last executing test programs:

2m33.255878166s ago: executing program 3 (id=45):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1529fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

2m33.133547988s ago: executing program 3 (id=47):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e20, 0x3, 'dh\x00', 0x362b1e0022c07b6a, 0x2, 0x6a}, 0x2c)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast1, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@multicast2, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44)

2m33.025201001s ago: executing program 3 (id=50):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00')
fchdir(r1)
sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004)

2m32.875097624s ago: executing program 3 (id=53):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x4004, &(0x7f0000005800)={[{@adaptive_mode}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x64}}, {@noinline_xattr}, {@fault_type={'fault_type', 0x3d, 0x5}}, {@fastboot}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@fastboot}]}, 0x21, 0x5533, &(0x7f00000002c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x14a0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m31.540839752s ago: executing program 3 (id=67):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff88a84900810031000800450000240068000004069078ac1e000100d3000000000000000010907801cc9863d6"], 0x0)

2m29.544015823s ago: executing program 3 (id=82):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x17, 0x2, {0x28, "0000000000000000000100ff00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040005}, 0x4040004)

2m29.293316728s ago: executing program 32 (id=82):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x17, 0x2, {0x28, "0000000000000000000100ff00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040005}, 0x4040004)

31.163393105s ago: executing program 2 (id=1630):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000881}, 0x4)

31.107316846s ago: executing program 2 (id=1631):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x40, 0x2, [@TCA_FW_ACT={0x3c, 0x4, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0xfffffffffffffc51, 0x3, 0x6a64}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

30.488458379s ago: executing program 2 (id=1639):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x80, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0x6}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x405, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x80}, 0x1, 0x30000, 0x0, 0x1d4}, 0x8840)

30.311740432s ago: executing program 2 (id=1643):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000080)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {@auto_da_alloc}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x48d, &(0x7f0000000980)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==")
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
sendfile(r0, r0, 0x0, 0x2000007ff)

29.42898048s ago: executing program 2 (id=1651):
r0 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0x8b)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f00000020c0)='ro\x00', 0x0, 0x0)

29.087354978s ago: executing program 2 (id=1653):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1000000, &(0x7f0000000280)=ANY=[], 0x1, 0xd99, &(0x7f00000007c0)="$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")
r0 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103)
lseek(r0, 0xf, 0x1)
getdents(r0, 0x0, 0x0)

28.853085962s ago: executing program 33 (id=1653):
syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1000000, &(0x7f0000000280)=ANY=[], 0x1, 0xd99, &(0x7f00000007c0)="$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")
r0 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103)
lseek(r0, 0xf, 0x1)
getdents(r0, 0x0, 0x0)

8.053061093s ago: executing program 0 (id=1912):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c0000000190001000000000008000000fe888000000000000000000000000101ffffffff000000000000000000000000000000004e2300000a00"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x40)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0)

7.969482775s ago: executing program 0 (id=1913):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper, 0x1})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@host, 0x43265bf6a85c3f84})

7.913373036s ago: executing program 0 (id=1915):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0)

7.817912318s ago: executing program 0 (id=1919):
mkdir(&(0x7f0000000140)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1000, 0x0)

7.729789239s ago: executing program 0 (id=1921):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1018000, &(0x7f00000021c0)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRES8, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x5e7, &(0x7f0000000680)="$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")
truncate(&(0x7f0000000000)='./file1\x00', 0x4edd)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f0000000400)={0x7}, 0x2000)

7.25079292s ago: executing program 0 (id=1926):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0), 0x4)
connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a)

6.76151347s ago: executing program 34 (id=1926):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0), 0x4)
connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a)

3.104854406s ago: executing program 6 (id=1959):
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000006c0)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0)
write(r0, &(0x7f0000000780)='aut', 0x3)

2.87538802s ago: executing program 6 (id=1961):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xc}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000019}, 0x0)

2.39141828s ago: executing program 1 (id=1966):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300d0000400ffff10ffffff08021100000050505050505000000010"], 0x44}}, 0x8000)

1.738486344s ago: executing program 5 (id=1976):
r0 = gettid()
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)=<r1=>0x0)
timer_settime(r1, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0)

1.721211924s ago: executing program 4 (id=1977):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={0x64, r1, 0x1, 0x70bd2a, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7c19d52276"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]]}, 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

1.571903707s ago: executing program 5 (id=1978):
mkdir(&(0x7f00000004c0)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='dir0\x00', &(0x7f0000000540)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x103a42, 0x4)
mount$9p_fd(0x0, &(0x7f00000005c0)='dir0/per_cpu/cpu0/trace_pipe\x00', &(0x7f0000000600), 0x1, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

1.570555737s ago: executing program 6 (id=1979):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000180)=[{0x6, 0x6, 0x2, 0x5a5}]})
openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0)
close(0x3)

1.508664608s ago: executing program 1 (id=1980):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80f}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x7f, 0x4, "918d2aea"}, 0xc)

1.507348319s ago: executing program 4 (id=1981):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300b020ff00080211000001080211000000505050505050"], 0x40}, 0x1, 0x0, 0x0, 0x4018010}, 0x804)

1.308616073s ago: executing program 1 (id=1982):
r0 = memfd_create(&(0x7f0000000280)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x21011, r0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000009100000000000000010a000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000a40)='GPL\x00', 0x7, 0x1000, &(0x7f0000000a80)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x7c)

1.197751805s ago: executing program 5 (id=1983):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c0002"], 0xf4}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0))

1.197618815s ago: executing program 4 (id=1984):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000c0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ff"], 0x184}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)

1.157697136s ago: executing program 5 (id=1985):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000009c0)=ANY=[@ANYBLOB="680000000303010400000000000000000700000008000340000000030800034000000f39080003400000172e0c000200000000000000000308000340000000080c000200fffffffb"], 0x68}, 0x1, 0x0, 0x0, 0xc800}, 0x8000)

1.145008756s ago: executing program 1 (id=1986):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1'])
chdir(&(0x7f0000000300)='./file0\x00')
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x1)

1.065935808s ago: executing program 4 (id=1987):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x4, 0x4}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)='%pK    \x00'}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

985.316359ms ago: executing program 1 (id=1988):
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x100042, 0x0, 0x0, 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000040)={{&(0x7f0000000280)=[{0x3, 0x0, 0x9, {0xfffffffffffffff7, 0x2}, 0x58, 0xffffffffffffc}], 0x1, 0x40, 0xd, 0xde}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}})

983.814999ms ago: executing program 5 (id=1989):
r0 = socket(0x1e, 0x805, 0x0)
connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x10)
connect$tipc(r0, &(0x7f0000000600)=@name={0x1e, 0x2, 0x3, {{0x0, 0x2}, 0x2}}, 0x10)
close(r0)

890.789181ms ago: executing program 4 (id=1990):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000030601010000006800000000020000080500010007"], 0x40}, 0x1, 0x0, 0x0, 0x2000c045}, 0x8000)

837.569602ms ago: executing program 5 (id=1991):
timer_create(0x3, 0x0, &(0x7f0000044000))
prlimit64(0x0, 0xf, &(0x7f0000000600)={0x9, 0x120000008b}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_read_part_table(0x4095, &(0x7f0000000a80)="$eJzs071KK0EUAOCT3CL3hwtRfIDtRBBdY0wrKhYWMUUqwUZEISAR/CONjW/jI/kAvoKdrJhdY1xYg2AjfF9zZuacHYadOf8e77ciorZ6PRyMoqQeEdl4tFmPqEVEu8jUSpV/iniWf1Uv78QMz1mWfVxp5n/592Th6Gkcbu+KeWM6WVJxAYtzEftJRPy9eljY+Y5z88M1lg7yQfariK8vsdzfb8XTk/+zN9/b7ia93W6Sdjqt/lor+aT0MH+yaZqm741QcYwZqa9oVGbmm/3TUXJzcnE5OB8mGyvry0nveFLermw9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF7YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24IAEAAAAQND/1+0IFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICfAgAA//+YJSBd")

621.708817ms ago: executing program 6 (id=1992):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004)
fadvise64(r0, 0x401, 0xffffffff, 0x3)

475.20373ms ago: executing program 6 (id=1993):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6394bc11539d"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

473.76896ms ago: executing program 4 (id=2002):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x50)
pwrite64(r0, &(0x7f0000000180)='\x00', 0x1, 0xfecc)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x4aa42, 0x178)

264.017405ms ago: executing program 6 (id=1994):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0xfffffffe, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x4e, &(0x7f0000001600)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @dev}}}}}}, 0x0)

0s ago: executing program 1 (id=1995):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0x7, 0xfffffffc, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18)

kernel console output (not intermixed with test programs):

sion 1 is supported (got: 0)
[  132.675189][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  132.682908][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  132.694166][ T1337] usb 2-1: USB disconnect, device number 2
[  132.703968][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.691'.
[  132.894174][ T6341] loop4: detected capacity change from 0 to 512
[  132.987796][ T6341] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022]
[  132.997284][ T6341] System zones: 1-12
[  133.003724][ T6341] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.693: Directory hole found for htree index block 0
[  133.024210][ T6341] EXT4-fs (loop4): Remounting filesystem read-only
[  133.032945][ T6341] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[  133.041617][ T6341] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.693: Directory hole found for htree index block 0
[  133.055911][ T6341] EXT4-fs (loop4): Remounting filesystem read-only
[  133.064165][ T6341] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  133.072955][ T6341] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jblock_validity,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback.
[  133.189193][ T6341] EXT4-fs (loop4): shut down requested (2)
[  133.587582][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.620784][ T6368] device batadv_slave_0 entered promiscuous mode
[  133.703178][ T6368] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  133.859974][   T26] audit: type=1807 audit(1792101999.244:36): action=measure uid>+ res=0
[  133.885433][ T6383] ima: policy update failed
[  133.895141][   T26] audit: type=1802 audit(1792101999.274:37): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.712" res=0 errno=0
[  133.967858][   T26] audit: type=1802 audit(1792101999.324:38): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.712" res=0 errno=0
[  134.223932][ T6401] tipc: Enabling of bearer <Eth:s> rejected, media not registered
[  134.269453][ T6400] loop0: detected capacity change from 0 to 2048
[  134.425732][ T6400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.590294][ T6420] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.728'.
[  134.726687][ T6419] loop2: detected capacity change from 0 to 4096
[  134.746447][ T6426] loop1: detected capacity change from 0 to 512
[  134.817911][ T6426] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  134.860874][ T6426] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  134.914083][ T6426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  134.937858][ T6434] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.962184][ T6426] System zones: 1-12
[  134.997610][ T6436] loop4: detected capacity change from 0 to 1024
[  135.021160][ T6426] EXT4-fs (loop1): 1 truncate cleaned up
[  135.049499][ T6426] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none.
[  135.174350][ T6436] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  135.204988][ T6436] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  135.303615][ T6436] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback.
[  135.809209][ T6449] loop2: detected capacity change from 0 to 4096
[  135.870281][ T6459] loop4: detected capacity change from 0 to 2048
[  135.946193][ T6459] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  135.966708][ T6461] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.011580][ T5448] udevd[5448]: incorrect nilfs2 checksum on /dev/loop4
[  136.026774][ T6457] loop0: detected capacity change from 0 to 4096
[  136.049353][ T6463] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.162189][ T6459] attempt to access beyond end of device
[  136.162189][ T6459] loop4: rw=0, want=3122, limit=2048
[  136.221461][ T6459] Buffer I/O error on dev loop4, logical block 1560, async page read
[  136.229802][ T6467] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.233251][ T6466] loop2: detected capacity change from 0 to 64
[  136.278360][ T6457] NILFS error (device loop0): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1
[  136.296139][ T6459] attempt to access beyond end of device
[  136.296139][ T6459] loop4: rw=0, want=3122, limit=2048
[  136.327647][ T6457] Remounting filesystem read-only
[  136.337462][ T6459] Buffer I/O error on dev loop4, logical block 1560, async page read
[  136.390171][   T26] audit: type=1800 audit(1792102001.774:39): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.747" name="file2" dev="loop4" ino=16 res=0 errno=0
[  136.400876][ T6466] CacheFiles: Can't set xattr on cache [21] (err 95)
[  136.495098][ T6466] CacheFiles: Failed to register: -95
[  136.852296][ T6481] loop5: detected capacity change from 0 to 512
[  136.957981][ T6481] EXT4-fs error (device loop5): __ext4_iget:4919: inode #11: block 1: comm syz.5.753: invalid block
[  137.046893][ T6481] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.753: couldn't read orphan inode 11 (err -117)
[  137.099002][ T6481] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  137.171699][ T6481] EXT4-fs error (device loop5): ext4_add_entry:2488: inode #2: comm syz.5.753: Directory hole found for htree leaf block 0
[  137.468551][ T6496] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.761: bad orphan inode 15
[  137.525231][ T6496] ext4_test_bit(bit=14, block=5) = 0
[  137.600552][ T6496] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none.
[  137.720804][ T6496] EXT4-fs (loop2): shut down requested (2)
[  137.891854][ T6511] openvswitch: netlink: Actions may not be safe on all matching packets
[  138.338162][ T6536] set_capacity_and_notify: 2 callbacks suppressed
[  138.338178][ T6536] loop2: detected capacity change from 0 to 512
[  138.435433][ T6536] EXT4-fs (loop2): Ignoring removed nobh option
[  138.452698][ T6536] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  138.538988][ T6536] EXT4-fs (loop2): 1 truncate cleaned up
[  138.548278][ T6536] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nobh,data_err=ignore,nolazytime,norecovery,acl,,errors=continue. Quota mode: none.
[  138.582102][ T6544] netlink: 'syz.1.781': attribute type 1 has an invalid length.
[  138.649542][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.780'.
[  138.882737][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.784'.
[  139.007489][ T6524] loop4: detected capacity change from 0 to 32768
[  139.126007][ T6557] Set syz1 is full, maxelem 246 reached
[  139.240208][ T6524] XFS (loop4): Mounting V5 Filesystem
[  139.419974][ T6524] XFS (loop4): Ending clean mount
[  139.524646][ T4201] XFS (loop4): Unmounting Filesystem
[  139.683445][ T6583] loop1: detected capacity change from 0 to 128
[  139.799422][ T6583] FAT-fs (loop1): Directory bread(block 32) failed
[  139.816463][ T6583] FAT-fs (loop1): Directory bread(block 33) failed
[  139.837667][ T6583] FAT-fs (loop1): Directory bread(block 34) failed
[  139.898353][ T6583] FAT-fs (loop1): Directory bread(block 35) failed
[  139.930023][ T6583] FAT-fs (loop1): Directory bread(block 36) failed
[  139.964191][ T6583] FAT-fs (loop1): Directory bread(block 37) failed
[  140.000647][ T6583] FAT-fs (loop1): Directory bread(block 38) failed
[  140.007284][ T6583] FAT-fs (loop1): Directory bread(block 39) failed
[  140.037731][ T6583] FAT-fs (loop1): Directory bread(block 40) failed
[  140.056359][ T6583] FAT-fs (loop1): Directory bread(block 41) failed
[  140.324603][ T6604] loop2: detected capacity change from 0 to 1024
[  140.456026][ T6604] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #3: block 1: comm syz.2.804: lblock 1 mapped to illegal pblock 1 (length 1)
[  140.521778][ T6604] EXT4-fs (loop2): Remounting filesystem read-only
[  140.530739][ T6604] Quota error (device loop2): write_blk: dquota write failed
[  140.538326][ T6604] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  140.640829][ T6604] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.804: Failed to acquire dquot type 0
[  140.655050][ T6604] EXT4-fs (loop2): Remounting filesystem read-only
[  140.670990][ T6604] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.804: Freeing blocks not in datazone - block = 0, count = 4096
[  140.699697][ T6604] EXT4-fs (loop2): Remounting filesystem read-only
[  140.716149][ T6604] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.804: Invalid inode bitmap blk 0 in block_group 0
[  140.740939][ T4739] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  140.781592][ T6604] EXT4-fs (loop2): Remounting filesystem read-only
[  140.788814][ T4739] EXT4-fs (loop2): Remounting filesystem read-only
[  140.797058][ T6604] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  140.805917][ T4739] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  140.832364][ T4739] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0
[  140.851363][ T6604] EXT4-fs (loop2): Remounting filesystem read-only
[  140.858060][ T6604] EXT4-fs (loop2): 1 orphan inode deleted
[  140.884891][ T4739] EXT4-fs (loop2): Remounting filesystem read-only
[  140.885432][ T6604] EXT4-fs (loop2): mounted filesystem without journal. Opts: ��; acl,noblock_validity,journal_dev=0x000000000000000f,max_batch_time=0x00000000000008c9,block_validity,errors=remount-ro,. Quota mode: writeback.
[  140.921610][ T6627] loop5: detected capacity change from 0 to 24
[  140.949006][ T6627] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  140.977787][ T6627] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  141.004213][   T26] audit: type=1400 audit(1792102006.394:40): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6629 comm="syz.4.817" name="p" offset=53
[  141.117929][ T6633] netlink: 40 bytes leftover after parsing attributes in process `syz.1.818'.
[  141.220041][ T6638] loop0: detected capacity change from 0 to 1024
[  141.355701][ T6638] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  141.460355][ T6638] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,init_itable,nouid32,bsddf,journal_dev=0x0000000000000d76,nomblk_io_submit,delalloc,nolazytime,. Quota mode: none.
[  141.516992][ T6638] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.545300][ T6638] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz.0.820: path /175/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[  141.578990][ T6638] EXT4-fs (loop0): Remounting filesystem read-only
[  141.607797][ T6661] loop2: detected capacity change from 0 to 512
[  141.685033][ T6661] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  141.728888][ T6661] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002]
[  141.739664][ T6661] EXT4-fs (loop2): orphan cleanup on readonly fs
[  141.748137][ T6661] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.830: bg 0: block 15: invalid block bitmap
[  141.777458][ T6659] loop4: detected capacity change from 0 to 4096
[  141.821230][ T6661] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  141.838540][ T6661] EXT4-fs (loop2): 1 truncate cleaned up
[  141.845728][ T6661] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noload,noblock_validity,dioread_lock,nouid32,data_err=ignore,,errors=continue. Quota mode: none.
[  141.895864][ T6659] ntfs3: loop4: Failed to load $Extend.
[  141.923853][ T6661] EXT4-fs (loop2): shut down requested (1)
[  142.086146][ T4201] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  142.100805][ T4201] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  142.232880][ T6676] kAFS: bad VL server IP address
[  142.605778][ T6702] block2mtd: parameter too long
[  143.428026][ T6731] loop4: detected capacity change from 0 to 512
[  143.562577][ T6731] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.865: iget: bad i_size value: 38620345925642
[  143.602096][ T6731] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.865: couldn't read orphan inode 15 (err -117)
[  143.683566][ T6731] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,grpjquota=,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback.
[  143.719199][ T6719] loop1: detected capacity change from 0 to 32768
[  143.815843][ T6719] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #29: signature = 
[  143.846822][ T6719] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  143.859230][  T144] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:1: bg 0: block 5: invalid block bitmap
[  143.900278][ T6719] OCFS2: Returning error to the calling process.
[  143.920248][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'.
[  143.940198][ T6719] (syz.1.858,6719,1):ocfs2_read_locked_inode:554 ERROR: status = -5
[  143.951176][  T144] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28
[  143.983543][ T6719] (syz.1.858,6719,1):_ocfs2_get_system_file_inode:141 ERROR: status = -5
[  144.021041][  T144] EXT4-fs (loop4): This should not happen!! Data will be lost
[  144.021041][  T144] 
[  144.031778][ T6719] (syz.1.858,6719,0):ocfs2_init_local_system_inodes:493 ERROR: status=-30, sysfile=12, slot=0
[  144.061571][  T144] EXT4-fs (loop4): Total free blocks count 0
[  144.079870][  T144] EXT4-fs (loop4): Free/Dirty block details
[  144.081486][ T6719] (syz.1.858,6719,0):ocfs2_init_local_system_inodes:502 ERROR: status = -30
[  144.107174][  T144] EXT4-fs (loop4): free_blocks=0
[  144.137352][ T6719] (syz.1.858,6719,0):ocfs2_mount_volume:1818 ERROR: status = -30
[  144.146678][  T144] EXT4-fs (loop4): dirty_blocks=1
[  144.162536][  T144] EXT4-fs (loop4): Block reservation details
[  144.182811][  T144] EXT4-fs (loop4): i_reserved_data_blocks=1
[  144.194477][ T6719] (syz.1.858,6719,0):ocfs2_fill_super:1177 ERROR: status = -30
[  144.222273][ T6750] netlink: 332 bytes leftover after parsing attributes in process `syz.2.873'.
[  144.307723][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'.
[  144.400599][ T6750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.873'.
[  144.484602][ T6756] loop5: detected capacity change from 0 to 4096
[  144.532009][ T6756] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  144.576843][ T6756] ntfs3: loop5: try to read out of volume at offset 0xffffffff0000
[  144.635674][ T6764] loop2: detected capacity change from 0 to 8
[  144.715066][ T6764] SQUASHFS error: zlib decompression failed, data probably corrupt
[  144.841847][ T6764] SQUASHFS error: Failed to read block 0x9b: -5
[  144.866388][ T6764] SQUASHFS error: Unable to read metadata cache entry [99]
[  144.890650][ T4571] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  144.920654][ T6764] SQUASHFS error: Unable to read inode 0x127
[  145.119482][ T6764] loop2: detected capacity change from 0 to 256
[  145.207394][ T6784] loop1: detected capacity change from 0 to 2048
[  145.222189][ T6783] loop0: detected capacity change from 0 to 512
[  145.290854][ T4571] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  145.320812][ T4571] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  145.339735][ T6784] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  145.357226][ T6784] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.368308][ T4571] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 62, changing to 9
[  145.391191][ T4571] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33721, setting to 1024
[  145.409988][ T4571] usb 6-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00
[  145.419995][ T4571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.460878][ T6756] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  145.468068][ T6756] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  145.552681][ T6613] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  145.615201][ T6772] loop4: detected capacity change from 0 to 40427
[  145.661309][ T6772] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  145.694987][ T6772] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  145.719643][ T6772] F2FS-fs (loop4): build fault injection attr: rate: 2, type: 0x1ffff
[  145.728489][ T5786] usb 6-1: USB disconnect, device number 4
[  145.732588][ T4194] Bluetooth: hci5: Failed to get device id (-71)
[  145.773371][ T6772] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8
[  145.837938][ T6772] F2FS-fs (loop4): invalid crc value
[  145.968108][ T6772] F2FS-fs (loop4): Found nat_bits in checkpoint
[  146.165306][ T6772] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  146.184093][ T6772] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  146.284236][ T6772] F2FS-fs (loop4): switch discard_unit option is not allowed
[  146.327489][ T6772] F2FS-fs (loop4) : inject too big dir depth in f2fs_add_regular_entry of f2fs_do_add_link+0x344/0x640
[  146.445476][ T6806] loop5: detected capacity change from 0 to 128
[  146.525263][ T6806] VFS: Found a Xenix FS (block size = 1024) on device loop5
[  146.698616][ T4552] sysv_free_block: flc_count > flc_size
[  146.737116][ T4552] sysv_free_block: flc_count > flc_size
[  146.758193][ T4552] sysv_free_block: flc_count > flc_size
[  146.784041][ T4552] sysv_free_block: flc_count > flc_size
[  146.789644][ T4552] sysv_free_block: flc_count > flc_size
[  146.808030][ T4552] sysv_free_block: flc_count > flc_size
[  146.826572][ T4552] sysv_free_block: flc_count > flc_size
[  146.839579][ T4552] sysv_free_block: flc_count > flc_size
[  146.855824][ T4552] sysv_free_block: flc_count > flc_size
[  146.870916][ T4552] sysv_free_block: flc_count > flc_size
[  146.881924][ T4552] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  147.360712][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.522630][ T6838] loop2: detected capacity change from 0 to 64
[  148.503412][ T6865] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  148.552634][ T6840] loop5: detected capacity change from 0 to 32768
[  148.967167][ T6879] loop2: detected capacity change from 0 to 512
[  149.272874][ T6888] loop0: detected capacity change from 0 to 1024
[  149.298579][ T6879] EXT4-fs error (device loop2): __ext4_iget:4919: inode #11: block 1: comm syz.2.922: invalid block
[  149.397860][ T6879] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.922: couldn't read orphan inode 11 (err -117)
[  149.557074][ T6879] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  149.705789][ T6879] EXT4-fs error (device loop2): ext4_add_entry:2488: inode #2: comm syz.2.922: Directory hole found for htree leaf block 0
[  149.903306][ T6907] loop1: detected capacity change from 0 to 24
[  149.973129][ T6907] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  150.065928][ T6907] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  150.857071][ T6905] loop5: detected capacity change from 0 to 40427
[  150.919165][ T6905] F2FS-fs (loop5): invalid crc value
[  150.983254][ T6905] F2FS-fs (loop5): Found nat_bits in checkpoint
[  151.140576][ T6905] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  151.251318][ T6905] F2FS-fs (loop5): Inconsistent error blkaddr:5633, sit bitmap:0
[  151.259133][ T6905] CPU: 0 PID: 6905 Comm: syz.5.933 Not tainted syzkaller #0
[  151.266459][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  151.276590][ T6905] Call Trace:
[  151.279900][ T6905]  <TASK>
[  151.282863][ T6905]  dump_stack_lvl+0x188/0x250
[  151.287583][ T6905]  ? show_regs_print_info+0x20/0x20
[  151.292821][ T6905]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  151.298690][ T6905]  f2fs_is_valid_blkaddr+0xc4a/0x1260
[  151.304123][ T6905]  f2fs_map_blocks+0xc34/0x3630
[  151.309061][ T6905]  ? f2fs_force_buffered_io+0x680/0x680
[  151.314665][ T6905]  ? xa_load+0x276/0x2a0
[  151.318951][ T6905]  f2fs_mpage_readpages+0xcaf/0x22a0
[  151.324303][ T6905]  ? dquot_release_reservation_block+0xa0/0xa0
[  151.330524][ T6905]  ? f2fs_is_compress_backend_ready+0x99/0x120
[  151.336719][ T6905]  ? f2fs_readahead+0x163/0x2f0
[  151.341609][ T6905]  ? f2fs_set_data_page_dirty+0xae0/0xae0
[  151.347370][ T6905]  read_pages+0x172/0x920
[  151.347667][ T6939] block2mtd: parameter too long
[  151.351741][ T6905]  ? page_cache_ra_unbounded+0x8f0/0x8f0
[  151.362289][ T6905]  ? add_to_page_cache_lru+0x2ad/0x4a0
[  151.367798][ T6905]  page_cache_ra_unbounded+0x7f4/0x8f0
[  151.373318][ T6905]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[  151.379871][ T6905]  ? blk_cgroup_congested+0x30b/0x390
[  151.385290][ T6905]  f2fs_readdir+0x496/0xd90
[  151.389864][ T6905]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  151.395102][ T6905]  ? end_current_label_crit_section+0x14b/0x170
[  151.401387][ T6905]  ? iterate_dir+0x10d/0x550
[  151.406012][ T6905]  ? down_read_killable+0x1ce/0x340
[  151.411247][ T6905]  ? fsnotify_perm+0x254/0x560
[  151.416087][ T6905]  iterate_dir+0x213/0x550
[  151.420543][ T6905]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  151.425783][ T6905]  __se_sys_getdents+0xf2/0x260
[  151.430684][ T6905]  ? __x64_sys_getdents+0x80/0x80
[  151.435739][ T6905]  ? fillonedir+0x4c0/0x4c0
[  151.440297][ T6905]  ? lockdep_hardirqs_on+0x94/0x140
[  151.445542][ T6905]  do_syscall_64+0x4c/0xa0
[  151.450004][ T6905]  ? clear_bhb_loop+0x30/0x80
[  151.454721][ T6905]  ? clear_bhb_loop+0x30/0x80
[  151.459528][ T6905]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  151.465475][ T6905] RIP: 0033:0x7f7ff11f2559
[  151.469940][ T6905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.489580][ T6905] RSP: 002b:00007f7fef44a028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  151.498123][ T6905] RAX: ffffffffffffffda RBX: 00007f7ff1479fa0 RCX: 00007f7ff11f2559
[  151.506137][ T6905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  151.514150][ T6905] RBP: 00007f7ff12898b0 R08: 0000000000000000 R09: 0000000000000000
[  151.522166][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.530351][ T6905] R13: 00007f7ff147a038 R14: 00007f7ff1479fa0 R15: 00007ffc5b5803a8
[  151.538382][ T6905]  </TASK>
[  152.150638][ T6905] F2FS-fs (loop5): Inconsistent error blkaddr:5633, sit bitmap:0
[  152.178914][ T6905] CPU: 0 PID: 6905 Comm: syz.5.933 Not tainted syzkaller #0
[  152.186269][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  152.186706][ T5787] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  152.196367][ T6905] Call Trace:
[  152.196410][ T6905]  <TASK>
[  152.196421][ T6905]  dump_stack_lvl+0x188/0x250
[  152.196454][ T6905]  ? show_regs_print_info+0x20/0x20
[  152.220201][ T6905]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  152.226109][ T6905]  ? unlock_page+0x17c/0x1f0
[  152.230754][ T6905]  f2fs_is_valid_blkaddr+0xc4a/0x1260
[  152.236181][ T6905]  f2fs_get_read_data_page+0x2c4/0x580
[  152.241768][ T6905]  ? f2fs_get_block+0x2a0/0x2a0
[  152.246682][ T6905]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[  152.253241][ T6905]  f2fs_find_data_page+0x1c2/0x5d0
[  152.258409][ T6905]  f2fs_readdir+0x4b3/0xd90
[  152.263013][ T6905]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  152.268263][ T6905]  ? end_current_label_crit_section+0x14b/0x170
[  152.274551][ T6905]  ? iterate_dir+0x10d/0x550
[  152.279186][ T6905]  ? down_read_killable+0x1ce/0x340
[  152.284432][ T6905]  ? fsnotify_perm+0x254/0x560
[  152.289266][ T6905]  iterate_dir+0x213/0x550
[  152.293742][ T6905]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  152.298991][ T6905]  __se_sys_getdents+0xf2/0x260
[  152.303967][ T6905]  ? __x64_sys_getdents+0x80/0x80
[  152.309036][ T6905]  ? fillonedir+0x4c0/0x4c0
[  152.313599][ T6905]  ? lockdep_hardirqs_on+0x94/0x140
[  152.318941][ T6905]  do_syscall_64+0x4c/0xa0
[  152.323588][ T6905]  ? clear_bhb_loop+0x30/0x80
[  152.328311][ T6905]  ? clear_bhb_loop+0x30/0x80
[  152.333184][ T6905]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  152.339141][ T6905] RIP: 0033:0x7f7ff11f2559
[  152.343599][ T6905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.363330][ T6905] RSP: 002b:00007f7fef44a028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  152.371789][ T6905] RAX: ffffffffffffffda RBX: 00007f7ff1479fa0 RCX: 00007f7ff11f2559
[  152.380002][ T6905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  152.388013][ T6905] RBP: 00007f7ff12898b0 R08: 0000000000000000 R09: 0000000000000000
[  152.396122][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.404132][ T6905] R13: 00007f7ff147a038 R14: 00007f7ff1479fa0 R15: 00007ffc5b5803a8
[  152.412166][ T6905]  </TASK>
[  152.560676][ T5787] usb 3-1: Using ep0 maxpacket: 32
[  152.619169][ T4552] attempt to access beyond end of device
[  152.619169][ T4552] loop5: rw=2049, want=45104, limit=40427
[  152.716180][ T5787] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  152.732685][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.786995][ T5787] usb 3-1: config 0 descriptor??
[  153.070769][ T5787] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  153.139730][ T5787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  153.169910][ T5787] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  153.193546][ T5787] usb 3-1: media controller created
[  153.252308][ T5787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  153.272748][ T6951] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  153.362529][ T5787] az6027: usb out operation failed. (-71)
[  153.400882][ T5787] az6027: usb out operation failed. (-71)
[  153.406667][ T5787] stb0899_attach: Driver disabled by Kconfig
[  153.430466][ T5787] az6027: no front-end attached
[  153.430466][ T5787] 
[  153.477789][ T5787] az6027: usb out operation failed. (-71)
[  153.490539][ T5787] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  153.517457][ T5787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6
[  153.580896][ T5787] dvb-usb: schedule remote query interval to 400 msecs.
[  153.587917][ T5787] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  153.640657][ T5787] usb 3-1: USB disconnect, device number 3
[  153.799606][ T5787] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  154.136044][ T7002] loop2: detected capacity change from 0 to 512
[  154.205201][ T7004] loop5: detected capacity change from 0 to 128
[  154.286306][ T7004] EXT4-fs (loop5): Test dummy encryption mode enabled
[  154.323355][ T7002] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  154.357280][ T7004] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  154.380717][ T7002] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[  154.389806][ T7002] EXT4-fs (loop2): orphan cleanup on readonly fs
[  154.409845][ T7004] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  154.466655][ T7002] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.974: Allocating blocks 41-42 which overlap fs metadata
[  154.539948][ T7002] EXT4-fs (loop2): Remounting filesystem read-only
[  154.584204][ T7002] Quota error (device loop2): write_blk: dquota write failed
[  154.613930][ T7002] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  154.634336][ T7002] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.974: Failed to acquire dquot type 0
[  154.654249][ T7002] EXT4-fs (loop2): Remounting filesystem read-only
[  154.710822][ T7002] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  154.777455][ T7002] EXT4-fs (loop2): Remounting filesystem read-only
[  154.826194][ T7002] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.974: corrupted inode contents
[  154.840900][ T7002] EXT4-fs (loop2): Remounting filesystem read-only
[  154.847558][ T7002] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #12: comm syz.2.974: mark_inode_dirty error
[  154.881381][ T7019] loop5: detected capacity change from 0 to 256
[  154.920745][ T7002] EXT4-fs (loop2): Remounting filesystem read-only
[  154.927793][ T7002] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.974: corrupted inode contents
[  154.961733][ T7002] EXT4-fs (loop2): Remounting filesystem read-only
[  154.968519][ T7002] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.974: mark_inode_dirty error
[  154.996782][ T7002] EXT4-fs (loop2): Remounting filesystem read-only
[  155.012836][ T7002] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.974: corrupted inode contents
[  155.066121][ T7002] EXT4-fs (loop2): Remounting filesystem read-only
[  155.080592][ T7002] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  155.100538][ T7002] EXT4-fs (loop2): Remounting filesystem read-only
[  155.107256][ T7002] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.974: corrupted inode contents
[  155.143197][ T7002] EXT4-fs (loop2): Remounting filesystem read-only
[  155.149767][ T7002] EXT4-fs error (device loop2): ext4_truncate:4286: inode #12: comm syz.2.974: mark_inode_dirty error
[  155.196638][ T7002] EXT4-fs (loop2): Remounting filesystem read-only
[  155.211655][ T7002] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  155.226702][ T7002] EXT4-fs (loop2): Remounting filesystem read-only
[  155.279392][ T7002] EXT4-fs (loop2): 1 truncate cleaned up
[  155.292030][ T7002] EXT4-fs (loop2): pa ffff88802009ea80: logic 1, phys. 41, len 23
[  155.300620][ T7002] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23
[  155.386432][ T7002] EXT4-fs (loop2): Remounting filesystem read-only
[  155.400676][ T7002] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,nodiscard,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2. Quota mode: writeback.
[  155.516336][ T7029] loop0: detected capacity change from 0 to 512
[  156.016654][ T7045] netlink: 64 bytes leftover after parsing attributes in process `syz.5.993'.
[  156.188634][ T6983] loop4: detected capacity change from 0 to 40427
[  156.243562][ T7051] 9p: Unknown uid 18446744073709551615
[  156.282521][ T6983] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  156.322718][ T7013] loop1: detected capacity change from 0 to 32768
[  156.326652][ T6983] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  156.448815][ T6983] F2FS-fs (loop4): invalid crc value
[  156.563726][ T6983] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4)
[  156.657927][ T7013] XFS (loop1): Mounting V5 Filesystem
[  156.877024][ T7077] netlink: 806 bytes leftover after parsing attributes in process `syz.2.1004'.
[  156.944496][ T7013] XFS (loop1): Ending clean mount
[  157.045987][ T4188] XFS (loop1): Unmounting Filesystem
[  157.161087][ T7082] loop2: detected capacity change from 0 to 256
[  157.959135][   T26] audit: type=1326 audit(1792102023.344:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.1010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b55ca559 code=0x7fc00000
[  158.287690][ T7089] loop4: detected capacity change from 0 to 131072
[  158.351019][ T7089] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24)
[  158.358901][ T7089] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  158.368054][ T7089] F2FS-fs (loop4): Test dummy encryption mode enabled
[  158.384260][ T7089] F2FS-fs (loop4): invalid crc value
[  158.426171][ T7089] F2FS-fs (loop4): Found nat_bits in checkpoint
[  158.463025][ T7089] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  158.480896][ T7089] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  158.493512][ T7089] F2FS-fs (loop4): Start checkpoint disabled!
[  158.550386][ T7089] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  158.557534][ T7089] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  158.615292][   T26] audit: type=1400 audit(1792102024.004:42): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7108 comm="syz.2.1015" name="unknown" offset=16
[  158.656704][   T26] audit: type=1326 audit(1792102024.024:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.1010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb1b55ca559 code=0x7fc00000
[  158.715143][ T7111] kvm [7109]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x81
[  158.751689][   T26] audit: type=1326 audit(1792102024.034:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.1010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b55ca559 code=0x7fc00000
[  158.853223][   T26] audit: type=1326 audit(1792102024.034:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.1010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b55ca559 code=0x7fc00000
[  158.956374][   T26] audit: type=1326 audit(1792102024.034:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.1010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b55ca559 code=0x7fc00000
[  159.022878][   T26] audit: type=1326 audit(1792102024.034:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.1010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b55ca559 code=0x7fc00000
[  159.070531][   T13] Bluetooth: hci5: command 0x1003 tx timeout
[  159.079064][ T4197] Bluetooth: hci5: sending frame failed (-49)
[  159.128466][ T7124] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  159.163054][   T26] audit: type=1326 audit(1792102024.034:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.0.1010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b55ca559 code=0x7fc00000
[  159.227887][ T1268] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  159.281017][ T7120] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [121]
[  159.307893][ T7128] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1022'.
[  159.326242][ T7120] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4]
[  159.341789][ T7120] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  159.355316][ T7128] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1022'.
[  159.382881][ T7120] One or more global auth toks could not properly register; rc = [-22]
[  159.418794][ T7120] Error parsing options; rc = [-22]
[  159.430315][ T7130] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1023'.
[  159.815104][ T7144] loop0: detected capacity change from 0 to 512
[  159.978406][ T7151] loop2: detected capacity change from 0 to 16
[  160.071355][ T7151] erofs: (device loop2): mounted with root inode @ nid 36.
[  160.094212][ T7151] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 46
[  160.206667][ T7154] phram: illegal device length
[  160.319519][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'.
[  160.459816][ T7162] loop2: detected capacity change from 0 to 128
[  160.611741][ T7162] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  160.626273][ T7162] ext4 filesystem being mounted at /225/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  160.667839][ T6271] syz.0.675 (6271) used greatest stack depth: 19472 bytes left
[  161.016785][ T7156] loop1: detected capacity change from 0 to 32768
[  161.151205][ T4257] Bluetooth: hci5: command 0x1001 tx timeout
[  161.157363][ T4197] Bluetooth: hci5: sending frame failed (-49)
[  161.236238][ T7156] XFS (loop1): Mounting V5 Filesystem
[  161.334477][ T7156] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  161.386002][ T7156] XFS (loop1): Starting recovery (logdev: internal)
[  161.493265][ T7156] XFS (loop1): Ending recovery (logdev: internal)
[  161.529410][ T7170] loop0: detected capacity change from 0 to 32768
[  161.614099][ T4188] XFS (loop1): Unmounting Filesystem
[  161.645644][ T7170] UBIFS error (pid: 7170): cannot open "ubi:0", error -19
[  162.011468][ T7207] Falling back ldisc for ttyS3.
[  162.482837][ T7240] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1064'.
[  162.505064][ T7240] netem: unknown loss type 0
[  162.509922][ T7240] netem: change failed
[  162.578246][ T7248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1068'.
[  162.973979][ T7246] loop4: detected capacity change from 0 to 32768
[  163.060512][   T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  163.230599][ T1337] Bluetooth: hci5: command 0x1009 tx timeout
[  163.399676][ T7272] loop1: detected capacity change from 0 to 1024
[  163.453055][   T13] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  163.462265][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.494595][   T13] usb 3-1: config 0 descriptor??
[  163.509129][ T7272] hfsplus: walked past end of dir
[  163.543651][   T13] cp210x 3-1:0.0: cp210x converter detected
[  163.624621][ T7274] loop1: detected capacity change from 0 to 1024
[  163.725785][ T7274] EXT4-fs (loop1): Ignoring removed orlov option
[  163.794768][ T7274] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  163.872593][ T7278] program syz.4.1072 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  163.980923][   T13] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  164.055444][   T13] usb 3-1: cp210x converter now attached to ttyUSB0
[  164.245612][ T4567] usb 3-1: USB disconnect, device number 4
[  164.262988][ T4567] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  164.285387][ T4567] cp210x 3-1:0.0: device disconnected
[  164.979901][ T7302] loop0: detected capacity change from 0 to 2048
[  165.632432][ T7308] loop2: detected capacity change from 0 to 32768
[  165.726514][ T7348] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  166.015758][ T7363] loop2: detected capacity change from 0 to 164
[  166.595948][ T7388] loop4: detected capacity change from 0 to 4096
[  166.638876][ T7393] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.764903][ T7390] loop0: detected capacity change from 0 to 4096
[  167.098388][   T26] kauditd_printk_skb: 54 callbacks suppressed
[  167.098404][   T26] audit: type=1807 audit(1792102032.484:103): action=measure uid>+ res=0
[  167.098508][ T7408] ima: policy update failed
[  167.127786][   T26] audit: type=1802 audit(1792102032.484:104): pid=7411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1136" res=0 errno=0
[  167.185096][   T26] audit: type=1802 audit(1792102032.514:105): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1136" res=0 errno=0
[  167.335043][ T7418] loop0: detected capacity change from 0 to 128
[  167.564813][ T7424] loop5: detected capacity change from 0 to 4096
[  167.722702][ T7434] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.809455][ T7440] netlink: 'syz.2.1145': attribute type 10 has an invalid length.
[  167.834814][ T7441] loop0: detected capacity change from 0 to 1024
[  167.929525][ T7440] device syz_tun entered promiscuous mode
[  167.992778][ T7440] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  168.316931][ T7459] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  168.769950][ T7481] loop0: detected capacity change from 0 to 512
[  168.896435][ T4567] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  168.933936][ T7470] loop5: detected capacity change from 0 to 32768
[  169.120893][   T26] audit: type=1326 audit(1792102034.514:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.4.1171" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b50d91559 code=0x7ffc0000
[  169.192524][ T7495] netlink: 'syz.5.1172': attribute type 12 has an invalid length.
[  169.210384][ T7495] netlink: 'syz.5.1172': attribute type 29 has an invalid length.
[  169.220233][   T26] audit: type=1326 audit(1792102034.534:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.4.1171" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b50d91559 code=0x7ffc0000
[  169.257376][ T4567] usb 3-1: not running at top speed; connect to a high speed hub
[  169.265432][ T7495] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1172'.
[  169.298618][ T7500] openvswitch: netlink: Actions may not be safe on all matching packets
[  169.307421][ T7495] netlink: 'syz.5.1172': attribute type 1 has an invalid length.
[  169.332607][ T7495] netlink: 'syz.5.1172': attribute type 2 has an invalid length.
[  169.354445][   T26] audit: type=1326 audit(1792102034.534:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.4.1171" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8b50d91559 code=0x7ffc0000
[  169.485404][   T26] audit: type=1326 audit(1792102034.534:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.4.1171" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8b50d91559 code=0x7ffc0000
[  169.520908][ T4567] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  169.549458][ T4567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.588183][ T4567] usb 3-1: Product: syz
[  169.604190][ T4567] usb 3-1: Manufacturer: syz
[  169.612207][ T7510] bond0: invalid ARP target specified
[  169.616625][ T4567] usb 3-1: SerialNumber: syz
[  169.697652][ T4567] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected
[  169.736568][ T4567] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  169.760358][ T4567] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  169.784334][ T4567] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  169.838232][ T4567] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  169.901919][    C1] usb 3-1: malformed indat packet
[  169.924915][    C1] usb 3-1: malformed indat packet
[  169.940542][    C1] usb 3-1: malformed indat packet
[  169.962272][    C1] usb 3-1: malformed indat packet
[  169.980553][    C1] usb 3-1: malformed indat packet
[  170.000562][    C1] usb 3-1: malformed indat packet
[  170.008438][ T7529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1186'.
[  170.020584][    C1] usb 3-1: malformed indat packet
[  170.040585][    C1] usb 3-1: malformed indat packet
[  170.173110][ T7535] ieee802154 phy0 wpan0: encryption failed: -22
[  170.259109][ T5786] usb 3-1: USB disconnect, device number 5
[  170.293244][ T5786] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  170.346326][ T5786] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  170.388105][ T5786] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  170.410016][   T26] audit: type=1400 audit(1792102035.794:110): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7548 comm="syz.5.1195" name="p" offset=48
[  170.452308][ T5786] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  170.488563][ T5786] keyspan 3-1:1.0: device disconnected
[  170.665002][ T7557] set_capacity_and_notify: 1 callbacks suppressed
[  170.665021][ T7557] loop0: detected capacity change from 0 to 4096
[  171.089176][ T7579] loop4: detected capacity change from 0 to 512
[  171.146065][ T7579] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.1210: iget: bad extended attribute block 134217728
[  171.171116][ T7579] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1210: couldn't read orphan inode 15 (err -117)
[  171.198357][ T7579] EXT4-fs (loop4): mounted filesystem without journal. Opts: prjquota,,errors=continue. Quota mode: writeback.
[  171.500200][ T7598] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  171.520141][ T7571] loop2: detected capacity change from 0 to 32768
[  171.616123][ T7604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1218'.
[  171.623839][ T7571] XFS (loop2): Mounting V5 Filesystem
[  171.702491][ T7609] loop4: detected capacity change from 0 to 256
[  171.743441][ T7571] XFS (loop2): Ending clean mount
[  171.785435][ T7609] FAT-fs (loop4): Directory bread(block 64) failed
[  171.798105][ T7609] FAT-fs (loop4): Directory bread(block 65) failed
[  171.809798][ T7609] FAT-fs (loop4): Directory bread(block 66) failed
[  171.822709][ T7609] FAT-fs (loop4): Directory bread(block 67) failed
[  171.829560][ T7609] FAT-fs (loop4): Directory bread(block 68) failed
[  171.852814][ T7609] FAT-fs (loop4): Directory bread(block 69) failed
[  171.894653][ T7609] FAT-fs (loop4): Directory bread(block 70) failed
[  171.928273][ T4189] XFS (loop2): Unmounting Filesystem
[  171.930816][ T7609] FAT-fs (loop4): Directory bread(block 71) failed
[  171.985659][ T7609] FAT-fs (loop4): Directory bread(block 72) failed
[  172.010063][ T7609] FAT-fs (loop4): Directory bread(block 73) failed
[  172.070211][   T26] audit: type=1800 audit(1792102037.454:111): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1219" name="file1" dev="loop4" ino=1048691 res=0 errno=0
[  172.113758][ T7609] attempt to access beyond end of device
[  172.113758][ T7609] loop4: rw=0, want=1196, limit=256
[  172.185759][ T7621] attempt to access beyond end of device
[  172.185759][ T7621] loop4: rw=0, want=1196, limit=256
[  172.279733][ T7625] netlink: 'syz.0.1226': attribute type 1 has an invalid length.
[  172.429787][ T7630] loop4: detected capacity change from 0 to 256
[  172.469012][ T4571] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  172.574516][ T7633] loop0: detected capacity change from 0 to 512
[  172.745193][ T7642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1233'.
[  172.773807][ T7644] loop7: detected capacity change from 0 to 8
[  172.807297][ T4304] Dev loop7: unable to read RDB block 8
[  172.825262][ T4304]  loop7: unable to read partition table
[  172.845773][ T4304] loop7: partition table beyond EOD, truncated
[  172.856392][ T4571] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  172.880314][ T4571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.904151][ T7644] Dev loop7: unable to read RDB block 8
[  172.924250][ T7644]  loop7: unable to read partition table
[  172.933358][ T4571] usb 6-1: config 0 descriptor??
[  172.949387][ T7644] loop7: partition table beyond EOD, truncated
[  172.976426][ T7644] loop_reread_partitions: partition scan of loop7 (���������C�j̖4FLQk��5) failed (rc=-5)
[  172.992696][ T4571] gspca_main: cpia1-2.14.0 probing 0813:0001
[  173.210347][ T7651] loop2: detected capacity change from 0 to 32768
[  173.227181][ T3561] Dev loop7: unable to read RDB block 8
[  173.240308][ T3561]  loop7: unable to read partition table
[  173.261799][ T7651] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  173.270583][ T7651] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  173.270948][ T3561] loop7: partition table beyond EOD, truncated
[  173.321836][ T7651] gfs2: fsid=syz:syz.0: no journals!
[  173.420722][ T4571] cpia1 6-1:0.0: unexpected state after lo power cmd: 00
[  173.438077][ T7663] loop0: detected capacity change from 0 to 1024
[  173.456968][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1242'.
[  173.722966][ T7669] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1246'.
[  173.860794][ T4571] gspca_cpia1: usb_control_msg 02, error -71
[  173.869956][ T4571] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[  173.925360][ T4571] usb 6-1: USB disconnect, device number 5
[  174.029940][ T7686] loop0: detected capacity change from 0 to 128
[  174.077117][ T7686] hpfs: bad mount options.
[  174.405696][ T7693] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  174.508057][ T7693] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,init_itable,nouid32,bsddf,journal_dev=0x0000000000000d76,nomblk_io_submit,delalloc,nolazytime,. Quota mode: none.
[  174.677538][ T7693] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.743591][ T7693] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz.2.1257: path /272/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[  174.813003][ T7693] EXT4-fs (loop2): Remounting filesystem read-only
[  174.885229][   T26] audit: type=1400 audit(1792102040.274:112): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7701 comm="syz.5.1261" name="p" offset=53
[  175.075507][ T7707] hub 1-0:1.0: USB hub found
[  175.089025][ T7707] hub 1-0:1.0: 1 port detected
[  175.120057][ T7688] F2FS-fs (loop4): invalid crc value
[  175.200733][ T7688] F2FS-fs (loop4): Found nat_bits in checkpoint
[  175.396201][ T7688] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  175.557618][ T4201] attempt to access beyond end of device
[  175.557618][ T4201] loop4: rw=2049, want=45112, limit=40427
[  175.693046][ T7723] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  176.224811][ T7718] set_capacity_and_notify: 4 callbacks suppressed
[  176.224829][ T7718] loop2: detected capacity change from 0 to 32768
[  176.548176][ T7748] loop1: detected capacity change from 0 to 512
[  176.748208][ T7748] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,discard,quota,,errors=continue. Quota mode: writeback.
[  176.855479][ T7748] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.221422][ T7772] netlink: 'syz.5.1290': attribute type 7 has an invalid length.
[  177.229987][ T7772] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1290'.
[  177.289953][ T7774] loop4: detected capacity change from 0 to 1024
[  177.377782][ T7776] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[  177.673820][ T7759] loop2: detected capacity change from 0 to 32768
[  177.769403][ T7759] 
[  177.769403][ T7759]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.769403][ T7759] 
[  177.808420][ T7759] ERROR: (device loop2): diWrite: ixpxd invalid
[  177.808420][ T7759] 
[  177.829162][ T7759] ERROR: (device loop2): txCommit: 
[  177.829162][ T7759] 
[  177.881376][ T7759] ERROR: (device loop2): diRead: i_ino != di_number
[  177.881376][ T7759] 
[  177.984199][ T4189] 
[  177.984199][ T4189]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.984199][ T4189] 
[  178.029641][ T4189] 
[  178.029641][ T4189]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.029641][ T4189] 
[  178.059376][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'.
[  178.396715][ T7814] loop5: detected capacity change from 0 to 128
[  178.514692][ T7812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.638268][ T7799] loop0: detected capacity change from 0 to 32768
[  178.746916][ T7812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.825733][ T4304] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4304)
[  178.958198][ T7812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.124856][ T7812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.209423][ T7836] loop5: detected capacity change from 0 to 512
[  179.366000][ T7836] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  179.463384][ T7812] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.471513][ T7836] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002]
[  179.489502][ T7812] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.511866][ T7812] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.527921][ T7812] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.541666][ T7836] EXT4-fs (loop5): orphan cleanup on readonly fs
[  179.566740][ T7836] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1319: bg 0: block 15: invalid block bitmap
[  179.610769][ T7836] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  179.639354][ T7836] EXT4-fs (loop5): 1 truncate cleaned up
[  179.660327][ T7836] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noload,noblock_validity,dioread_lock,nouid32,data_err=ignore,,errors=continue. Quota mode: none.
[  179.751545][ T7836] EXT4-fs (loop5): shut down requested (1)
[  179.882544][ T7860] loop0: detected capacity change from 0 to 1024
[  180.025959][ T7869] hugetlbfs: Bad value for 'nr_inodes'
[  180.250167][ T7876] loop5: detected capacity change from 0 to 64
[  180.350281][ T7847] loop4: detected capacity change from 0 to 32768
[  180.451692][ T7881] Dev loop7: unable to read RDB block 8
[  180.473700][ T7881]  loop7: unable to read partition table
[  180.492204][ T7847] XFS (loop4): Mounting V5 Filesystem
[  180.507553][ T7881] loop7: partition table beyond EOD, truncated
[  180.550187][ T7881] loop_reread_partitions: partition scan of loop7 (���������C�j̖4FLQk��5) failed (rc=-5)
[  180.687259][ T7847] XFS (loop4): Ending clean mount
[  180.737798][ T3561] Dev loop7: unable to read RDB block 8
[  180.743659][ T3561]  loop7: unable to read partition table
[  180.770566][ T3561] loop7: partition table beyond EOD, truncated
[  180.913621][ T7906] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  181.006934][ T4201] XFS (loop4): Unmounting Filesystem
[  181.460381][ T7896] set_capacity_and_notify: 1 callbacks suppressed
[  181.487530][ T7896] loop0: detected capacity change from 0 to 32768
[  181.649282][ T7918] vivid-000: disconnect
[  181.681038][ T7918] vivid-000: reconnect
[  181.763618][ T7925] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  181.835641][ T7930] loop0: detected capacity change from 0 to 1024
[  181.852876][ T7931] loop1: detected capacity change from 0 to 128
[  182.028533][ T7931] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  182.040054][ T7931] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  182.061586][ T7940] ima: policy update failed
[  182.066294][   T26] audit: type=1802 audit(1792102047.454:113): pid=7940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1361" res=0 errno=0
[  182.169372][ T7943] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1362'.
[  182.211589][ T7943] device eql entered promiscuous mode
[  182.228127][ T7944] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.1362'.
[  182.245027][ T7944] 0�X��D��: renamed from eql
[  182.302526][ T7944] 0�X��D��: remember to turn off Van-Jacobson compression on your slave devices
[  182.315771][ T7946] loop2: detected capacity change from 0 to 128
[  182.332686][ T7944] device 
00�X��D�� left promiscuous mode
[  182.362478][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): 
00�X��D��: link becomes ready
[  182.377473][ T7948] loop1: detected capacity change from 0 to 256
[  182.388804][ T7946] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  182.389107][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): 
00�X��D��: link becomes ready
[  182.519785][   T26] audit: type=1800 audit(1792102047.904:114): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1364" name="file1" dev="loop2" ino=94 res=0 errno=0
[  182.641480][ T7948] FAT-fs (loop1): Directory bread(block 64) failed
[  182.648091][ T7948] FAT-fs (loop1): Directory bread(block 65) failed
[  182.697415][ T7946] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  182.716349][ T7955] loop5: detected capacity change from 0 to 1024
[  182.789141][ T7927] loop4: detected capacity change from 0 to 32768
[  182.800724][ T7948] FAT-fs (loop1): Directory bread(block 66) failed
[  182.807844][ T7948] FAT-fs (loop1): Directory bread(block 67) failed
[  182.815017][ T7948] FAT-fs (loop1): Directory bread(block 68) failed
[  182.822100][ T7948] FAT-fs (loop1): Directory bread(block 69) failed
[  182.829071][ T7948] FAT-fs (loop1): Directory bread(block 70) failed
[  182.841234][ T7955] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #3: block 1: comm syz.5.1366: lblock 1 mapped to illegal pblock 1 (length 1)
[  182.866137][ T7948] FAT-fs (loop1): Directory bread(block 71) failed
[  182.956407][ T7948] FAT-fs (loop1): Directory bread(block 72) failed
[  183.000625][ T7955] EXT4-fs (loop5): Remounting filesystem read-only
[  183.007310][ T7955] Quota error (device loop5): write_blk: dquota write failed
[  183.021453][ T7948] FAT-fs (loop1): Directory bread(block 73) failed
[  183.040100][ T7955] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  183.072355][ T7955] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1366: Failed to acquire dquot type 0
[  183.160911][ T7955] EXT4-fs (loop5): Remounting filesystem read-only
[  183.190749][ T7955] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.1366: Freeing blocks not in datazone - block = 0, count = 4096
[  183.253606][ T7955] EXT4-fs (loop5): Remounting filesystem read-only
[  183.300974][ T7955] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1366: Invalid inode bitmap blk 0 in block_group 0
[  183.313988][   T26] audit: type=1800 audit(1792102048.694:115): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1363" name="file1" dev="loop1" ino=1048695 res=0 errno=0
[  183.340736][ T4739] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  183.343647][ T7948] attempt to access beyond end of device
[  183.343647][ T7948] loop1: rw=0, want=1196, limit=256
[  183.374515][ T7955] EXT4-fs (loop5): Remounting filesystem read-only
[  183.392977][ T4739] EXT4-fs (loop5): Remounting filesystem read-only
[  183.399563][ T4739] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  183.439420][ T7955] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem
[  183.448356][ T4739] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0
[  183.492297][ T4739] EXT4-fs (loop5): Remounting filesystem read-only
[  183.519775][ T7948] attempt to access beyond end of device
[  183.519775][ T7948] loop1: rw=0, want=1196, limit=256
[  183.524850][ T7955] EXT4-fs (loop5): Remounting filesystem read-only
[  183.552975][ T7955] EXT4-fs (loop5): 1 orphan inode deleted
[  183.591125][ T7955] EXT4-fs (loop5): mounted filesystem without journal. Opts: ��; acl,noblock_validity,journal_dev=0x000000000000000f,max_batch_time=0x00000000000008c9,block_validity,errors=remount-ro,. Quota mode: writeback.
[  183.650238][ T7985] loop4: detected capacity change from 0 to 64
[  183.747817][ T7987] loop0: detected capacity change from 0 to 128
[  184.051494][ T7994] program syz.0.1381 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  184.166911][ T7998] loop1: detected capacity change from 0 to 256
[  184.307061][ T8004] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1383'.
[  184.351017][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1383'.
[  184.370740][ T8004] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1383'.
[  184.398799][ T8010] hub 1-0:1.0: USB hub found
[  184.415426][ T8010] hub 1-0:1.0: 1 port detected
[  184.626406][ T8021] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  184.626406][ T8021] The task syz.5.1390 (8021) triggered the difference, watch for misbehavior.
[  184.697985][ T8018] EXT4-fs (loop4): 1 orphan inode deleted
[  184.730699][ T8018] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  184.780725][ T8018] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.827165][ T8018] EXT4-fs (loop4): shut down requested (2)
[  185.979495][ T8081] hub 1-0:1.0: USB hub found
[  186.013443][ T8081] hub 1-0:1.0: 1 port detected
[  186.509072][ T8110] netlink: 'syz.4.1429': attribute type 27 has an invalid length.
[  186.539147][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1429'.
[  186.828557][ T8114] set_capacity_and_notify: 3 callbacks suppressed
[  186.828575][ T8114] loop1: detected capacity change from 0 to 128
[  186.907027][ T8114] hpfs: bad mount options.
[  187.106178][ T8099] loop5: detected capacity change from 0 to 32768
[  187.259613][ T8099] XFS (loop5): Mounting V5 Filesystem
[  187.415907][ T8099] XFS (loop5): Ending clean mount
[  187.517683][ T4552] XFS (loop5): Unmounting Filesystem
[  187.585241][ T8108] loop0: detected capacity change from 0 to 40427
[  187.894112][ T8152] loop9: detected capacity change from 0 to 2640
[  187.916038][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  187.927093][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  187.960749][    C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  187.971780][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  188.030596][ T8152] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  188.055669][ T8155] loop0: detected capacity change from 0 to 164
[  188.116400][ T8152] Buffer I/O error on dev loop9, logical block 0, async page read
[  188.157426][ T8152] ldm_validate_partition_table(): Disk read failed.
[  188.170507][ T8152] Dev loop9: unable to read RDB block 0
[  188.176207][ T8152]  loop9: unable to read partition table
[  188.220902][ T8152] loop9: partition table beyond EOD, truncated
[  188.227183][ T8152] loop_reread_partitions: partition scan of loop9 () failed (rc=-5)
[  188.477634][ T8159] loop5: detected capacity change from 0 to 64
[  188.563998][ T8144] loop2: detected capacity change from 0 to 40427
[  188.608509][ T8144] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  188.669451][ T8144] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  188.734786][ T8144] F2FS-fs (loop2): invalid crc value
[  188.778828][ T8144] F2FS-fs (loop2): Found nat_bits in checkpoint
[  188.919288][ T8144] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  188.926875][ T8144] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  189.033533][ T8114] loop1: detected capacity change from 0 to 40427
[  189.041218][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'.
[  189.150899][ T8114] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff
[  189.214129][ T8190] netlink: 'syz.4.1460': attribute type 8 has an invalid length.
[  189.232125][ T8189] loop5: detected capacity change from 0 to 1024
[  189.241195][ T8114] F2FS-fs (loop1): invalid crc value
[  189.370506][ T8114] F2FS-fs (loop1): Found nat_bits in checkpoint
[  189.437881][ T4739] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  189.450126][   T26] audit: type=1800 audit(1792102054.844:116): pid=8195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1459" name="file1" dev="loop5" ino=20 res=0 errno=0
[  189.476691][ T8199] pimreg: tun_chr_ioctl cmd 1074025677
[  189.490581][ T4739] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  189.509493][ T8199] pimreg: linktype set to 1
[  189.540313][ T8201] loop0: detected capacity change from 0 to 64
[  189.705163][   T26] audit: type=1326 audit(1792102055.094:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.0.1467" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1b55ca559 code=0x0
[  189.999106][ T8215] phram: illegal device length
[  190.174898][ T8217] EXT4-fs (loop5): Ignoring removed bh option
[  190.226546][ T8217] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x000000000000007c,lazytime,nodelalloc,usrquota,bsdgroups,bh,init_itable,,errors=continue. Quota mode: writeback.
[  190.428386][ T8226] ip_tables: iptables: counters copy to user failed while replacing table
[  190.999532][ T8239] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  191.151308][ T8239] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,minixdf,bsdgroups,max_batch_time=0x0000000000000013,abort,noinit_itable,,errors=continue. Quota mode: none.
[  191.155051][ T8244] erofs: Unknown parameter ''
[  191.385980][ T8239] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  191.403949][   T26] audit: type=1400 audit(1792102056.794:118): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=8250 comm="syz.4.1486" name="foo" offset=76
[  191.492414][ T8254] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  191.537804][ T8254] EXT4-fs (loop2): This should not happen!! Data will be lost
[  191.537804][ T8254] 
[  191.596117][ T8254] EXT4-fs (loop2): Total free blocks count 0
[  191.626058][ T8254] EXT4-fs (loop2): Free/Dirty block details
[  191.669940][ T8254] EXT4-fs (loop2): free_blocks=20480
[  191.688032][ T8254] EXT4-fs (loop2): dirty_blocks=64
[  191.699717][ T8254] EXT4-fs (loop2): Block reservation details
[  191.730537][ T8254] EXT4-fs (loop2): i_reserved_data_blocks=4
[  191.738520][ T8254] EXT4-fs error (device loop2) in ext4_setattr:5645: error 28
[  191.884187][ T8265] set_capacity_and_notify: 4 callbacks suppressed
[  191.884205][ T8265] loop4: detected capacity change from 0 to 128
[  191.957472][ T8265] hpfs: bad mount options.
[  192.110106][ T8242] loop0: detected capacity change from 0 to 40427
[  192.210923][ T8271] loop2: detected capacity change from 0 to 128
[  192.257468][ T8271] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  192.270996][ T8271] ext4 filesystem being mounted at /317/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  192.339755][ T8274] Falling back ldisc for ttyS3.
[  192.428564][ T8271] fscrypt (loop2, inode 12): Unsupported encryption flags (0x1c)
[  192.741161][ T8288] loop0: detected capacity change from 0 to 1024
[  192.800118][ T8263] loop5: detected capacity change from 0 to 32768
[  192.939688][ T8263] JBD2: Ignoring recovery information on journal
[  193.026336][ T8265] loop4: detected capacity change from 0 to 40427
[  193.060832][ T8265] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff
[  193.099292][ T8265] F2FS-fs (loop4): invalid crc value
[  193.113333][ T8265] F2FS-fs (loop4): Found nat_bits in checkpoint
[  193.166114][ T8263] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  193.285248][ T8306] loop2: detected capacity change from 0 to 1024
[  193.398435][ T8265] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  193.488302][ T8263] UBIFS error (pid: 8263): cannot open "ubi:0", error -19
[  193.531047][ T8265] F2FS-fs (loop4): switch extent_cache option is not allowed
[  193.616944][ T4552] (syz-executor,4552,1):ocfs2_inode_is_valid_to_delete:905 ERROR: Skipping delete of system file 66
[  193.669594][ T8318] loop2: detected capacity change from 0 to 1024
[  193.679297][ T4552] ocfs2: Unmounting device (7,5) on (node local)
[  193.689957][ T8317] 9p: Unknown uid 18446744073709551615
[  193.769242][ T4201] attempt to access beyond end of device
[  193.769242][ T4201] loop4: rw=2049, want=45104, limit=40427
[  193.825133][ T8318] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  193.864381][ T8318] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  193.941044][   T26] audit: type=1400 audit(1792102059.334:119): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8321 comm="syz.0.1508"
[  194.076850][ T8318] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000003,errors=remount-ro,noblock_validity,nouid32,dioread_nolock,quota,nomblk_io_submit,noquota,nolazytime,. Quota mode: none.
[  194.118154][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  194.130694][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  194.213944][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1506'.
[  194.216884][ T8318] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.256530][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1506'.
[  194.433525][ T8318] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1504: bg 0: block 112: padding at end of block bitmap is not set
[  194.517451][ T8318] EXT4-fs (loop2): Remounting filesystem read-only
[  194.520085][ T8294] loop1: detected capacity change from 0 to 32768
[  195.117549][ T8369] loop0: detected capacity change from 0 to 512
[  195.131115][ T8294] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  195.174868][ T8369] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  195.239707][ T8369] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[  195.262263][ T8369] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup
[  195.284982][ T8369] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,nodiscard,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2. Quota mode: writeback.
[  195.327041][ T8294] (syz.1.1499,8294,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[  195.379840][ T8369] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1519: bg 0: block 41: padding at end of block bitmap is not set
[  195.418893][ T8377] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  195.538921][ T4188] ocfs2: Unmounting device (7,1) on (node local)
[  195.792029][ T8386] attempt to access beyond end of device
[  195.792029][ T8386] loop5: rw=2049, want=237, limit=128
[  196.200711][ T4261] Bluetooth: hci0: command 0x0406 tx timeout
[  196.211462][ T4261] Bluetooth: hci1: command 0x0406 tx timeout
[  196.217888][ T4261] Bluetooth: hci3: command 0x0406 tx timeout
[  196.251975][ T4261] Bluetooth: hci4: command 0x0406 tx timeout
[  196.267771][ T8414] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  196.325198][ T8414] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,minixdf,bsdgroups,max_batch_time=0x0000000000000013,abort,noinit_itable,,errors=continue. Quota mode: none.
[  196.560198][ T8414] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  196.594107][ T8420] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  196.655826][ T8414] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  196.720993][   T26] audit: type=1800 audit(1792102062.114:120): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1530" name="file1" dev="loop1" ino=15 res=0 errno=0
[  196.771216][ T8414] EXT4-fs (loop4): This should not happen!! Data will be lost
[  196.771216][ T8414] 
[  196.809860][ T8414] EXT4-fs (loop4): Total free blocks count 0
[  196.836088][ T8414] EXT4-fs (loop4): Free/Dirty block details
[  196.886632][ T8414] EXT4-fs (loop4): free_blocks=20480
[  196.915981][ T8414] EXT4-fs (loop4): dirty_blocks=64
[  196.949574][ T8414] EXT4-fs (loop4): Block reservation details
[  196.966276][ T8414] EXT4-fs (loop4): i_reserved_data_blocks=4
[  196.977671][ T8414] EXT4-fs error (device loop4) in ext4_setattr:5645: error 28
[  197.038662][ T8416] set_capacity_and_notify: 4 callbacks suppressed
[  197.038679][ T8416] loop5: detected capacity change from 0 to 32768
[  197.170503][ T4571] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  197.273997][ T8416] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  197.329774][ T8445] program syz.2.1554 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  197.420121][ T8416] (syz.5.1544,8416,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[  197.430241][ T4571] usb 1-1: Using ep0 maxpacket: 32
[  197.549429][ T4552] ocfs2: Unmounting device (7,5) on (node local)
[  197.556409][ T4571] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  197.579084][ T4571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.618450][ T4571] usb 1-1: config 0 descriptor??
[  197.730349][ T8454] loop2: detected capacity change from 0 to 4096
[  197.834248][ T8454] ntfs3: loop2: Failed to load $Extend.
[  197.890611][ T4571] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  197.978689][ T4571] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  198.041911][ T4571] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  198.049136][ T4571] usb 1-1: media controller created
[  198.087858][ T8465] loop5: detected capacity change from 0 to 1024
[  198.117463][ T8429] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  198.152942][ T4571] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  198.185157][ T8465] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  198.222389][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1564'.
[  198.285631][ T4571] az6027: usb out operation failed. (-71)
[  198.316574][ T4571] az6027: usb out operation failed. (-71)
[  198.319418][ T8465] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,minixdf,bsdgroups,max_batch_time=0x0000000000000013,abort,noinit_itable,,errors=continue. Quota mode: none.
[  198.327336][ T4571] stb0899_attach: Driver disabled by Kconfig
[  198.362722][ T4571] az6027: no front-end attached
[  198.362722][ T4571] 
[  198.381047][ T4571] az6027: usb out operation failed. (-71)
[  198.386941][ T4571] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  198.401805][ T4571] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9
[  198.425953][ T4571] dvb-usb: schedule remote query interval to 400 msecs.
[  198.440538][ T4571] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  198.470210][ T4571] usb 1-1: USB disconnect, device number 2
[  198.529075][ T4571] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  198.540263][ T8465] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  198.605206][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.627009][ T8484] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  198.642124][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.668701][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.685323][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.710585][ T8484] EXT4-fs (loop5): This should not happen!! Data will be lost
[  198.710585][ T8484] 
[  198.720298][ T8484] EXT4-fs (loop5): Total free blocks count 0
[  198.726916][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.740534][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.752331][ T8484] EXT4-fs (loop5): Free/Dirty block details
[  198.758552][ T8484] EXT4-fs (loop5): free_blocks=20480
[  198.770545][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.781544][ T8484] EXT4-fs (loop5): dirty_blocks=64
[  198.800187][ T8484] EXT4-fs (loop5): Block reservation details
[  198.810309][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.834545][ T8484] EXT4-fs (loop5): i_reserved_data_blocks=4
[  198.852594][ T8484] EXT4-fs error (device loop5) in ext4_setattr:5645: error 28
[  198.864314][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.910650][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.152066][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1579'.
[  199.173629][ T8506] loop2: detected capacity change from 0 to 256
[  199.274748][ T8509] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1583'.
[  199.499506][ T8524] loop0: detected capacity change from 0 to 16
[  199.541029][ T8524] erofs: Unknown parameter ''
[  199.660534][ T4257] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  199.713724][ T8523] loop4: detected capacity change from 0 to 32768
[  199.858330][ T8523] JBD2: Ignoring recovery information on journal
[  199.932060][ T4257] usb 6-1: Using ep0 maxpacket: 32
[  199.948508][ T8523] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  199.973466][ T8523] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (3298534883402, expected 74)
[  199.995011][ T8523] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  200.006943][ T8523] OCFS2: File system is now read-only.
[  200.012613][ T8523] (syz.4.1588,8523,1):ocfs2_search_chain:1783 ERROR: status = -30
[  200.020719][ T8523] (syz.4.1588,8523,1):ocfs2_search_chain:1893 ERROR: status = -30
[  200.028575][ T8523] (syz.4.1588,8523,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  200.037595][ T8523] (syz.4.1588,8523,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  200.046996][ T8523] (syz.4.1588,8523,1):ocfs2_claim_new_inode:2248 ERROR: status = -30
[  200.055256][ T8523] (syz.4.1588,8523,1):ocfs2_claim_new_inode:2263 ERROR: status = -30
[  200.063861][ T8523] (syz.4.1588,8523,1):ocfs2_mknod_locked:641 ERROR: status = -30
[  200.071881][ T8523] (syz.4.1588,8523,1):ocfs2_symlink:1943 ERROR: status = -30
[  200.080287][ T8523] (syz.4.1588,8523,1):ocfs2_symlink:2067 ERROR: status = -30
[  200.081042][ T4257] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  200.186886][ T4257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.235733][ T4257] usb 6-1: config 0 descriptor??
[  200.264702][ T4201] ocfs2: Unmounting device (7,4) on (node local)
[  200.530784][ T4257] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  200.608738][ T8561] loop2: detected capacity change from 0 to 256
[  200.608748][ T4257] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  200.631054][ T4257] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  200.644992][ T4257] usb 6-1: media controller created
[  200.728443][ T4257] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  200.742317][ T8519] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  200.765359][ T8561] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d)
[  200.818471][ T8561] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  200.870648][ T4257] az6027: usb out operation failed. (-71)
[  200.903772][ T4257] az6027: usb out operation failed. (-71)
[  200.909661][ T4257] stb0899_attach: Driver disabled by Kconfig
[  200.913891][ T8561] attempt to access beyond end of device
[  200.913891][ T8561] loop2: rw=524288, want=408, limit=256
[  200.940281][ T4257] az6027: no front-end attached
[  200.940281][ T4257] 
[  200.962180][ T8561] attempt to access beyond end of device
[  200.962180][ T8561] loop2: rw=524288, want=664, limit=256
[  201.000836][ T4257] az6027: usb out operation failed. (-71)
[  201.012638][ T4257] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  201.024912][ T4257] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11
[  201.040201][ T8561] attempt to access beyond end of device
[  201.040201][ T8561] loop2: rw=0, want=288, limit=256
[  201.073599][   T26] audit: type=1800 audit(1792102066.464:121): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1604" name="file0" dev="loop2" ino=1048702 res=0 errno=0
[  201.107841][ T4257] dvb-usb: schedule remote query interval to 400 msecs.
[  201.121480][ T4257] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  201.149360][ T4257] usb 6-1: USB disconnect, device number 6
[  201.280565][ T4567] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  201.297856][ T4257] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  201.640716][ T4567] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  201.708008][ T8583] loop1: detected capacity change from 0 to 4096
[  201.793623][ T4567] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  201.838950][ T4567] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  201.851714][ T4567] usb 1-1: Product: syz
[  201.856423][ T4567] usb 1-1: Manufacturer: syz
[  201.912057][ T4567] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected
[  201.929065][ T4567] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[  201.950641][ T4567] garmin_gps: probe of ttyUSB0 failed with error -22
[  201.979949][ T8599] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  202.002507][ T8584] loop2: detected capacity change from 0 to 32768
[  202.126894][ T4567] usb 1-1: USB disconnect, device number 3
[  202.152439][ T4567] garmin_gps 1-1:1.0: device disconnected
[  202.192138][ T8584] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  202.296947][ T8584] (syz.2.1615,8584,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[  202.313324][ T8583] NILFS error (device loop1): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1
[  202.432656][ T8583] Remounting filesystem read-only
[  202.440719][ T4189] ocfs2: Unmounting device (7,2) on (node local)
[  202.716755][ T8617] netlink: 'syz.2.1631': attribute type 12 has an invalid length.
[  202.764505][ T8617] netlink: 'syz.2.1631': attribute type 29 has an invalid length.
[  202.832180][ T8617] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1631'.
[  202.847851][ T8621] program syz.5.1634 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  202.883063][ T8617] netlink: 'syz.2.1631': attribute type 1 has an invalid length.
[  202.903491][ T8617] netlink: 'syz.2.1631': attribute type 2 has an invalid length.
[  203.295528][ T8636] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1639'.
[  203.515748][ T8647] loop2: detected capacity change from 0 to 512
[  203.750133][ T8647] EXT4-fs (loop2): orphan cleanup on readonly fs
[  203.760967][ T8647] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  203.816595][ T8647] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  203.871912][ T8647] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1643: attempt to clear invalid blocks 2 len 1
[  203.910554][ T8647] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1643: invalid indirect mapped block 1819239214 (level 0)
[  204.000276][ T8647] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1643: invalid indirect mapped block 1819239214 (level 1)
[  204.084583][ T8647] EXT4-fs (loop2): 1 truncate cleaned up
[  204.122465][ T8647] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,auto_da_alloc,noquota,usrjquota=..,errors=continue. Quota mode: writeback.
[  204.233210][ T4189] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0
[  204.263468][ T8632] loop4: detected capacity change from 0 to 32768
[  204.487961][ T4189] bond0: (slave syz_tun): Releasing backup interface
[  204.501519][ T8632] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  204.641769][ T8632] (syz.4.1638,8632,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[  204.711748][ T1268] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.770239][ T4201] ocfs2: Unmounting device (7,4) on (node local)
[  204.909495][ T8671] loop0: detected capacity change from 0 to 512
[  204.936083][ T8672] loop5: detected capacity change from 0 to 128
[  204.985457][ T1268] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.003863][ T8672] FAT-fs (loop5): bogus number of reserved sectors
[  205.020574][ T8672] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  205.030090][ T8672] FAT-fs (loop5): Can't find a valid FAT filesystem
[  205.173103][ T1268] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.308777][ T1268] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.351226][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1657'.
[  205.560658][ T8681] rxe_eth0 speed is unknown, defaulting to 1000
[  205.593209][ T8692] ieee802154 phy0 wpan0: encryption failed: -22
[  206.457376][ T8681] chnl_net:caif_netlink_parms(): no params data found
[  206.519690][ T8722] loop1: detected capacity change from 0 to 512
[  206.658783][ T8722] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  206.730088][ T8681] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.749900][ T8681] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.772945][ T8722] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.1672: corrupted in-inode xattr
[  206.800894][ T8681] device bridge_slave_0 entered promiscuous mode
[  206.853651][ T8681] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.887762][ T8681] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.929919][ T8681] device bridge_slave_1 entered promiscuous mode
[  206.999982][ T8722] EXT4-fs (loop1): get orphan inode failed
[  207.001619][ T8734] loop4: detected capacity change from 0 to 164
[  207.043176][ T8722] EXT4-fs (loop1): mount failed
[  207.048485][ T8681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.129683][ T8681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.314504][ T8681] team0: Port device team_slave_0 added
[  207.364473][ T8681] team0: Port device team_slave_1 added
[  207.416041][ T8743] loop0: detected capacity change from 0 to 512
[  207.470601][ T4262] Bluetooth: hci0: command 0x0409 tx timeout
[  207.566623][ T8681] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.583984][ T8681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.662993][ T8681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.789555][ T8681] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.810605][ T8681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.841758][ T8756] VFS: Can't find a romfs filesystem on dev mtdblock0.
[  207.841758][ T8756] 
[  207.871376][ T8681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.042162][ T8759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1681'.
[  208.120943][ T8681] device hsr_slave_0 entered promiscuous mode
[  208.159706][ T8681] device hsr_slave_1 entered promiscuous mode
[  208.180344][ T8681] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.221528][ T8681] Cannot create hsr debugfs directory
[  208.261546][ T1268] device hsr_slave_0 left promiscuous mode
[  208.282192][ T1268] device hsr_slave_1 left promiscuous mode
[  208.299072][ T1268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.326045][ T1268] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.367577][ T1268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.376342][ T1268] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.406558][ T1268] device bridge_slave_1 left promiscuous mode
[  208.427956][ T1268] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.446662][ T8770] loop1: detected capacity change from 0 to 164
[  208.454147][ T1268] device bridge_slave_0 left promiscuous mode
[  208.468878][ T1268] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.571472][ T1268] device veth1_macvtap left promiscuous mode
[  208.577585][ T1268] device veth0_macvtap left promiscuous mode
[  208.604803][ T1268] device veth1_vlan left promiscuous mode
[  208.611942][ T8776] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1688'.
[  208.632953][ T1268] device veth0_vlan left promiscuous mode
[  209.054158][ T1268] bond0 (unregistering): (slave bond1): Releasing backup interface
[  209.076240][ T1268] bond1 (unregistering): Released all slaves
[  209.412204][ T1268] team0 (unregistering): Port device team_slave_1 removed
[  209.450220][ T1268] team0 (unregistering): Port device team_slave_0 removed
[  209.521054][ T1268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.555515][ T5786] Bluetooth: hci0: command 0x041b tx timeout
[  209.590868][ T1268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.882946][ T1268] bond0 (unregistering): Released all slaves
[  210.253452][ T8796] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input12
[  210.635493][ T8681] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  210.683087][ T8681] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  210.718159][ T8681] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  210.771952][ T8681] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  211.038461][ T8681] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.070654][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  211.088605][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  211.114853][ T8681] 8021q: adding VLAN 0 to HW filter on device team0
[  211.147966][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  211.175297][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  211.205520][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.212789][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.251102][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  211.287050][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  211.307237][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.314434][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.372239][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  211.421303][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  211.446730][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  211.477476][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  211.516831][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  211.527208][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  211.559269][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  211.587509][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  211.616817][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  211.630910][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  211.631620][ T4571] Bluetooth: hci0: command 0x040f tx timeout
[  211.673731][ T8681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  211.727850][ T8681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  211.737767][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  211.763087][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  212.123126][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  212.131402][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  212.167127][ T8681] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.689759][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  212.699903][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  212.740314][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  212.764658][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  212.799175][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  212.812694][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  212.848504][ T8681] device veth0_vlan entered promiscuous mode
[  212.903144][ T8681] device veth1_vlan entered promiscuous mode
[  212.972494][ T8681] device veth0_macvtap entered promiscuous mode
[  213.006724][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  213.026848][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  213.041442][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  213.071901][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  213.093109][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  213.113835][ T8681] device veth1_macvtap entered promiscuous mode
[  213.151289][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.171416][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.200609][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.220515][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.240616][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.261201][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.293406][ T8681] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.303729][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  213.321371][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  213.343554][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.362657][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.399495][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.420475][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.430343][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.460480][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.480493][ T8681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.507676][ T8037] syz.1.1396 (8037) used greatest stack depth: 19088 bytes left
[  213.515477][ T8681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.526791][ T8681] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.536844][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  213.554327][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  213.569293][ T8681] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.587348][ T8681] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.596767][ T8681] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.605911][ T8681] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.711147][ T4567] Bluetooth: hci0: command 0x0419 tx timeout
[  213.748733][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.768323][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.780636][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  213.816018][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.831156][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.839360][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  214.044328][ T8843] loop1: detected capacity change from 0 to 2048
[  214.110001][ T8843] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  214.198868][   T26] audit: type=1400 audit(1792102079.584:122): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=8856 comm="syz.4.1698" name="unknown" offset=16
[  214.260720][ T8847] loop5: detected capacity change from 0 to 4096
[  214.318976][ T8847] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  214.607276][ T8870] Restarting kernel threads ... done.
[  214.960282][ T8890] tap0: tun_chr_ioctl cmd 1074025694
[  215.390861][ T8923] Restarting kernel threads ... done.
[  215.525112][ T8935] Restarting kernel threads ... done.
[  215.526678][ T8934] loop1: detected capacity change from 0 to 1024
[  215.585537][ T8941] netlink: 'syz.6.1730': attribute type 7 has an invalid length.
[  215.606809][ T8941] netlink: 51 bytes leftover after parsing attributes in process `syz.6.1730'.
[  215.650650][ T4266] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  215.769897][ T8949] loop6: detected capacity change from 0 to 512
[  216.076433][ T4266] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  216.157208][ T4266] usb 1-1: config 0 has no interface number 0
[  216.164415][ T4266] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  216.351147][ T4266] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  216.390524][ T4266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.420768][ T4266] usb 1-1: Product: syz
[  216.453546][ T4266] usb 1-1: Manufacturer: syz
[  216.458588][ T4266] usb 1-1: SerialNumber: syz
[  216.469557][ T8975] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  216.501103][ T4266] usb 1-1: config 0 descriptor??
[  216.550298][ T4266] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[  216.584388][ T8978] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[  216.758859][   T13] usb 1-1: USB disconnect, device number 4
[  216.781058][   T13] yurex 1-1:0.50: USB YUREX #0 now disconnected
[  216.864075][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1754'.
[  216.972355][ T9008] loop4: detected capacity change from 0 to 128
[  217.347705][ T9021] VFS: Can't find a romfs filesystem on dev mtdblock0.
[  217.347705][ T9021] 
[  217.354141][ T9028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1766'.
[  217.458620][   T26] audit: type=1400 audit(1792102082.844:123): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9033 comm="syz.4.1769" name="unknown" offset=16
[  217.541286][ T9036] loop0: detected capacity change from 0 to 1024
[  217.696237][ T9050] input: syz1 as /devices/virtual/input/input13
[  217.860115][ T9058] tipc: Started in network mode
[  217.884966][ T9058] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  217.906739][ T9058] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  218.188727][ T9077] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.328385][ T9077] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.344674][ T9089] hugetlbfs: Bad value for 'nr_inodes'
[  218.439464][ T9077] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.505411][ T9077] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.597925][ T9103] loop5: detected capacity change from 0 to 512
[  218.619250][ T9103] FAT-fs (loop5): Unrecognized mount option "��֛�6GJ
R�������.�zQ\wFMx�7D7U �d~���zGcx�E��b4��'���IG�(��;�e�7+ʞ:�!Y
/Q����:|ֿ�'�W��Mf��_��Z���8{��V�@�	Ay��v7�۾���?3�/R��5�?�: !l��\z�{0�o���-���a18446744073709551615" or missing value
[  218.671223][ T9077] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.692162][ T9077] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.716303][ T9077] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.737712][ T9077] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.024893][ T5786] tipc: Node number set to 43690
[  219.150862][   T13] Bluetooth: hci5: command 0x1003 tx timeout
[  219.158293][ T4194] Bluetooth: hci5: sending frame failed (-49)
[  219.416405][ T9129] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1804'.
[  219.495903][ T9121] loop5: detected capacity change from 0 to 32768
[  219.582395][ T9121] XFS (loop5): Mounting V5 Filesystem
[  219.675724][ T9121] XFS (loop5): Ending clean mount
[  219.819268][ T4552] XFS (loop5): Unmounting Filesystem
[  220.197413][ T9163] i2c i2c-0: new_device: Can't parse I2C address
[  220.208787][ T1274] bond0: (slave bond_slave_0): interface is now down
[  220.229737][ T1274] bond0: (slave bond_slave_1): interface is now down
[  220.257177][ T9165] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  220.282478][ T1274] bond0: now running without any active interface!
[  220.305436][ T9169] loop0: detected capacity change from 0 to 64
[  220.388416][ T9174] loop5: detected capacity change from 0 to 1024
[  220.533346][ T9180] hfsplus: xattr exists yet
[  220.742654][ T9193] loop5: detected capacity change from 0 to 1024
[  220.793602][ T9193] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 2: comm syz.5.1823: lblock 2 mapped to illegal pblock 2 (length 1)
[  220.818068][ T9193] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  220.830790][ T9193] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 48: comm syz.5.1823: lblock 0 mapped to illegal pblock 48 (length 1)
[  220.894834][ T9193] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  220.907629][ T9203] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1831'.
[  220.920566][ T9193] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1823: Failed to acquire dquot type 0
[  220.941052][ T9193] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  220.959379][ T9203] device 
00�X��D�� entered promiscuous mode
[  220.979840][ T9204] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.1831'.
[  220.988180][ T9206] loop4: detected capacity change from 0 to 128
[  220.989764][ T9193] EXT4-fs error (device loop5): ext4_evict_inode:284: inode #11: comm syz.5.1823: mark_inode_dirty error
[  221.008109][ T9204] 1�X��D��: renamed from 
00�X��D��
[  221.018592][ T9193] EXT4-fs warning (device loop5): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  221.034850][ T9193] EXT4-fs (loop5): 1 orphan inode deleted
[  221.042146][ T9193] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[  221.047421][ T9204] 1�X��D��: remember to turn off Van-Jacobson compression on your slave devices
[  221.087842][ T9204] device 
01�X��D�� left promiscuous mode
[  221.094248][ T9204] IPv6: ADDRCONF(NETDEV_CHANGE): 
01�X��D��: link becomes ready
[  221.096850][ T1274] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  221.102814][ T9204] IPv6: ADDRCONF(NETDEV_CHANGE): 
01�X��D��: link becomes ready
[  221.145620][ T1274] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  221.169736][ T1274] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0
[  221.215781][ T9208] loop6: detected capacity change from 0 to 1024
[  221.231371][ T4739] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  221.245993][ T4261] Bluetooth: hci5: command 0x1001 tx timeout
[  221.259529][ T4194] Bluetooth: hci5: sending frame failed (-49)
[  221.266966][ T4739] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  221.278683][ T4739] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0
[  221.295913][ T4552] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  221.339413][ T4552] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  221.363918][ T4552] EXT4-fs error (device loop5): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  221.489798][ T9208] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  221.540780][ T9219] loop0: detected capacity change from 0 to 64
[  221.631027][ T9223] program syz.4.1839 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  221.788289][ T9233] loop0: detected capacity change from 0 to 512
[  221.867306][ T9233] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  221.923609][ T9233] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.1844: corrupted in-inode xattr
[  221.966214][ T9233] EXT4-fs (loop0): get orphan inode failed
[  221.988000][ T9233] EXT4-fs (loop0): mount failed
[  222.122909][ T9254] tipc: Started in network mode
[  222.128008][ T9254] tipc: Node identity 001, cluster identity 1
[  222.235562][ T9258] loop5: detected capacity change from 0 to 2048
[  222.328484][ T9258] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,max_dir_size_kb=0x0000000000000004,noquota,,errors=continue. Quota mode: none.
[  222.345211][ T9262] loop0: detected capacity change from 0 to 512
[  222.404696][ T4739] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  222.443242][ T4739] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  222.456115][ T4739] EXT4-fs (loop5): This should not happen!! Data will be lost
[  222.456115][ T4739] 
[  222.466028][ T4739] EXT4-fs (loop5): Total free blocks count 0
[  222.472473][ T4739] EXT4-fs (loop5): Free/Dirty block details
[  222.478496][ T4739] EXT4-fs (loop5): free_blocks=2415919104
[  222.484426][ T4739] EXT4-fs (loop5): dirty_blocks=16
[  222.489976][ T4739] EXT4-fs (loop5): Block reservation details
[  222.496472][ T4739] EXT4-fs (loop5): i_reserved_data_blocks=1
[  223.311195][   T13] Bluetooth: hci5: command 0x1009 tx timeout
[  223.684467][ T9326] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  223.719089][ T9326] REISERFS (device loop5): using ordered data mode
[  223.737422][ T9326] reiserfs: using flush barriers
[  223.776938][ T9326] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  223.801967][ T9326] REISERFS (device loop5): checking transaction log (loop5)
[  224.028556][ T9326] REISERFS (device loop5): Using tea hash to sort names
[  224.045835][ T9326] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  224.468768][ T9341] F2FS-fs (loop4): invalid crc value
[  224.514671][ T9341] F2FS-fs (loop4): Found nat_bits in checkpoint
[  224.611962][ T9366] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1897'.
[  224.694974][ T9341] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  224.780666][ T9341] F2FS-fs (loop4): Corrupted max_depth of 3: 4294967295
[  224.989798][ T9347] set_capacity_and_notify: 5 callbacks suppressed
[  224.989815][ T9347] loop0: detected capacity change from 0 to 40427
[  225.419076][ T9404] loop0: detected capacity change from 0 to 164
[  225.527177][ T9407] pimreg1: tun_chr_ioctl cmd 35108
[  225.718836][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'.
[  225.779664][ T9417] netlink: 806 bytes leftover after parsing attributes in process `syz.4.1901'.
[  225.863537][ T9423] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1915'.
[  226.203346][ T9435] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1923'.
[  226.255810][ T9435] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1923'.
[  226.396649][  T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.552519][ T9427] loop5: detected capacity change from 0 to 32768
[  226.679004][  T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.761785][ T9427] XFS (loop5): Mounting V5 Filesystem
[  226.897677][  T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.938257][ T9427] XFS (loop5): Ending clean mount
[  227.036312][ T9451] loop4: detected capacity change from 0 to 512
[  227.114533][ T9437] loop6: detected capacity change from 0 to 131072
[  227.154107][  T155] batman_adv: batadv0: Interface deactivated: netdevsim0
[  227.182382][ T9437] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (512, 24)
[  227.190354][ T9437] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  227.199292][ T9437] F2FS-fs (loop6): Test dummy encryption mode enabled
[  227.211195][ T9437] F2FS-fs (loop6): invalid crc value
[  227.241487][ T9451] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.1928: bad orphan inode 11862016
[  227.254827][ T9437] F2FS-fs (loop6): Found nat_bits in checkpoint
[  227.292273][ T9437] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  227.305041][ T9437] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0
[  227.318471][ T4552] XFS (loop5): Unmounting Filesystem
[  227.318907][ T9437] F2FS-fs (loop6): Start checkpoint disabled!
[  227.334456][ T9451] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  227.357031][ T9437] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  227.364286][ T9437] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  227.373119][  T155] batman_adv: batadv0: Removing interface: netdevsim0
[  227.385896][ T9451] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.498774][  T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.666772][ T9458] rxe_eth0 speed is unknown, defaulting to 1000
[  227.937795][ T1282] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  228.105993][ T9468] pimreg: tun_chr_ioctl cmd 1074025677
[  228.141386][ T9468] pimreg: linktype set to 1
[  228.703870][ T9458] chnl_net:caif_netlink_parms(): no params data found
[  229.079854][ T9458] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.087864][ T9458] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.113643][ T9518] loop1: detected capacity change from 0 to 512
[  229.131675][ T9458] device bridge_slave_0 entered promiscuous mode
[  229.162484][ T9458] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.169674][ T9458] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.216926][ T9518] EXT4-fs (loop1): Ignoring removed nobh option
[  229.222864][ T9458] device bridge_slave_1 entered promiscuous mode
[  229.313563][ T9518] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  229.365087][ T9458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.377144][ T9458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.387943][ T9518] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1948: invalid indirect mapped block 4278190080 (level 0)
[  229.408733][ T9525] loop5: detected capacity change from 0 to 128
[  229.503501][ T9515] loop4: detected capacity change from 0 to 32768
[  229.522312][ T9518] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1948: invalid indirect mapped block 1 (level 1)
[  229.546533][ T9525] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  229.571040][ T9525] ext4 filesystem being mounted at /333/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  229.583166][ T9518] EXT4-fs (loop1): 1 truncate cleaned up
[  229.589041][ T9518] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,sb=0x0000000000000009,jqfmt=vfsv1,resgid=0x0000000000000000,nolazytime,nobh,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,,errors=continue. Quota mode: none.
[  229.631215][ T5787] Bluetooth: hci3: command 0x0409 tx timeout
[  229.638468][ T9525] fscrypt (loop5, inode 12): Unsupported encryption flags (0x1c)
[  229.649069][ T9458] team0: Port device team_slave_0 added
[  229.668934][ T9515] XFS (loop4): Mounting V5 Filesystem
[  229.735718][ T9518] EXT4-fs (loop1): shut down requested (1)
[  229.849990][   T26] audit: type=1326 audit(1792102096.236:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9536 comm="syz.5.1952" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ff11f2559 code=0x0
[  229.908550][ T9458] team0: Port device team_slave_1 added
[  229.971935][ T9515] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  230.067760][ T9515] XFS (loop4): Starting recovery (logdev: internal)
[  230.091248][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.113606][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.168720][ T9515] XFS (loop4): Ending recovery (logdev: internal)
[  230.230781][ T9458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.243906][ T9547] loop1: detected capacity change from 0 to 1024
[  230.288247][ T9458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  230.318860][ T9547] EXT4-fs (loop1): Ignoring removed bh option
[  230.323623][ T9458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.412990][ T9547] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x000000000000007c,lazytime,nodelalloc,usrquota,bsdgroups,bh,init_itable,,errors=continue. Quota mode: writeback.
[  230.446615][ T9458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.494881][ T4201] XFS (loop4): Unmounting Filesystem
[  230.645274][  T155] device hsr_slave_0 left promiscuous mode
[  230.660820][  T155] device hsr_slave_1 left promiscuous mode
[  230.692311][ T9562] WARNING! power/level is deprecated; use power/control instead
[  230.726950][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.767004][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.802529][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.832234][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.845116][ T9568] loop1: detected capacity change from 0 to 512
[  230.852932][  T155] device bridge_slave_1 left promiscuous mode
[  230.860798][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.893659][  T155] device bridge_slave_0 left promiscuous mode
[  230.908486][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.061114][  T155] device veth1_macvtap left promiscuous mode
[  231.077274][  T155] device veth0_macvtap left promiscuous mode
[  231.093188][  T155] device veth1_vlan left promiscuous mode
[  231.106495][  T155] device veth0_vlan left promiscuous mode
[  231.418004][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1966'.
[  231.710825][ T5786] Bluetooth: hci3: command 0x041b tx timeout
[  231.747049][  T155] team0 (unregistering): Port device team_slave_1 removed
[  231.803794][  T155] team0 (unregistering): Port device team_slave_0 removed
[  231.828403][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.866417][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.088553][  T155] bond0 (unregistering): Released all slaves
[  232.164280][ T9458] device hsr_slave_0 entered promiscuous mode
[  232.177748][ T9458] device hsr_slave_1 entered promiscuous mode
[  232.185643][ T9458] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  232.215990][ T9458] Cannot create hsr debugfs directory
[  232.237407][   T26] audit: type=1326 audit(1792102098.626:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.6.1979" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb92e144559 code=0x7ffc0000
[  232.302666][ T9622] 9pnet: Insufficient options for proto=fd
[  232.324323][   T26] audit: type=1326 audit(1792102098.676:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.6.1979" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb92e144559 code=0x7ffc0000
[  232.383158][   T26] audit: type=1326 audit(1792102098.676:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.6.1979" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb92e144559 code=0x0
[  232.617802][ T9634] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1985'.
[  232.819280][ T9644] loop1: detected capacity change from 0 to 2048
[  232.832739][ T9458] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  232.886257][ T9458] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  232.905665][ T9458] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  232.945717][ T9649] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1990'.
[  232.961176][ T9644] NILFS (loop1): invalid segment: Magic number mismatch
[  233.000994][ T9458] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  233.020287][ T9644] NILFS (loop1): trying rollback from an earlier position
[  233.074078][ T9644] NILFS (loop1): recovery complete
[  233.125846][ T9653] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.279520][ T9644] NILFS (loop1): nilfs_dat_move: invalid vblocknr = 9, [0, 0)
[  233.344913][ T9658] loop4: detected capacity change from 0 to 2048
[  233.355957][ T9458] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.376954][ T9644] NILFS error (device loop1): nilfs_bmap_assign: broken bmap (inode number=3)
[  233.412995][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  233.441297][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  233.469423][ T9644] Remounting filesystem read-only
[  233.521671][ T9458] 8021q: adding VLAN 0 to HW filter on device team0
[  233.529659][ T9644] NILFS (loop1): error -5 cleaning segments
[  233.544085][ T9658] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  233.580249][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  233.622697][ T9644] NILFS (loop1): error -30 cleaning segments
[  233.635557][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  233.690122][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.697357][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.704981][   T26] audit: type=1800 audit(1792102100.076:128): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2002" name="file1" dev="loop4" ino=15 res=0 errno=0
[  233.741739][ T9658] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  233.775102][ T4188] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  233.790662][ T5786] Bluetooth: hci3: command 0x040f tx timeout
[  233.820001][ T4188] VFS: Busy inodes after unmount of loop1. Self-destruct in 5 seconds.  Have a nice day...
[  233.839425][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  233.864448][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  233.878787][ T9658] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28
[  233.900146][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  233.927522][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.934722][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.951120][ T9658] EXT4-fs (loop4): This should not happen!! Data will be lost
[  233.951120][ T9658] 
[  233.968696][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  233.976998][ T9658] EXT4-fs (loop4): Total free blocks count 0
[  233.983211][ T9658] EXT4-fs (loop4): Free/Dirty block details
[  234.005509][ T9658] EXT4-fs (loop4): free_blocks=2415919104
[  234.015808][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  234.030166][ T9658] EXT4-fs (loop4): dirty_blocks=32
[  234.082840][ T9658] EXT4-fs (loop4): Block reservation details
[  234.095866][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  234.133386][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  234.144010][ T9658] EXT4-fs (loop4): i_reserved_data_blocks=2
[  234.157846][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  234.172387][   T26] audit: type=1800 audit(1792102100.546:129): pid=9674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2002" name="file1" dev="loop4" ino=15 res=0 errno=0
[  234.197505][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  234.235580][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  234.272006][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  234.303291][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  234.331444][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  234.350948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  234.373501][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  234.708127][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  234.716526][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  234.739108][ T9458] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.045812][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  235.061098][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  235.096298][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  235.105588][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  235.119145][ T9458] device veth0_vlan entered promiscuous mode
[  235.126770][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  235.135840][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  235.155808][ T9458] device veth1_vlan entered promiscuous mode
[  235.211225][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  235.220356][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  235.247457][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  235.257801][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  235.276645][ T9458] device veth0_macvtap entered promiscuous mode
[  235.292119][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  235.311614][ T9458] device veth1_macvtap entered promiscuous mode
[  235.348743][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.359835][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.380039][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.410492][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.430498][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.444336][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.456728][ T9458] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.471804][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  235.490020][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  235.515484][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.541020][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.560433][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.580125][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.590267][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.616888][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.627407][ T9458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.638365][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.651310][ T9458] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.662958][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  235.679434][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  235.702090][ T9458] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.712355][ T9458] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.723499][ T9458] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.735541][ T9458] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.870608][ T4567] Bluetooth: hci3: command 0x0419 tx timeout
[  235.899287][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.928824][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.962354][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  235.983575][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.001236][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.019203][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  236.116436][ T1274] ==================================================================
[  236.126052][ T1274] BUG: KASAN: use-after-free in down_read_trylock+0xaf/0x3b0
[  236.133688][ T1274] Read of size 8 at addr ffff88802465c0d8 by task kworker/u4:5/1274
[  236.142664][ T1274] 
[  236.145024][ T1274] CPU: 0 PID: 1274 Comm: kworker/u4:5 Not tainted syzkaller #0
[  236.152659][ T1274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  236.163637][ T1274] Workqueue: writeback wb_workfn (flush-7:1)
[  236.170324][ T1274] Call Trace:
[  236.173657][ T1274]  <TASK>
[  236.176624][ T1274]  dump_stack_lvl+0x188/0x250
[  236.181344][ T1274]  ? show_regs_print_info+0x20/0x20
[  236.187126][ T1274]  ? load_image+0x410/0x410
[  236.192180][ T1274]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  236.197825][ T1274]  print_address_description+0x60/0x2d0
[  236.203458][ T1274]  ? down_read_trylock+0xaf/0x3b0
[  236.208610][ T1274]  kasan_report+0xdf/0x130
[  236.213104][ T1274]  ? down_read_trylock+0xaf/0x3b0
[  236.219166][ T1274]  down_read_trylock+0xaf/0x3b0
[  236.224105][ T1274]  ? __init_rwsem+0x160/0x160
[  236.228827][ T1274]  ? move_expired_inodes+0x722/0x770
[  236.234255][ T1274]  trylock_super+0x1c/0xf0
[  236.238727][ T1274]  __writeback_inodes_wb+0x114/0x3f0
[  236.244218][ T1274]  wb_writeback+0x45e/0xbc0
[  236.249039][ T1274]  ? rcu_lock_release+0x20/0x20
[  236.254235][ T1274]  ? __lock_acquire+0x7d40/0x7d40
[  236.259687][ T1274]  ? cpumask_next+0xb3/0xd0
[  236.265126][ T1274]  wb_workfn+0xbd6/0xf20
[  236.269992][ T1274]  ? inode_wait_for_writeback+0x220/0x220
[  236.276653][ T1274]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  236.282970][ T1274]  ? __lock_acquire+0x7d40/0x7d40
[  236.288055][ T1274]  ? read_lock_is_recursive+0x10/0x10
[  236.293911][ T1274]  ? preempt_schedule_thunk+0x16/0x18
[  236.299433][ T1274]  process_one_work+0x867/0xff0
[  236.304459][ T1274]  ? worker_detach_from_pool+0x240/0x240
[  236.310167][ T1274]  ? lockdep_hardirqs_off+0x70/0x100
[  236.315510][ T1274]  ? _raw_spin_lock_irq+0xb7/0xf0
[  236.320583][ T1274]  ? _raw_spin_lock_irqsave+0x100/0x100
[  236.326612][ T1274]  ? wq_worker_running+0x97/0x170
[  236.331685][ T1274]  worker_thread+0xad7/0x12a0
[  236.336577][ T1274]  kthread+0x42e/0x520
[  236.340694][ T1274]  ? rcu_lock_release+0x20/0x20
[  236.345587][ T1274]  ? kthread_blkcg+0xd0/0xd0
[  236.350593][ T1274]  ret_from_fork+0x1f/0x30
[  236.355196][ T1274]  </TASK>
[  236.358268][ T1274] 
[  236.360642][ T1274] Allocated by task 9644:
[  236.365828][ T1274]  __kasan_kmalloc+0xaf/0xe0
[  236.370909][ T1274]  alloc_super+0x59/0x970
[  236.376069][ T1274]  sget+0x1ce/0x450
[  236.380155][ T1274]  nilfs_mount+0x452/0x8c0
[  236.384714][ T1274]  legacy_get_tree+0xe6/0x180
[  236.389631][ T1274]  vfs_get_tree+0x88/0x270
[  236.394202][ T1274]  do_new_mount+0x247/0xa40
[  236.399350][ T1274]  __se_sys_mount+0x2e3/0x3d0
[  236.404141][ T1274]  do_syscall_64+0x4c/0xa0
[  236.408580][ T1274]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  236.414798][ T1274] 
[  236.417131][ T1274] Freed by task 4262:
[  236.422018][ T1274]  kasan_set_track+0x4b/0x70
[  236.427263][ T1274]  kasan_set_free_info+0x1f/0x40
[  236.433541][ T1274]  ____kasan_slab_free+0xd5/0x110
[  236.439078][ T1274]  slab_free_freelist_hook+0xec/0x170
[  236.445746][ T1274]  kfree+0xef/0x2a0
[  236.449827][ T1274]  process_one_work+0x867/0xff0
[  236.454742][ T1274]  worker_thread+0xad7/0x12a0
[  236.460458][ T1274]  kthread+0x42e/0x520
[  236.464569][ T1274]  ret_from_fork+0x1f/0x30
[  236.469016][ T1274] 
[  236.471377][ T1274] Last potentially related work creation:
[  236.477313][ T1274]  kasan_save_stack+0x35/0x60
[  236.482012][ T1274]  kasan_record_aux_stack+0xb8/0x100
[  236.487586][ T1274]  insert_work+0x54/0x3d0
[  236.492305][ T1274]  __queue_work+0x90b/0xc80
[  236.496852][ T1274]  queue_work_on+0x124/0x1f0
[  236.501805][ T1274]  rcu_core+0x96e/0x1650
[  236.506585][ T1274]  handle_softirqs+0x336/0x830
[  236.511451][ T1274]  __irq_exit_rcu+0x13b/0x230
[  236.516259][ T1274]  irq_exit_rcu+0x5/0x20
[  236.522233][ T1274]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  236.527955][ T1274]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  236.534072][ T1274] 
[  236.536437][ T1274] Second to last potentially related work creation:
[  236.543262][ T1274]  kasan_save_stack+0x35/0x60
[  236.547973][ T1274]  kasan_record_aux_stack+0xb8/0x100
[  236.554205][ T1274]  call_rcu+0x189/0x900
[  236.558388][ T1274]  deactivate_locked_super+0xc7/0xf0
[  236.563784][ T1274]  cleanup_mnt+0x426/0x4d0
[  236.568262][ T1274]  task_work_run+0x125/0x1a0
[  236.572994][ T1274]  exit_to_user_mode_loop+0x10f/0x130
[  236.578400][ T1274]  exit_to_user_mode_prepare+0xee/0x180
[  236.584059][ T1274]  syscall_exit_to_user_mode+0x16/0x40
[  236.589538][ T1274]  do_syscall_64+0x58/0xa0
[  236.593975][ T1274]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  236.599888][ T1274] 
[  236.602223][ T1274] The buggy address belongs to the object at ffff88802465c000
[  236.602223][ T1274]  which belongs to the cache kmalloc-4k of size 4096
[  236.616820][ T1274] The buggy address is located 216 bytes inside of
[  236.616820][ T1274]  4096-byte region [ffff88802465c000, ffff88802465d000)
[  236.630228][ T1274] The buggy address belongs to the page:
[  236.636413][ T1274] page:ffffea0000919600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24658
[  236.646687][ T1274] head:ffffea0000919600 order:3 compound_mapcount:0 compound_pincount:0
[  236.655785][ T1274] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  236.663817][ T1274] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888017842140
[  236.672504][ T1274] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  236.681118][ T1274] page dumped because: kasan: bad access detected
[  236.687548][ T1274] page_owner tracks the page as allocated
[  236.693289][ T1274] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 10879584732, free_ts 0
[  236.711600][ T1274]  get_page_from_freelist+0x24f6/0x2670
[  236.717181][ T1274]  __alloc_pages+0x1ee/0x480
[  236.721803][ T1274]  alloc_page_interleave+0x24/0x1e0
[  236.727017][ T1274]  new_slab+0xc0/0x4b0
[  236.731998][ T1274]  ___slab_alloc+0x807/0xdd0
[  236.736615][ T1274]  kmem_cache_alloc_trace+0xf9/0x290
[  236.741919][ T1274]  kobject_uevent_env+0x275/0x890
[  236.746956][ T1274]  driver_register+0x3e2/0x430
[  236.751735][ T1274]  usb_serial_register_drivers+0x6f0/0xbf0
[  236.758113][ T1274]  do_one_initcall+0x272/0x730
[  236.762903][ T1274]  do_initcall_level+0x13d/0x1f0
[  236.767864][ T1274]  do_initcalls+0x4b/0x90
[  236.772211][ T1274]  kernel_init_freeable+0x3d5/0x560
[  236.777436][ T1274]  kernel_init+0x19/0x1b0
[  236.781780][ T1274]  ret_from_fork+0x1f/0x30
[  236.786223][ T1274] page_owner free stack trace missing
[  236.791700][ T1274] 
[  236.794144][ T1274] Memory state around the buggy address:
[  236.800650][ T1274]  ffff88802465bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  236.809125][ T1274]  ffff88802465c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  236.817213][ T1274] >ffff88802465c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  236.825378][ T1274]                                                     ^
[  236.832328][ T1274]  ffff88802465c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  236.840887][ T1274]  ffff88802465c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  236.848966][ T1274] ==================================================================
[  236.857061][ T1274] Disabling lock debugging due to kernel taint
[  236.865329][ T1274] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  236.872575][ T1274] CPU: 0 PID: 1274 Comm: kworker/u4:5 Tainted: G    B             syzkaller #0
[  236.881533][ T1274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  236.891610][ T1274] Workqueue: writeback wb_workfn (flush-7:1)
[  236.897642][ T1274] Call Trace:
[  236.900949][ T1274]  <TASK>
[  236.903903][ T1274]  dump_stack_lvl+0x188/0x250
[  236.908613][ T1274]  ? show_regs_print_info+0x20/0x20
[  236.913848][ T1274]  ? load_image+0x410/0x410
[  236.918413][ T1274]  panic+0x2f8/0x850
[  236.922341][ T1274]  ? bpf_jit_dump+0xd0/0xd0
[  236.926874][ T1274]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  236.932805][ T1274]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  236.938730][ T1274]  ? _raw_spin_unlock+0x40/0x40
[  236.943622][ T1274]  ? down_read_trylock+0xaf/0x3b0
[  236.948689][ T1274]  check_panic_on_warn+0x80/0xa0
[  236.953684][ T1274]  ? down_read_trylock+0xaf/0x3b0
[  236.960291][ T1274]  end_report+0x6d/0xf0
[  236.964491][ T1274]  kasan_report+0x102/0x130
[  236.969184][ T1274]  ? down_read_trylock+0xaf/0x3b0
[  236.975185][ T1274]  down_read_trylock+0xaf/0x3b0
[  236.980085][ T1274]  ? __init_rwsem+0x160/0x160
[  236.984916][ T1274]  ? move_expired_inodes+0x722/0x770
[  236.990256][ T1274]  trylock_super+0x1c/0xf0
[  236.994687][ T1274]  __writeback_inodes_wb+0x114/0x3f0
[  236.999989][ T1274]  wb_writeback+0x45e/0xbc0
[  237.004515][ T1274]  ? rcu_lock_release+0x20/0x20
[  237.009406][ T1274]  ? __lock_acquire+0x7d40/0x7d40
[  237.014548][ T1274]  ? cpumask_next+0xb3/0xd0
[  237.019149][ T1274]  wb_workfn+0xbd6/0xf20
[  237.023417][ T1274]  ? inode_wait_for_writeback+0x220/0x220
[  237.029182][ T1274]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  237.035211][ T1274]  ? __lock_acquire+0x7d40/0x7d40
[  237.040280][ T1274]  ? read_lock_is_recursive+0x10/0x10
[  237.045865][ T1274]  ? preempt_schedule_thunk+0x16/0x18
[  237.051287][ T1274]  process_one_work+0x867/0xff0
[  237.056375][ T1274]  ? worker_detach_from_pool+0x240/0x240
[  237.062260][ T1274]  ? lockdep_hardirqs_off+0x70/0x100
[  237.067708][ T1274]  ? _raw_spin_lock_irq+0xb7/0xf0
[  237.073241][ T1274]  ? _raw_spin_lock_irqsave+0x100/0x100
[  237.078928][ T1274]  ? wq_worker_running+0x97/0x170
[  237.084040][ T1274]  worker_thread+0xad7/0x12a0
[  237.088782][ T1274]  kthread+0x42e/0x520
[  237.092896][ T1274]  ? rcu_lock_release+0x20/0x20
[  237.097786][ T1274]  ? kthread_blkcg+0xd0/0xd0
[  237.102421][ T1274]  ret_from_fork+0x1f/0x30
[  237.106884][ T1274]  </TASK>
[  237.110302][ T1274] Kernel Offset: disabled
[  237.114672][ T1274] Rebooting in 86400 seconds..