last executing test programs:

2m8.310793355s ago: executing program 1 (id=169):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0)

2m6.664260079s ago: executing program 1 (id=172):
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78)
sendfile(r0, r1, &(0x7f00000001c0), 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa30903, 0x8000, '\x00', @string=&(0x7f0000000540)=0x10}})
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
fcntl$addseals(r1, 0x409, 0x8)

2m5.436094447s ago: executing program 1 (id=175):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$audion(&(0x7f0000000100), 0x0, 0x200)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
connect(r0, &(0x7f0000000380)=@ll={0x11, 0x18, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x80)
pipe2$watch_queue(0x0, 0x80)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e20, 0xa4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_io_uring_submit(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
prctl$PR_SET_THP_DISABLE(0x44, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x18642, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080), 0x214488, 0x0)

2m2.846659066s ago: executing program 1 (id=178):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)

2m1.848767191s ago: executing program 1 (id=180):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
getpid()
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$RTC_IRQP_READ(r3, 0x8008700b, 0x0)
mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c003920"], 0xf)

2m1.346045358s ago: executing program 1 (id=183):
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
sendfile(r0, r1, &(0x7f00000001c0), 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa30903, 0x8000, '\x00', @string=&(0x7f0000000540)=0x10}})
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
fcntl$addseals(r1, 0x409, 0x8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x14d801, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100))
sendmsg$nl_route(r3, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000)
connect$l2tp6(r5, &(0x7f0000000a80)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4, 0x3}, 0x20)

2m0.195061395s ago: executing program 32 (id=183):
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
sendfile(r0, r1, &(0x7f00000001c0), 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa30903, 0x8000, '\x00', @string=&(0x7f0000000540)=0x10}})
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
fcntl$addseals(r1, 0x409, 0x8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x14d801, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100))
sendmsg$nl_route(r3, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000)
connect$l2tp6(r5, &(0x7f0000000a80)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4, 0x3}, 0x20)

1m54.896004564s ago: executing program 0 (id=199):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x336)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
close_range(r0, 0xffffffffffffffff, 0x0)

1m53.273107948s ago: executing program 0 (id=202):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
getpid()
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$RTC_IRQP_READ(r3, 0x8008700b, 0x0)
mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c003920"], 0xf)

1m52.201593594s ago: executing program 0 (id=203):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0})
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x2, 0xa673, 0x4000401, 0x40009, 0x2084, 0x880f})
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x200cc0, &(0x7f0000000640)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0", @ANYRESHEX, @ANYRES64, @ANYRES8], 0x0, 0x4445, &(0x7f00000088c0)="$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")
futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r7, 0x29, 0x7, 0x0, &(0x7f0000000000))
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r8, &(0x7f0000000080)="29000300010003", 0x7)

1m50.338272171s ago: executing program 0 (id=205):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)

1m50.087349975s ago: executing program 0 (id=208):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1m47.562277482s ago: executing program 0 (id=211):
r0 = socket$nl_route(0x10, 0x3, 0x0)
dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0)
setresgid(0xee00, 0xee01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000080), 0xb, 0x40)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$ptys(0xc, 0x3, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380))
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)

1m46.559516187s ago: executing program 33 (id=211):
r0 = socket$nl_route(0x10, 0x3, 0x0)
dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0)
setresgid(0xee00, 0xee01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000080), 0xb, 0x40)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$ptys(0xc, 0x3, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000380))
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)

7.586387227s ago: executing program 5 (id=384):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)

7.508349529s ago: executing program 5 (id=385):
syz_open_dev$vim2m(0x0, 0x7, 0x2)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @loopback, 0x7}}, 0x24)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x44080)
prlimit64(0x0, 0xe, 0x0, 0x0)

7.350540161s ago: executing program 4 (id=386):
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00')
listen(0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/195, 0xc3}, {&(0x7f0000000780)=""/167, 0xa7}, {&(0x7f0000000b80)=""/198, 0xc6}], 0x3, 0x2, 0x7ffe)

6.489960063s ago: executing program 3 (id=387):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000000, &(0x7f0000000580)={[{@part={'part', 0x3d, 0x3}}, {@codepage={'codepage', 0x3d, 'cp949'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}]}, 0x1, 0x2db, &(0x7f0000000200)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00')
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), 0x0, &(0x7f0000000040)='binder\x00', 0x2200892, 0x0)
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

6.486291944s ago: executing program 5 (id=388):
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78)
sendfile(r0, r1, &(0x7f00000001c0), 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa30903, 0x8000, '\x00', @string=&(0x7f0000000540)=0x10}})
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
fcntl$addseals(r1, 0x409, 0x8)

6.439289924s ago: executing program 4 (id=389):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

4.982214066s ago: executing program 2 (id=390):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x8002)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2200409, &(0x7f0000000400)=ANY=[], 0xfe, 0x15f, &(0x7f0000000200)="$eJzs0M1qGmEUxvH/O/M6ClVsqQUptArd2ErBD9pdKU6pVKgdaOmmK8FOP0CxVGjdVSnddSF066JJtiGQK9DoIiToJrmJbNwFsjTMjEkI8Q5yfrt5znueA/Py2SyjuPCi1fz23W233Y/pt061/O5oOCx5uQWd7Uvz4P2oBF/QjDTMe+DFkxh8+tpwjXqr4X3PSxAG7Bt+HgLiZ/fshKanIU+wn3kA4zv+O4OrmVsk5O/d1WDHgywHLNasoO9WkHl9x4AJSlnLY/dM/lSyqdsKOoPs1ub+m+le5fGj5+7fQrn/MJo0s79gHVtFdiefD83l1mxafe1UnVmxUHhazOUNnhz4hd0++lX0B3xQoL0+A7/PInlfv4ffCv75t+Y7KgaM/584zfD5v+7+NNOgUoN6LRnaqCVuGpgZ7U0WrOBPiKwaCSGEEEIIIYQQQgghhBBCCCGEuO5OAwAA//+/BFIO")
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r4 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000280)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, r4)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)

4.959098086s ago: executing program 4 (id=391):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f000001d780)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="09bfe4e6dd0000001f0003427bbf6f2a906c47c0885c568c58aec0012f0e9bce8a84e2d261edda4b20be43511e9015b10236035fc27c3b4c950148da1fe4201896f870"], 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='cq_alloc_error\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
pwrite64(r6, 0x0, 0x0, 0xe7c)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c)
r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x402)
ioctl$I2C_SMBUS(r8, 0x720, &(0x7f00000000c0)={0x0, 0xcb, 0x6, &(0x7f0000000040)={0x19, "a8fd4950f88fdde3d44c1a0e35d7eda408000000639c19fe8c52041832352ed770"}})
stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40))
r9 = socket$inet(0xa, 0x801, 0x84)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000003080)={0x0, 0x0, <r10=>0x0}, &(0x7f0000003040)=0xc)
setregid(0xffffffffffffffff, r10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280), 0x0, &(0x7f0000000580)=[@rights={{0x24, 0x1, 0x1, [r1, r4, r5, r4, r3]}}], 0x28, 0x4000}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001880)="813d4baf47e4a4983599357b5e422b03017f0935e12ec1561538d4753a1f70d947578a209c7e380bcdd7b230d958db1f5dc9f14aefe2e294591fad12a9013da5a1eacae6b3353bd64acc120010644da0cd38de5ebe8f80a8a608dbc2d320546d7628bd1e94296c46c144b202f6670b686986041600203fab9de1b1608b4c5907b0680d5ad48be9069d091b580ae55873e209d0d713956fca7c316930e241942d31b29727454c026718f603ca6136363a3f55903e48ff4cb3910548761eb74d4c0cbe9cc06f5816c1", 0xc8}, {&(0x7f0000004440)="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", 0x1000}, {&(0x7f0000001980)="c754ef6391563b4a2353e7c0dbe2109b35a0a53a1bb3911a68c05aad0b64a3c83808bc37dc0e323257a3aaed3f24b71cef990e2c03d839057a51f21cd7e8e3b91f17024156362379b9bdd02a842427c0cfc3ffcc133c59d82dfce5242bcb98e113ff05ba8a7e8eef137e0629e601a334677a63ad96469939ed647ff127a6ea7c4146ad743f61dce2a43a1a899e36c9cdafb2094bdb92366cea48dd8a2775f119e75908e49ce33b80f87ddd7249e0afd37e8c8209fc1c2b767d73ef157905c0ceaadac8105417dc6b48bfea51d4daaeca33da4d22a4f9c54433", 0xd9}, {&(0x7f0000001a80)="94577e9074d6c1bf18edebc4ebc2c5611fe9f354e9a9a5049b96f00528cd000624e11fe492a68db39c21147e70d65c386d214580277ff73834af6eb239c6019935f94962470ba2ad50297e5188f5f94ec59903b9e8ac7b97e7697e88ac16824870b86e", 0x63}, {&(0x7f0000001b00)="96c7a30bb905ebdf28d5c3d25fe098f3f35c56485bee0fd19148d681057f65bcff8d74f392dbff83ccad52b5e940e43d62d7d450b94a034ec13fa503c5d6f070aa68f4179b063f", 0x47}], 0x5, 0x0, 0x0, 0x40010}}], 0x2, 0x4000050)
epoll_create(0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0x2020)

4.927071367s ago: executing program 5 (id=392):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2200409, &(0x7f0000000400)=ANY=[], 0xfe, 0x15f, &(0x7f0000000200)="$eJzs0M1qGmEUxvH/O/M6ClVsqQUptArd2ErBD9pdKU6pVKgdaOmmK8FOP0CxVGjdVSnddSF066JJtiGQK9DoIiToJrmJbNwFsjTMjEkI8Q5yfrt5znueA/Py2SyjuPCi1fz23W233Y/pt061/O5oOCx5uQWd7Uvz4P2oBF/QjDTMe+DFkxh8+tpwjXqr4X3PSxAG7Bt+HgLiZ/fshKanIU+wn3kA4zv+O4OrmVsk5O/d1WDHgywHLNasoO9WkHl9x4AJSlnLY/dM/lSyqdsKOoPs1ub+m+le5fGj5+7fQrn/MJo0s79gHVtFdiefD83l1mxafe1UnVmxUHhazOUNnhz4hd0++lX0B3xQoL0+A7/PInlfv4ffCv75t+Y7KgaM/584zfD5v+7+NNOgUoN6LRnaqCVuGpgZ7U0WrOBPiKwaCSGEEEIIIYQQQgghhBBCCCGEuO5OAwAA//+/BFIO")
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
renameat2(r4, &(0x7f0000000380)='./file1\x00', r4, &(0x7f00000003c0)='./file1\x00', 0x3)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})
socket$nl_rdma(0x10, 0x3, 0x14)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r6 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000280)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, r6)
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x81)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xffffff80, 0x178, 0x330, 0x178, 0x490, 0x230, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)
socket$inet_sctp(0x2, 0x1, 0x84)

3.754369885s ago: executing program 2 (id=393):
r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74da"], 0xfebe)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

3.676101175s ago: executing program 3 (id=394):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)

3.651447826s ago: executing program 4 (id=395):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x70)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect(0x5, 0x3f, 0x0, 0x0)

3.301617981s ago: executing program 3 (id=396):
syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x30e, &(0x7f0000000900)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

3.244978252s ago: executing program 2 (id=397):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/195, 0xc3}, {&(0x7f0000000780)=""/167, 0xa7}, {&(0x7f0000000b80)=""/198, 0xc6}], 0x3, 0x2, 0x7ffe)

3.061340305s ago: executing program 2 (id=398):
r0 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

3.010382245s ago: executing program 3 (id=399):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x336)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.72232987s ago: executing program 3 (id=400):
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78)
sendfile(r0, r1, &(0x7f00000001c0), 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa30903, 0x8000, '\x00', @string=&(0x7f0000000540)=0x10}})
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
fcntl$addseals(r1, 0x409, 0x8)

1.712576565s ago: executing program 3 (id=401):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x444f, &(0x7f0000008900)="$eJzs3U1vI2cdAPD/TLI0WbptUnooEhKWqAQCFCU9AalENpvdNOmGRQutEBevk7i7ASdeJQ7iUIlwq8QJiQPiUIHgllOVL7B8BC4cy3klOHBBQqowsj1OPBO7cXftLIt+v0Mez/Nu/+flmcNk0kzjwc5BaeegVNkr1bfeO3ij9LN67XC3Gukl6Tv+lcsbn+F8xv0kjkbfJyN058atH7z7RsSft//6uNlsNqNlMvpa6Pn8r3++v9WbdqWFNq1++/c2Kj+OiFfPzatlIiJ+lE3oepa3nKXTEXEtIpKIePf9X90rjWg2H31cfbP8ycYHJ4uvrx9/eDL4uycRv6t98Zv3d//+lYnFv319RMMDAAAAAAAAAAAAAAAAAPCcW717553vzy/EoyQmj5Pzz+uuZumg52ObI/Pl8X9ZAAAAAAAAAAAAAAAAAAAA+B919vx/KXmlz/P/K1m6NKB987sDCl4Y7TwZj7Xv3Vm5Ob+Qvf89OVf+rSzrH9cnYrbPe99b6aOe+tcL7fu//z3rdOLp59+dX3fcmUjSueYvTstnIk3n5iL+kL34/bXkalqrHzS+8V79cG/76cd/3uXj33lZfm4vyN6f/2nx762+XOh//O///0IU99rW9r3zuzJ95OM/+ID80y+ToeJ/o9DuMuLPk8vHf7KdN91bYalzAmjF/9eTF8d/pdD/uOL/UkSUktZcS7kzQGsN08oftF4hLx//K+283Kkz+yEHHf//LsT/ZqH/QfF/eWTfoP/5/6h4IaKvfPw/186bytU4O/5n04uP/1uF/p/F9b81/yPX/6Hk49+5aftjvkr7lxz2/L9a6H9c8X+ntVu2LlcvJbk94Djp5A/6f3Xk5eM/da787P4vHWr991ah/afe/41Ad37dcdv3fz33IV9LOvd/9JeP//TAesMe/2uFduM+/y+11388qXz8r7bz8mvnmfbfYeO/Xuh/XPFvr0qmuvE/O5/854VO/u+t/4aSj//nO5lpb42j9t/2+i+5eP3/dqH/Z7H+a83/KB3vqP8v8vF/cWC9Vvz/MsT1/3ah3fjjHzFvrf/ETuN/JR43m9cG1msf/1MXx3+j0G7c8f/qODsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeA4sZ+lMJOlcbjtN5+YibmTbr8XVZLOyXd6s1bd+ehCxkuWX4pXkfq2+WamVd/bq29VypVarb0XczMpfjankoFZvlHcrD2+d9jWdPKhW9hub1UojIlaz/C/FtW5fmzuN3crDiHjrtOzltL7/8EFlr7y9s/+d+fn5+Vg7ncNsUv15o7rX6IzeKY1YP207k/RMrl389ulcXkx+Uj/c36vU2vm3e9rU6luVWk+bjazsNzGbNPYP97YqjWq5Vr/fHe9ZWsrSlbW7P7x7e+Fc+b2kky5f7rQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+IweLX77txEx2dlKI2Kp+yHpV/+jj6tvlj/Z+OBk8fX14w9PHg+qBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgq7dIwSMRCFAfjNWKidx7AKSWeboIgWRgRPoMfwMPEoXsI7WFjYWohgZkDjLqTZrb6veZCfl/dDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArHN5N97ftl1EiqOvw4iXx9e33/l1mdMwz7zYP9hTT3bj6mY8v2i78t3Tv/ysPHrv80/6+fH0EBtm9Tz83V/+T7N653hrr2lY17/2q3dPIuUmIvqSn6acm2bduwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBvduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADxwIAAAAAwvyto+jbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBXAAAA///CXSBY")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

1.195967752s ago: executing program 4 (id=402):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000000, &(0x7f0000000580)={[{@part={'part', 0x3d, 0x3}}, {@codepage={'codepage', 0x3d, 'cp949'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}]}, 0x1, 0x2db, &(0x7f0000000200)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00')
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', 0x0, 0x2200892, 0x0)
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

1.194420183s ago: executing program 5 (id=403):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f000001d780)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="09bfe4e6dd0000001f0003427bbf6f2a906c47c0885c568c58aec0012f0e9bce8a84e2d261edda4b20be43511e9015b10236035fc27c3b4c950148da1fe4201896f870"], 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='cq_alloc_error\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
pwrite64(r6, 0x0, 0x0, 0xe7c)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c)
r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x402)
ioctl$I2C_SMBUS(r8, 0x720, &(0x7f00000000c0)={0x0, 0xcb, 0x6, &(0x7f0000000040)={0x19, "a8fd4950f88fdde3d44c1a0e35d7eda408000000639c19fe8c52041832352ed770"}})
stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40))
r9 = socket$inet(0xa, 0x801, 0x84)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000003080)={0x0, 0x0, <r10=>0x0}, &(0x7f0000003040)=0xc)
setregid(0xffffffffffffffff, r10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280), 0x0, &(0x7f0000000580)=[@rights={{0x24, 0x1, 0x1, [r1, r4, r5, r4, r3]}}], 0x28, 0x4000}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001880)="813d4baf47e4a4983599357b5e422b03017f0935e12ec1561538d4753a1f70d947578a209c7e380bcdd7b230d958db1f5dc9f14aefe2e294591fad12a9013da5a1eacae6b3353bd64acc120010644da0cd38de5ebe8f80a8a608dbc2d320546d7628bd1e94296c46c144b202f6670b686986041600203fab9de1b1608b4c5907b0680d5ad48be9069d091b580ae55873e209d0d713956fca7c316930e241942d31b29727454c026718f603ca6136363a3f55903e48ff4cb3910548761eb74d4c0cbe9cc06f5816c1", 0xc8}, {&(0x7f0000004440)="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", 0x1000}, {&(0x7f0000001980)="c754ef6391563b4a2353e7c0dbe2109b35a0a53a1bb3911a68c05aad0b64a3c83808bc37dc0e323257a3aaed3f24b71cef990e2c03d839057a51f21cd7e8e3b91f17024156362379b9bdd02a842427c0cfc3ffcc133c59d82dfce5242bcb98e113ff05ba8a7e8eef137e0629e601a334677a63ad96469939ed647ff127a6ea7c4146ad743f61dce2a43a1a899e36c9cdafb2094bdb92366cea48dd8a2775f119e75908e49ce33b80f87ddd7249e0afd37e8c8209fc1c2b767d73ef157905c0ceaadac8105417dc6b48bfea51d4daaeca33da4d22a4f9c54433", 0xd9}, {&(0x7f0000001a80)="94577e9074d6c1bf18edebc4ebc2c5611fe9f354e9a9a5049b96f00528cd000624e11fe492a68db39c21147e70d65c386d214580277ff73834af6eb239c6019935f94962470ba2ad50297e5188f5f94ec59903b9e8ac7b97e7697e88ac16824870b86e", 0x63}, {&(0x7f0000001b00)="96c7a30bb905ebdf28d5c3d25fe098f3f35c56485bee0fd19148d681057f65bcff8d74f392dbff83ccad52b5e940e43d62d7d450b94a034ec13fa503c5d6f070aa68f4179b063f", 0x47}], 0x5, 0x0, 0x0, 0x40010}}], 0x2, 0x4000050)
epoll_create(0x1)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0x2020)

1.090405834s ago: executing program 2 (id=404):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080))
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)

67.057309ms ago: executing program 2 (id=405):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000c48, &(0x7f0000000140)={[{@fat=@sys_immutable}, {@numtail}, {@numtail}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@utf8no}, {@numtail}, {@uni_xlate}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '950'}}]}, 0x1, 0x356, &(0x7f0000000200)="$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")
creat(&(0x7f00000002c0)='./file0\x00', 0x6)

54.461039ms ago: executing program 4 (id=406):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f00003d6000/0x4000)=nil, 0x4000, 0xb635773f05ebbee9, 0x100010, 0xffffffffffffffff, 0x963ac000)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c003920"], 0xf)

0s ago: executing program 5 (id=407):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$inet(r3, 0x0, 0x40c4)
r4 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.40' (ED25519) to the list of known hosts.
[   81.381485][ T5758] cgroup: Unknown subsys name 'net'
[   81.555138][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.369313][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.678195][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.684394][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.687148][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.696353][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.701103][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.709492][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.715092][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.723110][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.729629][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.744018][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.751758][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.751782][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.759537][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.771424][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   85.774669][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.781736][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.789324][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   85.802027][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.815706][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.821811][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.831018][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   85.831202][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   85.839558][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.853295][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.449341][ T5771] chnl_net:caif_netlink_parms(): no params data found
[   86.488119][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   86.533455][ T5768] chnl_net:caif_netlink_parms(): no params data found
[   86.563695][ T5770] chnl_net:caif_netlink_parms(): no params data found
[   86.710563][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.718317][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.726064][ T5771] bridge_slave_0: entered allmulticast mode
[   86.733487][ T5771] bridge_slave_0: entered promiscuous mode
[   86.791297][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.799085][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.806502][ T5771] bridge_slave_1: entered allmulticast mode
[   86.813783][ T5771] bridge_slave_1: entered promiscuous mode
[   86.841461][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.848899][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.856753][ T5768] bridge_slave_0: entered allmulticast mode
[   86.863999][ T5768] bridge_slave_0: entered promiscuous mode
[   86.873282][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.880808][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.889155][ T5768] bridge_slave_1: entered allmulticast mode
[   86.896721][ T5768] bridge_slave_1: entered promiscuous mode
[   86.940106][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.952350][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.960623][ T5769] bridge_slave_0: entered allmulticast mode
[   86.970534][ T5769] bridge_slave_0: entered promiscuous mode
[   87.058928][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.067182][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.074928][ T5770] bridge_slave_0: entered allmulticast mode
[   87.105426][ T5770] bridge_slave_0: entered promiscuous mode
[   87.135485][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.143208][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.151650][ T5770] bridge_slave_1: entered allmulticast mode
[   87.160007][ T5770] bridge_slave_1: entered promiscuous mode
[   87.168722][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.182702][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.191904][ T5769] bridge_slave_1: entered allmulticast mode
[   87.199965][ T5769] bridge_slave_1: entered promiscuous mode
[   87.211800][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.230674][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.246449][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.337349][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.422754][ T5768] team0: Port device team_slave_0 added
[   87.434410][ T5768] team0: Port device team_slave_1 added
[   87.461321][ T5771] team0: Port device team_slave_0 added
[   87.471151][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.486574][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.516143][ T5771] team0: Port device team_slave_1 added
[   87.526601][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.552356][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.638172][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.646605][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.674626][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.689996][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.698703][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.726315][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.741060][ T5770] team0: Port device team_slave_0 added
[   87.750820][ T5770] team0: Port device team_slave_1 added
[   87.757807][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.765235][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.791332][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.820287][ T5769] team0: Port device team_slave_0 added
[   87.836213][ T5784] Bluetooth: hci3: command tx timeout
[   87.853125][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.861004][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.888448][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.902926][ T5769] team0: Port device team_slave_1 added
[   87.916416][ T5775] Bluetooth: hci0: command tx timeout
[   87.916484][ T5776] Bluetooth: hci1: command tx timeout
[   87.929138][ T5784] Bluetooth: hci2: command tx timeout
[   87.993721][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.001236][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.028257][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.042496][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.049965][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.077318][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.101824][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.109068][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.135714][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.149788][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.157344][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.184621][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.209885][ T5768] hsr_slave_0: entered promiscuous mode
[   88.217818][ T5768] hsr_slave_1: entered promiscuous mode
[   88.279832][ T5771] hsr_slave_0: entered promiscuous mode
[   88.287588][ T5771] hsr_slave_1: entered promiscuous mode
[   88.293882][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.302053][ T5771] Cannot create hsr debugfs directory
[   88.352971][ T5769] hsr_slave_0: entered promiscuous mode
[   88.360782][ T5769] hsr_slave_1: entered promiscuous mode
[   88.367294][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.374898][ T5769] Cannot create hsr debugfs directory
[   88.507149][ T5770] hsr_slave_0: entered promiscuous mode
[   88.513823][ T5770] hsr_slave_1: entered promiscuous mode
[   88.520969][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.528745][ T5770] Cannot create hsr debugfs directory
[   88.907283][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.924412][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.939968][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.954171][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.046063][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.058263][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.071332][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.082298][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.173557][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.218727][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.261013][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.272393][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.312585][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.326005][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.347912][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.368900][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.421522][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.491589][ T5768] 8021q: adding VLAN 0 to HW filter on device team0
[   89.562880][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.570745][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.628733][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.635937][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.661130][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.722067][ T5771] 8021q: adding VLAN 0 to HW filter on device team0
[   89.742187][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.763850][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.771347][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.791942][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.857574][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   89.869877][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.886153][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.893343][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.907228][ T5784] Bluetooth: hci3: command tx timeout
[   89.941592][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.948833][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.987773][ T5784] Bluetooth: hci0: command tx timeout
[   89.993330][ T5776] Bluetooth: hci2: command tx timeout
[   89.993340][ T5775] Bluetooth: hci1: command tx timeout
[   89.999409][ T5770] 8021q: adding VLAN 0 to HW filter on device team0
[   90.019840][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.027063][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.082280][ T5771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   90.092915][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.111075][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.118353][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.133360][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.140640][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.340059][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.533788][ T5768] veth0_vlan: entered promiscuous mode
[   90.610469][ T5768] veth1_vlan: entered promiscuous mode
[   90.716849][ T5768] veth0_macvtap: entered promiscuous mode
[   90.742149][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.763007][ T5768] veth1_macvtap: entered promiscuous mode
[   90.848096][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.872815][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.895303][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.904569][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.913705][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.923991][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.941276][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.961039][ T5771] veth0_vlan: entered promiscuous mode
[   90.990558][ T5771] veth1_vlan: entered promiscuous mode
[   91.037634][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.131574][ T5771] veth0_macvtap: entered promiscuous mode
[   91.152729][ T5771] veth1_macvtap: entered promiscuous mode
[   91.216672][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.224859][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.232798][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.244639][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.258530][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.309263][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.322039][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.334011][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.379694][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.389100][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.399207][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.408920][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.421621][ T5770] veth0_vlan: entered promiscuous mode
[   91.432054][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.442034][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.483396][ T5769] veth0_vlan: entered promiscuous mode
[   91.518449][ T5770] veth1_vlan: entered promiscuous mode
[   91.533529][ T5769] veth1_vlan: entered promiscuous mode
[   91.742623][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.770339][ T5769] veth0_macvtap: entered promiscuous mode
[   91.774013][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.781999][ T5770] veth0_macvtap: entered promiscuous mode
[   91.802975][ T5769] veth1_macvtap: entered promiscuous mode
[   91.823619][ T5770] veth1_macvtap: entered promiscuous mode
[   91.898909][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.906576][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.915062][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.928007][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.939483][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.950340][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.964539][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.973886][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.987460][ T5776] Bluetooth: hci3: command tx timeout
[   91.992493][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.004745][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.020576][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.033026][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.045177][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.059526][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.068238][ T5776] Bluetooth: hci2: command tx timeout
[   92.068583][ T5784] Bluetooth: hci0: command tx timeout
[   92.076644][ T5776] Bluetooth: hci1: command tx timeout
[   92.097389][  T787] cfg80211: failed to load regulatory.db
[   92.127662][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.141998][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.153047][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.164157][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.177886][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.189755][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.201392][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.211582][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.222722][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.233739][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.247548][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.261698][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.299751][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.331460][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.350796][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.360174][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.409163][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.436194][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.458813][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.475482][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.546032][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   92.628132][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   92.722371][ T5872] =======================================================
[   92.722371][ T5872] WARNING: The mand mount option has been deprecated and
[   92.722371][ T5872]          and is ignored by this kernel. Remove the mand
[   92.722371][ T5872]          option from the mount to silence this warning.
[   92.722371][ T5872] =======================================================
[   93.460704][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.477088][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.490375][ T5876] syz.1.7[5876]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   93.526551][ T5876] process 'syz.1.7' launched '/dev/fd/3' with NULL argv: empty string added
[   93.560286][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.592030][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.654725][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.680797][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.692736][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.736257][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.852148][ T5881] loop1: detected capacity change from 0 to 16
[   93.861056][ T5881] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   93.877917][ T5881] 
: renamed from bond0 (while UP)
[   94.165072][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   94.220292][ T5784] Bluetooth: hci3: command tx timeout
[   94.228047][ T5784] Bluetooth: hci0: command tx timeout
[   94.235192][ T5784] Bluetooth: hci1: command tx timeout
[   94.235269][ T5776] Bluetooth: hci2: command tx timeout
[   94.315828][ T5888] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   94.324826][ T5885] loop0: detected capacity change from 0 to 1024
[   94.362098][ T5885] EXT4-fs: Ignoring removed nobh option
[   94.435186][ T5885] EXT4-fs: Ignoring removed nobh option
[   94.502220][ T5885] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   94.542017][ T5885] EXT4-fs error (device loop0): ext4_get_journal_inode:5805: comm syz.0.1: inode #4294967295: comm syz.0.1: iget: illegal inode #
[   94.607815][ T5885] EXT4-fs (loop0): no journal found
[   94.630300][ T5885] EXT4-fs (loop0): can't get journal size
[   94.648057][ T5885] EXT4-fs (loop0): failed to initialize system zone (-22)
[   94.670923][ T5885] EXT4-fs (loop0): mount failed
[   95.777424][ T5902] loop0: detected capacity change from 0 to 16
[   95.803144][ T5902] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   95.841337][ T5902] 
: renamed from bond0 (while UP)
[   96.212808][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   96.565272][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.725519][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.735464][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.197997][ T5916] loop2: detected capacity change from 0 to 65
[   97.225211][ T5916] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[   97.287991][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   97.396839][ T5920] random: crng reseeded on system resumption
[   97.526103][ T5862] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   97.639009][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.821059][ T5862] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.839788][ T5862] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   97.880193][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.996646][ T5923] xt_CT: No such helper "snmp"
[   98.004418][ T5862] usb 2-1: config 0 descriptor??
[   98.058916][ T5862] pwc: Askey VC010 type 2 USB webcam detected.
[   98.496377][ T5862] pwc: recv_control_msg error -32 req 02 val 2b00
[   98.520014][ T5862] pwc: recv_control_msg error -32 req 02 val 2700
[   98.573066][ T5862] pwc: recv_control_msg error -32 req 02 val 2c00
[   98.745405][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   98.953132][ T5862] pwc: recv_control_msg error -71 req 04 val 1300
[   99.006647][ T5862] pwc: recv_control_msg error -71 req 04 val 1400
[   99.049554][ T5862] pwc: recv_control_msg error -71 req 02 val 2000
[   99.084164][ T5862] pwc: recv_control_msg error -71 req 02 val 2100
[   99.113457][ T5862] pwc: recv_control_msg error -71 req 04 val 1500
[   99.151548][ T5862] pwc: recv_control_msg error -71 req 02 val 2500
[   99.181207][ T5862] pwc: recv_control_msg error -71 req 02 val 2400
[   99.278363][ T5940] Bluetooth: MGMT ver 1.22
[   99.360100][ T5862] pwc: recv_control_msg error -71 req 02 val 2600
[   99.379915][ T5862] pwc: recv_control_msg error -71 req 02 val 2900
[   99.408360][ T5862] pwc: recv_control_msg error -71 req 02 val 2800
[   99.427006][ T5862] pwc: recv_control_msg error -71 req 04 val 1100
[   99.442155][ T5862] pwc: recv_control_msg error -71 req 04 val 1200
[   99.458420][ T5942] loop2: detected capacity change from 0 to 256
[   99.494255][ T5942] exfat: Deprecated parameter 'namecase'
[   99.502041][ T5862] pwc: Registered as video103.
[   99.596486][ T5862] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5
[   99.679438][ T5942] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[   99.778481][ T5862] usb 2-1: USB disconnect, device number 2
[   99.778982][ T5932] loop3: detected capacity change from 0 to 32768
[  100.014778][ T5932] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  100.646558][ T5952] pim6reg1: entered promiscuous mode
[  100.665514][ T5952] pim6reg1: entered allmulticast mode
[  100.737747][ T5957] random: crng reseeded on system resumption
[  100.881317][ T5768] ocfs2: Unmounting device (7,3) on (node local)
[  101.107103][ T5959] xt_CT: No such helper "snmp"
[  101.483213][ T5954] loop0: detected capacity change from 0 to 32768
[  101.514623][ T5954] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.28 (5954)
[  101.613710][ T5954] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.665333][ T5954] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  101.677500][ T5954] BTRFS info (device loop0): using free space tree
[  103.100293][ T5986] loop3: detected capacity change from 0 to 32768
[  103.193024][ T5986] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 75 has invalid tree depth 2304 in extent list
[  103.214064][ T5986] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  103.226456][ T5986] OCFS2: Returning error to the calling process.
[  103.232841][ T5986] (syz.3.33,5986,1):ocfs2_find_leaf:1941 ERROR: status = -30
[  103.241752][ T5986] (syz.3.33,5986,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  103.250463][ T5986] (syz.3.33,5986,1):ocfs2_get_clusters:624 ERROR: status = -30
[  103.258090][ T5986] (syz.3.33,5986,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  103.266656][ T5986] (syz.3.33,5986,1):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 0
[  103.275162][ T5986] (syz.3.33,5986,1):ocfs2_bmap:488 ERROR: status = -30
[  103.282695][ T5986] jbd2_journal_init_inode: Cannot locate journal superblock
[  103.290072][ T5986] (syz.3.33,5986,1):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  103.298849][ T5986] (syz.3.33,5986,1):ocfs2_check_volume:2405 ERROR: Could not initialize journal!
[  103.308126][ T5986] (syz.3.33,5986,1):ocfs2_check_volume:2490 ERROR: status = -22
[  103.315816][ T5986] (syz.3.33,5986,1):ocfs2_mount_volume:1822 ERROR: status = -22
[  103.325392][ T5986] (syz.3.33,5986,1):ocfs2_fill_super:1178 ERROR: status = -22
[  103.429270][ T5954] BTRFS info (device loop0): enabling ssd optimizations
[  103.567366][ T5954] BTRFS info (device loop0): auto enabling async discard
[  103.741108][ T5999] ubi31: attaching mtd0
[  103.776406][ T5999] ubi31: scanning is finished
[  103.781888][ T5999] ubi31: empty MTD device detected
[  104.445603][ T5769] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  104.523555][ T5999] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  104.718631][ T5999] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  104.719561][ T6001] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  104.726170][ T5999] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  105.085451][ T5999] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  105.085925][ T6001] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  105.216660][ T5999] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  105.274599][ T5999] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  105.315235][ T5999] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3075365480
[  105.443472][ T5999] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  105.474418][ T6005] ubi31: background thread "ubi_bgt31d" started, PID 6005
[  105.635667][ T6001] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  105.728406][ T6001] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  105.785364][ T6001] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  105.947052][ T6001] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  106.152474][ T6001] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  106.195860][ T6001] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  106.253583][ T6001] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  106.307913][ T6001] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  106.314627][ T6001] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  106.373849][ T6001] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  106.474766][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout
[  106.530223][ T6012] Can't find a SQUASHFS superblock on nullb0
[  106.541036][ T5776] Bluetooth: hci3: unexpected cc 0x2039 length: 9 > 1
[  106.549313][ T5776] Bluetooth: hci3: unexpected event for opcode 0x2039
[  106.700506][   T27] audit: type=1326 audit(1750458243.719:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  106.788230][   T27] audit: type=1326 audit(1750458243.719:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  106.835419][   T27] audit: type=1326 audit(1750458243.719:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  106.935049][   T27] audit: type=1326 audit(1750458243.719:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  107.193772][   T27] audit: type=1326 audit(1750458243.739:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  107.725329][ T6032] loop2: detected capacity change from 0 to 32768
[  108.500960][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout
[  108.500981][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout
[  108.559376][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout
[  108.629680][   T27] audit: type=1326 audit(1750458243.739:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  108.659754][   T27] audit: type=1326 audit(1750458243.739:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  108.685093][ T6032] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 75 has invalid tree depth 2304 in extent list
[  108.704396][ T6032] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  108.715011][ T6032] OCFS2: Returning error to the calling process.
[  108.721383][ T6032] (syz.2.44,6032,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  108.729187][ T6032] (syz.2.44,6032,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  108.737726][ T6032] (syz.2.44,6032,0):ocfs2_get_clusters:624 ERROR: status = -30
[  108.745656][ T6032] (syz.2.44,6032,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  108.755106][ T6032] (syz.2.44,6032,0):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 0
[  108.763924][ T6032] (syz.2.44,6032,0):ocfs2_bmap:488 ERROR: status = -30
[  108.771100][ T6032] jbd2_journal_init_inode: Cannot locate journal superblock
[  108.778970][ T6032] (syz.2.44,6032,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  108.787797][ T6032] (syz.2.44,6032,0):ocfs2_check_volume:2405 ERROR: Could not initialize journal!
[  108.797298][ T6032] (syz.2.44,6032,0):ocfs2_check_volume:2490 ERROR: status = -22
[  108.805602][ T6032] (syz.2.44,6032,0):ocfs2_mount_volume:1822 ERROR: status = -22
[  108.825427][ T6032] (syz.2.44,6032,0):ocfs2_fill_super:1178 ERROR: status = -22
[  108.848314][ T2129] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  108.862671][   T27] audit: type=1326 audit(1750458243.739:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  108.906084][   T27] audit: type=1326 audit(1750458243.739:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  108.937971][   T27] audit: type=1326 audit(1750458243.739:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  109.079283][ T6037] loop0: detected capacity change from 0 to 4096
[  109.169496][ T2129] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.200656][ T2129] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.231597][ T2129] usb 4-1: config 0 interface 0 has no altsetting 0
[  109.399618][ T2129] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  109.408968][ T2129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.427241][ T2129] usb 4-1: config 0 descriptor??
[  109.815827][ T5862] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  109.988081][ T2129] usbhid 4-1:0.0: can't add hid device: -71
[  110.007352][ T2129] usbhid: probe of 4-1:0.0 failed with error -71
[  110.012159][ T5862] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  110.105932][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.114085][ T5862] usb 3-1: Product: syz
[  110.118627][ T5862] usb 3-1: Manufacturer: syz
[  110.123368][ T5862] usb 3-1: SerialNumber: syz
[  110.147989][ T5862] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  110.155130][ T2129] usb 4-1: USB disconnect, device number 2
[  110.235627][    T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  110.545111][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout
[  110.555078][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout
[  110.591291][ T6045] loop0: detected capacity change from 0 to 32768
[  110.626410][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout
[  110.626698][ T5784] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  110.642157][ T5784] Bluetooth: hci3: Injecting HCI hardware error event
[  110.651160][ T5776] Bluetooth: hci3: hardware error 0x00
[  110.684506][ T5862] usb 3-1: USB disconnect, device number 2
[  110.699920][ T6045] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  110.940513][ T6055] loop3: detected capacity change from 0 to 512
[  110.953901][ T6055] EXT4-fs: Ignoring removed mblk_io_submit option
[  110.961260][ T6055] EXT4-fs: Ignoring removed bh option
[  111.604180][    T8] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  112.625137][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout
[  112.631502][ T5784] Bluetooth: hci2: command 0x0c1a tx timeout
[  112.767790][ T5776] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  112.951325][ T6055] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  112.965146][ T6055] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  113.284017][    T8] ath9k_htc: Failed to initialize the device
[  113.293077][ T5862] usb 3-1: ath9k_htc: USB layer deinitialized
[  113.437363][ T6055] EXT4-fs (loop3): 1 truncate cleaned up
[  113.448143][ T6055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.622692][ T6045] syz.0.50 (6045) used greatest stack depth: 17808 bytes left
[  113.746107][ T5769] ocfs2: Unmounting device (7,0) on (node local)
[  113.797015][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.946885][ T6066] loop1: detected capacity change from 0 to 4096
[  114.760667][ T6071] loop3: detected capacity change from 0 to 32768
[  115.484822][ T6068] sched: RT throttling activated
[  115.869398][ T6071] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 75 has invalid tree depth 2304 in extent list
[  115.889472][ T6071] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  115.899703][ T6071] OCFS2: Returning error to the calling process.
[  115.906743][ T6071] (syz.3.57,6071,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  115.914327][ T6071] (syz.3.57,6071,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  115.922675][ T6071] (syz.3.57,6071,0):ocfs2_get_clusters:624 ERROR: status = -30
[  115.930369][ T6071] (syz.3.57,6071,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  115.938859][ T6071] (syz.3.57,6071,0):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 0
[  115.948244][ T6071] (syz.3.57,6071,0):ocfs2_bmap:488 ERROR: status = -30
[  115.955356][ T6071] jbd2_journal_init_inode: Cannot locate journal superblock
[  115.963440][ T6071] (syz.3.57,6071,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  115.972339][ T6071] (syz.3.57,6071,0):ocfs2_check_volume:2405 ERROR: Could not initialize journal!
[  115.982235][ T6071] (syz.3.57,6071,0):ocfs2_check_volume:2490 ERROR: status = -22
[  115.990290][ T6071] (syz.3.57,6071,0):ocfs2_mount_volume:1822 ERROR: status = -22
[  116.001091][ T6071] (syz.3.57,6071,0):ocfs2_fill_super:1178 ERROR: status = -22
[  117.466761][ T6066] ntfs3: loop1: ino=22, "file1" attr_insert_range
[  120.931789][ T6103] ceph: No source
[  122.788153][ T6118] loop1: detected capacity change from 0 to 4111
[  122.802925][   T27] kauditd_printk_skb: 23 callbacks suppressed
[  122.802940][   T27] audit: type=1326 audit(1750458259.789:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ad38e929 code=0x7ffc0000
[  122.942677][ T6118] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  122.966479][ T6118] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  122.978806][ T6118] ntfs3: loop1: Failed to load $MFT.
[  123.023154][   T27] audit: type=1326 audit(1750458259.789:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ad38e929 code=0x7ffc0000
[  123.153113][ T6111] loop0: detected capacity change from 0 to 4096
[  123.405244][   T27] audit: type=1326 audit(1750458259.789:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64ad38e929 code=0x7ffc0000
[  123.481645][   T27] audit: type=1326 audit(1750458259.789:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ad38e929 code=0x7ffc0000
[  123.504498][   T27] audit: type=1326 audit(1750458259.789:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ad38e929 code=0x7ffc0000
[  123.528881][   T27] audit: type=1326 audit(1750458259.789:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64ad38e929 code=0x7ffc0000
[  123.551979][   T27] audit: type=1326 audit(1750458259.789:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ad38e929 code=0x7ffc0000
[  123.593594][   T27] audit: type=1326 audit(1750458259.789:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ad38e929 code=0x7ffc0000
[  123.656138][   T27] audit: type=1326 audit(1750458259.789:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f64ad38e929 code=0x7ffc0000
[  123.687757][   T27] audit: type=1326 audit(1750458259.789:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ad38e929 code=0x7ffc0000
[  123.810949][ T6130] loop2: detected capacity change from 0 to 256
[  123.836597][ T6130] exfat: Deprecated parameter 'namecase'
[  124.965081][ T6130] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  124.979856][ T6126] loop1: detected capacity change from 0 to 4096
[  128.138850][ T6151] loop0: detected capacity change from 0 to 4096
[  128.148087][ T6151] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  128.164309][ T6151] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  128.237256][ T6151] ntfs3: loop0: failed to replay log file. Can't mount rw!
[  128.905568][   T27] kauditd_printk_skb: 32 callbacks suppressed
[  128.905585][   T27] audit: type=1326 audit(1750458265.909:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468598e929 code=0x7ffc0000
[  128.950114][   T27] audit: type=1326 audit(1750458265.909:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468598e929 code=0x7ffc0000
[  129.267692][   T27] audit: type=1326 audit(1750458265.909:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468598e929 code=0x7ffc0000
[  129.497972][   T27] audit: type=1326 audit(1750458265.909:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468598e929 code=0x7ffc0000
[  129.574053][ T6166] loop3: detected capacity change from 0 to 4096
[  129.582469][   T27] audit: type=1326 audit(1750458265.909:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468598e929 code=0x7ffc0000
[  129.605728][   T27] audit: type=1326 audit(1750458265.909:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468598e929 code=0x7ffc0000
[  129.628399][   T27] audit: type=1326 audit(1750458265.909:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468598e929 code=0x7ffc0000
[  129.650563][   T27] audit: type=1326 audit(1750458265.909:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468598e929 code=0x7ffc0000
[  129.704781][   T27] audit: type=1326 audit(1750458265.909:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f468598e929 code=0x7ffc0000
[  129.814763][   T27] audit: type=1326 audit(1750458265.909:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468598e929 code=0x7ffc0000
[  129.843044][ T6173] loop0: detected capacity change from 0 to 512
[  129.850549][ T6173] EXT4-fs: Ignoring removed mblk_io_submit option
[  129.857213][ T6173] EXT4-fs: Ignoring removed bh option
[  129.865602][ T6173] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  129.944736][ T6173] EXT4-fs (loop0): 1 truncate cleaned up
[  129.951544][ T6173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.119884][ T6173] Invalid ELF header magic: != ELF
[  130.691126][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.736738][ T6188] loop1: detected capacity change from 0 to 16
[  130.886710][ T6188] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  131.823099][ T6199] loop3: detected capacity change from 0 to 64
[  132.566415][ T6205] loop2: detected capacity change from 0 to 4096
[  132.606239][ T6204] loop0: detected capacity change from 0 to 4096
[  132.699006][ T6205] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  132.724705][ T6205] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  132.789780][ T6205] ntfs3: loop2: failed to replay log file. Can't mount rw!
[  133.040314][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  133.049585][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  133.833834][ T6217] loop3: detected capacity change from 0 to 65
[  133.851422][ T6217] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  134.861994][ T6222] loop3: detected capacity change from 0 to 4096
[  136.567081][ T6241] loop1: detected capacity change from 0 to 4109
[  136.607723][ T6241] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  136.675097][ T6241] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  136.686623][ T6241] ntfs3: loop1: Failed to load $MFT.
[  137.123821][ T5832] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  137.337532][ T5832] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.348997][ T5832] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.359786][ T5832] usb 4-1: config 0 interface 0 has no altsetting 0
[  137.367085][ T5832] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  137.377931][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.411906][ T5832] usb 4-1: config 0 descriptor??
[  137.845190][ T5832] usbhid 4-1:0.0: can't add hid device: -71
[  137.851279][ T5832] usbhid: probe of 4-1:0.0 failed with error -71
[  137.906453][ T5832] usb 4-1: USB disconnect, device number 3
[  138.708547][ T6255] loop0: detected capacity change from 0 to 64
[  139.116940][ T6257] loop1: detected capacity change from 0 to 4096
[  139.134683][ T6257] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  139.151748][ T6257] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  139.178999][ T6254] hfs: bad catalog entry type 0
[  139.188846][ T6257] ntfs3: loop1: failed to replay log file. Can't mount rw!
[  140.940730][ T6267] loop3: detected capacity change from 0 to 32768
[  141.004779][ T6269] loop1: detected capacity change from 0 to 16
[  141.012105][ T6269] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  141.053876][ T6267] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 75 has invalid tree depth 2304 in extent list
[  141.073536][ T6267] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  141.083428][ T6267] OCFS2: Returning error to the calling process.
[  141.089921][ T6267] (syz.3.108,6267,1):ocfs2_find_leaf:1941 ERROR: status = -30
[  141.097622][ T6267] (syz.3.108,6267,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  141.106167][ T6267] (syz.3.108,6267,1):ocfs2_get_clusters:624 ERROR: status = -30
[  141.113826][ T6267] (syz.3.108,6267,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  141.122300][ T6267] (syz.3.108,6267,1):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 0
[  141.130859][ T6267] (syz.3.108,6267,1):ocfs2_bmap:488 ERROR: status = -30
[  141.137853][ T6267] jbd2_journal_init_inode: Cannot locate journal superblock
[  141.145177][ T6267] (syz.3.108,6267,1):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  141.153981][ T6267] (syz.3.108,6267,1):ocfs2_check_volume:2405 ERROR: Could not initialize journal!
[  141.163272][ T6267] (syz.3.108,6267,1):ocfs2_check_volume:2490 ERROR: status = -22
[  141.171680][ T6267] (syz.3.108,6267,1):ocfs2_mount_volume:1822 ERROR: status = -22
[  141.221649][ T6267] (syz.3.108,6267,1):ocfs2_fill_super:1178 ERROR: status = -22
[  142.155466][ T6281] random: crng reseeded on system resumption
[  142.509513][ T6263] Can't find a SQUASHFS superblock on nullb0
[  142.516225][ T6284] xt_CT: No such helper "snmp"
[  142.521477][ T5776] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1
[  142.529509][ T5776] Bluetooth: hci2: unexpected event for opcode 0x2039
[  143.065507][ T5832] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  143.123298][ T6301] loop1: detected capacity change from 0 to 64
[  143.509969][ T5832] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.777435][ T5832] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.791714][ T5832] usb 3-1: config 0 interface 0 has no altsetting 0
[  143.802216][ T5832] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  143.898909][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.958847][ T5832] usb 3-1: config 0 descriptor??
[  144.544416][ T5832] usbhid 3-1:0.0: can't add hid device: -71
[  144.552569][ T5832] usbhid: probe of 3-1:0.0 failed with error -71
[  144.579736][ T5832] usb 3-1: USB disconnect, device number 3
[  145.388946][ T6310] loop1: detected capacity change from 0 to 32768
[  146.005593][ T6310] OCFS2: ERROR (device loop1): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 75 has invalid tree depth 2304 in extent list
[  146.024768][ T6310] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  146.034659][ T6310] OCFS2: Returning error to the calling process.
[  146.041166][ T6310] (syz.1.119,6310,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  146.048740][ T6310] (syz.1.119,6310,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  146.057152][ T6310] (syz.1.119,6310,0):ocfs2_get_clusters:624 ERROR: status = -30
[  146.065170][ T6310] (syz.1.119,6310,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  146.073770][ T6310] (syz.1.119,6310,0):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 0
[  146.082989][ T6310] (syz.1.119,6310,0):ocfs2_bmap:488 ERROR: status = -30
[  146.089983][ T6310] jbd2_journal_init_inode: Cannot locate journal superblock
[  146.097327][ T6310] (syz.1.119,6310,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  146.106166][ T6310] (syz.1.119,6310,0):ocfs2_check_volume:2405 ERROR: Could not initialize journal!
[  146.115444][ T6310] (syz.1.119,6310,0):ocfs2_check_volume:2490 ERROR: status = -22
[  146.123172][ T6310] (syz.1.119,6310,0):ocfs2_mount_volume:1822 ERROR: status = -22
[  146.132331][ T6310] (syz.1.119,6310,0):ocfs2_fill_super:1178 ERROR: status = -22
[  146.552545][ T5776] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  146.563928][ T5776] Bluetooth: hci2: Injecting HCI hardware error event
[  146.572968][ T5086] Bluetooth: hci2: hardware error 0x00
[  146.640968][ T5776] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1
[  146.647996][ T5776] Bluetooth: hci2: unexpected event for opcode 0x2039
[  147.510282][ T6313] loop3: detected capacity change from 0 to 4096
[  147.669298][ T6325] random: crng reseeded on system resumption
[  147.999429][   T27] kauditd_printk_skb: 74 callbacks suppressed
[  147.999447][   T27] audit: type=1800 audit(1750458285.009:161): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.121" name="file1" dev="loop3" ino=33 res=0 errno=0
[  148.029892][ T6313] ntfs3: loop3: ino=21, "file1" attr_insert_range
[  148.080649][ T6327] xt_CT: No such helper "snmp"
[  148.625085][ T5086] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  148.999238][ T6342] Can't find a SQUASHFS superblock on nullb0
[  149.156494][ T6346] loop2: detected capacity change from 0 to 4096
[  149.170172][ T6346] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  149.199316][ T6346] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  149.246534][ T6346] ntfs3: loop2: failed to replay log file. Can't mount rw!
[  150.598882][ T6352] loop1: detected capacity change from 0 to 32768
[  150.758524][ T6352] OCFS2: ERROR (device loop1): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 75 has invalid tree depth 2304 in extent list
[  150.779284][ T6352] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  150.789379][ T6352] OCFS2: Returning error to the calling process.
[  150.796480][ T6352] (syz.1.131,6352,1):ocfs2_find_leaf:1941 ERROR: status = -30
[  150.803974][ T6352] (syz.1.131,6352,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  150.812397][ T6352] (syz.1.131,6352,1):ocfs2_get_clusters:624 ERROR: status = -30
[  150.820173][ T6352] (syz.1.131,6352,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  150.828632][ T6352] (syz.1.131,6352,1):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 0
[  150.837287][ T6352] (syz.1.131,6352,1):ocfs2_bmap:488 ERROR: status = -30
[  150.844251][ T6352] jbd2_journal_init_inode: Cannot locate journal superblock
[  150.851605][ T6352] (syz.1.131,6352,1):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  150.860631][ T6352] (syz.1.131,6352,1):ocfs2_check_volume:2405 ERROR: Could not initialize journal!
[  150.869913][ T6352] (syz.1.131,6352,1):ocfs2_check_volume:2490 ERROR: status = -22
[  150.877677][ T6352] (syz.1.131,6352,1):ocfs2_mount_volume:1822 ERROR: status = -22
[  150.889760][ T6352] (syz.1.131,6352,1):ocfs2_fill_super:1178 ERROR: status = -22
[  152.334598][ T6363] loop0: detected capacity change from 0 to 4096
[  152.540024][ T6365] loop1: detected capacity change from 0 to 4096
[  152.562449][   T27] audit: type=1800 audit(1750458289.579:162): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.135" name="file1" dev="loop0" ino=33 res=0 errno=0
[  152.615666][ T6363] ntfs3: loop0: ino=21, "file1" attr_insert_range
[  152.733535][ T6368] random: crng reseeded on system resumption
[  152.860234][ T5086] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1
[  152.870566][ T5086] Bluetooth: hci1: unexpected event for opcode 0x2039
[  153.834049][ T6367] xt_CT: No such helper "snmp"
[  153.897565][ T6383] loop1: detected capacity change from 0 to 256
[  153.958508][ T6383] exfat: Deprecated parameter 'namecase'
[  154.030035][ T6383] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  154.890460][ T6390] loop1: detected capacity change from 0 to 4096
[  155.032735][ T6390] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  155.058049][ T6390] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  155.087965][ T6390] ntfs3: loop1: failed to replay log file. Can't mount rw!
[  156.713018][ T6401] loop1: detected capacity change from 0 to 4096
[  156.759314][ T6402] Can't find a SQUASHFS superblock on nullb0
[  156.767229][ T5086] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1
[  156.776643][ T5086] Bluetooth: hci0: unexpected event for opcode 0x2039
[  156.963419][ T5086] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  156.972384][ T5086] Bluetooth: hci1: Injecting HCI hardware error event
[  156.983183][ T5086] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1
[  156.990307][ T5086] Bluetooth: hci1: unexpected event for opcode 0x2039
[  157.000881][ T5086] Bluetooth: hci1: hardware error 0x00
[  157.559367][   T27] audit: type=1800 audit(1750458294.569:163): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.146" name="file1" dev="loop1" ino=33 res=0 errno=0
[  157.586508][ T6401] ntfs3: loop1: ino=21, "file1" attr_insert_range
[  157.708698][ T6410] loop0: detected capacity change from 0 to 256
[  157.727040][ T6410] exfat: Deprecated parameter 'namecase'
[  157.822738][ T6410] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  157.965324][ T6415] random: crng reseeded on system resumption
[  159.026398][ T5086] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  160.060469][ T6432] xt_CT: No such helper "snmp"
[  160.075395][ T6420] xt_CT: No such helper "snmp"
[  160.187592][ T6430] random: crng reseeded on system resumption
[  160.622993][ T6442] Zero length message leads to an empty skb
[  160.643220][   T27] audit: type=1326 audit(1750458297.629:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  160.686217][   T27] audit: type=1326 audit(1750458297.629:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  160.718081][   T27] audit: type=1326 audit(1750458297.629:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  160.806815][ T5086] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  160.815798][ T5086] Bluetooth: hci0: Injecting HCI hardware error event
[  160.826027][ T5086] Bluetooth: hci0: hardware error 0x00
[  161.277884][   T27] audit: type=1326 audit(1750458297.629:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  161.300494][   T27] audit: type=1326 audit(1750458297.639:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  161.323430][   T27] audit: type=1326 audit(1750458297.639:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  161.347150][   T27] audit: type=1326 audit(1750458297.639:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  161.369785][   T27] audit: type=1326 audit(1750458297.639:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  161.392600][   T27] audit: type=1326 audit(1750458297.639:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb59f98e929 code=0x7ffc0000
[  162.865066][ T5086] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  163.611265][ T6463] pim6reg1: entered promiscuous mode
[  163.635379][ T6463] pim6reg1: entered allmulticast mode
[  163.830020][ T6469] random: crng reseeded on system resumption
[  164.487255][ T6472] xt_CT: No such helper "snmp"
[  169.122578][ T6508] loop0: detected capacity change from 0 to 16
[  169.129948][ T6508] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  172.636434][ T6525] loop0: detected capacity change from 0 to 64
[  173.387518][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.893209][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.160404][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.577704][ T6550] loop3: detected capacity change from 0 to 65
[  175.617605][ T6550] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  175.873103][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.453137][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.465589][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.474289][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.610765][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  176.622008][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  176.633319][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  177.472420][ T6562] Bluetooth: MGMT ver 1.22
[  177.669623][ T6564] ubi: mtd0 is already attached to ubi31
[  178.096116][ T6564] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  178.102200][ T6564] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  178.116860][ T6564] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  178.251766][ T6571] loop0: detected capacity change from 0 to 4096
[  179.995098][ T5776] Bluetooth: hci3: command 0x041b tx timeout
[  181.001747][ T6552] chnl_net:caif_netlink_parms(): no params data found
[  181.276905][ T6610] loop3: detected capacity change from 0 to 65
[  181.481179][ T6610] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  182.236140][ T5776] Bluetooth: hci3: command 0x041b tx timeout
[  183.099153][ T6621] loop0: detected capacity change from 0 to 32768
[  183.745650][ T6621] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 75 has invalid tree depth 2304 in extent list
[  183.765937][ T6621] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  183.775946][ T6621] OCFS2: Returning error to the calling process.
[  183.782295][ T6621] (syz.0.203,6621,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  183.789947][ T6621] (syz.0.203,6621,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  183.798370][ T6621] (syz.0.203,6621,0):ocfs2_get_clusters:624 ERROR: status = -30
[  183.806114][ T6621] (syz.0.203,6621,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  183.814557][ T6621] (syz.0.203,6621,0):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 0
[  183.823153][ T6621] (syz.0.203,6621,0):ocfs2_bmap:488 ERROR: status = -30
[  183.830196][ T6621] jbd2_journal_init_inode: Cannot locate journal superblock
[  183.837724][ T6621] (syz.0.203,6621,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  183.846548][ T6621] (syz.0.203,6621,0):ocfs2_check_volume:2405 ERROR: Could not initialize journal!
[  183.855785][ T6621] (syz.0.203,6621,0):ocfs2_check_volume:2490 ERROR: status = -22
[  183.863515][ T6621] (syz.0.203,6621,0):ocfs2_mount_volume:1822 ERROR: status = -22
[  183.874586][ T6621] (syz.0.203,6621,0):ocfs2_fill_super:1178 ERROR: status = -22
[  183.954028][ T6625] ubi: mtd0 is already attached to ubi31
[  184.439852][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.464808][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.535393][ T6637] loop2: detected capacity change from 0 to 16
[  184.542571][ T6637] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  186.106182][ T6625] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  186.115579][ T6552] bridge_slave_0: entered allmulticast mode
[  186.126590][ T6552] bridge_slave_0: entered promiscuous mode
[  186.146146][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.165200][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.185160][ T6552] bridge_slave_1: entered allmulticast mode
[  186.197181][ T6552] bridge_slave_1: entered promiscuous mode
[  186.306522][ T5776] Bluetooth: hci3: command 0x041b tx timeout
[  186.417973][ T6633] 
: renamed from bond0 (while UP)
[  186.519840][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.756810][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.889647][ T6552] team0: Port device team_slave_0 added
[  187.325589][ T6552] team0: Port device team_slave_1 added
[  187.676239][   T11] hsr_slave_0: left promiscuous mode
[  187.725712][   T11] hsr_slave_1: left promiscuous mode
[  187.746963][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.754508][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.785043][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.792526][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.821353][   T11] bridge_slave_1: left allmulticast mode
[  187.830503][   T11] bridge_slave_1: left promiscuous mode
[  187.838322][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.853145][   T11] bridge_slave_0: left allmulticast mode
[  187.862670][   T11] bridge_slave_0: left promiscuous mode
[  187.871767][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.968421][   T11] veth1_macvtap: left promiscuous mode
[  187.985250][   T11] veth0_macvtap: left promiscuous mode
[  187.991014][   T11] veth1_vlan: left promiscuous mode
[  188.155894][   T11] veth0_vlan: left promiscuous mode
[  188.385038][ T5776] Bluetooth: hci3: command 0x041b tx timeout
[  189.507263][ T6678] loop2: detected capacity change from 0 to 512
[  189.507694][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  189.524723][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  189.536318][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  189.639495][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  189.651107][ T6678] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.216: casefold flag without casefold feature
[  189.675097][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  189.689862][ T6678] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.216: couldn't read orphan inode 15 (err -117)
[  189.710279][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  189.758808][ T6678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.927494][   T27] kauditd_printk_skb: 32 callbacks suppressed
[  189.927509][   T27] audit: type=1800 audit(1750458326.949:205): pid=6683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.216" name="bus" dev="loop2" ino=19 res=0 errno=0
[  190.055047][   T27] audit: type=1804 audit(1750458327.069:206): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.216" name="/newroot/52/file1/bus" dev="loop2" ino=19 res=1 errno=0
[  190.299756][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.465946][ T5086] Bluetooth: hci3: command 0x041b tx timeout
[  190.580704][ T6688] loop2: detected capacity change from 0 to 16
[  190.588152][ T6688] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  192.216552][ T5086] Bluetooth: hci2: command tx timeout
[  192.548514][ T5086] Bluetooth: hci3: command 0x041b tx timeout
[  192.753054][   T11] team0 (unregistering): Port device team_slave_1 removed
[  193.809101][ T6696] loop3: detected capacity change from 0 to 32768
[  193.864362][ T6696] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 75 has invalid tree depth 2304 in extent list
[  193.885119][ T6696] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  193.895068][ T6696] OCFS2: Returning error to the calling process.
[  193.902328][ T6696] (syz.3.218,6696,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  193.910501][ T6696] (syz.3.218,6696,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  193.918893][ T6696] (syz.3.218,6696,0):ocfs2_get_clusters:624 ERROR: status = -30
[  193.926668][ T6696] (syz.3.218,6696,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  193.935146][ T6696] (syz.3.218,6696,0):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 0
[  193.943696][ T6696] (syz.3.218,6696,0):ocfs2_bmap:488 ERROR: status = -30
[  193.950834][ T6696] jbd2_journal_init_inode: Cannot locate journal superblock
[  193.958180][ T6696] (syz.3.218,6696,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  193.967026][ T6696] (syz.3.218,6696,0):ocfs2_check_volume:2405 ERROR: Could not initialize journal!
[  193.976290][ T6696] (syz.3.218,6696,0):ocfs2_check_volume:2490 ERROR: status = -22
[  193.984046][ T6696] (syz.3.218,6696,0):ocfs2_mount_volume:1822 ERROR: status = -22
[  193.997198][ T6696] (syz.3.218,6696,0):ocfs2_fill_super:1178 ERROR: status = -22
[  194.042451][   T11] team0 (unregistering): Port device team_slave_0 removed
[  194.111196][   T11] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.225210][ T5086] Bluetooth: hci2: command tx timeout
[  194.339464][   T11] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.471287][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  194.540852][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  195.639487][   T11] 
 (unregistering): Released all slaves
[  195.758723][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.766063][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.794404][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.826008][  T787] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  195.915922][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.922946][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.950484][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.067067][  T787] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.101400][  T787] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.114171][  T787] usb 4-1: config 0 interface 0 has no altsetting 0
[  196.133458][  T787] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  196.163344][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.207434][  T787] usb 4-1: config 0 descriptor??
[  196.214409][ T6552] hsr_slave_0: entered promiscuous mode
[  196.255654][ T6552] hsr_slave_1: entered promiscuous mode
[  196.277178][ T6552] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  196.301130][ T6552] Cannot create hsr debugfs directory
[  196.308147][ T5086] Bluetooth: hci2: command tx timeout
[  196.888869][  T787] usbhid 4-1:0.0: can't add hid device: -71
[  196.997130][  T787] usbhid: probe of 4-1:0.0 failed with error -71
[  197.079861][  T787] usb 4-1: USB disconnect, device number 4
[  198.701387][ T6736] loop2: detected capacity change from 0 to 32768
[  198.720097][ T5086] Bluetooth: hci2: command tx timeout
[  198.749108][ T6736] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 75 has invalid tree depth 2304 in extent list
[  198.768166][ T6736] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  198.778061][ T6736] OCFS2: Returning error to the calling process.
[  198.784411][ T6736] (syz.2.225,6736,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  198.791982][ T6736] (syz.2.225,6736,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  198.800394][ T6736] (syz.2.225,6736,0):ocfs2_get_clusters:624 ERROR: status = -30
[  198.808083][ T6736] (syz.2.225,6736,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  198.817494][ T6736] (syz.2.225,6736,0):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 0
[  198.826104][ T6736] (syz.2.225,6736,0):ocfs2_bmap:488 ERROR: status = -30
[  198.833076][ T6736] jbd2_journal_init_inode: Cannot locate journal superblock
[  198.840435][ T6736] (syz.2.225,6736,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  198.849304][ T6736] (syz.2.225,6736,0):ocfs2_check_volume:2405 ERROR: Could not initialize journal!
[  198.858596][ T6736] (syz.2.225,6736,0):ocfs2_check_volume:2490 ERROR: status = -22
[  198.866512][ T6736] (syz.2.225,6736,0):ocfs2_mount_volume:1822 ERROR: status = -22
[  198.883272][ T6736] (syz.2.225,6736,0):ocfs2_fill_super:1178 ERROR: status = -22
[  199.035252][ T5781] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  199.350456][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.519541][ T6748] loop3: detected capacity change from 0 to 16
[  199.531073][ T6748] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  200.302996][ T6675] chnl_net:caif_netlink_parms(): no params data found
[  200.454115][ T6748] 
: renamed from bond0 (while UP)
[  200.617432][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.909040][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.449548][ T6552] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  201.628849][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.704444][ T6552] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  201.735680][ T6552] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  201.799344][ T6552] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  202.096439][ T6675] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.137310][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.144640][ T6675] bridge_slave_0: entered allmulticast mode
[  203.185451][ T6675] bridge_slave_0: entered promiscuous mode
[  203.221125][ T6675] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.244450][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.265172][ T6675] bridge_slave_1: entered allmulticast mode
[  203.283073][ T6675] bridge_slave_1: entered promiscuous mode
[  203.356175][ T6791] loop2: detected capacity change from 0 to 16
[  203.368685][ T6791] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  204.561091][ T6675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.204069][ T6675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.292170][ T6809] overlayfs: failed to resolve './file0': -2
[  205.417820][ T6675] team0: Port device team_slave_0 added
[  205.473524][ T6675] team0: Port device team_slave_1 added
[  205.645439][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.652469][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.734495][ T6675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.769560][ T6817] loop2: detected capacity change from 0 to 4096
[  205.876405][ T6675] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.884671][ T6675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.936903][ T6675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.220919][ T6675] hsr_slave_0: entered promiscuous mode
[  206.230410][ T6675] hsr_slave_1: entered promiscuous mode
[  206.237763][ T6675] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.246173][ T6675] Cannot create hsr debugfs directory
[  206.500228][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.628551][ T6552] 8021q: adding VLAN 0 to HW filter on device team0
[  207.311737][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.318997][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.359193][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.366453][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.376931][ T6835] overlayfs: failed to resolve './file0': -2
[  207.619306][ T6675] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  207.659249][ T6675] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  207.707940][ T6675] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  207.736088][ T6675] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  207.840384][ T6845] loop2: detected capacity change from 0 to 4096
[  207.988366][ T6854] loop3: detected capacity change from 0 to 512
[  208.000347][ T6854] EXT4-fs: Ignoring removed mblk_io_submit option
[  208.007013][ T6854] EXT4-fs: Ignoring removed bh option
[  208.015499][ T6854] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  208.420400][ T6854] EXT4-fs (loop3): 1 truncate cleaned up
[  208.431686][ T6854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.638773][   T27] audit: type=1800 audit(1750458345.569:207): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.253" name="bus" dev="loop3" ino=18 res=0 errno=0
[  208.732309][   T27] audit: type=1804 audit(1750458345.579:208): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.253" name="/newroot/78/bus/bus" dev="loop3" ino=18 res=1 errno=0
[  208.792406][   T11] hsr_slave_0: left promiscuous mode
[  208.810646][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.841809][   T11] hsr_slave_1: left promiscuous mode
[  208.885243][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.892775][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.953023][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.975353][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.017240][   T11] bridge_slave_1: left allmulticast mode
[  209.057446][   T11] bridge_slave_1: left promiscuous mode
[  209.216998][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.615634][   T11] bridge_slave_0: left allmulticast mode
[  209.625290][   T11] bridge_slave_0: left promiscuous mode
[  209.631138][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.767424][   T11] veth1_macvtap: left promiscuous mode
[  209.784023][   T11] veth0_macvtap: left promiscuous mode
[  209.810597][   T11] veth1_vlan: left promiscuous mode
[  209.864340][   T11] veth0_vlan: left promiscuous mode
[  211.810629][ T6886] loop2: detected capacity change from 0 to 2048
[  211.889525][ T6886] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  211.897452][ T5781] udevd[5781]: incorrect nilfs2 checksum on /dev/loop2
[  211.950284][ T6887] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  212.189459][   T11] team0 (unregistering): Port device team_slave_1 removed
[  212.260855][   T11] team0 (unregistering): Port device team_slave_0 removed
[  212.360070][   T11] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.437186][   T11] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.507546][ T6891] loop2: detected capacity change from 0 to 512
[  212.517476][ T6891] EXT4-fs: Ignoring removed mblk_io_submit option
[  212.524057][ T6891] EXT4-fs: Ignoring removed bh option
[  212.544247][ T6891] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  212.790931][ T6891] EXT4-fs (loop2): 1 truncate cleaned up
[  212.803944][ T6891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.904857][   T27] audit: type=1804 audit(1750458349.889:209): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.261" name="/newroot/76/bus/bus" dev="loop2" ino=18 res=1 errno=0
[  213.019456][   T27] audit: type=1800 audit(1750458349.889:210): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.261" name="bus" dev="loop2" ino=18 res=0 errno=0
[  213.039808][    C0] vkms_vblank_simulate: vblank timer overrun
[  213.437002][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.649225][   T11] 
 (unregistering): Released all slaves
[  214.826042][ T6868] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  214.832151][ T6868] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  214.869576][ T6868] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  214.917165][ T6868] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  215.078970][ T6905] loop2: detected capacity change from 0 to 512
[  215.091262][ T6905] EXT4-fs: Ignoring removed mblk_io_submit option
[  215.097959][ T6905] EXT4-fs: Ignoring removed bh option
[  215.137917][ T6905] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  215.182881][ T6675] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.249717][ T6905] EXT4-fs (loop2): 1 truncate cleaned up
[  215.264399][ T6905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.923616][ T6675] 8021q: adding VLAN 0 to HW filter on device team0
[  215.983999][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.991268][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.083338][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.109924][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.117202][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.865266][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout
[  216.865557][ T5086] Bluetooth: hci3: command 0x041b tx timeout
[  217.320124][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.503003][ T6934] pim6reg1: entered promiscuous mode
[  217.516021][ T6934] pim6reg1: entered allmulticast mode
[  217.648218][ T6675] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.955041][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout
[  219.185369][ T6952] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  219.213745][ T6952] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  219.565849][ T6960] loop3: detected capacity change from 0 to 512
[  219.578078][ T6960] EXT4-fs: Ignoring removed mblk_io_submit option
[  219.584673][ T6960] EXT4-fs: Ignoring removed bh option
[  219.595323][ T6960] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  219.969427][ T6960] EXT4-fs (loop3): 1 truncate cleaned up
[  220.040385][ T6960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.500357][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.627688][ T6552] veth0_vlan: entered promiscuous mode
[  220.690894][ T6552] veth1_vlan: entered promiscuous mode
[  220.885505][ T5086] Bluetooth: hci3: command 0x041b tx timeout
[  221.266408][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout
[  221.282843][ T6977] loop3: detected capacity change from 0 to 16
[  221.296184][ T6977] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  221.363016][ T6552] veth0_macvtap: entered promiscuous mode
[  221.410395][ T6552] veth1_macvtap: entered promiscuous mode
[  221.587314][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  221.628734][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.660629][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  221.681970][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.694304][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0
[  221.746592][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.761067][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.773944][ T6552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.792777][ T6552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.818396][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1
[  221.877634][ T6675] veth0_vlan: entered promiscuous mode
[  221.896024][ T6552] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.909480][ T6552] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.919819][ T6552] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.929129][ T6552] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.957450][ T6675] veth1_vlan: entered promiscuous mode
[  222.104487][ T6675] veth0_macvtap: entered promiscuous mode
[  222.154623][ T6675] veth1_macvtap: entered promiscuous mode
[  222.187970][   T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.219682][   T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.254626][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.278500][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.289473][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.300428][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.311345][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.324324][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.337626][ T6675] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.368061][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.396686][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.418045][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.442806][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.458279][ T6675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.482427][ T6675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.506769][ T6675] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.529592][ T4085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.575181][ T4085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.588913][ T6675] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.651962][ T6675] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.685441][ T6675] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.694263][ T6675] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.931485][ T7002] ubi: mtd0 is already attached to ubi31
[  224.641634][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.687730][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.975429][ T7019] loop3: detected capacity change from 0 to 512
[  224.986515][ T7019] EXT4-fs: Ignoring removed mblk_io_submit option
[  224.993117][ T7019] EXT4-fs: Ignoring removed bh option
[  225.012473][ T7019] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  225.156952][ T4093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.305222][ T4093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.376378][ T7019] EXT4-fs (loop3): 1 truncate cleaned up
[  225.388264][ T7019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.969429][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.644710][ T7031] loop3: detected capacity change from 0 to 512
[  226.655633][ T7031] EXT4-fs: Ignoring removed mblk_io_submit option
[  226.662221][ T7031] EXT4-fs: Ignoring removed bh option
[  228.865007][ T7031] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  229.159957][ T7031] EXT4-fs (loop3): 1 truncate cleaned up
[  229.259262][ T7031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.328766][   T27] audit: type=1804 audit(1750458366.349:211): pid=7030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.282" name="/newroot/89/bus/bus" dev="loop3" ino=18 res=1 errno=0
[  229.595557][   T27] audit: type=1800 audit(1750458366.349:212): pid=7030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.282" name="bus" dev="loop3" ino=18 res=0 errno=0
[  229.682722][ T7030] Invalid ELF header magic: != ELF
[  230.600335][ T7045] loop5: detected capacity change from 0 to 32768
[  231.837016][ T7048] loop4: detected capacity change from 0 to 16
[  231.844369][ T7048] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  231.859821][ T7048] 
: renamed from bond0 (while UP)
[  232.309121][ T7045] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 75 has invalid tree depth 2304 in extent list
[  232.328232][ T7045] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  232.338251][ T7045] OCFS2: Returning error to the calling process.
[  232.344598][ T7045] (syz.5.212,7045,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  232.352254][ T7045] (syz.5.212,7045,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  232.360677][ T7045] (syz.5.212,7045,0):ocfs2_get_clusters:624 ERROR: status = -30
[  232.368376][ T7045] (syz.5.212,7045,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  232.377984][ T7045] (syz.5.212,7045,0):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 0
[  232.386580][ T7045] (syz.5.212,7045,0):ocfs2_bmap:488 ERROR: status = -30
[  232.393549][ T7045] jbd2_journal_init_inode: Cannot locate journal superblock
[  232.400890][ T7045] (syz.5.212,7045,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  232.410327][ T7045] (syz.5.212,7045,0):ocfs2_check_volume:2405 ERROR: Could not initialize journal!
[  232.419589][ T7045] (syz.5.212,7045,0):ocfs2_check_volume:2490 ERROR: status = -22
[  232.427370][ T7045] (syz.5.212,7045,0):ocfs2_mount_volume:1822 ERROR: status = -22
[  232.436600][ T7045] (syz.5.212,7045,0):ocfs2_fill_super:1178 ERROR: status = -22
[  232.555464][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.896974][ T7056] ubi: mtd0 is already attached to ubi31
[  236.074086][ T7090] loop3: detected capacity change from 0 to 16
[  236.081551][ T7090] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  236.522388][ T7094] loop4: detected capacity change from 0 to 512
[  236.532914][ T7094] EXT4-fs: Ignoring removed mblk_io_submit option
[  236.539582][ T7094] EXT4-fs: Ignoring removed bh option
[  237.337113][ T7094] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  237.826503][ T7094] EXT4-fs (loop4): 1 truncate cleaned up
[  237.858399][ T7094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.164673][   T27] audit: type=1804 audit(1750458374.989:213): pid=7094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.297" name="/newroot/7/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  238.546691][   T27] audit: type=1800 audit(1750458374.989:214): pid=7094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.297" name="bus" dev="loop4" ino=18 res=0 errno=0
[  238.779372][ T7094] Invalid ELF header magic: != ELF
[  239.219329][ T6552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.899917][ T7119] loop4: detected capacity change from 0 to 512
[  240.910413][ T7119] EXT4-fs: Ignoring removed mblk_io_submit option
[  240.917010][ T7119] EXT4-fs: Ignoring removed bh option
[  240.972863][ T7119] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  241.250639][ T7119] EXT4-fs (loop4): 1 truncate cleaned up
[  241.264012][ T7119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.133905][ T6552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.775483][ T7143] loop5: detected capacity change from 0 to 512
[  242.785793][ T7143] EXT4-fs: Ignoring removed mblk_io_submit option
[  242.792418][ T7143] EXT4-fs: Ignoring removed bh option
[  244.633016][ T7143] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  245.249721][ T7143] EXT4-fs (loop5): 1 truncate cleaned up
[  245.270374][ T7143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.441795][ T7156] loop4: detected capacity change from 0 to 16
[  245.482791][   T27] audit: type=1804 audit(1750458382.499:215): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.308" name="/newroot/7/bus/bus" dev="loop5" ino=18 res=1 errno=0
[  245.496251][ T7156] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  245.727510][ T7141] Invalid ELF header magic: != ELF
[  245.918476][   T27] audit: type=1800 audit(1750458382.499:216): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.308" name="bus" dev="loop5" ino=18 res=0 errno=0
[  245.938978][    C1] vkms_vblank_simulate: vblank timer overrun
[  246.279156][ T6675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.709071][ T7170] loop2: detected capacity change from 0 to 512
[  246.718741][ T7170] EXT4-fs: Ignoring removed mblk_io_submit option
[  246.725381][ T7170] EXT4-fs: Ignoring removed bh option
[  246.941283][ T7170] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  247.235233][ T7170] EXT4-fs (loop2): 1 truncate cleaned up
[  247.284182][ T7170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.669007][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.133406][ T7222] loop4: detected capacity change from 0 to 512
[  252.143401][ T7222] EXT4-fs: Ignoring removed mblk_io_submit option
[  252.150051][ T7222] EXT4-fs: Ignoring removed bh option
[  252.164968][ T7222] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  252.324542][ T7222] EXT4-fs (loop4): 1 truncate cleaned up
[  252.335021][ T7222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.724122][ T7229] loop5: detected capacity change from 0 to 4096
[  253.817951][ T6552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.975575][ T5086] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1
[  254.984176][ T5086] Bluetooth: hci2: unexpected event for opcode 0x2039
[  255.762540][ T7260] Can't find a SQUASHFS superblock on nullb0
[  255.805255][ T5086] Bluetooth: hci3: unexpected cc 0x2039 length: 9 > 1
[  255.813244][ T5086] Bluetooth: hci3: unexpected event for opcode 0x2039
[  255.919594][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  255.929229][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  256.286724][ T7275] loop5: detected capacity change from 0 to 512
[  256.301559][ T7275] EXT4-fs: Ignoring removed mblk_io_submit option
[  256.308435][ T7275] EXT4-fs: Ignoring removed bh option
[  256.327951][ T7275] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  259.057524][ T5086] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  259.066296][ T5086] Bluetooth: hci2: Injecting HCI hardware error event
[  259.073948][ T5086] Bluetooth: hci2: hardware error 0x00
[  259.399655][ T7275] EXT4-fs (loop5): 1 truncate cleaned up
[  259.503554][ T7275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.761276][ T7289] loop3: detected capacity change from 0 to 4096
[  259.781871][ T6675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.953306][ T5776] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  259.963372][ T5776] Bluetooth: hci3: Injecting HCI hardware error event
[  259.980164][ T5784] Bluetooth: hci3: hardware error 0x00
[  261.067612][ T7297] loop4: detected capacity change from 0 to 32768
[  261.109160][ T5086] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  261.170476][ T7297] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 75 has invalid tree depth 2304 in extent list
[  261.190299][ T7297] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  261.200170][ T7297] OCFS2: Returning error to the calling process.
[  261.206531][ T7297] (syz.4.339,7297,1):ocfs2_find_leaf:1941 ERROR: status = -30
[  261.214006][ T7297] (syz.4.339,7297,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  261.222451][ T7297] (syz.4.339,7297,1):ocfs2_get_clusters:624 ERROR: status = -30
[  261.230189][ T7297] (syz.4.339,7297,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  261.238675][ T7297] (syz.4.339,7297,1):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 0
[  261.247217][ T7297] (syz.4.339,7297,1):ocfs2_bmap:488 ERROR: status = -30
[  261.254164][ T7297] jbd2_journal_init_inode: Cannot locate journal superblock
[  261.261513][ T7297] (syz.4.339,7297,1):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  261.270418][ T7297] (syz.4.339,7297,1):ocfs2_check_volume:2405 ERROR: Could not initialize journal!
[  261.279676][ T7297] (syz.4.339,7297,1):ocfs2_check_volume:2490 ERROR: status = -22
[  261.288084][ T7297] (syz.4.339,7297,1):ocfs2_mount_volume:1822 ERROR: status = -22
[  261.297109][ T7297] (syz.4.339,7297,1):ocfs2_fill_super:1178 ERROR: status = -22
[  261.514199][ T7303] loop5: detected capacity change from 0 to 512
[  261.525363][ T7303] EXT4-fs: Ignoring removed mblk_io_submit option
[  261.531914][ T7303] EXT4-fs: Ignoring removed bh option
[  261.696505][ T7303] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  261.855832][ T7303] EXT4-fs (loop5): 1 truncate cleaned up
[  261.867112][ T7303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.998165][   T27] audit: type=1804 audit(1750458398.969:217): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.340" name="/newroot/17/bus/bus" dev="loop5" ino=18 res=1 errno=0
[  262.065200][ T5784] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  262.210680][   T27] audit: type=1800 audit(1750458398.969:218): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.340" name="bus" dev="loop5" ino=18 res=0 errno=0
[  262.419218][ T6675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.089358][ T7350] loop4: detected capacity change from 0 to 64
[  267.089188][ T7356] loop2: detected capacity change from 0 to 32768
[  267.780386][ T7356] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 75 has invalid tree depth 2304 in extent list
[  267.799613][ T7356] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  267.809500][ T7356] OCFS2: Returning error to the calling process.
[  267.815917][ T7356] (syz.2.350,7356,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  267.823384][ T7356] (syz.2.350,7356,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  267.831789][ T7356] (syz.2.350,7356,0):ocfs2_get_clusters:624 ERROR: status = -30
[  267.840126][ T7356] (syz.2.350,7356,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  267.848677][ T7356] (syz.2.350,7356,0):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 0
[  267.857235][ T7356] (syz.2.350,7356,0):ocfs2_bmap:488 ERROR: status = -30
[  267.864193][ T7356] jbd2_journal_init_inode: Cannot locate journal superblock
[  267.871686][ T7356] (syz.2.350,7356,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  267.880553][ T7356] (syz.2.350,7356,0):ocfs2_check_volume:2405 ERROR: Could not initialize journal!
[  267.889833][ T7356] (syz.2.350,7356,0):ocfs2_check_volume:2490 ERROR: status = -22
[  267.897732][ T7356] (syz.2.350,7356,0):ocfs2_mount_volume:1822 ERROR: status = -22
[  267.906880][ T7356] (syz.2.350,7356,0):ocfs2_fill_super:1178 ERROR: status = -22
[  268.606084][ T7368] loop4: detected capacity change from 0 to 4096
[  270.141868][ T7387] loop2: detected capacity change from 0 to 512
[  270.233057][ T7387] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.357: iget: bad extended attribute block 1
[  270.282173][ T7387] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.357: couldn't read orphan inode 15 (err -117)
[  270.383577][ T7387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.341952][ T7402] loop4: detected capacity change from 0 to 16
[  271.349363][ T7402] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  273.402317][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.128972][ T7446] loop3: detected capacity change from 0 to 16
[  277.136423][ T7446] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  277.484441][ T7442] loop5: detected capacity change from 0 to 512
[  278.007833][ T7442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.106935][ T7442] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  279.752705][ T7462] loop4: detected capacity change from 0 to 32768
[  280.339907][ T6675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.360525][ T7462] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 75 has invalid tree depth 2304 in extent list
[  280.379582][ T7462] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  280.389465][ T7462] OCFS2: Returning error to the calling process.
[  280.395872][ T7462] (syz.4.372,7462,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  280.403341][ T7462] (syz.4.372,7462,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  280.411754][ T7462] (syz.4.372,7462,0):ocfs2_get_clusters:624 ERROR: status = -30
[  280.419588][ T7462] (syz.4.372,7462,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  280.428188][ T7462] (syz.4.372,7462,0):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 0
[  280.437426][ T7462] (syz.4.372,7462,0):ocfs2_bmap:488 ERROR: status = -30
[  280.444384][ T7462] jbd2_journal_init_inode: Cannot locate journal superblock
[  280.451733][ T7462] (syz.4.372,7462,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  280.460568][ T7462] (syz.4.372,7462,0):ocfs2_check_volume:2405 ERROR: Could not initialize journal!
[  280.469826][ T7462] (syz.4.372,7462,0):ocfs2_check_volume:2490 ERROR: status = -22
[  280.477602][ T7462] (syz.4.372,7462,0):ocfs2_mount_volume:1822 ERROR: status = -22
[  280.489149][ T7464] loop3: detected capacity change from 0 to 16
[  280.496432][ T7464] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  280.516214][ T7462] (syz.4.372,7462,0):ocfs2_fill_super:1178 ERROR: status = -22
[  280.960371][ T7471] overlayfs: missing 'lowerdir'
[  281.204684][ T7477] binfmt_misc: register: failed to install interpreter file ./file0
[  283.342455][ T7481] loop4: detected capacity change from 0 to 2048
[  283.517223][ T7481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.577184][ T7481] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.682871][ T7485] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  283.688687][ T7489] loop2: detected capacity change from 0 to 64
[  283.831598][ T6552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.465679][ T7496] loop2: detected capacity change from 0 to 4096
[  284.497528][ T7496] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  284.623973][ T7496] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  284.786981][ T7496] ntfs3: loop2: failed to convert "c46c" to iso8859-7
[  285.942810][ T7513] syz.4.382 uses obsolete (PF_INET,SOCK_PACKET)
[  286.790719][ T7517] loop3: detected capacity change from 0 to 512
[  286.873660][ T7519] overlayfs: missing 'lowerdir'
[  286.925428][ T7517] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.383: casefold flag without casefold feature
[  286.963715][ T7517] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.383: couldn't read orphan inode 15 (err -117)
[  287.007694][ T7517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.712677][   T27] audit: type=1800 audit(1750458424.699:219): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.383" name="bus" dev="loop3" ino=18 res=0 errno=0
[  287.756426][   T27] audit: type=1804 audit(1750458424.769:220): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.383" name="/newroot/113/file1/bus" dev="loop3" ino=18 res=1 errno=0
[  288.044642][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.537685][ T7545] loop3: detected capacity change from 0 to 64
[  289.783101][ T7555] loop2: detected capacity change from 0 to 16
[  289.808929][ T7555] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  290.258619][ T7561] loop5: detected capacity change from 0 to 16
[  290.271496][ T7561] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  290.323927][ T7561] 
: renamed from bond0 (while UP)
[  290.982050][ T7572] overlayfs: missing 'lowerdir'
[  291.227258][ T7576] loop3: detected capacity change from 0 to 64
[  293.308074][ T7601] loop4: detected capacity change from 0 to 64
[  293.419393][ T7592] loop3: detected capacity change from 0 to 32768
[  293.704628][ T7592] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  294.056223][ T7610] overlayfs: missing 'lowerdir'
[  294.068468][ T7592] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  294.610210][ T7627] loop2: detected capacity change from 0 to 256
[  294.682793][ T7622] 
[  294.685206][ T7622] ======================================================
[  294.692244][ T7622] WARNING: possible circular locking dependency detected
[  294.699282][ T7622] 6.6.94-syzkaller #0 Not tainted
[  294.704310][ T7622] ------------------------------------------------------
[  294.711337][ T7622] syz.3.401/7622 is trying to acquire lock:
[  294.717233][ T7622] ffff88805c36a608 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_setattr+0x95a/0x1b20
[  294.726236][ T7622] 
[  294.726236][ T7622] but task is already holding lock:
[  294.733602][ T7622] ffff888060c5a2e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_setattr+0x94b/0x1b20
[  294.743900][ T7622] 
[  294.743900][ T7622] which lock already depends on the new lock.
[  294.743900][ T7622] 
[  294.754432][ T7622] 
[  294.754432][ T7622] the existing dependency chain (in reverse order) is:
[  294.763487][ T7622] 
[  294.763487][ T7622] -> #4 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  294.772335][ T7622]        down_write+0x97/0x1f0
[  294.777247][ T7622]        ocfs2_try_remove_refcount_tree+0xb7/0x320
[  294.783803][ T7622]        ocfs2_xattr_set+0x596/0x11f0
[  294.789235][ T7622]        ocfs2_set_acl+0x4e1/0x590
[  294.794393][ T7622]        ocfs2_iop_set_acl+0x1ab/0x2a0
[  294.799890][ T7622]        vfs_remove_acl+0x4e3/0x740
[  294.805204][ T7622]        ovl_workdir_create+0x409/0x760
[  294.810770][ T7622]        ovl_get_workdir+0x300/0x1740
[  294.816159][ T7622]        ovl_fill_super+0x1345/0x3560
[  294.821547][ T7622]        get_tree_nodev+0xb5/0x140
[  294.826679][ T7622]        vfs_get_tree+0x8c/0x280
[  294.831633][ T7622]        do_new_mount+0x24b/0xa40
[  294.836675][ T7622]        __se_sys_mount+0x2da/0x3c0
[  294.841897][ T7622]        do_syscall_64+0x55/0xb0
[  294.846859][ T7622]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  294.853305][ T7622] 
[  294.853305][ T7622] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}:
[  294.861241][ T7622]        down_read+0x46/0x2e0
[  294.865945][ T7622]        ocfs2_init_acl+0x2fa/0x720
[  294.871165][ T7622]        ocfs2_mknod+0x12e5/0x20f0
[  294.876298][ T7622]        ocfs2_create+0x196/0x410
[  294.881341][ T7622]        path_openat+0x1277/0x3190
[  294.886473][ T7622]        do_filp_open+0x1c5/0x3d0
[  294.891516][ T7622]        do_sys_openat2+0x12c/0x1c0
[  294.896738][ T7622]        __x64_sys_openat+0x139/0x160
[  294.902134][ T7622]        do_syscall_64+0x55/0xb0
[  294.907096][ T7622]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  294.913903][ T7622] 
[  294.913903][ T7622] -> #2 (jbd2_handle){++++}-{0:0}:
[  294.921245][ T7622]        start_this_handle+0x1e9d/0x20c0
[  294.926925][ T7622]        jbd2__journal_start+0x2bb/0x5b0
[  294.932585][ T7622]        jbd2_journal_start+0x2a/0x40
[  294.938002][ T7622]        ocfs2_start_trans+0x376/0x6c0
[  294.943485][ T7622]        ocfs2_mknod+0xe47/0x20f0
[  294.948539][ T7622]        ocfs2_create+0x196/0x410
[  294.953605][ T7622]        path_openat+0x1277/0x3190
[  294.958754][ T7622]        do_filp_open+0x1c5/0x3d0
[  294.963797][ T7622]        do_sys_openat2+0x12c/0x1c0
[  294.969298][ T7622]        __x64_sys_open+0x11f/0x140
[  294.974528][ T7622]        do_syscall_64+0x55/0xb0
[  294.979495][ T7622]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  294.985950][ T7622] 
[  294.985950][ T7622] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  294.994496][ T7622]        down_read+0x46/0x2e0
[  294.999202][ T7622]        ocfs2_start_trans+0x36a/0x6c0
[  295.004681][ T7622]        ocfs2_mknod+0xe47/0x20f0
[  295.009756][ T7622]        ocfs2_create+0x196/0x410
[  295.014795][ T7622]        path_openat+0x1277/0x3190
[  295.020110][ T7622]        do_filp_open+0x1c5/0x3d0
[  295.025164][ T7622]        do_sys_openat2+0x12c/0x1c0
[  295.030397][ T7622]        __x64_sys_open+0x11f/0x140
[  295.035631][ T7622]        do_syscall_64+0x55/0xb0
[  295.040607][ T7622]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  295.047047][ T7622] 
[  295.047047][ T7622] -> #0 (sb_internal#2){.+.+}-{0:0}:
[  295.054550][ T7622]        __lock_acquire+0x2ddb/0x7c80
[  295.059945][ T7622]        lock_acquire+0x197/0x410
[  295.065009][ T7622]        ocfs2_start_trans+0x26b/0x6c0
[  295.070482][ T7622]        ocfs2_setattr+0x95a/0x1b20
[  295.075718][ T7622]        notify_change+0xb0d/0xe10
[  295.080870][ T7622]        ovl_workdir_create+0x5de/0x760
[  295.086445][ T7622]        ovl_get_workdir+0x300/0x1740
[  295.091835][ T7622]        ovl_fill_super+0x1345/0x3560
[  295.097225][ T7622]        get_tree_nodev+0xb5/0x140
[  295.102353][ T7622]        vfs_get_tree+0x8c/0x280
[  295.107304][ T7622]        do_new_mount+0x24b/0xa40
[  295.112342][ T7622]        __se_sys_mount+0x2da/0x3c0
[  295.117556][ T7622]        do_syscall_64+0x55/0xb0
[  295.122528][ T7622]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  295.128980][ T7622] 
[  295.128980][ T7622] other info that might help us debug this:
[  295.128980][ T7622] 
[  295.139243][ T7622] Chain exists of:
[  295.139243][ T7622]   sb_internal#2 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key
[  295.139243][ T7622] 
[  295.153437][ T7622]  Possible unsafe locking scenario:
[  295.153437][ T7622] 
[  295.160895][ T7622]        CPU0                    CPU1
[  295.166276][ T7622]        ----                    ----
[  295.171646][ T7622]   lock(&ocfs2_file_ip_alloc_sem_key);
[  295.177241][ T7622]                                lock(&oi->ip_xattr_sem);
[  295.184385][ T7622]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  295.192468][ T7622]   rlock(sb_internal#2);
[  295.196819][ T7622] 
[  295.196819][ T7622]  *** DEADLOCK ***
[  295.196819][ T7622] 
[  295.204974][ T7622] 5 locks held by syz.3.401/7622:
[  295.210055][ T7622]  #0: ffff88806b4760e0 (&type->s_umount_key#57/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x920
[  295.220206][ T7622]  #1: ffff88805c36a418 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  295.229462][ T7622]  #2: ffff888060fd2658 (&sb->s_type->i_mutex_key#24/1){+.+.}-{3:3}, at: ovl_workdir_create+0x150/0x760
[  295.240661][ T7622]  #3: ffff888060c5a658 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: ovl_workdir_create+0x557/0x760
[  295.252180][ T7622]  #4: ffff888060c5a2e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_setattr+0x94b/0x1b20
[  295.262917][ T7622] 
[  295.262917][ T7622] stack backtrace:
[  295.268830][ T7622] CPU: 0 PID: 7622 Comm: syz.3.401 Not tainted 6.6.94-syzkaller #0
[  295.276735][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  295.286832][ T7622] Call Trace:
[  295.290133][ T7622]  <TASK>
[  295.293138][ T7622]  dump_stack_lvl+0x16c/0x230
[  295.297937][ T7622]  ? load_image+0x3b0/0x3b0
[  295.302460][ T7622]  ? show_regs_print_info+0x20/0x20
[  295.307685][ T7622]  ? print_circular_bug+0x12b/0x1a0
[  295.312909][ T7622]  check_noncircular+0x2bd/0x3c0
[  295.317880][ T7622]  ? print_deadlock_bug+0x5d0/0x5d0
[  295.323103][ T7622]  ? lockdep_lock+0xe0/0x220
[  295.327817][ T7622]  ? _find_first_zero_bit+0xd3/0x100
[  295.333146][ T7622]  __lock_acquire+0x2ddb/0x7c80
[  295.338037][ T7622]  ? verify_lock_unused+0x140/0x140
[  295.343263][ T7622]  ? verify_lock_unused+0x140/0x140
[  295.348477][ T7622]  ? verify_lock_unused+0x140/0x140
[  295.353699][ T7622]  lock_acquire+0x197/0x410
[  295.358219][ T7622]  ? ocfs2_setattr+0x95a/0x1b20
[  295.363104][ T7622]  ? __might_sleep+0xe0/0xe0
[  295.367714][ T7622]  ? do_raw_spin_lock+0x121/0x2c0
[  295.372757][ T7622]  ? read_lock_is_recursive+0x20/0x20
[  295.378148][ T7622]  ? __rwlock_init+0x150/0x150
[  295.382935][ T7622]  ? do_raw_spin_unlock+0x121/0x230
[  295.388163][ T7622]  ocfs2_start_trans+0x26b/0x6c0
[  295.393204][ T7622]  ? ocfs2_setattr+0x95a/0x1b20
[  295.398080][ T7622]  ? ocfs2_recovery_exit+0x50/0x50
[  295.403212][ T7622]  ? setattr_prepare+0x1e6/0xac0
[  295.408176][ T7622]  ocfs2_setattr+0x95a/0x1b20
[  295.412884][ T7622]  ? ocfs2_extend_allocation+0x1760/0x1760
[  295.418715][ T7622]  ? ktime_get_coarse_real_ts64+0x3a/0x120
[  295.424540][ T7622]  ? seqcount_lockdep_reader_access+0x176/0x1c0
[  295.430807][ T7622]  ? ktime_get_coarse_real_ts64+0x110/0x120
[  295.436726][ T7622]  ? current_time+0x18e/0x270
[  295.441427][ T7622]  ? inode_set_ctime_current+0x2d0/0x2d0
[  295.447080][ T7622]  ? down_write+0x162/0x1f0
[  295.451610][ T7622]  ? evm_inode_setattr+0x94/0x6a0
[  295.456830][ T7622]  ? bpf_lsm_inode_setattr+0x9/0x10
[  295.462048][ T7622]  ? try_break_deleg+0x79/0x120
[  295.466940][ T7622]  ? ocfs2_extend_allocation+0x1760/0x1760
[  295.472823][ T7622]  notify_change+0xb0d/0xe10
[  295.477450][ T7622]  ovl_workdir_create+0x5de/0x760
[  295.482509][ T7622]  ? ovl_statfs+0x2f0/0x2f0
[  295.487049][ T7622]  ? rcu_read_lock_any_held+0xb4/0x120
[  295.492525][ T7622]  ? __mnt_want_write+0x223/0x2a0
[  295.497569][ T7622]  ovl_get_workdir+0x300/0x1740
[  295.502439][ T7622]  ? ovl_fill_super+0x3560/0x3560
[  295.507484][ T7622]  ? ovl_inuse_trylock+0xbd/0xd0
[  295.512444][ T7622]  ? __lock_acquire+0x7c80/0x7c80
[  295.517486][ T7622]  ? __rwlock_init+0x150/0x150
[  295.522353][ T7622]  ? clone_mnt+0xa10/0xc60
[  295.526788][ T7622]  ? do_raw_spin_unlock+0x121/0x230
[  295.532008][ T7622]  ? _raw_spin_unlock+0x28/0x40
[  295.536921][ T7622]  ? ovl_inuse_trylock+0xbd/0xd0
[  295.541887][ T7622]  ovl_fill_super+0x1345/0x3560
[  295.546799][ T7622]  ? ida_alloc_range+0x79e/0x830
[  295.551758][ T7622]  ? virtio_fs_zero_page_range+0x140/0x140
[  295.557699][ T7622]  ? sget_fc+0x7f0/0x8d0
[  295.561974][ T7622]  ? __lock_acquire+0x7c80/0x7c80
[  295.567208][ T7622]  ? down_write+0x162/0x1f0
[  295.571756][ T7622]  ? down_read_killable+0x340/0x340
[  295.576991][ T7622]  ? sget_fc+0x7f0/0x8d0
[  295.581284][ T7622]  ? kill_litter_super+0xb0/0xb0
[  295.586266][ T7622]  ? virtio_fs_zero_page_range+0x140/0x140
[  295.592555][ T7622]  get_tree_nodev+0xb5/0x140
[  295.597180][ T7622]  vfs_get_tree+0x8c/0x280
[  295.601622][ T7622]  do_new_mount+0x24b/0xa40
[  295.606146][ T7622]  __se_sys_mount+0x2da/0x3c0
[  295.610848][ T7622]  ? __x64_sys_mount+0xc0/0xc0
[  295.615630][ T7622]  ? lockdep_hardirqs_on+0x98/0x150
[  295.620867][ T7622]  ? __x64_sys_mount+0x20/0xc0
[  295.625664][ T7622]  do_syscall_64+0x55/0xb0
[  295.630103][ T7622]  ? clear_bhb_loop+0x40/0x90
[  295.634794][ T7622]  ? clear_bhb_loop+0x40/0x90
[  295.639485][ T7622]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  295.645411][ T7622] RIP: 0033:0x7f64ad38e929
[  295.649856][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.669578][ T7622] RSP: 002b:00007f64ae1c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  295.678035][ T7622] RAX: ffffffffffffffda RBX: 00007f64ad5b6240 RCX: 00007f64ad38e929
[  295.686035][ T7622] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  295.694034][ T7622] RBP: 00007f64ad410b39 R08: 0000200000000a00 R09: 0000000000000000
[  295.702032][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.710031][ T7622] R13: 0000000000000001 R14: 00007f64ad5b6240 R15: 00007ffeef025738
[  295.718031][ T7622]  </TASK>
[  295.743558][ T7622] overlayfs: upper fs does not support tmpfile.
[  295.751923][ T7622] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  295.769005][ T7622] overlayfs: failed to set xattr on upper
[  295.803137][ T7627] FAT-fs (loop2): Directory bread(block 64) failed
[  295.816080][ T7622] overlayfs: ...falling back to redirect_dir=nofollow.
[  295.819390][ T7627] FAT-fs (loop2): Directory bread(block 65) failed
[  295.823007][ T7622] overlayfs: ...falling back to index=off.
[  295.835604][ T7622] overlayfs: ...falling back to uuid=null.
[  295.841919][ T7622] overlayfs: upper fs missing required features.
[  295.873267][ T7627] FAT-fs (loop2): Directory bread(block 66) failed
[  295.890873][ T7627] FAT-fs (loop2): Directory bread(block 67) failed
[  295.898829][ T7627] FAT-fs (loop2): Directory bread(block 68) failed
[  295.905833][ T7627] FAT-fs (loop2): Directory bread(block 69) failed
[  295.913008][ T7627] FAT-fs (loop2): Directory bread(block 70) failed
[  295.920206][ T7627] FAT-fs (loop2): Directory bread(block 71) failed
[  295.928854][ T7627] FAT-fs (loop2): Directory bread(block 72) failed
[  295.936490][ T7627] FAT-fs (loop2): Directory bread(block 73) failed
[  295.949028][ T5768] ocfs2: Unmounting device (7,3) on (node local)
[  296.184632][ T7631] Can't find a SQUASHFS superblock on nullb0