last executing test programs:

49.076367793s ago: executing program 2 (id=406):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0xc048aeca, &(0x7f0000001440)=@svm={0x3, 0x1, 0x1080, {0xd000}, {"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"}})

48.681444387s ago: executing program 2 (id=410):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)

48.452603214s ago: executing program 2 (id=414):
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000780)=ANY=[], 0x15)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
splice(r0, 0x0, r2, 0x0, 0x50f5d137, 0xa)

48.239628409s ago: executing program 2 (id=416):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
unlink(&(0x7f00000002c0)='./file1\x00')

47.900453304s ago: executing program 2 (id=420):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x197f, 0x4)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/12, 0xc}, 0x7ff}], 0x1, 0x2020, 0x0)

47.280412175s ago: executing program 2 (id=425):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd28, 0x4000001, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x50000004}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}}, 0x80)

46.63205564s ago: executing program 32 (id=425):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd28, 0x4000001, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x50000004}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}}, 0x80)

4.329245987s ago: executing program 1 (id=671):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x40, 0x6, {}, {0x7, 0x8, 0x0, 0x0, 0x5, 0x8, '|^b!'}, 0x0, 0x1, {0x0}, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x101, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "186856f3"}})

3.924339723s ago: executing program 1 (id=673):
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x53b}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

3.681407272s ago: executing program 1 (id=676):
r0 = io_uring_setup(0x78ec, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x2, 0x1f9})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbfc0000cf000000", 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ppoll(&(0x7f0000000200)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0)

3.501183912s ago: executing program 3 (id=677):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x112)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

3.500176072s ago: executing program 4 (id=685):
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0)

3.328500759s ago: executing program 4 (id=679):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

3.152752388s ago: executing program 4 (id=680):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
sendfile(r0, r0, 0x0, 0x10000000009)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xa00, 0x4000a00})

2.751451273s ago: executing program 0 (id=682):
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d})

2.637760342s ago: executing program 1 (id=683):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e)

2.364282506s ago: executing program 0 (id=684):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x7)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2000000)

1.545277669s ago: executing program 1 (id=686):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)

1.41244353s ago: executing program 0 (id=687):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.337022673s ago: executing program 3 (id=688):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000140)={0xc, r1})
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)={0x18, 0x0, 0xc45, 0x1f63})

1.22749903s ago: executing program 4 (id=689):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000480)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000005c0)="99", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000003c0)=')', 0x1}], 0x1}}], 0x2, 0x44)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7}, 0x8)

1.17251062s ago: executing program 1 (id=690):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/716, @ANYRES16, @ANYRES64], 0x5, 0x558b, &(0x7f00000079c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000001240)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0xdd5})

1.076212565s ago: executing program 0 (id=691):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="7f454c4680040000fd7f08000000000003003e00ecffffff9803000000000000400000000000000056000000000000000000da200500380001000000020f000003"], 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

1.001695967s ago: executing program 4 (id=692):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f0000000580)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@bh}, {@oldalloc}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000001f40)={'NETMAP\x00'}, &(0x7f0000006300)=0x1e)

567.685668ms ago: executing program 3 (id=693):
r0 = socket$kcm(0x11, 0xa, 0x300)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000600)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="b8b0518b513fdbe59f0b000000dcf199f1767dc9010da785eb4e93f6a297a8d762c1c2a301a4d653461dcce2fb5f17919d", 0x31}, {&(0x7f0000004580)="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", 0xfbf}], 0x2}, 0x0)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0)

566.826128ms ago: executing program 0 (id=701):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x20000023896)

438.194589ms ago: executing program 4 (id=694):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="000022eb0200c0ff060000000400aaaaaaaaaaaa"], 0xf8)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

342.711284ms ago: executing program 3 (id=695):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f00000005c0)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='b *:* rmm'], 0x9)

242.78898ms ago: executing program 3 (id=696):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='P'], 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
fstat(r0, &(0x7f0000000340))

211.488496ms ago: executing program 0 (id=697):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x4, 0x2b4, &(0x7f00000013c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x26a200, 0x59)
unshare(0x24060400)
fstatfs(r0, 0x0)

0s ago: executing program 3 (id=698):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
sendfile(r0, r0, 0x0, 0x10000000009)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xa00, 0x4000a00})

kernel console output (not intermixed with test programs):

e_slave_0) entered forwarding state
[   88.010696][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.049710][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.067168][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.098200][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.105391][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.123414][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.167570][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.240587][ T5768] 8021q: adding VLAN 0 to HW filter on device team0
[   88.286262][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.293513][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.325704][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.332942][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.377792][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.491417][ T5768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   88.502634][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   88.528568][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   88.536483][ T5770] Bluetooth: hci0: command tx timeout
[   88.554167][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.585023][  T135] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.592279][  T135] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.630315][ T5779] 8021q: adding VLAN 0 to HW filter on device team0
[   88.653939][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.661185][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.690461][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.697972][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.708538][ T5770] Bluetooth: hci1: command tx timeout
[   88.714020][ T5770] Bluetooth: hci2: command tx timeout
[   88.777133][ T5770] Bluetooth: hci3: command tx timeout
[   88.794828][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.802110][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.929408][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.001568][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.105426][ T5772] veth0_vlan: entered promiscuous mode
[   89.133435][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.164537][ T5772] veth1_vlan: entered promiscuous mode
[   89.332266][ T5772] veth0_macvtap: entered promiscuous mode
[   89.381057][ T5772] veth1_macvtap: entered promiscuous mode
[   89.391845][ T5768] veth0_vlan: entered promiscuous mode
[   89.413946][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.433659][ T5768] veth1_vlan: entered promiscuous mode
[   89.481043][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.492616][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.510225][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.545888][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.556674][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.565524][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.577054][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.655732][ T5768] veth0_macvtap: entered promiscuous mode
[   89.698484][ T5768] veth1_macvtap: entered promiscuous mode
[   89.741540][ T5779] veth0_vlan: entered promiscuous mode
[   89.769363][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.785179][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.813230][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.825699][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.838726][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.850489][ T5779] veth1_vlan: entered promiscuous mode
[   89.870632][ T5776] veth0_vlan: entered promiscuous mode
[   89.905278][ T5776] veth1_vlan: entered promiscuous mode
[   89.913758][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.928915][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.942123][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.960379][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.984380][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.001157][ T5779] veth0_macvtap: entered promiscuous mode
[   90.026839][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.035629][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.045038][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.055105][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.075111][ T5779] veth1_macvtap: entered promiscuous mode
[   90.141098][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.153210][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.164423][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.176707][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.189036][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.224277][ T5776] veth0_macvtap: entered promiscuous mode
[   90.235325][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.246696][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.257314][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.268115][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.287791][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.310647][ T5776] veth1_macvtap: entered promiscuous mode
[   90.371860][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.409996][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.421017][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.431648][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.440724][ T5833] program syz.3.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   90.520805][  T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.564813][  T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.589055][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.601154][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.611669][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.623148][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.633764][ T5770] Bluetooth: hci0: command tx timeout
[   90.640635][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.651308][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.663641][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.681622][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.695102][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.706149][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.716814][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.726776][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.738452][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.750539][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.776640][ T5770] Bluetooth: hci2: command tx timeout
[   90.778182][   T51] Bluetooth: hci1: command tx timeout
[   90.841671][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.856648][   T51] Bluetooth: hci3: command tx timeout
[   90.865059][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.874837][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.884055][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.906364][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.926031][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.040767][  T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.053369][  T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.178083][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.209606][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.347943][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.355840][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.518991][  T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.560509][  T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.703071][ T5853] netlink: 'syz.2.3': attribute type 6 has an invalid length.
[   91.738973][ T5857] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   91.776485][ T5853] netlink: 'syz.2.3': attribute type 6 has an invalid length.
[   91.806624][ T5853] Zero length message leads to an empty skb
[   91.807513][ T5856] netlink: 'syz.1.8': attribute type 10 has an invalid length.
[   91.923368][ T5856] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   91.993284][ T5854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.382826][   T27] cfg80211: failed to load regulatory.db
[   92.466891][ T5613] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   92.477155][ T5873] input: syz1 as /devices/virtual/input/input5
[   92.666588][  T967] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   92.694470][ T5613] usb 4-1: Using ep0 maxpacket: 16
[   92.700341][   T51] Bluetooth: hci0: command tx timeout
[   92.737607][ T5613] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[   92.791649][ T5613] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[   92.811900][ T5613] usb 4-1: Product: syz
[   92.832219][ T5613] usb 4-1: Manufacturer: syz
[   92.842474][ T5613] usb 4-1: SerialNumber: syz
[   92.856188][  T967] usb 1-1: Using ep0 maxpacket: 8
[   92.861386][   T51] Bluetooth: hci2: command tx timeout
[   92.863027][ T5770] Bluetooth: hci1: command tx timeout
[   92.879948][  T967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.890013][ T5613] usb 4-1: config 0 descriptor??
[   92.919790][  T967] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   92.936602][ T5770] Bluetooth: hci3: command tx timeout
[   92.949112][  T967] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[   92.966039][  T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.984380][  T967] usb 1-1: Product: syz
[   92.990943][  T967] usb 1-1: Manufacturer: syz
[   92.995616][  T967] usb 1-1: SerialNumber: syz
[   93.027187][  T967] usb 1-1: config 0 descriptor??
[   93.244996][ T5812] usb 4-1: USB disconnect, device number 2
[   93.301234][  T967] usb 1-1: USB disconnect, device number 2
[   93.335104][ T5887] syz.1.21[5887]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   93.351255][ T5887] loop1: detected capacity change from 0 to 8
[   93.422590][ T5890] input: syz0 as /devices/virtual/input/input6
[   93.477985][ T5887] SQUASHFS error: Unable to read directory block [629:fe]
[   93.995496][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'.
[   94.215740][ T5906] capability: warning: `syz.3.30' uses 32-bit capabilities (legacy support in use)
[   94.257312][ T5906] program syz.3.30 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.650291][ T5898] loop1: detected capacity change from 0 to 32768
[   94.725209][ T5898] (syz.1.26,5898,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   94.780614][ T5898] (syz.1.26,5898,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   94.871492][ T5898] JBD2: Ignoring recovery information on journal
[   94.963017][ T5910] loop0: detected capacity change from 0 to 32768
[   94.986127][ T5812] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   95.002575][ T5910] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.32 (5910)
[   95.042321][ T5910] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   95.056570][ T5910] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   95.070963][ T5910] BTRFS info (device loop0): force clearing of disk cache
[   95.080611][ T5910] BTRFS info (device loop0): metadata ratio 0
[   95.088180][ T5910] BTRFS info (device loop0): enabling ssd optimizations
[   95.095378][ T5910] BTRFS info (device loop0): using spread ssd allocation scheme
[   95.102338][ T5898] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   95.123827][ T5910] BTRFS info (device loop0): using free space tree
[   95.179489][ T5812] usb 4-1: Using ep0 maxpacket: 16
[   95.239070][ T5812] usb 4-1: unable to get BOS descriptor or descriptor too short
[   95.275805][ T5812] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[   95.319516][ T5910] BTRFS info (device loop0): auto enabling async discard
[   95.358162][ T5812] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   95.393817][ T5910] BTRFS info (device loop0): rebuilding free space tree
[   95.403375][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.425710][ T5812] usb 4-1: Product: syz
[   95.452173][ T5812] usb 4-1: Manufacturer: syz
[   95.467421][ T5812] usb 4-1: SerialNumber: syz
[   95.602802][ T5936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.35'.
[   95.753357][ T5812] usb 4-1: Audio class v2/v3 interfaces need an interface association
[   95.789871][ T5812] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[   95.865845][ T5776] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   96.072864][ T5938] loop2: detected capacity change from 0 to 8192
[   96.108425][ T5938] =======================================================
[   96.108425][ T5938] WARNING: The mand mount option has been deprecated and
[   96.108425][ T5938]          and is ignored by this kernel. Remove the mand
[   96.108425][ T5938]          option from the mount to silence this warning.
[   96.108425][ T5938] =======================================================
[   96.289544][ T5812] usb 4-1: USB disconnect, device number 3
[   96.538189][ T5768] ocfs2: Unmounting device (7,1) on (node local)
[   97.267103][ T5942] loop0: detected capacity change from 0 to 32768
[   97.296649][ T5942] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.37 (5942)
[   97.391738][ T5942] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   97.420969][ T5942] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   97.464048][ T5942] BTRFS info (device loop0): setting nodatasum
[   97.494442][ T5942] BTRFS info (device loop0): force zlib compression, level 3
[   97.516024][ T5942] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[   97.545255][ T5942] BTRFS info (device loop0): use lzo compression, level 0
[   97.567213][ T5942] BTRFS info (device loop0): turning on flush-on-commit
[   97.575682][ T5942] BTRFS info (device loop0): enabling auto defrag
[   97.600658][ T5942] BTRFS info (device loop0): max_inline at 4096
[   97.627752][ T5942] BTRFS info (device loop0): using free space tree
[   97.689469][ T5958] loop1: detected capacity change from 0 to 4096
[   97.860130][ T5942] BTRFS info (device loop0): enabling ssd optimizations
[   98.436430][ T5776] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   98.696514][ T5810] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   98.921230][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.946321][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.976098][ T5810] usb 2-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00
[   99.005844][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.046977][ T5810] usb 2-1: config 0 descriptor??
[   99.491132][ T5810] lg-g15 0003:046D:0A07.0001: unknown main item tag 0x1
[   99.508459][ T6001] loop3: detected capacity change from 0 to 512
[   99.526072][ T5810] lg-g15 0003:046D:0A07.0001: item fetching failed at offset 2/5
[   99.540305][ T5810] lg-g15: probe of 0003:046D:0A07.0001 failed with error -22
[   99.723201][ T5808] usb 2-1: USB disconnect, device number 2
[   99.781668][ T6001] EXT4-fs (loop3): unsupported inode size: 4096
[   99.801468][ T6001] EXT4-fs (loop3): blocksize: 1024
[  100.023034][ T5998] loop0: detected capacity change from 0 to 32768
[  100.350076][ T6014] loop3: detected capacity change from 0 to 1024
[  100.463408][ T6014] hfsplus: invalid extended attribute record
[  100.501524][ T6014] hfsplus: catalog searching failed
[  100.549301][  T135] hfsplus: b-tree write err: -5, ino 8
[  100.917897][ T6028] loop2: detected capacity change from 0 to 16
[  100.946438][ T6028] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  101.068024][ T6030] netlink: 'syz.0.59': attribute type 10 has an invalid length.
[  101.076394][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.086110][ T5812] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  101.118475][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.158229][ T6030] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  101.286131][ T5812] usb 4-1: Using ep0 maxpacket: 32
[  101.304412][ T6034] loop2: detected capacity change from 0 to 1024
[  101.312353][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.359538][ T5812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.374120][ T5812] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  101.418100][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.453194][ T5812] usb 4-1: config 0 descriptor??
[  101.474831][ T5812] hub 4-1:0.0: USB hub found
[  101.510993][ T6039] loop1: detected capacity change from 0 to 1024
[  101.581774][ T6039] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002]
[  101.594482][  T135] hfsplus: b-tree write err: -5, ino 25
[  101.612329][ T6039] System zones: 0-1, 3-36
[  101.624154][  T135] hfsplus: b-tree write err: -5, ino 4
[  101.631222][  T135] hfsplus: b-tree write err: -5, ino 2
[  101.671258][ T6039] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.72: bad orphan inode 134217728
[  101.723039][ T5812] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  101.740689][ T6039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.018023][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.064469][ T6049] loop0: detected capacity change from 0 to 4096
[  102.138872][ T5812] hid-generic 0003:046D:C31C.0002: item fetching failed at offset 0/1
[  102.180322][ T5812] hid-generic: probe of 0003:046D:C31C.0002 failed with error -22
[  102.244356][ T6053] loop2: detected capacity change from 0 to 512
[  102.263556][ T6049] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  102.341343][ T6053] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.78: invalid indirect mapped block 10 (level 1)
[  102.368192][ T6052] loop1: detected capacity change from 0 to 4096
[  102.381279][ T6053] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.78: invalid indirect mapped block 8 (level 1)
[  102.399172][ T6053] EXT4-fs (loop2): 1 truncate cleaned up
[  102.406989][ T6053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.419368][ T6052] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  102.505623][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.596280][  T787] usb 4-1: USB disconnect, device number 4
[  102.952680][ T6060] loop2: detected capacity change from 0 to 512
[  103.017465][ T6060] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  103.052313][ T6060] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  103.128777][ T6060] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  103.156735][ T6060] EXT4-fs (loop2): 1 truncate cleaned up
[  103.181354][ T6060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.329282][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.736465][  T787] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  103.911402][ T6089] input: syz1 as /devices/virtual/input/input7
[  103.957046][  T787] usb 4-1: Using ep0 maxpacket: 16
[  103.968084][  T787] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  103.992252][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.012908][  T787] usb 4-1: Product: syz
[  104.026042][  T787] usb 4-1: Manufacturer: syz
[  104.030746][  T787] usb 4-1: SerialNumber: syz
[  104.287627][  T787] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  104.321070][  T787] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  104.337994][  T787] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  104.374308][  T787] usb 4-1: media controller created
[  104.430775][  T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  104.446361][ T5810] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  104.550365][ T6093] ntfs3: loop0: ino=21, "file1" attr_insert_range
[  104.636469][ T5810] usb 2-1: Using ep0 maxpacket: 32
[  104.668375][ T5810] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  104.697231][  T787] zl10353_read_register: readreg error (reg=127, ret==-71)
[  104.699857][ T5810] usb 2-1: config 0 has no interface number 0
[  104.735874][ T5810] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  104.788949][ T5810] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  104.809147][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.809629][ T6099] set_capacity_and_notify: 2 callbacks suppressed
[  104.809670][ T6099] loop0: detected capacity change from 0 to 4096
[  104.845841][ T5810] usb 2-1: Product: syz
[  104.851506][ T5810] usb 2-1: Manufacturer: syz
[  104.867020][  T787] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5
[  104.871105][ T5810] usb 2-1: SerialNumber: syz
[  104.906747][  T787] usb 4-1: USB disconnect, device number 5
[  104.907193][ T5810] usb 2-1: config 0 descriptor??
[  104.922372][ T6095] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  104.964866][ T6099] NILFS (loop0): invalid segment: Checksum error in segment payload
[  104.994610][ T6099] NILFS (loop0): trying rollback from an earlier position
[  105.081478][ T6099] NILFS (loop0): recovery complete
[  105.115394][ T6105] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.229831][ T6095] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  105.417732][ T5830] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  105.616157][ T5830] usb 3-1: Using ep0 maxpacket: 16
[  105.635070][ T5830] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40
[  105.648366][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.657198][ T5830] usb 3-1: Product: syz
[  105.661437][ T5830] usb 3-1: Manufacturer: syz
[  105.671581][ T5830] usb 3-1: SerialNumber: syz
[  105.869965][ T5810] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  105.904562][ T5810] asix: probe of 2-1:0.188 failed with error -71
[  105.929012][ T5810] usb 2-1: USB disconnect, device number 3
[  105.957952][ T5830] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  106.026439][ T5830] usb 3-1: USB disconnect, device number 2
[  106.037281][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.107'.
[  106.125346][ T6104] udevd[6104]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  106.313140][ T6121] loop3: detected capacity change from 0 to 512
[  106.371868][ T6121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.407209][ T6121] ext4 filesystem being mounted at /26/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.600622][ T6121] EXT4-fs error (device loop3): ext4_get_first_dir_block:3595: inode #12: comm syz.3.109: directory missing '.'
[  106.634949][ T6121] EXT4-fs (loop3): Remounting filesystem read-only
[  106.798331][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.812249][ T6134] loop2: detected capacity change from 0 to 1024
[  106.855851][ T6134] EXT4-fs: Ignoring removed orlov option
[  106.876377][ T6134] EXT4-fs: Ignoring removed nobh option
[  106.963797][ T6134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.085655][ T6140] loop3: detected capacity change from 0 to 4096
[  107.112958][ T6140] EXT4-fs: Ignoring removed nobh option
[  107.151556][ T6140] EXT4-fs (loop3): Test dummy encryption mode enabled
[  107.181430][ T6140] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  107.234199][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.246581][ T6140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.510609][ T6132] loop0: detected capacity change from 0 to 32768
[  107.531959][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.631447][ T6132] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  107.680110][ T6157] loop3: detected capacity change from 0 to 512
[  107.688858][ T6157] EXT4-fs: Ignoring removed i_version option
[  107.691436][ T6132] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  107.777318][ T6157] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  107.786931][ T6161] __sock_release: fasync list not empty!
[  107.893735][ T6157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.948254][ T6157] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.013775][ T6132] XFS (loop0): Ending clean mount
[  108.068858][ T6132] XFS (loop0): Quotacheck needed: Please wait.
[  108.175161][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.197625][ T5810] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  108.235978][ T5810] XFS (loop0): Unmount and run xfs_repair
[  108.244491][ T5810] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  108.260096][ T5810] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  108.306004][ T5810] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  108.353937][ T5810] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  108.379867][ T5810] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  108.421244][ T5810] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  108.460961][ T5810] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  108.490987][ T5810] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.520851][ T5810] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  108.556412][  T135] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74
[  108.595655][ T6132] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  108.802260][ T6132] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  108.842772][ T6132] XFS (loop0): Unmount and run xfs_repair
[  108.876155][ T6132] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  108.902645][ T6132] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  108.933111][ T6132] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  108.959579][ T6132] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  108.980557][ T6132] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  108.998149][ T6172] loop2: detected capacity change from 0 to 32768
[  109.007227][ T6132] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  109.021209][ T6172] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz.2.124 (6172)
[  109.043946][ T6132] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  109.055787][ T6132] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  109.085208][ T6172] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  109.095671][ T6132] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  109.108643][ T6172] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  109.121069][ T6132] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74
[  109.133727][ T6172] BTRFS info (device loop2): using free space tree
[  109.160631][ T6132] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  109.196494][ T6132] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  109.278068][ T6172] BTRFS info (device loop2): enabling ssd optimizations
[  109.285256][ T6172] BTRFS info (device loop2): auto enabling async discard
[  109.353896][ T5776] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  109.355640][ T6174] loop1: detected capacity change from 0 to 40427
[  109.393800][ T6174] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  109.435993][ T6174] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  109.487060][ T6174] F2FS-fs (loop1): invalid crc value
[  109.565119][ T6174] F2FS-fs (loop1): Found nat_bits in checkpoint
[  109.707744][ T6202] loop3: detected capacity change from 0 to 8
[  109.880846][ T5779] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  109.911575][ T6174] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  109.934191][ T6174] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  110.163358][ T6208] overlayfs: workdir and upperdir must reside under the same mount
[  111.956302][ T5830] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  112.146160][ T6236] program syz.2.141 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  112.168300][ T5830] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  112.195999][ T5830] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  112.219018][ T5830] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  112.250166][ T5830] usb 2-1: config 220 has no interface number 2
[  112.270484][ T5830] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  112.313922][ T5830] usb 2-1: config 220 interface 0 has no altsetting 0
[  112.331157][ T5830] usb 2-1: config 220 interface 76 has no altsetting 0
[  112.352949][ T5830] usb 2-1: config 220 interface 1 has no altsetting 0
[  112.378994][ T5830] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  112.399872][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.416084][ T5830] usb 2-1: Product: syz
[  112.423550][ T5830] usb 2-1: Manufacturer: syz
[  112.436332][ T5830] usb 2-1: SerialNumber: syz
[  112.526737][ T6246] warning: `syz.2.145' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  112.699200][ T5830] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  112.716246][ T5830] usb 2-1: No valid video chain found.
[  112.725373][ T5830] usb 2-1: selecting invalid altsetting 0
[  112.772889][ T5830] usb 2-1: selecting invalid altsetting 0
[  112.785773][ T5830] usbtest: probe of 2-1:220.1 failed with error -22
[  112.811672][ T5830] usb 2-1: USB disconnect, device number 4
[  113.440898][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz.3.152'.
[  113.752203][ T6278] sctp: [Deprecated]: syz.2.160 (pid 6278) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.752203][ T6278] Use struct sctp_sack_info instead
[  113.937639][ T5770] Bluetooth: hci3: hcon ffff88802ff1a000 sent 0 < count 137
[  115.123342][ T6298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.168'.
[  115.497353][ T6287] loop1: detected capacity change from 0 to 40427
[  115.510138][ T6287] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  115.527499][ T6287] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  115.572757][ T6287] F2FS-fs (loop1): Found nat_bits in checkpoint
[  115.707000][ T6287] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  115.717996][ T6287] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  115.921299][   T28] audit: type=1800 audit(1776085858.350:2): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.164" name="file1" dev="loop1" ino=11 res=0 errno=0
[  116.724241][ T6324] loop2: detected capacity change from 0 to 32768
[  116.740781][ T6324] XFS: attr2 mount option is deprecated.
[  116.788618][ T6324] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  116.908000][ T6324] XFS (loop2): Ending clean mount
[  116.962951][ T6324] XFS (loop2): Quotacheck needed: Please wait.
[  117.089341][ T6343] loop1: detected capacity change from 0 to 1024
[  117.092780][ T6324] XFS (loop2): Quotacheck: Done.
[  117.187629][ T6343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.257545][   T51] Bluetooth: hci3: command tx timeout
[  117.333442][ T5779] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.428104][ T6348] loop0: detected capacity change from 0 to 4096
[  117.501594][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.561667][ T6329] loop3: detected capacity change from 0 to 32768
[  117.601387][ T6329] (syz.3.181,6329,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  117.647384][ T6329] (syz.3.181,6329,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  117.691405][ T6351] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  117.774180][ T6350] autofs4:pid:6350:autofs_fill_super: called with bogus options
[  117.825172][ T6329] JBD2: Ignoring recovery information on journal
[  117.892770][ T6348] netlink: 256 bytes leftover after parsing attributes in process `syz.0.184'.
[  117.956614][ T6329] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  118.412072][ T5772] ocfs2: Unmounting device (7,3) on (node local)
[  118.978775][ T6368] loop2: detected capacity change from 0 to 8192
[  119.027870][ T6368] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  119.134391][ T6368] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  119.176303][ T6368] REISERFS (device loop2): using ordered data mode
[  119.182914][ T6368] reiserfs: using flush barriers
[  119.203921][ T6368] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  119.267759][ T6368] REISERFS (device loop2): checking transaction log (loop2)
[  119.312372][ T6368] REISERFS (device loop2): Using r5 hash to sort names
[  119.339892][ T6368] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  119.484194][ T6375] loop0: detected capacity change from 0 to 16
[  119.503754][ T6375] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  119.535003][ T5780] udevd[5780]: incorrect cramfs checksum on /dev/loop0
[  119.633028][ T5780] udevd[5780]: incorrect cramfs checksum on /dev/loop0
[  120.069609][ T6370] loop3: detected capacity change from 0 to 40427
[  120.109896][ T6370] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  120.134101][ T6370] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  120.167660][ T6370] F2FS-fs (loop3): invalid crc value
[  120.210221][ T6370] F2FS-fs (loop3): Found nat_bits in checkpoint
[  120.371967][ T6370] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  120.389377][ T6370] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  121.322074][ T6392] loop1: detected capacity change from 0 to 40427
[  121.351454][ T6392] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  121.379636][ T6392] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  121.459474][ T6392] F2FS-fs (loop1): Found nat_bits in checkpoint
[  121.648806][ T6392] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  121.659977][ T6392] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  122.558095][ T6423] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  122.703057][ T6425] loop2: detected capacity change from 0 to 512
[  122.813044][ T6430] loop0: detected capacity change from 0 to 64
[  122.814074][ T6425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.870568][ T6425] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.145014][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.833153][ T6456] bridge0: entered promiscuous mode
[  123.839920][ T6456] macvlan2: entered promiscuous mode
[  123.916450][ T5830] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  124.136656][ T5830] usb 1-1: Using ep0 maxpacket: 8
[  124.152967][ T5830] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  124.171216][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.190998][ T5830] pvrusb2: Hardware description: Terratec Grabster AV400
[  124.200680][ T5830] pvrusb2: **********
[  124.204737][ T5830] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  124.215744][ T5830] pvrusb2: Important functionality might not be entirely working.
[  124.230890][ T5830] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  124.249104][ T5830] pvrusb2: **********
[  124.325248][ T6470] Driver unsupported XDP return value 0 on prog  (id 14) dev N/A, expect packet loss!
[  124.392064][    T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  124.405621][ T2320] pvrusb2: Invalid write control endpoint
[  124.514380][ T2320] pvrusb2: Invalid write control endpoint
[  124.527269][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  124.556038][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  124.563982][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  124.586217][    T8] usb 2-1: Using ep0 maxpacket: 8
[  124.592575][ T2320] pvrusb2: Device being rendered inoperable
[  124.606207][    T8] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  124.626144][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  124.633879][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  124.642885][    T8] usb 2-1: config 0 has no interface number 0
[  124.653099][    T8] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  124.673825][ T2320] pvrusb2: Attached sub-driver cx25840
[  124.675754][ T5830] usb 1-1: USB disconnect, device number 3
[  124.681120][    T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  124.703851][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  124.720886][    T8] usb 2-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0
[  124.729642][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  124.743752][    T8] usb 2-1: Product: syz
[  124.753086][    T8] usb 2-1: config 0 descriptor??
[  124.803531][    T8] iowarrior 2-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0
[  125.023895][ T5830] usb 2-1: USB disconnect, device number 5
[  125.030112][    C1] iowarrior 2-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19
[  125.895219][ T6480] loop3: detected capacity change from 0 to 32768
[  125.957188][ T6480] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  125.993824][ T6480] JBD2: Ignoring recovery information on journal
[  125.997383][    T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  126.054892][ T6480] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  126.147140][ T6500] loop1: detected capacity change from 0 to 512
[  126.186976][ T6501] (syz.3.235,6501,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  126.232254][ T6500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.243135][    T8] usb 3-1: Using ep0 maxpacket: 16
[  126.278363][ T6500] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.338771][    T8] usb 3-1: unable to get BOS descriptor or descriptor too short
[  126.384837][    T8] usb 3-1: no configurations
[  126.402068][    T8] usb 3-1: can't read configurations, error -22
[  126.458285][ T5772] ocfs2: Unmounting device (7,3) on (node local)
[  126.483819][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.943176][ T6511] loop3: detected capacity change from 0 to 2048
[  127.013991][ T6513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.248'.
[  127.037121][ T6511] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  127.087397][ T6511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.599688][ T6520] loop1: detected capacity change from 0 to 8192
[  128.068874][ T6523] loop0: detected capacity change from 0 to 4096
[  128.079619][ T6515] loop2: detected capacity change from 0 to 40427
[  128.116314][ T6515] F2FS-fs (loop2): Corrupted extension count (33554469 + 1 > 64)
[  128.142660][ T6515] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  128.202568][ T6515] F2FS-fs (loop2): invalid crc value
[  128.231749][ T6523] ntfs: volume version 3.1.
[  128.377444][  T135] wlan1: Trigger new scan to find an IBSS to join
[  128.562773][ T6515] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30
[  128.586646][ T6515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  128.850648][ T6515] capability: warning: `syz.2.249' uses deprecated v2 capabilities in a way that may be insecure
[  129.089444][ T6538] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  129.169724][ T6527] loop3: detected capacity change from 0 to 32768
[  129.259962][ T6527] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  129.566135][    T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  129.590744][ T6527] XFS (loop3): Ending clean mount
[  129.621387][ T6527] XFS (loop3): Quotacheck needed: Please wait.
[  129.718909][ T6527] XFS (loop3): Quotacheck: Done.
[  129.780291][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.809428][    T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  129.866391][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.892580][    T8] usb 2-1: config 0 descriptor??
[  129.927444][    T8] pwc: Askey VC010 type 2 USB webcam detected.
[  130.034902][ T6563] netlink: 48 bytes leftover after parsing attributes in process `syz.0.266'.
[  130.083144][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.335208][ T6565] loop2: detected capacity change from 0 to 4096
[  130.356939][    T8] pwc: recv_control_msg error -32 req 02 val 2b00
[  130.481964][ T6565] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  130.517077][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'.
[  130.527218][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'.
[  130.541006][ T6569] netlink: 'syz.0.270': attribute type 6 has an invalid length.
[  130.560377][ T6565] ntfs3: loop2: Failed to load $Extend (-22).
[  130.575376][ T6565] ntfs3: loop2: Failed to initialize $Extend.
[  130.598311][    T8] pwc: recv_control_msg error -71 req 02 val 2c00
[  130.634626][    T8] pwc: recv_control_msg error -71 req 04 val 1000
[  130.653415][    T8] pwc: recv_control_msg error -71 req 04 val 1300
[  130.666394][    T8] pwc: recv_control_msg error -71 req 04 val 1400
[  130.681042][    T8] pwc: recv_control_msg error -71 req 02 val 2000
[  130.710799][    T8] pwc: recv_control_msg error -71 req 02 val 2100
[  130.729728][    T8] pwc: recv_control_msg error -71 req 04 val 1500
[  130.746545][    T8] pwc: recv_control_msg error -71 req 02 val 2500
[  130.754757][    T8] pwc: recv_control_msg error -71 req 02 val 2400
[  130.792371][ T6573] loop0: detected capacity change from 0 to 1024
[  130.803515][ T6573] EXT4-fs: Ignoring removed bh option
[  130.806783][    T8] pwc: recv_control_msg error -71 req 02 val 2600
[  130.841789][    T8] pwc: recv_control_msg error -71 req 02 val 2900
[  130.852898][ T6573] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  130.866123][    T8] pwc: recv_control_msg error -71 req 02 val 2800
[  130.876243][    T8] pwc: recv_control_msg error -71 req 04 val 1100
[  130.900506][    T8] pwc: recv_control_msg error -71 req 04 val 1200
[  130.948889][    T8] pwc: Registered as video103.
[  130.976852][ T6573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.990694][    T8] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8
[  131.116369][    T8] usb 2-1: USB disconnect, device number 6
[  131.128425][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.364432][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'.
[  131.416162][ T2985] wlan1: Trigger new scan to find an IBSS to join
[  131.441890][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'.
[  131.514658][ T6589] loop1: detected capacity change from 0 to 512
[  131.630977][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'.
[  131.641117][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'.
[  131.794395][ T6600] loop3: detected capacity change from 0 to 128
[  132.395742][ T6596] loop2: detected capacity change from 0 to 32768
[  132.424135][ T6596] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.428677][    T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  132.551482][ T6596] XFS (loop2): Ending clean mount
[  132.575394][ T6596] XFS (loop2): Quotacheck needed: Please wait.
[  132.626310][    T8] usb 2-1: Using ep0 maxpacket: 8
[  132.641882][    T8] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  132.653605][    T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  132.685660][    T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  132.719379][    T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  132.731798][ T6596] XFS (loop2): Quotacheck: Done.
[  132.766927][    T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  132.806469][ T6622] netlink: 'syz.3.287': attribute type 1 has an invalid length.
[  132.821286][    T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  132.850992][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.983335][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  133.000444][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.289'.
[  133.010009][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.289'.
[  133.019386][ T6625] macvlan0: entered allmulticast mode
[  133.024974][ T6625] veth1_vlan: entered allmulticast mode
[  133.106382][    T8] usb 2-1: GET_CAPABILITIES returned 0
[  133.112072][    T8] usbtmc 2-1:16.0: can't read capabilities
[  133.301380][ T6628] loop0: detected capacity change from 0 to 1024
[  133.339977][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  133.348082][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  133.383479][ T5808] usb 2-1: USB disconnect, device number 7
[  133.614464][ T2985] hfsplus: bad catalog file entry
[  133.638220][ T2985] hfsplus: b-tree write err: -5, ino 3
[  134.373021][ T6632] loop2: detected capacity change from 0 to 32768
[  134.381163][ T1089] wlan1: Trigger new scan to find an IBSS to join
[  134.435425][ T6632] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  134.464548][ T5830] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  134.483281][ T6632] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  134.615009][ T6632] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  134.646028][ T5830] usb 1-1: Using ep0 maxpacket: 8
[  134.653939][ T5830] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  134.669943][ T5808] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  134.673687][ T5830] usb 1-1: config 179 has no interface number 0
[  134.689012][ T6653] loop3: detected capacity change from 0 to 128
[  134.693248][ T5808] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  134.705590][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  134.728063][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  134.766932][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  134.792827][ T5830] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  134.827291][ T5830] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  134.840952][ T5808] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 147ms
[  134.860028][ T5808] gfs2: fsid=syz:syz.0: jid=0: Done
[  134.874428][ T6632] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  134.899541][ T5830] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  134.947741][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.994254][ T6643] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  135.144462][ T6632] gfs2: fsid=syz:syz.0: found 1 quota changes
[  135.299524][   T49] wlan1: Creating new IBSS network, BSSID 56:05:d6:9b:90:d3
[  135.464088][ T5779] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  135.464088][ T5779]   inode = 11 2339
[  135.464088][ T5779]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421
[  135.509807][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  135.509818][    T8] usb 1-1: USB disconnect, device number 4
[  135.525246][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  135.548027][ T5779] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  135.585518][ T5779] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:5779 [syz-executor] gfs2_quota_sync+0x411/0x5a0
[  135.618660][ T5779] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  135.634520][ T5779] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  135.683189][ T5779] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  135.706138][ T5779] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  135.726317][ T5779] gfs2: fsid=syz:syz.0: File system withdrawn
[  135.732514][ T5779] CPU: 0 PID: 5779 Comm: syz-executor Not tainted syzkaller #0
[  135.740121][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  135.750340][ T5779] Call Trace:
[  135.753672][ T5779]  <TASK>
[  135.756645][ T5779]  dump_stack_lvl+0x18c/0x250
[  135.761380][ T5779]  ? kobject_uevent_env+0x363/0x8b0
[  135.766646][ T5779]  ? show_regs_print_info+0x20/0x20
[  135.771920][ T5779]  ? load_image+0x420/0x420
[  135.776490][ T5779]  ? kobject_uevent_env+0x363/0x8b0
[  135.781757][ T5779]  gfs2_withdraw+0xb24/0x13d0
[  135.786511][ T5779]  ? gfs2_lm+0x240/0x240
[  135.790833][ T5779]  ? gfs2_consist_inode_i+0xf5/0x110
[  135.796234][ T5779]  gfs2_inode_refresh+0xc50/0x1160
[  135.801429][ T5779]  ? gfs2_inode_metasync+0xf0/0xf0
[  135.806597][ T5779]  ? gfs2_glock_nq+0xd4f/0x1420
[  135.811608][ T5779]  gfs2_instantiate+0x162/0x220
[  135.816535][ T5779]  gfs2_glock_wait+0x1d4/0x2a0
[  135.821366][ T5779]  do_sync+0x4c6/0xe50
[  135.825744][ T5779]  ? gfs2_quota_sync+0x411/0x5a0
[  135.830738][ T5779]  ? bh_get+0x760/0x760
[  135.835025][ T5779]  ? __lock_acquire+0x7d40/0x7d40
[  135.840378][ T5779]  ? do_raw_spin_lock+0x11f/0x2c0
[  135.845463][ T5779]  ? gfs2_quota_sync+0x411/0x5a0
[  135.850463][ T5779]  ? do_raw_spin_unlock+0x121/0x230
[  135.855734][ T5779]  gfs2_quota_sync+0x411/0x5a0
[  135.860561][ T5779]  gfs2_sync_fs+0x4c/0xb0
[  135.864935][ T5779]  sync_filesystem+0xea/0x220
[  135.869993][ T5779]  generic_shutdown_super+0x6f/0x2b0
[  135.875312][ T5779]  kill_block_super+0x44/0x90
[  135.880137][ T5779]  deactivate_locked_super+0x97/0x100
[  135.885537][ T5779]  cleanup_mnt+0x43b/0x4d0
[  135.889998][ T5779]  task_work_run+0x1d4/0x260
[  135.894724][ T5779]  ? task_work_cancel+0x220/0x220
[  135.899844][ T5779]  ? exit_to_user_mode_loop+0x3b/0x110
[  135.905374][ T5779]  exit_to_user_mode_loop+0xe6/0x110
[  135.910820][ T5779]  exit_to_user_mode_prepare+0xee/0x180
[  135.916435][ T5779]  syscall_exit_to_user_mode+0x1a/0x50
[  135.922054][ T5779]  do_syscall_64+0x61/0xa0
[  135.926527][ T5779]  ? clear_bhb_loop+0x40/0x90
[  135.931369][ T5779]  ? clear_bhb_loop+0x40/0x90
[  135.936097][ T5779]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  135.942043][ T5779] RIP: 0033:0x7f4ad119da57
[  135.946529][ T5779] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  135.966200][ T5779] RSP: 002b:00007ffe52bcd6a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  135.974738][ T5779] RAX: 0000000000000000 RBX: 00007f4ad1232048 RCX: 00007f4ad119da57
[  135.982746][ T5779] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe52bcd760
[  135.990754][ T5779] RBP: 00007ffe52bcd760 R08: 00007ffe52bce760 R09: 00000000ffffffff
[  135.998759][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe52bce7f0
[  136.006791][ T5779] R13: 00007f4ad1232048 R14: 000000000002108b R15: 00007ffe52bce830
[  136.014921][ T5779]  </TASK>
[  136.069882][   T28] audit: type=1326 audit(1776085878.490:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3179c819 code=0x7ffc0000
[  136.151256][   T28] audit: type=1326 audit(1776085878.490:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3179c819 code=0x7ffc0000
[  136.226015][   T28] audit: type=1326 audit(1776085878.510:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f2d3179c819 code=0x7ffc0000
[  136.307738][   T28] audit: type=1326 audit(1776085878.530:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3179c819 code=0x7ffc0000
[  136.378111][   T28] audit: type=1326 audit(1776085878.540:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f2d3179c819 code=0x7ffc0000
[  136.465992][   T28] audit: type=1326 audit(1776085878.540:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3179c819 code=0x7ffc0000
[  136.535137][   T28] audit: type=1326 audit(1776085878.540:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3179c819 code=0x7ffc0000
[  137.218850][ T6680] loop3: detected capacity change from 0 to 4096
[  137.275695][ T6668] loop0: detected capacity change from 0 to 32768
[  137.330065][ T6668] JBD2: Ignoring recovery information on journal
[  137.342256][ T6680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.521912][ T6668] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  137.634188][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'.
[  137.663644][  T135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.699281][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.759278][   T28] audit: type=1800 audit(1776085880.190:10): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.308" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  137.881132][  T135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.110847][  T135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.228982][ T6668] syz.0.308 (6668) used greatest stack depth: 18064 bytes left
[  138.359288][  T135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.370728][ T5776] ocfs2: Unmounting device (7,0) on (node local)
[  138.620466][ T6706] netlink: 'syz.2.324': attribute type 2 has an invalid length.
[  138.989712][ T5770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  139.002065][ T5770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  139.011267][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  139.020354][ T5770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  139.048569][ T5770] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  139.057974][ T5770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  139.080705][ T6714] loop0: detected capacity change from 0 to 2048
[  139.146256][ T6718] fuse: Unknown parameter 'acerPid:	0
[  139.146256][ T6718] Uid:	0	0	0	0
[  139.146256][ T6718] Gid:	0	0	0	0
[  139.146256][ T6718] FDSize:	256
[  139.146256][ T6718] Groups:	0 10 
[  139.146256][ T6718] NStgid:	176
[  139.146256][ T6718] NSpid:	177
[  139.146256][ T6718] NSpgid:	176
[  139.146256][ T6718] NSsid:	0
[  139.146256][ T6718] Kthread:	0
[  139.146256][ T6718] VmPeak:	  104268 kB
[  139.146256][ T6718] VmSize:	  104268 kB
[  139.146256][ T6718] VmLck:	       0 kB
[  139.146256][ T6718] VmPin:	       0 kB
[  139.146256][ T6718] VmHWM:	   24212 kB
[  139.146256][ T6718] VmRSS:	   24212 kB
[  139.146256][ T6718] RssAnon:	    1412 kB
[  139.146256][ T6718] RssFile:	   22800 kB
[  139.146256][ T6718] RssShmem:	       0 kB
[  139.146256][ T6718] VmData:	   36584 kB
[  139.146256][ T6718] VmStk:	     132 kB
[  139.146256][ T6718] VmExe:	    1772 kB
[  139.146256][ T6718] VmLib:	       8 kB
[  139.146256][ T6718] VmPTE:	     132 kB
[  139.146256][ T6718] VmSwap:	       0 kB
[  139.146256][ T6718] HugetlbPages:	       0 kB
[  139.146256][ T6718] CoreDumping:	0
[  139.146256][ T6718] THP_enabled:	1
[  139.146256][ T6718] untag_mask:	0xffffffffffffffff
[  139.146256][ T6718] Threads:	2
[  139.146256][ T6718] SigQ:	1/13116
[  139.146256][ T6718] SigPnd:	0000000000000000
[  139.146256][ T6718] ShdPnd:	0000000000000000
[  139.146256][ T6718] SigBlk:	0000000000000000
[  139.146256][ T6718] SigIgn:	fffffffefffaba35
[  139.146256][ T6718] SigCgt:	0000000100010440
[  139.146256][ T6718] CapInh:	0000000000000000
[  139.146256][ T6718] CapPrm:	000001ffff77ffff
[  139.146256][ T6718] CapEff:	000001ffff77ffff
[  139.146256][ T6718] CapBnd:	000001ffffffffff
[  139.146256][ T6718] CapAmb:	0000000000000000
[  139.146256][ T6718] NoNewPrivs:	0
[  139.146256][ T6718] Seccomp:	0
[  139.146256][ T6718] Seccomp_filters:	0
[  139.146256][ T6718] Speculation_Store_Bypass:	thread vulnerable
[  139.146256][ T6718] SpeculationIndirectBranch:	conditional enabled
[  139.146256][ T6718] Cpus_allowed:	3
[  139.335525][ T6714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  140.212702][ T6749] option changes via remount are deprecated (pid=6748 comm=syz.0.336)
[  140.426016][ T5810] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  140.447621][ T6754] IPVS: sed: FWM 3 0x00000003 - no destination available
[  140.455276][  T967] IPVS: starting estimator thread 0...
[  140.465234][    C0] IPVS: sed: FWM 3 0x00000003 - no destination available
[  140.576330][ T6756] IPVS: using max 17 ests per chain, 40800 per kthread
[  140.626436][ T5810] usb 3-1: Using ep0 maxpacket: 8
[  140.637065][ T5810] usb 3-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30
[  140.655132][ T5810] usb 3-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.693835][ T5810] usb 3-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.716336][ T5810] usb 3-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193
[  140.742738][ T5810] usb 3-1: config 0 interface 0 has no altsetting 0
[  140.763372][ T6713] chnl_net:caif_netlink_parms(): no params data found
[  140.770577][ T5810] usb 3-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00
[  140.789914][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.817249][ T5810] usb 3-1: config 0 descriptor??
[  141.096774][ T5770] Bluetooth: hci0: command tx timeout
[  141.230472][ T6757] loop0: detected capacity change from 0 to 32768
[  141.259124][ T5810] wacom 0003:056A:010E.0003: unbalanced collection at end of report description
[  141.295817][  T135] bond0: (slave wlan1): Releasing backup interface
[  141.304232][ T6757] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  141.305567][ T5810] wacom 0003:056A:010E.0003: parse failed
[  141.327658][ T6757] JBD2: Ignoring recovery information on journal
[  141.360324][ T5810] wacom: probe of 0003:056A:010E.0003 failed with error -22
[  141.421626][ T6757] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  141.473347][ T5613] usb 3-1: USB disconnect, device number 5
[  141.831970][ T5776] ocfs2: Unmounting device (7,0) on (node local)
[  141.937633][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.971507][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.006798][ T6713] bridge_slave_0: entered allmulticast mode
[  142.017937][ T6713] bridge_slave_0: entered promiscuous mode
[  142.084715][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.120623][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.149132][ T6713] bridge_slave_1: entered allmulticast mode
[  142.175552][ T6713] bridge_slave_1: entered promiscuous mode
[  142.308793][  T135] hsr_slave_0: left promiscuous mode
[  142.318550][  T135] hsr_slave_1: left promiscuous mode
[  142.330308][  T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.338408][  T135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.355390][  T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.363603][  T135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.382967][  T135] bridge_slave_1: left allmulticast mode
[  142.394379][  T135] bridge_slave_1: left promiscuous mode
[  142.403115][  T135] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.437486][  T135] bridge_slave_0: left allmulticast mode
[  142.452310][  T135] bridge_slave_0: left promiscuous mode
[  142.460943][  T135] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.513139][ T5812] hid-generic 0005:10CF:5505.0004: item fetching failed at offset 0/1
[  142.544649][  T135] veth1_macvtap: left promiscuous mode
[  142.547973][ T5812] hid-generic: probe of 0005:10CF:5505.0004 failed with error -22
[  142.555268][  T135] veth0_macvtap: left promiscuous mode
[  142.569938][  T135] veth1_vlan: left promiscuous mode
[  142.576760][  T135] veth0_vlan: left promiscuous mode
[  143.132541][ T6799] loop3: detected capacity change from 0 to 32768
[  143.177416][ T5770] Bluetooth: hci0: command tx timeout
[  143.225980][ T6799] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  143.392844][ T6802] (syz.3.348,6802,0):ocfs2_double_lock:1190 ERROR: status = -2
[  143.402499][ T6802] (syz.3.348,6802,0):ocfs2_rename:1299 ERROR: status = -2
[  143.415070][ T6802] (syz.3.348,6802,0):ocfs2_rename:1690 ERROR: status = -2
[  143.552654][ T5772] ocfs2: Unmounting device (7,3) on (node local)
[  143.804068][  T135] team0 (unregistering): Port device team_slave_1 removed
[  143.873460][  T135] team0 (unregistering): Port device team_slave_0 removed
[  143.975361][  T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.059345][  T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.633711][  T135] bond0 (unregistering): Released all slaves
[  144.706210][ T6812] loop3: detected capacity change from 0 to 32768
[  144.836155][ T6791] batman_adv: batadv0: Adding interface: gretap1
[  144.842572][ T6791] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.933478][ T6791] batman_adv: batadv0: Interface activated: gretap1
[  144.993354][ T6713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.032611][ T6713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.192128][ T6713] team0: Port device team_slave_0 added
[  145.233482][ T6713] team0: Port device team_slave_1 added
[  145.266217][ T5770] Bluetooth: hci0: command tx timeout
[  145.346682][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.353713][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.388805][ T6713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.450006][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.461953][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.491982][ T6713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.635306][ T6713] hsr_slave_0: entered promiscuous mode
[  145.660055][ T6713] hsr_slave_1: entered promiscuous mode
[  145.673534][ T6713] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.685549][ T6713] Cannot create hsr debugfs directory
[  145.968537][ T6839] loop3: detected capacity change from 0 to 512
[  146.009427][ T6839] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  146.066176][ T6839] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.360: inode has both inline data and extents flags
[  146.087467][ T6839] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.360: couldn't read orphan inode 15 (err -117)
[  146.168291][ T6839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.403966][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.673810][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'.
[  146.692897][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'.
[  147.090503][ T6869] process 'syz.0.368' launched '/dev/fd/3' with NULL argv: empty string added
[  147.340586][   T51] Bluetooth: hci0: command tx timeout
[  147.346983][ T6874] netlink: 'syz.0.369': attribute type 3 has an invalid length.
[  147.396012][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'.
[  147.496160][ T5770] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  147.503204][   T51] Bluetooth: hci4: command 0x1003 tx timeout
[  147.732393][ T6713] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  147.773070][ T6713] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  147.822287][ T6713] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  147.871955][ T6713] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  148.139780][ T6713] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.230058][ T6713] 8021q: adding VLAN 0 to HW filter on device team0
[  148.288441][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.295634][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.348920][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.356178][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.051295][ T6890] loop3: detected capacity change from 0 to 32768
[  149.177195][ T6890] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  149.220968][ T6914] loop2: detected capacity change from 0 to 4096
[  149.228526][ T6713] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.290471][ T6914] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  149.450113][ T6914] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  149.470082][ T6899] loop0: detected capacity change from 0 to 32768
[  149.494117][ T6914] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[  149.511901][ T6713] veth0_vlan: entered promiscuous mode
[  149.575650][   T28] audit: type=1800 audit(1776085892.000:11): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.380" name="file2" dev="loop2" ino=31 res=0 errno=0
[  149.644397][ T6899] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  149.655524][ T6713] veth1_vlan: entered promiscuous mode
[  149.683596][ T6890] XFS (loop3): Ending clean mount
[  149.727067][ T6914] ntfs3: loop2: ino=1f, "file2" failed to open parent directory r=5 to update
[  149.871624][ T6914] ntfs3: loop2: ino=1f, "file2" failed to open parent directory r=5 to update
[  149.883971][ T6713] veth0_macvtap: entered promiscuous mode
[  149.935448][ T6713] veth1_macvtap: entered promiscuous mode
[  149.990516][ T6899] XFS (loop0): Ending clean mount
[  150.049608][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.116078][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.156005][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.199194][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.275490][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  150.306945][ T6713] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.379900][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.391854][ T5776] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  150.422915][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.466389][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.489442][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.509186][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.519863][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.546699][ T6713] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.579303][ T6713] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.589098][ T6713] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.598111][ T6713] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.606985][ T6713] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.898106][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.929331][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.958007][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.977439][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.340974][ T6944] loop2: detected capacity change from 0 to 32768
[  151.369583][ T6944] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.381 (6944)
[  151.446901][ T6944] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  151.483453][ T6944] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  151.535717][ T6944] BTRFS info (device loop2): setting nodatasum
[  151.554852][ T6944] BTRFS info (device loop2): force zlib compression, level 3
[  151.572277][ T6944] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  151.600128][ T6944] BTRFS info (device loop2): use lzo compression, level 0
[  151.637624][ T6944] BTRFS info (device loop2): turning on flush-on-commit
[  151.644656][ T6944] BTRFS info (device loop2): enabling auto defrag
[  151.708315][ T6944] BTRFS info (device loop2): max_inline at 4096
[  151.749286][ T6944] BTRFS info (device loop2): using free space tree
[  151.786018][ T5613] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  151.996017][ T6944] BTRFS info (device loop2): enabling ssd optimizations
[  152.003400][ T5613] usb 4-1: Using ep0 maxpacket: 32
[  152.039382][ T5613] usb 4-1: config index 0 descriptor too short (expected 164, got 36)
[  152.074695][ T5613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.136861][ T5613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.176248][ T5613] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  152.210028][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.249352][ T5613] usb 4-1: config 0 descriptor??
[  152.519746][ T6990] loop0: detected capacity change from 0 to 1024
[  152.622658][ T5779] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  152.725717][ T6990] hfsplus: bad catalog folder entry
[  152.740186][ T5613] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[  152.755996][ T5613] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[  152.766105][ T5613] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[  152.773338][ T5613] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[  152.807052][ T5613] logitech 0003:046D:C29C.0005: unknown main item tag 0x0
[  152.845532][ T4385] hfsplus: bad catalog folder entry
[  152.865156][ T5613] logitech 0003:046D:C29C.0005: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0
[  152.877308][ T4385] hfsplus: bad catalog file entry
[  152.936040][  T967] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  153.158472][  T967] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  153.167898][ T5613] logitech 0003:046D:C29C.0005: no inputs found
[  153.178147][  T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.227183][  T967] usb 2-1: config 0 descriptor??
[  153.237971][  T967] cp210x 2-1:0.0: cp210x converter detected
[  153.291289][ T5613] usb 4-1: USB disconnect, device number 6
[  153.665163][  T967] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  153.747781][  T967] usb 2-1: cp210x converter now attached to ttyUSB0
[  153.974650][ T5810] usb 2-1: USB disconnect, device number 8
[  154.009468][ T5810] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  154.078726][ T5810] cp210x 2-1:0.0: device disconnected
[  155.526011][ T7060] loop0: detected capacity change from 0 to 128
[  156.208288][ T7081] tun0: tun_chr_ioctl cmd 1074025677
[  156.213906][ T7081] tun0: linktype set to 0
[  156.342929][ T7087] loop0: detected capacity change from 0 to 1024
[  156.492267][ T7091] loop1: detected capacity change from 0 to 164
[  157.450918][ T4385] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.701756][ T4385] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.809473][ T7099] loop3: detected capacity change from 0 to 32768
[  157.850297][ T7099] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.421 (7099)
[  157.920246][ T4385] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.937224][ T7099] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  157.986146][ T7099] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  158.006092][ T7099] BTRFS info (device loop3): turning on sync discard
[  158.012881][ T7099] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  158.059332][ T7099] BTRFS info (device loop3): use zstd compression, level 3
[  158.076193][ T7099] BTRFS info (device loop3): turning on async discard
[  158.083338][ T7099] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  158.113542][ T7099] BTRFS info (device loop3): trying to use backup root at mount time
[  158.124717][ T4385] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.155338][ T7099] BTRFS info (device loop3): enabling auto defrag
[  158.177391][ T7099] BTRFS info (device loop3): using free space tree
[  158.200100][ T7114] loop0: detected capacity change from 0 to 32768
[  158.353274][   T12] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  158.369126][ T7099] BTRFS error (device loop3): failed to load root extent
[  158.377255][ T7099] BTRFS warning (device loop3): try to load backup roots slot 1
[  158.386111][   T42] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  158.399539][ T7099] BTRFS warning (device loop3): couldn't read tree root
[  158.406655][ T7099] BTRFS warning (device loop3): try to load backup roots slot 2
[  158.427639][ T1089] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  158.463009][ T7114] read_mapping_page failed!
[  158.480918][ T7114] ERROR: (device loop0): txCommit: 
[  158.480918][ T7114] 
[  158.502727][ T7099] BTRFS warning (device loop3): couldn't read tree root
[  158.539263][ T7099] BTRFS warning (device loop3): try to load backup roots slot 3
[  158.666959][ T7099] BTRFS info (device loop3): enabling ssd optimizations
[  158.728966][ T7099] BTRFS info (device loop3): rebuilding free space tree
[  158.844231][ T7099] BTRFS info (device loop3): checking UUID tree
[  158.951189][ T7146] loop0: detected capacity change from 0 to 512
[  159.071615][ T7146] EXT4-fs (loop0): 1 truncate cleaned up
[  159.087519][ T7146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.124563][ T5770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  159.136105][ T5770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  159.144830][ T5770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  159.205920][ T5770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  159.228845][ T5770] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  159.241372][ T5770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  159.305013][   T28] audit: type=1800 audit(1776085901.730:12): pid=7146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.430" name="file1" dev="loop0" ino=15 res=0 errno=0
[  159.335626][ T7155] netlink: 'syz.1.431': attribute type 12 has an invalid length.
[  159.345142][ T7155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.431'.
[  159.563064][ T5772] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.727133][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'.
[  159.782708][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'.
[  160.037601][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.385519][ T7176] erspan0: entered promiscuous mode
[  160.814469][ T7188] loop0: detected capacity change from 0 to 512
[  160.889523][ T7188] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  160.945664][ T7188] EXT4-fs (loop0): orphan cleanup on readonly fs
[  160.959929][ T7188] Quota error (device loop0): v2_read_file_info: Can't read info structure
[  160.971244][ T7188] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  160.986492][ T7188] EXT4-fs (loop0): Cannot turn on quotas: error -5
[  161.029213][ T7188] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.440: bg 0: block 64: padding at end of block bitmap is not set
[  161.085449][ T7188] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  161.110665][ T4385] batman_adv: batadv0: Interface deactivated: gretap1
[  161.167225][ T7188] EXT4-fs (loop0): 1 truncate cleaned up
[  161.174387][ T7188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  161.304384][ T4385] batman_adv: batadv0: Removing interface: gretap1
[  161.336083][ T5777] Bluetooth: hci3: command tx timeout
[  161.389789][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.798010][ T7148] chnl_net:caif_netlink_parms(): no params data found
[  161.813961][ T7209] pim6reg: tun_chr_ioctl cmd 1074812117
[  162.009546][ T7204] loop1: detected capacity change from 0 to 4096
[  162.025804][ T7204] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  162.170012][ T7217] loop6: detected capacity change from 0 to 7
[  162.244982][ T7217] Dev loop6: unable to read RDB block 7
[  162.252786][ T7217]  loop6: unable to read partition table
[  162.259515][ T7217] loop6: partition table beyond EOD, truncated
[  162.282168][ T7217] loop_reread_partitions: partition scan of loop6 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[  162.721011][ T7148] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.756191][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.763641][ T7148] bridge_slave_0: entered allmulticast mode
[  162.837677][ T7148] bridge_slave_0: entered promiscuous mode
[  162.839289][ T7238] loop3: detected capacity change from 0 to 512
[  162.869509][ T7238] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  162.962400][ T7148] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.986783][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.994093][ T7148] bridge_slave_1: entered allmulticast mode
[  163.015117][ T7238] EXT4-fs (loop3): 1 truncate cleaned up
[  163.042943][ T7238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.066628][ T7148] bridge_slave_1: entered promiscuous mode
[  163.155872][ T4385] hsr_slave_0: left promiscuous mode
[  163.160129][ T7238] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.454: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  163.191960][ T4385] hsr_slave_1: left promiscuous mode
[  163.227189][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.238515][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.264022][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.286242][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.304507][ T4385] bridge_slave_1: left allmulticast mode
[  163.323196][ T7238] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[  163.333214][ T4385] bridge_slave_1: left promiscuous mode
[  163.339960][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.359746][ T7238] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.454: Deleting old file: nlink 4, error=-117
[  163.374210][ T4385] bridge_slave_0: left allmulticast mode
[  163.391014][ T7245] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.454: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  163.396486][ T4385] bridge_slave_0: left promiscuous mode
[  163.429387][ T5777] Bluetooth: hci3: command tx timeout
[  163.468661][ T7245] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[  163.476923][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.510972][ T7245] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.454: Deleting old file: nlink 4, error=-117
[  163.591627][ T4385] bridge0: left promiscuous mode
[  163.614034][ T4385] veth1_macvtap: left promiscuous mode
[  163.631919][ T4385] veth0_macvtap: left promiscuous mode
[  163.644762][ T4385] veth1_vlan: left promiscuous mode
[  163.661035][ T4385] veth0_vlan: left promiscuous mode
[  163.689531][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.755658][ T7235] loop1: detected capacity change from 0 to 32768
[  163.800482][ T7235] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  163.840692][ T7235] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  164.134989][ T6713] ocfs2: Unmounting device (7,1) on (node local)
[  164.256123][ T5812] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  164.467149][ T5812] usb 4-1: Using ep0 maxpacket: 16
[  164.503051][ T5812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.550250][ T5812] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  164.565349][ T5812] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  164.575005][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.583753][ T5812] usb 4-1: Product: syz
[  164.592424][ T5812] usb 4-1: Manufacturer: syz
[  164.598518][ T5812] usb 4-1: SerialNumber: syz
[  164.854074][ T5812] usb 4-1: 0:2 : does not exist
[  164.871495][ T5812] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  164.956650][ T5812] usb 4-1: USB disconnect, device number 7
[  165.236940][ T7259] loop1: detected capacity change from 0 to 32768
[  165.319980][ T7259] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  165.470118][ T7259] XFS (loop1): Ending clean mount
[  165.508623][ T7259] XFS (loop1): Quotacheck needed: Please wait.
[  165.515233][ T5777] Bluetooth: hci3: command tx timeout
[  165.637750][ T7259] XFS (loop1): Quotacheck: Done.
[  165.676713][   T28] audit: type=1800 audit(1776085908.100:13): pid=7259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.460" name="file2" dev="loop1" ino=9287 res=0 errno=0
[  165.747760][ T4385] team0 (unregistering): Port device team_slave_1 removed
[  165.810796][ T7278] loop3: detected capacity change from 0 to 64
[  165.902668][ T7278] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  165.942954][ T4385] team0 (unregistering): Port device team_slave_0 removed
[  166.015770][ T6713] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  166.242347][ T4385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.366549][ T7286] loop3: detected capacity change from 0 to 256
[  166.496357][ T4385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.547848][ T5810] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  166.765419][ T5810] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  166.783151][ T5810] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  166.793713][ T5810] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  166.822319][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.844069][ T7284] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  166.858157][ T5810] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  166.897482][ T7292] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  167.200238][ T5810] usb 1-1: USB disconnect, device number 5
[  167.570652][ T7302] loop3: detected capacity change from 0 to 2048
[  167.586710][ T7302] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  167.607420][ T5777] Bluetooth: hci3: command tx timeout
[  167.683758][ T5780] udevd[5780]: incorrect nilfs2 checksum on /dev/loop3
[  167.696510][ T7303] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.738495][ T4385] bond0 (unregistering): Released all slaves
[  168.104324][ T7298] netlink: 80 bytes leftover after parsing attributes in process `syz.1.474'.
[  168.173091][ T7148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.209019][ T7148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.373243][ T7148] team0: Port device team_slave_0 added
[  168.426914][ T7148] team0: Port device team_slave_1 added
[  168.590335][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.636386][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.735413][ T7148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.791151][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.800626][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.876139][ T7148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.100351][ T7148] hsr_slave_0: entered promiscuous mode
[  169.146693][ T7148] hsr_slave_1: entered promiscuous mode
[  169.153314][ T7148] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.176880][ T7148] Cannot create hsr debugfs directory
[  169.216348][ T7332] vivid-002: disconnect
[  169.257448][ T7331] vivid-002: reconnect
[  169.554142][ T7315] loop0: detected capacity change from 0 to 32768
[  169.594589][ T7315] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.482 (7315)
[  169.676891][ T7315] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  169.706898][ T7315] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  169.736952][ T7315] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  169.786481][ T7315] BTRFS info (device loop0): use zstd compression, level 3
[  169.821105][ T7315] BTRFS info (device loop0): using free space tree
[  169.942372][ T7148] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  169.972556][ T7315] BTRFS info (device loop0): enabling ssd optimizations
[  169.980575][ T7315] BTRFS info (device loop0): auto enabling async discard
[  170.006448][ T7148] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  170.108931][ T7148] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  170.157148][ T7148] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  170.502715][ T7148] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.560100][ T7148] 8021q: adding VLAN 0 to HW filter on device team0
[  170.592892][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.600180][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.661505][ T5776] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  170.663201][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.679045][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.138508][ T7341] loop1: detected capacity change from 0 to 40427
[  171.189413][ T7341] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7
[  171.232668][ T7341] F2FS-fs (loop1): invalid crc value
[  171.273263][ T7341] F2FS-fs (loop1): Found nat_bits in checkpoint
[  171.472193][ T7341] F2FS-fs (loop1): Start checkpoint disabled!
[  171.565328][ T7341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  171.678601][ T7148] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.778473][ T7341] syz.1.487: attempt to access beyond end of device
[  171.778473][ T7341] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  172.283177][ T1138] kworker/u4:7: attempt to access beyond end of device
[  172.283177][ T1138] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  172.334621][ T1138] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  172.381164][ T1138] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  172.754194][ T7148] veth0_vlan: entered promiscuous mode
[  172.803744][ T7148] veth1_vlan: entered promiscuous mode
[  172.923093][ T7148] veth0_macvtap: entered promiscuous mode
[  172.954809][ T7148] veth1_macvtap: entered promiscuous mode
[  173.021147][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.048600][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.076112][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.101501][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.141640][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.163198][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.199099][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.211661][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.238610][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.275823][ T7148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.319601][ T7148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.354025][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.403585][ T7429] ip6tnl1: entered allmulticast mode
[  173.424322][ T7148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.470741][ T7148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.486214][ T7148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.495012][ T7148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.781769][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.799126][ T7436] loop0: detected capacity change from 0 to 2048
[  173.807075][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.862669][ T7436] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576
[  173.940020][ T7436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  173.951771][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.989684][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.028946][ T7415] loop3: detected capacity change from 0 to 32768
[  174.109246][ T7442] loop1: detected capacity change from 0 to 64
[  174.286407][ T7415] ERROR: (device loop3): dbAlloc: unable to allocate blocks
[  174.286407][ T7415] 
[  174.355017][ T7415] ERROR: (device loop3): remounting filesystem as read-only
[  174.401121][   T28] audit: type=1800 audit(1776085916.820:14): pid=7442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.506" name="file1" dev="loop1" ino=21 res=0 errno=0
[  174.431778][ T7415] jfs_create: dtInsert returned -EIO
[  174.496557][ T7443] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[  174.496557][ T7443] 
[  174.547145][ T7415] ERROR: (device loop3): jfs_create: 
[  174.547145][ T7415] 
[  174.940263][ T7460] loop4: detected capacity change from 0 to 16
[  174.962601][ T7460] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  175.351630][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.386829][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.394165][ T7471] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.412327][ T7471] bridge_slave_0: left allmulticast mode
[  175.460299][ T7471] bridge_slave_0: left promiscuous mode
[  175.478723][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.533697][ T7471] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  175.936359][  T967] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  176.141293][  T967] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  176.157872][  T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.184233][  T967] usb 4-1: Product: syz
[  176.198763][  T967] usb 4-1: Manufacturer: syz
[  176.208902][  T967] usb 4-1: SerialNumber: syz
[  176.886539][ T5613] IPVS: starting estimator thread 0...
[  176.986663][ T7518] IPVS: using max 21 ests per chain, 50400 per kthread
[  177.038702][ T7523] loop1: detected capacity change from 0 to 256
[  177.065685][  T967] rtl8150 4-1:1.0: eth5: rtl8150 is detected
[  177.092548][ T7523] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  177.283171][   T27] usb 4-1: USB disconnect, device number 8
[  177.290481][ T7527] loop0: detected capacity change from 0 to 128
[  177.306293][ T5613] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  177.356445][ T7527] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  177.521522][ T5613] usb 5-1: unable to get BOS descriptor or descriptor too short
[  177.545609][ T5613] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[  177.555850][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.571768][   T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  177.573895][ T5613] usb 5-1: Product: syz
[  177.591296][ T5613] usb 5-1: Manufacturer: syz
[  177.601239][ T5613] usb 5-1: SerialNumber: syz
[  177.887140][ T5613] usb 5-1: BAAD HEADSET c_chmask mismatch
[  177.991979][ T5613] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  178.002700][ T7538] Bluetooth: MGMT ver 1.22
[  178.063193][ T5613] usb 5-1: USB disconnect, device number 2
[  178.134174][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  178.151211][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.298389][ T7542] loop3: detected capacity change from 0 to 2048
[  178.359439][ T7542] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  178.393620][ T7542] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  178.411727][ T7542] UDF-fs: Scanning with blocksize 512 failed
[  178.483431][ T7542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.597849][  T967] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  178.836392][  T967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.862881][  T967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.897662][  T967] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  178.921658][  T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.932895][  T967] usb 2-1: config 0 descriptor??
[  178.964688][ T7557] loop0: detected capacity change from 0 to 1024
[  179.024953][ T7557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.129688][ T7566] loop3: detected capacity change from 0 to 64
[  179.377594][  T967] playstation 0003:054C:0BA0.0006: unknown main item tag 0x0
[  179.411713][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.457917][  T967] playstation 0003:054C:0BA0.0006: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0
[  179.593233][  T967] playstation 0003:054C:0BA0.0006: Invalid byte count transferred, expected 16 got 1
[  179.646146][  T967] playstation 0003:054C:0BA0.0006: Failed to retrieve DualShock4 pairing info: -22
[  179.679264][  T967] playstation 0003:054C:0BA0.0006: Failed to get MAC address from DualShock4
[  179.721658][  T967] playstation 0003:054C:0BA0.0006: Failed to create dualshock4.
[  179.753362][ T7575] loop3: detected capacity change from 0 to 2048
[  179.795333][  T967] playstation: probe of 0003:054C:0BA0.0006 failed with error -22
[  179.820140][ T7575] EXT4-fs: Ignoring removed oldalloc option
[  179.863842][  T967] usb 2-1: USB disconnect, device number 9
[  179.885799][ T7575] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  179.920822][ T7579] loop0: detected capacity change from 0 to 2048
[  179.937495][ T7575] System zones: 0-7
[  180.007337][ T7575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.047364][ T7579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.082242][ T7575] EXT4-fs error (device loop3): ext4_find_extent:945: inode #2: comm syz.3.546: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  180.152455][ T7575] EXT4-fs (loop3): Remounting filesystem read-only
[  180.335755][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.358904][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.724315][ T7603] loop1: detected capacity change from 0 to 1024
[  180.809079][ T7603] hfsplus: bad catalog entry type
[  180.961936][ T1089] hfsplus: b-tree write err: -5, ino 25
[  180.989729][ T1089] hfsplus: b-tree write err: -5, ino 4
[  180.995496][ T1089] hfsplus: b-tree write err: -5, ino 2
[  181.036038][ T1089] hfsplus: b-tree write err: -5, ino 26
[  181.205363][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'.
[  181.268893][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'.
[  181.667246][ T7629] loop0: detected capacity change from 0 to 2048
[  181.684062][ T7629] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  181.715676][ T7629] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  181.731822][ T7629] UDF-fs: Scanning with blocksize 512 failed
[  181.751740][ T7629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.053102][ T7633] loop0: detected capacity change from 0 to 128
[  182.092629][ T7635] loop3: detected capacity change from 0 to 512
[  182.131447][ T7635] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  182.206985][ T7635] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  182.237041][ T7635] EXT4-fs (loop3): 1 truncate cleaned up
[  182.281618][ T7635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.537836][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.633368][ T7646] loop4: detected capacity change from 0 to 128
[  183.068842][ T7639] loop1: detected capacity change from 0 to 32768
[  183.087573][ T7639] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.567 (7639)
[  183.158507][ T7639] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  183.193030][ T7639] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  183.230422][ T7639] BTRFS info (device loop1): force clearing of disk cache
[  183.275780][ T7639] BTRFS info (device loop1): metadata ratio 0
[  183.292928][ T7639] BTRFS info (device loop1): enabling ssd optimizations
[  183.316706][ T7639] BTRFS info (device loop1): using spread ssd allocation scheme
[  183.348333][ T7639] BTRFS info (device loop1): using free space tree
[  183.500954][ T7639] BTRFS info (device loop1): auto enabling async discard
[  183.537058][ T7639] BTRFS info (device loop1): rebuilding free space tree
[  183.554565][ T7678] vcan0: tx address claim with dlc 0
[  183.977863][ T6713] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  184.018128][ T7688] FAT-fs (loop3): Directory bread(block 199916) failed
[  184.025235][ T7688] FAT-fs (loop3): Directory bread(block 199917) failed
[  184.070932][ T7688] FAT-fs (loop3): Directory bread(block 199918) failed
[  184.109252][ T7688] FAT-fs (loop3): Directory bread(block 199919) failed
[  184.129612][ T7688] FAT-fs (loop3): Directory bread(block 199920) failed
[  184.166180][ T7688] FAT-fs (loop3): Directory bread(block 199921) failed
[  184.200909][ T5780] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop1 scanned by udevd (5780)
[  184.215969][ T7688] FAT-fs (loop3): Directory bread(block 199922) failed
[  184.222948][ T7688] FAT-fs (loop3): Directory bread(block 199923) failed
[  184.452528][ T7688] FAT-fs (loop3): FAT read failed (blocknr 128)
[  184.752992][ T7684] set_capacity_and_notify: 1 callbacks suppressed
[  184.753008][ T7684] loop0: detected capacity change from 0 to 32768
[  184.915477][ T7684] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  185.071994][ T7715] loop4: detected capacity change from 0 to 256
[  185.129566][ T7715] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  185.190969][ T7684] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  185.314377][ T7684] XFS (loop0): Starting recovery (logdev: internal)
[  185.462519][ T7684] XFS (loop0): Ending recovery (logdev: internal)
[  185.591462][ T5776] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  186.134272][ T7744] loop3: detected capacity change from 0 to 256
[  186.183935][ T7744] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  186.266842][   T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  186.497341][   T27] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  186.517105][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.546559][   T27] usb 5-1: Product: syz
[  186.550841][   T27] usb 5-1: Manufacturer: syz
[  186.551722][ T7756] xt_hashlimit: size too large, truncated to 1048576
[  186.555468][   T27] usb 5-1: SerialNumber: syz
[  186.649567][ T7758] �: renamed from vxcan1 (while UP)
[  187.005154][ T7768] loop3: detected capacity change from 0 to 4096
[  187.099289][ T7771] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  187.329486][   T27] rtl8150 5-1:1.0: eth5: rtl8150 is detected
[  187.610577][   T27] usb 5-1: USB disconnect, device number 3
[  187.925826][ T7789] loop3: detected capacity change from 0 to 128
[  188.070714][ T7789] syz.3.610: attempt to access beyond end of device
[  188.070714][ T7789] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128
[  188.908522][ T5808] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  189.117379][ T5808] usb 5-1: Using ep0 maxpacket: 16
[  189.132525][ T5808] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.155371][ T7814] netlink: 80 bytes leftover after parsing attributes in process `syz.0.617'.
[  189.172850][ T5808] usb 5-1: config 0 interface 0 has no altsetting 0
[  189.185778][ T5808] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  189.225784][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.283313][ T5808] usb 5-1: config 0 descriptor??
[  189.594273][ T7804] loop3: detected capacity change from 0 to 32768
[  189.647644][ T7804] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  189.680984][ T7804] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  189.726397][ T7804] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  189.760247][ T5830] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  189.769613][ T5808] mcp2221 0003:04D8:00DD.0007: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  189.770556][ T5830] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  189.827805][ T5830] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 57ms
[  189.835529][ T5830] gfs2: fsid=syz:syz.0: jid=0: Done
[  189.873457][ T7804] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  190.320268][ T5808] usb 5-1: USB disconnect, device number 4
[  190.623044][ T7804] gfs2: fsid=syz:syz.0: found 1 quota changes
[  190.947302][ T5772] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  190.947302][ T5772]   inode = 11 2339
[  190.947302][ T5772]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421
[  190.966326][ T5772] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  190.975616][ T5772] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:5772 [syz-executor] gfs2_quota_sync+0x411/0x5a0
[  190.987770][ T5772] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  190.996716][ T5772] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  191.014127][ T5772] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  191.026841][ T5772] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  191.035416][ T5772] gfs2: fsid=syz:syz.0: File system withdrawn
[  191.042324][ T5772] CPU: 1 PID: 5772 Comm: syz-executor Not tainted syzkaller #0
[  191.049931][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  191.060061][ T5772] Call Trace:
[  191.063490][ T5772]  <TASK>
[  191.066474][ T5772]  dump_stack_lvl+0x18c/0x250
[  191.071217][ T5772]  ? kobject_uevent_env+0x363/0x8b0
[  191.076469][ T5772]  ? show_regs_print_info+0x20/0x20
[  191.081911][ T5772]  ? load_image+0x420/0x420
[  191.086518][ T5772]  ? kobject_uevent_env+0x363/0x8b0
[  191.091803][ T5772]  gfs2_withdraw+0xb24/0x13d0
[  191.096593][ T5772]  ? gfs2_lm+0x240/0x240
[  191.100892][ T5772]  ? queue_delayed_work_on+0x114/0x200
[  191.106507][ T5772]  ? gfs2_consist_inode_i+0xf5/0x110
[  191.111864][ T5772]  gfs2_inode_refresh+0xc50/0x1160
[  191.117031][ T5772]  ? gfs2_inode_metasync+0xf0/0xf0
[  191.122179][ T5772]  ? gfs2_glock_nq+0xd4f/0x1420
[  191.127202][ T5772]  gfs2_instantiate+0x162/0x220
[  191.132121][ T5772]  gfs2_glock_wait+0x1d4/0x2a0
[  191.137040][ T5772]  do_sync+0x4c6/0xe50
[  191.141157][ T5772]  ? gfs2_quota_sync+0x411/0x5a0
[  191.146185][ T5772]  ? bh_get+0x760/0x760
[  191.150396][ T5772]  ? __lock_acquire+0x7d40/0x7d40
[  191.155556][ T5772]  ? do_raw_spin_lock+0x11f/0x2c0
[  191.160621][ T5772]  ? gfs2_quota_sync+0x411/0x5a0
[  191.165598][ T5772]  ? do_raw_spin_unlock+0x121/0x230
[  191.170866][ T5772]  gfs2_quota_sync+0x411/0x5a0
[  191.175683][ T5772]  gfs2_sync_fs+0x4c/0xb0
[  191.180059][ T5772]  sync_filesystem+0xea/0x220
[  191.184785][ T5772]  generic_shutdown_super+0x6f/0x2b0
[  191.190109][ T5772]  kill_block_super+0x44/0x90
[  191.194818][ T5772]  deactivate_locked_super+0x97/0x100
[  191.200230][ T5772]  cleanup_mnt+0x43b/0x4d0
[  191.204789][ T5772]  task_work_run+0x1d4/0x260
[  191.209431][ T5772]  ? task_work_cancel+0x220/0x220
[  191.214523][ T5772]  ? exit_to_user_mode_loop+0x3b/0x110
[  191.220022][ T5772]  exit_to_user_mode_loop+0xe6/0x110
[  191.225401][ T5772]  exit_to_user_mode_prepare+0xee/0x180
[  191.231015][ T5772]  syscall_exit_to_user_mode+0x1a/0x50
[  191.236517][ T5772]  do_syscall_64+0x61/0xa0
[  191.241071][ T5772]  ? clear_bhb_loop+0x40/0x90
[  191.245834][ T5772]  ? clear_bhb_loop+0x40/0x90
[  191.250652][ T5772]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  191.256588][ T5772] RIP: 0033:0x7fe0b319da57
[  191.261060][ T5772] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  191.280809][ T5772] RSP: 002b:00007fff7d908818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  191.289265][ T5772] RAX: 0000000000000000 RBX: 00007fe0b3232048 RCX: 00007fe0b319da57
[  191.297639][ T5772] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7d9088d0
[  191.305654][ T5772] RBP: 00007fff7d9088d0 R08: 00007fff7d9098d0 R09: 00000000ffffffff
[  191.313688][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7d909960
[  191.321721][ T5772] R13: 00007fe0b3232048 R14: 000000000002e936 R15: 00007fff7d9099a0
[  191.329771][ T5772]  </TASK>
[  192.814255][ T7879] tipc: Started in network mode
[  192.840571][ T7879] tipc: Node identity ac14140f, cluster identity 4711
[  192.859386][ T7879] tipc: New replicast peer: 255.255.255.255
[  192.879857][ T7879] tipc: Enabled bearer <udp:syz2>, priority 10
[  192.901018][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'.
[  192.927202][ T7883] tipc: Disabling bearer <udp:syz2>
[  193.192603][ T7889] netlink: 'syz.0.635': attribute type 12 has an invalid length.
[  193.210387][ T7889] netlink: 'syz.0.635': attribute type 29 has an invalid length.
[  193.242661][ T7889] netlink: 148 bytes leftover after parsing attributes in process `syz.0.635'.
[  193.272263][ T7889] netlink: 59 bytes leftover after parsing attributes in process `syz.0.635'.
[  194.802036][ T7909] loop0: detected capacity change from 0 to 32768
[  194.809273][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.815668][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  194.837425][ T7906] loop3: detected capacity change from 0 to 40427
[  194.873633][ T7909] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  194.890198][ T7906] F2FS-fs (loop3): invalid crc value
[  194.922169][ T7909] JBD2: Ignoring recovery information on journal
[  194.946109][ T7906] F2FS-fs (loop3): Found nat_bits in checkpoint
[  195.137010][ T7909] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  195.264940][ T7906] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  195.391412][ T7909] (syz.0.641,7909,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  195.691926][ T5776] ocfs2: Unmounting device (7,0) on (node local)
[  195.724710][ T5772] syz-executor: attempt to access beyond end of device
[  195.724710][ T5772] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  195.767357][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  195.777960][ T7943] loop1: detected capacity change from 0 to 128
[  195.883943][ T7943] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  195.930039][ T7943] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  196.084411][ T7920] loop4: detected capacity change from 0 to 32768
[  196.178942][ T6713] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.200605][ T7920] read_mapping_page failed!
[  196.205719][ T7920] ERROR: (device loop4): txCommit: 
[  196.205719][ T7920] 
[  196.364098][ T7920] jfs_unlink: dtDelete returned -116
[  196.416991][ T7920] jfs_unlink: dtDelete returned -116
[  196.709209][ T7962] loop1: detected capacity change from 0 to 128
[  196.778103][ T7962] syz.1.652: attempt to access beyond end of device
[  196.778103][ T7962] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128
[  196.874504][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'.
[  196.953384][ T7967] loop3: detected capacity change from 0 to 512
[  197.001502][ T7967] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.648: inode has both inline data and extents flags
[  197.180791][ T7967] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.648: couldn't read orphan inode 15 (err -117)
[  197.199454][ T7967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.505036][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.760447][ T7992] loop0: detected capacity change from 0 to 512
[  197.783018][ T7992] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  197.824710][ T7988] loop3: detected capacity change from 0 to 2048
[  197.851439][ T7992] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.658: inode has both inline data and extents flags
[  197.902357][ T7988] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  197.927158][ T7988] NILFS (loop3): mounting unchecked fs
[  197.940991][ T7992] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.658: couldn't read orphan inode 15 (err -117)
[  197.983236][ T7992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.060134][ T5780] udevd[5780]: incorrect nilfs2 checksum on /dev/loop3
[  198.089603][ T7988] NILFS (loop3): recovery complete
[  198.124480][ T8002] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  198.383077][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.532294][ T8008] program syz.3.662 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  198.958720][ T7991] loop4: detected capacity change from 0 to 32768
[  199.083386][ T7991] JBD2: Ignoring recovery information on journal
[  199.265421][ T8019] loop0: detected capacity change from 0 to 8192
[  199.311261][ T7991] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  199.329626][ T8019] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  199.408684][ T8019] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  199.467273][ T8019] REISERFS (device loop0): using ordered data mode
[  199.474009][ T8019] reiserfs: using flush barriers
[  199.514374][   T28] audit: type=1800 audit(1776085941.940:15): pid=7991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.651" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  199.526141][ T8019] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  199.622913][ T8019] REISERFS (device loop0): checking transaction log (loop0)
[  199.641473][ T8019] REISERFS (device loop0): Using r5 hash to sort names
[  199.653438][ T8019] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  200.028310][ T7148] ocfs2: Unmounting device (7,4) on (node local)
[  200.067665][ T8034] program syz.0.675 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  200.214932][ T8040] loop3: detected capacity change from 0 to 256
[  200.288120][ T8040] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  200.327996][ T8040] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  200.403611][ T8045] loop0: detected capacity change from 0 to 512
[  200.414674][ T8040] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  200.506652][ T8045] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.670: iget: bad i_size value: 38620345925642
[  200.658818][ T8045] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.670: couldn't read orphan inode 15 (err -117)
[  200.696503][ T8045] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.802701][ T8057] loop3: detected capacity change from 0 to 8
[  200.893195][ T8057] SQUASHFS error: Failed to read block 0x1ec: -5
[  200.904222][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  200.926045][ T8057] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  202.232777][ T8070] loop3: detected capacity change from 0 to 32768
[  202.338010][ T8070] JBD2: Ignoring recovery information on journal
[  202.556101][ T8070] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  202.776554][ T8100] sp0: Synchronizing with TNC
[  202.811298][   T28] audit: type=1800 audit(1776085945.240:16): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.677" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  203.352725][ T5772] ocfs2: Unmounting device (7,3) on (node local)
[  203.780781][ T8125] loop4: detected capacity change from 0 to 1024
[  203.807262][ T8125] EXT4-fs: Ignoring removed bh option
[  203.812758][ T8125] EXT4-fs: Ignoring removed oldalloc option
[  203.836057][ T8125] EXT4-fs: Ignoring removed nobh option
[  203.872552][ T8125] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  203.925043][ T8125] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block
[  203.925043][ T8125] 
[  204.453050][ T8144] loop0: detected capacity change from 0 to 512
[  204.502070][ T8144] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[  204.512331][ T5830] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  204.536655][ T8144] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  204.558317][ T1089] ------------[ cut here ]------------
[  204.564696][ T1089] WARNING: CPU: 0 PID: 1089 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  204.576149][ T1089] Modules linked in:
[  204.580118][ T1089] CPU: 0 PID: 1089 Comm: kworker/u4:6 Not tainted syzkaller #0
[  204.587797][ T1089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  204.598153][ T1089] Workqueue: phy9 ieee80211_csa_finalize_work
[  204.604399][ T1089] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  204.611889][ T1089] Code: 48 89 df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c
[  204.632075][ T1089] RSP: 0018:ffffc9000477f9c0 EFLAGS: 00010293
[  204.638451][ T1089] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: ffff888023b95a00
[  204.646561][ T1089] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  204.652818][    C1] ------------[ cut here ]------------
[  204.655077][ T1089] RBP: dffffc0000000000 R08: ffff88805d2ad5af R09: 1ffff1100ba55ab5
[  204.660170][    C1] WARNING: CPU: 1 PID: 135 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600
[  204.660220][    C1] Modules linked in:
[  204.660236][    C1] CPU: 1 PID: 135 Comm: kworker/u4:5 Not tainted syzkaller #0
[  204.660259][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  204.668429][ T1089] R10: dffffc0000000000 R11: ffffed100ba55ab6 R12: 0000000000000001
[  204.678371][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[  204.682334][ T1089] R13: ffff88805d2ae5d9 R14: ffff888021092c70 R15: ffff888021092ce8
[  204.689858][    C1] 
[  204.689871][    C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  204.700226][ T1089] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  204.708247][    C1] Code: 24 4c 89 e7 e8 8e 80 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 79 be 82 f7 0f 0b e9 f6 f7 ff ff e8 6d be 82 f7 <0f> 0b e9 48 fb ff ff e8 61 be 82 f7 48 c7 c7 00 85 64 8e 4c 89 e6
[  204.708275][    C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246
[  204.715047][ T1089] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  204.723074][    C1] 
[  204.723084][    C1] RAX: ffffffff8a046393 RBX: ffffffff8a045196 RCX: ffff88801af29e00
[  204.723104][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  204.725487][ T1089] CR2: 00007fe4effb8000 CR3: 0000000060408000 CR4: 00000000003506f0
[  204.731889][    C1] RBP: 0000000000000000 R08: ffff88801af29e00 R09: 0000000000000003
[  204.731909][    C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805d2ae3c0
[  204.731926][    C1] R13: dffffc0000000000 R14: ffff88805d2ae8b0 R15: ffff88805d454c24
[  204.740935][ T1089] Call Trace:
[  204.760561][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  204.760587][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  204.760603][    C1] CR2: 00007feec020a440 CR3: 000000002e5c3000 CR4: 00000000003506e0
[  204.760622][    C1] Call Trace:
[  204.760633][    C1]  <IRQ>
[  204.760645][    C1]  ? __ieee80211_beacon_get+0x36/0x1600
[  204.760689][    C1]  ieee80211_beacon_get_tim+0xbf/0x580
[  204.760722][    C1]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[  204.760764][    C1]  mac80211_hwsim_beacon_tx+0x3c7/0x780
[  204.760800][    C1]  __iterate_interfaces+0x243/0x500
[  204.767195][ T1089]  <TASK>
[  204.773560][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  204.776131][ T1089]  ieee80211_link_use_reserved_context+0x383/0x5c0
[  204.783921][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  204.792138][ T1089]  ieee80211_csa_finalize+0x5a6/0xf20
[  204.800155][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  204.800191][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  204.808263][ T1089]  ? mutex_lock_nested+0x20/0x20
[  204.816280][    C1]  mac80211_hwsim_beacon+0xbb/0x1b0
[  204.816312][    C1]  __hrtimer_run_queues+0x520/0xc40
[  204.824321][ T1089]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  204.827673][    C1]  ? ktime_get_update_offsets_now+0x99/0x3f0
[  204.827713][    C1]  ? hw_scan_work+0xf60/0xf60
[  204.836921][ T1089]  ? ieee80211_csa_finalize_work+0x140/0x140
[  204.843461][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  204.851530][ T1089]  ? read_lock_is_recursive+0x20/0x20
[  204.854902][    C1]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  204.858658][ T1089]  ieee80211_csa_finalize_work+0xf6/0x140
[  204.863381][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  204.868933][ T1089]  ? process_scheduled_works+0x96f/0x15d0
[  204.875739][    C1]  handle_softirqs+0x280/0x820
[  204.881572][ T1089]  process_scheduled_works+0xa5d/0x15d0
[  204.886677][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  204.889751][ T1089]  ? worker_attach_to_pool+0x380/0x380
[  204.895971][    C1]  ? do_softirq+0x1a0/0x1a0
[  204.896006][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  204.902612][ T1089]  ? assign_work+0x3d2/0x5d0
[  204.909852][    C1]  __irq_exit_rcu+0xd3/0x190
[  204.915291][ T1089]  worker_thread+0xa55/0xfc0
[  204.921586][    C1]  ? irq_exit_rcu+0x20/0x20
[  204.921619][    C1]  irq_exit_rcu+0x9/0x20
[  204.921638][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  204.921666][    C1]  </IRQ>
[  204.921675][    C1]  <TASK>
[  204.921685][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  204.921716][    C1] RIP: 0010:get_page_from_freelist+0x2fe/0x19e0
[  204.928798][ T1089]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  204.933744][    C1] Code: ff 48 8b 84 24 28 01 00 00 48 8d 1c c1 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 0c 48 89 df e8 49 f0 0b 00 48 8b 0c 24 48 8b 1b <4c> 8d 71 20 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8
[  204.939448][ T1089]  ? _raw_spin_unlock+0x40/0x40
[  204.944252][    C1] RSP: 0018:ffffc90002d475f8 EFLAGS: 00000246
[  204.950288][ T1089]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  204.956447][    C1] 
[  204.956457][    C1] RAX: 1ffff11027fff5c1 RBX: 0000000000000002 RCX: ffff88813fffae00
[  204.956475][    C1] RDX: ffff88813fffae00 RSI: ffffc90002d477d0 RDI: 00000000001d2820
[  204.956491][    C1] RBP: ffff88813fffc300 R08: dffffc0000000000 R09: 1ffff110035e5620
[  204.956509][    C1] R10: dffffc0000000000 R11: ffffed10035e5621 R12: dffffc0000000000
[  204.961950][ T1089]  kthread+0x2fa/0x390
[  204.967378][    C1] R13: ffffc90002d477c8 R14: 0000000000000003 R15: ffffc90002d477dc
[  204.967508][    C1]  ? __next_zones_zonelist+0x9d/0x130
[  204.972546][ T1089]  ? pr_cont_work+0x560/0x560
[  204.978002][    C1]  ? prepare_alloc_pages+0x366/0x5f0
[  204.978045][    C1]  __alloc_pages+0x1f0/0x460
[  204.984245][ T1089]  ? kthread_blkcg+0xd0/0xd0
[  204.990303][    C1]  ? zone_statistics+0x170/0x170
[  204.990345][    C1]  ? alloc_pages+0x4dc/0x740
[  204.995522][ T1089]  ret_from_fork+0x48/0x80
[  205.001316][    C1]  ? lock_chain_count+0x20/0x20
[  205.001356][    C1]  alloc_slab_page+0x5d/0x160
[  205.006389][ T1089]  ? kthread_blkcg+0xd0/0xd0
[  205.012252][    C1]  new_slab+0x87/0x2d0
[  205.037117][ T1089]  ret_from_fork_asm+0x11/0x20
[  205.041704][    C1]  ___slab_alloc+0xc5d/0x12f0
[  205.049035][ T1089]  </TASK>
[  205.050870][    C1]  ? __alloc_skb+0x138/0x2c0
[  205.055151][ T1089] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  205.055204][ T1089] CPU: 0 PID: 1089 Comm: kworker/u4:6 Not tainted syzkaller #0
[  205.055268][ T1089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  205.055318][ T1089] Workqueue: phy9 ieee80211_csa_finalize_work
[  205.055412][ T1089] Call Trace:
[  205.055434][ T1089]  <TASK>
[  205.055455][ T1089]  dump_stack_lvl+0x18c/0x250
[  205.055570][ T1089]  ? show_regs_print_info+0x20/0x20
[  205.055664][ T1089]  ? load_image+0x420/0x420
[  205.055782][ T1089]  panic+0x2dc/0x730
[  205.055873][ T1089]  ? bpf_jit_dump+0xd0/0xd0
[  205.055971][ T1089]  ? ret_from_fork_asm+0x11/0x20
[  205.056067][ T1089]  __warn+0x2e0/0x470
[  205.056132][ T1089]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  205.056216][ T1089]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  205.056263][ T1089]  report_bug+0x2be/0x4f0
[  205.056277][ T1089]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  205.056351][ T1089]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  205.056426][ T1089]  ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0
[  205.056501][ T1089]  handle_bug+0xcf/0x120
[  205.056557][ T1089]  exc_invalid_op+0x1a/0x50
[  205.056628][ T1089]  asm_exc_invalid_op+0x1a/0x20
[  205.056713][ T1089] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[  205.056795][ T1089] Code: 48 89 df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c
[  205.056840][ T1089] RSP: 0018:ffffc9000477f9c0 EFLAGS: 00010293
[  205.056892][ T1089] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: ffff888023b95a00
[  205.056935][ T1089] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  205.056967][ T1089] RBP: dffffc0000000000 R08: ffff88805d2ad5af R09: 1ffff1100ba55ab5
[  205.057013][ T1089] R10: dffffc0000000000 R11: ffffed100ba55ab6 R12: 0000000000000001
[  205.057048][ T1089] R13: ffff88805d2ae5d9 R14: ffff888021092c70 R15: ffff888021092ce8
[  205.057113][ T1089]  ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0
[  205.057241][ T1089]  ieee80211_link_use_reserved_context+0x383/0x5c0
[  205.057335][ T1089]  ieee80211_csa_finalize+0x5a6/0xf20
[  205.057404][ T1089]  ? mutex_lock_nested+0x20/0x20
[  205.057468][ T1089]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  205.057551][ T1089]  ? ieee80211_csa_finalize_work+0x140/0x140
[  205.057629][ T1089]  ? read_lock_is_recursive+0x20/0x20
[  205.057721][ T1089]  ieee80211_csa_finalize_work+0xf6/0x140
[  205.057797][ T1089]  ? process_scheduled_works+0x96f/0x15d0
[  205.057872][ T1089]  process_scheduled_works+0xa5d/0x15d0
[  205.058046][ T1089]  ? worker_attach_to_pool+0x380/0x380
[  205.058156][ T1089]  ? assign_work+0x3d2/0x5d0
[  205.058246][ T1089]  worker_thread+0xa55/0xfc0
[  205.058322][ T1089]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  205.058389][ T1089]  ? _raw_spin_unlock+0x40/0x40
[  205.058451][ T1089]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  205.058579][ T1089]  kthread+0x2fa/0x390
[  205.058632][ T1089]  ? pr_cont_work+0x560/0x560
[  205.058699][ T1089]  ? kthread_blkcg+0xd0/0xd0
[  205.058763][ T1089]  ret_from_fork+0x48/0x80
[  205.058828][ T1089]  ? kthread_blkcg+0xd0/0xd0
[  205.058884][ T1089]  ret_from_fork_asm+0x11/0x20
[  205.059010][ T1089]  </TASK>
[  205.061403][ T1089] Kernel Offset: disabled