaller0: entered promiscuous mode
[  135.749302][ T8128] syzkaller0: entered allmulticast mode
[  135.767341][ T8128] tipc: Resetting bearer <eth:syzkaller0>
[  135.773325][ T8127] tipc: Resetting bearer <eth:syzkaller0>
[  135.791010][ T8127] tipc: Disabling bearer <eth:syzkaller0>
[  136.054407][ T8140] batadv_slave_1: entered promiscuous mode
[  136.064465][   T33] audit: type=1800 audit(1755042766.907:20): pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.884" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  136.073069][ T8140] batadv_slave_1: left promiscuous mode
[  136.134743][ T8134] loop0: detected capacity change from 0 to 32768
[  136.138611][ T8134] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.881 (8134)
[  136.162348][ T8134] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  136.166861][ T8134] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  136.169815][ T8134] BTRFS info (device loop0): using free-space-tree
[  136.291170][   T12] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  136.345817][ T5844] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  136.657907][ T5312] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  136.772394][ T8168] netlink: 'syz.0.887': attribute type 21 has an invalid length.
[  136.817680][ T5312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  136.821274][ T5312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  136.828277][ T5312] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[  136.831208][ T5312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.834016][ T5312] usb 4-1: Product: syz
[  136.835714][ T5312] usb 4-1: Manufacturer: syz
[  136.837693][ T5312] usb 4-1: SerialNumber: syz
[  136.841997][ T5312] usb 4-1: config 0 descriptor??
[  136.850861][ T5312] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  136.856001][ T5312] usb 4-1: Detected SIO
[  136.858718][ T5312] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4
[  136.862019][ T5312] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7
[  136.867832][ T5312] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  137.057642][ T5312] usb 4-1: USB disconnect, device number 12
[  137.066614][ T5312] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  137.082494][ T5312] ftdi_sio 4-1:0.0: device disconnected
[  137.123623][ T8182] input: syz1 as /devices/virtual/input/input10
[  138.077214][ T8191] netlink: 52 bytes leftover after parsing attributes in process `syz.3.896'.
[  138.080388][ T8191] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  138.327311][ T8198] loop3: detected capacity change from 0 to 512
[  138.329889][ T8198] EXT4-fs: Ignoring removed bh option
[  138.341140][ T8198] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  138.344104][ T8198] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  138.354130][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  138.368632][ T8198] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  138.372258][ T8198] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  138.380501][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  138.392721][ T8198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.435924][ T6620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.540032][ T8212] loop3: detected capacity change from 0 to 2048
[  138.544947][ T8212] UDF-fs: warning (device loop3): udf_fill_super: No fileset found
[  138.555403][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system
[  138.565983][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-uuid/1234567812345678.tmp-b7:3' failed: Read-only file system
[  138.837363][ T8217] loop3: detected capacity change from 0 to 32768
[  138.867155][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-uuid/f30b150f-ecac-472d-98b2-96cb299d2b2c.tmp-b7:3' failed: Read-only file system
[  138.882115][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-uuid/f30b150f-ecac-472d-98b2-96cb299d2b2c.tmp-b7:3' failed: Read-only file system
[  139.868272][ T8245] loop0: detected capacity change from 0 to 1024
[  139.872952][ T8245] hfsplus: Unknown parameter 'creatS'
[  139.882593][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system
[  139.884722][ T8245] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  139.896968][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:0' failed: Read-only file system
[  139.897418][ T8245] CIFS mount error: No usable UNC path provided in device string!
[  139.897418][ T8245] 
[  139.905574][ T8245] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  139.980432][ T8248] loop0: detected capacity change from 0 to 4096
[  140.001612][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:0' failed: Read-only file system
[  140.001959][ T8249] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.020265][ T8248] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  140.022300][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:0' failed: Read-only file system
[  140.029130][ T8248] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12)
[  140.040225][ T8248] Remounting filesystem read-only
[  140.041855][ T8248] NILFS (loop0): error -5 truncating bmap (ino=12)
[  140.069374][ T5844] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  140.132052][ T8255] loop3: detected capacity change from 0 to 512
[  140.151844][ T8255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.158945][ T8255] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.169716][   T33] audit: type=1800 audit(1755042771.027:21): pid=8255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.924" name="file1" dev="loop3" ino=15 res=0 errno=0
[  140.183279][   T33] audit: type=1800 audit(1755042771.037:22): pid=8255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.924" name="file2" dev="loop3" ino=16 res=0 errno=0
[  140.202403][ T6620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.191783][ T8286] netlink: 'syz.1.935': attribute type 2 has an invalid length.
[  141.195114][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'.
[  141.526371][ T5910] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[  141.680161][ T5910] usb 1-1: unable to get BOS descriptor or descriptor too short
[  141.692463][ T5910] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.700523][ T5910] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  141.705543][ T5910] usb 1-1: config 1 interface 0 has no altsetting 0
[  141.723503][ T5910] usb 1-1: string descriptor 0 read error: -22
[  141.726122][ T5910] usb 1-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.60
[  141.730468][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.751364][ T5910] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input11
[  141.959272][ T5910] usb 1-1: USB disconnect, device number 14
[  142.226344][   T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  142.376349][   T24] usb 4-1: Using ep0 maxpacket: 16
[  142.380563][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.384990][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.389308][   T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  142.392882][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.399676][   T24] usb 4-1: config 0 descriptor??
[  142.819608][   T24] hid_parser_main: 6 callbacks suppressed
[  142.819630][   T24] appleir 0003:05AC:8241.0005: unknown main item tag 0x0
[  142.834910][   T24] appleir 0003:05AC:8241.0005: unknown main item tag 0x0
[  142.837638][   T24] appleir 0003:05AC:8241.0005: unknown main item tag 0x0
[  142.840624][   T24] appleir 0003:05AC:8241.0005: unknown main item tag 0x0
[  142.843459][   T24] appleir 0003:05AC:8241.0005: unknown main item tag 0x0
[  142.877742][   T24] appleir 0003:05AC:8241.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  142.896316][ T5910] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  143.020382][ T5312] usb 4-1: USB disconnect, device number 13
[  143.060435][ T5910] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  143.063544][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.067071][ T5910] usb 1-1: Product: syz
[  143.068598][ T5910] usb 1-1: Manufacturer: syz
[  143.070112][ T5910] usb 1-1: SerialNumber: syz
[  143.073429][ T5910] usb 1-1: config 0 descriptor??
[  143.078505][ T5910] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  143.280543][ T5910] sonixb 1-1:0.0: Error reading register 00: -71
[  143.286457][ T5910] usb 1-1: USB disconnect, device number 15
[  143.462967][ T8336] No source specified
[  143.554324][ T8342] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.564482][ T8344] team_slave_0: entered promiscuous mode
[  143.566486][ T8344] team_slave_1: entered promiscuous mode
[  143.570670][ T8344] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  143.581589][ T8344] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  143.619316][ T8348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.966'.
[  143.848221][ T5910] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  143.996492][ T5910] usb 4-1: Using ep0 maxpacket: 8
[  144.006017][ T8358] loop0: detected capacity change from 0 to 4096
[  144.007851][ T5910] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  144.012530][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.015778][ T5910] usb 4-1: Product: syz
[  144.016405][ T8358] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  144.020014][ T5910] usb 4-1: Manufacturer: syz
[  144.023449][ T5910] usb 4-1: SerialNumber: syz
[  144.039225][ T5910] usb 4-1: config 0 descriptor??
[  144.040079][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  144.045215][ T5910] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  144.059534][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:0' failed: Read-only file system
[  144.064986][ T8358] ntfs3(loop0): Failed to initialize $Secure::$SDH (-22).
[  144.068178][ T8358] ntfs3(loop0): Failed to initialize $Secure (-22).
[  144.556431][   T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  144.709357][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[  144.719812][   T10] usb 1-1: config 95 has an invalid interface number: 1 but max is 0
[  144.723029][   T10] usb 1-1: config 95 has no interface number 0
[  144.725526][   T10] usb 1-1: config 95 interface 1 has no altsetting 0
[  144.749152][   T10] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f
[  144.752786][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.755969][   T10] usb 1-1: Product: syz
[  144.757939][   T10] usb 1-1: Manufacturer: syz
[  144.759813][   T10] usb 1-1: SerialNumber: syz
[  145.055167][   T10] usb 1-1: USB disconnect, device number 16
[  145.147410][ T6087] udevd[6087]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  145.570053][ T8390] netlink: 256 bytes leftover after parsing attributes in process `syz.0.986'.
[  145.994044][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'.
[  145.997649][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.995'.
[  146.100489][ T5910] gspca_sonixj: reg_w1 err -71
[  146.136525][ T5910] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  146.144732][ T5910] usb 4-1: USB disconnect, device number 14
[  146.306364][   T33] audit: type=1326 audit(1755042777.117:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.1.998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  146.341003][   T33] audit: type=1326 audit(1755042777.127:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.1.998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  146.370919][   T33] audit: type=1326 audit(1755042777.147:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.1.998" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  146.412263][   T33] audit: type=1326 audit(1755042777.157:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.1.998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  146.433197][   T33] audit: type=1326 audit(1755042777.187:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.1.998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  146.440677][   T33] audit: type=1326 audit(1755042777.187:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.1.998" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  146.450372][   T33] audit: type=1326 audit(1755042777.187:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.1.998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  146.458736][   T33] audit: type=1326 audit(1755042777.197:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.1.998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  146.467359][   T33] audit: type=1326 audit(1755042777.207:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.1.998" exe="/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  146.479022][   T33] audit: type=1326 audit(1755042777.287:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.1.998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  147.212904][ T8448] netlink: 'syz.1.1013': attribute type 2 has an invalid length.
[  147.234723][ T8440] loop3: detected capacity change from 0 to 40427
[  147.271612][ T8440] F2FS-fs (loop3): invalid crc value
[  147.274480][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system
[  147.338921][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'.
[  147.342411][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1016'.
[  147.378659][ T8440] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  147.388019][ T8440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  147.408186][ T8440] F2FS-fs (loop3): Can't enable fs-verity on inode 3: the verity feature is not enabled on this filesystem
[  147.554249][ T8466] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  147.690902][ T8472] loop3: detected capacity change from 0 to 512
[  147.700344][ T8472] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  147.706927][ T8472] EXT4-fs (loop3): orphan cleanup on readonly fs
[  147.711594][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  147.718824][ T8472] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #15: comm syz.3.1023: iget: bad i_size value: 360287970189639690
[  147.726850][ T8472] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.1023: Bad quota inode: 15, type: 2
[  147.731063][ T8472] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix.
[  147.734909][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  147.742114][ T8472] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  147.750556][ T8472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  147.790313][ T6620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.853820][ T8475] loop0: detected capacity change from 0 to 2048
[  147.918200][ T6087]  loop0: p3 p4 < >
[  147.930473][ T8475]  loop0: p3 p4 < >
[  147.959472][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  147.959711][ T6087] udevd[6087]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  148.019380][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  148.038892][ T6087] udevd[6087]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  148.368812][ T8492] loop3: detected capacity change from 0 to 4096
[  148.388586][ T8492] ntfs3(loop3): It is recommened to use chkdsk.
[  148.401847][ T8492] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  148.417417][ T8492] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  148.433323][ T8492] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  148.449892][ T8492] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  148.459486][ T8492] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00
[  148.473618][ T8492] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00
[  148.483782][ T8492] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00
[  148.492636][ T8492] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00
[  148.496566][ T8492] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00
[  150.048352][ T8507] netlink: 'syz.1.1035': attribute type 25 has an invalid length.
[  150.063446][ T8507] netlink: 'syz.1.1035': attribute type 7 has an invalid length.
[  150.097829][ T8509] program syz.0.1036 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  151.232877][ T8525] syz.3.1043 (8525): drop_caches: 0
[  151.561563][ T8549] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  151.635092][ T8556] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1058'.
[  151.808191][  T792] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  151.966381][  T792] usb 4-1: Using ep0 maxpacket: 8
[  151.970004][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  151.973515][  T792] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  151.977167][   T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  151.979644][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.986371][  T792] usb 4-1: config 0 descriptor??
[  152.152810][   T10] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  152.156846][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.164385][   T10] usb 1-1: config 0 descriptor??
[  152.192991][  T792] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  152.378845][   T10] usb 1-1: Cannot read MAC address
[  152.380801][   T10] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  152.386865][   T10] usb 1-1: USB disconnect, device number 17
[  152.394716][ T5312] usb 4-1: USB disconnect, device number 15
[  153.171609][ T8590] loop3: detected capacity change from 0 to 1024
[  153.196089][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  153.206012][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-uuid/00000000-0000-0006-0000-000000000000.tmp-b7:3' failed: Read-only file system
[  153.242556][ T8590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  153.268458][ T8590] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.289537][ T8590] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.1075: lblock 0 mapped to illegal pblock 0 (length 1)
[  153.302875][ T8590] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  153.316369][ T8590] EXT4-fs (loop3): This should not happen!! Data will be lost
[  153.316369][ T8590] 
[  153.327847][ T8590] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.1075: lblock 0 mapped to illegal pblock 0 (length 1)
[  153.348472][ T8590] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.1075: lblock 0 mapped to illegal pblock 0 (length 1)
[  153.368512][ T8590] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.1075: lblock 0 mapped to illegal pblock 0 (length 1)
[  153.379123][ T8590] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.1075: lblock 0 mapped to illegal pblock 0 (length 1)
[  153.391675][ T8590] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.1075: lblock 0 mapped to illegal pblock 0 (length 1)
[  153.401954][ T8590] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.1075: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  153.435966][ T6620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  154.296277][ T5312] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  154.447797][ T5312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  154.456269][ T5312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.459436][ T5312] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  154.465437][ T5312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.480585][ T5312] usb 4-1: config 0 descriptor??
[  154.919100][ T5312] konepure 0003:1E7D:2DBE.0006: unbalanced collection at end of report description
[  154.922822][ T5312] konepure 0003:1E7D:2DBE.0006: parse failed
[  154.929246][ T5312] konepure 0003:1E7D:2DBE.0006: probe with driver konepure failed with error -22
[  155.125390][ T5312] usb 4-1: USB disconnect, device number 16
[  155.261573][ T8663] loop0: detected capacity change from 0 to 32768
[  155.286712][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:0' failed: Read-only file system
[  155.290143][ T8663] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  155.345787][ T5844] ocfs2: Unmounting device (7,0) on (node local)
[  155.460792][ T8668] loop0: detected capacity change from 0 to 1024
[  155.473055][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  155.481420][ T8668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.492750][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  155.520360][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.573112][ T8673] loop0: detected capacity change from 0 to 2048
[  155.584019][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  155.601992][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  155.615860][ T8673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.625851][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  155.625862][   T33] audit: type=1800 audit(1755042786.477:34): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1112" name="file1" dev="loop0" ino=15 res=0 errno=0
[  155.641240][   T33] audit: type=1800 audit(1755042786.497:35): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1112" name="file2" dev="loop0" ino=16 res=0 errno=0
[  155.650854][ T8673] EXT4-fs (loop0): Online defrag not supported with bigalloc
[  155.680986][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.983113][ T8695] overlayfs: failed to clone upperpath
[  156.230127][ T8712] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1129'.
[  156.526035][ T8717] loop3: detected capacity change from 0 to 32768
[  156.548619][ T8717] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.557144][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system
[  156.572874][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system
[  156.600962][ T8717] XFS (loop3): Ending clean mount
[  156.608486][ T8717] XFS (loop3): Quotacheck needed: Please wait.
[  156.640288][ T8717] XFS (loop3): Quotacheck: Done.
[  156.669352][ T6620] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.858267][   T33] audit: type=1326 audit(1755042787.717:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.1.1139" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde1e78ebe9 code=0x0
[  157.079364][ T8749] loop3: detected capacity change from 0 to 256
[  157.101494][ T8749] exfat: Deprecated parameter 'namecase'
[  157.155055][ T8749] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  157.330525][ T8755] binder: 8754:8755 ioctl c00c6211 ffffffffffffffff returned -14
[  157.536804][ T8759] loop3: detected capacity change from 0 to 1024
[  157.584700][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:3' failed: Read-only file system
[  157.668061][ T8759] syz.3.1149: attempt to access beyond end of device
[  157.668061][ T8759] loop3: rw=2049, sector=31588620, nr_sectors = 2 limit=1024
[  157.678388][ T8759] Buffer I/O error on dev loop3, logical block 15794310, lost async page write
[  158.379410][ T8769] loop3: detected capacity change from 0 to 32768
[  158.389954][ T8769] XFS: noikeep mount option is deprecated.
[  158.405382][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system
[  158.422834][ T8769] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  158.426443][ T5851] Bluetooth: hci3: command 0x1003 tx timeout
[  158.426592][ T5234] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  158.463667][ T8769] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  158.475865][ T8769] XFS (loop3): Starting recovery (logdev: internal)
[  158.535234][ T8769] XFS (loop3): Ending recovery (logdev: internal)
[  158.615229][ T6620] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  158.967233][ T8803] loop0: detected capacity change from 0 to 32768
[  159.011663][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-uuid/03e7aa51-a951-448e-b9eb-6dd609435e20.tmp-b7:0' failed: Read-only file system
[  159.024131][ T8803] (syz.0.1167,8803,0):ocfs2_check_set_options:1259 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled.
[  159.042775][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-uuid/03e7aa51-a951-448e-b9eb-6dd609435e20.tmp-b7:0' failed: Read-only file system
[  159.051665][ T8803] (syz.0.1167,8803,0):ocfs2_fill_super:1177 ERROR: status = -22
[  159.241306][ T8814] loop0: detected capacity change from 0 to 4096
[  159.263432][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:0' failed: Read-only file system
[  159.274790][ T8817] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  159.292422][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:0' failed: Read-only file system
[  159.387498][ T8823] loop0: detected capacity change from 0 to 512
[  159.399900][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  159.414097][ T8823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.419701][ T8823] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.433931][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  159.474343][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  159.623441][ T8834] loop3: detected capacity change from 0 to 4096
[  159.641108][ T8835] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  159.649726][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-uuid/3b59f4fc-a790-4a4c-9011-25a8178ccefa.tmp-b7:3' failed: Read-only file system
[  159.912714][ T8837] loop3: detected capacity change from 0 to 32768
[  159.918091][ T8837] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1180 (8837)
[  159.927021][ T8837] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  159.930342][ T8837] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  159.933058][ T8837] BTRFS info (device loop3): using free-space-tree
[  159.967455][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:3' failed: Read-only file system
[  159.999517][ T8837] BTRFS info (device loop3): rebuilding free space tree
[  160.029849][ T8837] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  160.294760][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.487737][ T8866] loop3: detected capacity change from 0 to 32768
[  160.556670][ T8866] find_entry called with index = 0
[  160.566974][ T8866] read_mapping_page failed!
[  160.568459][ T8866] ERROR: (device loop3): txCommit: 
[  160.568459][ T8866] 
[  160.861094][ T8872] loop0: detected capacity change from 0 to 32768
[  160.879274][ T8872] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  160.897827][ T8872] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  160.923362][   T33] audit: type=1800 audit(1755042791.777:37): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1189" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  160.933798][ T8876] 8021q: adding VLAN 0 to HW filter on device batadv1
[  160.939524][ T8876] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  160.944329][ T8876] team0: Failed to send options change via netlink (err -105)
[  160.954430][ T8876] team0: Port device batadv1 added
[  161.016765][ T5844] ocfs2: Unmounting device (7,0) on (node local)
[  161.400675][ T8888] loop0: detected capacity change from 0 to 128
[  161.605557][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'.
[  161.620932][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'.
[  161.627053][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'.
[  162.018024][   T33] audit: type=1326 audit(1755042792.877:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.1.1213" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde1e78ebe9 code=0x0
[  162.646290][  T791] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  162.786273][  T792] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  162.798352][  T791] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  162.803617][  T791] usb 4-1: config 0 interface 0 has no altsetting 0
[  162.808316][  T791] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  162.816238][  T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.821899][  T791] usb 4-1: config 0 descriptor??
[  162.938379][  T792] usb 1-1: config 0 has an invalid interface number: 194 but max is 0
[  162.941489][  T792] usb 1-1: config 0 has no interface number 0
[  162.958760][  T792] usb 1-1: New USB device found, idVendor=19d2, idProduct=5755, bcdDevice=df.b8
[  162.962544][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.965779][  T792] usb 1-1: Product: syz
[  162.968196][  T792] usb 1-1: Manufacturer: syz
[  162.970063][  T792] usb 1-1: SerialNumber: syz
[  162.974338][  T792] usb 1-1: config 0 descriptor??
[  162.990879][  T792] usb 1-1: bad CDC descriptors
[  163.183379][ T5312] usb 1-1: USB disconnect, device number 18
[  163.244442][  T791] konepure 0003:1E7D:2DB4.0007: hidraw0: USB HID v8.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0
[  163.333900][ T8951] 9pnet_fd: Insufficient options for proto=fd
[  163.420942][ T8955] ptrace attach of "/syz-executor exec"[5848] was attempted by ""[8955]
[  163.438992][ T5312] usb 4-1: USB disconnect, device number 17
[  163.486461][ T8957] Illegal XDP return value 4294967283 on prog  (id 93) dev N/A, expect packet loss!
[  163.786358][ T5234] Bluetooth: hci1: command tx timeout
[  163.973908][ T8978] loop3: detected capacity change from 0 to 256
[  164.066408][  T791] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  164.080842][ T8982] loop3: detected capacity change from 0 to 22
[  164.094973][ T8982] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  164.098919][ T8982] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  164.102955][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-label/rom\x20637cf1fa.tmp-b7:3' failed: Read-only file system
[  164.119819][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-label/rom\x20637cf1fa.tmp-b7:3' failed: Read-only file system
[  164.236365][  T791] usb 1-1: Using ep0 maxpacket: 8
[  164.240132][  T791] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17
[  164.245155][  T791] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07
[  164.248205][  T791] usb 1-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60
[  164.251101][  T791] usb 1-1: Product: syz
[  164.252486][  T791] usb 1-1: Manufacturer: syz
[  164.253992][  T791] usb 1-1: SerialNumber: syz
[  164.258717][  T791] usb 1-1: config 0 descriptor??
[  164.348745][ T5910] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  164.484242][  T791] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  164.496960][  T791] gspca_sunplus: reg_w_riv err -71
[  164.499215][  T791] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  164.507336][ T5910] usb 4-1: Using ep0 maxpacket: 32
[  164.511210][  T791] usb 1-1: USB disconnect, device number 19
[  164.514517][ T5910] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  164.519148][ T5910] usb 4-1: config 0 has no interface number 0
[  164.525673][ T5910] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  164.533728][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.539881][ T5910] usb 4-1: Product: syz
[  164.541297][ T5910] usb 4-1: Manufacturer: syz
[  164.542756][ T5910] usb 4-1: SerialNumber: syz
[  164.555284][ T5910] usb 4-1: config 0 descriptor??
[  164.563277][ T5910] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  164.769191][ T5910] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  164.780074][ T5910] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  165.173176][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  165.177528][  T791] usb 4-1: USB disconnect, device number 18
[  165.199167][  T791] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  165.204582][ T9002] nbd: must specify an index to disconnect
[  165.210077][  T791] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  165.217809][  T791] quatech2 4-1:0.51: device disconnected
[  165.434622][ T9004] loop0: detected capacity change from 0 to 32768
[  165.438908][ T9004] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1246 (9004)
[  165.458569][ T9004] BTRFS info (device loop0 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  165.462355][ T6087] udevd[6087]: symlink '../../loop0' '/dev/disk/by-uuid/a6a605fc-d5f1-4e66-8595-3726e2b761d6.tmp-b7:0' failed: Read-only file system
[  165.469637][ T9004] BTRFS info (device loop0 state S): using blake2b (blake2b-256-generic) checksum algorithm
[  165.473368][ T9004] BTRFS info (device loop0 state S): using free-space-tree
[  165.498933][ T1089] BTRFS warning (device loop0 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x752e265ca9724eb47c3236b0e85f876d1222941063a0a0afe40232d9dc9ca6dd level 0, ignored
[  165.511748][   T28] BTRFS warning (device loop0 state CS): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1, ignored
[  165.532152][   T28] BTRFS error (device loop0 state CS): level verify failed on logical 5328896 mirror 1 wanted 0 found 1
[  165.584997][ T5844] BTRFS info (device loop0 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  166.402143][ T9051] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1260'.
[  166.766476][ T5312] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  166.895850][ T9073] 9pnet_fd: Insufficient options for proto=fd
[  166.958514][ T5312] usb 1-1: config 0 has an invalid interface number: 109 but max is 0
[  166.962027][ T5312] usb 1-1: config 0 has no interface number 0
[  166.964585][ T5312] usb 1-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  166.978762][ T5312] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.985785][ T5312] usb 1-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1
[  166.995270][ T5312] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  166.999048][ T5312] usb 1-1: Manufacturer: syz
[  167.008937][ T5312] usb 1-1: config 0 descriptor??
[  167.019635][ T5312] cxacru 1-1:0.109: cxacru_bind: interface has incorrect endpoints
[  167.022977][ T5312] cxacru 1-1:0.109: usbatm_usb_probe: bind failed: -19!
[  167.241748][  T791] usb 1-1: USB disconnect, device number 20
[  167.372264][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'.
[  167.400460][ T9102] 8021q: adding VLAN 0 to HW filter on device bond1
[  167.412948][ T9105] loop3: detected capacity change from 0 to 2048
[  167.431620][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  167.441177][ T9105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.455033][ T9105] overlayfs: invalid redirect ((null))
[  167.484789][ T6620] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  167.510773][ T6620] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.576027][ T9112] loop3: detected capacity change from 0 to 256
[  167.581320][ T9112] exfat: Deprecated parameter 'namecase'
[  167.583761][ T9112] exfat: Deprecated parameter 'utf8'
[  167.598445][ T9112] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  167.721635][ T9119] 9pnet: p9_errstr2errno: server reported unknown error 184467
[  167.732629][ T9121] netlink: 'syz.1.1292': attribute type 4 has an invalid length.
[  167.736136][ T9121] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1292'.
[  167.849745][ T9132] overlayfs: failed to clone upperpath
[  167.923029][   T33] audit: type=1326 audit(1755042798.777:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9133 comm="syz.1.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  167.939565][   T33] audit: type=1326 audit(1755042798.797:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9133 comm="syz.1.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  167.962188][   T33] audit: type=1326 audit(1755042798.797:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9133 comm="syz.1.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  167.974951][   T33] audit: type=1326 audit(1755042798.797:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9133 comm="syz.1.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  167.987126][   T33] audit: type=1326 audit(1755042798.797:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9133 comm="syz.1.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  167.996845][   T33] audit: type=1326 audit(1755042798.797:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9133 comm="syz.1.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  168.249450][   T33] audit: type=1326 audit(1755042798.797:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9133 comm="syz.1.1298" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde1e78ebe9 code=0x7ffc0000
[  168.828326][ T9156] netlink: 'syz.3.1308': attribute type 1 has an invalid length.
[  168.968810][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'.
[  169.153133][ T9176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1318'.
[  169.160409][ T9176] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  169.214305][ T9180] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1320'.
[  169.286045][ T9182] loop0: detected capacity change from 0 to 256
[  169.302704][ T9182] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x200c26b4, utbl_chksum : 0xe619d30d)
[  169.378927][ T9184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1322'.
[  169.462694][ T9179] loop3: detected capacity change from 0 to 32768
[  169.498119][ T6087] udevd[6087]: symlink '../../loop3' '/dev/disk/by-uuid/07000000-0000-0000-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system
[  169.530119][ T9179] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  169.611096][ T6620] ocfs2: Unmounting device (7,3) on (node local)
[  170.148461][  T791] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  170.322094][  T791] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  170.324758][  T791] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x55, changing to 0x5
[  170.336604][  T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  170.350205][  T791] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  170.364692][  T791] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  170.372773][  T791] usb 4-1: Manufacturer: syz
[  170.381100][  T791] usb 4-1: config 0 descriptor??
[  170.407153][  T791] igorplugusb 4-1:0.0: endpoint incorrect
[  170.591843][  T791] usb 4-1: USB disconnect, device number 19
[  170.968653][ T9249] ==================================================================
[  170.971324][ T9249] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  170.973815][ T9249] Read of size 1 at addr ffff88802859c330 by task syz.1.1351/9249
[  170.976975][ T9249] 
[  170.978097][ T9249] CPU: 1 UID: 0 PID: 9249 Comm: syz.1.1351 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  170.978111][ T9249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.978138][ T9249] Call Trace:
[  170.978144][ T9249]  <TASK>
[  170.978149][ T9249]  dump_stack_lvl+0x189/0x250
[  170.978165][ T9249]  ? __kasan_check_byte+0x12/0x40
[  170.978181][ T9249]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.978191][ T9249]  ? lock_release+0x4b/0x3e0
[  170.978207][ T9249]  ? __virt_addr_valid+0x4a5/0x5c0
[  170.978221][ T9249]  print_report+0xca/0x240
[  170.978229][ T9249]  ? xfrm_state_find+0x2cf2/0x5400
[  170.978240][ T9249]  kasan_report+0x118/0x150
[  170.978257][ T9249]  ? xfrm_state_find+0x2cf2/0x5400
[  170.978269][ T9249]  xfrm_state_find+0x2cf2/0x5400
[  170.978285][ T9249]  ? xfrm_state_find+0x1da/0x5400
[  170.978297][ T9249]  ? __pfx_xfrm_state_find+0x10/0x10
[  170.978311][ T9249]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  170.978325][ T9249]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  170.978334][ T9249]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  170.978342][ T9249]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  170.978357][ T9249]  ? xfrm_expand_policies+0x41f/0x6a0
[  170.978365][ T9249]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  170.978380][ T9249]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  170.978394][ T9249]  xfrm_lookup_route+0x3c/0x1c0
[  170.978401][ T9249]  ? sctp_v6_get_dst+0x57e/0x1bc0
[  170.978411][ T9249]  sctp_v6_get_dst+0x7cc/0x1bc0
[  170.978420][ T9249]  ? crng_make_state+0x13a/0x700
[  170.978428][ T9249]  ? __pfx_crng_make_state+0x10/0x10
[  170.978437][ T9249]  ? __pfx_sctp_v6_get_dst+0x10/0x10
[  170.978446][ T9249]  ? __asan_memset+0x22/0x50
[  170.978458][ T9249]  ? dst_release+0x72/0x1b0
[  170.978467][ T9249]  sctp_transport_route+0x118/0x2f0
[  170.978477][ T9249]  sctp_assoc_add_peer+0x657/0x13b0
[  170.978491][ T9249]  sctp_connect_new_asoc+0x30a/0x690
[  170.978503][ T9249]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  170.978513][ T9249]  ? __local_bh_enable_ip+0x12d/0x1c0
[  170.978523][ T9249]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  170.978534][ T9249]  ? security_sctp_bind_connect+0x7e/0x2e0
[  170.978544][ T9249]  sctp_sendmsg+0x155c/0x2810
[  170.978556][ T9249]  ? __pfx_sctp_sendmsg+0x10/0x10
[  170.978567][ T9249]  ? aa_sk_perm+0x81e/0x950
[  170.978578][ T9249]  ? __pfx_aa_sk_perm+0x10/0x10
[  170.978587][ T9249]  ? sock_rps_record_flow+0x19/0x410
[  170.978596][ T9249]  ? inet_sendmsg+0x2f4/0x370
[  170.978604][ T9249]  __sock_sendmsg+0x19c/0x270
[  170.978613][ T9249]  __sys_sendto+0x3bd/0x520
[  170.978623][ T9249]  ? __pfx___sys_sendto+0x10/0x10
[  170.978632][ T9249]  ? do_futex+0x333/0x420
[  170.978648][ T9249]  ? rcu_is_watching+0x15/0xb0
[  170.978658][ T9249]  __x64_sys_sendto+0xde/0x100
[  170.978668][ T9249]  do_syscall_64+0xfa/0x3b0
[  170.978680][ T9249]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.978688][ T9249]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.978697][ T9249]  ? exc_page_fault+0x9f/0xf0
[  170.978706][ T9249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.978714][ T9249] RIP: 0033:0x7fde1e78ebe9
[  170.978759][ T9249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.978768][ T9249] RSP: 002b:00007fde1f620038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  170.978778][ T9249] RAX: ffffffffffffffda RBX: 00007fde1e9b5fa0 RCX: 00007fde1e78ebe9
[  170.978784][ T9249] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  170.978789][ T9249] RBP: 00007fde1e811e19 R08: 0000200000000080 R09: 000000000000001c
[  170.978795][ T9249] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000000
[  170.978800][ T9249] R13: 00007fde1e9b6038 R14: 00007fde1e9b5fa0 R15: 00007ffd0f1911d8
[  170.978809][ T9249]  </TASK>
[  170.978813][ T9249] 
[  171.102527][ T9249] Allocated by task 7189:
[  171.104085][ T9249]  kasan_save_track+0x3e/0x80
[  171.105978][ T9249]  __kasan_slab_alloc+0x6c/0x80
[  171.107899][ T9249]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  171.110032][ T9249]  xfrm_state_alloc+0x24/0x2f0
[  171.111629][ T9249]  __find_acq_core+0x8a7/0x1c00
[  171.113388][ T9249]  xfrm_find_acq+0x78/0xa0
[  171.115049][ T9249]  xfrm_alloc_userspi+0x6b3/0xc90
[  171.116654][ T9249]  xfrm_user_rcv_msg+0x7a3/0xab0
[  171.118205][ T9249]  netlink_rcv_skb+0x208/0x470
[  171.119703][ T9249]  xfrm_netlink_rcv+0x79/0x90
[  171.121208][ T9249]  netlink_unicast+0x82f/0x9e0
[  171.122678][ T9249]  netlink_sendmsg+0x805/0xb30
[  171.124347][ T9249]  __sock_sendmsg+0x21c/0x270
[  171.126171][ T9249]  ____sys_sendmsg+0x505/0x830
[  171.128010][ T9249]  ___sys_sendmsg+0x21f/0x2a0
[  171.129864][ T9249]  __x64_sys_sendmsg+0x19b/0x260
[  171.131782][ T9249]  do_syscall_64+0xfa/0x3b0
[  171.133570][ T9249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.135799][ T9249] 
[  171.136750][ T9249] Freed by task 10:
[  171.138244][ T9249]  kasan_save_track+0x3e/0x80
[  171.140077][ T9249]  kasan_save_free_info+0x46/0x50
[  171.142035][ T9249]  __kasan_slab_free+0x5b/0x80
[  171.143939][ T9249]  kmem_cache_free+0x18f/0x400
[  171.145730][ T9249]  xfrm_state_gc_task+0x52d/0x6b0
[  171.147363][ T9249]  process_scheduled_works+0xae1/0x17b0
[  171.149294][ T9249]  worker_thread+0x8a0/0xda0
[  171.151086][ T9249]  kthread+0x711/0x8a0
[  171.152684][ T9249]  ret_from_fork+0x3fc/0x770
[  171.154484][ T9249]  ret_from_fork_asm+0x1a/0x30
[  171.156373][ T9249] 
[  171.157303][ T9249] The buggy address belongs to the object at ffff88802859c000
[  171.157303][ T9249]  which belongs to the cache xfrm_state of size 928
[  171.162508][ T9249] The buggy address is located 816 bytes inside of
[  171.162508][ T9249]  freed 928-byte region [ffff88802859c000, ffff88802859c3a0)
[  171.167703][ T9249] 
[  171.168657][ T9249] The buggy address belongs to the physical page:
[  171.171081][ T9249] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2859c
[  171.174321][ T9249] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  171.177399][ T9249] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  171.180197][ T9249] page_type: f5(slab)
[  171.181678][ T9249] raw: 00fff00000000040 ffff888104d9eb40 dead000000000122 0000000000000000
[  171.184853][ T9249] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  171.187888][ T9249] head: 00fff00000000040 ffff888104d9eb40 dead000000000122 0000000000000000
[  171.191142][ T9249] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  171.193705][ T9249] head: 00fff00000000002 ffffea0000a16701 00000000ffffffff 00000000ffffffff
[  171.196268][ T9249] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  171.198831][ T9249] page dumped because: kasan: bad access detected
[  171.200777][ T9249] page_owner tracks the page as allocated
[  171.202566][ T9249] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7189, tgid 7188 (syz.1.503), ts 110233865635, free_ts 110219750224
[  171.208174][ T9249]  post_alloc_hook+0x240/0x2a0
[  171.209680][ T9249]  get_page_from_freelist+0x21e4/0x22c0
[  171.211350][ T9249]  __alloc_frozen_pages_noprof+0x181/0x370
[  171.213072][ T9249]  alloc_pages_mpol+0x232/0x4a0
[  171.214587][ T9249]  allocate_slab+0x8a/0x370
[  171.215995][ T9249]  ___slab_alloc+0xbeb/0x1410
[  171.217469][ T9249]  kmem_cache_alloc_noprof+0x283/0x3c0
[  171.219178][ T9249]  xfrm_state_alloc+0x24/0x2f0
[  171.220708][ T9249]  __find_acq_core+0x8a7/0x1c00
[  171.222246][ T9249]  xfrm_find_acq+0x78/0xa0
[  171.223644][ T9249]  xfrm_alloc_userspi+0x6b3/0xc90
[  171.225214][ T9249]  xfrm_user_rcv_msg+0x7a3/0xab0
[  171.226771][ T9249]  netlink_rcv_skb+0x208/0x470
[  171.228271][ T9249]  xfrm_netlink_rcv+0x79/0x90
[  171.229793][ T9249]  netlink_unicast+0x82f/0x9e0
[  171.231328][ T9249]  netlink_sendmsg+0x805/0xb30
[  171.232783][ T9249] page last free pid 5312 tgid 5312 stack trace:
[  171.234739][ T9249]  __free_frozen_pages+0xbc4/0xd30
[  171.236349][ T9249]  stack_depot_save_flags+0x436/0x860
[  171.238143][ T9249]  kasan_save_track+0x4f/0x80
[  171.239693][ T9249]  __kasan_slab_alloc+0x6c/0x80
[  171.241231][ T9249]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  171.242927][ T9249]  skb_clone+0x212/0x3a0
[  171.244282][ T9249]  netlink_broadcast_filtered+0x749/0x12c0
[  171.246143][ T9249]  netlink_broadcast+0x37/0x50
[  171.247634][ T9249]  kobject_uevent_net_broadcast+0x378/0x560
[  171.249515][ T9249]  kobject_uevent_env+0x55b/0x8c0
[  171.251115][ T9249]  device_add+0x557/0xb50
[  171.252499][ T9249]  cdev_device_add+0x1d6/0x390
[  171.253994][ T9249]  mousedev_create+0x547/0x680
[  171.255502][ T9249]  mousedev_connect+0x26/0x3a0
[  171.256996][ T9249]  input_register_device+0xd0e/0x1140
[  171.258653][ T9249]  bcm5974_probe+0x1679/0x21c0
[  171.260178][ T9249] 
[  171.260942][ T9249] Memory state around the buggy address:
[  171.262661][ T9249]  ffff88802859c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  171.265152][ T9249]  ffff88802859c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  171.267658][ T9249] >ffff88802859c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  171.270300][ T9249]                                      ^
[  171.272126][ T9249]  ffff88802859c380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  171.274693][ T9249]  ffff88802859c400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  171.277205][ T9249] ==================================================================
[  171.284851][ T9249] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  171.287317][ T9249] CPU: 1 UID: 0 PID: 9249 Comm: syz.1.1351 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  171.291120][ T9249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.294401][ T9249] Call Trace:
[  171.295461][ T9249]  <TASK>
[  171.296400][ T9249]  dump_stack_lvl+0x99/0x250
[  171.297850][ T9249]  ? __asan_memcpy+0x40/0x70
[  171.299266][ T9249]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.300854][ T9249]  ? __pfx__printk+0x10/0x10
[  171.302313][ T9249]  vpanic+0x281/0x750
[  171.303564][ T9249]  ? preempt_schedule+0xae/0xc0
[  171.305086][ T9249]  ? __pfx_vpanic+0x10/0x10
[  171.306554][ T9249]  ? preempt_schedule_common+0x83/0xd0
[  171.308185][ T9249]  ? preempt_schedule+0xae/0xc0
[  171.309709][ T9249]  ? __pfx_preempt_schedule+0x10/0x10
[  171.311395][ T9249]  panic+0xb9/0xc0
[  171.312859][ T9249]  ? __pfx_panic+0x10/0x10
[  171.314623][ T9249]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  171.316950][ T9249]  ? xfrm_state_find+0x2cf2/0x5400
[  171.318960][ T9249]  check_panic_on_warn+0x89/0xb0
[  171.320920][ T9249]  ? xfrm_state_find+0x2cf2/0x5400
[  171.322739][ T9249]  end_report+0x78/0x160
[  171.324061][ T9249]  kasan_report+0x129/0x150
[  171.325515][ T9249]  ? xfrm_state_find+0x2cf2/0x5400
[  171.327110][ T9249]  xfrm_state_find+0x2cf2/0x5400
[  171.328926][ T9249]  ? xfrm_state_find+0x1da/0x5400
[  171.330873][ T9249]  ? __pfx_xfrm_state_find+0x10/0x10
[  171.332556][ T9249]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  171.334563][ T9249]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  171.337182][ T9249]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  171.339391][ T9249]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  171.341358][ T9249]  ? xfrm_expand_policies+0x41f/0x6a0
[  171.343043][ T9249]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  171.344774][ T9249]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  171.346602][ T9249]  xfrm_lookup_route+0x3c/0x1c0
[  171.348146][ T9249]  ? sctp_v6_get_dst+0x57e/0x1bc0
[  171.349714][ T9249]  sctp_v6_get_dst+0x7cc/0x1bc0
[  171.351250][ T9249]  ? crng_make_state+0x13a/0x700
[  171.352794][ T9249]  ? __pfx_crng_make_state+0x10/0x10
[  171.354780][ T9249]  ? __pfx_sctp_v6_get_dst+0x10/0x10
[  171.356680][ T9249]  ? __asan_memset+0x22/0x50
[  171.358277][ T9249]  ? dst_release+0x72/0x1b0
[  171.359849][ T9249]  sctp_transport_route+0x118/0x2f0
[  171.361515][ T9249]  sctp_assoc_add_peer+0x657/0x13b0
[  171.363557][ T9249]  sctp_connect_new_asoc+0x30a/0x690
[  171.365615][ T9249]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  171.367882][ T9249]  ? __local_bh_enable_ip+0x12d/0x1c0
[  171.369891][ T9249]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  171.371948][ T9249]  ? security_sctp_bind_connect+0x7e/0x2e0
[  171.374251][ T9249]  sctp_sendmsg+0x155c/0x2810
[  171.376075][ T9249]  ? __pfx_sctp_sendmsg+0x10/0x10
[  171.378186][ T9249]  ? aa_sk_perm+0x81e/0x950
[  171.379977][ T9249]  ? __pfx_aa_sk_perm+0x10/0x10
[  171.382051][ T9249]  ? sock_rps_record_flow+0x19/0x410
[  171.384146][ T9249]  ? inet_sendmsg+0x2f4/0x370
[  171.385989][ T9249]  __sock_sendmsg+0x19c/0x270
[  171.387653][ T9249]  __sys_sendto+0x3bd/0x520
[  171.389147][ T9249]  ? __pfx___sys_sendto+0x10/0x10
[  171.391003][ T9249]  ? do_futex+0x333/0x420
[  171.392496][ T9249]  ? rcu_is_watching+0x15/0xb0
[  171.394063][ T9249]  __x64_sys_sendto+0xde/0x100
[  171.395611][ T9249]  do_syscall_64+0xfa/0x3b0
[  171.397119][ T9249]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.398839][ T9249]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.400874][ T9249]  ? exc_page_fault+0x9f/0xf0
[  171.402431][ T9249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.404234][ T9249] RIP: 0033:0x7fde1e78ebe9
[  171.405784][ T9249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.412197][ T9249] RSP: 002b:00007fde1f620038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  171.414725][ T9249] RAX: ffffffffffffffda RBX: 00007fde1e9b5fa0 RCX: 00007fde1e78ebe9
[  171.417229][ T9249] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  171.419668][ T9249] RBP: 00007fde1e811e19 R08: 0000200000000080 R09: 000000000000001c
[  171.422528][ T9249] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000000
[  171.425131][ T9249] R13: 00007fde1e9b6038 R14: 00007fde1e9b5fa0 R15: 00007ffd0f1911d8
[  171.427634][ T9249]  </TASK>
[  171.429320][ T9249] Kernel Offset: disabled
[  171.430755][ T9249] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:53:21  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000057800 RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000057800 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc90000007e50
R8 =0000000000000000 R9 =ffffffff81ae029e R10=0000000000000003 R11=ffffffff81703490
R12=0000000010005fa1 R13=dffffc0000000000 R14=0000000000057800 R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c35fd39 CR3=0000000121c4c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fde1e987498 00007fde1e987470 XMM03=00007fde1e9874a8 00007fde1e9874a0
XMM04=00007fde1f4ed100 00007fde1e987460 XMM05=00007fde1e987478 00007fde1e9874c0
XMM06=00007fde1e9874b8 00007fde1e9874b0 XMM07=00007fde1e9874a8 00007fde1e9874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fde1e812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000016e26 RDI=0000000000016e27 RBP=00000000000003f8 RSP=ffffc90002c8e890
R8 =ffff8880216f0237 R9 =1ffff110042de046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18c5 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fde1f6206c0 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fde1f61ffc8 CR3=0000000121c4c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fde1e987498 00007fde1e987470 XMM03=00007fde1e9874a8 00007fde1e9874a0
XMM04=00007fde1f4ed100 00007fde1e987460 XMM05=00007fde1e987478 00007fde1e9874c0
XMM06=00007fde1e9874b8 00007fde1e9874b0 XMM07=00007fde1e9874a8 00007fde1e9874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fde1e812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
