last executing test programs: 11m22.9471145s ago: executing program 5 (id=177): modify_ldt$write(0x1, &(0x7f0000000240)={0x1000, 0x0, 0x2000}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000280)="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") 11m19.410291519s ago: executing program 5 (id=192): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x80, 0x8, 0x8, 0xf713, 0x4}}) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x1f9, &(0x7f0000002280)={0x0, 0x11ab, 0x40, 0x1, 0xa2}) io_uring_setup(0x2af3, &(0x7f0000002300)={0x0, 0x3, 0x3c0, 0x0, 0x39f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r5}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 11m13.633775192s ago: executing program 5 (id=211): unshare(0x24020400) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x640082, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r0, 0x0) 11m13.201486005s ago: executing program 5 (id=213): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1) 11m12.045486608s ago: executing program 5 (id=216): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x12) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/251, 0x0, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x494, &(0x7f0000000600)={[{0xd7, 0x4e00, "71f3ac5e15ee0232bc24dba9298a54ec966cb85530f21aa6840cd36bedfceec95732efa2cadb145a3141f69e19fc769e3bbb6bb62e48099dffc13cb2ff3e141432928382e5b534eaa1cc6d801e1cb6b798fd110d191b6edc1521e2ce96f8ece133d1bd86d947af770223b8ccc61e84b4ebf18e1ce312dbb32caa37b2241c1b587fff283aaae396f39acbf9a0860eff42ed454d930e6d6bac04faed71c9a6ce51750a9317dba7e02017ae08cb56770a1ca49a22229b0469c878c4249c7516fe1bdb57cd70460970e83980d9ce55274eda067e8889c8c40d"}, {0x1ca, 0x4e00, "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"}, {0x35, 0x4e00, "f549366000fa2a1ece614d4b87ef5b2fa6b6e6266dc4ff34f10bd725427f565fec465cc54ba3131524e1c5ec044727ace7bc75dc1f"}, {0x71, 0x4e00, "571ba06067f0c9a62918e48d4b3bc9a21134ed8fc28bd1029d9fc57e84ad556d0df39241442c0fa35ab6e5cf3bcf1637c196a665b7c539f7160a5646106c27ce1da3e9cda00c9ae8be2bde4ad37b1572a909b7eb83f27b22ecf2c85bb9aba4a61b2219ba8307a83f3e9610e463fe0fd343"}, {0xa4, 0x4e00, "4b038106923e806f625485630eebca832872428fa2da9c38df147b2347ba3cb58231e0bea9c33bbae3b9dcf8a52307416aba5215bdb1e1212d0903e372726e0878b849eb37444d72978aaa70007cd3529a0737b89d8ebc7f4698fdce4a9ed52965f2a2d55a11658fdfff2364c9b1f741e552e8fcb6b5b62914b31292425e7784293c6cc8289214ae3a55372af0cbc1e504b24ff2025fc79280b92a000e5c8569d82b1465"}, {0x86, 0x4e00, "ee9f840336de36d20033710dd00d4a355f244fcc5179b8292877477160520e8e65805560c62c65d576ba414f356c804aea8e3be8636c07b00bbff4f8dddcfce27242e8a5ec7cf3d1b6cdf437535fc8cffe389b2bf72fd7216a79af4d8bdeb73c0916f9652a47e5c22ed3ec8e802caf9917ae2364dfb7fd95ce8f842bfc91640f0bf3b12bbf10"}]}) 11m11.453643124s ago: executing program 5 (id=221): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000280)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000580)={0x0, 0x1, 0x10026, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8000000, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) pipe(0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48}) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) io_cancel(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11m10.598059516s ago: executing program 32 (id=221): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000280)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000580)={0x0, 0x1, 0x10026, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8000000, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) pipe(0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48}) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) io_cancel(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11.747166225s ago: executing program 2 (id=2725): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'caif0\x00', 0x1000}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FW_MASK={0x8, 0x5, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) 10.519994812s ago: executing program 4 (id=2727): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x3, 0x15f}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x2, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/206, 0xce}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9.905046935s ago: executing program 4 (id=2728): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x0, 0x8800000) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfeb000) 9.097377668s ago: executing program 4 (id=2731): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9, 0x100a99e, 0x10}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) 7.484840078s ago: executing program 0 (id=2738): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x4) syz_mount_image$btrfs(&(0x7f0000000300), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000100)={[{@space_cache}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x30]}}, {@usebackuproot}, {@noautodefrag}, {@nossd}, {@user_subvol_rm}, {@nodatasum}]}, 0x3, 0x510e, &(0x7f00000196c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r0) 6.373711206s ago: executing program 2 (id=2739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) 6.144928161s ago: executing program 0 (id=2740): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = getpid() syz_pidfd_open(r1, 0x0) socket$kcm(0x11, 0x3, 0x0) fsopen(&(0x7f0000001240)='9p\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$netlink(0x10, 0x3, 0xa) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x15c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 5.957212714s ago: executing program 2 (id=2741): socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095003300000000009500a505000000006901ee3d8cf6fbc48bc095b6462f7756"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00'}) 5.561265691s ago: executing program 2 (id=2742): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getpid() getsockopt(r3, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0)) 5.20805436s ago: executing program 4 (id=2743): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r2, &(0x7f0000000780)=""/185, 0xb9, 0x0) 5.157466713s ago: executing program 0 (id=2744): syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) unshare(0x22020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x0, 0xf, 0x8, 0x80, 0x2, 0x3, 0x400, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffef01, 0x6, 0x3, 0x3, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x1549375f, 0x0, 0x5, 0x6, 0x9, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0x12, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0xa09, 0x8, 0x2c, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x8, 0x7fff, 0x6, 0xffffffff, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x7, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x0, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x1, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x1, 0x5, 0xfffffffd, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x101, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0xcc8, 0x7ff, 0x12b, 0x4, 0x1, 0xe, 0x0, 0x5, 0x1c, 0x40, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x0, 0x939, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10004, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0x40000af, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343f, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.153181148s ago: executing program 3 (id=2745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r0, r0, 0x0, 0x80000000) 4.852711015s ago: executing program 3 (id=2746): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) 4.76934509s ago: executing program 0 (id=2747): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) 4.393157644s ago: executing program 3 (id=2749): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4ab", 0xf) 4.197080787s ago: executing program 0 (id=2750): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007311320000000000166400000000010095007400000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000004ec0)=[{0x0}], 0x1, 0x8000, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) pread64(r2, &(0x7f0000000400)=""/154, 0x9a, 0x51) syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 4.193934122s ago: executing program 1 (id=2751): pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000980), 0xfdef) splice(r0, 0x0, r2, 0x0, 0x80, 0x4) read(r0, &(0x7f0000000800)=""/217, 0xd9) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 3.893446751s ago: executing program 3 (id=2753): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2001, 0x0) 3.682990323s ago: executing program 3 (id=2754): socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x7, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x8, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x9, 0x80000000, 0x242, 0x3, 0x10e, 0x0, 0x71, 0x2, 0x6, 0x3, 0x202, 0x6, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xca, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffb, 0x3, 0x2, 0x7, 0x5, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0xa, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x9, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x10, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0xffff, 0x9, 0x3e7, 0x6, 0x5, 0x2, 0x2, 0x4, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x410002, 0x3, 0x7ff, 0x5, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x5, 0x7, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7ff, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffd, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x6, 0xb1c, 0x1, 0x200, 0x3, 0xfffffffe]}, 0x45c) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48}) socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 3.682808952s ago: executing program 6 (id=2755): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 3.24706338s ago: executing program 3 (id=2756): socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) 3.053402581s ago: executing program 1 (id=2757): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = getpid() syz_pidfd_open(r1, 0x0) socket$kcm(0x11, 0x3, 0x0) fsopen(&(0x7f0000001240)='9p\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$netlink(0x10, 0x3, 0xa) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x15c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.951362406s ago: executing program 6 (id=2758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r0, r0, 0x0, 0x80000000) 2.73026589s ago: executing program 1 (id=2759): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="0d03000000000000003f12"], 0x14}}, 0x300000000000000) 2.59986392s ago: executing program 6 (id=2760): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000c00)=ANY=[@ANYBLOB='shortname=mixed,sys_immutable,nfs,iocharset=cp936,shortname=lower,rodir,nocase,codepage=860,shortname=lower,shortname=lower,shortname=win95,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646973636172642c73686f72746e616d653d77696e39352c756e695f786c6174653d302c0061a98eed20cb46078e5a4a40eed4c77e7462b84482aa7061236bf6bf5f48d7580feb45e35df449cbc10bccc2d8eb7a405ecd33c7efe0552ac1485c1dc47fec07062af97740e17f7fed7c51b26811fd16e28ca3f29cfad88fc4c5504243392e01cbdde7b5c763979598f95f09b95d2c45628665902b30ddfbf9bbd38185eabec1312bac0ff85a1ffbe2a612f453253bf5fcac7dd1e683bf671e2c5362e5a7"], 0x43, 0x357, &(0x7f0000000140)="$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") syz_mount_image$exfat(0x0, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x852572a58090e1e6, 0x0, 0x1, 0x0, &(0x7f0000000080)) 2.473556578s ago: executing program 1 (id=2761): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="3000000000000000840000"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) 2.128973749s ago: executing program 1 (id=2762): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) 1.755286127s ago: executing program 1 (id=2763): epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.673382263s ago: executing program 2 (id=2764): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") setxattr(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='osx.:'], 0x0, 0x0, 0x0) 1.278327683s ago: executing program 2 (id=2765): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x8, @local, 0xe}}}, 0x30) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 1.000802593s ago: executing program 6 (id=2766): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2001, 0x0) 889.419873ms ago: executing program 4 (id=2767): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000029c0)='/dev/comedi4\x00', 0x600, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000040)={0x1, 0x3, 0x10}) 613.560167ms ago: executing program 6 (id=2768): unshare(0x2040600) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) 593.587603ms ago: executing program 4 (id=2769): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000240)=[{&(0x7f00000078c0)=""/201, 0xc9}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 200.437103ms ago: executing program 6 (id=2770): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x200000, &(0x7f0000000740)={[{@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0xc0}}, {@delalloc}, {@orlov}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nouid32}, {@resgid}, {@nomblk_io_submit}, {@sysvgroups}]}, 0xdc, 0x573, &(0x7f0000001140)="$eJzs3d9rW1UcAPDvTdv91nUwhvoggz04mUvW1h8TBOej6HCg71to78pouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0ZRQYTKTW+6bE36a6nJls8HbnvOvTc995t7v6fn5CYkgIF1NPtRiHg5Ir5OIg62bBuOfOPRlf2WHl6fzJYklpc//SOJJF/X3D/Jf+/PKy9FxC9fRpworG23trA4U65U0rm8XqrPXinVFhZPXpotT6fT6eXxiYnTb02Mv/vO212L9fVzf333yd0PT391bOnbn+4fup3EmTiQb2uN4yncaK0cLf+bl0bizBM7jnWhsX6S9PoA2JahPM9HIusDDsZQnvXA8++LiFgGBlQi/2FANccBzbl9l+bBz4wHH6xMgNbGP7zy2kjsacyN9i0lj82MsvnuaBfaz9r4+fc7t7Ml1n8dYu8GdYAtuXEzIk4ND6/t/5K8/9u+U40Xj9f3ZBuD9v8HeuluNv55o934p7A6/ok245/9bXJ3OzbO/8L9LjTTUTb+e6/t+He16xodymsvNMZ8I8nFS5X0VES8GBHHY2R3Vl/vfs7ppXvLnba1jv+yJWu/ORbMj+P+8O7HHzNVrpefJuZWD25GvNJ2/Jusnv+kzfnPno9zm2zjSHrn1dZ6602yjePfWcs/RrzW9vw/uqOVlUrNytr7k6XG9VBqXhVr/XnryK+d2u91/Nn537d+/KNJ6/3a2tbb+GHPP2mnbdu9/nclnzXKu/J118r1+txYxK7k47Xrxx89tllv7p/Ff/xYRKzT/7W7/rPJ14XYxAAnIm4dvnVh+/HvrCz+qS2d/60X7n30+fed2t/c+X+zUTqer+nU//3dUt7sAT7t8wcAAAAAAAD9pBARByIpFFfLhUKxuPL+jsOxr1Cp1uonLlbnL09F47OyozFSaN7pPtjyfoix/P2wzfr4E/WJiDgUEd8M7W3Ui5PVylSvgwcAAAAAAAAAAAAAAAAAAIA+sb/D5/8zvw31+uiAHdf4YoPdvT4KoBc2/Mr/bnzTE9CXNsx/4Lkl/2FwyX8YXPIfBpf8h8El/2FwyX8YXPIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAuurc2bPZsrz08PpkVp+6ujA/U716ciqtzRRn5yeLk9W5K8XpanW6khYnq7Mb/b1KtXplbDzmr5Xqaa1eqi0snp+tzl+un780W55Oz6cj/0tUAAAAAAAAAAAAAAAAAAAA8GypLSzOlCuVdE6hY+H96IvD2MkAV2zr4cP9EoVCVws97pgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMV/AQAA//9yHDO8") sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) ioprio_set$pid(0x2, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r1, 0x0, 0x800000009) 0s ago: executing program 0 (id=2771): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x8fc3, 0x10000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)={0x24, r5, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1f3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @broadcast=0xac141436}}) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x1, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) socket$unix(0x1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, &(0x7f0000000240)}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000440)={0xc, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): B control message 'out' went wrong. [ 681.340545][T10170] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 681.381417][T10170] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 681.417017][T10170] usb 1-1: USB disconnect, device number 26 [ 681.823333][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/87.tmp-b7:6' failed: Read-only file system [ 681.980311][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 682.220356][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2090'. [ 682.505405][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 683.017026][T12932] loop6: detected capacity change from 0 to 63 [ 683.194963][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/88.tmp-b7:6' failed: Read-only file system [ 683.369027][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 683.932969][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 684.069381][T12946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2100'. [ 684.159192][T12946] vlan0: entered promiscuous mode [ 684.230716][T12946] batadv0: entered promiscuous mode [ 685.068901][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.085320][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.185468][T10170] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 685.392825][T10170] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 685.440962][T10170] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 685.484535][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2107'. [ 685.510504][T10170] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 685.566133][T10170] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 685.655500][T10170] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 685.710208][T10170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.782410][T12956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 685.994179][T10170] ath6kl: Failed to submit usb control message: -71 [ 686.151285][T10170] ath6kl: unable to send the bmi data to the device: -71 [ 686.158328][T10170] ath6kl: Unable to send get target info: -71 [ 686.216629][T10170] ath6kl: Failed to init ath6kl core: -71 [ 686.401103][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/88.tmp-b7:6' failed: Read-only file system [ 686.416780][T10170] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 686.525246][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 686.536888][T10170] usb 4-1: USB disconnect, device number 25 [ 686.603456][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/88.tmp-b7:6' failed: Read-only file system [ 686.864401][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 687.001707][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 687.065249][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 687.492680][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 688.343929][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 688.534730][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 688.577238][T12994] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 688.583759][T12994] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 688.595187][T12994] vhci_hcd vhci_hcd.0: Device attached [ 688.850705][ T5975] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 689.114980][T13001] syz.2.2117 (13001): drop_caches: 2 [ 689.242462][T12996] vhci_hcd: connection reset by peer [ 689.257221][ T2990] vhci_hcd: stop threads [ 689.261637][ T2990] vhci_hcd: release socket [ 689.269655][ T2990] vhci_hcd: disconnect device [ 690.035250][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 691.588008][T13020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.147809][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 692.247236][T10170] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 692.327392][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 692.444904][T10170] usb 2-1: unable to get BOS descriptor or descriptor too short [ 692.469257][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 692.488837][T10170] usb 2-1: not running at top speed; connect to a high speed hub [ 692.512395][T10170] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.544628][T10170] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 692.574591][T10170] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 692.630542][T10170] usb 2-1: Product: syz [ 692.648322][T10170] usb 2-1: Manufacturer: syz [ 692.652418][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 692.680097][T10170] usb 2-1: SerialNumber: syz [ 692.770110][T10170] usb 2-1: config 0 descriptor?? [ 692.934884][T10262] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 692.993680][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 693.118839][T10262] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 693.144223][T10262] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 693.211335][T10170] usb 2-1: USB disconnect, device number 37 [ 693.217506][T10262] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 693.280289][T10262] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.345995][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 693.430719][T10262] usb 7-1: config 0 descriptor?? [ 693.461265][T13035] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 694.010779][ T5975] vhci_hcd: vhci_device speed not set [ 694.320771][ T5884] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 694.455411][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 694.490588][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 694.509874][ T5884] usb 2-1: config 0 has no interfaces? [ 694.524758][ T5884] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 694.559872][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.610154][ T5884] usb 2-1: Product: syz [ 694.629369][ T5884] usb 2-1: Manufacturer: syz [ 694.649670][ T5884] usb 2-1: SerialNumber: syz [ 694.688371][ T5884] usb 2-1: config 0 descriptor?? [ 694.900310][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 694.962202][T13059] tipc: Enabled bearer , priority 0 [ 694.986912][T13059] syzkaller0: entered promiscuous mode [ 695.008551][T13059] syzkaller0: entered allmulticast mode [ 695.073306][T13059] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 695.146164][T13058] tipc: Resetting bearer [ 695.236107][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 695.293565][T13058] tipc: Disabling bearer [ 695.406990][T10170] usb 2-1: USB disconnect, device number 38 [ 695.608828][T10170] usb 7-1: USB disconnect, device number 35 [ 696.162416][ T6020] udevd[6020]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 696.296465][T13079] tipc: Enabled bearer , priority 10 [ 696.566825][ T5975] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 696.670558][T10262] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 696.836684][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.854502][T10262] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 696.881111][ T5975] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 696.890355][ T5949] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 696.923302][T10262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.958567][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.967006][T10262] usb 4-1: Product: syz [ 696.973974][T10262] usb 4-1: Manufacturer: syz [ 696.978611][T10262] usb 4-1: SerialNumber: syz [ 696.990186][ T5975] usb 5-1: config 0 descriptor?? [ 696.999220][T10262] usb 4-1: config 0 descriptor?? [ 697.062424][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 697.150931][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 697.237819][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 697.287966][ T5949] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 697.423557][ T5949] usb 2-1: config 2 has no interface number 0 [ 697.438652][ T5949] usb 2-1: config 2 interface 31 has no altsetting 0 [ 697.452185][T10262] usb 4-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 697.607896][ T5949] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 697.629928][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.659744][T10262] usb 4-1: failed to fetch extended address, random address set [ 697.714371][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 697.758779][ T5949] usb 2-1: Product: syz [ 697.861237][ T5949] usb 2-1: Manufacturer: syz [ 697.865993][ T5949] usb 2-1: SerialNumber: syz [ 697.963628][T10262] usb 4-1: USB disconnect, device number 26 [ 698.066414][ T5949] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 698.144463][ T6020] udevd[6020]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 698.195084][ T6370] udevd[6370]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 698.526723][ T6020] udevd[6020]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 698.578802][T13111] tipc: Enabling of bearer rejected, failed to enable media [ 698.851440][ T6370] udevd[6370]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 699.185426][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 700.861256][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2159'. [ 700.894037][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 701.250871][ T10] usb 2-1: USB disconnect, device number 39 [ 701.835930][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 702.022861][ T5975] usbhid 5-1:0.0: can't add hid device: -32 [ 702.033675][ T5975] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 702.174441][ T10] usb 5-1: USB disconnect, device number 22 [ 702.387824][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 702.654931][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 702.748801][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2166'. [ 703.872565][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 704.200525][ T43] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 704.222671][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 704.254672][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 704.288154][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 704.414519][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 704.576129][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 704.580687][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 704.596412][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 704.622766][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.632961][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 704.632990][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 704.688766][ T43] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 704.717934][ T43] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 704.785924][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 704.870663][ T43] usb 5-1: Product: syz [ 705.017914][ T5949] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 705.025734][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 705.030541][ T43] usb 5-1: Manufacturer: syz [ 705.043162][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 705.052547][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 705.081078][ T43] usb 5-1: SerialNumber: syz [ 705.098878][ T10] usb 3-1: Product: syz [ 705.101662][ T43] usb 5-1: config 0 descriptor?? [ 705.111142][ T10] usb 3-1: Manufacturer: syz [ 705.159102][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 705.204670][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 705.209889][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 705.240685][ T5949] usb 7-1: Using ep0 maxpacket: 16 [ 705.248080][ T5949] usb 7-1: config 0 has no interfaces? [ 705.481313][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 705.502251][ T5949] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 705.521001][ T5949] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 705.539373][ T5949] usb 7-1: Manufacturer: syz [ 705.572560][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 705.605067][ T5949] usb 7-1: config 0 descriptor?? [ 705.617473][ T10] usb 3-1: USB disconnect, device number 32 [ 705.665593][ T6370] udevd[6370]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 705.745435][ T43] usb 5-1: USB disconnect, device number 23 [ 705.988283][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 706.141923][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 707.617445][ T10] usb 7-1: USB disconnect, device number 36 [ 707.911407][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 707.974358][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 708.116025][T13219] bond0: (slave bond_slave_0): Releasing backup interface [ 708.131522][T13219] bond0: (slave bond_slave_1): Releasing backup interface [ 708.356498][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 708.462098][T13219] team0: Port device team_slave_0 removed [ 708.849722][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 708.926395][T13219] team0: Port device team_slave_1 removed [ 708.946171][T13219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.984193][T13219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.997904][T13219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.006683][T13219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.360720][ T10] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 709.539889][ T10] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 709.618571][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.696628][ T10] usb 7-1: Product: syz [ 709.749395][ T10] usb 7-1: Manufacturer: syz [ 709.764736][ T10] usb 7-1: SerialNumber: syz [ 709.776414][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 709.805759][ T10] usb 7-1: config 0 descriptor?? [ 710.324094][ T10] usb 7-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 710.905934][ T10] usb 7-1: failed to fetch extended address, random address set [ 711.193819][ T5923] udevd[5923]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 711.238619][ T10] usb 7-1: USB disconnect, device number 37 [ 711.240137][ T6020] udevd[6020]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 711.259690][ T6370] udevd[6370]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 711.336765][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2201'. [ 711.384378][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 711.468600][T13255] vlan0: entered promiscuous mode [ 711.496831][T13255] batadv0: entered promiscuous mode [ 711.645965][ T6370] udevd[6370]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 711.891651][T13266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 712.541803][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 712.725329][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 712.762497][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.794049][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.883811][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 712.915257][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 712.929541][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.941763][ T10] usb 5-1: config 0 descriptor?? [ 713.175210][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 714.351434][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0004/input/input22 [ 714.424339][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 714.428785][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0004/input/input23 [ 714.806388][ T10] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 714.995778][ T10] usb 5-1: USB disconnect, device number 24 [ 715.182780][T13300] fido_id[13300]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 716.060043][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 716.345542][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 716.406951][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 716.660180][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 716.673585][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 716.758729][T13334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.156947][T13337] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2229'. [ 717.227821][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 717.322702][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 717.435971][T13349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 718.204443][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 718.254659][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 718.302445][T10170] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 718.320138][T13359] tipc: Enabled bearer , priority 0 [ 718.361758][T13359] syzkaller0: entered promiscuous mode [ 718.392797][T13359] syzkaller0: entered allmulticast mode [ 718.484069][T10170] usb 5-1: Using ep0 maxpacket: 8 [ 718.509980][T10170] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 718.521724][T10170] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.575684][T13359] tipc: Resetting bearer [ 718.590750][T10170] usb 5-1: config 0 has no interfaces? [ 718.615539][T10170] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 718.633271][T13358] tipc: Resetting bearer [ 718.682827][T10170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.705974][T13358] tipc: Disabling bearer [ 718.733823][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 718.814666][T10170] usb 5-1: config 0 descriptor?? [ 718.973216][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 719.047718][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 719.394069][T13372] syz.6.2238 (13372): drop_caches: 2 [ 719.406006][T13372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2238'. [ 720.103236][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 720.767891][ T6029] usb 5-1: USB disconnect, device number 25 [ 720.873497][T13383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.269531][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2244'. [ 721.553101][T13396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2247'. [ 722.104027][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 722.355023][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 722.512370][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 723.090547][ T6029] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 723.263261][ T6029] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.311015][ T6029] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 723.374395][ T6029] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.417472][ T6029] usb 7-1: config 0 descriptor?? [ 723.444121][ T6029] pwc: Askey VC010 type 2 USB webcam detected. [ 723.510572][ T43] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 723.522675][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 723.724282][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 723.766798][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 723.837775][ T6029] pwc: recv_control_msg error -32 req 02 val 2b00 [ 723.840519][ T43] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 723.864555][ T6029] pwc: recv_control_msg error -32 req 02 val 2700 [ 723.892089][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.921405][ T6029] pwc: recv_control_msg error -32 req 02 val 2c00 [ 723.951206][T10262] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 723.961109][ T6029] pwc: recv_control_msg error -32 req 04 val 1000 [ 723.962650][ T43] usb 5-1: config 0 descriptor?? [ 724.018972][ T6029] pwc: recv_control_msg error -32 req 04 val 1300 [ 724.051479][ T6029] pwc: recv_control_msg error -32 req 04 val 1400 [ 724.085679][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 724.093723][ T6029] pwc: recv_control_msg error -32 req 02 val 2000 [ 724.105611][T10262] usb 3-1: Using ep0 maxpacket: 8 [ 724.130993][ T6029] pwc: recv_control_msg error -32 req 02 val 2100 [ 724.131992][T10262] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 724.157550][ T6029] pwc: recv_control_msg error -32 req 04 val 1500 [ 724.181547][ T6029] pwc: recv_control_msg error -32 req 02 val 2500 [ 724.197990][ T6029] pwc: recv_control_msg error -32 req 02 val 2400 [ 724.214686][T10262] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.236301][ T43] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 724.237708][ T6029] pwc: recv_control_msg error -32 req 02 val 2600 [ 724.265417][T10262] usb 3-1: config 0 has no interfaces? [ 724.341081][ T6029] pwc: recv_control_msg error -32 req 02 val 2900 [ 724.348704][T10262] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 724.368239][T10262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.383379][T10262] usb 3-1: config 0 descriptor?? [ 724.490716][T10262] usb 5-1: USB disconnect, device number 26 [ 724.552550][ T6029] pwc: recv_control_msg error -71 req 04 val 1100 [ 724.561963][ T6029] pwc: recv_control_msg error -71 req 04 val 1200 [ 724.626335][ T43] usb 3-1: USB disconnect, device number 33 [ 724.632973][ T6029] pwc: Registered as video103. [ 724.646935][ T6029] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input24 [ 724.744243][ T6029] usb 7-1: USB disconnect, device number 38 [ 724.843268][ T6020] udevd[6020]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 725.052487][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 725.264830][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/89.tmp-b7:6' failed: Read-only file system [ 725.317272][T13445] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2262'. [ 725.332460][T13446] loop6: detected capacity change from 0 to 63 [ 725.352286][T13446] buffer_io_error: 3219 callbacks suppressed [ 725.352315][T13446] Buffer I/O error on dev loop6, logical block 0, async page read [ 725.366459][T13446] Buffer I/O error on dev loop6, logical block 0, async page read [ 725.384492][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 725.411131][T13446] Buffer I/O error on dev loop6, logical block 0, async page read [ 725.426013][T13446] Buffer I/O error on dev loop6, logical block 0, async page read [ 725.454992][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read [ 725.554048][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 725.571322][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read [ 725.582955][T13453] Buffer I/O error on dev loop6, logical block 1, async page read [ 725.591116][T13453] Buffer I/O error on dev loop6, logical block 1, async page read [ 725.656068][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read [ 725.709370][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 725.766361][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read [ 725.817825][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/90.tmp-b7:6' failed: Read-only file system [ 726.111108][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 726.331462][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 726.343141][ T10] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 726.410881][T13460] syz.2.2265 (13460): drop_caches: 2 [ 726.896618][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 726.896639][ T30] audit: type=1326 audit(1755187820.402:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 726.984636][ T10] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 727.009476][ T30] audit: type=1326 audit(1755187820.402:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 727.076120][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.160504][ T6029] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 727.238265][ T10] usb 7-1: Product: syz [ 727.245347][ T10] usb 7-1: Manufacturer: syz [ 727.299225][ T10] usb 7-1: SerialNumber: syz [ 727.316118][ T10] usb 7-1: config 0 descriptor?? [ 727.385685][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 727.413111][ T6029] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.443683][ T10] usb 7-1: setting power ON [ 727.448519][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 727.460528][ T6029] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 727.484877][ T30] audit: type=1326 audit(1755187820.402:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 727.520507][ T6029] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.567861][T13475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.594653][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 727.629738][ T6029] usb 1-1: config 0 descriptor?? [ 727.652158][ T6029] usb 1-1: bad CDC descriptors [ 727.660839][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 727.669444][ T30] audit: type=1326 audit(1755187820.402:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 727.767464][ T10] usb 7-1: media controller created [ 727.837415][ T30] audit: type=1326 audit(1755187820.402:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 727.973145][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 727.997926][ T10] usb 7-1: selecting invalid altsetting 6 [ 728.004900][ T10] usb 7-1: digital interface selection failed (-22) [ 728.013975][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 728.023840][ T10] usb 7-1: setting power OFF [ 728.030710][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 728.036995][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 728.047599][ T10] (NULL device *): no alternate interface [ 728.156401][ T30] audit: type=1326 audit(1755187820.402:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 728.197946][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 728.347496][ T30] audit: type=1326 audit(1755187820.402:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 728.533794][ T30] audit: type=1326 audit(1755187820.402:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f787958d550 code=0x7ffc0000 [ 728.633847][ T30] audit: type=1326 audit(1755187820.402:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f787958d550 code=0x7ffc0000 [ 729.041343][ T30] audit: type=1326 audit(1755187820.412:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 729.155477][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/90.tmp-b7:6' failed: Read-only file system [ 729.349207][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/90.tmp-b7:6' failed: Read-only file system [ 729.416850][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 729.679334][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 730.121507][ T5949] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 730.300579][ T5949] usb 3-1: Using ep0 maxpacket: 8 [ 730.342368][ T5949] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 730.390509][ T5949] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.438379][T13093] usb 7-1: USB disconnect, device number 39 [ 730.444018][T13491] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2276'. [ 730.471322][ T5949] usb 3-1: config 0 has no interfaces? [ 730.476823][ T5949] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 730.554315][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.592850][ T5949] usb 3-1: config 0 descriptor?? [ 730.615748][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 730.621681][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2277'. [ 730.689168][T13493] 8021q: VLANs not supported on caif0 [ 730.790939][T13093] usb 1-1: USB disconnect, device number 27 [ 730.868549][T10262] usb 3-1: USB disconnect, device number 34 [ 730.937009][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 730.965397][ T6370] udevd[6370]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 732.031641][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 732.115575][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 732.519496][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 732.976888][T13539] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2291'. [ 733.360518][T10262] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 733.594063][T10262] usb 5-1: unable to get BOS descriptor or descriptor too short [ 733.640520][ T5949] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 733.648762][T10262] usb 5-1: not running at top speed; connect to a high speed hub [ 733.694599][T10262] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.770325][T10262] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 733.840300][T10262] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 733.856704][T10262] usb 5-1: Product: syz [ 733.861425][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 733.887640][T10262] usb 5-1: Manufacturer: syz [ 733.897581][ T5949] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 733.912464][T10262] usb 5-1: SerialNumber: syz [ 733.930500][ T5949] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.970127][T10262] usb 5-1: config 0 descriptor?? [ 733.994554][ T5949] usb 2-1: config 0 has no interfaces? [ 734.006426][ T5949] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 734.024833][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.063750][ T5949] usb 2-1: config 0 descriptor?? [ 734.246826][T10262] usb 5-1: USB disconnect, device number 27 [ 734.291953][T13093] usb 2-1: USB disconnect, device number 40 [ 734.315307][ T6370] udevd[6370]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 734.412379][ T6020] udevd[6020]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 734.567490][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 734.643070][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 734.760947][T13580] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2309'. [ 735.119203][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 735.294679][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 735.420820][T13594] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2311'. [ 735.519363][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 735.630586][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 735.655057][T13594] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2311'. [ 735.810620][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 735.886099][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 736.019545][ T10] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 736.036112][T13594] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2311'. [ 736.205464][ T10] usb 2-1: config 2 has no interface number 0 [ 736.210596][T13093] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 736.236222][ T10] usb 2-1: config 2 interface 31 has no altsetting 0 [ 736.337331][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 736.371130][T13093] usb 5-1: Using ep0 maxpacket: 16 [ 736.390377][ T10] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 736.422152][T13093] usb 5-1: config 5 has an invalid interface number: 206 but max is 0 [ 736.469809][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.478052][T13093] usb 5-1: config 5 has no interface number 0 [ 736.520057][T13093] usb 5-1: config 5 interface 206 has no altsetting 0 [ 736.559886][T13093] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44 [ 736.579939][ T10] usb 2-1: Product: syz [ 736.590536][T13093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.776001][T13093] usb 5-1: Product: syz [ 736.780517][T13093] usb 5-1: Manufacturer: syz [ 736.789186][T13093] usb 5-1: SerialNumber: syz [ 736.817579][ T10] usb 2-1: Manufacturer: syz [ 737.556428][ T10] usb 2-1: SerialNumber: syz [ 737.730566][T10170] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 737.742236][ T10] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 738.080501][T10170] usb 1-1: Using ep0 maxpacket: 16 [ 738.246158][T10170] usb 1-1: config 0 has no interfaces? [ 738.259462][T10170] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 738.268600][T10170] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.276672][T10170] usb 1-1: Product: syz [ 738.280890][T10170] usb 1-1: Manufacturer: syz [ 738.285491][T10170] usb 1-1: SerialNumber: syz [ 738.321217][T10170] usb 1-1: config 0 descriptor?? [ 738.585346][T13611] tipc: Started in network mode [ 738.595230][T13611] tipc: Node identity a2987e66e7e3, cluster identity 4711 [ 738.621988][T13611] tipc: Enabled bearer , priority 0 [ 738.646250][T13621] syzkaller0: entered promiscuous mode [ 738.665633][T13621] syzkaller0: entered allmulticast mode [ 738.819351][T13622] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 738.853322][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 739.307396][T13610] tipc: Resetting bearer [ 739.396686][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 739.467225][T13610] tipc: Disabling bearer [ 739.733628][T10170] usb 1-1: USB disconnect, device number 28 [ 740.108413][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 740.430889][T10170] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 740.433389][T13093] usb_ehset_test 5-1:5.206: probe with driver usb_ehset_test failed with error -32 [ 740.513800][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 740.549654][T13093] usb 5-1: USB disconnect, device number 28 [ 740.693239][T10170] usb 3-1: Using ep0 maxpacket: 8 [ 740.736490][T10170] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 740.766263][T10170] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.830574][T10170] usb 3-1: config 0 has no interfaces? [ 740.989785][T10170] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 741.030546][T10170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.363472][T10170] usb 3-1: config 0 descriptor?? [ 741.613416][T10170] usb 3-1: USB disconnect, device number 35 [ 741.673978][ T10] usb 2-1: USB disconnect, device number 41 [ 741.997621][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 742.326247][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 742.333267][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 742.333284][ T30] audit: type=1326 audit(1755187835.852:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.4.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 742.456720][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 742.515180][ T30] audit: type=1326 audit(1755187835.852:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.4.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 742.530139][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 742.612543][ T30] audit: type=1326 audit(1755187835.852:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.4.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 742.631268][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 742.713008][ T30] audit: type=1326 audit(1755187835.852:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.4.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 742.750515][ T5975] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 742.761127][ T30] audit: type=1326 audit(1755187835.852:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.4.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f787958d550 code=0x7ffc0000 [ 742.787574][ T30] audit: type=1326 audit(1755187835.852:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.4.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 742.830181][ T30] audit: type=1326 audit(1755187835.852:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.4.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f787958d550 code=0x7ffc0000 [ 742.855136][ T30] audit: type=1326 audit(1755187835.852:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.4.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 742.971489][ T30] audit: type=1326 audit(1755187835.852:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.4.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 742.990537][ T5975] usb 4-1: Using ep0 maxpacket: 16 [ 743.034577][ T5975] usb 4-1: config 0 has no interfaces? [ 743.042431][ T5975] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 743.080052][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.102737][ T5975] usb 4-1: Product: syz [ 743.113224][ T5975] usb 4-1: Manufacturer: syz [ 743.120702][ T5975] usb 4-1: SerialNumber: syz [ 743.137502][ T5975] usb 4-1: config 0 descriptor?? [ 743.159473][ T30] audit: type=1326 audit(1755187835.852:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13656 comm="syz.4.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 743.376857][T13668] tipc: Enabled bearer , priority 0 [ 743.384396][T13668] syzkaller0: entered promiscuous mode [ 743.389866][T13668] syzkaller0: entered allmulticast mode [ 743.427440][T13668] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 743.445761][T13667] tipc: Resetting bearer [ 743.462362][T13667] tipc: Disabling bearer [ 743.514179][ T5975] usb 4-1: USB disconnect, device number 27 [ 743.789611][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 743.872681][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 744.216405][T13698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.450713][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 744.540744][T13705] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 744.687832][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 744.708335][ T10] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 744.717441][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.738533][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 744.786464][T13718] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2354'. [ 744.804662][ T6370] udevd[6370]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 744.839166][ T10] usb 3-1: config 0 has no interfaces? [ 744.881208][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 744.964087][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 744.976487][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.108946][ T10] usb 3-1: config 0 descriptor?? [ 745.228606][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 745.360973][ T10] usb 3-1: USB disconnect, device number 36 [ 745.454675][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 745.576246][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 745.790217][ C0] vcan0: j1939_tp_rxtimer: 0xffff888051b53c00: rx timeout, send abort [ 745.800288][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888051b53c00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 746.217377][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 746.327006][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 746.449730][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 746.499499][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.506242][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.816817][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2365'. [ 746.840584][ T6029] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 746.918963][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 746.987334][T13759] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2368'. [ 747.020597][ T6029] usb 4-1: Using ep0 maxpacket: 16 [ 747.079330][ T6029] usb 4-1: config 0 has no interfaces? [ 747.116714][ T6029] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 747.212244][ T6029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.285527][ T6029] usb 4-1: Product: syz [ 747.309059][ T6029] usb 4-1: Manufacturer: syz [ 747.339295][ T6029] usb 4-1: SerialNumber: syz [ 747.446115][ T6029] usb 4-1: config 0 descriptor?? [ 747.516662][T13776] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2374'. [ 747.600687][T13093] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 747.610548][T10262] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 747.778342][T13744] tipc: Enabled bearer , priority 0 [ 747.780516][T13093] usb 2-1: Using ep0 maxpacket: 8 [ 747.813088][T10262] usb 5-1: Using ep0 maxpacket: 8 [ 747.829483][T10262] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 747.844629][T10262] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.864378][T10262] usb 5-1: config 0 has no interfaces? [ 747.875852][T10262] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 747.894777][T10262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.914512][T10262] usb 5-1: config 0 descriptor?? [ 748.145437][ T5975] usb 5-1: USB disconnect, device number 29 [ 748.266126][T13744] syzkaller0: entered promiscuous mode [ 748.279445][T13744] syzkaller0: entered allmulticast mode [ 748.326964][T13786] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 748.365386][T13743] tipc: Resetting bearer [ 748.466810][T13743] tipc: Disabling bearer [ 748.604753][ T5975] usb 4-1: USB disconnect, device number 28 [ 749.123185][ T6029] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 749.331029][ T6029] usb 1-1: Using ep0 maxpacket: 16 [ 749.359935][ T6029] usb 1-1: config 5 has an invalid interface number: 206 but max is 0 [ 749.401897][ T6029] usb 1-1: config 5 has no interface number 0 [ 749.418913][ T6029] usb 1-1: config 5 interface 206 has no altsetting 0 [ 749.440274][ T6029] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44 [ 749.545948][ T6029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.561832][ T6029] usb 1-1: Product: syz [ 749.566841][ T6029] usb 1-1: Manufacturer: syz [ 749.577965][ T6029] usb 1-1: SerialNumber: syz [ 749.761952][T13809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2383'. [ 750.254670][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 750.448816][ T6020] udevd[6020]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 750.468327][T13093] usb 2-1: unable to get BOS descriptor or descriptor too short [ 750.515536][T13093] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 750.551142][T13093] usb 2-1: can't read configurations, error -71 [ 751.183472][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 751.270829][ T5949] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 751.374956][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 751.498895][ T5949] usb 5-1: Using ep0 maxpacket: 8 [ 751.524158][ T5949] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 751.535230][ T5949] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.575439][T13838] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 751.637921][ T5949] usb 5-1: config 0 has no interfaces? [ 751.672514][ T5949] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 751.826278][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.912673][ T6020] udevd[6020]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 751.966345][ T5949] usb 5-1: config 0 descriptor?? [ 752.335230][ T5956] usb 5-1: USB disconnect, device number 30 [ 752.383596][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 753.730777][T13855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2400'. [ 753.996659][ T6029] usb_ehset_test 1-1:5.206: probe with driver usb_ehset_test failed with error -32 [ 754.014973][ T6370] udevd[6370]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 754.043594][ T6029] usb 1-1: USB disconnect, device number 29 [ 754.119010][ T6020] udevd[6020]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 754.200617][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 754.380551][ T5949] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 754.390766][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 754.510554][T10170] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 754.519128][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 754.584869][T13872] fuse: Unknown parameter 'grou00000000000000000000' [ 754.613570][ T5949] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.651083][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 754.653258][ T5949] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 754.690193][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.719373][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 754.755416][ T10] usb 5-1: can't read configurations, error -71 [ 754.800744][T10170] usb 4-1: config index 0 descriptor too short (expected 65426, got 146) [ 754.813705][ T5949] usb 7-1: config 0 descriptor?? [ 754.840168][T10170] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 754.849645][ T5949] pwc: Askey VC010 type 2 USB webcam detected. [ 754.892797][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 754.912767][T10170] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 754.981406][T10170] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 755.030185][T10170] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 755.056362][T10170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 755.080483][T10170] usb 4-1: SerialNumber: syz [ 755.275188][ T5949] pwc: recv_control_msg error -32 req 02 val 2b00 [ 755.304046][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 755.826197][ T5949] pwc: recv_control_msg error -32 req 02 val 2700 [ 755.870395][ T5949] pwc: recv_control_msg error -32 req 02 val 2c00 [ 755.908322][ T5949] pwc: recv_control_msg error -32 req 04 val 1000 [ 755.937664][ T5949] pwc: recv_control_msg error -32 req 04 val 1300 [ 755.974511][ T5949] pwc: recv_control_msg error -32 req 04 val 1400 [ 755.999201][ T5949] pwc: recv_control_msg error -32 req 02 val 2000 [ 756.024203][ T6020] udevd[6020]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 756.062953][ T5949] pwc: recv_control_msg error -32 req 02 val 2100 [ 756.108716][ T5949] pwc: recv_control_msg error -32 req 04 val 1500 [ 756.330871][ T43] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 756.528791][ T5949] pwc: recv_control_msg error -32 req 02 val 2500 [ 756.615406][ T5949] pwc: recv_control_msg error -32 req 02 val 2400 [ 756.665738][ T5949] pwc: recv_control_msg error -32 req 02 val 2600 [ 756.699800][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 756.709289][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 756.721104][ T5949] pwc: recv_control_msg error -32 req 02 val 2900 [ 756.871377][ T43] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 756.871413][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.871437][ T43] usb 2-1: config 0 has no interfaces? [ 756.871471][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 756.871498][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.885748][ T43] usb 2-1: config 0 descriptor?? [ 757.100542][ T5949] pwc: recv_control_msg error -71 req 04 val 1100 [ 757.102373][ T5949] pwc: recv_control_msg error -71 req 04 val 1200 [ 757.114823][ T5949] pwc: Registered as video103. [ 757.117206][ T5949] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25 [ 757.164470][ T5949] usb 7-1: USB disconnect, device number 40 [ 757.166375][T10262] usb 2-1: USB disconnect, device number 44 [ 757.313848][T10170] usb 4-1: USB disconnect, device number 29 [ 757.532708][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 757.890785][T13911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2417'. [ 757.890919][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 757.938462][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2417'. [ 758.258006][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 758.332318][T13920] fuse: Unknown parameter 'grou00000000000000000000' [ 758.776836][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 758.964016][T13927] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 759.124831][ T6029] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 759.281682][ T6029] usb 1-1: Using ep0 maxpacket: 8 [ 759.392010][ T6029] usb 1-1: unable to get BOS descriptor or descriptor too short [ 759.413532][ T6029] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 759.438699][ T6029] usb 1-1: can't read configurations, error -71 [ 759.748569][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 759.869940][T13936] tipc: Enabled bearer , priority 0 [ 759.905751][T13936] syzkaller0: entered promiscuous mode [ 759.955464][T13936] syzkaller0: entered allmulticast mode [ 759.997138][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 760.150882][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 760.213671][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880217a7800: rx timeout, send abort [ 760.222141][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880217a7800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 760.334498][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 760.405664][T13944] tipc: Resetting bearer [ 760.446452][T13934] tipc: Resetting bearer [ 760.511648][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 760.560250][T13934] tipc: Disabling bearer [ 760.592863][T13960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.012422][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 761.256043][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 761.425480][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 761.775496][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 762.436188][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 762.676520][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 762.792587][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/91.tmp-b7:6' failed: Read-only file system [ 762.951958][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 763.270682][ T5949] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 763.475544][ T5949] usb 3-1: unable to get BOS descriptor or descriptor too short [ 763.531214][ T5949] usb 3-1: not running at top speed; connect to a high speed hub [ 763.757902][T14010] loop6: detected capacity change from 0 to 32768 [ 763.765232][T14010] btrfs: Unknown parameter 'check_int_data' [ 763.900747][ T5949] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.925440][ T5949] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 763.934926][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 763.945053][ T5949] usb 3-1: Product: syz [ 763.949293][ T5949] usb 3-1: Manufacturer: syz [ 763.954473][ T5949] usb 3-1: SerialNumber: syz [ 763.965818][ T5949] usb 3-1: config 0 descriptor?? [ 764.303823][ T5949] usb 3-1: USB disconnect, device number 37 [ 764.558594][T14022] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 764.951813][T14037] syz.2.2461 (14037): drop_caches: 2 [ 765.048689][T14042] loop6: detected capacity change from 0 to 63 [ 765.074394][ T6364] buffer_io_error: 758 callbacks suppressed [ 765.074408][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.092403][T14042] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.100607][T14042] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.111672][T14042] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.121790][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.161677][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.232345][T14045] Buffer I/O error on dev loop6, logical block 1, async page read [ 765.241315][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.274412][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.299427][T14042] Buffer I/O error on dev loop6, logical block 0, async page read [ 765.513353][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 765.807806][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051985c00: rx timeout, send abort [ 765.816522][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888051985c00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 765.915637][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 765.939797][T14064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 766.163158][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 766.600587][T10262] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 766.807840][T10262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.833845][T10262] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 766.882198][T10262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.942436][T10262] usb 1-1: config 0 descriptor?? [ 767.688450][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 767.799244][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/94.tmp-b7:6' failed: Read-only file system [ 767.825556][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 767.883249][T14075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 768.578255][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 769.386972][ T6370] udevd[6370]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 769.410507][ T5949] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 769.642586][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.705557][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.730360][ T5949] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 769.802875][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.865553][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 769.879650][ T5949] usb 3-1: config 0 descriptor?? [ 770.314958][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 770.344188][ T5949] usbhid 3-1:0.0: can't add hid device: -71 [ 770.374609][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 770.390686][ T5949] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 770.457492][ T5949] usb 3-1: USB disconnect, device number 38 [ 770.600547][ T6029] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 770.800660][ T6029] usb 7-1: Using ep0 maxpacket: 8 [ 770.842789][ T6029] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 771.012713][ T6029] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.027565][T10262] usbhid 1-1:0.0: can't add hid device: -71 [ 771.042028][T10262] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 771.047068][ T6029] usb 7-1: config 0 has no interfaces? [ 771.087416][ T6029] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 771.087450][ T6029] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.092812][ T6029] usb 7-1: config 0 descriptor?? [ 771.141154][T10262] usb 1-1: USB disconnect, device number 32 [ 771.239590][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 771.296618][ T5923] udevd[5923]: symlink '../../loop0' '/dev/disk/by-diskseq/72.tmp-b7:0' failed: Read-only file system [ 771.313815][T10170] usb 7-1: USB disconnect, device number 41 [ 772.025759][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/95.tmp-b7:6' failed: Read-only file system [ 772.382221][T14139] loop6: detected capacity change from 0 to 1024 [ 772.529971][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 772.612884][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system [ 772.677899][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:6' failed: Read-only file system [ 772.709670][ T5872] block device autoloading is deprecated and will be removed. [ 772.796211][ T6020] udevd[6020]: setting mode of /dev/loop0 to 060660 failed: Read-only file system [ 772.808380][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 772.871763][ T6020] udevd[6020]: setting owner of /dev/loop0 to uid=0, gid=6 failed: Read-only file system [ 772.875941][ T13] hfsplus: b-tree write err: -5, ino 4 [ 772.918264][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system [ 775.880793][T13093] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 776.091112][T13093] usb 1-1: Using ep0 maxpacket: 8 [ 776.116607][T13093] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 776.140278][T13093] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.202602][T13093] usb 1-1: config 0 has no interfaces? [ 776.228633][T13093] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 776.275086][T13093] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.320515][T10262] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 776.333461][T13093] usb 1-1: config 0 descriptor?? [ 776.510508][T10262] usb 3-1: Using ep0 maxpacket: 8 [ 776.518418][T10262] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 776.537190][T10262] usb 3-1: config 0 has no interface number 0 [ 776.559783][ T5956] usb 1-1: USB disconnect, device number 33 [ 776.563102][T10262] usb 3-1: config 0 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 776.616789][T10262] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 776.672424][T10262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.849603][T10262] usb 3-1: config 0 descriptor?? [ 776.889314][T10262] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 777.103620][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'. [ 777.370312][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/97.tmp-b7:0' failed: Read-only file system [ 778.161600][ T6029] usb 3-1: USB disconnect, device number 39 [ 778.380187][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/97.tmp-b7:0' failed: Read-only file system [ 778.447884][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/98.tmp-b7:6' failed: Read-only file system [ 778.532781][T14208] tipc: Enabled bearer , priority 0 [ 778.553350][T14208] syzkaller0: entered promiscuous mode [ 778.575497][T14208] syzkaller0: entered allmulticast mode [ 778.714534][T14208] tipc: Resetting bearer [ 778.731834][T14207] tipc: Resetting bearer [ 778.882150][T14207] tipc: Disabling bearer [ 779.120517][T13093] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 779.169780][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 779.380536][T13093] usb 7-1: Using ep0 maxpacket: 8 [ 779.423733][T13093] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 779.447708][T13093] usb 7-1: config 2 has no interface number 0 [ 779.506903][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/97.tmp-b7:0' failed: Read-only file system [ 779.537353][T13093] usb 7-1: config 2 interface 31 has no altsetting 0 [ 779.587983][T13093] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 779.856151][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/97.tmp-b7:0' failed: Read-only file system [ 779.956116][T13093] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.000500][T10262] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 780.095593][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/97.tmp-b7:0' failed: Read-only file system [ 780.155985][T13093] usb 7-1: Product: syz [ 780.160174][T13093] usb 7-1: Manufacturer: syz [ 780.230779][T13093] usb 7-1: SerialNumber: syz [ 780.304829][T13093] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22 [ 780.385871][T10262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 780.395612][T10262] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 780.420532][T10170] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 780.528118][T10262] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 780.613864][T10170] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 780.653531][T10170] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 780.668069][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/97.tmp-b7:0' failed: Read-only file system [ 780.695829][T10262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.739913][T10170] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 780.780257][T10170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.826252][T14241] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 780.836600][T14254] loop6: detected capacity change from 0 to 63 [ 780.844303][T10262] usb 3-1: config 0 descriptor?? [ 780.866427][T14254] buffer_io_error: 1364 callbacks suppressed [ 780.866442][T14254] Buffer I/O error on dev loop6, logical block 0, async page read [ 780.899937][T10170] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 780.916663][T14233] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 780.993406][T14254] Buffer I/O error on dev loop6, logical block 0, async page read [ 781.047430][ T6370] Buffer I/O error on dev loop6, logical block 0, async page read [ 781.100073][ T6370] Buffer I/O error on dev loop6, logical block 0, async page read [ 781.124870][ T6370] Buffer I/O error on dev loop6, logical block 0, async page read [ 781.144089][T14257] Buffer I/O error on dev loop6, logical block 1, async page read [ 781.193328][ T6370] Buffer I/O error on dev loop6, logical block 0, async page read [ 781.211386][T14257] Buffer I/O error on dev loop6, logical block 1, async page read [ 781.243772][T14254] Buffer I/O error on dev loop6, logical block 0, async page read [ 781.299083][T10170] usb 5-1: USB disconnect, device number 33 [ 781.323609][ T6370] Buffer I/O error on dev loop6, logical block 0, async page read [ 781.407463][ T6370] udevd[6370]: symlink '../../loop6' '/dev/disk/by-diskseq/99.tmp-b7:6' failed: Read-only file system [ 781.433849][ T6194] udevd[6194]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 782.070828][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 782.637043][ T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 782.659478][ T10] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 782.690107][ T10] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 79 [ 782.853916][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 782.898361][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.217168][ T10] ath6kl: Failed to submit usb control message: -71 [ 783.290657][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 783.335444][ T10] ath6kl: Unable to send get target info: -71 [ 783.358490][ T5956] usb 3-1: USB disconnect, device number 40 [ 783.425931][ T10] ath6kl: Failed to init ath6kl core: -71 [ 783.442700][ T10] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 783.731122][ T10] usb 1-1: USB disconnect, device number 34 [ 783.951746][T13093] usb 7-1: USB disconnect, device number 42 [ 783.974630][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/97.tmp-b7:0' failed: Read-only file system [ 784.039468][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 784.060847][T14283] loop0: detected capacity change from 0 to 1024 [ 784.128739][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/101.tmp-b7:0' failed: Read-only file system [ 784.266953][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/101.tmp-b7:0' failed: Read-only file system [ 784.315065][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 784.315087][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/101.tmp-b7:0' failed: Read-only file system [ 784.439804][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 784.955841][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 785.156911][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/102.tmp-b7:0' failed: Read-only file system [ 785.263070][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 785.590866][T10262] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 785.752128][T10262] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 785.878332][T10262] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 785.910469][T10262] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 79 [ 785.949184][T10262] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 785.972955][T10262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.238183][T10262] ath6kl: Failed to submit usb control message: -71 [ 786.273034][T13093] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 786.309536][T10262] ath6kl: unable to send the bmi data to the device: -71 [ 786.357169][T10262] ath6kl: Unable to send get target info: -71 [ 786.371712][T14330] fuse: Unknown parameter 'user_id00000000000000000000' [ 786.440075][T10262] ath6kl: Failed to init ath6kl core: -71 [ 786.474936][T10262] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 786.543240][T10262] usb 3-1: USB disconnect, device number 41 [ 786.600479][T13093] usb 2-1: Using ep0 maxpacket: 8 [ 786.635965][T13093] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 786.970864][T13093] usb 2-1: config 2 has no interface number 0 [ 786.990759][T13093] usb 2-1: config 2 interface 31 has no altsetting 0 [ 787.133043][T13093] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 787.250806][T13093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.260696][T13093] usb 2-1: Product: syz [ 787.264877][T13093] usb 2-1: Manufacturer: syz [ 787.269540][T13093] usb 2-1: SerialNumber: syz [ 787.424444][T13093] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 787.800531][T10170] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 787.976891][T10170] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 788.322710][T10170] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 788.587681][T14356] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 789.018528][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/102.tmp-b7:0' failed: Read-only file system [ 789.084035][T10170] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 789.106610][T10170] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.131869][T10170] usb 7-1: config 0 descriptor?? [ 789.147807][T14345] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 789.217449][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/102.tmp-b7:0' failed: Read-only file system [ 789.311643][T14368] loop0: detected capacity change from 0 to 128 [ 789.387558][T14368] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 789.405059][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/103.tmp-b7:0' failed: Read-only file system [ 789.592937][T14371] loop6: detected capacity change from 0 to 63 [ 789.632558][ T6364] buffer_io_error: 69 callbacks suppressed [ 789.632572][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.793868][T14373] Buffer I/O error on dev loop6, logical block 1, async page read [ 789.805299][T14373] Buffer I/O error on dev loop6, logical block 1, async page read [ 789.933300][T14371] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.945240][T14372] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.959540][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.996252][ T6364] Buffer I/O error on dev loop6, logical block 0, async page read [ 790.032462][T14371] Buffer I/O error on dev loop6, logical block 0, async page read [ 790.042014][T14372] Buffer I/O error on dev loop6, logical block 0, async page read [ 790.060368][T14372] Buffer I/O error on dev loop6, logical block 0, async page read [ 790.182989][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 790.246042][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/103.tmp-b7:0' failed: Read-only file system [ 790.446715][ T43] usb 7-1: USB disconnect, device number 43 [ 790.449174][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/103.tmp-b7:0' failed: Read-only file system [ 790.614678][ T6020] udevd[6020]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 790.795021][ T6020] udevd[6020]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 790.795892][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/105.tmp-b7:0' failed: Read-only file system [ 790.882725][ T6370] udevd[6370]: symlink '../../loop2' '/dev/disk/by-diskseq/85.tmp-b7:2' failed: Read-only file system [ 790.924041][T14378] fuse: Unknown parameter 'user_id00000000000000000000' [ 791.085833][T14380] loop2: detected capacity change from 0 to 2048 [ 791.232944][T14380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.618605][ T5956] usb 2-1: USB disconnect, device number 45 [ 791.637757][T14389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.952156][ T5877] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.070818][T14395] ALSA: mixer_oss: invalid OSS volume '' [ 793.081527][T14399] loop3: detected capacity change from 0 to 32768 [ 793.088712][T14399] ======================================================= [ 793.088712][T14399] WARNING: The mand mount option has been deprecated and [ 793.088712][T14399] and is ignored by this kernel. Remove the mand [ 793.088712][T14399] option from the mount to silence this warning. [ 793.088712][T14399] ======================================================= [ 793.194268][T14398] loop1: detected capacity change from 0 to 1024 [ 793.206618][T14399] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 793.225624][T14398] EXT4-fs: Ignoring removed nobh option [ 793.362502][T14398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.396920][T14399] XFS (loop3): Ending clean mount [ 793.409876][T14399] XFS (loop3): Quotacheck needed: Please wait. [ 793.476294][T14398] EXT4-fs warning (device loop1): ext4_rename_delete:3735: inode #12: comm syz.1.2572: Deleting old file: nlink 2, error=-2 [ 793.522979][T14399] XFS (loop3): Quotacheck: Done. [ 793.605105][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 793.605126][ T30] audit: type=1800 audit(1755187887.162:193): pid=14399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2574" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 793.779078][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.032647][T14424] loop2: detected capacity change from 0 to 7 [ 794.069681][T14425] loop6: detected capacity change from 0 to 63 [ 794.097529][ T5922] udevd[5922]: symlink '../../loop1' '/dev/disk/by-diskseq/110.tmp-b7:1' failed: Read-only file system [ 794.129440][ T6020] udevd[6020]: symlink '../../loop0' '/dev/disk/by-diskseq/105.tmp-b7:0' failed: Read-only file system [ 794.173458][T14424] Dev loop2: unable to read RDB block 7 [ 794.180529][T14424] loop2: unable to read partition table [ 794.190313][ T5923] udevd[5923]: symlink '../../loop6' '/dev/disk/by-diskseq/113.tmp-b7:6' failed: Read-only file system [ 794.210046][ T6364] udevd[6364]: symlink '../../loop3' '/dev/disk/by-diskseq/109.tmp-b7:3' failed: Read-only file system [ 794.234461][T14424] loop2: partition table beyond EOD, truncated [ 794.268201][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'. [ 794.277722][ T5866] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 794.294705][ T6364] udevd[6364]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system [ 794.321688][ T5922] udevd[5922]: symlink '../../loop1' '/dev/disk/by-diskseq/110.tmp-b7:1' failed: Read-only file system [ 794.354112][T14424] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 794.500691][ T6370] udevd[6370]: symlink '../../loop2' '/dev/disk/by-diskseq/112.tmp-b7:2' failed: Read-only file system [ 794.589934][ T5922] udevd[5922]: symlink '../../loop0' '/dev/disk/by-diskseq/105.tmp-b7:0' failed: Read-only file system [ 794.596328][ T6364] udevd[6364]: symlink '../../loop1' '/dev/disk/by-diskseq/111.tmp-b7:1' failed: Read-only file system [ 794.645254][T14425] buffer_io_error: 807 callbacks suppressed [ 794.645272][T14425] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.689305][T14425] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.731285][T14425] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.768888][T14425] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.780677][T14425] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.797039][ T5922] udevd[5922]: symlink '../../loop3' '/dev/disk/by-diskseq/109.tmp-b7:3' failed: Read-only file system [ 794.823914][T14425] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.903773][ T6020] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.967776][ T6020] Buffer I/O error on dev loop6, logical block 0, async page read [ 795.001521][ T6020] Buffer I/O error on dev loop6, logical block 0, async page read [ 795.046441][ T6020] Buffer I/O error on dev loop6, logical block 0, async page read [ 795.363297][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2586'. [ 795.428031][T14444] 8021q: VLANs not supported on caif0 [ 795.445073][T14448] tipc: Enabled bearer , priority 0 [ 795.523798][T14448] syzkaller0: entered promiscuous mode [ 795.541205][T14448] syzkaller0: entered allmulticast mode [ 795.604526][T14448] tipc: Resetting bearer [ 795.663788][T14446] tipc: Resetting bearer [ 795.768396][T14446] tipc: Disabling bearer [ 796.498964][T14485] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2601'. [ 796.721888][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2604'. [ 796.731383][T14492] 8021q: VLANs not supported on caif0 [ 797.381895][T14496] loop1: detected capacity change from 0 to 40427 [ 797.445561][T14496] F2FS-fs (loop1): invalid crc value [ 797.537190][T14496] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 797.571109][T14496] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 797.623450][ T30] audit: type=1804 audit(1755187891.162:194): pid=14496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2606" name="/newroot/428/bus/file0" dev="loop1" ino=10 res=1 errno=0 [ 797.676935][ T5860] syz-executor: attempt to access beyond end of device [ 797.676935][ T5860] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 797.719761][T14512] loop6: detected capacity change from 0 to 128 [ 797.739287][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 797.739319][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 797.739334][ T5860] Call Trace: [ 797.739343][ T5860] [ 797.739360][ T5860] dump_stack_lvl+0x189/0x250 [ 797.739398][ T5860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 797.739428][ T5860] ? __pfx_queue_work_on+0x10/0x10 [ 797.739452][ T5860] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 797.739483][ T5860] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 797.739526][ T5860] f2fs_handle_critical_error+0x37c/0x540 [ 797.739569][ T5860] f2fs_write_end_io+0x886/0xb60 [ 797.739611][ T5860] __submit_merged_bio+0x27a/0x6a0 [ 797.739651][ T5860] __submit_merged_write_cond+0x255/0x530 [ 797.739692][ T5860] f2fs_write_data_pages+0x261d/0x3000 [ 797.739767][ T5860] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 797.739802][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.739882][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.739933][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.739960][ T5860] ? __lock_acquire+0xab9/0xd20 [ 797.740004][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.740030][ T5860] ? do_raw_spin_lock+0x121/0x290 [ 797.740065][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.740096][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.740122][ T5860] ? do_raw_spin_unlock+0x122/0x240 [ 797.740153][ T5860] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 797.740191][ T5860] do_writepages+0x32e/0x550 [ 797.740231][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.740262][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.740289][ T5860] ? do_raw_spin_unlock+0x122/0x240 [ 797.740325][ T5860] filemap_fdatawrite+0x199/0x240 [ 797.740364][ T5860] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 797.740452][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.740484][ T5860] ? do_raw_spin_unlock+0x122/0x240 [ 797.740520][ T5860] f2fs_sync_dirty_inodes+0x31f/0x830 [ 797.740562][ T5860] f2fs_write_checkpoint+0x95a/0x1df0 [ 797.740612][ T5860] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 797.740683][ T5860] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 797.740707][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.740734][ T5860] ? kfree+0x18e/0x440 [ 797.740765][ T5860] ? kill_f2fs_super+0x298/0x6c0 [ 797.740795][ T5860] kill_f2fs_super+0x2c3/0x6c0 [ 797.740826][ T5860] ? __pfx_kill_f2fs_super+0x10/0x10 [ 797.740847][ T5860] ? radix_tree_delete_item+0x2b6/0x400 [ 797.740887][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.740913][ T5860] ? shrinker_free+0x2ce/0x3e0 [ 797.740944][ T5860] deactivate_locked_super+0xbc/0x130 [ 797.740976][ T5860] cleanup_mnt+0x425/0x4c0 [ 797.741002][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.741027][ T5860] ? lockdep_hardirqs_on+0x9c/0x150 [ 797.741062][ T5860] task_work_run+0x1d4/0x260 [ 797.741099][ T5860] ? __pfx_task_work_run+0x10/0x10 [ 797.741130][ T5860] ? __x64_sys_umount+0x122/0x160 [ 797.741169][ T5860] ? exit_to_user_mode_loop+0x40/0x110 [ 797.741209][ T5860] exit_to_user_mode_loop+0xec/0x110 [ 797.741245][ T5860] do_syscall_64+0x2bd/0x3b0 [ 797.741280][ T5860] ? lockdep_hardirqs_on+0x9c/0x150 [ 797.741313][ T5860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.741336][ T5860] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.741374][ T5860] ? exc_page_fault+0x9f/0xf0 [ 797.741408][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.741431][ T5860] RIP: 0033:0x7f618258ff17 [ 797.741451][ T5860] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 797.741470][ T5860] RSP: 002b:00007ffd24f78538 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 797.741495][ T5860] RAX: 0000000000000000 RBX: 00007f6182611c05 RCX: 00007f618258ff17 [ 797.741512][ T5860] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd24f785f0 [ 797.741527][ T5860] RBP: 00007ffd24f785f0 R08: 0000000000000000 R09: 0000000000000000 [ 797.741542][ T5860] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd24f79680 [ 797.741559][ T5860] R13: 00007f6182611c05 R14: 00000000000c2b99 R15: 00007ffd24f796c0 [ 797.741597][ T5860] [ 798.220494][ T5860] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 798.251782][T14512] EXT4-fs: Ignoring removed nobh option [ 798.673075][T14512] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 798.726560][T14512] ext4 filesystem being mounted at /385/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 798.979538][ T6737] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 799.069694][T14524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2616'. [ 799.219594][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/118.tmp-b7:6' failed: Read-only file system [ 799.310782][ T6364] udevd[6364]: symlink '../../loop1' '/dev/disk/by-diskseq/117.tmp-b7:1' failed: Read-only file system [ 799.313863][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/118.tmp-b7:6' failed: Read-only file system [ 799.355833][ T6364] udevd[6364]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 799.514271][ T6020] udevd[6020]: symlink '../../loop0' '/dev/disk/by-diskseq/105.tmp-b7:0' failed: Read-only file system [ 799.515699][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/119.tmp-b7:6' failed: Read-only file system [ 799.560140][ T5923] udevd[5923]: symlink '../../loop3' '/dev/disk/by-diskseq/114.tmp-b7:3' failed: Read-only file system [ 799.602199][T14536] Invalid ELF header magic: != ELF [ 799.637245][ T6020] udevd[6020]: symlink '../../loop2' '/dev/disk/by-diskseq/115.tmp-b7:2' failed: Read-only file system [ 799.856399][ T5922] udevd[5922]: symlink '../../loop3' '/dev/disk/by-diskseq/114.tmp-b7:3' failed: Read-only file system [ 799.988648][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/115.tmp-b7:2' failed: Read-only file system [ 800.518404][T14573] tipc: Enabled bearer , priority 0 [ 800.595226][T14577] syzkaller0: entered promiscuous mode [ 800.699372][T14577] syzkaller0: entered allmulticast mode [ 800.746901][T14583] fuse: Unknown parameter '0x0000000000000004' [ 800.773752][T14573] tipc: Resetting bearer [ 800.781523][T14570] tipc: Resetting bearer [ 800.896034][T14570] tipc: Disabling bearer [ 801.450565][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 801.610650][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 801.625000][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.664354][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 801.696818][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 801.716676][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.894642][ T10] usb 5-1: Product: syz [ 802.006123][ T10] usb 5-1: Manufacturer: syz [ 802.045402][ T10] usb 5-1: SerialNumber: syz [ 802.309234][ T10] usb 5-1: 0:2 : does not exist [ 802.354037][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 802.431375][ T10] usb 5-1: USB disconnect, device number 34 [ 804.598728][ T6364] udevd[6364]: symlink '../../loop1' '/dev/disk/by-diskseq/120.tmp-b7:1' failed: Read-only file system [ 804.747753][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/115.tmp-b7:2' failed: Read-only file system [ 804.893846][ T5922] udevd[5922]: symlink '../../loop1' '/dev/disk/by-diskseq/120.tmp-b7:1' failed: Read-only file system [ 804.919639][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/119.tmp-b7:6' failed: Read-only file system [ 805.075583][ T6364] udevd[6364]: symlink '../../loop1' '/dev/disk/by-diskseq/120.tmp-b7:1' failed: Read-only file system [ 805.448106][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/105.tmp-b7:0' failed: Read-only file system [ 805.597826][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2662'. [ 805.633819][ T6364] udevd[6364]: symlink '../../loop1' '/dev/disk/by-diskseq/120.tmp-b7:1' failed: Read-only file system [ 805.710708][T13093] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 805.725155][T14664] 8021q: VLANs not supported on caif0 [ 805.782570][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/119.tmp-b7:6' failed: Read-only file system [ 805.867859][ T5922] udevd[5922]: symlink '../../loop1' '/dev/disk/by-diskseq/120.tmp-b7:1' failed: Read-only file system [ 805.880550][T13093] usb 5-1: Using ep0 maxpacket: 16 [ 805.925957][T13093] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.093127][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/105.tmp-b7:0' failed: Read-only file system [ 806.138154][T13093] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.218604][T13093] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 806.228215][T13093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.350099][T13093] usb 5-1: Product: syz [ 806.363655][T13093] usb 5-1: Manufacturer: syz [ 806.377517][T13093] usb 5-1: SerialNumber: syz [ 806.964986][T13093] usb 5-1: 0:2 : does not exist [ 806.992511][T13093] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 807.179716][T13093] usb 5-1: USB disconnect, device number 35 [ 807.966714][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.973160][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.015568][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/119.tmp-b7:6' failed: Read-only file system [ 810.823782][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/119.tmp-b7:6' failed: Read-only file system [ 810.827834][ T5922] udevd[5922]: symlink '../../loop1' '/dev/disk/by-diskseq/120.tmp-b7:1' failed: Read-only file system [ 811.163718][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/119.tmp-b7:6' failed: Read-only file system [ 811.297829][ T5922] udevd[5922]: symlink '../../loop3' '/dev/disk/by-diskseq/114.tmp-b7:3' failed: Read-only file system [ 811.337664][ T6364] udevd[6364]: symlink '../../loop1' '/dev/disk/by-diskseq/120.tmp-b7:1' failed: Read-only file system [ 811.610541][T13093] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 811.652422][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/105.tmp-b7:0' failed: Read-only file system [ 811.758362][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/115.tmp-b7:2' failed: Read-only file system [ 811.780704][T10262] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 811.824154][T13093] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.844242][T13093] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 811.859979][T13093] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.882161][T13093] usb 7-1: config 0 descriptor?? [ 811.907475][T13093] pwc: Askey VC010 type 2 USB webcam detected. [ 812.195238][T14731] loop2: detected capacity change from 0 to 40427 [ 812.238817][T10262] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 812.248520][T14731] F2FS-fs (loop2): build fault injection rate: 14 [ 812.254996][T14731] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 812.273639][T10262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.285920][T14731] F2FS-fs (loop2): invalid crc value [ 812.297498][T10262] usb 2-1: Product: syz [ 812.304088][T10262] usb 2-1: Manufacturer: syz [ 812.308707][T10262] usb 2-1: SerialNumber: syz [ 812.317029][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 812.318160][T10262] usb 2-1: config 0 descriptor?? [ 812.344315][ C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 812.414730][ T6020] udevd[6020]: symlink '../../loop0' '/dev/disk/by-diskseq/105.tmp-b7:0' failed: Read-only file system [ 812.433988][T14731] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 812.443044][T14731] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 812.456467][T13093] pwc: recv_control_msg error -32 req 02 val 2b00 [ 812.463083][T14731] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 812.477588][T13093] pwc: recv_control_msg error -32 req 02 val 2700 [ 812.505772][T13093] pwc: recv_control_msg error -32 req 02 val 2c00 [ 812.520615][T13093] pwc: recv_control_msg error -32 req 04 val 1000 [ 812.540524][T13093] pwc: recv_control_msg error -32 req 04 val 1300 [ 812.561505][T13093] pwc: recv_control_msg error -32 req 04 val 1400 [ 812.591545][ T6020] udevd[6020]: symlink '../../loop3' '/dev/disk/by-diskseq/114.tmp-b7:3' failed: Read-only file system [ 812.612676][T13093] pwc: recv_control_msg error -32 req 02 val 2000 [ 812.647602][T13093] pwc: recv_control_msg error -32 req 02 val 2100 [ 812.668281][T13093] pwc: recv_control_msg error -32 req 04 val 1500 [ 812.677949][T13093] pwc: recv_control_msg error -32 req 02 val 2500 [ 812.778690][T13093] pwc: recv_control_msg error -32 req 02 val 2400 [ 812.791307][T13093] pwc: recv_control_msg error -32 req 02 val 2600 [ 812.855020][T10262] usb 2-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 812.874700][T13093] pwc: recv_control_msg error -32 req 02 val 2900 [ 813.031217][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 813.079622][T10262] usb 2-1: failed to fetch extended address, random address set [ 813.094452][T13093] pwc: recv_control_msg error -71 req 04 val 1100 [ 813.131353][T13093] pwc: recv_control_msg error -71 req 04 val 1200 [ 813.171389][T13093] pwc: Registered as video103. [ 813.199855][T13093] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input28 [ 813.220472][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 813.253827][T13093] usb 7-1: USB disconnect, device number 44 [ 813.289326][ T10] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 813.498757][ T10] usb 1-1: config 2 has no interface number 0 [ 813.538657][T10262] usb 2-1: USB disconnect, device number 46 [ 813.650523][ T10] usb 1-1: config 2 interface 31 has no altsetting 0 [ 813.704052][ T10] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 813.713893][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.731045][ T10] usb 1-1: Product: syz [ 813.796094][ T10] usb 1-1: Manufacturer: syz [ 813.811057][ T10] usb 1-1: SerialNumber: syz [ 814.048147][ T10] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 815.082019][T14774] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 815.156225][ T5922] udevd[5922]: symlink '../../loop3' '/dev/disk/by-diskseq/114.tmp-b7:3' failed: Read-only file system [ 816.433931][ T6364] udevd[6364]: symlink '../../loop3' '/dev/disk/by-diskseq/114.tmp-b7:3' failed: Read-only file system [ 817.081742][ T10] usb 1-1: USB disconnect, device number 35 [ 817.111891][ T6364] udevd[6364]: symlink '../../loop3' '/dev/disk/by-diskseq/114.tmp-b7:3' failed: Read-only file system [ 817.291362][ T6020] udevd[6020]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 817.306794][ T6370] udevd[6370]: symlink '../../loop0' '/dev/disk/by-diskseq/105.tmp-b7:0' failed: Read-only file system [ 817.546104][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/105.tmp-b7:0' failed: Read-only file system [ 817.644849][ T5922] udevd[5922]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 818.295544][ T6364] udevd[6364]: symlink '../../loop1' '/dev/disk/by-diskseq/120.tmp-b7:1' failed: Read-only file system [ 818.361485][ T5922] udevd[5922]: symlink '../../loop3' '/dev/disk/by-diskseq/114.tmp-b7:3' failed: Read-only file system [ 818.730591][ T5956] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 818.745636][ T6364] udevd[6364]: symlink '../../loop3' '/dev/disk/by-diskseq/114.tmp-b7:3' failed: Read-only file system [ 818.919752][ T5956] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 819.177951][T14824] loop6: detected capacity change from 0 to 40427 [ 819.225523][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.225959][T14824] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 819.241491][T14824] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 819.260982][T14824] F2FS-fs (loop6): invalid crc value [ 819.291201][ T5956] usb 2-1: Product: syz [ 819.310473][ T5956] usb 2-1: Manufacturer: syz [ 819.369415][T14824] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 819.410225][ T5956] usb 2-1: SerialNumber: syz [ 819.415585][T14824] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 819.422755][T14824] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 819.466119][ T5956] usb 2-1: config 0 descriptor?? [ 819.904174][ T5956] usb 2-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 820.108429][ T5956] usb 2-1: failed to fetch extended address, random address set [ 820.373675][ T6364] udevd[6364]: symlink '../../loop3' '/dev/disk/by-diskseq/114.tmp-b7:3' failed: Read-only file system [ 820.383999][ T5956] usb 2-1: USB disconnect, device number 47 [ 820.478643][ T6370] udevd[6370]: symlink '../../loop0' '/dev/disk/by-diskseq/105.tmp-b7:0' failed: Read-only file system [ 820.644778][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/123.tmp-b7:6' failed: Read-only file system [ 820.796760][ T6020] udevd[6020]: symlink '../../loop6' '/dev/disk/by-diskseq/123.tmp-b7:6' failed: Read-only file system [ 820.838068][ T6370] udevd[6370]: symlink '../../loop0' '/dev/disk/by-diskseq/105.tmp-b7:0' failed: Read-only file system [ 821.338370][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/124.tmp-b7:6' failed: Read-only file system [ 821.491364][ T5922] udevd[5922]: symlink '../../loop1' '/dev/disk/by-diskseq/120.tmp-b7:1' failed: Read-only file system [ 821.546822][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 821.567104][T14856] loop1: detected capacity change from 0 to 1024 [ 821.796201][ T5922] udevd[5922]: symlink '../../loop1' '/dev/disk/by-diskseq/125.tmp-b7:1' failed: Read-only file system [ 821.849262][ T6364] udevd[6364]: symlink '../../loop2' '/dev/disk/by-diskseq/122.tmp-b7:2' failed: Read-only file system [ 821.944409][ T12] hfsplus: b-tree write err: -5, ino 4 [ 822.417933][T14864] loop6: detected capacity change from 0 to 32768 [ 822.425261][T14864] btrfs: Deprecated parameter 'usebackuproot' [ 822.431531][T14864] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 822.458304][T14864] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2716 (14864) [ 822.484671][T14864] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 822.495083][T14864] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 822.503673][T14864] BTRFS info (device loop6): disk space caching is enabled [ 822.510912][T14864] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 822.580470][T10262] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 822.613040][ T66] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 822.667755][T14864] BTRFS error (device loop6): failed to load root extent [ 822.675916][T14864] BTRFS warning (device loop6): try to load backup roots slot 1 [ 822.739010][ T66] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 822.869634][T10262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.892521][T14864] BTRFS warning (device loop6): couldn't read tree root [ 822.899518][T14864] BTRFS warning (device loop6): try to load backup roots slot 2 [ 822.907730][ T1157] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 822.935874][T10262] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 822.946672][T14864] BTRFS warning (device loop6): couldn't read tree root [ 822.955705][T14864] BTRFS warning (device loop6): try to load backup roots slot 3 [ 822.989212][T10262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.007063][T14864] BTRFS info (device loop6): rebuilding free space tree [ 823.045279][T14864] BTRFS info (device loop6): disabling free space tree [ 823.052637][T14864] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 823.062393][T14864] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 823.090679][T10262] usb 2-1: config 0 descriptor?? [ 823.286354][ T6737] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 823.526290][T10262] usbhid 2-1:0.0: can't add hid device: -71 [ 823.616587][T10262] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 823.671393][T10262] usb 2-1: USB disconnect, device number 48 [ 824.259628][T14891] loop4: detected capacity change from 0 to 40427 [ 824.365962][T14891] F2FS-fs (loop4): invalid crc value [ 824.567926][T14891] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 824.588042][T14891] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 824.734622][ T5862] syz-executor: attempt to access beyond end of device [ 824.734622][ T5862] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 824.856823][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 824.856857][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 824.856873][ T5862] Call Trace: [ 824.856882][ T5862] [ 824.856892][ T5862] dump_stack_lvl+0x189/0x250 [ 824.856931][ T5862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.856961][ T5862] ? __pfx_queue_work_on+0x10/0x10 [ 824.856985][ T5862] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 824.857017][ T5862] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 824.857062][ T5862] f2fs_handle_critical_error+0x37c/0x540 [ 824.857105][ T5862] f2fs_write_end_io+0x886/0xb60 [ 824.857152][ T5862] __submit_merged_bio+0x27a/0x6a0 [ 824.857193][ T5862] __submit_merged_write_cond+0x255/0x530 [ 824.857234][ T5862] f2fs_write_data_pages+0x261d/0x3000 [ 824.857269][ T5862] ? __lock_acquire+0xab9/0xd20 [ 824.857341][ T5862] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 824.857431][ T5862] ? __mod_zone_page_state+0xd7/0x140 [ 824.857475][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.857503][ T5862] ? folios_put_refs+0x560/0x640 [ 824.857543][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.857569][ T5862] ? __lock_acquire+0xab9/0xd20 [ 824.857612][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.857639][ T5862] ? do_raw_spin_lock+0x121/0x290 [ 824.857675][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.857706][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.857733][ T5862] ? do_raw_spin_unlock+0x122/0x240 [ 824.857763][ T5862] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 824.857802][ T5862] do_writepages+0x32e/0x550 [ 824.857840][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.857872][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.857898][ T5862] ? do_raw_spin_unlock+0x122/0x240 [ 824.857933][ T5862] filemap_fdatawrite+0x199/0x240 [ 824.857967][ T5862] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 824.858047][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.858079][ T5862] ? do_raw_spin_unlock+0x122/0x240 [ 824.858114][ T5862] f2fs_sync_dirty_inodes+0x31f/0x830 [ 824.858156][ T5862] f2fs_write_checkpoint+0x95a/0x1df0 [ 824.858207][ T5862] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 824.858284][ T5862] ? kill_f2fs_super+0x298/0x6c0 [ 824.858313][ T5862] kill_f2fs_super+0x2c3/0x6c0 [ 824.858344][ T5862] ? __pfx_kill_f2fs_super+0x10/0x10 [ 824.858375][ T5862] ? radix_tree_delete_item+0x2b6/0x400 [ 824.858415][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.858442][ T5862] ? shrinker_free+0x2ce/0x3e0 [ 824.858472][ T5862] deactivate_locked_super+0xbc/0x130 [ 824.858505][ T5862] cleanup_mnt+0x425/0x4c0 [ 824.858532][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.858559][ T5862] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.858595][ T5862] task_work_run+0x1d4/0x260 [ 824.858630][ T5862] ? __pfx_task_work_run+0x10/0x10 [ 824.858660][ T5862] ? __x64_sys_umount+0x122/0x160 [ 824.858698][ T5862] ? exit_to_user_mode_loop+0x40/0x110 [ 824.858736][ T5862] exit_to_user_mode_loop+0xec/0x110 [ 824.858771][ T5862] do_syscall_64+0x2bd/0x3b0 [ 824.858803][ T5862] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.858834][ T5862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.858856][ T5862] ? srso_alias_return_thunk+0x5/0xfbef5 [ 824.858883][ T5862] ? exc_page_fault+0x9f/0xf0 [ 824.858918][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.858940][ T5862] RIP: 0033:0x7f787958ff17 [ 824.858961][ T5862] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 824.858980][ T5862] RSP: 002b:00007ffc034dd018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 824.859004][ T5862] RAX: 0000000000000000 RBX: 00007f7879611c05 RCX: 00007f787958ff17 [ 824.859024][ T5862] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc034dd0d0 [ 824.859038][ T5862] RBP: 00007ffc034dd0d0 R08: 0000000000000000 R09: 0000000000000000 [ 824.859053][ T5862] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc034de160 [ 824.859069][ T5862] R13: 00007f7879611c05 R14: 00000000000c9517 R15: 00007ffc034de1a0 [ 824.859105][ T5862] [ 825.340522][ T5862] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 825.505046][ T6364] udevd[6364]: symlink '../../loop3' '/dev/disk/by-diskseq/114.tmp-b7:3' failed: Read-only file system [ 825.847042][ T6020] udevd[6020]: symlink '../../loop1' '/dev/disk/by-diskseq/126.tmp-b7:1' failed: Read-only file system [ 825.901395][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/105.tmp-b7:0' failed: Read-only file system [ 826.031827][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/105.tmp-b7:0' failed: Read-only file system [ 826.110664][T10170] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 826.321320][T10170] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 826.355395][T10170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.412380][T10170] usb 4-1: Product: syz [ 826.427199][T10170] usb 4-1: Manufacturer: syz [ 826.437311][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/105.tmp-b7:0' failed: Read-only file system [ 826.473925][T10170] usb 4-1: SerialNumber: syz [ 826.725346][T14918] loop0: detected capacity change from 0 to 32768 [ 826.733367][T14918] btrfs: Deprecated parameter 'usebackuproot' [ 826.739457][T14918] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 826.753668][T14918] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2738 (14918) [ 826.791520][T14918] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 826.801915][T14918] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 826.810603][T14918] BTRFS info (device loop0): disk space caching is enabled [ 826.818003][T14918] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 826.833945][T10170] usb 4-1: config 0 descriptor?? [ 826.951216][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/127.tmp-b7:6' failed: Read-only file system [ 826.979648][ T6370] udevd[6370]: symlink '../../loop4' '/dev/disk/by-diskseq/128.tmp-b7:4' failed: Read-only file system [ 827.039091][ T66] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 827.057611][ T5922] udevd[5922]: symlink '../../loop6' '/dev/disk/by-diskseq/127.tmp-b7:6' failed: Read-only file system [ 827.106401][ T6370] udevd[6370]: symlink '../../loop4' '/dev/disk/by-diskseq/128.tmp-b7:4' failed: Read-only file system [ 827.132383][T14918] BTRFS error (device loop0): failed to load root extent [ 827.139467][T14918] BTRFS warning (device loop0): try to load backup roots slot 1 [ 827.152514][ T66] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 827.172885][ T6370] udevd[6370]: symlink '../../loop4' '/dev/disk/by-diskseq/131.tmp-b7:4' failed: Read-only file system [ 827.190494][T14918] BTRFS warning (device loop0): couldn't read tree root [ 827.197562][T14918] BTRFS warning (device loop0): try to load backup roots slot 2 [ 827.211385][ T66] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 827.240512][T14918] BTRFS warning (device loop0): couldn't read tree root [ 827.247522][T14918] BTRFS warning (device loop0): try to load backup roots slot 3 [ 827.281244][T10170] usb 4-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 827.351959][T14918] BTRFS info (device loop0): rebuilding free space tree [ 827.373962][T14918] BTRFS info (device loop0): disabling free space tree [ 827.380948][T14918] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 827.390890][T14918] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 827.495055][T10170] usb 4-1: failed to fetch extended address, random address set [ 827.817333][ T5872] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 827.867129][T10170] usb 4-1: USB disconnect, device number 30 [ 828.309782][T14944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2740'. [ 828.345762][T14944] 8021q: VLANs not supported on nlmon0 [ 829.111727][ T30] audit: type=1326 audit(1755187922.662:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.4.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 829.291987][ T30] audit: type=1326 audit(1755187922.662:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.4.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 829.505348][ T30] audit: type=1326 audit(1755187922.662:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.4.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f787958d550 code=0x7ffc0000 [ 829.768285][ T30] audit: type=1326 audit(1755187922.662:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.4.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f787958d550 code=0x7ffc0000 [ 829.902814][ T30] audit: type=1326 audit(1755187922.662:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.4.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 830.037173][ T30] audit: type=1326 audit(1755187922.662:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.4.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 830.150448][ T30] audit: type=1326 audit(1755187922.662:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.4.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 830.317200][ T30] audit: type=1326 audit(1755187922.662:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.4.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 830.364120][T14979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.457042][ T30] audit: type=1326 audit(1755187922.662:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.4.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787958ebe9 code=0x7ffc0000 [ 830.599036][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/130.tmp-b7:0' failed: Read-only file system [ 830.700968][ T5922] udevd[5922]: symlink '../../loop3' '/dev/disk/by-diskseq/114.tmp-b7:3' failed: Read-only file system [ 830.775930][ T6364] udevd[6364]: symlink '../../loop0' '/dev/disk/by-diskseq/130.tmp-b7:0' failed: Read-only file system [ 830.913848][ T5922] udevd[5922]: symlink '../../loop1' '/dev/disk/by-diskseq/126.tmp-b7:1' failed: Read-only file system [ 830.937089][ T6020] udevd[6020]: symlink '../../loop6' '/dev/disk/by-diskseq/129.tmp-b7:6' failed: Read-only file system [ 830.970987][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2757'. [ 831.003328][T14989] 8021q: VLANs not supported on nlmon0 [ 831.095475][ T6364] udevd[6364]: symlink '../../loop1' '/dev/disk/by-diskseq/126.tmp-b7:1' failed: Read-only file system [ 831.288695][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/129.tmp-b7:6' failed: Read-only file system [ 831.379081][ T5922] udevd[5922]: symlink '../../loop1' '/dev/disk/by-diskseq/126.tmp-b7:1' failed: Read-only file system [ 831.619362][T14998] loop6: detected capacity change from 0 to 256 [ 831.725002][T14998] FAT-fs (loop6): Directory bread(block 64) failed [ 831.736623][T14998] FAT-fs (loop6): Directory bread(block 65) failed [ 831.800638][T14998] FAT-fs (loop6): Directory bread(block 66) failed [ 831.837670][ T5922] udevd[5922]: symlink '../../loop1' '/dev/disk/by-diskseq/126.tmp-b7:1' failed: Read-only file system [ 831.850538][T14998] FAT-fs (loop6): Directory bread(block 67) failed [ 831.886536][T14998] FAT-fs (loop6): Directory bread(block 68) failed [ 831.895186][ T6364] udevd[6364]: symlink '../../loop6' '/dev/disk/by-diskseq/133.tmp-b7:6' failed: Read-only file system [ 831.955993][T14998] FAT-fs (loop6): Directory bread(block 69) failed [ 832.040596][T14998] FAT-fs (loop6): Directory bread(block 70) failed [ 832.121839][T14998] FAT-fs (loop6): Directory bread(block 71) failed [ 832.128494][T14998] FAT-fs (loop6): Directory bread(block 72) failed [ 832.199831][T14998] FAT-fs (loop6): Directory bread(block 73) failed [ 832.234534][T15002] loop2: detected capacity change from 0 to 1024 [ 832.347152][T14998] syz.6.2760: attempt to access beyond end of device [ 832.347152][T14998] loop6: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 833.080620][ T5956] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 833.310493][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 833.337904][ T5956] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 833.356320][ T5956] usb 3-1: config 0 has no interface number 0 [ 833.366490][ T5956] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 833.414331][ T5956] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 833.458773][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 833.489145][ T5956] usb 3-1: Product: syz [ 833.509446][ T5956] usb 3-1: SerialNumber: syz [ 833.552167][ T5956] usb 3-1: config 0 descriptor?? [ 833.589184][ T5956] cm109 3-1:0.8: invalid payload size 14, expected 4 [ 833.615294][ T5956] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input29 [ 833.986049][T15019] loop6: detected capacity change from 0 to 1024 [ 834.003984][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 834.011045][ C0] ------------[ cut here ]------------ [ 834.016732][ C0] URB ffff888074f2ec00 submitted while active [ 834.023524][ C0] WARNING: CPU: 0 PID: 15007 at drivers/usb/core/urb.c:379 usb_submit_urb+0xfc1/0x1830 [ 834.033150][ C0] Modules linked in: [ 834.037169][ C0] CPU: 0 UID: 0 PID: 15007 Comm: syz.2.2765 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 834.049231][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 834.059375][ C0] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 834.065011][ C0] Code: 44 89 f2 e8 61 06 01 fa e9 13 fc ff ff e8 97 1d 94 fa c6 05 6a e6 61 08 01 90 48 c7 c7 00 fb 34 8c 48 89 de e8 20 bc 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 71 1d 94 fa eb 11 e8 6a 1d 94 fa bd [ 834.084701][ C0] RSP: 0018:ffffc900000077b8 EFLAGS: 00010046 [ 834.090766][ C0] RAX: e5dd5cf4ea298500 RBX: ffff888074f2ec00 RCX: 0000000000040000 [ 834.098755][ C0] RDX: ffffc90002161000 RSI: 0000000000009cc1 RDI: 0000000000009cc2 [ 834.106714][ C0] RBP: 000000000000000f R08: ffff8880b8624253 R09: 1ffff110170c484a [ 834.114679][ C0] R10: dffffc0000000000 R11: ffffed10170c484b R12: dffffc0000000000 [ 834.122646][ C0] R13: ffff8880267ac830 R14: ffff888074f2ec08 R15: 0000000000000820 [ 834.130619][ C0] FS: 0000555587a75500(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 834.139543][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 834.146116][ C0] CR2: 0000200000003000 CR3: 000000007dbb9000 CR4: 0000000000350ef0 [ 834.154078][ C0] Call Trace: [ 834.157342][ C0] [ 834.160199][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.165851][ C0] ? kcov_remote_start+0x97/0x7f0 [ 834.171056][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 834.176437][ C0] __usb_hcd_giveback_urb+0x41a/0x690 [ 834.181810][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.187444][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 834.193343][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.198991][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.204705][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 834.210078][ C0] dummy_timer+0x862/0x4550 [ 834.214590][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.220228][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.226033][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 834.231491][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 834.237227][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.242860][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 834.247798][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 834.252730][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 834.257694][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 834.262882][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.268552][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 834.274260][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.279884][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 834.285778][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 834.290902][ C0] handle_softirqs+0x286/0x870 [ 834.295661][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 834.300424][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 834.305702][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.311323][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 834.316519][ C0] __irq_exit_rcu+0xca/0x1f0 [ 834.321096][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 834.326294][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.332006][ C0] irq_exit_rcu+0x9/0x30 [ 834.336234][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 834.341861][ C0] [ 834.344773][ C0] [ 834.347686][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 834.353656][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 834.360150][ C0] Code: 74 05 e8 8b 76 4b f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f3 1d 14 f6 65 8b 05 6c 61 24 07 85 c0 74 40 48 c7 04 24 0e 36 [ 834.379742][ C0] RSP: 0018:ffffc90005257a00 EFLAGS: 00000206 [ 834.385805][ C0] RAX: e5dd5cf4ea298500 RBX: 0000000000000212 RCX: e5dd5cf4ea298500 [ 834.393769][ C0] RDX: 0000000000000006 RSI: ffffffff8d9b6dbe RDI: 0000000000000001 [ 834.401743][ C0] RBP: ffffc90005257a90 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 834.409704][ C0] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: dffffc0000000000 [ 834.417751][ C0] R13: ffff8881457b4200 R14: ffffffff8ede53c0 R15: 1ffff92000a4af40 [ 834.425733][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 834.432065][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.437693][ C0] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 834.443066][ C0] usb_hcd_poll_rh_status+0x406/0x620 [ 834.448488][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 834.454414][ C0] dummy_pullup+0x19b/0x200 [ 834.458917][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 834.463939][ C0] usb_gadget_disconnect_locked+0x143/0x4b0 [ 834.469842][ C0] gadget_unbind_driver+0xc4/0x430 [ 834.474959][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 834.480682][ C0] device_release_driver_internal+0x46f/0x800 [ 834.486750][ C0] driver_detach+0x1f3/0x2d0 [ 834.491336][ C0] bus_remove_driver+0x226/0x2f0 [ 834.496279][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 834.502016][ C0] raw_release+0xd7/0x260 [ 834.506351][ C0] ? __pfx_raw_release+0x10/0x10 [ 834.511290][ C0] __fput+0x44c/0xa70 [ 834.515284][ C0] task_work_run+0x1d4/0x260 [ 834.519904][ C0] ? __pfx_task_work_run+0x10/0x10 [ 834.525022][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 834.530510][ C0] exit_to_user_mode_loop+0xec/0x110 [ 834.535798][ C0] do_syscall_64+0x2bd/0x3b0 [ 834.540393][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.546451][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 834.552604][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.558495][ C0] RIP: 0033:0x7f903f78ebe9 [ 834.562899][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.582774][ C0] RSP: 002b:00007ffddba925b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 834.591457][ C0] RAX: 0000000000000000 RBX: 00000000000cb4d5 RCX: 00007f903f78ebe9 [ 834.599418][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 834.607401][ C0] RBP: 00007f903f9b7da0 R08: 0000000000000001 R09: 00000006dba928af [ 834.615381][ C0] R10: 0000001b31f20000 R11: 0000000000000246 R12: 00007f903f9b5fac [ 834.623348][ C0] R13: 00007f903f9b5fa0 R14: ffffffffffffffff R15: 00007ffddba926d0 [ 834.631330][ C0] [ 834.634336][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 834.641694][ C0] CPU: 0 UID: 0 PID: 15007 Comm: syz.2.2765 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 834.653743][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 834.663785][ C0] Call Trace: [ 834.667051][ C0] [ 834.669883][ C0] dump_stack_lvl+0x99/0x250 [ 834.674517][ C0] ? __asan_memcpy+0x40/0x70 [ 834.679118][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 834.684320][ C0] ? __pfx__printk+0x10/0x10 [ 834.688942][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.694585][ C0] vpanic+0x281/0x750 [ 834.698569][ C0] ? __pfx__printk+0x10/0x10 [ 834.703620][ C0] ? __pfx_vpanic+0x10/0x10 [ 834.708141][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.713772][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 834.719342][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.725265][ C0] panic+0xb9/0xc0 [ 834.728986][ C0] ? __pfx_panic+0x10/0x10 [ 834.733422][ C0] __warn+0x31b/0x4b0 [ 834.737400][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 834.742332][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 834.747258][ C0] report_bug+0x2be/0x4f0 [ 834.751597][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 834.756526][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 834.761451][ C0] ? usb_submit_urb+0xfc3/0x1830 [ 834.766384][ C0] handle_bug+0x84/0x160 [ 834.770614][ C0] exc_invalid_op+0x1a/0x50 [ 834.775107][ C0] asm_exc_invalid_op+0x1a/0x20 [ 834.779946][ C0] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 834.785479][ C0] Code: 44 89 f2 e8 61 06 01 fa e9 13 fc ff ff e8 97 1d 94 fa c6 05 6a e6 61 08 01 90 48 c7 c7 00 fb 34 8c 48 89 de e8 20 bc 57 fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 71 1d 94 fa eb 11 e8 6a 1d 94 fa bd [ 834.805079][ C0] RSP: 0018:ffffc900000077b8 EFLAGS: 00010046 [ 834.811140][ C0] RAX: e5dd5cf4ea298500 RBX: ffff888074f2ec00 RCX: 0000000000040000 [ 834.819132][ C0] RDX: ffffc90002161000 RSI: 0000000000009cc1 RDI: 0000000000009cc2 [ 834.827092][ C0] RBP: 000000000000000f R08: ffff8880b8624253 R09: 1ffff110170c484a [ 834.835073][ C0] R10: dffffc0000000000 R11: ffffed10170c484b R12: dffffc0000000000 [ 834.843037][ C0] R13: ffff8880267ac830 R14: ffff888074f2ec08 R15: 0000000000000820 [ 834.851118][ C0] ? usb_submit_urb+0xfc0/0x1830 [ 834.856062][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.861692][ C0] ? kcov_remote_start+0x97/0x7f0 [ 834.866721][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 834.872108][ C0] __usb_hcd_giveback_urb+0x41a/0x690 [ 834.877680][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.883313][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 834.889212][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.894861][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.900518][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 834.905902][ C0] dummy_timer+0x862/0x4550 [ 834.910793][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.916437][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.922072][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 834.927451][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 834.933190][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.938842][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 834.943977][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 834.949018][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 834.953988][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 834.959190][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.964853][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 834.970597][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 834.976235][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 834.982044][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 834.987152][ C0] handle_softirqs+0x286/0x870 [ 834.991912][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 834.996676][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 835.001956][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 835.007589][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 835.012801][ C0] __irq_exit_rcu+0xca/0x1f0 [ 835.017472][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 835.022669][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 835.028306][ C0] irq_exit_rcu+0x9/0x30 [ 835.032561][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 835.038228][ C0] [ 835.041159][ C0] [ 835.044080][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 835.050074][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 835.056572][ C0] Code: 74 05 e8 8b 76 4b f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f3 1d 14 f6 65 8b 05 6c 61 24 07 85 c0 74 40 48 c7 04 24 0e 36 [ 835.076253][ C0] RSP: 0018:ffffc90005257a00 EFLAGS: 00000206 [ 835.082315][ C0] RAX: e5dd5cf4ea298500 RBX: 0000000000000212 RCX: e5dd5cf4ea298500 [ 835.090276][ C0] RDX: 0000000000000006 RSI: ffffffff8d9b6dbe RDI: 0000000000000001 [ 835.098322][ C0] RBP: ffffc90005257a90 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 835.106283][ C0] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: dffffc0000000000 [ 835.114244][ C0] R13: ffff8881457b4200 R14: ffffffff8ede53c0 R15: 1ffff92000a4af40 [ 835.122251][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 835.128584][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 835.134218][ C0] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 835.139902][ C0] usb_hcd_poll_rh_status+0x406/0x620 [ 835.145511][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 835.151435][ C0] dummy_pullup+0x19b/0x200 [ 835.156115][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 835.161171][ C0] usb_gadget_disconnect_locked+0x143/0x4b0 [ 835.167094][ C0] gadget_unbind_driver+0xc4/0x430 [ 835.172231][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 835.177966][ C0] device_release_driver_internal+0x46f/0x800 [ 835.184121][ C0] driver_detach+0x1f3/0x2d0 [ 835.188731][ C0] bus_remove_driver+0x226/0x2f0 [ 835.193706][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 835.199440][ C0] raw_release+0xd7/0x260 [ 835.203957][ C0] ? __pfx_raw_release+0x10/0x10 [ 835.208900][ C0] __fput+0x44c/0xa70 [ 835.213007][ C0] task_work_run+0x1d4/0x260 [ 835.217724][ C0] ? __pfx_task_work_run+0x10/0x10 [ 835.223136][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 835.228631][ C0] exit_to_user_mode_loop+0xec/0x110 [ 835.234191][ C0] do_syscall_64+0x2bd/0x3b0 [ 835.238814][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.244874][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 835.251048][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.256931][ C0] RIP: 0033:0x7f903f78ebe9 [ 835.261335][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.280931][ C0] RSP: 002b:00007ffddba925b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 835.289339][ C0] RAX: 0000000000000000 RBX: 00000000000cb4d5 RCX: 00007f903f78ebe9 [ 835.297300][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 835.305257][ C0] RBP: 00007f903f9b7da0 R08: 0000000000000001 R09: 00000006dba928af [ 835.313217][ C0] R10: 0000001b31f20000 R11: 0000000000000246 R12: 00007f903f9b5fac [ 835.321181][ C0] R13: 00007f903f9b5fa0 R14: ffffffffffffffff R15: 00007ffddba926d0 [ 835.329167][ C0] [ 835.332405][ C0] Kernel Offset: disabled [ 835.336718][ C0] Rebooting in 86400 seconds..