last executing test programs:

2m11.166907879s ago: executing program 1 (id=2):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x814)

2m11.016155034s ago: executing program 1 (id=5):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210008, &(0x7f0000000b40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfa, 0x56f, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]})

2m10.604019423s ago: executing program 1 (id=6):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000002000001050003000000000088000080060001000a000000140002002001000000f800000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r2], 0x22c}}, 0x0)

2m10.381240831s ago: executing program 1 (id=7):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]})
lchown(&(0x7f0000000080)='./file0/file1\x00', 0x0, 0x0)

2m9.855060659s ago: executing program 1 (id=8):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}]}]}, 0x30}}, 0x80)

2m7.859293623s ago: executing program 1 (id=22):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

2m7.393263111s ago: executing program 32 (id=22):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

1m45.068614837s ago: executing program 2 (id=154):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x35}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xb7}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24004054)

1m43.726644091s ago: executing program 2 (id=161):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20)
ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf={0x0, 0xffffffffffffffff})

1m43.477884313s ago: executing program 2 (id=162):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x7, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x10000009, 0xffff, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x5f461e2f, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xff7fffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0x9, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x40, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0xc, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x8, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x0, 0x0, 0x1f0, 0xfffffffd, 0x3, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x1, 0x200, 0x82, 0x2, 0xcc52, 0x81, 0x1000, 0xa1, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7fb, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x4, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x40005, 0x0, 0x3, 0x80ce7, 0xe3, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x3f, 0x100, 0x9602, 0x10000004, 0x5, 0xffff, 0x6, 0x1, 0x10080, 0x7, 0x8, 0xb, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a310000000038000380340000800400018014000b80100001148c9d8dbd7db32f00040002800c000440000000000000000f0c0005"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1m43.179451093s ago: executing program 2 (id=164):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46b, &(0x7f00000009c0)="$eJzs289vFFUcAPDvTFt+IxXxBz/UKhobf2yhgHLwotHEgyYmXvBY20KQhRpaEyFE0Rg8GhITj8ajiX+BJ70Y9WTiVe+GhBguoqcxsztDd9fttsC2A93PJ9nueztv9r3vvHm7b+Z1AxhYY/mfJGJbRPweETua2fYCY82n69cuTP9z7cJ0Eln21l9Jo9zf1y5Ml0XL/bYWmfE0Iv00ib1d6p0/d/7UVL0+e7bITyycfm9i/tz5506enjoxe2L2zOTRo4cPHXzh+ckjfYnz3rytez6c27f7tbcvvzF97PI7P3+blPF3xNEnY702Ppllfa6uWttb0snwCnYYWsXGsGJ5N+TdNdIY/ztiKBY7b0e8+kmljQNWVVZYYvPFDFjHkqi6BUA1yi/6/Pq3fKzd7KN6V19qXgDlcV8vHs0tw5EWZUY6rm/7aSwijl3896v8EatzHwIAoM33+fzn2W7zvzQeaCl3T2xsrA2NFmspOyPivojYFRH3RzTKPhgRD3WrpMeCQOciyf/nP+mVW49uefn878Vibat9/lfO/mJ0qMhtb8R/JI2ozx5oHJOI8RjZePxkffZgjzp+eOW3z5fa1jr/yx95/eVcsGjHleGN7fvMTC1M3U7Mra5+HLFnuFv8yY2VgCQidkfEnlus4+TT3+xbatvy8fewknWmZWRfRzzV7P+L0RF/Kem9PjmxKT8fJvKz4EDXOn759dKbS9V/W/H3Qd7/W7qe/zfiH01a12vnb+bdm6P70h+fLXlNU7ul83/xhQ3F8wdTCwtnD0ZsSF5vNrr19cnFfct8WT6Pf3x/9/G/MxaPxN6IyE/ihyPikYh4tIjusYh4PCL29zgKP738xLu9jlD3+Df1eMf+yeOf6ej/0fYiHf2/mNgQna90Twyd+vG79ndcSfylvP8PN1LjxSuNz78ve8e1knbd7NkMAAAAd6s0IrZFktZupNO0Vmv+D/+u2JLW5+YXnjk+9/6ZmeZvBEZjJC3vdDXvB48k5f3P0Zb8ZEf+UHHf+IuhzY18bXquPlN18DDgtraO//KWb6359KffaMD614d1NOAuZfzD4DL+YXAZ/zC4uoz/zVW0A1h73b7/P6qgHcDa6xj/lv1ggLj+h8E1HFlSdRuAarR+//sggIExvzmW/5H8ekhkWZbdAc1YP4lI74hm9CeRrPIo2FZ1gDefqPqTCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD/+CwAA//9lEuuH")
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000000)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x143041, 0x31)

1m42.409357551s ago: executing program 2 (id=166):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x6e)

1m41.951202738s ago: executing program 2 (id=168):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10)

1m41.52178206s ago: executing program 33 (id=168):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10)

8.154535295s ago: executing program 5 (id=787):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000000)='./file1\x00', 0x8000)
fallocate(r0, 0x0, 0x0, 0x8fffb)

6.539160256s ago: executing program 5 (id=798):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x44, r1, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3}, @device_b, @device_a, @random="926b7684327f", {0x3, 0x6}}, 0x81a, 0x49, @default, @void, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

5.931027827s ago: executing program 5 (id=800):
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05100000000000000109022d00010000000009040000010300000009210000080122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x2}, @global=@item_012={0x2, 0x1, 0x4, '\x00\x00'}, @main=@item_012={0x1, 0x0, 0xb, '\r'}, @global=@item_012={0x0, 0x1, 0xd7468a43226f70c9}]}}, 0x0}, 0x0)
ptrace$cont(0x20, 0x0, 0x9, 0x81)

3.771386929s ago: executing program 5 (id=811):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080001"], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040)

3.586269069s ago: executing program 5 (id=813):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x550f, &(0x7f000000c3c0)="$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")
r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0)
sendfile(r0, r0, &(0x7f0000000080), 0x7f03)

3.499298934s ago: executing program 3 (id=814):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r1, 0x325, 0x2, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

3.361448467s ago: executing program 3 (id=815):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x2, 0x0, 0x1, [{0x8, 0xf, 0x0, 0x0, 0x9}]}}]}]}, 0x34}}, 0x0)

3.099332671s ago: executing program 0 (id=817):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0xfffffffffffffcee}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff)

3.063060857s ago: executing program 3 (id=819):
munmap(&(0x7f0000002000/0x800000)=nil, 0x800000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x68})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f000074f000/0x3000)=nil, 0x3000}, 0x1})

2.994314769s ago: executing program 0 (id=820):
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1e1540, 0x57)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x50}}], 0x2, 0x0)

2.839258914s ago: executing program 3 (id=821):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xf3, @time={0x65757100, 0x1000000}, 0xff, {0x3d}})

2.829331866s ago: executing program 0 (id=822):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x485, &(0x7f0000001040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10)
setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000600000000000400050000000000100007000000000020"], 0x24, 0x1)
llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x22)

2.312239612s ago: executing program 3 (id=823):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f000000a100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38d7b98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b3276342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440f97f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb526301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd437497320d383e752dd224aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee660debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6de640bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f2f7ee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc6c9a44c575738725815a9af1ced500", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0xffffffffa4614429, 0x104, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x4000)

2.251335193s ago: executing program 4 (id=824):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
splice(r1, &(0x7f0000000040)=0xfffffffffffffffc, r0, 0x0, 0x6, 0x0)

2.215512269s ago: executing program 0 (id=825):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x290, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x278, 0x1, [@m_bpf={0x78, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4d, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a6660c265b59ed90ce6980eda6d48"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x4c, 0x10, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6}, 0x32}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x1b0, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x181, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1.865312877s ago: executing program 0 (id=826):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfffffffc, {0x3}, {0x7}, @raw32={[0x2, 0x0, 0x800]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfc}, {}, @control={0x7, 0x8, 0x3}}, {0x6, 0x3, 0x9, 0x3, @tick=0x2, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0xd0, 0x5, 0xb, @tick=0x80000001, {0x3, 0x9}, {0x2, 0x2}, @note={0xf9, 0x7, 0xb, 0x3, 0x10}}], 0x70)

1.617500339s ago: executing program 4 (id=827):
syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xa4, &(0x7f0000000180)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x0, 0x1}}, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)

1.543237561s ago: executing program 0 (id=828):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TCFLSH(r0, 0x400455cb, 0x2)

1.477225092s ago: executing program 5 (id=829):
syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7})
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0xb, {"10421b0f4959410bcd694ee565560c26", "7f3db605e694f78760e7d6d6029ca25a", "943c27e0c76a1ef747add078a622e85b"}, 0x1, 0x4})

1.211276997s ago: executing program 3 (id=830):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x800003d, 0x407ff)
lseek(r0, 0xcbb, 0x3)

919.262675ms ago: executing program 4 (id=831):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x70bd2c, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x6}, @NL80211_KEY_DATA_WEP40={0x9, 0xa}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8e00000000000000005dfed183"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x50}}, 0x0)

566.456495ms ago: executing program 4 (id=832):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000050}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x3c}}, 0x0)

256.897387ms ago: executing program 4 (id=833):
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/l2cap\x00')
readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000540)=""/72, 0x48)

0s ago: executing program 4 (id=834):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001100)={0x2c, &(0x7f0000000e80)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

i2: command tx timeout
[   88.367825][ T5784] Bluetooth: hci3: command tx timeout
[   88.470886][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.513269][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.682174][ T5770] veth0_vlan: entered promiscuous mode
[   88.721457][ T5770] veth1_vlan: entered promiscuous mode
[   88.824905][ T5770] veth0_macvtap: entered promiscuous mode
[   88.883098][ T5770] veth1_macvtap: entered promiscuous mode
[   88.976841][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.046889][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.069090][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.091425][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.104787][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.114980][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.124889][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.164895][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.202551][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.324841][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.343300][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.431859][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.442909][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.466251][ T5776] veth0_vlan: entered promiscuous mode
[   89.489802][ T5769] veth0_vlan: entered promiscuous mode
[   89.519721][ T5769] veth1_vlan: entered promiscuous mode
[   89.555511][ T5776] veth1_vlan: entered promiscuous mode
[   89.580599][ T5771] veth0_vlan: entered promiscuous mode
[   89.606729][ T5771] veth1_vlan: entered promiscuous mode
[   89.683314][ T5769] veth0_macvtap: entered promiscuous mode
[   89.725808][ T5769] veth1_macvtap: entered promiscuous mode
[   89.793773][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.811761][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.836121][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.863293][ T5771] veth0_macvtap: entered promiscuous mode
[   89.903366][ T5776] veth0_macvtap: entered promiscuous mode
[   89.919668][ T5841] syz.1.5[5841]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   89.931147][ T5771] veth1_macvtap: entered promiscuous mode
[   89.945175][ T5841] loop1: detected capacity change from 0 to 1024
[   89.947015][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.983332][ T5841] EXT4-fs: Ignoring removed bh option
[   89.984094][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.011928][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.023625][ T5841] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   90.043676][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.061980][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.077134][ T5841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.091399][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.091478][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.132221][ T5776] veth1_macvtap: entered promiscuous mode
[   90.165315][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.176931][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.188602][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.201526][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.216914][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.226398][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.263426][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.307409][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.327418][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.339574][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.356984][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.364899][ T5784] Bluetooth: hci0: command tx timeout
[   90.364946][ T5784] Bluetooth: hci1: command tx timeout
[   90.401907][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.412410][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.425736][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.437952][ T5773] Bluetooth: hci2: command tx timeout
[   90.438266][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.443703][ T5773] Bluetooth: hci3: command tx timeout
[   90.459597][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.497408][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.511782][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.523459][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.534604][ T5849] loop1: detected capacity change from 0 to 1024
[   90.534985][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.551157][ T5849] EXT4-fs: Ignoring removed bh option
[   90.569084][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.582707][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.604459][ T5849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.633575][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.646201][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.661789][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.673723][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.685390][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.697446][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.711235][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.784482][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.805940][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.806497][ T5849] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #12: block 7: comm syz.1.7: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[   90.819197][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.848992][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.859904][ T5849] EXT4-fs (loop1): Remounting filesystem read-only
[   90.979494][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.990842][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.062845][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.075638][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.186760][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.198517][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.230474][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.251080][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.304381][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.341612][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.508326][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.522088][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.246900][ T5871] loop2: detected capacity change from 0 to 8192
[   92.285787][ T5878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16'.
[   92.286938][ T5871] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   92.371775][ T5871] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[   92.382346][ T5871] REISERFS (device loop2): using ordered data mode
[   92.390248][ T5871] reiserfs: using flush barriers
[   92.399592][ T5871] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   92.418959][ T5871] REISERFS (device loop2): checking transaction log (loop2)
[   92.436737][ T5881] warning: `syz.3.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   92.451692][ T5773] Bluetooth: hci0: command tx timeout
[   92.518919][ T5773] Bluetooth: hci3: command tx timeout
[   92.524786][ T5784] Bluetooth: hci2: command tx timeout
[   92.615480][    T9] cfg80211: failed to load regulatory.db
[   92.644297][ T5888] loop3: detected capacity change from 0 to 128
[   92.713480][ T5871] REISERFS (device loop2): Using r5 hash to sort names
[   92.770259][ T5871] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   92.793103][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.900342][ T2961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.391158][ T2961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.542731][ T2961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.567883][ T5900] loop2: detected capacity change from 0 to 764
[   93.760294][ T2961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.401993][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   94.412004][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   94.440434][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   94.459918][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   94.482945][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   94.495964][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.312433][ T5915] loop2: detected capacity change from 0 to 40427
[   95.377832][ T5915] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   95.389143][ T5915] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   95.438732][ T5915] F2FS-fs (loop2): invalid crc_offset: 33558524
[   95.496679][ T5945] Zero length message leads to an empty skb
[   95.510933][ T5915] F2FS-fs (loop2): Found nat_bits in checkpoint
[   95.737506][ T5915] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   95.746480][ T5915] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   95.841764][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'.
[   95.913801][ T5957] loop3: detected capacity change from 0 to 8192
[   96.181460][ T5962] loop0: detected capacity change from 0 to 256
[   96.195994][ T5962] exfat: Deprecated parameter 'utf8'
[   96.299821][ T5962] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   96.457690][ T5922] chnl_net:caif_netlink_parms(): no params data found
[   96.598346][ T5773] Bluetooth: hci1: command tx timeout
[   97.228549][ T2961] hsr_slave_0: left promiscuous mode
[   97.298117][ T2961] hsr_slave_1: left promiscuous mode
[   97.357825][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.387206][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.459842][ T2961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.513452][ T2961] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.558952][ T2961] bridge_slave_1: left allmulticast mode
[   97.607453][ T2961] bridge_slave_1: left promiscuous mode
[   97.615044][ T2961] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.758827][ T2961] bridge_slave_0: left allmulticast mode
[   97.765603][ T2961] bridge_slave_0: left promiscuous mode
[   97.777352][    C1] sched: RT throttling activated
[   97.843391][ T2961] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.091917][ T5965] loop0: detected capacity change from 0 to 131072
[   98.112352][ T5965] F2FS-fs (loop0): invalid crc value
[   98.123584][ T2961] veth1_macvtap: left promiscuous mode
[   98.146412][ T5965] F2FS-fs (loop0): Found nat_bits in checkpoint
[   98.178286][ T2961] veth0_macvtap: left promiscuous mode
[   98.184901][ T2961] veth1_vlan: left promiscuous mode
[   98.242479][ T2961] veth0_vlan: left promiscuous mode
[   98.267639][ T5965] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   98.280618][ T5984] loop3: detected capacity change from 0 to 512
[   98.345006][ T5984] =======================================================
[   98.345006][ T5984] WARNING: The mand mount option has been deprecated and
[   98.345006][ T5984]          and is ignored by this kernel. Remove the mand
[   98.345006][ T5984]          option from the mount to silence this warning.
[   98.345006][ T5984] =======================================================
[   98.384768][    C0] vkms_vblank_simulate: vblank timer overrun
[   98.679527][ T5773] Bluetooth: hci1: command tx timeout
[  100.273248][ T2961] team0 (unregistering): Port device team_slave_1 removed
[  100.348097][ T2961] team0 (unregistering): Port device team_slave_0 removed
[  100.399868][ T2961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.450800][ T2961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.772640][ T5773] Bluetooth: hci1: command tx timeout
[  100.806613][ T2961] bond0 (unregistering): Released all slaves
[  100.994727][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'.
[  101.039328][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.047131][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.054841][ T5922] bridge_slave_0: entered allmulticast mode
[  101.063350][ T5922] bridge_slave_0: entered promiscuous mode
[  101.166006][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.194352][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.208344][ T5922] bridge_slave_1: entered allmulticast mode
[  101.215354][ T6024] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  101.237201][ T5922] bridge_slave_1: entered promiscuous mode
[  101.448567][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.475533][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.634275][ T5922] team0: Port device team_slave_0 added
[  101.702634][ T5922] team0: Port device team_slave_1 added
[  101.859512][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.881802][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.975891][ T6045] loop3: detected capacity change from 0 to 16
[  101.983921][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.993631][ T6045] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  102.019955][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.047493][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.052321][ T5916] udevd[5916]: incorrect cramfs checksum on /dev/loop3
[  102.124252][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.450814][ T5922] hsr_slave_0: entered promiscuous mode
[  102.498040][ T5922] hsr_slave_1: entered promiscuous mode
[  102.727669][ T6061] macvlan0: entered promiscuous mode
[  102.769069][ T6061] netlink: 'syz.0.72': attribute type 1 has an invalid length.
[  102.827457][ T6061] netlink: 'syz.0.72': attribute type 2 has an invalid length.
[  102.850723][ T5773] Bluetooth: hci1: command tx timeout
[  103.328175][ T6047] loop2: detected capacity change from 0 to 32768
[  103.432211][ T6047] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  103.548497][ T5922] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  103.618805][ T5922] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  103.712765][ T6047] XFS (loop2): Ending clean mount
[  103.753932][ T5922] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  103.792100][ T6047] XFS (loop2): Quotacheck needed: Please wait.
[  103.819258][ T5922] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  103.901471][ T6047] XFS (loop2): Quotacheck: Done.
[  104.174903][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.184782][ T5813] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  104.268818][ T5922] 8021q: adding VLAN 0 to HW filter on device team0
[  104.277691][ T6079] loop3: detected capacity change from 0 to 32768
[  104.310218][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.317676][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.381672][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.389515][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.412579][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  104.445294][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  104.468795][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  104.519758][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  104.584454][ T5813] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  104.625567][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.636948][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  104.654004][ T5813] usb 1-1: Product: syz
[  104.690408][ T5813] usb 1-1: Manufacturer: syz
[  104.706544][ T5813] usb 1-1: SerialNumber: syz
[  104.763129][ T5813] usb 1-1: config 0 descriptor??
[  105.139565][ T5813] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  105.274952][ T6103] loop3: detected capacity change from 0 to 512
[  105.294866][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.357296][ T6103] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.79: inode has both inline data and extents flags
[  105.379857][ T6103] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.79: couldn't read orphan inode 15 (err -117)
[  105.412941][ T6103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.458470][  T785] usb 1-1: USB disconnect, device number 2
[  105.750199][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.943516][ T6118] tap0: tun_chr_ioctl cmd 35111
[  106.338338][ T5922] veth0_vlan: entered promiscuous mode
[  106.392180][ T5922] veth1_vlan: entered promiscuous mode
[  106.514353][ T5922] veth0_macvtap: entered promiscuous mode
[  106.570233][ T5922] veth1_macvtap: entered promiscuous mode
[  106.575173][ T6139] loop0: detected capacity change from 0 to 256
[  106.610070][ T6139] exfat: Deprecated parameter 'utf8'
[  106.655954][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.682200][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.707645][ T6139] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  106.711942][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.797692][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.817414][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.857290][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.909409][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.917673][ T6139] netlink: 116 bytes leftover after parsing attributes in process `syz.0.87'.
[  106.995463][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.031999][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.043460][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.055373][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.066393][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.080605][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.103596][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.153960][ T5922] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.178361][ T5922] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.203544][ T5922] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.216625][ T5922] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.419822][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.464278][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.505539][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.505902][ T6154] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  107.527885][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.795747][ T6162] loop2: detected capacity change from 0 to 64
[  108.553864][ T6189] loop2: detected capacity change from 0 to 512
[  108.711321][ T6189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.749138][ T6189] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  109.099113][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.350875][ T6164] loop0: detected capacity change from 0 to 32768
[  109.433355][ T6164] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  109.627638][ T6164] XFS (loop0): Ending clean mount
[  109.647255][ T6164] XFS (loop0): Quotacheck needed: Please wait.
[  109.729119][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  109.807762][ T2173] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  109.815407][ T6164] XFS (loop0): Quotacheck: Done.
[  109.971040][    T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  109.997534][    T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  110.017421][ T2173] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  110.027021][ T2173] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  110.043670][    T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  110.054900][ T2173] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  110.065397][    T9] usb 4-1: config 220 has no interface number 2
[  110.087557][    T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  110.103515][ T2173] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  110.124269][    T9] usb 4-1: config 220 interface 0 has no altsetting 0
[  110.128651][ T5769] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  110.137596][ T2173] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  110.162642][    T9] usb 4-1: config 220 interface 76 has no altsetting 0
[  110.187499][    T9] usb 4-1: config 220 interface 1 has no altsetting 0
[  110.207497][ T2173] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  110.223278][    T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  110.238771][ T2173] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  110.267198][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.283858][ T2173] usb 5-1: Product: syz
[  110.304586][ T2173] usb 5-1: Manufacturer: syz
[  110.311150][    T9] usb 4-1: Product: syz
[  110.340453][    T9] usb 4-1: Manufacturer: syz
[  110.345494][    T9] usb 4-1: SerialNumber: syz
[  110.351839][ T2173] cdc_wdm 5-1:1.0: skipping garbage
[  110.396860][ T2173] cdc_wdm 5-1:1.0: skipping garbage
[  110.435800][ T2173] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  110.465275][ T2173] cdc_wdm 5-1:1.0: Unknown control protocol
[  110.617999][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  110.625421][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  110.632804][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  110.640111][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  110.647205][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  110.654134][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  110.664843][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  110.671620][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  110.678359][ T2173] usb 5-1: USB disconnect, device number 2
[  110.689704][    T9] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  110.696313][    T9] usb 4-1: No valid video chain found.
[  110.722198][    T9] usb 4-1: selecting invalid altsetting 0
[  110.768521][    T9] usb 4-1: selecting invalid altsetting 0
[  110.774727][    T9] usbtest: probe of 4-1:220.1 failed with error -22
[  110.825856][    T9] usb 4-1: USB disconnect, device number 2
[  110.926799][ T6250] loop2: detected capacity change from 0 to 64
[  112.383163][ T6295] loop4: detected capacity change from 0 to 2048
[  112.467233][ T6295] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  112.547535][ T6295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.722577][ T6305] loop0: detected capacity change from 0 to 1024
[  112.779640][ T6305] EXT4-fs: Ignoring removed bh option
[  112.785198][ T6305] EXT4-fs: Ignoring removed oldalloc option
[  112.873968][ T6305] EXT4-fs: Ignoring removed nobh option
[  112.904130][ T6305] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  112.959919][ T6305] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block
[  112.959919][ T6305] 
[  113.321397][ T6314] loop4: detected capacity change from 0 to 4096
[  113.398130][ T5773] Bluetooth: hci1: command 0x0405 tx timeout
[  113.516636][ T6322] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.518237][ T6318] loop0: detected capacity change from 0 to 40427
[  114.552361][ T6318] F2FS-fs (loop0): invalid crc value
[  114.620606][ T6318] F2FS-fs (loop0): Found nat_bits in checkpoint
[  114.837897][   T28] audit: type=1326 audit(1776360261.410:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  114.855097][ T6318] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  114.940164][   T28] audit: type=1326 audit(1776360261.450:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  114.968287][ T6321] loop2: detected capacity change from 0 to 40427
[  115.027720][ T6321] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff
[  115.057455][   T28] audit: type=1326 audit(1776360261.450:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  115.116150][ T6321] F2FS-fs (loop2): invalid crc value
[  115.186685][   T28] audit: type=1326 audit(1776360261.450:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  115.187818][ T6321] F2FS-fs (loop2): Found nat_bits in checkpoint
[  115.272861][ T6318] F2FS-fs (loop0): Stopped filesystem due to reason: 0
[  115.307475][   T28] audit: type=1326 audit(1776360261.450:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  115.387770][   T28] audit: type=1326 audit(1776360261.450:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  115.443381][ T6321] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  115.497485][   T28] audit: type=1326 audit(1776360261.460:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  115.573703][   T28] audit: type=1326 audit(1776360261.460:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  115.666755][   T28] audit: type=1326 audit(1776360261.480:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  115.751102][   T28] audit: type=1326 audit(1776360261.480:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.3.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  115.779865][ T5776] syz-executor: attempt to access beyond end of device
[  115.779865][ T5776] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  115.811958][ T5776] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  116.561311][ T6373] loop4: detected capacity change from 0 to 512
[  116.667256][ T6373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.777579][ T6373] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.068864][ T5922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.424190][ T6371] loop0: detected capacity change from 0 to 32768
[  117.481771][ T6371] 
[  117.481771][ T6371]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  117.481771][ T6371] 
[  117.606989][ T6371] 
[  117.606989][ T6371]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  117.606989][ T6371] 
[  117.687616][ T6371] 
[  117.687616][ T6371]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  117.687616][ T6371] 
[  117.689034][ T6370] loop3: detected capacity change from 0 to 40427
[  117.727754][ T6371] 
[  117.727754][ T6371]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  117.727754][ T6371] 
[  117.749543][ T6370] F2FS-fs (loop3): Invalid log_blocksize (64), supports only 12
[  117.758146][ T6371] 
[  117.758146][ T6371]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  117.758146][ T6371] 
[  117.768602][ T6389] loop2: detected capacity change from 0 to 512
[  117.809262][ T6371] 
[  117.809262][ T6371]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  117.809262][ T6371] 
[  117.819278][ T6389] EXT4-fs: Ignoring removed orlov option
[  117.837593][ T6370] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  117.861124][ T6389] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  117.862204][  T110] 
[  117.862204][  T110]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  117.862204][  T110] 
[  117.927449][    T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  117.935678][ T6389] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  117.973817][ T6370] F2FS-fs (loop3): invalid crc value
[  118.016063][ T5769] 
[  118.016063][ T5769]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  118.016063][ T5769] 
[  118.042715][ T6389] EXT4-fs (loop2): 1 orphan inode deleted
[  118.051539][ T5769] 
[  118.051539][ T5769]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  118.051539][ T5769] 
[  118.073836][ T6389] EXT4-fs (loop2): 1 truncate cleaned up
[  118.094205][ T6389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.174746][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.217669][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.267502][    T8] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  118.311888][    T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  118.347393][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.356011][    T8] usb 5-1: Product: syz
[  118.377561][    T8] usb 5-1: Manufacturer: syz
[  118.382539][    T8] usb 5-1: SerialNumber: syz
[  118.391900][ T5776] EXT4-fs error (device loop2): __ext4_iget:5078: inode #11: block 458766: comm syz-executor: invalid block
[  118.434544][ T5776] EXT4-fs error (device loop2): __ext4_iget:5078: inode #11: block 458766: comm syz-executor: invalid block
[  118.448202][ T6370] F2FS-fs (loop3): Start checkpoint disabled!
[  118.528640][ T6370] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  118.591410][ T6370] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  118.768615][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.966762][ T2995] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.109147][ T6370] syz.3.157: attempt to access beyond end of device
[  119.109147][ T6370] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  119.174596][ T6370] syz.3.157: attempt to access beyond end of device
[  119.174596][ T6370] loop3: rw=2049, sector=45136, nr_sectors = 8 limit=40427
[  119.208729][ T2995] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.242403][ T6399] syz.3.157: attempt to access beyond end of device
[  119.242403][ T6399] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  119.247143][    T8] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed
[  119.315278][    T8] cdc_ncm 5-1:1.0: bind() failure
[  119.325813][ T6399] syz.3.157: attempt to access beyond end of device
[  119.325813][ T6399] loop3: rw=2049, sector=45136, nr_sectors = 8 limit=40427
[  119.366035][    T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  119.377799][ T2995] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.395393][    T8] cdc_ncm 5-1:1.1: bind() failure
[  119.430207][    T8] usb 5-1: USB disconnect, device number 3
[  119.630745][ T2995] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.681650][   T12] kworker/u4:1: attempt to access beyond end of device
[  119.681650][   T12] loop3: rw=2049, sector=45144, nr_sectors = 8 limit=40427
[  119.726295][   T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  120.261255][ T6411] sctp: [Deprecated]: syz.4.171 (pid 6411) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.261255][ T6411] Use struct sctp_sack_info instead
[  120.269985][ T6397] loop0: detected capacity change from 0 to 32768
[  120.323582][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  120.348304][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  120.358120][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  120.395363][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  120.419843][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  120.423975][ T6397] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  120.439194][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  120.662439][ T6397] XFS (loop0): Ending clean mount
[  120.717704][ T6397] XFS (loop0): Quotacheck needed: Please wait.
[  120.901381][ T6397] XFS (loop0): Quotacheck: Done.
[  121.273227][ T5769] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  122.354392][ T6412] chnl_net:caif_netlink_parms(): no params data found
[  122.438617][ T6464] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  122.488192][ T6464] syz.4.179 uses obsolete (PF_INET,SOCK_PACKET)
[  122.520052][ T5784] Bluetooth: hci3: command tx timeout
[  122.649016][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'.
[  122.663117][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'.
[  122.949527][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.974042][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.014389][ T6412] bridge_slave_0: entered allmulticast mode
[  123.036101][ T6412] bridge_slave_0: entered promiscuous mode
[  123.068988][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.108769][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.116441][ T6412] bridge_slave_1: entered allmulticast mode
[  123.132965][ T6412] bridge_slave_1: entered promiscuous mode
[  123.257468][   T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  123.308862][ T6412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.346940][ T6412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.400352][ T2995] hsr_slave_0: left promiscuous mode
[  123.418557][ T2995] hsr_slave_1: left promiscuous mode
[  123.434666][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.449828][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.469436][ T2995] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.481053][ T2995] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.487957][   T23] usb 5-1: Using ep0 maxpacket: 8
[  123.508951][ T2995] bridge_slave_1: left allmulticast mode
[  123.509977][   T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.520874][ T2995] bridge_slave_1: left promiscuous mode
[  123.537564][   T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  123.558654][ T2995] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.571225][   T23] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  123.590421][ T2995] bridge_slave_0: left allmulticast mode
[  123.596442][ T2995] bridge_slave_0: left promiscuous mode
[  123.607481][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.616165][   T23] usb 5-1: Product: syz
[  123.624905][ T2995] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.639789][   T23] usb 5-1: Manufacturer: syz
[  123.667496][   T23] usb 5-1: SerialNumber: syz
[  123.675472][   T23] usb 5-1: config 0 descriptor??
[  123.682931][ T2995] veth1_macvtap: left promiscuous mode
[  123.691031][ T2995] veth0_macvtap: left promiscuous mode
[  123.705358][ T2995] veth1_vlan: left promiscuous mode
[  123.719450][ T2995] veth0_vlan: left promiscuous mode
[  123.984174][  T965] usb 5-1: USB disconnect, device number 4
[  124.463048][ T6498] loop3: detected capacity change from 0 to 2048
[  124.547813][ T6499] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.605190][ T5784] Bluetooth: hci3: command tx timeout
[  124.998820][ T2995] team0 (unregistering): Port device team_slave_1 removed
[  125.071130][ T2995] team0 (unregistering): Port device team_slave_0 removed
[  125.150108][ T2995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.231064][ T2995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.359815][ T6505] loop4: detected capacity change from 0 to 32768
[  125.404587][ T6505] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.190 (6505)
[  125.453579][ T6505] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  125.466004][ T6505] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  125.478391][ T6505] BTRFS info (device loop4): using free space tree
[  125.644907][ T6505] BTRFS info (device loop4): enabling ssd optimizations
[  125.690573][ T6505] BTRFS info (device loop4): auto enabling async discard
[  126.272892][ T2995] bond0 (unregistering): Released all slaves
[  126.356722][ T5922] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  126.684150][ T5784] Bluetooth: hci3: command tx timeout
[  126.758248][ T6412] team0: Port device team_slave_0 added
[  126.810694][ T6412] team0: Port device team_slave_1 added
[  127.022311][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.047523][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.109650][ T6545] loop3: detected capacity change from 0 to 256
[  127.117581][ T6412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.144040][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.169880][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.267450][ T6412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.556896][ T6412] hsr_slave_0: entered promiscuous mode
[  127.582633][ T6412] hsr_slave_1: entered promiscuous mode
[  127.618394][ T6412] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.635547][ T6412] Cannot create hsr debugfs directory
[  127.915290][ T6563] loop0: detected capacity change from 0 to 64
[  128.400897][ T6571] loop0: detected capacity change from 0 to 1024
[  128.603491][ T6412] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  128.707034][ T6412] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  128.757495][ T5784] Bluetooth: hci3: command tx timeout
[  128.797463][ T6412] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  128.937171][ T6412] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  129.084386][ T6558] loop3: detected capacity change from 0 to 32768
[  129.090731][   T34] hfsplus: b-tree write err: -5, ino 25
[  129.111756][ T6558] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.203 (6558)
[  129.120236][   T34] hfsplus: b-tree write err: -5, ino 4
[  129.169771][   T34] hfsplus: b-tree write err: -5, ino 2
[  129.239697][ T6558] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  129.257861][ T6558] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  129.291145][ T6558] BTRFS info (device loop3): enabling auto defrag
[  129.313906][ T6558] BTRFS info (device loop3): enabling ssd optimizations
[  129.349268][ T6558] BTRFS info (device loop3): use no compression
[  129.370133][ T6558] BTRFS info (device loop3): max_inline at 4096
[  129.405896][ T6558] BTRFS info (device loop3): using free space tree
[  129.542274][ T6412] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.679390][ T6558] BTRFS info (device loop3): auto enabling async discard
[  129.692955][ T6412] 8021q: adding VLAN 0 to HW filter on device team0
[  129.753573][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.762723][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.867675][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.876109][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.028210][ T5771] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  130.269436][ T6621] batadv_slave_0: entered promiscuous mode
[  130.289565][ T6621] batman_adv: batadv0: Adding interface: macvtap1
[  130.305683][ T6621] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.377944][ T6621] batman_adv: batadv0: Interface activated: macvtap1
[  130.871518][ T6412] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.896195][ T6638] netlink: 'syz.0.220': attribute type 4 has an invalid length.
[  131.127586][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  131.171933][ T6646] loop0: detected capacity change from 0 to 128
[  131.402743][ T6648] erspan0: entered promiscuous mode
[  131.407903][    T9] usb 4-1: Using ep0 maxpacket: 8
[  131.417202][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  131.431658][    T9] usb 4-1: config 0 has no interface number 0
[  131.480098][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  131.536680][    T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  131.578626][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.604615][ T6655] loop0: detected capacity change from 0 to 128
[  131.627902][    T9] usb 4-1: config 0 descriptor??
[  131.674302][    T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  131.779229][ T6655] syz.0.224: attempt to access beyond end of device
[  131.779229][ T6655] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128
[  132.076927][ T6412] veth0_vlan: entered promiscuous mode
[  132.174171][ T6412] veth1_vlan: entered promiscuous mode
[  132.320450][ T6412] veth0_macvtap: entered promiscuous mode
[  132.365839][ T6412] veth1_macvtap: entered promiscuous mode
[  132.392668][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.404743][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.416753][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.428596][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.443979][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.457215][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.482686][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.540845][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.565147][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.576204][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.594695][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.607773][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.647634][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.696731][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.741342][ T6412] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.772774][ T6412] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.822395][ T6412] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.852414][ T6412] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.020737][    T9] usb 4-1: USB disconnect, device number 3
[  133.189322][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.208663][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.278654][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.300018][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.554047][ T6695] netlink: 'syz.5.169': attribute type 1 has an invalid length.
[  133.565370][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  133.578196][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  134.080502][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  134.080518][   T28] audit: type=1326 audit(1776360280.650:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.3.238" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0a319c819 code=0x0
[  134.781763][ T6734] process 'syz.0.246' launched './file1' with NULL argv: empty string added
[  135.899287][ T6762] syz.3.254 (6762) used greatest stack depth: 19112 bytes left
[  136.202527][ T6739] loop4: detected capacity change from 0 to 40427
[  136.253841][ T6739] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0)
[  136.276821][ T6739] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  136.319643][ T6739] F2FS-fs (loop4): invalid crc value
[  136.363599][ T6739] F2FS-fs (loop4): Found nat_bits in checkpoint
[  136.601834][ T6739] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  136.649774][ T6739] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  136.654725][ T6788] loop3: detected capacity change from 0 to 512
[  136.717822][ T6788] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  136.767509][ T6788] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  136.869813][ T6788] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  136.888759][   T28] audit: type=1800 audit(1776360283.440:22): pid=6739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.247" name="file1" dev="loop4" ino=10 res=0 errno=0
[  136.958025][ T5922] syz-executor: attempt to access beyond end of device
[  136.958025][ T5922] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  137.015992][ T6788] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.261: Allocating blocks 41-42 which overlap fs metadata
[  137.037455][ T5922] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  137.105956][ T6778] loop0: detected capacity change from 0 to 32768
[  137.132926][ T6788] Quota error (device loop3): write_blk: dquota write failed
[  137.153440][ T6788] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  137.211514][ T6788] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.261: Allocating blocks 41-42 which overlap fs metadata
[  137.265855][ T6788] Quota error (device loop3): write_blk: dquota write failed
[  137.284320][ T6788] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  137.302819][ T6788] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.261: Failed to acquire dquot type 1
[  137.418342][ T6788] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  137.440361][ T6788] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.261: corrupted inode contents
[  137.455853][ T6788] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #12: comm syz.3.261: mark_inode_dirty error
[  137.496117][ T6788] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.261: corrupted inode contents
[  137.556676][ T6788] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.261: mark_inode_dirty error
[  137.621243][ T6788] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.261: corrupted inode contents
[  137.687381][ T6788] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  137.719175][ T6788] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #12: comm syz.3.261: corrupted inode contents
[  137.783235][ T6788] EXT4-fs error (device loop3): ext4_truncate:4301: inode #12: comm syz.3.261: mark_inode_dirty error
[  137.821314][ T6788] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  137.847625][ T6788] EXT4-fs (loop3): 1 truncate cleaned up
[  137.855065][ T6788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.212136][ T6790] loop5: detected capacity change from 0 to 32768
[  138.229214][ T6788] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  138.333640][ T6790] XFS (loop5): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  138.363812][ T6788] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  138.545690][ T6790] XFS (loop5): Ending clean mount
[  138.558135][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.031288][   T28] audit: type=1326 audit(1776360285.610:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.3.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  139.152156][   T28] audit: type=1326 audit(1776360285.610:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.3.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  139.262175][   T28] audit: type=1326 audit(1776360285.610:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.3.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  139.305626][ T6412] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  139.334564][   T28] audit: type=1326 audit(1776360285.620:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.3.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  139.391423][   T28] audit: type=1326 audit(1776360285.620:27): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=6830 comm="syz.3.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  139.472398][   T28] audit: type=1326 audit(1776360285.620:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.3.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  139.537426][   T28] audit: type=1326 audit(1776360285.650:29): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=6830 comm="syz.3.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  139.590524][ T6818] loop4: detected capacity change from 0 to 32768
[  139.666463][   T28] audit: type=1326 audit(1776360285.650:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.3.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb0a319c819 code=0x7ffc0000
[  140.698347][ T6862] loop0: detected capacity change from 0 to 64
[  141.157505][ T2173] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  141.373106][ T2173] usb 6-1: Using ep0 maxpacket: 16
[  141.380793][ T6880] netlink: 48 bytes leftover after parsing attributes in process `syz.3.279'.
[  141.406013][ T2173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.423307][ T2173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.434108][ T2173] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  141.448305][ T2173] usb 6-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[  141.458001][ T2173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.473191][ T2173] usb 6-1: config 0 descriptor??
[  141.941927][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.959173][ T6899] hub 8-0:1.0: USB hub found
[  141.966238][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.976140][ T6899] hub 8-0:1.0: 1 port detected
[  142.037081][ T2173] apple 0003:05AC:027D.0001: unknown main item tag 0x0
[  142.050922][ T2173] apple 0003:05AC:027D.0001: unknown main item tag 0x0
[  142.065549][ T2173] apple 0003:05AC:027D.0001: unknown main item tag 0x0
[  142.085068][ T2173] apple 0003:05AC:027D.0001: unknown main item tag 0x0
[  142.106988][ T2173] apple 0003:05AC:027D.0001: unknown main item tag 0x0
[  142.124215][ T2173] apple 0003:05AC:027D.0001: unknown main item tag 0x0
[  142.134256][ T2173] apple 0003:05AC:027D.0001: unknown main item tag 0x0
[  142.163272][ T2173] apple 0003:05AC:027D.0001: unknown main item tag 0x0
[  142.173744][ T2173] apple 0003:05AC:027D.0001: unknown main item tag 0x0
[  142.212796][ T2173] apple 0003:05AC:027D.0001: unknown main item tag 0x2
[  142.233350][ T2173] apple 0003:05AC:027D.0001: unknown main item tag 0x0
[  142.264582][ T2173] apple 0003:05AC:027D.0001: unknown main item tag 0x0
[  142.307857][ T2173] apple 0003:05AC:027D.0001: unknown main item tag 0x0
[  142.315205][ T2173] apple 0003:05AC:027D.0001: unknown main item tag 0x2
[  142.365057][ T2173] apple 0003:05AC:027D.0001: unknown main item tag 0x0
[  142.404600][ T2173] apple 0003:05AC:027D.0001: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.5-1/input0
[  142.449810][ T2173] usb 6-1: USB disconnect, device number 2
[  142.592222][ T6914] fido_id[6914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  142.762128][ T6918] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  142.780631][ T6918] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off.
[  142.792947][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'.
[  142.814684][ T6918] overlayfs: failed to set uuid (73/file0, err=-13); falling back to uuid=null.
[  143.146006][ T6930] loop5: detected capacity change from 0 to 1024
[  143.407865][   T28] audit: type=1326 audit(1776360289.980:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c319c819 code=0x7ffc0000
[  143.431051][ T5784] Bluetooth: hci3: command tx timeout
[  143.508809][   T28] audit: type=1326 audit(1776360289.990:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f31c319c819 code=0x7ffc0000
[  143.533271][  T965] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  143.545717][   T28] audit: type=1326 audit(1776360289.990:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c319c819 code=0x7ffc0000
[  143.708908][ T6908] loop3: detected capacity change from 0 to 32768
[  143.727424][  T965] usb 5-1: Using ep0 maxpacket: 16
[  143.739831][  T965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.766414][ T6908] 
[  143.766414][ T6908]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.766414][ T6908] 
[  143.806195][  T965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  143.839427][  T965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  143.867409][  T965] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  143.894585][  T965] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  143.926992][  T965] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  143.927818][ T6908] ERROR: (device loop3): diWrite: ixpxd invalid
[  143.927818][ T6908] 
[  143.969014][  T965] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  143.978475][  T965] usb 5-1: Manufacturer: syz
[  143.990881][  T965] usb 5-1: config 0 descriptor??
[  143.997763][ T6908] ERROR: (device loop3): txCommit: 
[  143.997763][ T6908] 
[  144.119809][ T6908] 
[  144.119809][ T6908]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.119809][ T6908] 
[  144.174836][ T6908] 
[  144.174836][ T6908]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.174836][ T6908] 
[  144.197671][    T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  144.263942][ T6908] read_mapping_page failed!
[  144.286904][ T6908] ERROR: (device loop3): txCommit: 
[  144.286904][ T6908] 
[  144.397762][    T8] usb 6-1: Using ep0 maxpacket: 8
[  144.406569][    T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  144.428083][  T965] rc_core: IR keymap rc-hauppauge not found
[  144.436745][   T34] ERROR: (device loop3): diWrite: ixpxd invalid
[  144.436745][   T34] 
[  144.437360][    T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  144.473281][  T965] Registered IR keymap rc-empty
[  144.483301][   T34] ERROR: (device loop3): txCommit: 
[  144.483301][   T34] 
[  144.490485][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.504088][   T34] jfs_write_inode: jfs_commit_inode failed!
[  144.514035][    T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  144.515990][ T6959] loop0: detected capacity change from 0 to 64
[  144.529488][    T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  144.548898][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.557501][ T5771] 
[  144.557501][ T5771]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.557501][ T5771] 
[  144.571449][ T5771] 
[  144.571449][ T5771]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  144.571449][ T5771] 
[  144.589306][  T965] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  144.604472][    T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  144.656243][  T965] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7
[  144.672652][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.691857][ T6959] syz.0.300: attempt to access beyond end of device
[  144.691857][ T6959] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  144.728813][ T6959] Buffer I/O error on dev loop0, logical block 134217734, async page read
[  144.789571][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.843986][ T6959] Trying to free block not in datazone
[  144.849034][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.917924][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.955533][    T8] usb 6-1: GET_CAPABILITIES returned 0
[  144.962527][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.980016][    T8] usbtmc 6-1:16.0: can't read capabilities
[  145.008899][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  145.078179][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  145.120536][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  145.165094][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  145.223042][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  145.261085][    T9] usb 6-1: USB disconnect, device number 3
[  145.277489][  T965] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  145.339860][  T965] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  145.381270][  T965] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  145.426991][ T6975] loop0: detected capacity change from 0 to 1024
[  145.432641][  T965] usb 5-1: USB disconnect, device number 5
[  145.506439][ T6968] loop3: detected capacity change from 0 to 8192
[  145.564562][ T6968] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  145.635087][ T6968] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  145.692475][ T6968] REISERFS (device loop3): using ordered data mode
[  145.734165][ T6968] reiserfs: using flush barriers
[  145.782313][ T6968] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  145.853801][ T6968] REISERFS (device loop3): checking transaction log (loop3)
[  145.888124][ T6983] netlink: 'syz.0.304': attribute type 3 has an invalid length.
[  145.899813][ T6983] netlink: 'syz.0.304': attribute type 3 has an invalid length.
[  146.215060][ T6968] REISERFS (device loop3): Using tea hash to sort names
[  146.239171][ T6968] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  146.486489][ T6989] loop0: detected capacity change from 0 to 4096
[  147.166893][ T7011] loop5: detected capacity change from 0 to 64
[  147.594692][ T7020] loop5: detected capacity change from 0 to 512
[  147.699284][ T7020] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002]
[  147.767068][ T7020] System zones: 1-12
[  147.811504][ T7020] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.318: missing EA_INODE flag
[  147.900370][ T7020] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.318: error while reading EA inode 12 err=-117
[  147.961441][ T7020] EXT4-fs (loop5): 1 orphan inode deleted
[  147.994797][ T7020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.183344][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  148.183360][   T28] audit: type=1800 audit(1776360294.750:37): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.318" name="file1" dev="loop5" ino=15 res=0 errno=0
[  148.389244][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.449280][ T7072] loop5: detected capacity change from 0 to 512
[  149.481968][ T7072] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  149.613993][ T7072] EXT4-fs (loop5): 1 orphan inode deleted
[  149.685400][ T7072] EXT4-fs (loop5): 1 truncate cleaned up
[  149.723764][ T7072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.768895][ T7082] team0: No ports can be present during mode change
[  149.937733][ T7079] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  150.053903][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.377946][ T7099] loop3: detected capacity change from 0 to 64
[  151.583695][ T7092] loop4: detected capacity change from 0 to 40427
[  151.641734][ T7092] F2FS-fs (loop4): invalid crc value
[  151.704341][ T7092] F2FS-fs (loop4): Found nat_bits in checkpoint
[  151.944194][ T7092] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  151.987454][ T5813] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  152.187633][ T5922] syz-executor: attempt to access beyond end of device
[  152.187633][ T5922] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  152.207955][ T5813] usb 6-1: Using ep0 maxpacket: 8
[  152.238961][ T5813] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  152.257480][ T5813] usb 6-1: config 0 has no interface number 0
[  152.263970][ T5813] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.291125][ T5922] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  152.309288][ T5813] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  152.337435][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0
[  152.356888][ T5813] usb 6-1: Product: syz
[  152.371774][ T5813] usb 6-1: config 0 descriptor??
[  152.392730][ T5813] iowarrior 6-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0
[  152.615210][ T7137] loop3: detected capacity change from 0 to 32768
[  152.662032][ T5813] usb 6-1: USB disconnect, device number 4
[  152.668425][    C1] iowarrior 6-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19
[  152.695410][ T7137] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.355 (7137)
[  152.788782][ T7137] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  152.821935][ T7137] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  152.877411][ T7137] BTRFS info (device loop3): using free space tree
[  153.061378][ T7137] BTRFS info (device loop3): enabling ssd optimizations
[  153.077534][ T7137] BTRFS info (device loop3): auto enabling async discard
[  153.539849][ T5771] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  153.959976][ T7196] Driver unsupported XDP return value 0 on prog  (id 22) dev N/A, expect packet loss!
[  153.960521][ T7197] capability: warning: `syz.5.368' uses deprecated v2 capabilities in a way that may be insecure
[  154.150995][ T7197] Falling back ldisc for ttyS3.
[  154.511325][ T7215] vlan2: entered allmulticast mode
[  154.517062][ T7215] macvtap0: entered allmulticast mode
[  154.542789][ T7215] veth0_macvtap: entered allmulticast mode
[  154.549802][ T7213] loop5: detected capacity change from 0 to 7
[  154.613054][ T7213] Dev loop5: unable to read RDB block 7
[  154.631463][ T7213]  loop5: unable to read partition table
[  154.639804][ T7213] loop5: partition table beyond EOD, truncated
[  154.684709][ T7213] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  155.267521][ T2173] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  155.439957][ T7240] loop3: detected capacity change from 0 to 256
[  155.475722][ T2173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.527436][ T2173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.557148][ T2173] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  155.578080][ T7242] loop5: detected capacity change from 0 to 128
[  155.586203][ T2173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.643617][ T7242] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  155.660921][ T2173] usb 1-1: config 0 descriptor??
[  155.681173][ T7242] hpfs: filesystem error: improperly stopped
[  155.717626][ T7242] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  155.756591][ T7242] hpfs: You really don't want any checks? You are crazy...
[  155.787490][ T7242] hpfs: Code page index out of array
[  155.793186][ T7242] hpfs: code page support is disabled
[  155.816264][ T7242] hpfs: hpfs_map_4sectors(): unaligned read
[  155.839916][ T7242] hpfs: hpfs_map_4sectors(): unaligned read
[  155.856586][ T7242] hpfs: filesystem error: unable to find root dir
[  156.107058][ T2173] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  156.122478][ T2173] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  156.141010][ T2173] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  156.162892][ T2173] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  156.170219][ T2173] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  156.182494][ T2173] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  156.192126][ T2173] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0
[  156.219401][ T2173] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0
[  156.288780][ T7238] loop4: detected capacity change from 0 to 32768
[  156.507043][ T2173] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device
[  156.526308][ T2173] pyra 0003:1E7D:2CF6.0002: couldn't install mouse
[  156.550824][ T2173] pyra: probe of 0003:1E7D:2CF6.0002 failed with error -71
[  156.578276][ T2173] usb 1-1: USB disconnect, device number 3
[  156.793023][ T7258] vcan0: tx drop: invalid da for name 0x0000000000000002
[  157.627232][ T7282] netlink: 104 bytes leftover after parsing attributes in process `syz.4.402'.
[  157.808211][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.404'.
[  157.853362][ T7285] ipvlan2: entered allmulticast mode
[  157.872285][ T7285] syz_tun: entered allmulticast mode
[  158.272374][ T7294] loop0: detected capacity change from 0 to 256
[  158.773810][ T7287] loop4: detected capacity change from 0 to 32768
[  158.873843][ T7287] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  158.992642][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'.
[  159.104137][ T7318] netlink: 'syz.0.413': attribute type 9 has an invalid length.
[  159.115177][ T7287] XFS (loop4): Ending clean mount
[  159.144607][ T7287] XFS (loop4): Quotacheck needed: Please wait.
[  159.156353][ T7318] bond_slave_0: entered promiscuous mode
[  159.162814][ T7318] bond_slave_1: entered promiscuous mode
[  159.232174][ T7318] macvlan2: entered promiscuous mode
[  159.238097][ T7318] bond0: entered promiscuous mode
[  159.259953][ T7318] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  159.397574][ T7287] XFS (loop4): Quotacheck: Done.
[  159.611186][ T5922] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  159.739203][ T7330] dccp_invalid_packet: pskb_may_pull failed
[  159.968292][ T7334] loop5: detected capacity change from 0 to 64
[  160.172202][ T7337] loop3: detected capacity change from 0 to 512
[  160.301909][ T7337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.999489][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.265082][ T7364] loop0: detected capacity change from 0 to 1024
[  162.550501][ T7382] loop5: detected capacity change from 0 to 32768
[  162.798823][ T7401] loop0: detected capacity change from 0 to 8
[  163.315126][ T7412] loop3: detected capacity change from 0 to 64
[  163.357183][ T7412] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  163.706404][ T7419] loop3: detected capacity change from 0 to 1024
[  163.748661][ T7419] EXT4-fs: Ignoring removed orlov option
[  163.768830][ T7419] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  163.815321][ T7422] loop0: detected capacity change from 0 to 1024
[  163.920695][ T7419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.098217][ T7419] EXT4-fs (loop3): Online resizing not supported with bigalloc
[  164.187595][  T976] hfsplus: b-tree write err: -5, ino 25
[  164.194883][  T976] hfsplus: b-tree write err: -5, ino 4
[  164.244818][  T976] hfsplus: b-tree write err: -5, ino 2
[  164.255021][  T976] hfsplus: b-tree write err: -5, ino 26
[  164.281734][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.609799][ T7441] support for cryptoloop has been removed.  Use dm-crypt instead.
[  165.048073][ T2173] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  165.108502][ T7459] loop3: detected capacity change from 0 to 128
[  165.250723][ T2173] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  165.260654][ T2173] usb 5-1: config 0 has no interface number 0
[  165.274137][ T2173] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  165.286002][ T2173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.298735][ T2173] usb 5-1: Product: syz
[  165.304075][ T2173] usb 5-1: Manufacturer: syz
[  165.312244][ T2173] usb 5-1: SerialNumber: syz
[  165.335217][ T2173] usb 5-1: config 0 descriptor??
[  165.544196][ T7470] netlink: 'syz.0.470': attribute type 10 has an invalid length.
[  165.553685][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'.
[  165.572976][ T2173] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  165.616325][ T2173] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  165.667976][ T2173] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  165.693017][ T2173] usb 5-1: media controller created
[  165.824764][ T2173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  165.991428][ T2173] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  166.177796][ T2173] usb 5-1: USB disconnect, device number 6
[  166.508030][ T7490] loop0: detected capacity change from 0 to 8192
[  166.572261][ T7490] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  166.640463][ T7490] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  166.655436][ T7490] REISERFS (device loop0): using ordered data mode
[  166.662422][ T7490] reiserfs: using flush barriers
[  166.670335][ T7490] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  166.689261][ T7490] REISERFS (device loop0): checking transaction log (loop0)
[  166.981054][ T7490] REISERFS (device loop0): Using tea hash to sort names
[  167.006795][ T7490] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  167.515418][ T7518] loop5: detected capacity change from 0 to 128
[  168.677549][  T785] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  168.877466][  T785] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  168.891215][  T785] usb 1-1: config 0 has no interface number 0
[  168.966167][  T785] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  168.987651][  T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.006757][  T785] usb 1-1: Product: syz
[  169.018607][  T785] usb 1-1: Manufacturer: syz
[  169.027876][  T785] usb 1-1: SerialNumber: syz
[  169.046873][  T785] usb 1-1: config 0 descriptor??
[  169.337088][ T7570] dccp_invalid_packet: pskb_may_pull failed
[  169.338332][  T785] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  169.378617][  T785] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  169.407872][  T785] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  169.427444][  T785] usb 1-1: media controller created
[  169.495224][  T785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  169.586840][  T785] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  169.699760][  T785] usb 1-1: USB disconnect, device number 4
[  170.228726][ T7589] netlink: 'syz.3.502': attribute type 9 has an invalid length.
[  170.250247][ T7589] bond_slave_0: entered promiscuous mode
[  170.256641][ T7589] bond_slave_1: entered promiscuous mode
[  170.263153][ T7589] macvlan2: entered promiscuous mode
[  170.268779][ T7589] bond0: entered promiscuous mode
[  170.276613][ T7589] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  170.875881][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.5.506'.
[  170.906389][ T7604] ipvlan2: entered allmulticast mode
[  170.922703][ T7604] syz_tun: entered allmulticast mode
[  171.017399][ T7608] loop4: detected capacity change from 0 to 512
[  171.153282][ T7608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.832732][ T5922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.042642][ T7637] loop5: detected capacity change from 0 to 7
[  172.050235][ T7639] vcan0: tx drop: invalid da for name 0x0000000000000002
[  172.064806][ T7637] Dev loop5: unable to read RDB block 7
[  172.106066][ T7637]  loop5: unable to read partition table
[  172.152777][ T7637] loop5: partition table beyond EOD, truncated
[  172.176394][ T7637] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  172.658792][ T7656] vlan2: entered allmulticast mode
[  172.664458][ T7656] macvtap0: entered allmulticast mode
[  172.697254][ T7656] veth0_macvtap: entered allmulticast mode
[  173.738792][ T7682] vcan0: tx drop: invalid da for name 0x0000000000000002
[  174.028124][ T7689] loop5: detected capacity change from 0 to 7
[  174.054849][ T7689] Dev loop5: unable to read RDB block 7
[  174.079472][ T7689]  loop5: unable to read partition table
[  174.086564][ T7689] loop5: partition table beyond EOD, truncated
[  174.114725][ T7689] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  174.591212][ T7680] loop3: detected capacity change from 0 to 32768
[  175.302070][ T7718] loop4: detected capacity change from 0 to 1024
[  175.406921][ T7718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  175.501211][ T7703] loop5: detected capacity change from 0 to 32768
[  175.626081][ T7703] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  175.859250][ T7703] XFS (loop5): Ending clean mount
[  175.906402][ T7703] XFS (loop5): Quotacheck needed: Please wait.
[  175.975941][ T5922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  176.087466][ T7703] XFS (loop5): Quotacheck: Done.
[  176.352037][ T6412] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  176.709422][ T7720] loop3: detected capacity change from 0 to 32768
[  177.015083][ T7753] loop0: detected capacity change from 0 to 1024
[  177.085547][ T7753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  177.328387][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  177.631793][ T7764] loop0: detected capacity change from 0 to 4096
[  177.658452][ T7764] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  177.835566][ T7764] ntfs3: loop0: Inode r=19 is not in use!
[  177.857998][ T7764] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  177.910190][ T7764] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[  177.923740][ T7773] loop5: detected capacity change from 0 to 7
[  177.958675][ T6412] Dev loop5: unable to read RDB block 7
[  177.970160][ T6412]  loop5: unable to read partition table
[  177.991054][ T6412] loop5: partition table beyond EOD, truncated
[  178.027779][ T7773] Dev loop5: unable to read RDB block 7
[  178.040528][ T7773]  loop5: unable to read partition table
[  178.061806][ T7773] loop5: partition table beyond EOD, truncated
[  178.092889][ T7773] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  178.517574][ T7780] loop0: detected capacity change from 0 to 2048
[  178.562556][ T7780] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  178.636271][ T7783] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  178.649755][ T6969] udevd[6969]: incorrect nilfs2 checksum on /dev/loop0
[  179.239055][ T7776] loop5: detected capacity change from 0 to 32768
[  179.782210][ T7808] loop3: detected capacity change from 0 to 128
[  179.876302][ T7810] loop4: detected capacity change from 0 to 512
[  179.938703][ T7810] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  179.953900][ T7810] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  180.057739][ T7810] EXT4-fs (loop4): 1 truncate cleaned up
[  180.065878][ T7810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.179690][ T7810] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  180.261529][ T7810] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  180.270326][ T7816] loop3: detected capacity change from 0 to 2048
[  180.345147][ T7816] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.379224][ T5922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.545225][ T7818] loop5: detected capacity change from 0 to 1024
[  180.616172][ T7820] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  180.644026][ T7818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  180.702810][ T7820] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  180.991848][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  181.170994][ T5922] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  182.494194][ T7837] set_capacity_and_notify: 2 callbacks suppressed
[  182.494206][ T7837] loop4: detected capacity change from 0 to 65536
[  182.533944][ T7837] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  182.565415][ T7837] XFS (loop4): Ending clean mount
[  182.581846][ T7837] XFS (loop4): Quotacheck needed: Please wait.
[  182.666930][ T7837] XFS (loop4): Quotacheck: Done.
[  182.780477][ T5922] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  182.991285][ T7872] loop0: detected capacity change from 0 to 512
[  183.005541][ T7872] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  183.036773][ T7872] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.588: Invalid inode bitmap blk 4 in block_group 0
[  183.066703][ T7872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.303886][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.583138][ T7865] loop5: detected capacity change from 0 to 32768
[  184.458501][ T7883] loop3: detected capacity change from 0 to 32768
[  184.580904][ T7883] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  184.904998][ T7883] XFS (loop3): Ending clean mount
[  185.076891][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  185.234656][ T7914] loop5: detected capacity change from 0 to 512
[  185.318220][ T7914] EXT4-fs (loop5): orphan cleanup on readonly fs
[  185.325025][ T7914] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  185.347824][ T7914] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  185.368488][ T7914] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.603: attempt to clear invalid blocks 2 len 1
[  185.395487][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'.
[  185.425526][ T7906] loop4: detected capacity change from 0 to 32768
[  185.462466][ T7914] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.603: invalid indirect mapped block 1819239214 (level 0)
[  185.507516][ T7914] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.603: invalid indirect mapped block 1819239214 (level 1)
[  185.574799][ T7914] EXT4-fs (loop5): 1 truncate cleaned up
[  185.603869][ T7914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  185.756290][ T7914] EXT4-fs (loop5): shut down requested (2)
[  185.813315][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.862425][ T7929] loop0: detected capacity change from 0 to 32768
[  186.959377][ T7929] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  187.136634][ T7929] XFS (loop0): Ending clean mount
[  187.249591][ T5769] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  187.659415][ T7964] netlink: 48 bytes leftover after parsing attributes in process `syz.3.620'.
[  187.788899][ T7943] loop5: detected capacity change from 0 to 32768
[  188.228607][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'.
[  189.027211][ T7978] loop4: detected capacity change from 0 to 32768
[  189.126997][ T7978] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  189.201605][ T7978] XFS (loop4): Ending clean mount
[  189.273946][   T27] XFS (loop4): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  189.285932][ T7992] loop5: detected capacity change from 0 to 8192
[  189.347781][   T27] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 
[  189.372282][   T27] XFS (loop4): Unmount and run xfs_repair
[  189.384351][   T27] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  189.396868][   T27] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  189.407759][   T27] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10  ....... ........
[  189.416906][   T27] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  189.463937][   T27] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37  ...... ....@..@7
[  189.490974][   T27] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  189.511230][   T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  189.531260][   T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  189.551621][   T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  189.582860][ T7978] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74
[  189.590831][ T7984] loop0: detected capacity change from 0 to 40427
[  189.617206][ T7978] XFS (loop4): Failed to initialize disk quotas.
[  189.653063][ T7984] F2FS-fs (loop0): invalid crc value
[  189.766827][ T5922] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  190.009016][ T7984] F2FS-fs (loop0): Start checkpoint disabled!
[  190.030634][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.635'.
[  190.053563][ T7984] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  190.308019][ T7984] F2FS-fs (loop0): Stopped filesystem due to reason: 0
[  190.499087][ T8005] loop3: detected capacity change from 0 to 32768
[  191.231477][ T8024] loop5: detected capacity change from 0 to 32768
[  191.290804][ T8024] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  191.300005][ T8024] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  191.370325][ T8024] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  191.395788][ T2173] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  191.407395][ T2173] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  191.508413][ T2173] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 101ms
[  191.531930][ T2173] gfs2: fsid=syz:syz.0: jid=0: Done
[  191.550095][ T8024] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  191.876250][ T8043] loop4: detected capacity change from 0 to 512
[  191.939922][ T8043] EXT4-fs: Ignoring removed bh option
[  191.939948][ T8043] EXT4-fs: Ignoring removed oldalloc option
[  191.974796][ T8043] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  191.988762][ T8043] EXT4-fs (loop4): invalid journal inode
[  191.989143][ T8043] EXT4-fs (loop4): can't get journal size
[  192.028223][ T8043] EXT4-fs (loop4): 1 truncate cleaned up
[  192.029663][ T8043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.208837][ T5922] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.334284][   T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  192.563825][   T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  192.587889][   T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  192.609683][   T27] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  192.627626][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  192.636382][   T27] usb 1-1: SerialNumber: syz
[  192.883784][   T27] usb 1-1: 0:2 : does not exist
[  192.927591][   T28] audit: type=1800 audit(1776360339.490:38): pid=8056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.650" name="/newroot/141/bus/#745//deleted" dev="tmpfs" ino=745 res=0 errno=0
[  192.955494][ T8064] loop5: detected capacity change from 0 to 1024
[  193.018108][   T27] usb 1-1: USB disconnect, device number 5
[  193.139320][ T8068] netlink: 'syz.4.653': attribute type 11 has an invalid length.
[  193.155733][ T6969] udevd[6969]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  193.167592][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'.
[  193.687892][   T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  193.746103][ T8084] loop5: detected capacity change from 0 to 4096
[  193.761692][ T8084] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  193.827062][ T8084] ntfs3: loop5: Failed to initialize $Extend/$Reparse.
[  193.877555][ T2173] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  193.879330][   T27] usb 5-1: Using ep0 maxpacket: 8
[  193.910032][   T27] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  193.920498][   T27] usb 5-1: config 179 has no interface number 0
[  193.927176][   T27] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  193.941708][   T27] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  193.954484][   T27] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  193.961354][ T8087] ntfs3: loop5: ino=5, "/" directory corrupted
[  193.980807][   T27] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  193.994452][   T27] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  194.012259][   T27] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  194.027413][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.051632][ T8074] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  194.108252][ T6412] ntfs3: loop5: ino=1a, ntfs_sync_fs failed, -22.
[  194.128389][ T2173] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  194.151524][ T2173] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  194.178836][ T2173] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  194.220169][ T2173] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.253845][ T2173] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  194.278097][ T2173] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  194.286514][ T2173] usb 4-1: Product: syz
[  194.309918][ T2173] usb 4-1: Manufacturer: syz
[  194.337097][ T2173] cdc_wdm 4-1:1.0: skipping garbage
[  194.345690][ T2173] cdc_wdm 4-1:1.0: skipping garbage
[  194.367386][ T2173] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  194.373650][   T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input8
[  194.373886][ T2173] cdc_wdm 4-1:1.0: Unknown control protocol
[  194.592472][ T2173] usb 5-1: USB disconnect, device number 7
[  194.592587][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  194.608643][    C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending?
[  194.612144][ T2173] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  194.633064][    T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  194.635989][ T8086] loop0: detected capacity change from 0 to 40427
[  194.652293][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  194.653800][   T27] usb 4-1: USB disconnect, device number 4
[  194.659385][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  194.659404][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  194.661815][ T8082] cdc_wdm 4-1:1.0: Tx URB error: -19
[  194.689204][ T8086] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  194.689236][ T8086] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  194.732187][ T8086] F2FS-fs (loop0): Found nat_bits in checkpoint
[  194.832660][ T8086] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  194.844125][ T8086] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  194.875141][   T28] audit: type=1800 audit(1776360341.450:39): pid=8086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.662" name="bus" dev="loop0" ino=10 res=0 errno=0
[  194.902940][    T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.917610][    T8] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  194.927245][ T5769] syz-executor: attempt to access beyond end of device
[  194.927245][ T5769] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  194.932044][    T8] usb 6-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca
[  194.950138][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  194.956456][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.973352][    T8] usb 6-1: Product: syz
[  194.978354][    T8] usb 6-1: Manufacturer: syz
[  194.983365][    T8] usb 6-1: SerialNumber: syz
[  195.002022][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  195.010693][    T8] usb 6-1: config 0 descriptor??
[  195.027250][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  195.221334][ T8094] xt_hashlimit: size too large, truncated to 1048576
[  195.279541][    T8] usb 6-1: USB disconnect, device number 5
[  195.394717][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.740788][ T8095] bridge_slave_0 (unregistering): left allmulticast mode
[  195.757507][ T8095] bridge_slave_0 (unregistering): left promiscuous mode
[  195.776488][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.992011][ T8108] loop3: detected capacity change from 0 to 64
[  196.076018][ T8111] serio: Serial port ttyS3
[  196.730006][ T8123] loop3: detected capacity change from 0 to 2048
[  196.747266][ T8123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  196.854958][   T28] audit: type=1800 audit(1776360343.440:40): pid=8123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.676" name="file1" dev="loop3" ino=1415 res=0 errno=0
[  197.146389][ T8128] erspan0: entered promiscuous mode
[  197.836855][ T8131] loop3: detected capacity change from 0 to 32768
[  197.908912][ T8131] ialloc: diAlloc returned -28!
[  198.347462][ T5813] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  198.537499][ T5813] usb 6-1: Using ep0 maxpacket: 8
[  198.550672][ T5813] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  198.587529][ T5813] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  198.606897][ T5813] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  198.636305][ T5813] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  198.648003][ T5813] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  198.682829][ T5813] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  198.702862][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.957652][ T5813] usb 6-1: GET_CAPABILITIES returned 0
[  198.963863][ T5813] usbtmc 6-1:16.0: can't read capabilities
[  199.183518][ T5813] usb 6-1: USB disconnect, device number 6
[  199.219263][ T8156] loop3: detected capacity change from 0 to 512
[  199.228811][ T8156] EXT4-fs: Ignoring removed bh option
[  199.249842][ T8156] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  199.300511][ T8156] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.691: bad orphan inode 131083
[  199.332228][ T8156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.536677][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.795701][ T8152] loop0: detected capacity change from 0 to 40427
[  199.837678][ T8152] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x7ffff
[  199.867524][ T8152] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xe4
[  199.922469][ T8152] F2FS-fs (loop0): invalid crc value
[  199.965062][ T8152] F2FS-fs (loop0): Found nat_bits in checkpoint
[  200.087215][ T8152] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0
[  200.161358][ T8152] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  200.175416][ T8168] sctp: Trying to GSO but underlying device doesn't support it.
[  200.214101][ T8152] F2FS-fs (loop0): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x754/0x1c70
[  200.333571][ T5769] syz-executor: attempt to access beyond end of device
[  200.333571][ T5769] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  200.357614][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  200.705048][ T8164] loop3: detected capacity change from 0 to 40427
[  200.747928][ T8164] F2FS-fs (loop3): invalid crc value
[  200.759359][ T8164] F2FS-fs (loop3): Found nat_bits in checkpoint
[  200.908521][ T8164] F2FS-fs (loop3): Start checkpoint disabled!
[  200.944473][ T8164] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  201.373721][ T2961] kworker/u4:9: attempt to access beyond end of device
[  201.373721][ T2961] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  201.401492][ T2961] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  201.428037][ T2961] kworker/u4:9: attempt to access beyond end of device
[  201.428037][ T2961] loop3: rw=2049, sector=40976, nr_sectors = 8 limit=40427
[  201.455989][ T2961] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  201.550569][ T8180] netlink: 'syz.5.700': attribute type 11 has an invalid length.
[  201.887553][ T2173] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  202.077512][ T2173] usb 1-1: Using ep0 maxpacket: 32
[  202.090875][ T2173] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  202.112899][ T2173] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  202.137365][ T2173] usb 1-1: config 0 interface 0 has no altsetting 0
[  202.158885][ T2173] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  202.169176][ T2173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.187438][ T2173] usb 1-1: Product: syz
[  202.197719][ T2173] usb 1-1: Manufacturer: syz
[  202.208730][ T2173] usb 1-1: SerialNumber: syz
[  202.229209][ T2173] usb 1-1: config 0 descriptor??
[  202.662831][ T2173] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  202.679010][  T785] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  202.898667][  T785] usb 4-1: Using ep0 maxpacket: 16
[  202.918308][  T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.937457][  T785] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  202.953827][  T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.965387][  T785] usb 4-1: config 0 descriptor??
[  203.073833][ T2173] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  203.154876][ T2173] usb 1-1: USB disconnect, device number 6
[  203.394139][  T785] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  203.504126][ T8215] loop5: detected capacity change from 0 to 512
[  203.602012][ T8215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.649069][ T8215] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.853830][ T8215] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  203.963414][ T6412] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.008713][    T8] usb 4-1: USB disconnect, device number 5
[  204.102666][ T8231] netlink: 'syz.0.720': attribute type 1 has an invalid length.
[  204.129730][ T8231] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.720'.
[  205.899019][   T27] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  206.110572][   T27] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  206.152242][   T27] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.161446][ T5786] Bluetooth: hci3: link tx timeout
[  206.170243][ T5786] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  206.217587][   T27] usb 1-1: config 0 interface 0 has no altsetting 0
[  206.224787][   T27] usb 1-1: New USB device found, idVendor=056a, idProduct=0144, bcdDevice= 0.00
[  206.310231][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.369616][   T27] usb 1-1: config 0 descriptor??
[  206.406182][ T5778] Bluetooth: hci3: link tx timeout
[  206.409138][ T8304] kernel read not supported for file /!selinuxwk1�m�9ɞ*T����#j����Y��mV�vm(p�-QZ#�{�� (pid: 8304 comm: syz.5.747)
[  206.412075][ T5778] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  206.442477][ T5778] Bluetooth: hci3: link tx timeout
[  206.453842][ T5778] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  206.509524][    T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  206.682868][ T8309] loop5: detected capacity change from 0 to 256
[  206.732191][    T8] usb 5-1: Using ep0 maxpacket: 16
[  206.750004][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.754152][ T8309] FAT-fs (loop5): Directory bread(block 64) failed
[  206.780092][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.781493][ T8309] FAT-fs (loop5): Directory bread(block 65) failed
[  206.827047][ T8294] loop3: detected capacity change from 0 to 32768
[  206.830951][   T27] wacom 0003:056A:0144.0004: Unknown device_type for 'HID 056a:0144'. Ignoring.
[  206.842103][    T8] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  206.854355][ T8309] FAT-fs (loop5): Directory bread(block 66) failed
[  206.870589][ T8309] FAT-fs (loop5): Directory bread(block 67) failed
[  206.883684][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.899611][ T8309] FAT-fs (loop5): Directory bread(block 68) failed
[  206.938295][ T8309] FAT-fs (loop5): Directory bread(block 69) failed
[  206.959147][    T8] usb 5-1: config 0 descriptor??
[  206.975997][ T8309] FAT-fs (loop5): Directory bread(block 70) failed
[  207.014086][ T8309] FAT-fs (loop5): Directory bread(block 71) failed
[  207.019067][ T8294] read_mapping_page failed!
[  207.044633][ T8309] FAT-fs (loop5): Directory bread(block 72) failed
[  207.054991][   T27] usb 1-1: USB disconnect, device number 7
[  207.074143][ T8309] FAT-fs (loop5): Directory bread(block 73) failed
[  207.084270][ T8294] ERROR: (device loop3): txCommit: 
[  207.084270][ T8294] 
[  207.333554][ T5773] Bluetooth: hci2: command 0x0406 tx timeout
[  207.340362][ T5773] Bluetooth: hci0: command 0x0406 tx timeout
[  207.341246][ T5778] Bluetooth: hci3: link tx timeout
[  207.353329][ T5778] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  207.398376][ T5784] Bluetooth: hci3: link tx timeout
[  207.404269][ T5784] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  207.437174][    T8] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0
[  207.631138][    T8] corsair 0003:1B1C:1B02.0005: Read invalid backlight brightness: 34.
[  207.837888][ T8323] dvmrp1: tun_chr_ioctl cmd 1074025681
[  207.874148][ T2173] usb 5-1: USB disconnect, device number 8
[  208.080785][ T8327] loop3: detected capacity change from 0 to 512
[  208.204541][ T5784] Bluetooth: hci3: command 0x0406 tx timeout
[  208.311053][ T8327] EXT4-fs (loop3): 1 orphan inode deleted
[  208.341297][   T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  208.344342][ T8327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.395987][ T8327] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.402014][   T12] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1
[  208.473086][ T8317] loop5: detected capacity change from 0 to 32768
[  208.550613][ T8327] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.750: iget: bad i_size value: 360287970189639690
[  208.642199][ T8317] JBD2: Ignoring recovery information on journal
[  208.774160][ T8317] (syz.5.751,8317,0):ocfs2_clear_journal_error:1147 ERROR: File system error 33023 recorded in journal 0.
[  208.797237][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.800274][ T8317] (syz.5.751,8317,0):ocfs2_clear_journal_error:1149 ERROR: File system on device loop5 needs checking.
[  208.878756][ T8317] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  208.940284][ T2939] (kworker/u4:7,2939,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4104: rec_len is smaller than minimal - offset=0, inode=4104, rec_len=8, name_len=0
[  208.977982][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'.
[  209.009926][ T8347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.758'.
[  209.041783][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'.
[  209.074702][ T8317] (syz.5.751,8317,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len is smaller than minimal - offset=0, inode=397313, rec_len=0, name_len=1
[  209.369410][ T6412] ocfs2: Unmounting device (7,5) on (node local)
[  209.409299][ T8355] netlink: 'syz.3.762': attribute type 3 has an invalid length.
[  209.437823][ T8355] netlink: 4344 bytes leftover after parsing attributes in process `syz.3.762'.
[  210.073192][ T8375] loop0: detected capacity change from 0 to 4096
[  210.097411][   T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  210.189536][ T8375] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  210.196338][ T8375] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  210.288052][   T27] usb 4-1: Using ep0 maxpacket: 32
[  210.300166][   T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  210.317397][   T27] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.336885][   T34] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22.
[  210.353635][   T27] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.397490][ T5769] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  210.424747][ T5769] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  210.432139][   T27] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  210.473684][ T5769] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  210.487394][   T27] usb 4-1: config 0 interface 0 has no altsetting 0
[  210.496435][   T34] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22.
[  210.535037][   T27] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  210.571897][ T8380] loop5: detected capacity change from 0 to 128
[  210.578371][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.581726][   T27] usb 4-1: config 0 descriptor??
[  210.697614][ T8380] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  210.790784][ T8380] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  210.934218][ T8374] loop4: detected capacity change from 0 to 32768
[  211.049086][   T27] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  211.056785][ T8374] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  211.067571][   T27] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  211.087558][   T27] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  211.107482][   T27] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  211.126569][ T8374] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  211.148526][   T27] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  211.171270][   T27] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0
[  211.197650][   T27] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints?
[  211.222147][ T8396] loop5: detected capacity change from 0 to 128
[  211.289913][    C1] hid-thrustmaster 0003:044F:B65D.0006: Unknown packet type 0x0, unable to proceed further with wheel init
[  211.306327][ T8396] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  211.330596][ T8396] hpfs: filesystem error: improperly stopped
[  211.382057][ T8396] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  211.383038][ T8374] XFS (loop4): Ending clean mount
[  211.404379][ T8396] hpfs: You really don't want any checks? You are crazy...
[  211.414741][ T8396] hpfs: hpfs_map_sector(): read error
[  211.422887][ T8396] hpfs: code page support is disabled
[  211.434348][ T8396] hpfs: hpfs_map_4sectors(): unaligned read
[  211.457147][ T8374] XFS (loop4): Quotacheck needed: Please wait.
[  211.465432][ T8396] hpfs: hpfs_map_4sectors(): unaligned read
[  211.484293][ T8396] hpfs: filesystem error: unable to find root dir
[  211.520514][   T27] usb 4-1: USB disconnect, device number 6
[  211.600717][ T8374] XFS (loop4): Quotacheck: Done.
[  211.778917][ T5922] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  212.340514][ T8411] batadv_slave_1: entered allmulticast mode
[  212.349185][ T8411] batadv_slave_1: left allmulticast mode
[  213.287465][    T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  213.497944][    T8] usb 1-1: Using ep0 maxpacket: 16
[  213.510273][    T8] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.528619][ T8421] loop5: detected capacity change from 0 to 32768
[  213.532960][    T8] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.549587][ T8421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.787 (8421)
[  213.565069][    T8] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  213.600297][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[  213.606989][ T8421] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.607103][ T8421] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  213.618163][    T8] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  213.636879][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.653019][ T8421] BTRFS info (device loop5): setting nodatasum
[  213.664831][    T8] usb 1-1: config 0 descriptor??
[  213.672071][ T8421] BTRFS info (device loop5): force zlib compression, level 3
[  213.687413][ T8421] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  213.701393][ T8421] BTRFS info (device loop5): use lzo compression, level 0
[  213.713441][ T8421] BTRFS info (device loop5): turning on flush-on-commit
[  213.721776][ T8421] BTRFS info (device loop5): enabling auto defrag
[  213.730852][ T8421] BTRFS info (device loop5): max_inline at 4096
[  213.738617][ T8421] BTRFS info (device loop5): using free space tree
[  213.914700][ T8421] BTRFS info (device loop5): enabling ssd optimizations
[  214.341293][   T27] usb 1-1: USB disconnect, device number 8
[  214.369442][ T6412] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  214.538787][ T8464] loop3: detected capacity change from 0 to 1024
[  214.557462][ T8464] EXT4-fs: Ignoring removed orlov option
[  214.622946][ T8464] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  214.694992][ T8464] System zones: 0-1, 3-12
[  214.716372][ T8464] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.750091][ T8462] loop4: detected capacity change from 0 to 8192
[  214.790028][ T8462] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  214.830714][ T6969] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (6969)
[  214.855158][ T8462] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  214.924005][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  214.939044][ T8462] REISERFS (device loop4): using ordered data mode
[  214.946331][ T8462] reiserfs: using flush barriers
[  215.052466][ T8462] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  215.157043][ T8462] REISERFS (device loop4): checking transaction log (loop4)
[  215.195088][ T8477] loop0: detected capacity change from 0 to 512
[  215.195456][ T8478] netlink: 'syz.3.801': attribute type 11 has an invalid length.
[  215.239870][ T8478] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.801'.
[  215.257626][ T8477] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  215.306424][ T8477] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.802: Invalid inode bitmap blk 4 in block_group 0
[  215.336571][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  215.346966][ T8477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.514215][ T8477] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  215.539831][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.558005][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.583802][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.604389][    T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00
[  215.640242][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.673187][    T9] usb 6-1: config 0 descriptor??
[  215.733022][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.921888][ T8462] REISERFS (device loop4): Using tea hash to sort names
[  215.959096][ T8462] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  215.975932][ T8462] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  216.060564][ T8483] tap0: tun_chr_ioctl cmd 1074025677
[  216.066881][ T8483] tap0: linktype set to 776
[  216.136008][    T9] wacom 0003:056A:0010.0008: Unknown device_type for 'HID 056a:0010'. Assuming pen.
[  216.168117][    T9] wacom 0003:056A:0010.0008: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.5-1/input0
[  216.221232][    T9] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0010.0008/input/input13
[  216.499776][    T9] usb 6-1: USB disconnect, device number 7
[  217.109417][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.811'.
[  217.137421][ T8500] netlink: 36 bytes leftover after parsing attributes in process `syz.5.811'.
[  217.557587][ T5784] Bluetooth: hci1: command 0x0405 tx timeout
[  218.010881][ T8517] loop4: detected capacity change from 0 to 1024
[  218.111527][ T8523] loop0: detected capacity change from 0 to 512
[  218.179912][ T8523] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.822: inode has both inline data and extents flags
[  218.217971][ T8523] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.822: couldn't read orphan inode 15 (err -117)
[  218.273711][ T8517] hfsplus: bad catalog entry type
[  218.319483][ T8523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.571850][   T48] hfsplus: b-tree write err: -5, ino 25
[  218.598450][   T48] hfsplus: b-tree write err: -5, ino 4
[  218.604249][   T48] hfsplus: b-tree write err: -5, ino 2
[  218.622256][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.633251][   T48] hfsplus: b-tree write err: -5, ino 26
[  218.849648][ T8506] loop5: detected capacity change from 0 to 40427
[  218.886771][ T8506] F2FS-fs (loop5): invalid crc value
[  218.925402][ T8506] F2FS-fs (loop5): Found nat_bits in checkpoint
[  219.120388][ T8506] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  219.203944][   T28] audit: type=1800 audit(1776360365.780:41): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.813" name="bus" dev="loop5" ino=10 res=0 errno=0
[  219.342323][ T6412] syz-executor: attempt to access beyond end of device
[  219.342323][ T6412] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  219.378962][ T6412] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  219.403781][ T8555] loop4: detected capacity change from 0 to 64
[  219.504383][ T8555] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  219.504452][ T2961] Bluetooth: hci4: Frame reassembly failed (-84)
[  219.522136][ T2961] Bluetooth: hci4: Frame reassembly failed (-84)
[  220.655093][ T8561] loop3: detected capacity change from 0 to 32768
[  220.685312][ T8561] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.830 (8561)
[  220.697462][   T27] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  220.745133][ T8561] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  220.777826][ T8561] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  220.798548][ T8561] BTRFS info (device loop3): enabling disk space caching
[  220.806380][ T8561] BTRFS info (device loop3): force clearing of disk cache
[  220.830071][ T8561] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  220.867387][ T8561] BTRFS info (device loop3): use zstd compression, level 3
[  220.876784][ T8561] BTRFS info (device loop3): disk space caching is enabled
[  220.897747][   T27] usb 6-1: Using ep0 maxpacket: 32
[  220.916107][   T27] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  220.937394][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.960691][   T27] usb 6-1: config 0 descriptor??
[  220.973196][   T27] as10x_usb: device has been detected
[  220.998166][   T27] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  221.060931][ T8561] BTRFS info (device loop3): enabling ssd optimizations
[  221.114820][ T8561] BTRFS info (device loop3): auto enabling async discard
[  221.160483][ T8561] BTRFS info (device loop3): rebuilding free space tree
[  221.164914][   T27] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  221.189863][ T8575] ------------[ cut here ]------------
[  221.195843][ T8575] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[  221.195971][ T8575] WARNING: CPU: 0 PID: 8575 at kernel/locking/mutex.c:582 __mutex_lock+0xb85/0xcc0
[  221.213822][ T8575] Modules linked in:
[  221.218377][ T8575] CPU: 0 PID: 8575 Comm: syz.5.829 Not tainted syzkaller #0
[  221.226251][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  221.238337][ T8575] RIP: 0010:__mutex_lock+0xb85/0xcc0
[  221.244287][ T8575] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 34 44 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 eb d2 c1 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8
[  221.254318][   T27] as10x_usb: error during firmware upload part1
[  221.266138][ T8575] RSP: 0018:ffffc9000cf4faa0 EFLAGS: 00010246
[  221.266168][ T8575] RAX: 4cad8b9dcf37ea00 RBX: ffff88802f83cce0 RCX: 0000000000080000
[  221.266182][ T8575] RDX: ffffc90004889000 RSI: 00000000000028cd RDI: 00000000000028ce
[  221.266196][ T8575] RBP: ffffc9000cf4fbf8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182
[  221.266211][ T8575] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000
[  221.266224][ T8575] R13: 1ffff920019e9f64 R14: dffffc0000000000 R15: 0000000000000000
[  221.266239][ T8575] FS:  00007fdc39e6c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  221.266259][ T8575] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  221.308243][ T8561] BTRFS info (device loop3): disabling free space tree
[  221.316423][ T8575] CR2: 000000110c376a71 CR3: 000000007d8a2000 CR4: 00000000003506f0
[  221.365910][ T8575] Call Trace:
[  221.369812][ T8575]  <TASK>
[  221.373151][ T8575]  ? trace_contention_end+0x39/0xe0
[  221.379213][   T27] Registered device nBox DVB-T Dongle
[  221.379473][ T8575]  ? __mutex_lock+0x315/0xcc0
[  221.391603][ T8575]  ? as102_dvb_dmx_start_feed+0x70/0x280
[  221.394969][ T8561] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  221.398782][ T8575]  ? mutex_lock_nested+0x20/0x20
[  221.398812][ T8575]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  221.398833][ T8575]  ? dmx_section_feed_start_filtering+0x55/0x690
[  221.398864][ T8575]  ? mutex_lock_nested+0x20/0x20
[  221.398882][ T8575]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  221.398908][ T8575]  ? lock_chain_count+0x20/0x20
[  221.398927][ T8575]  ? _raw_spin_lock_irq+0xbb/0xf0
[  221.398950][ T8575]  as102_dvb_dmx_start_feed+0x70/0x280
[  221.459560][ T8575]  dmx_section_feed_start_filtering+0x4f5/0x690
[  221.466528][ T8575]  dvb_dmxdev_filter_start+0xcbd/0x10c0
[  221.472746][ T8575]  ? dvb_dmxdev_filter_set+0x2cc/0x580
[  221.478968][ T8575]  dvb_demux_do_ioctl+0x467/0x530
[  221.480467][ T5784] Bluetooth: hci4: command 0x1003 tx timeout
[  221.484549][ T8575]  dvb_usercopy+0x195/0x2b0
[  221.484578][ T8575]  ? dvb_dmxdev_buffer_read+0x4c0/0x4c0
[  221.497472][ T5786] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  221.503040][ T8575]  ? dvb_generic_ioctl+0xb0/0xb0
[  221.515329][ T8575]  ? dvb_demux_poll+0x220/0x220
[  221.520683][ T8575]  dvb_demux_ioctl+0x29/0x30
[  221.525589][ T8575]  __se_sys_ioctl+0xfd/0x170
[  221.530619][ T8575]  do_syscall_64+0x55/0xa0
[  221.535264][ T8575]  ? clear_bhb_loop+0x40/0x90
[  221.540790][ T8575]  ? clear_bhb_loop+0x40/0x90
[  221.545793][ T8575]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  221.552347][ T8575] RIP: 0033:0x7fdc38f9c819
[  221.557929][ T8575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.579131][ T8575] RSP: 002b:00007fdc39e6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  221.587878][ T8575] RAX: ffffffffffffffda RBX: 00007fdc39215fa0 RCX: 00007fdc38f9c819
[  221.596940][ T8575] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004
[  221.605502][ T8575] RBP: 00007fdc39032c91 R08: 0000000000000000 R09: 0000000000000000
[  221.610542][ T8561] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  221.614271][ T8575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.633629][ T8575] R13: 00007fdc39216038 R14: 00007fdc39215fa0 R15: 00007ffd5ca519c8
[  221.643008][ T8575]  </TASK>
[  221.646256][ T8575] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  221.654240][ T8575] CPU: 0 PID: 8575 Comm: syz.5.829 Not tainted syzkaller #0
[  221.661840][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  221.672641][ T8575] Call Trace:
[  221.676306][ T8575]  <TASK>
[  221.679388][ T8575]  dump_stack_lvl+0x18c/0x250
[  221.684295][ T8575]  ? show_regs_print_info+0x20/0x20
[  221.689863][ T8575]  ? load_image+0x420/0x420
[  221.694734][ T8575]  panic+0x2dc/0x730
[  221.698925][ T8575]  ? bpf_jit_dump+0xd0/0xd0
[  221.703644][ T8575]  __warn+0x2e0/0x470
[  221.707990][ T8575]  ? __mutex_lock+0xb85/0xcc0
[  221.712963][ T8575]  ? __mutex_lock+0xb85/0xcc0
[  221.717930][ T8575]  report_bug+0x2be/0x4f0
[  221.722480][ T8575]  ? __mutex_lock+0xb85/0xcc0
[  221.727616][ T8575]  ? __mutex_lock+0xb85/0xcc0
[  221.733100][ T8575]  ? __mutex_lock+0xb87/0xcc0
[  221.738579][ T8575]  handle_bug+0xcf/0x120
[  221.743815][ T8575]  exc_invalid_op+0x1a/0x50
[  221.748541][ T8575]  asm_exc_invalid_op+0x1a/0x20
[  221.753666][ T8575] RIP: 0010:__mutex_lock+0xb85/0xcc0
[  221.759312][ T8575] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 34 44 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 eb d2 c1 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8
[  221.780151][ T8575] RSP: 0018:ffffc9000cf4faa0 EFLAGS: 00010246
[  221.786578][ T8575] RAX: 4cad8b9dcf37ea00 RBX: ffff88802f83cce0 RCX: 0000000000080000
[  221.795084][ T8575] RDX: ffffc90004889000 RSI: 00000000000028cd RDI: 00000000000028ce
[  221.803943][ T8575] RBP: ffffc9000cf4fbf8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182
[  221.812643][ T8575] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000
[  221.821171][ T8575] R13: 1ffff920019e9f64 R14: dffffc0000000000 R15: 0000000000000000
[  221.829844][ T8575]  ? trace_contention_end+0x39/0xe0
[  221.835593][ T8575]  ? __mutex_lock+0x315/0xcc0
[  221.840911][ T8575]  ? as102_dvb_dmx_start_feed+0x70/0x280
[  221.846738][ T8575]  ? mutex_lock_nested+0x20/0x20
[  221.851773][ T8575]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  221.857424][ T8575]  ? dmx_section_feed_start_filtering+0x55/0x690
[  221.864395][ T8575]  ? mutex_lock_nested+0x20/0x20
[  221.869766][ T8575]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  221.876308][ T8575]  ? lock_chain_count+0x20/0x20
[  221.881833][ T8575]  ? _raw_spin_lock_irq+0xbb/0xf0
[  221.887173][ T8575]  as102_dvb_dmx_start_feed+0x70/0x280
[  221.893558][ T8575]  dmx_section_feed_start_filtering+0x4f5/0x690
[  221.900870][ T8575]  dvb_dmxdev_filter_start+0xcbd/0x10c0
[  221.907403][ T8575]  ? dvb_dmxdev_filter_set+0x2cc/0x580
[  221.913267][ T8575]  dvb_demux_do_ioctl+0x467/0x530
[  221.918696][ T8575]  dvb_usercopy+0x195/0x2b0
[  221.923874][ T8575]  ? dvb_dmxdev_buffer_read+0x4c0/0x4c0
[  221.929935][ T8575]  ? dvb_generic_ioctl+0xb0/0xb0
[  221.935288][ T8575]  ? dvb_demux_poll+0x220/0x220
[  221.940343][ T8575]  dvb_demux_ioctl+0x29/0x30
[  221.945023][ T8575]  __se_sys_ioctl+0xfd/0x170
[  221.950270][ T8575]  do_syscall_64+0x55/0xa0
[  221.955218][ T8575]  ? clear_bhb_loop+0x40/0x90
[  221.960319][ T8575]  ? clear_bhb_loop+0x40/0x90
[  221.965278][ T8575]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  221.971381][ T8575] RIP: 0033:0x7fdc38f9c819
[  221.976105][ T8575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.997563][ T8575] RSP: 002b:00007fdc39e6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  222.006601][ T8575] RAX: ffffffffffffffda RBX: 00007fdc39215fa0 RCX: 00007fdc38f9c819
[  222.015250][ T8575] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004
[  222.023958][ T8575] RBP: 00007fdc39032c91 R08: 0000000000000000 R09: 0000000000000000
[  222.032686][ T8575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.041040][ T8575] R13: 00007fdc39216038 R14: 00007fdc39215fa0 R15: 00007ffd5ca519c8
[  222.049486][ T8575]  </TASK>
[  222.053837][ T8575] Kernel Offset: disabled
[  222.058563][ T8575] Rebooting in 86400 seconds..