last executing test programs:

5m37.545691399s ago: executing program 3 (id=1109):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x2, 0xd20, 0x400000000400, 0x61133e53})

5m35.294069851s ago: executing program 3 (id=1129):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90)

5m33.310175024s ago: executing program 3 (id=1157):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, r1, 0x309, 0x70bd2b, 0x0, {0x1d}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x40000)

5m33.012343634s ago: executing program 3 (id=1163):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRES64], 0x1, 0x153b, &(0x7f0000000a00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

5m32.610084646s ago: executing program 3 (id=1166):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x103)

5m32.276503427s ago: executing program 3 (id=1170):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8)

5m17.175002319s ago: executing program 32 (id=1170):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8)

4m19.050094321s ago: executing program 4 (id=1794):
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000001580)={{}, {0x4}, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)

4m18.733507842s ago: executing program 4 (id=1796):
io_setup(0x2, &(0x7f0000000080)=<r0=>0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)="9a", 0x1}])

4m18.293716385s ago: executing program 4 (id=1800):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_'])
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, &(0x7f0000000040))

4m18.117577021s ago: executing program 4 (id=1803):
syz_mount_image$nilfs2(&(0x7f0000000a00), &(0x7f0000000080)='./file0\x00', 0x800408, &(0x7f0000000500)=ANY=[@ANYBLOB="00c1d143753d2c083ee422f83383b46202c4de2de291601c80052445e264d4679b97678c14da06e79245374cfb5a59ebaeff670caadb5694b952eb30672a383ac36fadcd60e27a35d7"], 0x1, 0xa0e, &(0x7f00000020c0)="$eJzs3c9vXEcdAPB5G/+MU3tNCpimTQy0JBXUcRwjlQt1Siv1VPUUReJUhTSNcFMgXFpVasofgIKqXiMCAXooAqRwyAGp4oAoByTEhWPVUyUU1EoICVBqFHtmvTv24+36x3rX+/lIX4/fm/Gbed71vtnn2ZkADKza6tfFxZkihLduv/nUiwenxosQwrFGiXpTubWt4RBC0fLz696PGXc/fu38ZmkRFla/pu3w7J3Gz06EEK6G2fBuqIeZ6/WxW+88c/vG0vGz55479+QunX5DsdsVAABAD/juX+7+5tEP3/vK9H9+dXQpjDb2p/55PW5PxH7/fOwo5/3/oiktNulPj2TlDsTI3z8cyMoNZfUMldQ3nB1nuKTcSEV9B5r2bXaeALAfrN/XK2pzLdu12tzc2nX/nvdHR4q5y5eWX7iyRw0FAHbMP58IISwJIYQQYpBiZWqveyAAwKDLxwtvcHVnR+o2jjbWXv13ztQ2/3nYAd1+/qu/v+q/+YZXHHbOfn02pfNKf0dpHEM+jvBA9nOd/v3XsuMMddjOsnGF/TLesKyd+e+1V5W1v9PHca+UtT8fD9urytqfj9PtVWXtH+1yO7aqrP1jXW7HVpW1f7zL7ehXD8U0/R6PZvnN18/8Nb1fXuMBgFb/Nv5PCDHoMdIDbRCiy/H6XndAAICek8+PsxKl/Hw+njw/n4cnz8/nBcrzRyvyxyryAYCNTt+6+Mtrxfr/+bc7Hi6NuzgY04kO25OPR+y0/u2Oe9pu/f0ybgmAwfbyDxeffm/pzIG1+X/Xr2WfZPP/prl6r8XtNF7wULbdmPt3trWeWkm5Q7txUgDA/5Wuv5vO/9v0IaiZMFy8cGn5wnzcnozpH0eHR+/tP9XNRgMA29Lu/P8zoXX+/0ON/cO15n7B1Pr+orlfUM/2L5TsPx23p2P64uj46v658y8vf2unTx4ABtT1s08f/ugPl8Pa/f/1/3+n+//pNn49jrX7KBZI/YT7Qut24/7/idZ6JsvKzbeWmyor93hruXpWbjhGPu9GPj5wPPu5NE4hjXtI/Z1062O6rD3ZBBkjWbmhGPdl7ZnM2rPhfOdb25PPQ5Pqr2f783EPqdx0AICNrrzy6refX16+8D3f+MY3vml8s9evTMBuO/n9l75z8sorrz526aXnL164eOHyqfmFhfnF01/92qmTq/f1Tzbf3QcA9oP1Tv9etwQAAAAAAAAAAAAAACiTf/r3kR+v7d/JjxPv9TkCAK3+8UQIYUmIwYjDPdAGIYTohVhZyVf8BQDork7X29+uxtHifP5p3YOUHnrsr9P3IhW7c6a1v2T9YnZSt5//6u+v+m++sbP1N9YXafv1r9Z6gNnNjvp6Zb0//dHf/tRc/wNDbdafn/+Jyqo2dTOr/3hor/6VG1n9W5wa92dZ/QfbrH/D+T++tfp/Huu/P26f+GK79bc+/mm9nbQcznh2PhMl9f8iO/+0tl/H5z/WwUk3eTvWDwCDqLbXDdglqZeQ+tGpH9K8Pl9oWmcvZOXb7f/XsuPk6/VtVTpu6gd9Pm6n7k5aNzBf77DT9qf1CSez4xZt9mvLnj/98l+lsvbv1OO428ran68H2avK2j/S5XZsVVn787/LXlXW/i2+req6svaPd7kd/epITMuuh+n6Mxnz0nY9257Y5LHYr30LAOh33/j6nx++9uWhb66t/z+y4X1nehs4Ed9Tvx238/e9yXjWdyyy8l+I6Q9i+pOY/j6mH2TH293/tgHAYPrQ5/+EEEKIgYtB//yf+wsMskF//g/6+Q/2q7/Hv0p6fuT38ZOhivzhivyRivzRLD9/vMYq8u/PjrsSpfxPV+R/piL/sxX5MxX5UxX5D1TkH6nIf7Ai/2hF/rGKfAD60+di6vUdAAZH+tyX6z8ADI40sY7rPwAMjk/FtOz6/1BFPgDQfw7H1PUdAAZIsflMj9udtwfoH2l+6fR3HpcDCQ/H9JGYfimmab2ULS6/AvSA//7rd3+/VqzP93cky293Pvmi1vrJu3z9n0fbbE/++b1O57Ovt1nPbtU/vc36AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiu2urXxcWZIoS3br/51IMfXPltEUI41ihRbyq3tjXctD3bcpwQfl2spXc/fu18c/pJTIuwEIpQNPaHZ+80apoIIVwNs+HdUA8z1+tjt9555vaNpeNnzz137sld/BWEtXYBAADA/vW/AAAA//8xrzgs")
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

4m17.133725682s ago: executing program 4 (id=1808):
r0 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

4m16.201345112s ago: executing program 4 (id=1813):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000300)=[{0x20, 0xff, 0x81, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000010340)=[{{0x0, 0x0, &(0x7f0000010280)=[{&(0x7f0000010100)="522d8a43", 0x4}], 0x1}}], 0x1, 0x40000)

4m15.855295933s ago: executing program 33 (id=1813):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000300)=[{0x20, 0xff, 0x81, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000010340)=[{{0x0, 0x0, &(0x7f0000010280)=[{&(0x7f0000010100)="522d8a43", 0x4}], 0x1}}], 0x1, 0x40000)

1m47.59813412s ago: executing program 6 (id=3200):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b00e6071b87"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90)

1m47.360837637s ago: executing program 6 (id=3204):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

1m47.075501376s ago: executing program 6 (id=3205):
r0 = syz_mount_image$udf(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000a05, &(0x7f0000000100)=ANY=[], 0x0, 0xc3c, &(0x7f0000000ec0)="$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")
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$RNDGETENTCNT(r1, 0xc0086c43, &(0x7f0000000340))

1m46.413349907s ago: executing program 6 (id=3210):
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'batadv0\x00', {'wlan1\x00'}})
r0 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)

1m46.063910678s ago: executing program 6 (id=3213):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00')

1m45.758429728s ago: executing program 6 (id=3217):
openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]})
mlockall(0x1)

1m30.500334754s ago: executing program 34 (id=3217):
openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]})
mlockall(0x1)

30.952602093s ago: executing program 5 (id=3809):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x7fffffff, 0x400, 0x1, 0x4949a1da8bfc45d6, 0x7, 0x4, 0x9, 0x92d, 0xfffffff8, 0x7, 0x80, 0xb0c7, 0x4, 0x8, 0x2, 0x10, {0x9, 0xb95}, 0x5, 0xfa}})

30.72898729s ago: executing program 5 (id=3813):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES8=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa8f, &(0x7f0000001400)="$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")
name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x42000)

30.249949525s ago: executing program 5 (id=3818):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0)

29.913742326s ago: executing program 5 (id=3822):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x0)
sendto(r0, &(0x7f0000000000)="b44e683ba402c6658f7de65dbe1ab445f943b317202dd9c8020e7f26ce0c5fe76ad186d22934", 0x26, 0x0, 0x0, 0x0)

29.652502184s ago: executing program 5 (id=3824):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

29.379779443s ago: executing program 5 (id=3829):
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
fcntl$notify(r0, 0x402, 0x5)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

14.223923336s ago: executing program 35 (id=3829):
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c)
fcntl$notify(r0, 0x402, 0x5)
preadv(r0, 0x0, 0x0, 0x0, 0x0)

10.905724452s ago: executing program 1 (id=3975):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f00000000c0)=0x6, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c)

10.697632548s ago: executing program 1 (id=3976):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="0201"], 0x10}}, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080))

10.469982266s ago: executing program 1 (id=3977):
mount$fuse(0x0, 0x0, 0x0, 0x281063, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040', @ANYRESDEC])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40)
write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0x11)

10.232911013s ago: executing program 1 (id=3980):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000006400)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303235342c6c6f6e6761642c756d61736b3d30303030303030303030303030303030303137373737372c646d6f64653d30303030303030303030303030303030303030303430302c756e686964652c73686f727461642c616e63686f723d30303030303030303030303030303030303030372c6e6f7374726963742c696f636861727365743d6b6f69382d72752c00263468691e626cd4f6d91d6fed4bb42a4515346a98d55253771fadd9bb31ceaa8d7647a551ee49f3b17bfc6ae1090b228307b8fdc1935c7e8cbbf9aea203bd"], 0x1, 0xc65, &(0x7f0000000f80)="$eJzs3U9sHNd5APDvjbjiUm4rJnYUJ42LTVuksmK5+hdRsQp3VdNsA8iyEIq5BeBKpNSFKZIgqUY20oJpDz30EKAoesiJQGsUSNHAaIqglwJM6wLJxYfCp56IFjaCoge2CJBTwGBm34pLirRpiZQo6/ezyW929nuz781bztAGv30BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83ssXTpxMD7sXAMCDdGn0qydOuf8DwGPliv/+BwAAAAAAAAAAAACA/S5FEU9GitlLq2m8etxRv9iu3bo9NjyydbOBVLU8UOWXX/WTp06f+dLZoXPdeLE9/QHtd9tn49XRKxcaL83cnJ2bnJ+fnGiMTbevzUxM7vgI99t+s2PVCWjcfO3WxPXr841Tz5/e8PTtwff7nzgyeH7o2ePPdHPHhkdGRtdT6r35fffckY7tKjwORhHHI8Vz3/tJakVEEfd/LuoPdu43G6gGcawaxNjwSDWQqXZreqF88nL3RBQRjZ5Gze452nouoq/2QMewvWbEYtn9ssPHyuGNzrbmWlenJhuXW3ML7YX2zPTl1OltOZ5GFHEuRSxFxEr/3YerRRF9keI7h1fT1Yg40D0PX6wKg7fvR7GHY9yBsp+NWsRS8QjM2T7WH0W8Eil++vbRuJavM9W15gsRr5TxBxFvlvHFiFS+Mc5EvLfF+4hHU18U8Rfl/J9fTRPV9aB7Xbn4tcZXpq/P9OR2rysf8f5w15XiId0fBjbFB2OfX5vqUUSruuKvpnv/ZQcAAAAAAAAAAAAAAACA3TYQRXwmUrz8H39U1RVHVZd++PzQ7w/+cm/N+NMfcpwy9/mIWCx2VpN7MBcGXk6XU3rItcSPs3oU8ce5/u9bD7szAAAAAAAAAAAAAAAAAAAAj7Ui3o0UL7xzNC1F75ri7ekbjSutq1OdVWG7a/9210xfW1tba6RObOY4nuNijks5Lue4kmMUuX0RUS/b58fjRUQ0G3eOv5T3L+e4kmMcyO1zbOY4nuNijks5Lue4kmP05fY5NnMcz3Exx6Ucl3NcyTH2ydq9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfJ0UU8fNI8e1vrKZIEdGMGI9OXO5/2L0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEr9qYjvR4rGHzTv7OuLiFT923G0/HYmmgfL+MloDpXxxWheyLFVxb7mtx5C/7k/tVTEjyNFf/2tOxOe57/WeXTnbRBvfnP90Wf7OvFA98nB9/ufOHL4/NDIrz293XbaqgPHLranb91ujA2PjIz27O7Lr/7Jnn2D+XWL3Rk6ETH/+huvtaamJuc+8sbB7kb5Fvjozbff6IvdOc7ub6S+3R3pxo3yPO7Ccbo/HfvijD3iG9G3L7rxcMbOY6C8/78XKX77nf/s3vA79/96/FLn0Z07fPzsT9bv/y9sPtCO7v+z797VgXz/L69aW93/n+zZ90L+baTWF1FfuDlbOxJRn3/9jePtm60bkzcmp8+cOPHloaEvnz5ROxhRv96emuzZ2o2zBQAAAAAAAAAAAAAAAPAApSJ+N1K0fryaGhFxu6rXGjw/9OzxZw7EgareakPd9qujVy40Xpq5OTs3OT8/OdEYm25fm5mY3OnL1atyr7HhkT0ZzIca2OP+D9Rfmpl9fa594w8Xtnz+UP3C1fmFuda1rZ+OgSgimr17jlUdHhseqTo91W5NV00vb1lM/9HVUhH/FSmunWmkz+d9uf5/c4X/hvr/xc0H2qP6/0/07CtfM6UifhYpfusvn47PV/08FHeds5z3t5Hi2LnP5bw4WOZ1+9D5XIFOZWCZ+3+R4h9/vjG3Ww/55HruyR2f2EdEOf+HI8X3//y78et538bPf9h6/g9tPtAezf9TPfsObfi8gvseOnn+j0eKF598K34j7/ugz//ofrrA0Zx85/M5Bt/v/7M9mP9P9ewbzK/7m7szdAAAAAAAAAAAgEdaLRXxd5HihyN96WzEWmUHf/83sflAm/7mq7ZLf//16Z59E/e1XlHvxr98YM6unFgAAAAA2AdqqYh3I8WNhbfu1FBvrP/uqf/8nfX6z+G06dnq//P9SvW5AbtZ/9lrML/u+P0PGwAAAAAAAAAAAAAAAAAAAPaVlIo4m9dTH6/q+Se2XU99OVK8/D/P5bx0pMzrrgM/WH2vX5qZPn5hamrmWmuhdXVqsjE627o2WbZ9KlKs/s3nctuiWl+9u958Z4339bXY5yLFyN93cztrsXfXJn9qPfdkmfuJSPHf/7Axt7uO9afWc0+VuX8dKb7+z1vnHlnPPV3mfjdS/OjrjW7uoTL3bM799Hru89dmij2YFQAAAAAAAAAAAAAAAAAAAB43tVTEn0aK/725dKeWP6//X+t5WHnzmz3r/W9yu1rnf7Ba/3+77XtZ/7/6XIHF7V4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+nlIU8UakmL20mpb7y8cd9Yvt6Vu3x4ZHtm42kKqWB6r88qt+8tTpM186O3SuGz+4/W77TLw6euVC46WZm7Nzk/PzkxONsen2tZmJyYiBnR2hp32Rd3Xa36Nj1Qlo3Hzt1sT16/ONU8+f3vD07cH3+584Mnh+6Nnjz3Rzx4ZHRkZ7cvpq9/zqd0nb7D8YRfxVpHjuez9JP+yPqMa+7bncmQ957+y1gWoQx6pBjA2PVAOZaremF8onL3dPRBHR6GnU7J6jBzAX96UZsVh2v+zwsXJ4o7OtudbVqcnG5dbcQnuhPTN9OXV6W46nEUWcSxFLEbHSf/fhalHEa5HiO4dX07/2RxzonocvXhr96olT2/ej2MMx7kDZz0YtYql4BOZsH+uPIv4pUvz07aPxb/0RfdH5ii9EvFLGH0S8GZ35TuUb40zEe1u8j3g09UUR/1/O//nV9HZ/eT3oXlcufq3xlenrMz253evKI39/eJD2+bWpHkX8qLrir6Z/93MNAAAAAAAAAAAAAAAAsI8U8auR4oV3jqaqPvhOTXF7+kbjSuvqVKesr1v7162ZXltbW2ukTmzmOJ7jYo5LOS7nuJJjFLl9js0y1tfWxvPjxRyXclzOcSXHOJDb59jMcTzHxRyXclzOcSXH6Mvtc2zmOJ7jYo5LOS7nuJJj7JPaPQAAAAAAAAAAAAAAAAAA4OOlqP5J8e1vrKa1/s760uPRicvWA/3Y+0UAAAD//1Zv8js=")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

9.429682659s ago: executing program 1 (id=3986):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfdac}], 0x1}, 0x4)

8.7816447s ago: executing program 1 (id=3993):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfdfff00c}, {0x6}]}, 0x10)
write$tun(r0, &(0x7f00000000c0)=ANY=[], 0x3a)

8.360388893s ago: executing program 36 (id=3993):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfdfff00c}, {0x6}]}, 0x10)
write$tun(r0, &(0x7f00000000c0)=ANY=[], 0x3a)

4.791285407s ago: executing program 2 (id=4020):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB=' \''], 0x33)
close(r0)

4.628652622s ago: executing program 2 (id=4021):
unshare(0x400)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x11e, 0xd, 0x0, &(0x7f0000000080))

4.489751707s ago: executing program 2 (id=4022):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000080)

3.558077826s ago: executing program 0 (id=4023):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xda69, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x88, [0x1, 0x7, 0x5, 0x3ff, 0x0, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x139, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x1, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0xd, 0x7, 0x9, 0x4, 0x5, 0x9, 0x9, 0x5, 0x258d, 0x2, 0x9, 0x6, 0x4, 0xe, 0x40, 0x7ff, 0x7, 0x0, 0xdea, 0x5, 0xbb], 0x80000000}})

3.535576097s ago: executing program 2 (id=4024):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

3.276770045s ago: executing program 0 (id=4026):
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="00e8b9dc69f0d3e436968487cce32487dcdf83a47adf7166fad1400dc091e25a1d7085f030af2556568a615f9412eb0240139771"], 0x5, 0x1501, &(0x7f0000002a80)="$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")
fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x18b900, 0x1da)

3.14587793s ago: executing program 2 (id=4028):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x34)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)='./file1\x00')

2.604983606s ago: executing program 0 (id=4030):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

2.157762851s ago: executing program 0 (id=4033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000020000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000010800024000000002080005400000000f08000340000000000800064000000001"], 0x9c}}, 0x0)

1.725731165s ago: executing program 0 (id=4034):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x3)

1.695915606s ago: executing program 7 (id=4035):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000884}, 0xc000)

1.402232545s ago: executing program 0 (id=4036):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1.353272317s ago: executing program 7 (id=4037):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10)

1.138086403s ago: executing program 2 (id=4038):
syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000180)={[{@norecovery}, {@norecovery}, {@nodiscard}, {@discard}, {@nobarrier}, {@discard}, {@errors_continue}, {@order_strict}], [], 0x2c}, 0x3, 0xf46, &(0x7f0000000400)="$eJzs3U9sHNUZAPA3a6+dxE68BgoGSkihFYGCHZJUTW9BoB4Rl95BIaERhtKGHoj4E3pAVEIUCXGqOFBxoVRKkVoJVKlCPdGe+ufWE+qFVlUqBfXQIiWuYr+x189+3fV4Pbvr/f2kz89v3ux832Qda2Y8+yYAI6ux/PX48bkihLc+evOhFx4vfn1t2e2raxxa/lrEXiuE0GzrF8n2Po0Lrlx+/tRmbRGOLn8t++HhS6uvnQohXAiHwsehFd5fWPz8vbcfPPzBK3tufP38ky/u0O6vSvcDAAB2o4t/WPzr3X///b2zX1w8eDJMri4vj89bsT8Vj/uPxAPl8ni5Edb3i7ZoN5GsNxajkaw3lqw3nuQZz+RrJttpZtab6JBvrG3ZZvsJAAAAw6g8r22FojG/rt9ozM+vnPdf8+nMRDH/9NnFM+f6VCgAAABQ2b9fWr7pVoxErN3f0f9ahBBCCCFE91E4jhNCbDuWZvpy2QEAAAAYYe3zhe3ZbIULvZ2pa3VrrY35N1v/0gONzV8PPdDp56/XP/+Dmv8/S0tL/czf7/3P5X/3Zb9xAACobrceTZb7VR5Hl/MYpPMIjiWv2+rxfyPZzvgW68zNKzgs8w3m6kz/XQdVrv6tvo/9kqs/nQ9zUOXqT+fpHFS5+idrrqOqXP2bXnsdQLn699ZcR1W5+vfVXEdVufqnaq6jqlz90zXXUVWu/v0111FVrv4DNddRVa7+YbmtNld/q+Y6qsrVP1tzHVXl6r+uu5f/o5e1VJGr//qa66gqV/8NNdfRL7fFtvx3OJiMt58/p+d0w3KOBwAAAKPuv+b/EwMUjQGoQQghhBBCCCF2Y7zU7wsQAAAAQN+VnwsoP/W+FJXjYx3GxzuMNzuMT3QYn+wwDgAAAITwm1fP3PxGsfY5/+3Oh1fOG1XOv7TVeYzS+Qi3mn+7855tN/+wzFsGAADAaCm+/fHVex5659nZLy4ePNl29ns1nu+W84COx2sDH8Z+eV/AdNIvynPok+vzNDLrpdcH9ue298g2dxQAAABGWHn+3gpFY77tvLsVGo35+bXz8bnQLM6cXTx9JPbL57N8MtOcvLb8/q6yDctTyQAAAGB3WTvf3/z8v3yO71yYKOafPrt45txKf3p1ebPRfl1gZm150X5doJUsP5pZfiz2y+d3fndm7/Ly+VPfW3y81zsPAAAAI+Lcc+effGxx8fQPevlNONnjDfrGNzv2zb7BKGPQvun3byYAAKDXPvvszeYPj03/duXz/2vz35Wf/z8U+604t98f4wrlfQLl5wA2fF7/0fV5ZnLrPbN+vVay3liMyaTuPW3bCW3zDZavm83la63fzkQm31SSbzrJl85TMJ6sX+Y7kCxPPwFRrjeTLE/nYRxPchRJ/jsCAAAA5C08+9QzC+eeO3/f2acee+L0E6efPnb0xLdOnDhy/zfvX1i+r3+h/e5+AAAAYBit3fTb70oAAAAAAAAAAAAAAAAAAABgdNXxOLF+7yMAAACMun+9FEK4IITIxMojMPtfhxBCDF2c9fuzv1E+LHnLrx1feRByv+sfpdjTw22NDcD+9D8mBuP4rbF20tX3WsRORHMI39+lpfRJ8wAAAAA768rl50+1txtcKHqab3VrrZXmasxbttP3/WX2WpSrXXpg/fWSfSGEPy8tLfW0KEZW3T//8g9X/ndf7m3+8k+D3f/+a6zfwMlqee9a+Plce/5bxvP523+5Xkr3/5Fq+Q8n+e8K+fzt+7/0TpL/0RD/0LY1dyf593WZf8P+P7Pl1MvuifnnYv/wnd3mX//+T8a23I+9Xeb/erL/j4du8yf73+oyYeLemB8ARlGj3wXskPIooTyOnor9cn/j4eaGI7etHv83ku2Mb7vy9dstj4Nuiv3yeGk6yVvaav1Tyfb2rw01t1JnaljuKsnV36v3cafl6u/qzRsAufonaq6jqlz9kzXXUVWu/j0111FVrv5uz0P7LVf/vprrqCpX/1TNdVSVq3+65jqqytW/v+Y6qsrVf6DmOqrK1T9Tcx1V5eqveFmtdrn6Z2uuo6pc/dfVXEdVufqvr7mOqnL131BzHf1ya2xz58Pl+edMHCv7raQ/ucm/5W69tgAAAADD5p9x/r9PKs8RI4QQQgixWbTdDdP3WoQQQoi+xPe/0f8aVsMn10fbzn6aGYBB5ff/aNvw/g/LB8foCf//R5v3n/+nvIe/SPqlsQ7j4x3Gmx3GJ5Lx9Od1ssP49cl2l6Jy/IYO41/qMH6gw/hNHcbnOozf3GH8lg7jt3YYBwAAYDTcGFvnhwAAALB7vfCLD1/71V2PXp794uLBk2Fiw7zzR2J/Mv5t/dXYT+e9LzXj3/x/FPs/i+3vYvu3ZH33nwAAAMDOK58T4+//AAAAsHuVzyl1/g8AAAC712xsnf8DAADA7nVdbJ3/AwAAwC5W7Nl8cWzL6wJ3xLbbef0AgMH35djeFtuDsb09tl+JbXkccGdsv1pTfQBA7/z0Oz8+8UaxNt//sWT8SlxethtcWLlSUDTWz+S/N7b7Yvu1LutJnwfQbf7SgS7z7FT+mW3mBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2j8by1+PH54oQ3vrozYd+MvHan64tu311jUPLX4vYa4UQmquvK0fX+r+MK165/Pyp9vZqbItwNBShWF0eHr60mmkqhHAhHAofh1Z4f2Hx8/fefvDwB6/sufH180++uIP/BOv2DwAAAHaj/wUAAP//hwkcVQ==")
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
pread64(r0, &(0x7f0000000600)=""/4099, 0x1003, 0x110)

1.098509325s ago: executing program 7 (id=4039):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040801}, 0x0)

653.741549ms ago: executing program 7 (id=4040):
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x3fffff)

416.987026ms ago: executing program 7 (id=4041):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, r1, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0)

0s ago: executing program 7 (id=4042):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0080"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

kernel console output (not intermixed with test programs):

] usb 1-1: setting power ON
[  407.084321][ T4322] dvb-usb: bulk message failed: -22 (2/0)
[  407.092128][ T4322] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  407.103386][ T4322] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  407.111884][ T4322] usb 1-1: media controller created
[  407.132868][ T4322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  407.151457][ T4322] usb 1-1: selecting invalid altsetting 6
[  407.157961][ T4322] usb 1-1: digital interface selection failed (-22)
[  407.164719][ T4322] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  407.174630][ T4322] usb 1-1: setting power OFF
[  407.179498][ T4322] dvb-usb: bulk message failed: -22 (2/0)
[  407.185890][ T4322] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  407.196307][ T4322] (NULL device *): no alternate interface
[  407.218862][T12411] BTRFS info (device loop2): enabling ssd optimizations
[  407.220841][ T4322] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  407.234970][T12411] BTRFS info (device loop2): rebuilding free space tree
[  407.287177][ T4322] usb 1-1: USB disconnect, device number 14
[  407.563946][ T4275] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  408.318216][T12477] loop5: detected capacity change from 0 to 512
[  408.413476][T12477] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  408.494257][T12477] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  408.553779][T12477] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  408.587159][T12477] System zones: 1-12
[  408.592365][T12477] EXT4-fs (loop5): orphan cleanup on readonly fs
[  408.632395][T12477] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.3054: invalid indirect mapped block 2 (level 2)
[  408.667822][T12462] loop1: detected capacity change from 0 to 32768
[  408.678594][T12477] EXT4-fs (loop5): Remounting filesystem read-only
[  408.734164][T12477] EXT4-fs (loop5): 1 truncate cleaned up
[  408.774771][T12477] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  409.010324][ T7546] EXT4-fs (loop5): unmounting filesystem.
[  409.604433][T12481] loop2: detected capacity change from 0 to 32768
[  409.668479][T12481] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  409.710740][T12481] JBD2: Ignoring recovery information on journal
[  409.774345][T12488] loop6: detected capacity change from 0 to 32768
[  409.855669][T12488] ERROR: (device loop6): diWrite: ixpxd invalid
[  409.855669][T12488] 
[  409.905787][T12488] ERROR: (device loop6): remounting filesystem as read-only
[  409.925596][T12481] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  409.944221][T12488] ERROR: (device loop6): txCommit: 
[  409.944221][T12488] 
[  410.501894][ T4275] ocfs2: Unmounting device (7,2) on (node local)
[  410.733117][T12528] loop0: detected capacity change from 0 to 512
[  410.911832][T12528] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  410.974529][T12528] ext4 filesystem being mounted at /627/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  410.983864][T12537] loop2: detected capacity change from 0 to 256
[  411.072702][T12528] EXT4-fs warning (device loop0): ext4_group_add:1723: Can't resize non-sparse filesystem further
[  411.252549][ T4278] EXT4-fs (loop0): unmounting filesystem.
[  411.526276][T12550] loop5: detected capacity change from 0 to 16
[  411.566561][T12550] erofs: (device loop5): mounted with root inode @ nid 36.
[  411.618749][T12550] syz.5.3088: attempt to access beyond end of device
[  411.618749][T12550] loop5: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  411.642414][T12550] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  411.946249][T12560] loop0: detected capacity change from 0 to 164
[  411.975549][T12560] ISOFS: unable to read i-node block
[  411.981057][T12560] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  412.077168][T12560] ISOFS: unable to read i-node block
[  412.125369][T12560] ISOFS: unable to read i-node block
[  412.392537][T12574] device macsec1 entered promiscuous mode
[  412.434022][T12574] device macvlan0 entered promiscuous mode
[  412.482699][T12574] device macvlan0 left promiscuous mode
[  412.735394][T12584] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  412.762405][T12584] net_ratelimit: 3660 callbacks suppressed
[  412.762416][T12584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  413.067029][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  413.067044][   T26] audit: type=1326 audit(1779189259.373:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.1.3111" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685519ce59 code=0x7ffc0000
[  413.097335][    C0] vkms_vblank_simulate: vblank timer overrun
[  413.143059][   T26] audit: type=1326 audit(1779189259.373:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.1.3111" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685519ce59 code=0x7ffc0000
[  413.167674][    C0] vkms_vblank_simulate: vblank timer overrun
[  413.185863][   T26] audit: type=1326 audit(1779189259.373:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.1.3111" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685519ce59 code=0x7ffc0000
[  413.226883][   T26] audit: type=1326 audit(1779189259.373:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.1.3111" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685519ce59 code=0x7ffc0000
[  413.250994][    C0] vkms_vblank_simulate: vblank timer overrun
[  413.266243][   T26] audit: type=1326 audit(1779189259.373:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.1.3111" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f685519ce59 code=0x7ffc0000
[  413.329859][   T26] audit: type=1326 audit(1779189259.373:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.1.3111" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685519ce59 code=0x7ffc0000
[  413.379241][   T26] audit: type=1326 audit(1779189259.373:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.1.3111" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685519ce59 code=0x7ffc0000
[  413.406907][   T26] audit: type=1326 audit(1779189259.373:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.1.3111" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f685519ce59 code=0x7ffc0000
[  413.460190][   T26] audit: type=1326 audit(1779189259.373:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.1.3111" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f685519ce59 code=0x7ffc0000
[  413.583612][ T5726] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  413.828898][ T5726] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  413.853917][ T5726] usb 3-1: config 0 interface 0 has no altsetting 0
[  413.897251][ T5726] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  413.929235][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  413.949267][ T5726] usb 3-1: Product: syz
[  413.968210][ T5726] usb 3-1: Manufacturer: syz
[  413.978959][ T5726] usb 3-1: SerialNumber: syz
[  414.008940][ T5726] usb 3-1: config 0 descriptor??
[  414.043117][ T5726] usb 3-1: selecting invalid altsetting 0
[  414.268388][ T5726] usb 3-1: USB disconnect, device number 13
[  414.608479][T12613] loop0: detected capacity change from 0 to 32768
[  414.646430][T12613] JBD2: Ignoring recovery information on journal
[  414.682568][T12613] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75
[  414.693741][T12613] JBD2: bad block at offset 32
[  414.723633][T12613] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  414.853791][ T4278] ocfs2: Unmounting device (7,0) on (node local)
[  415.027012][T12637] loop2: detected capacity change from 0 to 64
[  415.122412][T12637] MINIX-fs: deleted inode referenced: 6
[  415.165245][T12637] MINIX-fs: deleted inode referenced: 6
[  415.231827][T12617] loop1: detected capacity change from 0 to 32768
[  415.284748][T12617] gfs2: fsid=loop1: Trying to join cluster "lock_nolock", "loop1"
[  415.292634][T12617] gfs2: fsid=loop1: Now mounting FS (format 1801)...
[  415.346867][ T4725] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  415.407629][T12617] gfs2: fsid=loop1.0: journal 0 mapped with 10 extents in 0ms
[  415.450220][ T5726] gfs2: fsid=loop1.0: jid=0, already locked for use
[  415.466359][ T5726] gfs2: fsid=loop1.0: jid=0: Looking at journal...
[  415.471485][T12644] loop2: detected capacity change from 0 to 256
[  415.543637][ T4725] usb 1-1: Using ep0 maxpacket: 32
[  415.561434][T12644] exfat: Deprecated parameter 'utf8'
[  415.569858][ T4725] usb 1-1: config 0 has an invalid interface number: 16 but max is 0
[  415.581819][ T5726] gfs2: fsid=loop1.0: jid=0: Journal head lookup took 115ms
[  415.598493][T12644] exfat: Deprecated parameter 'utf8'
[  415.604470][ T4725] usb 1-1: config 0 has no interface number 0
[  415.638584][T12644] exfat: Deprecated parameter 'utf8'
[  415.648471][ T4725] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 19110, setting to 1024
[  415.653791][ T5726] gfs2: fsid=loop1.0: jid=0: Done
[  415.707202][T12644] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d)
[  415.719095][T12617] gfs2: fsid=loop1.0: first mount done, others may mount
[  415.729287][ T4725] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  415.760332][ T4725] usb 1-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  415.817893][ T4725] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  415.827956][ T4725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.836482][ T4725] usb 1-1: Product: syz
[  415.840809][ T4725] usb 1-1: Manufacturer: syz
[  415.845800][ T4725] usb 1-1: SerialNumber: syz
[  415.856762][ T4725] usb 1-1: config 0 descriptor??
[  415.862530][T12636] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  415.873761][ T4725] usb 1-1: invalid MIDI out EP 0
[  416.081140][ T4725] snd-usb-audio: probe of 1-1:0.16 failed with error -22
[  416.166325][ T4725] usb 1-1: USB disconnect, device number 15
[  416.436178][ T6530] udevd[6530]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  416.453713][T12657] xt_l2tp: unknown flags: 51
[  416.743955][T12642] loop5: detected capacity change from 0 to 40427
[  416.768180][T12642] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  416.792740][T12642] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  416.842523][T12642] F2FS-fs (loop5): invalid crc value
[  416.901863][T12642] F2FS-fs (loop5): Found nat_bits in checkpoint
[  416.979120][T12672] loop0: detected capacity change from 0 to 512
[  417.052897][T12642] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  417.094138][T12672] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.3144: invalid indirect mapped block 256 (level 2)
[  417.120239][T12642] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  417.172382][T12651] loop6: detected capacity change from 0 to 40427
[  417.197444][T12672] EXT4-fs (loop0): 2 truncates cleaned up
[  417.209565][T12651] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x3ffff
[  417.228443][T12672] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  417.243256][T12651] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0xe4
[  417.260267][T12651] F2FS-fs (loop6): invalid crc value
[  417.299803][T12651] F2FS-fs (loop6): Found nat_bits in checkpoint
[  417.350718][T12672] EXT4-fs error (device loop0): empty_inline_dir:1895: inode #12: block 7: comm syz.0.3144: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0
[  417.370298][    C1] vkms_vblank_simulate: vblank timer overrun
[  417.463754][T12651] F2FS-fs (loop6) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20
[  417.519433][T12672] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  417.563585][T12651] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  417.707083][ T4278] EXT4-fs (loop0): unmounting filesystem.
[  417.729341][T12651] syz.6.3137: attempt to access beyond end of device
[  417.729341][T12651] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  418.593713][ T5725] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  418.793599][ T5725] usb 6-1: Using ep0 maxpacket: 8
[  418.804411][ T5725] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  418.842204][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.860941][ T5725] usb 6-1: Product: syz
[  418.871066][ T5725] usb 6-1: Manufacturer: syz
[  418.886157][   T26] audit: type=1326 audit(1779189265.193:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.1.3165" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685519ce59 code=0x7ffc0000
[  418.888700][ T5725] usb 6-1: SerialNumber: syz
[  418.966968][ T5725] usb 6-1: config 0 descriptor??
[  419.012185][ T5725] gspca_main: se401-2.14.0 probing 047d:5003
[  419.021734][   T26] audit: type=1326 audit(1779189265.193:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.1.3165" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685519ce59 code=0x7ffc0000
[  419.052437][   T26] audit: type=1326 audit(1779189265.223:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.1.3165" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f685519ce59 code=0x7ffc0000
[  419.076628][    C1] vkms_vblank_simulate: vblank timer overrun
[  419.145072][   T26] audit: type=1326 audit(1779189265.223:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.1.3165" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685519ce59 code=0x7ffc0000
[  419.277139][   T26] audit: type=1326 audit(1779189265.223:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.1.3165" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685519ce59 code=0x7ffc0000
[  419.321990][T12731] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3170'.
[  419.444564][ T5725] gspca_se401: Bayer format not supported!
[  419.779487][ T4725] usb 6-1: USB disconnect, device number 4
[  419.903724][T12744] loop1: detected capacity change from 0 to 4096
[  419.923575][T12744] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  420.577900][T12763] loop1: detected capacity change from 0 to 4096
[  420.647582][T12763] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  420.979657][T12778] device ipvlan2 entered promiscuous mode
[  421.441237][T12792] loop5: detected capacity change from 0 to 128
[  421.552260][T12792] hpfs: bad mount options.
[  422.023135][   T26] audit: type=1326 audit(1779189268.323:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12815 comm="syz.6.3204" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476119ce59 code=0x7ffc0000
[  422.062034][   T26] audit: type=1326 audit(1779189268.363:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12815 comm="syz.6.3204" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476119ce59 code=0x7ffc0000
[  422.100484][   T26] audit: type=1326 audit(1779189268.363:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12815 comm="syz.6.3204" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f476119ce59 code=0x7ffc0000
[  422.131845][   T26] audit: type=1326 audit(1779189268.363:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12815 comm="syz.6.3204" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476119ce59 code=0x7ffc0000
[  422.171989][   T26] audit: type=1326 audit(1779189268.363:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12815 comm="syz.6.3204" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476119ce59 code=0x7ffc0000
[  422.222909][T12813] loop1: detected capacity change from 0 to 4096
[  422.231602][T12813] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  422.324607][T12822] loop0: detected capacity change from 0 to 16
[  422.382175][T12813] ntfs3: loop1: failed to convert "076c" to iso8859-5
[  422.392462][T12822] erofs: (device loop0): mounted with root inode @ nid 36.
[  422.420502][T12813] ntfs3: loop1: ino=5, "/" directory corrupted
[  422.497393][T12823] loop6: detected capacity change from 0 to 2048
[  422.543550][T12823] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  422.659654][T12823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  422.850434][T12826] loop2: detected capacity change from 0 to 4096
[  422.899949][T12826] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  423.041313][T12826] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  423.483272][T12810] loop5: detected capacity change from 0 to 40427
[  423.554468][T12850] netlink: 'syz.1.3216': attribute type 3 has an invalid length.
[  423.570965][T12810] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  423.610425][T12810] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  423.666095][T12810] F2FS-fs (loop5): invalid crc value
[  423.731013][T12810] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  423.741418][T12852] loop0: detected capacity change from 0 to 128
[  423.818000][ T6531] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  424.049573][T12810] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  424.063443][T12810] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  424.395528][ T7546] syz-executor: attempt to access beyond end of device
[  424.395528][ T7546] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  424.591266][T12871] loop2: detected capacity change from 0 to 4096
[  424.641821][T12871] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  425.213007][T12885] loop5: detected capacity change from 0 to 128
[  425.289339][T12885] FAT-fs (loop5): Directory bread(block 32) failed
[  425.317030][T12885] FAT-fs (loop5): Directory bread(block 33) failed
[  425.339473][T12885] FAT-fs (loop5): Directory bread(block 34) failed
[  425.373719][T12885] FAT-fs (loop5): Directory bread(block 35) failed
[  425.380413][T12885] FAT-fs (loop5): Directory bread(block 36) failed
[  425.423527][T12885] FAT-fs (loop5): Directory bread(block 37) failed
[  425.430278][T12885] FAT-fs (loop5): Directory bread(block 38) failed
[  425.475313][T12885] FAT-fs (loop5): Directory bread(block 39) failed
[  425.482022][T12885] FAT-fs (loop5): Directory bread(block 40) failed
[  425.503416][T12885] FAT-fs (loop5): Directory bread(block 41) failed
[  425.870026][T12885] syz.5.3227: attempt to access beyond end of device
[  425.870026][T12885] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128
[  425.932031][T12878] loop1: detected capacity change from 0 to 32768
[  425.949146][T12885] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  426.022185][T12885] FAT-fs (loop5): Filesystem has been set read-only
[  426.080939][T12878] XFS (loop1): Mounting V5 Filesystem
[  426.140965][T12889] loop2: detected capacity change from 0 to 32768
[  426.185001][T12878] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  426.218304][T12889] ERROR: (device loop2): diWrite: ixpxd invalid
[  426.218304][T12889] 
[  426.255943][T12878] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30
[  426.274023][T12889] ERROR: (device loop2): remounting filesystem as read-only
[  426.303539][T12889] ERROR: (device loop2): txCommit: 
[  426.303539][T12889] 
[  426.352999][T12878] XFS (loop1): Ending clean mount
[  426.558472][ T4272] XFS (loop1): Unmounting Filesystem
[  427.539291][T12931] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3249'.
[  427.735565][T12933] loop0: detected capacity change from 0 to 1024
[  428.063449][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  428.063465][   T26] audit: type=1326 audit(1779189274.363:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12942 comm="syz.2.3255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60779ce59 code=0x7ffc0000
[  428.165875][   T26] audit: type=1326 audit(1779189274.393:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12942 comm="syz.2.3255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60779ce59 code=0x7ffc0000
[  428.282463][   T26] audit: type=1326 audit(1779189274.423:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12942 comm="syz.2.3255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa60779ce59 code=0x7ffc0000
[  428.354332][   T26] audit: type=1326 audit(1779189274.423:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12942 comm="syz.2.3255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60779ce59 code=0x7ffc0000
[  428.383362][ T4725] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  428.453900][   T26] audit: type=1326 audit(1779189274.423:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12942 comm="syz.2.3255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60779ce59 code=0x7ffc0000
[  428.543404][   T26] audit: type=1326 audit(1779189274.433:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12942 comm="syz.2.3255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fa60779ce59 code=0x7ffc0000
[  428.596547][ T4725] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  428.630597][ T4725] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  428.653636][   T26] audit: type=1326 audit(1779189274.433:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12942 comm="syz.2.3255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60779ce59 code=0x7ffc0000
[  428.685198][ T4725] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  428.723481][ T4725] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  428.732603][ T4725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.753409][   T26] audit: type=1326 audit(1779189274.433:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12942 comm="syz.2.3255" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60779ce59 code=0x7ffc0000
[  428.811091][T12945] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  428.844460][ T4725] hub 2-1:1.0: bad descriptor, ignoring hub
[  428.850519][ T4725] hub: probe of 2-1:1.0 failed with error -5
[  428.883804][ T4725] cdc_wdm 2-1:1.0: skipping garbage
[  428.889097][ T4725] cdc_wdm 2-1:1.0: skipping garbage
[  428.927902][ T4725] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  428.963546][ T4725] cdc_wdm 2-1:1.0: Unknown control protocol
[  428.990395][T12965] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3266'.
[  429.185737][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  429.192634][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  429.201589][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  429.208241][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  429.239771][T12971] loop2: detected capacity change from 0 to 16
[  429.304017][T12971] erofs: (device loop2): mounted with root inode @ nid 36.
[  429.334512][   T26] audit: type=1800 audit(1779189275.643:138): pid=12971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3267" name="file1" dev="loop2" ino=86 res=0 errno=0
[  429.475500][ T5725] usb 2-1: USB disconnect, device number 15
[  429.752173][T12979] loop5: detected capacity change from 0 to 512
[  429.835411][T12979] EXT4-fs (loop5): Test dummy encryption mode enabled
[  429.848130][T12979] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  429.915962][T12979] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.3271: bad orphan inode 131083
[  429.937365][T12979] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  430.014467][T12979] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.3271: path /394/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1
[  430.029483][T12986] infiniband syz(: RDMA CMA: cma_listen_on_dev, error -98
[  430.255336][ T7546] EXT4-fs (loop5): unmounting filesystem.
[  430.681763][T12991] loop5: detected capacity change from 0 to 8192
[  430.755188][T12991] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  430.756619][T12983] loop0: detected capacity change from 0 to 32768
[  430.795929][T12991] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  430.819172][T12991] REISERFS (device loop5): using ordered data mode
[  430.842212][T12991] reiserfs: using flush barriers
[  430.876939][T12991] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  430.893988][T12983] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.3273 (12983)
[  430.968629][T12983] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  430.970444][T12991] REISERFS (device loop5): checking transaction log (loop5)
[  431.030737][T12983] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  431.061878][T12991] REISERFS (device loop5): Using r5 hash to sort names
[  431.069149][T12983] BTRFS info (device loop0): enabling auto defrag
[  431.094289][T12983] BTRFS info (device loop0): use no compression
[  431.109353][T12991] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  431.120979][T12983] BTRFS info (device loop0): force clearing of disk cache
[  431.157277][T13002] loop2: detected capacity change from 0 to 4096
[  431.183550][T12983] BTRFS info (device loop0): use zlib compression, level 3
[  431.190858][T12983] BTRFS info (device loop0): turning on sync discard
[  431.223690][T13002] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  431.235159][T12983] BTRFS info (device loop0): using free space tree
[  431.507004][T13002] ntfs3: loop2: ino=1c, "file0" attr_set_size
[  431.516296][T13002] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  431.586192][T12983] BTRFS info (device loop0): enabling ssd optimizations
[  431.614395][T12983] BTRFS info (device loop0): rebuilding free space tree
[  431.693771][ T4275] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22.
[  431.749536][ T4275] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22.
[  432.056292][ T4278] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  432.062357][T12998] loop1: detected capacity change from 0 to 32768
[  432.381066][ T6531] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (6531)
[  432.554768][T12998] XFS (loop1): Mounting V5 Filesystem
[  432.558581][T13038] loop5: detected capacity change from 0 to 8
[  432.767239][T12998] XFS (loop1): Ending clean mount
[  433.065169][ T4272] XFS (loop1): Unmounting Filesystem
[  433.216491][ T4720] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  433.344378][T13057] loop5: detected capacity change from 0 to 512
[  433.426683][ T4720] usb 3-1: Using ep0 maxpacket: 16
[  433.436778][ T4720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  433.452011][ T4720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  433.469964][T13057] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  433.480929][ T4720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  433.499083][T13057] EXT4-fs (loop5): orphan cleanup on readonly fs
[  433.507026][ T4720] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  433.524643][ T4720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.524746][T13057] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:511: comm syz.5.3293: Block bitmap for bg 0 marked uninitialized
[  433.548927][ T4720] usb 3-1: config 0 descriptor??
[  433.667659][T13057] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  433.706850][T13057] EXT4-fs (loop5): 1 orphan inode deleted
[  433.712746][T13057] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  433.788464][T13057] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  433.857838][T13057] EXT4-fs (loop5): re-mounted. Quota mode: none.
[  433.884902][T13057] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:511: comm syz.5.3293: Block bitmap for bg 0 marked uninitialized
[  434.029907][ T7546] EXT4-fs (loop5): unmounting filesystem.
[  434.068467][ T4720] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf3 found
[  434.081753][ T4720] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf4 found
[  434.179055][ T4324] usb 3-1: USB disconnect, device number 14
[  434.560643][T13071] batman_adv: batadv0: Adding interface: gretap1
[  434.576641][T13071] batman_adv: batadv0: Interface activated: gretap1
[  434.633009][T13060] loop0: detected capacity change from 0 to 40427
[  434.658783][T13060] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  434.676349][T13060] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  434.716834][T13060] F2FS-fs (loop0): invalid crc value
[  434.770139][T13060] F2FS-fs (loop0): Found nat_bits in checkpoint
[  434.899382][T13078] loop5: detected capacity change from 0 to 256
[  434.990840][T13060] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  435.033803][T13060] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  435.064687][T13078] FAT-fs (loop5): Directory bread(block 64) failed
[  435.082457][T13078] FAT-fs (loop5): Directory bread(block 65) failed
[  435.135850][T13078] FAT-fs (loop5): Directory bread(block 66) failed
[  435.149899][T13078] FAT-fs (loop5): Directory bread(block 67) failed
[  435.156885][T13078] FAT-fs (loop5): Directory bread(block 68) failed
[  435.180455][T13078] FAT-fs (loop5): Directory bread(block 69) failed
[  435.200692][T13078] FAT-fs (loop5): Directory bread(block 70) failed
[  435.239818][T13078] FAT-fs (loop5): Directory bread(block 71) failed
[  435.259768][T13078] FAT-fs (loop5): Directory bread(block 72) failed
[  435.287919][T13078] FAT-fs (loop5): Directory bread(block 73) failed
[  436.033069][T13103] loop2: detected capacity change from 0 to 256
[  436.670923][T13117] loop0: detected capacity change from 0 to 64
[  437.232997][T13101] loop5: detected capacity change from 0 to 40427
[  437.273575][T13101] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  437.303706][T13101] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  437.341672][T13101] F2FS-fs (loop5): invalid crc value
[  437.393093][T13101] F2FS-fs (loop5): Found nat_bits in checkpoint
[  437.532241][T13101] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  437.550072][T13101] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  437.613216][T13113] loop1: detected capacity change from 0 to 32768
[  437.775608][T13113] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  437.776337][ T4340] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  437.831671][T13113] XFS (loop1): Mounting V5 Filesystem
[  437.853824][ T4340] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  437.982057][T13121] loop0: detected capacity change from 0 to 40427
[  438.032459][T13119] loop2: detected capacity change from 0 to 40427
[  438.070284][T13119] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  438.093487][T13119] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  438.114537][T13121] F2FS-fs (loop0): Found nat_bits in checkpoint
[  438.137079][T13113] XFS (loop1): Ending clean mount
[  438.158651][T13113] XFS (loop1): Quotacheck needed: Please wait.
[  438.175617][T13119] F2FS-fs (loop2): invalid crc value
[  438.224483][T13119] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  438.334542][T13113] XFS (loop1): Quotacheck: Done.
[  438.412110][T13121] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  438.685184][ T4272] XFS (loop1): Unmounting Filesystem
[  438.711963][T13119] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  438.733403][T13119] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  438.792771][ T4278] syz-executor: attempt to access beyond end of device
[  438.792771][ T4278] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  438.818572][T13143] loop5: detected capacity change from 0 to 4096
[  438.909489][T13146] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  438.926386][ T4275] syz-executor: attempt to access beyond end of device
[  438.926386][ T4275] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  438.987381][   T26] audit: type=1800 audit(1779189285.293:139): pid=13143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3319" name="file2" dev="loop5" ino=16 res=0 errno=0
[  439.498270][T13149] loop5: detected capacity change from 0 to 2048
[  439.600092][T13149]  loop5: p1 < > p3 p4
[  439.600092][T13149]  p4: <solaris: [s1] p5 [s2] p6 >
[  439.653897][T13149] loop5: p3 start 458752 is beyond EOD, truncated
[  439.660601][T13149] loop5: p4 size 722688 extends beyond EOD, truncated
[  439.731709][T13149] loop5: p5 start 262464109 is beyond EOD, truncated
[  439.759510][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  439.773005][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  439.782983][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  439.790578][T13149] loop5: p6 size 2304 extends beyond EOD, truncated
[  439.798432][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  439.841794][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  439.858092][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  440.096351][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  440.102778][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  440.196925][ T4351] udevd[4351]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory
[  440.197308][ T6531] udevd[6531]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  440.209901][ T4382] udevd[4382]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  440.259290][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3327'.
[  440.260421][T13163] loop2: detected capacity change from 0 to 164
[  440.297801][T13150] lo speed is unknown, defaulting to 1000
[  440.469835][ T7684] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.490103][T13163] rock: directory entry would overflow storage
[  440.513612][T13163] rock: sig=0x66, size=4, remaining=3
[  440.546287][T13167] loop5: detected capacity change from 0 to 16
[  440.593595][T13167] erofs: (device loop5): mounted with root inode @ nid 36.
[  440.642711][T13167] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  440.739365][ T7684] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.743781][T13167] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[  440.892535][T13173] EXT4-fs: Ignoring removed bh option
[  440.933150][ T7684] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.968158][T13176] exfat: Deprecated parameter 'utf8'
[  440.997044][T13176] exfat: Deprecated parameter 'utf8'
[  441.002566][T13176] exfat: Deprecated parameter 'utf8'
[  441.034158][T13173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  441.065745][T13176] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  441.098482][T13171] sp0: Synchronizing with TNC
[  441.158776][ T7684] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.381111][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  441.475951][T13189] set_capacity_and_notify: 2 callbacks suppressed
[  441.475969][T13189] loop5: detected capacity change from 0 to 64
[  441.772918][T13150] chnl_net:caif_netlink_parms(): no params data found
[  441.934021][ T4284] Bluetooth: hci0: command 0x0409 tx timeout
[  442.160772][T13150] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.168235][T13150] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.194664][T13150] device bridge_slave_0 entered promiscuous mode
[  442.478296][T13150] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.504025][T13150] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.512353][T13150] device bridge_slave_1 entered promiscuous mode
[  442.527694][T13212] bridge0: port 3(veth1_to_bridge) entered blocking state
[  442.580800][T13212] bridge0: port 3(veth1_to_bridge) entered disabled state
[  442.608650][T13212] device veth1_to_bridge entered promiscuous mode
[  442.638632][T13212] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  442.693614][T13212] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:1)
[  442.750740][T13212] bridge0: port 3(veth1_to_bridge) entered blocking state
[  442.758950][T13212] bridge0: port 3(veth1_to_bridge) entered forwarding state
[  443.071296][T13150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  443.105848][T13150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  443.269795][T13215] loop1: detected capacity change from 0 to 32768
[  443.391968][T13217] loop5: detected capacity change from 0 to 32768
[  443.461086][T13215] XFS (loop1): Mounting V5 Filesystem
[  443.474342][T13217] JBD2: Ignoring recovery information on journal
[  443.530646][T13150] team0: Port device team_slave_0 added
[  443.535693][T13217] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75
[  443.546029][T13150] team0: Port device team_slave_1 added
[  443.614502][T13215] XFS (loop1): Ending clean mount
[  443.620300][T13150] batman_adv: batadv0: Adding interface: batadv_slave_0
[  443.627997][T13217] JBD2: bad block at offset 32
[  443.638137][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  443.691380][T13217] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  443.742385][T13150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  443.793262][T13217] ocfs2: Unmounting device (7,5) on (node local)
[  443.941743][ T4272] XFS (loop1): Unmounting Filesystem
[  443.948129][T13251] binder: 13250:13251 ioctl c0046209 0 returned -22
[  444.018761][ T4284] Bluetooth: hci0: command 0x041b tx timeout
[  444.079856][T13150] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.094217][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.198506][T13150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  444.351276][T13232] loop0: detected capacity change from 0 to 32768
[  444.526686][T13150] device hsr_slave_0 entered promiscuous mode
[  444.547394][T13232] XFS (loop0): Mounting V5 Filesystem
[  444.547944][T13150] device hsr_slave_1 entered promiscuous mode
[  444.639451][T13150] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  444.673394][T13150] Cannot create hsr debugfs directory
[  444.686604][T13232] XFS (loop0): Ending clean mount
[  444.712530][T13269] loop2: detected capacity change from 0 to 512
[  444.763253][T13269] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  444.803445][T13269] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[  444.812186][T13269] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #13: comm syz.2.3361: iget: bad i_size value: 12154757448730
[  444.824703][ T4278] XFS (loop0): Unmounting Filesystem
[  444.890219][T13269] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.3361: couldn't read orphan inode 13 (err -117)
[  444.945270][T13269] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  445.128542][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  445.519295][T13281] netlink: 'syz.2.3363': attribute type 10 has an invalid length.
[  445.621054][T13281] 8021q: adding VLAN 0 to HW filter on device batadv0
[  445.637746][T13281] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  445.821443][T13289] loop0: detected capacity change from 0 to 64
[  445.862421][T13289] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  446.093559][ T4284] Bluetooth: hci0: command 0x040f tx timeout
[  446.429751][ T7684] device hsr_slave_0 left promiscuous mode
[  446.464146][ T7684] device hsr_slave_1 left promiscuous mode
[  446.491411][ T7684] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  446.513505][ T7684] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.531488][ T7684] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  446.542525][T13305] loop2: detected capacity change from 0 to 512
[  446.552672][T13276] loop1: detected capacity change from 0 to 40427
[  446.559847][ T7684] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.585907][ T7684] device bridge_slave_1 left promiscuous mode
[  446.594734][T13305] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  446.609851][T13276] F2FS-fs (loop1): invalid crc value
[  446.623975][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.641300][ T7684] device bridge_slave_0 left promiscuous mode
[  446.648963][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.662588][T13276] F2FS-fs (loop1): Found nat_bits in checkpoint
[  446.687995][T13305] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  446.713515][T13305] ext4 filesystem being mounted at /710/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  446.744118][T13276] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  446.781798][T13276] F2FS-fs (loop1): Start checkpoint disabled!
[  446.815940][T13276] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  446.890564][ T7684] device veth1_macvtap left promiscuous mode
[  446.903983][ T7684] device veth0_macvtap left promiscuous mode
[  446.933730][ T7684] device veth1_vlan left promiscuous mode
[  446.939649][ T7684] device veth0_vlan left promiscuous mode
[  446.954544][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  447.308006][T13291] loop5: detected capacity change from 0 to 32768
[  447.756466][T13324] loop1: detected capacity change from 0 to 64
[  447.826080][T13324] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  448.173411][ T4284] Bluetooth: hci0: command 0x0419 tx timeout
[  448.368540][T13316] loop2: detected capacity change from 0 to 32768
[  448.435463][T13316] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  448.435463][T13316] 
[  448.984045][T13326] loop0: detected capacity change from 0 to 32768
[  449.088250][T13326] XFS (loop0): Mounting V5 Filesystem
[  449.208462][T13326] XFS (loop0): Ending clean mount
[  449.261794][T13326] XFS (loop0): Quotacheck needed: Please wait.
[  449.422439][T13326] XFS (loop0): Quotacheck: Done.
[  449.517230][ T4278] XFS (loop0): Unmounting Filesystem
[  449.622842][ T7684] team0 (unregistering): Port device team_slave_1 removed
[  449.711168][ T7684] team0 (unregistering): Port device team_slave_0 removed
[  449.773226][ T7684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  449.845493][ T7684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  450.358755][ T7684] bond0 (unregistering): Released all slaves
[  450.512415][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3379'.
[  450.532582][T13337] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3382'.
[  450.609828][T13339] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3383'.
[  450.638062][T13339] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  451.133773][T13150] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  451.187845][T13150] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  451.229377][T13357] loop2: detected capacity change from 0 to 4096
[  451.256916][T13150] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  451.274430][T13357] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  451.307039][T13150] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  451.742041][ T4275] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22.
[  451.775279][ T4275] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22.
[  451.798545][T13150] 8021q: adding VLAN 0 to HW filter on device bond0
[  451.813435][ T4275] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  451.856306][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  451.876765][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  451.929882][T13150] 8021q: adding VLAN 0 to HW filter on device team0
[  451.988782][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  452.018246][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  452.047416][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.054723][ T9287] bridge0: port 1(bridge_slave_0) entered forwarding state
[  452.066478][T13353] loop1: detected capacity change from 0 to 32768
[  452.120556][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  452.176671][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  452.199427][ T9287] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.206685][ T9287] bridge0: port 2(bridge_slave_1) entered forwarding state
[  452.222973][T13353] JBD2: Ignoring recovery information on journal
[  452.259392][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  452.337295][T13353] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  452.375346][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  452.422221][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  452.464078][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  452.562539][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  452.584755][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  452.605817][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  452.647500][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  452.672486][ T4272] ocfs2: Unmounting device (7,1) on (node local)
[  452.675163][T13388] loop0: detected capacity change from 0 to 256
[  452.695868][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  452.724421][T13388] exfat: Deprecated parameter 'utf8'
[  452.748319][T13388] exfat: Deprecated parameter 'namecase'
[  452.754420][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  452.780108][T13388] exfat: Deprecated parameter 'namecase'
[  452.782426][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  452.808797][T13388] exfat: Deprecated parameter 'utf8'
[  452.819043][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  452.847644][T13150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  452.857024][T13388] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  453.491260][T13404] loop1: detected capacity change from 0 to 16
[  453.528810][T13404] erofs: (device loop1): mounted with root inode @ nid 36.
[  453.965880][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  454.023653][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  454.072982][T13150] 8021q: adding VLAN 0 to HW filter on device batadv0
[  454.383435][ T4720] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  454.422495][T13394] loop5: detected capacity change from 0 to 32768
[  454.583470][ T4720] usb 2-1: Using ep0 maxpacket: 32
[  454.590828][ T4720] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  454.629920][T13436] loop0: detected capacity change from 0 to 16
[  454.642481][T13394] UFO tlock:0xffffc9000286a168
[  454.646561][ T4720] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  454.677200][T13436] erofs: (device loop0): mounted with root inode @ nid 36.
[  454.706631][ T4720] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  454.753434][ T4720] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  454.798320][ T4720] usb 2-1: Product: syz
[  454.810626][ T4720] usb 2-1: Manufacturer: syz
[  454.846358][ T4720] hub 2-1:4.0: USB hub found
[  455.052148][ T4720] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  455.097726][T13445] loop0: detected capacity change from 0 to 1024
[  455.134193][T13445] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  455.425380][ T4720] usb 2-1: USB disconnect, device number 16
[  455.595276][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  455.634523][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  455.764689][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  455.786978][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  455.807413][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  455.836169][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  455.865199][T13150] device veth0_vlan entered promiscuous mode
[  455.919499][T13150] device veth1_vlan entered promiscuous mode
[  456.082178][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  456.100519][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  456.134080][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  456.175515][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  456.206168][T13150] device veth0_macvtap entered promiscuous mode
[  456.272232][T13150] device veth1_macvtap entered promiscuous mode
[  456.365079][T13474] loop2: detected capacity change from 0 to 16
[  456.404405][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.406273][T13474] erofs: (device loop2): mounted with root inode @ nid 36.
[  456.503705][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.550522][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.576649][T13478] sg_write: data in/out 209152/4 bytes for SCSI command 0xf2-- guessing data in;
[  456.576649][T13478]    program syz.0.3424 not setting count and/or reply_len properly
[  456.595739][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.633457][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.673031][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.713434][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.739944][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.775505][T13150] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.812496][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  456.851568][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  456.883908][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  456.929473][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  456.963005][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.987571][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.002457][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.032700][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.060789][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.094936][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.124515][T13150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.180858][T13150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.202183][T13150] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.210176][T13469] loop5: detected capacity change from 0 to 32768
[  457.217433][T13488] loop1: detected capacity change from 0 to 512
[  457.256165][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  457.285016][ T9287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  457.316610][T13469] JBD2: Ignoring recovery information on journal
[  457.327240][T13150] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.390225][T13150] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.447471][T13488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  457.482401][T13150] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.529334][T13488] ext4 filesystem being mounted at /705/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.559779][T13150] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.574140][T13469] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  457.609377][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3430'.
[  457.644340][T13496] device erspan0 entered promiscuous mode
[  457.684190][T13496] device erspan0 left promiscuous mode
[  457.699575][T13469] (syz.5.3420,13469,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  457.746308][T13469] (syz.5.3420,13469,1):ocfs2_get_suballoc_slot_bit:2719 ERROR: read block 137438953472 failed -12
[  457.776688][T13469] (syz.5.3420,13469,1):ocfs2_get_suballoc_slot_bit:2751 ERROR: status = -12
[  457.789635][T13469] (syz.5.3420,13469,1):ocfs2_test_inode_bit:2833 ERROR: get alloc slot and bit failed -12
[  457.828726][T13469] (syz.5.3420,13469,1):ocfs2_test_inode_bit:2874 ERROR: status = -12
[  457.917446][T13469] (syz.5.3420,13469,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  457.973012][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.990167][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.030577][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  458.077882][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.097292][ T7546] ocfs2: Unmounting device (7,5) on (node local)
[  458.126925][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.140282][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  458.208834][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  458.438344][T13510] siw: device registration error -23
[  458.477236][T13512] loop1: detected capacity change from 0 to 64
[  458.771911][T13519] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  459.068823][T13528] loop5: detected capacity change from 0 to 764
[  459.129128][T13528] rock: directory entry would overflow storage
[  459.157346][T13528] rock: sig=0x4654, size=5, remaining=4
[  459.419499][T13537] loop1: detected capacity change from 0 to 4096
[  459.526377][   T26] audit: type=1326 audit(1779189305.833:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13540 comm="syz.2.3448" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60779ce59 code=0x7ffc0000
[  459.550526][    C0] vkms_vblank_simulate: vblank timer overrun
[  459.557665][ T4284] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  459.565051][T13542] sg_write: data in/out 2011/14 bytes for SCSI command 0x0-- guessing data in;
[  459.565051][T13542]    program syz.5.3447 not setting count and/or reply_len properly
[  459.566966][ T4284] Bluetooth: hci3: Injecting HCI hardware error event
[  459.596265][ T4280] Bluetooth: hci3: hardware error 0x00
[  459.600877][T13537] NILFS (loop1): invalid segment: Checksum error in segment payload
[  459.694901][T13537] NILFS (loop1): trying rollback from an earlier position
[  459.781603][   T26] audit: type=1326 audit(1779189305.833:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13540 comm="syz.2.3448" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa60779ce59 code=0x7ffc0000
[  459.820032][   T26] audit: type=1326 audit(1779189305.833:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13540 comm="syz.2.3448" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60779ce59 code=0x7ffc0000
[  459.843599][T13537] NILFS (loop1): recovery complete
[  459.883971][T13547] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  459.983425][   T26] audit: type=1326 audit(1779189305.833:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13540 comm="syz.2.3448" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60779ce59 code=0x7ffc0000
[  460.061756][T13550] loop2: detected capacity change from 0 to 2048
[  460.146229][   T26] audit: type=1326 audit(1779189305.833:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13540 comm="syz.2.3448" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa60779ce59 code=0x7ffc0000
[  460.154244][T13550] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  460.229595][T13522] loop0: detected capacity change from 0 to 40427
[  460.245960][T13522] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  460.254275][T13522] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  460.267833][   T26] audit: type=1326 audit(1779189305.833:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13540 comm="syz.2.3448" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60779ce59 code=0x7ffc0000
[  460.296268][   T26] audit: type=1326 audit(1779189305.833:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13540 comm="syz.2.3448" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60779ce59 code=0x7ffc0000
[  460.337490][T13522] F2FS-fs (loop0): Found nat_bits in checkpoint
[  460.648718][T13522] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  460.699001][T13522] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  460.704389][ T4275] EXT4-fs (loop2): unmounting filesystem.
[  460.980248][T13575] netlink: 'syz.2.3456': attribute type 6 has an invalid length.
[  461.071550][ T4278] syz-executor: attempt to access beyond end of device
[  461.071550][ T4278] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  461.257715][T13580] loop5: detected capacity change from 0 to 1024
[  461.299760][T13580] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  461.303198][T13582] loop7: detected capacity change from 0 to 1024
[  461.495346][T13580] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  461.693581][ T4280] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  461.812886][ T7546] EXT4-fs (loop5): unmounting filesystem.
[  462.075251][    T9] hfsplus: b-tree write err: -5, ino 20
[  462.557737][T13619] loop1: detected capacity change from 0 to 256
[  462.660760][   T26] audit: type=1800 audit(1779189308.963:147): pid=13619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3474" name="file1" dev="loop1" ino=1048894 res=0 errno=0
[  463.019428][T13630] loop0: detected capacity change from 0 to 1024
[  463.529821][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3481'.
[  463.613386][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3481'.
[  463.648325][T13639] netlink: 'syz.2.3481': attribute type 18 has an invalid length.
[  463.964988][T13612] loop5: detected capacity change from 0 to 40427
[  464.023866][T13612] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x3ffff
[  464.076548][T13612] F2FS-fs (loop5): invalid crc value
[  464.118899][T13612] F2FS-fs (loop5): Found nat_bits in checkpoint
[  464.205413][T13620] loop7: detected capacity change from 0 to 40427
[  464.252147][T13620] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  464.319784][T13620] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  464.346906][T13659] loop1: detected capacity change from 0 to 256
[  464.365272][T13620] F2FS-fs (loop7): invalid crc value
[  464.373983][T13612] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  464.428282][T13659] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xed856999, utbl_chksum : 0xe619d30d)
[  464.441475][T13664] loop0: detected capacity change from 0 to 256
[  464.484866][T13620] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  464.808304][T13620] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  464.844781][T13620] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  465.339297][T13150] syz-executor: attempt to access beyond end of device
[  465.339297][T13150] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  465.363220][T13679] smc: net device wlan0 applied user defined pnetid SYZ1
[  465.707338][T13688] loop2: detected capacity change from 0 to 2048
[  465.710349][T13692] loop1: detected capacity change from 0 to 256
[  465.776628][T13692] exfat: Deprecated parameter 'utf8'
[  465.780225][T13688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  465.782354][T13692] exfat: Deprecated parameter 'namecase'
[  465.893512][T13692] exfat: Deprecated parameter 'namecase'
[  465.975956][T13692] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  466.352292][T13707] loop7: detected capacity change from 0 to 256
[  466.361090][T13704] ieee802154 phy0 wpan0: encryption failed: -22
[  466.649503][T13714] loop5: detected capacity change from 0 to 128
[  466.725410][T13714] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  466.833634][T13714] hpfs: filesystem error: improperly stopped
[  466.857223][T13714] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  466.887325][T13714] hpfs: You really don't want any checks? You are crazy...
[  466.934773][T13714] hpfs: hpfs_map_sector(): read error
[  466.953877][T13714] hpfs: code page support is disabled
[  466.959456][T13714] hpfs: hpfs_map_4sectors(): unaligned read
[  467.035662][T13714] hpfs: hpfs_map_4sectors(): unaligned read
[  467.044508][T13714] hpfs: filesystem error: unable to find root dir
[  467.257496][T13731] syz.1.3515: attempt to access beyond end of device
[  467.257496][T13731] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  467.354225][T13731] Buffer I/O error on dev loop1, logical block 134217734, lost async page write
[  467.466682][T13739] can0: slcan on ptm0.
[  467.510335][T13733] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  467.566323][T13733] ntfs3: loop2: Failed to load $Extend.
[  467.604322][T13738] can0 (unregistered): slcan off ptm0.
[  467.705949][T13744] set_capacity_and_notify: 2 callbacks suppressed
[  467.705967][T13744] loop0: detected capacity change from 0 to 16
[  467.788186][T13744] erofs: (device loop0): mounted with root inode @ nid 36.
[  467.859681][T13744] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  467.905116][T13744] syz.0.3520: attempt to access beyond end of device
[  467.905116][T13744] loop0: rw=0, sector=296, nr_sectors = 8 limit=16
[  468.003754][T13744] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[  468.049376][T13744] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  468.140685][T13757] loop7: detected capacity change from 0 to 1024
[  469.074904][T13786] sd 0:0:1:0: device reset
[  469.107610][T13788] netlink: 'syz.5.3535': attribute type 21 has an invalid length.
[  469.150423][T13788] IPv6: NLM_F_CREATE should be specified when creating new route
[  469.200176][T13788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  469.208581][T13788] IPv6: NLM_F_CREATE should be set when creating new route
[  469.215903][T13788] IPv6: NLM_F_CREATE should be set when creating new route
[  469.223150][T13788] IPv6: NLM_F_CREATE should be set when creating new route
[  469.309435][T13790] netlink: 'syz.5.3535': attribute type 21 has an invalid length.
[  469.329771][T13790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  469.563698][ T5725] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  469.744918][T13808] loop1: detected capacity change from 0 to 1024
[  469.766177][ T5725] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  469.782662][ T5725] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  469.821990][ T5725] usb 3-1: config 0 interface 0 has no altsetting 0
[  469.852176][ T5725] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  469.884756][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.935490][ T7684] hfsplus: b-tree write err: -5, ino 25
[  469.941278][ T5725] usb 3-1: config 0 descriptor??
[  469.944140][ T7684] hfsplus: b-tree write err: -5, ino 4
[  469.965984][ T7684] hfsplus: b-tree write err: -5, ino 2
[  470.363141][ T5725] hid-steam 0003:28DE:1102.0015: unbalanced delimiter at end of report description
[  470.414048][ T5725] hid-steam 0003:28DE:1102.0015: steam_probe:parse of hid interface failed
[  470.453354][ T5725] hid-steam: probe of 0003:28DE:1102.0015 failed with error -22
[  470.472503][T13826] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3551'.
[  470.505238][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3551'.
[  470.620971][ T5725] usb 3-1: USB disconnect, device number 15
[  470.739167][T13834] loop7: detected capacity change from 0 to 2048
[  470.836659][T13841] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  470.989068][T13834] NILFS (loop7): error -2 truncating bmap (ino=16)
[  471.090070][T13841] NILFS (loop7): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3)
[  471.108439][T13841] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=16)
[  471.190754][T13841] Remounting filesystem read-only
[  471.209747][T13150] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer
[  471.230705][T13848] loop5: detected capacity change from 0 to 256
[  471.246732][T13849] loop0: detected capacity change from 0 to 764
[  471.311814][T13848] FAT-fs (loop5): Directory bread(block 64) failed
[  471.348681][T13851] loop2: detected capacity change from 0 to 256
[  471.359530][T13848] FAT-fs (loop5): Directory bread(block 65) failed
[  471.387924][T13848] FAT-fs (loop5): Directory bread(block 66) failed
[  471.429520][T13848] FAT-fs (loop5): Directory bread(block 67) failed
[  471.447722][T13851] FAT-fs (loop2): Directory bread(block 64) failed
[  471.475609][T13851] FAT-fs (loop2): Directory bread(block 65) failed
[  471.482308][T13851] FAT-fs (loop2): Directory bread(block 66) failed
[  471.493651][T13848] FAT-fs (loop5): Directory bread(block 68) failed
[  471.520649][T13848] FAT-fs (loop5): Directory bread(block 69) failed
[  471.565358][T13851] FAT-fs (loop2): Directory bread(block 67) failed
[  471.572145][T13851] FAT-fs (loop2): Directory bread(block 68) failed
[  471.585224][T13848] FAT-fs (loop5): Directory bread(block 70) failed
[  471.591822][T13848] FAT-fs (loop5): Directory bread(block 71) failed
[  471.644450][T13851] FAT-fs (loop2): Directory bread(block 69) failed
[  471.651162][T13851] FAT-fs (loop2): Directory bread(block 70) failed
[  471.673665][T13848] FAT-fs (loop5): Directory bread(block 72) failed
[  471.680277][T13848] FAT-fs (loop5): Directory bread(block 73) failed
[  471.713603][T13851] FAT-fs (loop2): Directory bread(block 71) failed
[  471.727975][T13851] FAT-fs (loop2): Directory bread(block 72) failed
[  471.755210][T13851] FAT-fs (loop2): Directory bread(block 73) failed
[  471.887034][T13838] loop1: detected capacity change from 0 to 32768
[  471.973678][ T4725] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  472.173482][ T4725] usb 1-1: Using ep0 maxpacket: 32
[  472.182965][ T4725] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  472.218474][T13866] loop5: detected capacity change from 0 to 64
[  472.222578][ T4725] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  472.248854][ T4725] usb 1-1: config 0 interface 0 has no altsetting 0
[  472.276437][ T4725] usb 1-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00
[  472.334614][ T4725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.365102][ T4725] usb 1-1: config 0 descriptor??
[  472.643669][T13878] loop1: detected capacity change from 0 to 512
[  472.702919][T13878] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3571: bg 0: block 255: padding at end of block bitmap is not set
[  472.760900][T13878] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  472.771526][T13878] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3571: invalid indirect mapped block 1 (level 1)
[  472.797409][T13878] EXT4-fs (loop1): 1 truncate cleaned up
[  472.800097][ T4725] lg-g15 0003:046D:0A07.0016: unknown main item tag 0x3
[  472.803201][T13878] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  472.841518][ T4725] lg-g15 0003:046D:0A07.0016: unknown main item tag 0x0
[  472.846212][T13879] loop2: detected capacity change from 0 to 4096
[  472.879428][ T4725] lg-g15 0003:046D:0A07.0016: unknown main item tag 0x0
[  472.915500][ T4725] lg-g15 0003:046D:0A07.0016: unknown main item tag 0x0
[  472.953216][ T4725] lg-g15 0003:046D:0A07.0016: unknown main item tag 0x0
[  472.978049][ T4725] lg-g15 0003:046D:0A07.0016: unknown main item tag 0x0
[  472.998193][T13878] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 1057052516 > max in inode 18
[  473.031398][ T4725] lg-g15 0003:046D:0A07.0016: unknown main item tag 0x6
[  473.059324][ T4725] lg-g15 0003:046D:0A07.0016: unbalanced collection at end of report description
[  473.090287][ T4725] lg-g15: probe of 0003:046D:0A07.0016 failed with error -22
[  473.106523][T13886] loop7: detected capacity change from 0 to 2048
[  473.148579][ T4725] usb 1-1: USB disconnect, device number 16
[  473.166479][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  473.172613][ T4275] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  473.181589][ T4275] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  473.188901][T13886] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  474.060823][T13884] loop5: detected capacity change from 0 to 32768
[  474.071796][T13906] netlink: 277 bytes leftover after parsing attributes in process `syz.7.3582'.
[  474.141824][T13884] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  474.260441][T13916] loop7: detected capacity change from 0 to 512
[  474.274735][T13916] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  474.337908][T13916] EXT4-fs (loop7): 1 truncate cleaned up
[  474.377610][ T7546] ocfs2: Unmounting device (7,5) on (node local)
[  474.390786][T13916] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  474.533134][T13916] EXT4-fs warning (device loop7): verify_group_input:151: Cannot add at group 49 (only 1 groups)
[  474.778080][T13150] EXT4-fs (loop7): unmounting filesystem.
[  475.281688][T13938] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3594'.
[  475.836864][T13927] loop1: detected capacity change from 0 to 32768
[  475.949201][T13925] loop0: detected capacity change from 0 to 32768
[  476.021440][T13927] XFS (loop1): Mounting V5 Filesystem
[  476.094323][T13925] XFS (loop0): Mounting V5 Filesystem
[  476.121381][T13927] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  476.239203][T13925] XFS (loop0): Ending clean mount
[  476.247362][T13941] loop5: detected capacity change from 0 to 40427
[  476.264995][T13927] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30
[  476.335276][T13941] F2FS-fs (loop5): Found nat_bits in checkpoint
[  476.396098][T13927] XFS (loop1): Ending clean mount
[  476.511197][ T4278] XFS (loop0): Unmounting Filesystem
[  476.544067][T13941] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1
[  476.550767][T13941] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2
[  476.594012][T13941] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  476.617619][ T4272] XFS (loop1): Unmounting Filesystem
[  477.052034][T13943] loop2: detected capacity change from 0 to 40427
[  477.097123][T13943] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff
[  477.148573][T13943] F2FS-fs (loop2): invalid crc value
[  477.210567][T13943] F2FS-fs (loop2): Found nat_bits in checkpoint
[  477.348363][T13951] loop7: detected capacity change from 0 to 32768
[  477.409529][T13943] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  477.498800][T13951] XFS (loop7): Mounting V5 Filesystem
[  477.591070][   T26] audit: type=1326 audit(1779189323.893:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.0.3598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792839ce59 code=0x7ffc0000
[  477.744078][T13951] XFS (loop7): Ending clean mount
[  477.784253][   T26] audit: type=1326 audit(1779189323.983:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.0.3598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792839ce59 code=0x7ffc0000
[  477.916457][   T26] audit: type=1326 audit(1779189323.973:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.0.3598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792839ce59 code=0x7ffc0000
[  478.015959][T13150] XFS (loop7): Unmounting Filesystem
[  478.093948][   T26] audit: type=1326 audit(1779189323.983:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.0.3598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792839ce59 code=0x7ffc0000
[  478.232042][   T26] audit: type=1326 audit(1779189323.993:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.0.3598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792839ce59 code=0x7ffc0000
[  478.318021][   T26] audit: type=1326 audit(1779189323.993:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.0.3598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f792839ce59 code=0x7ffc0000
[  478.455697][   T26] audit: type=1326 audit(1779189323.993:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.0.3598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792839ce59 code=0x7ffc0000
[  478.588966][   T26] audit: type=1326 audit(1779189323.993:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.0.3598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792839ce59 code=0x7ffc0000
[  478.723476][   T26] audit: type=1326 audit(1779189323.993:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.0.3598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f792839ce59 code=0x7ffc0000
[  478.843395][   T26] audit: type=1326 audit(1779189324.003:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.0.3598" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f792839ce59 code=0x7ffc0000
[  479.140885][T14000] loop0: detected capacity change from 0 to 32768
[  479.227161][T14000] JBD2: Ignoring recovery information on journal
[  479.362424][T14000] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  479.627746][ T4278] ocfs2: Unmounting device (7,0) on (node local)
[  480.411013][T14067] loop7: detected capacity change from 0 to 64
[  480.508143][T14063] loop0: detected capacity change from 0 to 8192
[  480.649821][T14074] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  481.527937][T14090] loop0: detected capacity change from 0 to 512
[  481.582768][T14097] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3641'.
[  481.604958][T14090] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  481.759444][T14076] loop7: detected capacity change from 0 to 32768
[  481.797031][ T4278] EXT4-fs (loop0): unmounting filesystem.
[  482.478544][T14122] loop5: detected capacity change from 0 to 256
[  482.955238][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'.
[  483.079497][T14144] loop2: detected capacity change from 0 to 512
[  483.143523][   T26] audit: type=1326 audit(1779189329.433:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.5.3663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b479ce59 code=0x7ffc0000
[  483.215752][   T26] audit: type=1326 audit(1779189329.473:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.5.3663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b479ce59 code=0x7ffc0000
[  483.335034][   T26] audit: type=1326 audit(1779189329.483:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.5.3663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f96b479ce59 code=0x7ffc0000
[  483.471043][T14156] loop1: detected capacity change from 0 to 256
[  483.482912][   T26] audit: type=1326 audit(1779189329.483:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.5.3663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b479ce59 code=0x7ffc0000
[  483.581012][T14156] FAT-fs (loop1): Directory bread(block 64) failed
[  483.601048][T14156] FAT-fs (loop1): Directory bread(block 65) failed
[  483.613334][   T26] audit: type=1326 audit(1779189329.483:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.5.3663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b479ce59 code=0x7ffc0000
[  483.646591][T14156] FAT-fs (loop1): Directory bread(block 66) failed
[  483.648485][   T26] audit: type=1326 audit(1779189329.513:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.5.3663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f96b479ce59 code=0x7ffc0000
[  483.689951][T14156] FAT-fs (loop1): Directory bread(block 67) failed
[  483.693526][   T26] audit: type=1326 audit(1779189329.513:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.5.3663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b479ce59 code=0x7ffc0000
[  483.733545][T14156] FAT-fs (loop1): Directory bread(block 68) failed
[  483.740153][T14156] FAT-fs (loop1): Directory bread(block 69) failed
[  483.747762][   T26] audit: type=1326 audit(1779189329.513:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14145 comm="syz.5.3663" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96b479ce59 code=0x7ffc0000
[  483.833658][T14156] FAT-fs (loop1): Directory bread(block 70) failed
[  483.840269][T14156] FAT-fs (loop1): Directory bread(block 71) failed
[  483.956146][T14156] FAT-fs (loop1): Directory bread(block 72) failed
[  483.962802][T14156] FAT-fs (loop1): Directory bread(block 73) failed
[  483.969384][T14171] loop5: detected capacity change from 0 to 512
[  484.010760][T14171] EXT4-fs: Ignoring removed i_version option
[  484.092344][T14171] EXT4-fs error (device loop5): __ext4_iget:5102: inode #11: block 1: comm syz.5.3673: invalid block
[  484.286151][T14171] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.3673: couldn't read orphan inode 11 (err -117)
[  484.318167][T14181] loop7: detected capacity change from 0 to 256
[  484.340588][T14171] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  484.440855][T14181] FAT-fs (loop7): Directory bread(block 64) failed
[  484.463630][T14181] FAT-fs (loop7): Directory bread(block 65) failed
[  484.470307][T14181] FAT-fs (loop7): Directory bread(block 66) failed
[  484.507023][T14181] FAT-fs (loop7): Directory bread(block 67) failed
[  484.548121][T14181] FAT-fs (loop7): Directory bread(block 68) failed
[  484.615049][T14181] FAT-fs (loop7): Directory bread(block 69) failed
[  484.621791][T14181] FAT-fs (loop7): Directory bread(block 70) failed
[  484.624173][ T7546] EXT4-fs (loop5): unmounting filesystem.
[  484.663526][T14181] FAT-fs (loop7): Directory bread(block 71) failed
[  484.670236][T14181] FAT-fs (loop7): Directory bread(block 72) failed
[  484.695642][T14181] FAT-fs (loop7): Directory bread(block 73) failed
[  485.539884][T14215] loop0: detected capacity change from 0 to 764
[  486.159831][T14189] loop1: detected capacity change from 0 to 32768
[  486.497918][T14240] loop0: detected capacity change from 0 to 2048
[  486.570268][T14240] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  486.634739][T14240] NILFS (loop0): mounting unchecked fs
[  486.730010][T14240] NILFS (loop0): recovery complete
[  486.784335][T14249] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  487.234583][T14263] EXT4-fs: Conflicting test_dummy_encryption options
[  487.799284][T14280] loop2: detected capacity change from 0 to 1024
[  488.188257][T14255] loop5: detected capacity change from 0 to 32768
[  488.289318][T14255] XFS (loop5): Mounting V5 Filesystem
[  488.505884][T14255] XFS (loop5): Ending clean mount
[  488.541808][T14266] loop1: detected capacity change from 0 to 40427
[  488.555203][T14255] XFS (loop5): Quotacheck needed: Please wait.
[  488.576894][T14266] F2FS-fs (loop1): invalid crc value
[  488.604454][T14266] F2FS-fs (loop1): Found nat_bits in checkpoint
[  488.696152][T14255] XFS (loop5): Quotacheck: Done.
[  488.859896][T14266] F2FS-fs (loop1): Start checkpoint disabled!
[  488.928143][T14266] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  489.252148][ T4327] kworker/u4:6: attempt to access beyond end of device
[  489.252148][ T4327] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  489.292741][ T7546] XFS (loop5): Unmounting Filesystem
[  489.636261][T14295] loop2: detected capacity change from 0 to 32768
[  490.049429][T14321] loop1: detected capacity change from 0 to 512
[  490.221159][T14321] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.3719: bad orphan inode 11862016
[  490.293628][T14321] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  490.302679][T14321] ext4 filesystem being mounted at /761/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  490.584870][T14337] loop0: detected capacity change from 0 to 1024
[  490.663972][T14337] hfsplus: small dir entry
[  490.712251][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  490.912618][T14345] loop2: detected capacity change from 0 to 256
[  491.034167][T14345] FAT-fs (loop2): Directory bread(block 64) failed
[  491.051547][T14345] FAT-fs (loop2): Directory bread(block 65) failed
[  491.116781][T14345] FAT-fs (loop2): Directory bread(block 66) failed
[  491.171991][T14345] FAT-fs (loop2): Directory bread(block 67) failed
[  491.193585][T14345] FAT-fs (loop2): Directory bread(block 68) failed
[  491.253407][T14345] FAT-fs (loop2): Directory bread(block 69) failed
[  491.287363][T14345] FAT-fs (loop2): Directory bread(block 70) failed
[  491.321493][T14345] FAT-fs (loop2): Directory bread(block 71) failed
[  491.338865][T14345] FAT-fs (loop2): Directory bread(block 72) failed
[  491.362371][T14359] tipc: Invalid UDP bearer configuration
[  491.362416][T14359] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  491.390130][T14345] FAT-fs (loop2): Directory bread(block 73) failed
[  491.989437][T14382] loop0: detected capacity change from 0 to 512
[  492.054041][T14382] EXT4-fs: Ignoring removed i_version option
[  492.060126][T14382] EXT4-fs: Ignoring removed bh option
[  492.090523][T14378] loop5: detected capacity change from 0 to 4096
[  492.123634][T14384] tipc: Invalid UDP bearer configuration
[  492.123678][T14384] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  492.189953][T14389] loop7: detected capacity change from 0 to 512
[  492.215978][T14382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  492.241487][T14382] ext4 filesystem being mounted at /780/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  492.260232][T14389] EXT4-fs: Ignoring removed nobh option
[  492.276992][T14378] ntfs: volume version 3.1.
[  492.322454][T14389] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  492.395898][T14389] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002]
[  492.454616][T14389] EXT4-fs (loop7): orphan cleanup on readonly fs
[  492.511823][ T4278] EXT4-fs (loop0): unmounting filesystem.
[  492.572703][T14398] loop2: detected capacity change from 0 to 1024
[  492.580386][T14389] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.3745: attempt to clear invalid blocks 1024 len 1
[  492.654141][T14389] EXT4-fs (loop7): Remounting filesystem read-only
[  492.723918][   T26] audit: type=1800 audit(1779189339.033:166): pid=14398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3748" name="file1" dev="loop2" ino=20 res=0 errno=0
[  492.751730][T14389] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3745: bg 0: block 361: padding at end of block bitmap is not set
[  492.786508][T14401] loop1: detected capacity change from 0 to 256
[  492.926895][T14389] EXT4-fs (loop7): Remounting filesystem read-only
[  492.960947][T14389] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  493.023468][T14389] EXT4-fs (loop7): Remounting filesystem read-only
[  493.054472][T14389] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3745: invalid indirect mapped block 1811939328 (level 0)
[  493.134262][T14389] EXT4-fs (loop7): Remounting filesystem read-only
[  493.140889][T14389] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3745: invalid indirect mapped block 2185560079 (level 1)
[  493.257287][T14389] EXT4-fs (loop7): Remounting filesystem read-only
[  493.294185][T14389] EXT4-fs (loop7): 1 truncate cleaned up
[  493.299983][T14389] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  493.506056][T13150] EXT4-fs (loop7): unmounting filesystem.
[  494.224903][T14448] loop5: detected capacity change from 0 to 8
[  494.315759][T14448] SQUASHFS error: Unable to read directory block [629:ff26]
[  494.580285][T14456] binder: 14455:14456 ioctl c018620b 200000000240 returned -14
[  494.626570][T14459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3772'.
[  494.656138][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3772'.
[  494.708139][T14459] netlink: 'syz.7.3772': attribute type 11 has an invalid length.
[  494.729847][T14459] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  494.738959][T14459] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  494.748075][T14459] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  494.757002][T14459] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  495.212169][T14439] loop1: detected capacity change from 0 to 32768
[  495.648732][T14484] loop7: detected capacity change from 0 to 1024
[  495.901108][T14461] loop5: detected capacity change from 0 to 32768
[  495.963661][T14461] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.3773 (14461)
[  496.083522][T14461] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  496.133616][T14461] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  496.169852][T14461] BTRFS warning (device loop5): excessive commit interval 3581
[  496.243909][T14461] BTRFS info (device loop5): force zlib compression, level 3
[  496.251437][T14461] BTRFS info (device loop5): metadata ratio 107050
[  496.293413][T14461] BTRFS info (device loop5): turning on flush-on-commit
[  496.303597][T14461] BTRFS info (device loop5): max_inline at 4096
[  496.330890][T14461] BTRFS info (device loop5): using free space tree
[  496.544519][T14521] loop1: detected capacity change from 0 to 1024
[  496.572262][T14521] EXT4-fs: Ignoring removed nomblk_io_submit option
[  496.633386][ T5725] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  496.673441][T14461] BTRFS info (device loop5): enabling ssd optimizations
[  496.709841][T14521] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  496.845646][ T5725] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  496.863412][ T5725] usb 3-1: config 0 has no interface number 0
[  496.872254][ T5725] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  496.893198][ T7546] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  496.912183][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.940784][ T5725] usb 3-1: Product: syz
[  496.973330][ T5725] usb 3-1: Manufacturer: syz
[  496.978030][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  496.978044][ T5725] usb 3-1: SerialNumber: syz
[  496.984604][ T5725] usb 3-1: config 0 descriptor??
[  497.039060][ T5725] usb 3-1: selecting invalid altsetting 1
[  497.184628][ T5725] dvb_ttusb_budget: ttusb_init_controller: error
[  497.191063][ T5725] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  497.611994][ T5725] DVB: Unable to find symbol stv0299_attach()
[  498.059840][ T5725] DVB: Unable to find symbol tda8083_attach()
[  498.073782][ T5725] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  498.107609][ T5725] usb 3-1: USB disconnect, device number 16
[  498.183607][ T4722] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  498.373450][ T4722] usb 1-1: Using ep0 maxpacket: 32
[  498.391021][ T4722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  498.408569][T14595] ALSA: mixer_oss: invalid OSS volume 'LIDE'
[  498.429226][T14594] loop2: detected capacity change from 0 to 128
[  498.463815][ T4722] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  498.500608][ T4722] usb 1-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00
[  498.540324][ T4722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.577297][ T4722] usb 1-1: config 0 descriptor??
[  498.686887][T14602] loop5: detected capacity change from 0 to 2048
[  498.727455][T14602] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  498.884633][T14609] netlink: 'syz.1.3816': attribute type 1 has an invalid length.
[  498.898276][T14610] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  498.916815][T14608] loop2: detected capacity change from 0 to 1024
[  499.027600][ T4722] wacom 0003:056A:00F0.0017: unknown main item tag 0x3
[  499.043798][ T4722] wacom 0003:056A:00F0.0017: unknown main item tag 0x0
[  499.089044][ T4722] wacom 0003:056A:00F0.0017: unknown main item tag 0x0
[  499.133453][ T4722] wacom 0003:056A:00F0.0017: unknown main item tag 0x0
[  499.140400][ T4722] wacom 0003:056A:00F0.0017: unknown main item tag 0x0
[  499.165171][ T4722] wacom 0003:056A:00F0.0017: unknown main item tag 0x0
[  499.189777][ T4722] wacom 0003:056A:00F0.0017: unknown main item tag 0x0
[  499.206210][ T4722] wacom 0003:056A:00F0.0017: unknown main item tag 0x0
[  499.248436][ T4722] wacom 0003:056A:00F0.0017: hidraw0: USB HID v1.01 Device [HID 056a:00f0] on usb-dummy_hcd.0-1/input0
[  499.313570][ T4722] usb 1-1: USB disconnect, device number 17
[  499.345030][T14622] loop7: detected capacity change from 0 to 256
[  499.409090][T14617] device wlan0 entered promiscuous mode
[  499.420388][T14622] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  499.489885][T14616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  499.518283][T14623] fido_id[14623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  499.842964][T14636] comedi comedi3: 8255: I/O port conflict (0x4004f27,4)
[  499.881768][T14636] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  499.922584][T14636] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  499.939612][T14636] comedi comedi3: 8255: I/O port conflict (0x21,4)
[  499.956842][T14636] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  499.973425][T14636] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  500.238172][T14645] loop7: detected capacity change from 0 to 256
[  500.287866][T14645] exfat: Deprecated parameter 'utf8'
[  500.326890][T14645] exfat: Deprecated parameter 'namecase'
[  500.352088][T14645] exfat: Deprecated parameter 'utf8'
[  500.408955][T14645] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  500.540996][   T26] audit: type=1800 audit(1779189346.843:167): pid=14645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3833" name="file1" dev="loop7" ino=1048972 res=0 errno=0
[  501.138367][ T4722] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  501.204902][T14668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3843'.
[  501.312238][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3844'.
[  501.333531][ T4722] usb 1-1: Using ep0 maxpacket: 32
[  501.340535][ T4722] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  501.357752][T14645] syz.7.3833: attempt to access beyond end of device
[  501.357752][T14645] loop7: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  501.379580][ T4722] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  501.401798][T14668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3843'.
[  501.432406][ T4722] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  501.472110][ T4722] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  501.492356][ T4722] usb 1-1: Product: syz
[  501.502473][ T4722] usb 1-1: Manufacturer: syz
[  501.522734][ T4722] usb 1-1: SerialNumber: syz
[  501.536890][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  501.543416][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  501.578884][ T4722] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input28
[  501.806105][ T5725] usb 1-1: USB disconnect, device number 18
[  501.865227][ T5725] appletouch 1-1:1.0: input: appletouch disconnected
[  501.902877][T14668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3843'.
[  501.922642][T14679] loop7: detected capacity change from 0 to 1024
[  502.763032][T14701] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  502.770615][T14701] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  502.815102][T14701] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  502.823619][T14701] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  502.886626][T14701] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  502.893100][T14701] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  502.946652][T14701] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  502.953127][T14701] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  503.033499][T14701] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  503.039964][T14701] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  503.410610][T14718] device bond_slave_1 entered promiscuous mode
[  503.423352][T14718] device bond_slave_1 left promiscuous mode
[  503.873371][   T26] audit: type=1326 audit(1779189350.173:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14708 comm="syz.0.3861" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f792839ce59 code=0x7fc00000
[  504.139941][T14733] loop0: detected capacity change from 0 to 256
[  504.186386][T14733] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  504.316349][T14733] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264)
[  504.373500][T14733] FAT-fs (loop0): Filesystem has been set read-only
[  504.619820][T14738] loop7: detected capacity change from 0 to 4096
[  504.744145][T14738] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  504.815958][T14738] ntfs3: loop7: Failed to load $Extend.
[  504.897297][   T26] audit: type=1800 audit(1779189351.203:169): pid=14738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3873" name="file1" dev="loop7" ino=30 res=0 errno=0
[  504.950453][T14748] loop0: detected capacity change from 0 to 164
[  505.122681][T14725] loop1: detected capacity change from 0 to 32768
[  506.251628][T14780] loop1: detected capacity change from 0 to 1024
[  506.308221][T14780] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  506.349425][T14784] loop2: detected capacity change from 0 to 256
[  506.364637][T14780] EXT4-fs (loop1): orphan cleanup on readonly fs
[  506.404393][T14784] exfat: Deprecated parameter 'utf8'
[  506.413574][T14784] exfat: Deprecated parameter 'utf8'
[  506.422575][T14780] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.3887: Invalid inode table block 0 in block_group 0
[  506.434400][T14784] exfat: Deprecated parameter 'utf8'
[  506.483529][T14780] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  506.511881][T14784] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  506.532981][T14780] EXT4-fs error (device loop1): ext4_quota_write:7253: inode #3: comm syz.1.3887: mark_inode_dirty error
[  506.574931][T14780] Quota error (device loop1): write_blk: dquota write failed
[  506.619922][T14780] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  506.668622][T14780] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3887: Failed to acquire dquot type 0
[  506.783783][T14780] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.3887: Invalid inode table block 0 in block_group 0
[  506.893945][T14780] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  506.953771][T14780] EXT4-fs error (device loop1): ext4_ext_truncate:4460: inode #15: comm syz.1.3887: mark_inode_dirty error
[  507.006626][T14780] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.3887: Invalid inode table block 0 in block_group 0
[  507.077862][T14780] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  507.148678][T14780] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  507.187038][T14780] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz.1.3887: Invalid inode table block 0 in block_group 0
[  507.271880][T14780] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  507.296097][T14780] EXT4-fs error (device loop1): ext4_truncate:4325: inode #15: comm syz.1.3887: mark_inode_dirty error
[  507.370506][T14780] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  507.431078][T14780] EXT4-fs (loop1): 1 truncate cleaned up
[  507.449581][T14780] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  507.750591][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  507.804301][T14812] loop2: detected capacity change from 0 to 128
[  508.568650][T14769] loop0: detected capacity change from 0 to 65536
[  508.618075][T14831] loop1: detected capacity change from 0 to 1024
[  508.668872][T14769] XFS (loop0): Mounting V5 Filesystem
[  508.729564][T14831] EXT4-fs: Ignoring removed bh option
[  508.793919][T14831] EXT4-fs: inline encryption not supported
[  508.832861][T14831] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  508.853815][T14769] XFS (loop0): log mount failed
[  508.895696][T14831] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.3903: lblock 2 mapped to illegal pblock 2 (length 1)
[  508.919483][T14831] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  509.043425][T14831] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.3903: lblock 0 mapped to illegal pblock 48 (length 1)
[  509.106417][T14831] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  509.123451][T14831] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.3903: Failed to acquire dquot type 0
[  509.169807][T14831] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  509.214552][T14831] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.3903: mark_inode_dirty error
[  509.261656][T14831] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  509.273835][T14831] EXT4-fs (loop1): 1 orphan inode deleted
[  509.306727][T14831] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  509.343651][ T4340] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  509.389725][ T4340] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  509.446187][ T4340] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 0
[  509.557132][ T4272] EXT4-fs (loop1): unmounting filesystem.
[  509.564317][ T4272] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  509.620240][ T4272] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  509.640707][ T4272] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  509.656320][T14848] program syz.2.3908 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  509.707903][T14849] program syz.2.3908 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  509.947845][T14843] loop7: detected capacity change from 0 to 32768
[  511.401509][T14859] loop2: detected capacity change from 0 to 40427
[  511.440834][T14859] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  511.489728][T14859] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  511.532193][T14859] F2FS-fs (loop2): invalid crc value
[  511.604735][T14859] F2FS-fs (loop2): Found nat_bits in checkpoint
[  511.732428][T14869] loop7: detected capacity change from 0 to 40427
[  511.770922][T14859] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  511.804870][T14869] F2FS-fs (loop7): Small segment_count (9 < 1 * 24)
[  511.819336][T14859] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  511.843237][T14869] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  511.904412][T14869] F2FS-fs (loop7): Found nat_bits in checkpoint
[  512.114802][T14869] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  512.122019][T14869] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  512.240655][T14871] loop0: detected capacity change from 0 to 40427
[  512.270623][T14871] F2FS-fs (loop0): invalid crc value
[  512.296101][T14871] F2FS-fs (loop0): Found nat_bits in checkpoint
[  512.302225][T14891] loop1: detected capacity change from 0 to 4096
[  512.354639][T13150] syz-executor: attempt to access beyond end of device
[  512.354639][T13150] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  512.357635][T14891] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  512.460515][T14871] F2FS-fs (loop0): Start checkpoint disabled!
[  512.540439][T14871] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  513.037602][ T9287] kworker/u4:9: attempt to access beyond end of device
[  513.037602][ T9287] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  513.375350][T14899] device vlan3 entered promiscuous mode
[  513.413521][T14899] device bridge0 entered promiscuous mode
[  513.864941][T14908] netlink: 'syz.1.3932': attribute type 27 has an invalid length.
[  513.885423][T14910] loop0: detected capacity change from 0 to 16
[  513.910102][T14912] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3933'.
[  513.914300][T14910] erofs: (device loop0): mounted with root inode @ nid 36.
[  514.263847][T14895] loop2: detected capacity change from 0 to 40427
[  514.339184][T14895] F2FS-fs (loop2): Found nat_bits in checkpoint
[  514.518147][T14895] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  514.557669][T14895] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  515.580993][T14953] loop1: detected capacity change from 0 to 256
[  515.671023][T14953] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d)
[  515.803561][ T4324] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  515.994701][ T4324] usb 1-1: not running at top speed; connect to a high speed hub
[  516.016977][ T4324] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40
[  516.034905][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  516.035317][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.051562][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  516.071911][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  516.081947][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  516.089730][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  516.099420][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  516.135203][ T4324] usb 1-1: Product: syz
[  516.168066][ T4324] usb 1-1: Manufacturer: syz
[  516.204186][ T4324] usb 1-1: SerialNumber: syz
[  516.422068][T14962] lo speed is unknown, defaulting to 1000
[  516.440712][ T4324] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  516.458124][ T4324] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  516.503238][ T4324] snd-usb-audio: probe of 1-1:1.0 failed with error -71
[  516.531387][ T4324] usb 1-1: USB disconnect, device number 19
[  516.645834][    T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  516.673361][    T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.838231][ T6531] udevd[6531]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  516.880440][    T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  516.914253][    T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.925242][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3965'.
[  517.157877][    T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  517.222675][    T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.324415][T14993] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3969'.
[  517.444982][    T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  517.502225][    T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.554182][ T5726] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  517.564834][T14993] IPVS: Error connecting to the multicast addr
[  517.635872][T14962] chnl_net:caif_netlink_parms(): no params data found
[  517.756385][ T5726] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  517.780376][ T5726] usb 1-1: config 0 has no interface number 0
[  517.816482][ T5726] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  517.842391][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.866690][ T5726] usb 1-1: Product: syz
[  517.871417][ T5726] usb 1-1: Manufacturer: syz
[  517.886757][ T5726] usb 1-1: SerialNumber: syz
[  517.895211][ T5726] usb 1-1: config 0 descriptor??
[  517.915898][ T5726] usb 1-1: selecting invalid altsetting 1
[  517.921770][ T5726] dvb_ttusb_budget: ttusb_init_controller: error
[  517.930012][ T5726] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  518.015949][T14962] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.045635][T14962] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.054981][T14962] device bridge_slave_0 entered promiscuous mode
[  518.077411][T14962] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.093080][T14962] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.111917][T14962] device bridge_slave_1 entered promiscuous mode
[  518.174038][ T4284] Bluetooth: hci4: command 0x0409 tx timeout
[  518.257203][ T5726] DVB: Unable to find symbol stv0299_attach()
[  518.313835][T14962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  518.333255][T15010] mkiss: ax0: crc mode is auto.
[  518.508009][ T5726] DVB: Unable to find symbol tda8083_attach()
[  518.523797][ T5726] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  518.546423][T14962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  518.552623][ T5726] usb 1-1: USB disconnect, device number 20
[  518.851378][T14962] team0: Port device team_slave_0 added
[  518.972241][T14962] team0: Port device team_slave_1 added
[  518.997486][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3978'.
[  519.021448][T15027] bridge0: port 4(syz_tun) entered blocking state
[  519.029081][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3978'.
[  519.040323][T15027] bridge0: port 4(syz_tun) entered disabled state
[  519.079203][T15027] device syz_tun entered promiscuous mode
[  519.117337][T15027] bridge0: port 4(syz_tun) entered blocking state
[  519.125000][T15027] bridge0: port 4(syz_tun) entered forwarding state
[  519.224905][T15030] loop1: detected capacity change from 0 to 2048
[  519.335616][T15030] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  519.350973][T15037] loop7: detected capacity change from 0 to 512
[  519.436950][T15030] overlayfs: upper fs needs to support d_type.
[  519.489855][T15030] overlayfs: cleanup of 'work/#b' failed (-2)
[  519.501018][T15030] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  519.501456][T14962] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.509378][T15030] overlayfs: failed to set xattr on upper
[  519.522892][T15030] overlayfs: ...falling back to index=off,metacopy=off.
[  519.565718][T14962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.626987][T14962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.719928][T14962] batman_adv: batadv0: Adding interface: batadv_slave_1
[  519.736045][T14962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.762096][    C0] vkms_vblank_simulate: vblank timer overrun
[  519.850343][T14962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  519.850407][ T4272] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[  519.897582][ T4272] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[  520.110669][T15048] tipc: Started in network mode
[  520.116456][T15048] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  520.163546][T15048] tipc: Enabled bearer <udp:syz0>, priority 10
[  520.261274][ T4284] Bluetooth: hci4: command 0x041b tx timeout
[  520.400805][T15057] loop0: detected capacity change from 0 to 256
[  520.413572][T15002] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  520.482943][T14962] device hsr_slave_0 entered promiscuous mode
[  520.523027][T14962] device hsr_slave_1 entered promiscuous mode
[  520.547300][T14962] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  520.557984][T14962] Cannot create hsr debugfs directory
[  521.130565][T15069] netlink: 'syz.2.3997': attribute type 11 has an invalid length.
[  521.163553][T15069] netlink: 'syz.2.3997': attribute type 11 has an invalid length.
[  521.182988][T15069] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3997'.
[  521.511078][T14560] tipc: Node number set to 4269801488
[  521.687094][    T9] device hsr_slave_0 left promiscuous mode
[  521.710414][    T9] device hsr_slave_1 left promiscuous mode
[  521.753618][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  521.761129][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  521.881224][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  521.893970][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  521.919288][    T9] device bridge_slave_1 left promiscuous mode
[  521.949509][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.981263][    T9] device bridge_slave_0 left promiscuous mode
[  521.997902][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.124764][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  522.137668][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  522.147089][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  522.159254][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  522.168474][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  522.176703][ T4271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  522.285335][    T9] device veth1_macvtap left promiscuous mode
[  522.311514][    T9] device veth0_macvtap left promiscuous mode
[  522.318257][    T9] device veth1_vlan left promiscuous mode
[  522.324521][    T9] device veth0_vlan left promiscuous mode
[  522.333559][ T4284] Bluetooth: hci4: command 0x040f tx timeout
[  522.470238][T15101] loop2: detected capacity change from 0 to 256
[  523.082435][T15110] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4010'.
[  523.109955][T15110] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4010'.
[  523.318149][T15112] loop2: detected capacity change from 0 to 8192
[  523.841616][T15122] loop2: detected capacity change from 0 to 8192
[  523.878628][T15122] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  523.928069][T15122] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  523.958992][T15122] REISERFS (device loop2): using ordered data mode
[  523.985683][T15122] reiserfs: using flush barriers
[  524.000905][T15122] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  524.049737][T15122] REISERFS (device loop2): checking transaction log (loop2)
[  524.072140][T15122] REISERFS (device loop2): Using r5 hash to sort names
[  524.091684][T15122] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  524.265832][ T4284] Bluetooth: hci1: command 0x0409 tx timeout
[  524.413753][ T4284] Bluetooth: hci4: command 0x0419 tx timeout
[  524.569930][T15131] ALSA: mixer_oss: invalid OSS volume ''
[  524.648872][    T9] team0 (unregistering): Port device team_slave_1 removed
[  524.788399][    T9] team0 (unregistering): Port device team_slave_0 removed
[  524.863950][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  524.938067][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  525.481061][    T9] bond0 (unregistering): Released all slaves
[  525.695867][T15088] lo speed is unknown, defaulting to 1000
[  525.706287][T14962] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  525.785416][T14962] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  525.810932][T14962] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  525.915858][T15139] vim2m vim2m.0: vidioc_s_fmt queue busy
[  525.973734][T14962] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  526.148188][T15145] loop0: detected capacity change from 0 to 256
[  526.248381][T15145] exfat: Deprecated parameter 'namecase'
[  526.264824][T15145] exfat: Deprecated parameter 'namecase'
[  526.333564][ T4284] Bluetooth: hci1: command 0x041b tx timeout
[  526.355826][T15145] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  526.494062][T14962] 8021q: adding VLAN 0 to HW filter on device bond0
[  526.581923][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  526.590681][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  526.629237][T14962] 8021q: adding VLAN 0 to HW filter on device team0
[  526.693889][ T7684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  526.702677][ T7684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  526.774745][ T7684] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.781969][ T7684] bridge0: port 1(bridge_slave_0) entered forwarding state
[  526.832466][T15088] chnl_net:caif_netlink_parms(): no params data found
[  526.885125][ T7684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  526.903864][ T7684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  526.943874][ T7684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  526.983596][ T7684] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.990767][ T7684] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.030727][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  527.069081][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  527.085028][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  527.092006][T15164] loop7: detected capacity change from 0 to 64
[  527.098058][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  527.228594][T15164] syz.7.4032: attempt to access beyond end of device
[  527.228594][T15164] loop7: rw=0, sector=412, nr_sectors = 2 limit=64
[  527.244468][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  527.252623][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  527.295335][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  527.322101][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  527.328821][T15164] Trying to free block not in datazone
[  527.354194][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  527.371295][T15168] syz.7.4032: attempt to access beyond end of device
[  527.371295][T15168] loop7: rw=0, sector=412, nr_sectors = 2 limit=64
[  527.393713][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  527.404559][T15168] Buffer I/O error on dev loop7, logical block 206, async page read
[  527.414757][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  527.430820][   T26] audit: type=1800 audit(1779189373.733:170): pid=15168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4032" name="file1" dev="loop7" ino=5 res=0 errno=0
[  527.589955][T15149] loop2: detected capacity change from 0 to 40427
[  527.627999][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.682276][T15149] F2FS-fs (loop2): invalid crc value
[  527.725355][T14962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  527.764214][T15149] F2FS-fs (loop2): Found nat_bits in checkpoint
[  527.907487][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.912494][T15149] F2FS-fs (loop2): Start checkpoint disabled!
[  528.011236][T15088] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.023916][T15149] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  528.076778][T15088] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.136696][T15088] device bridge_slave_0 entered promiscuous mode
[  528.302410][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.316878][   T46] kworker/u4:3: attempt to access beyond end of device
[  528.316878][   T46] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  528.332382][T15088] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.354760][T15088] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.396212][T15088] device bridge_slave_1 entered promiscuous mode
[  528.413869][ T4284] Bluetooth: hci1: command 0x040f tx timeout
[  528.532919][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.622686][T15088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.668279][T15088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.830026][T15088] team0: Port device team_slave_0 added
[  528.903576][T15088] team0: Port device team_slave_1 added
[  528.906831][T15188] loop0: detected capacity change from 0 to 32768
[  528.974488][ T4327] JFS: metapage_get_blocks failed
[  528.983885][  T106] blkno = 50030, nblocks = 1
[  528.984171][T15188] JFS: metapage_get_blocks failed
[  528.988554][  T106] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  528.988554][  T106] 
[  529.072719][T15088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  529.094285][  T106] ERROR: (device loop0): remounting filesystem as read-only
[  529.101694][  T106] blkno = 5002c, nblocks = 4
[  529.113737][ T7684] JFS: metapage_get_blocks failed
[  529.121732][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.133314][  T106] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  529.133314][  T106] 
[  529.147775][    C0] vkms_vblank_simulate: vblank timer overrun
[  529.223325][  T106] ERROR: (device loop0): remounting filesystem as read-only
[  529.250101][  T106] BUG: Bad page state in process jfsCommit  pfn:7b2d0
[  529.283365][T15088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  529.285110][  T106] page:ffffea0001ecb400 refcount:0 mapcount:0 mapping:0000000000000000 index:0x50030 pfn:0x7b2d0
[  529.317708][T15203] loop2: detected capacity change from 0 to 4096
[  529.356651][T15088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  529.380103][  T106] flags: 0xfff00000002007(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff)
[  529.405647][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.422614][  T106] raw: 00fff00000002007 dead000000000100 dead000000000122 0000000000000000
[  529.431600][    C0] vkms_vblank_simulate: vblank timer overrun
[  529.465982][T15203] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  529.476096][T15206] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  529.489968][T15203] NILFS (loop2): mounting fs with errors
[  529.514790][T15088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  529.526898][  T106] raw: 0000000000050030 ffff8880557828b8 00000000ffffffff 0000000000000000
[  529.560742][  T106] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  529.602067][  T106] page_owner tracks the page as allocated
[  529.619439][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  529.639010][  T106] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 15188, tgid 15186 (syz.0.4036), ts 528961136151, free_ts 527589118659
[  529.661860][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  529.696376][  T106]  post_alloc_hook+0x173/0x1a0
[  529.701448][  T106]  get_page_from_freelist+0x1a1e/0x1ab0
[  529.722137][T14962] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.731847][  T106]  __alloc_pages+0x1ec/0x4f0
[  529.743901][  T106]  folio_alloc+0x1c/0x60
[  529.759054][  T106]  filemap_alloc_folio+0xdb/0x480
[  529.768450][  T106]  __filemap_get_folio+0x6ab/0xdb0
[  529.777056][  T106]  pagecache_get_page+0x26/0x250
[  529.782181][  T106]  __get_metapage+0x2a4/0xfa0
[  529.787369][  T106]  dtSplitRoot+0x1de/0x14e0
[  529.797118][  T106]  dtInsert+0xe7b/0x5950
[  529.801520][  T106]  jfs_mkdir+0x758/0xad0
[  529.806568][  T106]  vfs_mkdir+0x387/0x570
[  529.810944][  T106]  do_mkdirat+0x1d8/0x440
[  529.815729][  T106]  __x64_sys_mkdirat+0x85/0x90
[  529.836011][  T106]  do_syscall_64+0x4c/0xa0
[  529.841706][  T106]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  529.852858][  T106] page last free stack trace:
[  529.864901][  T106]  free_unref_page_prepare+0x8b4/0x9a0
[  529.877385][  T106]  free_unref_page_list+0xbb/0x8e0
[  529.886000][  T106]  release_pages+0x1fa6/0x2220
[  529.890925][  T106]  tlb_flush_mmu+0x105/0x220
[  529.905072][  T106]  tlb_finish_mmu+0xf5/0x220
[  529.923139][  T106]  unmap_region+0x29c/0x300
[  529.933867][  T106]  do_mas_align_munmap+0xcc2/0x12b0
[  529.955284][  T106]  do_mas_munmap+0x240/0x2b0
[  529.970461][  T106]  __vm_munmap+0x1ac/0x2d0
[  529.983087][  T106]  __x64_sys_munmap+0x5c/0x70
[  529.993727][  T106]  do_syscall_64+0x4c/0xa0
[  530.014925][  T106]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  530.037258][  T106] Modules linked in:
[  530.047224][T15088] device hsr_slave_0 entered promiscuous mode
[  530.098473][  T106] CPU: 0 PID: 106 Comm: jfsCommit Not tainted syzkaller #0
[  530.105765][  T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  530.116035][  T106] Call Trace:
[  530.119352][  T106]  <TASK>
[  530.122320][  T106]  dump_stack_lvl+0x188/0x24e
[  530.127049][  T106]  ? show_regs_print_info+0x12/0x12
[  530.132307][  T106]  ? swiotlb_print_info+0x60/0x60
[  530.137403][  T106]  bad_page+0x14b/0x170
[  530.141609][  T106]  free_unref_page_prepare+0x42a/0x9a0
[  530.147120][  T106]  free_unref_page+0x2e/0x3f0
[  530.151839][  T106]  ? __folio_put+0xf1/0x210
[  530.156389][  T106]  txUnlock+0x27e/0xcb0
[  530.160597][  T106]  ? lockdep_hardirqs_on+0x94/0x140
[  530.165832][  T106]  jfs_lazycommit+0x56a/0xa70
[  530.170556][  T106]  ? txFreelock+0x5a0/0x5a0
[  530.175105][  T106]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  530.181047][  T106]  ? do_task_dead+0xd0/0xd0
[  530.185610][  T106]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  530.191548][  T106]  ? __kthread_parkme+0x162/0x1c0
[  530.196625][  T106]  kthread+0x29d/0x330
[  530.200731][  T106]  ? txFreelock+0x5a0/0x5a0
[  530.205274][  T106]  ? kthread_blkcg+0xd0/0xd0
[  530.209876][  T106]  ret_from_fork+0x1f/0x30
[  530.214314][  T106]  </TASK>
[  530.217401][    C0] vkms_vblank_simulate: vblank timer overrun
[  530.294480][T15088] device hsr_slave_1 entered promiscuous mode
[  530.301128][T15088] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  530.309653][T15088] Cannot create hsr debugfs directory
[  530.310817][  T106] Disabling lock debugging due to kernel taint
[  530.323673][  T106] page:ffffea0001ecb400 refcount:0 mapcount:0 mapping:0000000000000000 index:0x50030 pfn:0x7b2d0
[  530.339115][    T9] tipc: Left network mode
[  530.363571][  T106] flags: 0xfff00000002007(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff)
[  530.383409][  T106] raw: 00fff00000002007 dead000000000100 dead000000000122 0000000000000000
[  530.396580][  T106] raw: 0000000000050030 ffff8880557828b8 00000000ffffffff 0000000000000000
[  530.429264][  T106] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u))
[  530.440577][  T106] page_owner tracks the page as allocated
[  530.449389][  T106] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 15188, tgid 15186 (syz.0.4036), ts 528961136151, free_ts 527589118659
[  530.471779][  T106]  post_alloc_hook+0x173/0x1a0
[  530.476953][  T106]  get_page_from_freelist+0x1a1e/0x1ab0
[  530.482605][  T106]  __alloc_pages+0x1ec/0x4f0
[  530.487938][  T106]  folio_alloc+0x1c/0x60
[  530.492451][  T106]  filemap_alloc_folio+0xdb/0x480
[  530.499252][ T4284] Bluetooth: hci1: command 0x0419 tx timeout
[  530.507394][  T106]  __filemap_get_folio+0x6ab/0xdb0
[  530.512890][  T106]  pagecache_get_page+0x26/0x250
[  530.518316][  T106]  __get_metapage+0x2a4/0xfa0
[  530.528608][  T106]  dtSplitRoot+0x1de/0x14e0
[  530.537967][  T106]  dtInsert+0xe7b/0x5950
[  530.555508][  T106]  jfs_mkdir+0x758/0xad0
[  530.559858][  T106]  vfs_mkdir+0x387/0x570
[  530.582357][T15088] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  530.592001][  T106]  do_mkdirat+0x1d8/0x440
[  530.596447][  T106]  __x64_sys_mkdirat+0x85/0x90
[  530.601719][  T106]  do_syscall_64+0x4c/0xa0
[  530.606349][  T106]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  530.612814][  T106] page last free stack trace:
[  530.617879][  T106]  free_unref_page_prepare+0x8b4/0x9a0
[  530.623487][  T106]  free_unref_page_list+0xbb/0x8e0
[  530.628724][  T106]  release_pages+0x1fa6/0x2220
[  530.633613][  T106]  tlb_flush_mmu+0x105/0x220
[  530.638308][  T106]  tlb_finish_mmu+0xf5/0x220
[  530.642903][  T106]  unmap_region+0x29c/0x300
[  530.647675][  T106]  do_mas_align_munmap+0xcc2/0x12b0
[  530.652880][  T106]  do_mas_munmap+0x240/0x2b0
[  530.657689][  T106]  __vm_munmap+0x1ac/0x2d0
[  530.662107][  T106]  __x64_sys_munmap+0x5c/0x70
[  530.667572][  T106]  do_syscall_64+0x4c/0xa0
[  530.672108][  T106]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  530.679965][T15088] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  530.687603][  T106] ------------[ cut here ]------------
[  530.693097][  T106] kernel BUG at include/linux/mm.h:1146!
[  530.701507][  T106] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  530.707612][  T106] CPU: 1 PID: 106 Comm: jfsCommit Tainted: G    B              syzkaller #0
[  530.716282][  T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  530.726344][  T106] RIP: 0010:put_metapage+0x24f/0x340
[  530.731747][  T106] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 c0 3a c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f
[  530.751460][  T106] RSP: 0018:ffffc900025a7ce0 EFLAGS: 00010246
[  530.757550][  T106] RAX: 903e7b6a1bb1c200 RBX: ffff8880557828b8 RCX: 903e7b6a1bb1c200
[  530.765520][  T106] RDX: 0000000000000000 RSI: ffffffff8adf1b80 RDI: ffffffff8adf1b40
[  530.773497][  T106] RBP: 000000000000007f R08: ffffffff8e1ffbef R09: 1ffffffff1c3ff7d
[  530.781490][  T106] R10: dffffc0000000000 R11: fffffbfff1c3ff7e R12: ffff8880557828e0
[  530.789505][  T106] R13: ffffea0001ecb434 R14: 1ffff1100aaf051c R15: 1ffff1100aaf0529
[  530.797563][  T106] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  530.806497][  T106] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  530.813177][  T106] CR2: 00007f72479435c0 CR3: 000000005e90d000 CR4: 00000000003506e0
[  530.821190][  T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  530.829193][  T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  530.837190][  T106] Call Trace:
[  530.840482][  T106]  <TASK>
[  530.843423][  T106]  txUnlock+0x427/0xcb0
[  530.847598][  T106]  jfs_lazycommit+0x56a/0xa70
[  530.852291][  T106]  ? txFreelock+0x5a0/0x5a0
[  530.856802][  T106]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  530.862704][  T106]  ? do_task_dead+0xd0/0xd0
[  530.867217][  T106]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  530.873118][  T106]  ? __kthread_parkme+0x162/0x1c0
[  530.878170][  T106]  kthread+0x29d/0x330
[  530.882244][  T106]  ? txFreelock+0x5a0/0x5a0
[  530.886761][  T106]  ? kthread_blkcg+0xd0/0xd0
[  530.891359][  T106]  ret_from_fork+0x1f/0x30
[  530.895794][  T106]  </TASK>
[  530.898824][  T106] Modules linked in:
[  530.906595][  T106] ---[ end trace 0000000000000000 ]---
[  530.912316][  T106] RIP: 0010:put_metapage+0x24f/0x340
[  530.920348][  T106] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 c0 3a c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f
[  530.940159][  T106] RSP: 0018:ffffc900025a7ce0 EFLAGS: 00010246
[  530.946634][  T106] RAX: 903e7b6a1bb1c200 RBX: ffff8880557828b8 RCX: 903e7b6a1bb1c200
[  530.954735][T15088] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  530.964211][T15088] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  530.971167][  T106] RDX: 0000000000000000 RSI: ffffffff8adf1b80 RDI: ffffffff8adf1b40
[  530.979929][  T106] RBP: 000000000000007f R08: ffffffff8e1ffbef R09: 1ffffffff1c3ff7d
[  530.988381][  T106] R10: dffffc0000000000 R11: fffffbfff1c3ff7e R12: ffff8880557828e0
[  530.996528][  T106] R13: ffffea0001ecb434 R14: 1ffff1100aaf051c R15: 1ffff1100aaf0529
[  531.004594][  T106] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  531.013763][  T106] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  531.021001][  T106] CR2: 00007f72479435c0 CR3: 0000000030222000 CR4: 00000000003506e0
[  531.023617][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  531.029096][  T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  531.040733][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  531.045235][  T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  531.061770][  T106] Kernel panic - not syncing: Fatal exception
[  531.067996][  T106] Kernel Offset: disabled
[  531.072316][  T106] Rebooting in 86400 seconds..