last executing test programs:

1m54.445593408s ago: executing program 0 (id=13):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0003000d0085a168d0bf46d32345653600648d0a", 0x39, 0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@loopback, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x80)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0xc0)

1m54.142860308s ago: executing program 0 (id=15):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@local, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0)

1m53.894808685s ago: executing program 0 (id=16):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000)

1m52.710294042s ago: executing program 0 (id=24):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@nomblk_io_submit}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

1m52.16679578s ago: executing program 0 (id=28):
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0xc000, 0xfffffffd)

1m50.763787544s ago: executing program 0 (id=38):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

1m50.223242061s ago: executing program 32 (id=38):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

1m0.308839801s ago: executing program 2 (id=328):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b3000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)

1m0.100388148s ago: executing program 2 (id=330):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x3c, 0x4000, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xf5b439e5fa041319, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0xfffffffffffffd85}, @generic={0x2, 0xd, "75eb5752e7b32b4e6deceb"}]}}}}}}}, 0x0)

59.920204653s ago: executing program 2 (id=332):
r0 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x404, 0x0, 0xfffd, 0x0, 0x80}, {0x1, 0x0, 0x0, 0x6cc, 0xffffffffffffffa4}, {0x0, 0x0, 0x0, 0x7}, 0x7, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x400000, 0x6c}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8)

59.259438904s ago: executing program 2 (id=336):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x6, &(0x7f0000000080), 0x3, 0x45c, &(0x7f00000002c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

58.749063581s ago: executing program 2 (id=338):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000709000000000000", @ANYRES32=r0], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000009, r1}, 0x38)
syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0)

57.859682279s ago: executing program 2 (id=341):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r1, 0xfffffffa, 0x80000003, 0xb, 0x1fd, 0x1})

57.351194605s ago: executing program 33 (id=341):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r1, 0xfffffffa, 0x80000003, 0xb, 0x1fd, 0x1})

5.718448678s ago: executing program 1 (id=665):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800)

5.483934896s ago: executing program 1 (id=667):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d07, 0x0, 0x10000000001780}]})

5.110838748s ago: executing program 1 (id=669):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x14, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

4.811853697s ago: executing program 1 (id=670):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x4, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}})

3.4521175s ago: executing program 3 (id=674):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xd4c, 0x88, 0x7, 0xc6ce, 0xfd, "30d7080000000000000000000100", 0x240000, 0x1fd})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x1)

3.043143363s ago: executing program 3 (id=678):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000440)={0x400, 0x6, 0x18205, 0x7, 0x3, 0x8, 0x1, 0x40000000, r2}, &(0x7f0000000480)=0x20)

2.883677748s ago: executing program 1 (id=680):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

2.780749392s ago: executing program 3 (id=681):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000100), 0x8)
listen(r0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4)

2.559637488s ago: executing program 3 (id=683):
syz_usb_connect$uac3(0x0, 0x93, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406d049009400001020301090281000301ffc010080b0002010130070904000000010130000a2401101d000700000013240303060701043303"], 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x125d, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2.345955285s ago: executing program 4 (id=687):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)

2.217924319s ago: executing program 5 (id=688):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@private=0xa010100, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in=@rand_addr=0x64010100, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

2.139864042s ago: executing program 4 (id=689):
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x8410, &(0x7f0000000480)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc0800000000000000f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a2d47aff43355f9d23a606e1a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9d0000000094bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a808e9a51cc0d73e298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbb16e002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f29405a620f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8"], 0xff, 0x2a0, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fadvise64(r0, 0x5, 0xff36, 0x3)

2.107412342s ago: executing program 5 (id=690):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[], 0xff, 0x5e5c, &(0x7f0000005d80)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGwL+hzNxwDYnAwu76xM4xGCSkD8lPVAS0qYlNY69Nk58qnfNSahsCm2JglSk9oJeNCVRGkVqK1AVqalEI6RGau+aq0bcRK3EhS+gclBSNVVgq3fmeR7PzM7OrLHHnnmfzyfCP3vmfWeeeeed2f1u9J0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGq3/5MyfDBVFUf5X+2NNUVxY/n1VsbP85/y2871CAAAA4Ey9V/vzby9OF+xcxk4N2/zLNf/2vYWFhYXiS++eeP/PFhbSFeuKYmRlUdSui/71Fz9faNwmeK4YHxpu+Pdwl7sf6XL9aJfrx7pcv6LL9Su7XD/e5fpFB2CRVfWfx9Ru7PraX9fUD2lxaTFWu+76Nns9N7RyeDj+LKdmqLbPwti+4kBxsJgpphbtM1T7X1G8vr68r/uLeF/DDfe1tiiKkz99Zk9cw1A4xtcXTXdW0/jcvXNvse7dnz6z5ztzb1/VbnY9DItWWhQbN5TrfL4oTv24qhgqVqZjEtc53LDOtW3WOdK0zqHafuXfW9d5cpnrjI97PKzzRx3WuTZc9uR1RVHMF0tu0+q5YrhY3XKv6XiP18+I8jbKp/LDxehpnSfrl3GelPu8dV3zedJ6Tsbjvz4ck9El1tD4dLzz1RWLjvsHPU/KR90P52p52w+Wdzo+3vij1aZztdzmmRuWPgfaPndtzoF0LjecAxu6nQPDK0Zq58DwqTVvaDoHphftM1wM1e7rxA2dz4HJuUNHJ2efevq2A4d275/ZP3N4emrbls1bt2zeunVy34GDM1P1P0/vkA6Q1cVwOgc3hPeaeA7e1LJt4ym58M2z9zoY75PXQfnYP3djuaALh4slzvFym+c3nvnrIH3db3gdjDa8Dtq+p7Z5HYwu43VQbnNy4/K+Zo42/NduDb16L1zTcA6cz6+H5X0+cvPS74Vrw7peuOV0vx6OLDoH4sMaCq+98pL0/d74neG4LD4vri6vuGBFcXx25tjtT+6emzs2XYRxTlzS8Fy1ni+rGx5Tseh8GT7t82Xn3/zyxqvbXL4mHKvxWzs/V+U2WyY6P1e1d/f2x7Pp0k1FGGfZuT6e7b6alcczZYkOx7Pc5vnbzvx7wZRLGt7/xrq9/42Mjdbf/0bS0Rhrev9b/NSM1FZWFCdvW97731j471y//13aJ+9/5bF65PbO50C5zQuTp3sOjHZ8/7suzKGwnptDYhhvyP3v166fr5+mDc9l1/NmdHQsnDej8R6bz5vNi/Ypb628741TH+y82Xhd83PV9H1LBc+b8lj9+VTn86bc5o3pM3/vWBX/2vDesaLbOTA2sqJc71g6Cervdwur4jlwe7GnOFIcLPamfcpnubyviU3LOwdWhP/O9XvHlX1yDpTH6uVNnc+Bcpsfbj673zttDJekbRq+d2r9+cJSmf/q0VO313rYznbmL9f5qS2dfzZUbvP2ltPNGZ2P063hkgvaHKfW189S5/Te4twcpyvDOg9u7fyzqXKbS7ct83zaWRTFm9Nv1n7eFX6++/fH//17TT/3bfcz5Ten33xg8qEfn876AQD44N6v/Tm/ov69ZsP/Y72c//8fAAAAGAgx9w+Hmcj/AAAAUBkx94+Emcj/AAAAUBkx94+GmWSS/x+7c/ur7z1bpE8DXAji9fEwPHh3fbvY8Z4P/163cEp5+Se+Pfbq155d3n0PF0Xxywc+0nb7x+6O66o7Gtf5sebLF7ny2mXd/6MPn9qu8fMTTm6v3358PMs9DWJX+fXJTbXbXffUdG2+8UBRmw/Nv/Bc/fbr/47bn9hc3/4vw4eW7Nw31LT/xrCe68NcFz5T5sGdp45DOeN+r6695p8v+fyp+4v7DW24qPYwX/6D+u3Gz4h66ZL69vFxL7X+f/r6d18tt3/yhvbrf3a4/fpPhNt9K8xf7Khv33jMv9aw/j8K64/3F/e7/Vs/aLv+166ob/9aOC9eCbN1/ff+6Uffa/d8xfvZeVd9v3j/U/+9pbZfvL14+63rH392uul4tN7+G+/Wb2fH4z8badw+Xh7vJ3r0rubzeyg8v0098qIovvvHRdNxLj5e3+8fW9Yfb+/oXe3Xf2vLOo8OXVvb/9TjWdP0uL7x15vaPt64np1/t6bp8bx0Xzh+707+sLzdEw+F8zFc/78/qt9e62eZvnZf8/tN3P6VNfXXbby9yZb1v9Sy/vlry2PXff33v1tf/2v3rGxa/85Ph/Pp/vrstv79f3Vx0/7f/E79+Tj2xMThI7PHD+xtOKqNr+OV46tWX3Dhhy66OLyXtv5715G5x2aOrZtaN1UU6wbwIwN7vf5vhflf9TF/9u+h7sc/q593L36m/nXrpp/X//1SuPzR8HzGr4/f+IuxpvO19Xmfv6c+z3T9t4R1LNcVX//Pa5e14Ykvvn78H/7w7dbvC+LjOXrZeO3xvbz+8tp1Q2/Ur299v+rmPy5rfl3/ZHSqNr8fjutC+GTmDZfX76/19uNnk7z42frrN34nF/cvWj5PZM1I8+M40/X/JHwf84Mrm9//4vnx/WdbPs15TTFULmE+vD8U8/Xr41bxeL948vK29xc/h6eYv+p0lrmk2admJw8eOHz8ycm5mdm5ydmnnt516Mjxw3O7ap9duuvL3fY/9fpeXXt9753ZtqWovdqP1EePne/1H314z947pm7cO7Nv9/F9cw8fnTm2f8/s7J6ZvbM37t63b+aJbvsf2LtjetP2zXdsmth/YO+OO7dv37x94sDhI+Uy6ovqYtvUVyYOH9tV22V2x5bt01u3bpmaOHRk78yOO6amJo5327/2tWmi3PvxiWMzB3fPHTg0MzF74OmZHdPbt23b1PXTHw8d3Te7bvLY8cOTx2dnjk3WH8u6udrF5de+bvuTh9kj4f2uxVD47vwLt25Ln49b+vZXl7yp+ibN354W74TPgopf37r9O+b+sTCTTPI/AAAA5CDm/vDB/6eukP8BAACgMmLuXxlmIv8DAABAZcTcPx5mkkn+1//X/9f/1//X/9f/7yX9f/3/TvT/9f8Hef36//r/dNdv/f+Y+1cVRZb5HwAAAHIQc//qMBP5HwAAACoj5v4LwkzkfwAAAKiMmPsvDDPJI/+Ptf5V/1//X/+/sf8ft9X/L/T/9f8/IP1//f9O9P/1/wd5/X3Y/1+l/0+/6bf+f8z9HwozySP/AwAAQBZi7r8ozET+BwAAgMqIuf/iMBP5HwAAACoj5v41YSaZ5H+//1//X//f7//X/9f/P8uaDrH+v/5/J/r/+v+DvP4+7P/7/f/0nX7r/8fc///CTDLJ/wAAAJCDmPs/HGYi/wMAAEBlxNx/SZiJ/A8AAACVEXP/pWEmmeR//X/9f/1//X/9f/3/XtL/1//vRP9f/3+Q16//r/9Pd/3W/4+5/7Iwk0zyPwAAAOQg5v7Lw0zkfwAAAKiMmPuvCDOR/wEAAKAyYu6/Mswkk/yv/6//r/+v/6//r//fS/r/+v+d6P/r/w/y+vX/9f/prt/6/zH3XxVmkkn+BwAAgBzE3H91mIn8DwAAAJURc/9HwkzkfwAAAKiMmPvXhplkkv/1//X/9f/1//X/9f97abD6/8NLXqP/X6f/30z/X/9f/1//n876rf8fc/9Hw0wyyf8AAACQg5j7rwkzkf8BAACgMmLuvzbMRP4HAACAyoi5f12YSSb5X/9f/1//X/9f/1//v5cGq/+/NP3/Ov3/Zvr/+v/6//r/dNZv/f+Y+9eHmWSS/wEAACAHMfdvCDOR/wEAAKAyYu6/LsxE/gcAAIDKiLn/+jCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/X17/f0W3G6LS+q3/H3P/DWEmmeR/AAAAyEHM/TeGmcj/AAAAUBkx998UZiL/AwAAQGXE3L8xzCST/K//r/+v/6//r/+v/99L+v+L+v9v/U+h/x/p/+v/D/L69f/9/n+667f+f8z9N4eZZJL/AQAAIAcx998SZiL/AwAAQGXE3H9rmIn8DwAAAJURc/9EmEkm+V//X/9f/1//X/9f/7+Xqtr/T++jfv+//r/+v/6//r/+P0vqt/5/zP23hZlkkv8BAAAgBzH33x5mIv8DAABAZcTcPxlmIv8DAABAZcTcPxVmkkn+1//X/9f/1//X/9f/76Wq9v/P4Pf/6/830P/X/x/k9ev/6//TXb/1/2Punw4zyST/AwAAQA5i7t8UZiL/AwAAQGXE3L85zET+BwAAgMqIuX9LmEkm+V//X/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9NsuM1l/db/j7l/a5hJJvkfAAAAchBz/7YwE/kfAAAAKiPm/jvCTOR/AAAAqIyY++8MM8kk/+v/6//r/+v/6//r//eS/r/+fyf6//r/g7x+/X/9f7rrt/5/zP3bw0wyyf8AAACQg5j7PxZmIv8DAABAZcTcf1eYifwPAAAAA6Xd7yGMYu7/eJhJJvlf/7/q/f+Flfr/+v/6/53Xr//fW/r/+v+d6P/r/w/y+vX/9f/prt/6/zH37wgzyST/AwAAQA5i7r87zET+BwAAgMqIuf+eMBP5HwAAACoj5v6dYSaZ5H/9/6r3//3+f/1//f9u69f/7y39f/3/TvT/B7P/H75t0f8/N/3/8aX2b+z/l+eQ/j/9qN/6/zH33xtmkkn+BwAAgBzE3P+JMBP5HwAAACoj5v5PhpnI/wAAAFAZMfd/Kswkk/yv/6//r/+v/6//r//fS/r/+v+d6P8PZv8/0v/3+//1/+mm3/r/MfffF2aSSf4HAACAHMTc/+kwE/kfAAAAKiPm/v8fZiL/AwAAQGXE3H9/mEkm+V//X/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9Ndv/X/Y+7/lTCTTPI/AAAA5CDm/gfCTOR/AAAAqIyY+z8TZiL/AwAAQGXE3P+rYSaZ5H/9/3PT/x9Ot6//r/+v/6//r/9/Nun/6/8X+v8f2Pnuzw/6+vX/9f/prt/6/zH3/1qYSSb5HwAAAHIQc/+vh5nI/wAAAFAZMff/RpiJ/A8AAACVEXP/g2EmmeR//X+//1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7v/NMJNM8j8AAADkIOb+h8JM5H8AAACojJj7PxtmIv8DAABAZcTc/7kwk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOvX/9f/p7t+6//H3P9wmEkm+R8AAAByEHP/58NM5H8AAACojJj7fyvMRP4HAACAyoi5/7fDTDLJ//r/+v/6//r/+v/6/72k/7+4/1++h53P/v+K5Wyo/78s+v/6//r/+v901m/9/5j7vxBmkkn+BwAAgBzE3P87YSbyPwAAAFRGzP2/G2Yi/wMAAEBlxNz/SJhJJvlf/1//X/9f/1//X/+/l/T//f7/TvT/9f8Hef36//r/dNdv/f+Y+78YZpJJ/gcAAIAcxNz/e2Em8j8AAABURsz9u8JM5H8AAACojJj7Hw0zyST/6//r/+v/6//r/+v/95L+v/5/J/r/+v+DvH79f/1/uuu3/n/M/bvDTDLJ/wAAAJCDmPu/FGYi/wMAAEBlxNy/J8xE/gcAAIDKiLl/b5hJJvlf/1//X/9f/1//X/+/l/T/9f870f/X/x/k9ev/6//TXb/1/2PunwkzyST/AwAAQA5i7t8XZiL/AwAAQGXE3L8/zET+BwAAgMqIuf+xMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9x/IMwkk/wPAAAAOYi5/8thJvI/AAAAVEbM/V8JM5H/AQAAoDJi7j8YZpJJ/tf/1//X/9f/1//X/+8l/X/9/070//X/B3n9+v/6/3TXb/3/mPsPhZlkkv8BAAAgBzH3Hw4zkf8BAACgMmLuPxJmIv8DAABAZcTcfzTMJJP8r/+v/6//r/+v/6//30v6//r/nej/6/8P8vr1//X/6a7f+v8x9/9+mEkm+R8AAAByEHP/sTAT+R8AAAAqI+b+2TAT+R8AAAAqI+b+uTCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fcfzzMJJP8DwAAADmIuf/xMBP5HwAAACoj5v4nwkzkfwAAAKiMmPufDDPJJP/r/+v/6/+f6v+/sr9++Xnq/9d7fv/H3l3vanZWcRx/y2SAhBCuhSvgErgGLgN3Ke7u7u7u7u7uUCiuSUmYtdaB6XTvc9529332sz6ff1bamUyfdpImv0y+2fp//b/+/0L0//r/g/7/aKfu5/f+fv2//p91o/X/ufvvHbc02f8AAADQQe7++8Qt9j8AAABMI3f/feMW+x8AAACmkbv/fnFLk/2v/9f/6/99/1//r//fkv5f/79E/6//3/P79f/6f9aN1v/n7r9/3NJk/wMAAEAHufsfELfY/wAAADCN3P0PjFvsfwAAAJhG7v4HxS1N9r/+X/+v/9f/6//1/1vS/+v/l+j/9f97fr/+X//PutH6/9z9D45bmux/AAAA6CB3/0PiFvsfAAAAppG7/6Fxi/0PAAAA08jd/7C4pcn+1//r//X/+n/9v/5/S/p//f8S/b/+f8/v1//r/1k3Wv+fu//hcUuT/Q8AAAAd5O5/RNxi/wMAAMA0cvc/Mm6x/wEAAGAaufsfFbc02f/6f/2//l//r//X/29J/6//X6L/1//v+f36f/0/6zbv/+95/X/vefv/3P3Xxy1N9j8AAAB0kLv/0XGL/Q8AAADTyN3/mLjF/gcAAIBp5O5/bNzSZP/r//X/Z/3/Tdfp//X/+v+zv6//v23o//X/S/T/o/b/5/svof/X/+v/WbN5/7/S+1/917n7Hxe3NNn/AAAA0EHu/sfHLfY/AAAATCN3/xPiFvsfAAAAppG7/4lxS5P9r//X//v+v/5f/6//35L+X/+/RP8/av/v+/+3tv+/xzner/+ng9H6/9z9T4pbmux/AAAA6CB3/5PjFvsfAAAAppG7/ylxi/0PAAAA08jd/9S4pcn+1//r//X/+n/9v/5/S/p//f8S/b/+f8/v9/1//T/rRuv/c/c/LW5psv8BAACgg9z9T49b7H8AAACYRu7+Z8Qt9j8AAABMI3f/M+OWJvtf/6//1//r/29V/39J/6//X6b/1/8v0f/r//f8fv2//p91o/X/ufufFbc02f8AAADQQe7+Z8ct9j8AAABMI3f/c+IW+x8AAACmkbv/uXFLk/2v/9f/6//1/77/r//fkv5/uv7/Ov3/Gf2//l//r/9n2Wj9f+7+58UtTfY/AAAAdJC7//lxi/0PAAAA08jd/4K4xf4HAACAaeTuf2Hc0mT/6//1//p//b/+X/+/Jf3/dP2/7///D/2//l//r/9n2Wj9f+7+F8Uta8Pv8sqPAwAAAMPI3f/iuKXJn/8DAABAB7n7XxK32P8AAAAwjdz9L41bmux//b/+X/+v/9f/6/+3pP/X/y/R/1+7/7/zLfzz9P9jvV//r/9n3Wj9f+7+l8UtTfY/AAAAdJC7/+Vxi/0PAAAA08jd/4q4xf4HAACAaeTuf2Xc0mT/31L/f+Ndrvy4/v989P/Xfr/+X/+v/9f/6//1/0v0/77/v+f36//1/6wbrf/P3f+quKXJ/gcAAIAOcve/Om6x/wEAAGAauftfE7fY/wAAADCN3P2vjVua7H/f/9f/6//1//p//f+W9P/6/yX6f/3/nt+v/9f/s260/j93/+vilib7HwAAADrI3f/6uMX+BwAAgGnk7n9D3GL/AwAAwDRy978xbmmy//X/+v+T9/930P8n/X/8vur/9f8XoP/X/x/0/0c7dT+/9/fr//X/rBut/8/d/6a4pcn+BwAAgA5y9785brH/AQAAYBq5+98St9j/AAAAMI3c/W+NW5rsf/2//v/k/b/v/xf9f/y+6v/1/xeg/9f/H/T/Rzt1P7/39+v/9f+sG63/z93/trilyf4HAACADnL3vz1usf8BAABgGrn73xG32P8AAAAwjdz974xbmux//b/+X/+v/9f/6/+3pP/X/y/R/+v/9/x+/b/+n3Wj9f+5+98VtzTZ/wAAANBB7v53xy32PwAAAEwjd/974hb7HwAAAKaRu/+9cUuT/a//33v/f68b4gX6f/2//l//PyT9v/5/if5f/7/n9+v/9f+sG63/z93/vrilyf4HAACADnL3vz9usf8BAABgGrn7PxC32P8AAAAwjdz9H4xbmuz/Hv3/5Zv9tHn6f9//1//r//X/Y9P/6/+X6P/1/3t+v/5f/8+60fr/3P0filua7H8AAADoIHf/h+MW+x8AAACmkbv/I3GL/Q8AAADTyN3/0bilyf7v0f/fXIP+P/+1bt/+/6a76f/1/0X/r/8/6P/1/yv0//r/Pb9f/6//Z91o/X/u/o/FLU32PwAAAHSQu//jcYv9DwAAANPI3f+JuMX+BwAAgGnk7v9k3HD3u57uSbcr/f+0/b/v/+v/9f/6/yHo//X/S/T/+v89v1//r/9n3Wj9f+7+T8Ut/vwfAAAAppG7/9Nxi/0PAAAA08jd/5m4xf4HAACAaeTu/2zc0mT/6//1//p//b/+X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f+5uKXJ/gcAAIAOcvd/Pm6x/wEAAGAaufu/ELfY/wAAADCN3P1fjFua7H/9v/5f/3+b9f+Xr/719f/6f/2//l//v0z/r//f8/v1//p/1o3W/+fu/1Lc0mT/AwAAQAe5+78ct9j/AAAAMI3c/V+JW+x/AAAAmEbu/q/GLU32v/5f/6//9/1//b/+f0v6f/3/Ev2//n/P79f/6/9ZN1r/n7v/a3FLk/0PAAAAHeTu/3rcYv8DAADANHL3fyNusf8BAABgGrn7vxm3NNn/M/f/Sz9N/3+F/l//f9D/6/83pv/X/y/R/+v/9/x+/b/+n3Wj9f+5+78VtzTZ/wAAANBB7v5vxy32PwAAAEwjd/934hb7HwAAAKaRu/+7cUuT/T9z/79E/3+F/l//f9D/6/83pv/X/y/R/+v/9/x+/b/+n3Wj9f+5+78XtzTZ/wAAANBB7v7vxy32PwAAAEwjd/8P4hb7HwAAAKaRu/+HcUuT/a//1//r//X/+n/9/5b0//r/Jfp//f+e36//1/+zbrT+P3f/j+KWJvsfAAAAOsjd/+O4xf4HAACAaeTu/0ncYv8DAADANHL3/zRuabL/9f/6f/3/UP3/Ha/+dfT/+n/9/zL9v/7/oP8/2qn7+b2/X/+v/2fdaP1/7v6fxS1N9j8AAAB0kLv/53GL/Q8AAADTyN3/i7jF/gcAAIBp5O7/ZdzSZP/r//X/+v+j+/9LB9///7/36P/1/9ei/9f/L9H/6//3/H79v/6fdaP1/7n7fxW3NNn/AAAA0EHu/l/HLfY/AAAATCN3/2/iFvsfAAAAppG7/7dxS5P9r//X/+v/h/r+v/5f/6//vyD9v/7/oP8/2qn7+b2/X/+v/2fdaP1/7v4b4pYm+x8AAAA6yN3/u7jF/gcAAIBp5O7/fdxi/wMAAMA0cvffGLc02f/6f/3/lP3/nfT/+n/9/yj0//r/Jfp//f+e36//1/+zbrT+P3f/H+KWJvsfAAAAOsjd/8e4xf4HAACAaeTu/1PcYv8DAADANHL3/zluabL/9f/6/yn7f9//1//vrf+/dPY/YP3/xej/9f8H/f/RTt3P7/39+n/9P+tG6/9z9/8lbmmy/wEAAKCD3P1/jVvsfwAAAJhG7v6/xS32PwAAAEwjd//f45Ym+1//r//X/+v/9f8D9P++/380/b/+/6D/P9qp+/m9v1//r/9n3Wj9f+7+f8QtTfY/AAAAdJC7/59xi/0PAAAA08jd/6+4xf4HAACAaeTu/3fc0mT/6//1//p//b/+X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f+fAAAA//9nkS0F")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x12)
lseek(r0, 0x80000000, 0x1)
getdents64(r0, 0x0, 0x22)

1.986134987s ago: executing program 4 (id=691):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x45080)

1.793121453s ago: executing program 4 (id=692):
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x19, 0x0, &(0x7f0000000080))

1.643525138s ago: executing program 4 (id=693):
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e)
unshare(0x22020400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001400)='syzkaller\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x108, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcd, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

1.585202309s ago: executing program 4 (id=694):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4434, &(0x7f0000008940)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x916802, 0x0, 0x9, 0x0, &(0x7f0000000080))
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

1.138748224s ago: executing program 5 (id=695):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc8003, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

793.118724ms ago: executing program 1 (id=696):
r0 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty, 0x1}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0)

790.528854ms ago: executing program 3 (id=697):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0)

683.760268ms ago: executing program 3 (id=698):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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")
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x64a8, &(0x7f0000000180)=ANY=[], 0xfd, 0x0, &(0x7f0000000180))
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x4a042, 0xdea1a290e97695a9)

434.008856ms ago: executing program 5 (id=699):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$unix(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="9b41dabe10bcc57be214c7", 0xb}, {&(0x7f00000004c0)="96d5f232eb8fed2add7043a344c25205d9c2782f387713c8731ef9844ad0368521d43fa12c720ca412a1f1a8d41f888d4662bcbf7566", 0x36}], 0x2, 0x0, 0x0, 0x200400c4}, 0x800)

284.55348ms ago: executing program 5 (id=700):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

0s ago: executing program 5 (id=701):
r0 = gettid()
rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8)
tkill(r0, 0x4)

kernel console output (not intermixed with test programs):

 preconfigured BSSID 50:50:50:50:50:50
[   90.695110][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.384083][ T5843] loop0: detected capacity change from 0 to 32768
[   91.408995][ T5843] =======================================================
[   91.408995][ T5843] WARNING: The mand mount option has been deprecated and
[   91.408995][ T5843]          and is ignored by this kernel. Remove the mand
[   91.408995][ T5843]          option from the mount to silence this warning.
[   91.408995][ T5843] =======================================================
[   91.596093][ T5843] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   91.835233][ T5854] loop1: detected capacity change from 0 to 32768
[   91.932536][ T5854] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[   91.968155][ T5854] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   92.010245][ T5854] JBD2: Ignoring recovery information on journal
[   92.136510][ T5854] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   92.272935][ T5775] ocfs2: Unmounting device (7,0) on (node local)
[   92.343161][  T967] cfg80211: failed to load regulatory.db
[   92.400126][ T5860] loop3: detected capacity change from 0 to 32768
[   92.418273][   T51] Bluetooth: hci1: command tx timeout
[   92.487639][   T51] Bluetooth: hci0: command tx timeout
[   92.493178][   T51] Bluetooth: hci3: command tx timeout
[   92.498740][ T5782] Bluetooth: hci2: command tx timeout
[   92.522984][ T5860] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   92.560046][ T5863] loop2: detected capacity change from 0 to 32768
[   92.600303][ T5854] syz.1.7 (5854) used greatest stack depth: 19280 bytes left
[   92.622152][ T5863] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   92.674987][ T5860] XFS (loop3): Ending clean mount
[   92.761374][ T5774] ocfs2: Unmounting device (7,1) on (node local)
[   92.948466][ T5863] XFS (loop2): Ending clean mount
[   93.038990][ T5863] XFS (loop2): Quotacheck needed: Please wait.
[   93.184656][ T5887] netlink: 165 bytes leftover after parsing attributes in process `syz.0.13'.
[   93.211347][ T5889] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   93.233997][ T5863] XFS (loop2): Quotacheck: Done.
[   93.236867][ T5776] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   93.659927][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   94.082154][ T5900] loop3: detected capacity change from 0 to 4096
[   94.819509][ T5912] loop0: detected capacity change from 0 to 512
[   94.866529][ T5912] EXT4-fs: Ignoring removed nomblk_io_submit option
[   94.942603][ T5912] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[   94.993080][ T5912] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.24: corrupted in-inode xattr: e_value size too large
[   95.009647][ T5912] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.24: couldn't read orphan inode 15 (err -117)
[   95.023649][ T5912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.317246][ T5775] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[   95.352892][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[   95.405346][ T5775] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[   95.477356][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[   95.514324][ T5775] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[   95.553924][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[   95.624340][ T5775] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[   95.661719][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[   95.700212][ T5775] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[   95.726814][ T5775] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[   96.324758][ T5940] loop2: detected capacity change from 0 to 64
[   96.473559][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.525337][   T28] audit: type=1800 audit(1781783895.718:2): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.36" name="file1" dev="loop2" ino=22 res=0 errno=0
[   96.566203][ T4792] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.811442][ T4792] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.834365][ T5933] loop3: detected capacity change from 0 to 40427
[   96.861454][ T5933] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[   96.870030][ T5933] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   96.886479][ T5933] F2FS-fs (loop3): heap/no_heap options were deprecated
[   96.909696][ T5933] F2FS-fs (loop3): invalid crc value
[   96.930149][ T5933] F2FS-fs (loop3): Found nat_bits in checkpoint
[   97.006966][ T4792] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.071417][ T5933] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   97.093179][ T5933] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   97.252329][ T4792] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.279147][   T28] audit: type=1800 audit(1781783896.501:3): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.32" name="file1" dev="loop3" ino=10 res=0 errno=0
[   97.498961][ T5776] syz-executor: attempt to access beyond end of device
[   97.498961][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   97.548160][ T5776] F2FS-fs (loop3): Remounting filesystem read-only
[   98.266953][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   98.285037][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   98.293386][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   98.319313][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   98.325224][ T5970] loop1: detected capacity change from 0 to 1024
[   98.339637][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   98.347417][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   98.375854][ T5970] EXT4-fs: Ignoring removed bh option
[   98.458187][ T5970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   98.537452][ T5970] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.651743][ T5970] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.47: lblock 3 mapped to illegal pblock 3 (length 3)
[   98.703713][ T5970] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   98.830876][ T5970] EXT4-fs (loop1): This should not happen!! Data will be lost
[   98.830876][ T5970] 
[   98.868086][ T5958] loop2: detected capacity change from 0 to 32768
[   98.884321][ T5978] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #15: block 3: comm syz.1.47: lblock 3 mapped to illegal pblock 3 (length 1)
[   98.954387][   T28] audit: type=1800 audit(1781783898.217:4): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.47" name="file1" dev="loop1" ino=15 res=0 errno=0
[   99.015155][ T5958] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   99.103604][ T1126] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8)
[   99.147793][ T1126] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   99.179061][   T28] audit: type=1800 audit(1781783898.453:5): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.43" name="file1" dev="loop2" ino=17058 res=0 errno=0
[   99.193452][ T1126] EXT4-fs (loop1): This should not happen!! Data will be lost
[   99.193452][ T1126] 
[   99.251207][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   99.578523][ T5773] ocfs2: Unmounting device (7,2) on (node local)
[  100.171396][ T5998] loop1: detected capacity change from 0 to 2048
[  100.325910][ T5999] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.372620][   T51] Bluetooth: hci3: command tx timeout
[  100.527203][ T5989] loop3: detected capacity change from 0 to 131072
[  100.544408][ T5989] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  100.552647][ T5989] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  100.584925][ T5989] F2FS-fs (loop3): invalid crc value
[  100.596449][ T5998] NILFS (loop1): failed to count free inodes: err=-34
[  100.614595][ T5989] F2FS-fs (loop3): Found nat_bits in checkpoint
[  100.642404][ T6001] loop2: detected capacity change from 0 to 4096
[  100.651856][ T5998] NILFS (loop1): failed to count free inodes: err=-34
[  100.697768][ T5968] chnl_net:caif_netlink_parms(): no params data found
[  100.711856][ T5989] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  100.719108][ T5989] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  100.870158][ T5999] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  100.892446][ T6001] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  100.915628][ T5999] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  100.954469][ T5999] Remounting filesystem read-only
[  100.985278][   T12] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  101.015865][   T12] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  101.023231][   T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  101.053424][   T28] audit: type=1800 audit(1781783900.369:6): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.51" name="file1" dev="loop2" ino=30 res=0 errno=0
[  101.053640][   T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  101.121590][   T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  101.160016][   T12] NILFS (loop1): discard dirty page: offset=0, ino=2
[  101.192096][   T12] NILFS (loop1): discard dirty block: blocknr=18, size=1024
[  101.200704][   T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  101.210955][   T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  101.221972][   T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  101.231732][   T12] NILFS (loop1): discard dirty page: offset=0, ino=5
[  101.239025][   T12] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  101.247058][   T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  101.256324][   T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  101.272147][   T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  101.303002][ T5774] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  101.327399][ T5774] NILFS (loop1): discard dirty page: offset=0, ino=6
[  101.344915][ T5774] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  101.378614][ T5774] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  101.385995][ T5774] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  101.425725][ T5774] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  101.441293][ T5774] NILFS (loop1): discard dirty page: offset=0, ino=4
[  101.495196][ T5774] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  101.502562][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  101.582569][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  101.606696][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.625128][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  101.662069][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.669489][ T5968] bridge_slave_0: entered allmulticast mode
[  101.675791][ T5774] NILFS (loop1): discard dirty page: offset=0, ino=3
[  101.701719][ T5774] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  101.709088][ T5774] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  101.712249][ T5968] bridge_slave_0: entered promiscuous mode
[  101.741748][ T5774] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  101.756874][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.766251][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  101.799496][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.806776][ T5968] bridge_slave_1: entered allmulticast mode
[  101.837419][ T5774] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  101.844519][ T5968] bridge_slave_1: entered promiscuous mode
[  101.844912][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  101.893173][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  101.918532][ T6019] (syz.2.56,6019,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  101.923229][ T4792] hsr_slave_0: left promiscuous mode
[  101.934779][ T5774] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  101.944558][ T4792] hsr_slave_1: left promiscuous mode
[  101.950009][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  102.024371][ T4792] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.031914][ T4792] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.113295][ T4792] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.120775][ T4792] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.181718][ T4792] bridge_slave_1: left allmulticast mode
[  102.187441][ T4792] bridge_slave_1: left promiscuous mode
[  102.214617][ T4792] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.262388][ T4792] bridge_slave_0: left allmulticast mode
[  102.268111][ T4792] bridge_slave_0: left promiscuous mode
[  102.298523][ T4792] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.315627][ T6026] loop2: detected capacity change from 0 to 4096
[  102.358267][ T6026] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  102.401722][   T51] Bluetooth: hci3: command tx timeout
[  102.436513][ T6026] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  102.522533][ T4792] veth1_macvtap: left promiscuous mode
[  102.528672][ T4792] veth0_macvtap: left promiscuous mode
[  102.592598][ T4792] veth1_vlan: left promiscuous mode
[  102.598294][ T4792] veth0_vlan: left promiscuous mode
[  102.624968][   T28] audit: type=1800 audit(1781783901.983:7): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.57" name="file1" dev="loop2" ino=30 res=0 errno=0
[  103.531783][ T6044] input: syz1 as /devices/virtual/input/input5
[  104.313430][ T6063] loop3: detected capacity change from 0 to 512
[  104.373314][ T6064] ALSA: mixer_oss: invalid OSS volume ''
[  104.383215][ T6063] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[  104.394870][ T6064] ALSA: mixer_oss: invalid OSS volume 'їikі»мО…/Ш9Я$‰g\'©o‚CxЁе3Ѓ'
[  104.394895][ T6064] ALSA: mixer_oss: invalid OSS volume 'Eqк‰Huўш™фt‡ГТ¶.QШ#–3УBЧ›2Р[™'
[  104.436661][   T51] Bluetooth: hci3: command tx timeout
[  104.461160][ T6063] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  104.467044][ T6064] ALSA: mixer_oss: invalid OSS volume 'иа…h€У1^Т/bF…-с-gг¦Nx‘Я”kЃIQ‰4'
[  104.553346][ T6064] ALSA: mixer_oss: invalid OSS volume ''
[  104.581563][ T6064] ALSA: mixer_oss: invalid OSS volume 'б+t=.S№Т·џmЪкЬп;М]—њ~rС¤1'
[  104.590806][ T6063] FAT-fs (loop3): FAT read failed (blocknr 128)
[  104.628444][ T6064] ALSA: mixer_oss: invalid OSS volume '3vЫGЧ3m•‹ъoJиx1ђCЎ„%Ќє©» ВH-~'
[  104.646275][ T6064] ALSA: mixer_oss: invalid OSS volume 'pQЗтBУ›жЮ_Пc·¶9яto1Sv”і'
[  104.665804][ T6064] ALSA: mixer_oss: invalid OSS volume 'a{[0¤Хгї'
[  104.672529][ T6064] ALSA: mixer_oss: invalid OSS volume '‹nEйжЈQ^эћН–LTY’
 КПNFYрnв'
[  104.693995][ T6064] ALSA: mixer_oss: invalid OSS volume '¦±/[пєђкHq4E;ZЋ†;TFVW0йШN
ќfFT'
[  104.702645][ T6064] ALSA: mixer_oss: invalid OSS volume 'ћЈ•vrр'
[  104.719020][ T6064] ALSA: mixer_oss: invalid OSS volume ''
[  104.925236][ T6067] loop3: detected capacity change from 0 to 512
[  104.960649][ T6067] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  105.216554][   T11] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  105.248328][ T4792] team0 (unregistering): Port device team_slave_1 removed
[  105.488173][ T4792] team0 (unregistering): Port device team_slave_0 removed
[  105.613569][ T4792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.819755][ T4792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.837959][ T6087] Driver unsupported XDP return value 0 on prog  (id 10) dev N/A, expect packet loss!
[  106.339323][ T6095] raw_sendmsg: syz.3.84 forgot to set AF_INET. Fix it!
[  106.492747][   T51] Bluetooth: hci3: command tx timeout
[  106.633926][ T6089] loop2: detected capacity change from 0 to 32768
[  106.705413][ T6089] 
[  106.705413][ T6089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  106.705413][ T6089] 
[  106.779555][ T4792] bond0 (unregistering): Released all slaves
[  106.791874][   T28] audit: type=1800 audit(1781783906.218:8): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.81" name="file1" dev="loop2" ino=4 res=0 errno=0
[  106.933016][ T6089] 
[  106.933016][ T6089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  106.933016][ T6089] 
[  106.969978][ T6089] 
[  106.969978][ T6089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  106.969978][ T6089] 
[  107.002595][ T6089] 
[  107.002595][ T6089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.002595][ T6089] 
[  107.025643][ T6089] 
[  107.025643][ T6089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.025643][ T6089] 
[  107.062893][  T111] ERROR: (device loop2): dbFree: error in block map
[  107.062893][  T111] 
[  107.099487][ T6089] 
[  107.099487][ T6089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.099487][ T6089] 
[  107.156300][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.203063][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.236551][ T5773] 
[  107.236551][ T5773]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.236551][ T5773] 
[  107.288210][ T5773] 
[  107.288210][ T5773]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.288210][ T5773] 
[  107.302022][ T6097] loop3: detected capacity change from 0 to 40427
[  107.317487][ T6097] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  107.326915][ T6097] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  107.343555][ T6099] warning: `syz.1.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  107.361831][ T6097] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[  107.376421][ T6097] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff
[  107.412029][ T6099] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  107.440482][ T6097] F2FS-fs (loop3): Image doesn't support compression
[  107.462538][ T5968] team0: Port device team_slave_0 added
[  107.475369][ T6097] F2FS-fs (loop3): invalid crc value
[  107.510986][ T6097] F2FS-fs (loop3): Found nat_bits in checkpoint
[  107.511503][ T5968] team0: Port device team_slave_1 added
[  107.625276][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.632311][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.741641][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.772368][ T6097] F2FS-fs (loop3): Start checkpoint disabled!
[  107.778080][ T6104] netlink: 552 bytes leftover after parsing attributes in process `syz.1.88'.
[  107.812427][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.850518][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.854700][ T6097] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  107.959165][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.960798][ T6097] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  108.240740][ T6097] F2FS-fs (loop3): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x99c/0x1a00
[  108.245305][ T5968] hsr_slave_0: entered promiscuous mode
[  108.269602][ T6097] syz.3.85: attempt to access beyond end of device
[  108.269602][ T6097] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  108.300081][ T5968] hsr_slave_1: entered promiscuous mode
[  108.321944][ T5968] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  108.344955][ T5968] Cannot create hsr debugfs directory
[  108.690738][   T11] kworker/u4:0: attempt to access beyond end of device
[  108.690738][   T11] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  108.729577][   T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  108.738876][   T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  108.752339][   T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  108.900624][ T5781] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  109.009654][ T5968] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  109.046579][ T5968] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  109.068706][ T5968] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  109.145801][ T5781] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  109.153648][ T5968] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  109.167433][ T5781] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  109.191265][ T5781] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  109.211448][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.264262][ T6127] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  109.291656][ T5781] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  109.662670][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.738465][ T5968] 8021q: adding VLAN 0 to HW filter on device team0
[  109.773217][ T4792] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.780578][ T4792] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.856655][ T5781] usb 2-1: USB disconnect, device number 2
[  109.866498][ T4792] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.873838][ T4792] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.032567][ T4792] wlan1: Trigger new scan to find an IBSS to join
[  110.054002][ T5968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  110.577633][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.811944][ T6144] loop3: detected capacity change from 0 to 40427
[  110.862568][ T6164] loop2: detected capacity change from 0 to 512
[  110.885190][ T6144] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  110.914043][ T6164] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  110.929089][ T6144] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  110.937378][ T6144] F2FS-fs (loop3): heap/no_heap options were deprecated
[  111.001918][ T6164] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  111.021173][ T6144] F2FS-fs (loop3): invalid crc value
[  111.056985][ T6144] F2FS-fs (loop3): Found nat_bits in checkpoint
[  111.126761][ T6164] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.97: bg 0: block 104: invalid block bitmap
[  111.198812][ T6164] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  111.238347][ T6164] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.97: invalid indirect mapped block 1 (level 1)
[  111.252297][ T6144] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  111.271554][ T6144] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  111.308467][ T6164] EXT4-fs (loop2): 1 truncate cleaned up
[  111.355135][ T6164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.608562][ T5776] syz-executor: attempt to access beyond end of device
[  111.608562][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  111.661780][ T5776] F2FS-fs (loop3): Remounting filesystem read-only
[  111.669691][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.924094][ T5968] veth0_vlan: entered promiscuous mode
[  111.990662][ T5968] veth1_vlan: entered promiscuous mode
[  112.021727][ T6166] loop1: detected capacity change from 0 to 32768
[  112.086925][ T6166] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  112.162920][ T6166] JBD2: Ignoring recovery information on journal
[  112.237182][ T5968] veth0_macvtap: entered promiscuous mode
[  112.316159][ T5968] veth1_macvtap: entered promiscuous mode
[  112.404344][ T6166] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  112.426632][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.464023][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.492988][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.514972][ T6196] loop2: detected capacity change from 0 to 256
[  112.524132][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.548199][ T6196] exfat: Deprecated parameter 'namecase'
[  112.563505][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  112.577292][ T6196] exfat: Deprecated parameter 'namecase'
[  112.589388][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.651704][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.703970][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.716144][ T6196] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  112.752962][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.801680][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.830797][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.857684][ T5968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.887060][ T5968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.919473][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.964442][ T5968] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.992673][ T6200] loop3: detected capacity change from 0 to 8192
[  112.998384][ T5968] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.006082][ T5774] ocfs2: Unmounting device (7,1) on (node local)
[  113.031864][ T5968] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.042913][ T5968] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.303098][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.332184][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.433631][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.470468][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.522934][ T6204] loop2: detected capacity change from 0 to 8192
[  113.605420][ T6204] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  113.703305][ T6204] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  113.757582][ T6215] loop3: detected capacity change from 0 to 64
[  113.767528][ T6204] REISERFS (device loop2): using ordered data mode
[  113.790524][ T6204] reiserfs: using flush barriers
[  113.868055][ T6204] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  113.927336][ T6204] REISERFS (device loop2): checking transaction log (loop2)
[  113.980406][ T6204] REISERFS (device loop2): Using r5 hash to sort names
[  114.038155][ T6204] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  114.248300][ T6204] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[  114.271695][ T6224] loop4: detected capacity change from 0 to 164
[  114.314278][ T6204] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[  114.363101][ T6204] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[  114.440570][ T6228] REISERFS error (device loop2): vs-7000 search_by_entry_key: search_by_key returned item position == 0
[  114.501426][ T6228] REISERFS (device loop2): Remounting filesystem read-only
[  114.531054][ T6228] REISERFS error (device loop2): zam-7001 reiserfs_find_entry: io error
[  115.029323][   T12] wlan1: Trigger new scan to find an IBSS to join
[  115.280682][   T11] Bluetooth: hci4: Frame reassembly failed (-84)
[  115.367398][ T6260] loop2: detected capacity change from 0 to 512
[  115.426754][   T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  115.623807][   T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  115.652767][   T23] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  115.670238][   T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  115.689650][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.698611][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'.
[  115.711320][ T6267] netlink: 'syz.2.122': attribute type 21 has an invalid length.
[  115.728568][ T6252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  115.746459][   T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  115.926920][ T6271] loop2: detected capacity change from 0 to 256
[  115.960488][ T6271] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  116.029465][   T11] wlan1: Creating new IBSS network, BSSID 9a:a5:f6:8c:3f:01
[  116.040536][   T28] audit: type=1800 audit(1781783915.576:9): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.123" name="file1" dev="loop2" ino=1048598 res=0 errno=0
[  116.095288][   T28] audit: type=1800 audit(1781783915.576:10): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.123" name="file1" dev="loop2" ino=1048598 res=0 errno=0
[  116.129262][ T6276] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264)
[  116.152028][ T6276] FAT-fs (loop2): Filesystem has been set read-only
[  116.167124][ T6276] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  116.178778][   T23] usb 4-1: USB disconnect, device number 2
[  116.201585][ T6276] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008)
[  116.464454][ T6283] Zero length message leads to an empty skb
[  117.064648][ T6300] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  117.317027][ T5782] Bluetooth: hci4: command 0x1003 tx timeout
[  117.324703][   T51] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  117.635196][ T6314] loop3: detected capacity change from 0 to 2048
[  117.736538][ T6314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.777570][ T6314] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.011183][ T6328] program syz.2.136 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  118.043785][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.248634][ T6334] loop2: detected capacity change from 0 to 32768
[  119.291217][ T6334] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.139 (6334)
[  119.364966][ T6334] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  119.389703][ T6360] loop1: detected capacity change from 0 to 2048
[  119.391521][ T6334] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  119.435616][ T6334] BTRFS info (device loop2): turning on sync discard
[  119.456103][ T6334] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  119.493094][ T6361] loop4: detected capacity change from 0 to 8192
[  119.500696][ T6334] BTRFS info (device loop2): use zstd compression, level 3
[  119.512386][ T6334] BTRFS info (device loop2): turning on async discard
[  119.520067][ T6334] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  119.534051][ T6334] BTRFS info (device loop2): trying to use backup root at mount time
[  119.542404][ T6361] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  119.555896][ T6361] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  119.556015][ T6334] BTRFS info (device loop2): enabling auto defrag
[  119.565246][ T6361] REISERFS (device loop4): using ordered data mode
[  119.565288][ T6361] reiserfs: using flush barriers
[  119.591029][ T6366] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.598416][ T6361] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  119.633689][ T6361] REISERFS (device loop4): checking transaction log (loop4)
[  119.649918][ T6334] BTRFS info (device loop2): using free space tree
[  119.769233][ T6366] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  119.846256][ T6366] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  119.895163][  T741] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  119.935717][ T6334] BTRFS error (device loop2): failed to load root extent
[  119.944910][ T6366] Remounting filesystem read-only
[  120.000422][ T6334] BTRFS warning (device loop2): try to load backup roots slot 1
[  120.013478][ T6360] NILFS (loop1): discard dirty page: offset=0, ino=2
[  120.028232][ T6360] NILFS (loop1): discard dirty block: blocknr=18, size=1024
[  120.056456][   T12] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  120.062541][ T6360] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.123183][ T6334] BTRFS warning (device loop2): couldn't read tree root
[  120.125115][ T6361] REISERFS (device loop4): Using tea hash to sort names
[  120.137139][ T6334] BTRFS warning (device loop2): try to load backup roots slot 2
[  120.144053][ T6361] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  120.156571][ T6360] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.165681][ T6360] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.203571][   T11] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  120.275472][ T6334] BTRFS warning (device loop2): couldn't read tree root
[  120.295386][ T6334] BTRFS warning (device loop2): try to load backup roots slot 3
[  120.411990][ T5774] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  120.432692][ T6334] BTRFS info (device loop2): enabling ssd optimizations
[  120.446910][ T5774] NILFS (loop1): discard dirty page: offset=0, ino=18
[  120.452936][ T6361] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "яя0x0000000000000000"
[  120.453728][ T5774] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  120.504170][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.504757][ T6334] BTRFS info (device loop2): rebuilding free space tree
[  120.546916][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.569873][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.596588][ T5774] NILFS (loop1): discard dirty page: offset=0, ino=6
[  120.608779][ T6396] fuse: Invalid group_id
[  120.617227][ T5774] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  120.648907][ T6334] BTRFS info (device loop2): checking UUID tree
[  120.656491][ T5774] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  120.687658][ T5774] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  120.718643][ T5774] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  120.778552][ T5774] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  120.805632][ T5774] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  120.856107][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.872326][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.910373][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  120.932585][ T5774] NILFS (loop1): discard dirty page: offset=0, ino=5
[  120.981043][ T5774] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  120.988423][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.078852][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.111099][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.139053][ T5774] NILFS (loop1): discard dirty page: offset=0, ino=4
[  121.163720][ T5774] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  121.179979][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.204257][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.254355][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.276915][ T5774] NILFS (loop1): discard dirty page: offset=0, ino=3
[  121.297310][ T5774] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  121.306121][ T5774] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  121.314161][ T5774] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  121.321928][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.352981][ T5773] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.354012][ T5774] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  121.412188][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.438342][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.447451][ T5774] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  121.481572][ T6414] loop3: detected capacity change from 0 to 2048
[  121.491875][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.519560][ T5774] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  121.526775][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.593664][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.628118][ T6414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.636903][ T5774] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  121.640532][ T6414] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.731441][ T5774] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  121.760993][ T6422] loop4: detected capacity change from 0 to 256
[  121.996043][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.303199][   T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  122.511838][   T23] usb 2-1: Using ep0 maxpacket: 32
[  122.522883][   T23] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  122.549807][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.579850][   T23] usb 2-1: config 0 descriptor??
[  122.755472][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'.
[  122.819111][   T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  122.861279][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  122.891046][   T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  122.904480][   T23] usb 2-1: media controller created
[  122.967404][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  123.032827][   T23] az6027: usb out operation failed. (-71)
[  123.062072][   T23] az6027: usb out operation failed. (-71)
[  123.070952][   T23] stb0899_attach: Driver disabled by Kconfig
[  123.077001][   T23] az6027: no front-end attached
[  123.077001][   T23] 
[  123.106477][   T23] az6027: usb out operation failed. (-71)
[  123.118321][ T6458] loop4: detected capacity change from 0 to 128
[  123.124791][   T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  123.143211][   T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6
[  123.157064][ T6458] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  123.180156][ T6458] hpfs: filesystem error: improperly stopped
[  123.186398][ T6458] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  123.203949][   T23] dvb-usb: schedule remote query interval to 400 msecs.
[  123.217760][   T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  123.227903][ T6458] hpfs: You really don't want any checks? You are crazy...
[  123.248199][ T6458] hpfs: hpfs_map_sector(): read error
[  123.253642][ T6458] hpfs: code page support is disabled
[  123.291250][   T23] usb 2-1: USB disconnect, device number 3
[  123.306108][ T6458] hpfs: hpfs_map_4sectors(): unaligned read
[  123.358560][ T6458] hpfs: hpfs_map_4sectors(): unaligned read
[  123.385284][ T6458] hpfs: filesystem error: unable to find root dir
[  123.497456][   T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  123.548171][ T6458] hpfs: hpfs_map_4sectors(): unaligned read
[  123.593454][ T6458] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[  123.730007][ T6467] loop3: detected capacity change from 0 to 1764
[  123.852588][ T6467] iso9660: Corrupted directory entry in block 2 of inode 1920
[  123.991242][ T5841] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  124.211724][ T5841] usb 3-1: config 0 has an invalid interface number: 37 but max is 1
[  124.227064][ T5841] usb 3-1: config 0 has an invalid interface number: 255 but max is 1
[  124.248281][ T5841] usb 3-1: config 0 has no interface number 0
[  124.262678][ T5841] usb 3-1: config 0 has no interface number 1
[  124.280287][ T5841] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  124.328307][ T5841] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  124.358660][ T5841] usb 3-1: config 0 interface 255 has no altsetting 0
[  124.375483][ T5841] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3
[  124.412668][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.443814][ T5841] usb 3-1: Product: syz
[  124.450218][ T5841] usb 3-1: Manufacturer: syz
[  124.469012][ T5841] usb 3-1: SerialNumber: syz
[  124.495892][ T5841] usb 3-1: config 0 descriptor??
[  124.715256][ T6494] loop3: detected capacity change from 0 to 4096
[  124.838211][ T5841] usb 3-1: USB disconnect, device number 2
[  125.524834][ T6510] netlink: 152 bytes leftover after parsing attributes in process `syz.4.195'.
[  125.543636][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.195'.
[  125.870022][ T6523] Cannot find add_set index 4 as target
[  126.809769][ T6517] loop4: detected capacity change from 0 to 40427
[  126.849477][ T6522] loop1: detected capacity change from 0 to 32768
[  126.860980][ T6517] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff
[  126.894305][ T6517] F2FS-fs (loop4): invalid crc value
[  126.935092][ T6517] F2FS-fs (loop4): Found nat_bits in checkpoint
[  126.955411][ T6522] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.213953][ T6517] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  127.232499][ T6522] XFS (loop1): Ending clean mount
[  127.296692][ T6522] XFS (loop1): Quotacheck needed: Please wait.
[  127.325457][ T6530] loop2: detected capacity change from 0 to 32768
[  127.417243][ T6530] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  127.477569][ T6530] XFS (loop2): Mounting V5 filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a in no-recovery mode. Filesystem will be inconsistent.
[  127.516118][ T6522] XFS (loop1): Quotacheck: Done.
[  127.521815][ T6517] syz.4.199: attempt to access beyond end of device
[  127.521815][ T6517] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  127.678890][ T5968] syz-executor: attempt to access beyond end of device
[  127.678890][ T5968] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  127.729222][ T5968] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  127.761179][ T5774] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.761875][ T5773] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  127.870993][ T6555] loop3: detected capacity change from 0 to 512
[  127.950834][ T6555] EXT4-fs: Ignoring removed bh option
[  128.234571][ T6560] loop2: detected capacity change from 0 to 256
[  128.363612][ T6555] EXT4-fs (loop3): Test dummy encryption mode enabled
[  128.436666][ T6560] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d)
[  128.502494][ T6555] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  128.551093][ T6555] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  128.585094][ T6555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.697361][ T6555] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters
[  128.809649][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.320644][ T6564] loop1: detected capacity change from 0 to 32768
[  129.394855][ T6564] syz.1.208: attempt to access beyond end of device
[  129.394855][ T6564] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  129.418223][ T6564] lbmIODone: I/O error in JFS log
[  129.425821][ T6564] *** Log Format Error ! ***
[  129.442272][ T6564] lmLogInit: exit(-22)
[  129.446679][ T6564] lmLogOpen: exit(-22)
[  129.494901][ T6564] ERROR: (device loop1): jfs_link: read-only filesystem
[  129.494901][ T6564] 
[  129.548362][ T6564] ERROR: (device loop1): remounting filesystem as read-only
[  130.133202][ T6578] loop3: detected capacity change from 0 to 32768
[  130.137537][ T6601] netlink: 'syz.1.219': attribute type 6 has an invalid length.
[  130.176341][ T6601] netlink: 'syz.1.219': attribute type 6 has an invalid length.
[  130.247151][ T6578] JBD2: Ignoring recovery information on journal
[  130.479362][ T6578] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  130.771954][   T28] audit: type=1800 audit(1781783930.388:11): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.214" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  131.021497][ T5776] ocfs2: Unmounting device (7,3) on (node local)
[  131.534133][ T6636] capability: warning: `syz.3.225' uses 32-bit capabilities (legacy support in use)
[  131.563809][ T6636] program syz.3.225 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  132.181661][ T6654] 9p: Unknown uid 00000000004294967295
[  132.290030][ T6652] loop1: detected capacity change from 0 to 4096
[  132.366832][ T6657] loop2: detected capacity change from 0 to 4096
[  132.416828][ T6662] loop4: detected capacity change from 0 to 64
[  132.514648][   T28] audit: type=1800 audit(1781783932.143:12): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.237" name="file2" dev="loop4" ino=22 res=0 errno=0
[  132.525352][ T6652] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  132.634348][ T6652] ntfs3: loop1: Failed to load $Extend (-22).
[  132.694966][ T6652] ntfs3: loop1: Failed to initialize $Extend.
[  132.810253][   T28] audit: type=1800 audit(1781783932.434:13): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.235" name="file1" dev="loop2" ino=0 res=0 errno=0
[  132.861246][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  132.868110][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  133.421723][ T6681] mmap: syz.1.242 (6681) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  133.637501][ T5841] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  133.837031][ T5841] usb 5-1: Using ep0 maxpacket: 8
[  133.848295][ T5841] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  133.854288][ T6693] pim6reg0: tun_chr_ioctl cmd 1074025694
[  133.867869][ T5841] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  133.896784][ T5841] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  133.930142][ T5841] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  133.953798][ T5841] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  133.987061][ T5841] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  134.029536][ T5841] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  134.049831][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.314672][ T5841] usb 5-1: GET_CAPABILITIES returned 0
[  134.324750][ T5841] usbtmc 5-1:16.0: can't read capabilities
[  134.415152][ T6683] comedi comedi0: reset error (fatal)
[  134.537358][ T6679] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71
[  134.596289][ T5156] usb 5-1: USB disconnect, device number 2
[  135.220913][ T6705] loop2: detected capacity change from 0 to 32768
[  135.289396][ T6705] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.592915][ T6705] XFS (loop2): Ending clean mount
[  135.662965][ T6705] XFS (loop2): Quotacheck needed: Please wait.
[  135.832388][ T6705] XFS (loop2): Quotacheck: Done.
[  135.906224][ T6712] loop1: detected capacity change from 0 to 32768
[  136.035254][ T6744] loop4: detected capacity change from 0 to 8192
[  136.055659][ T6744] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  136.059063][ T6712] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  136.073592][ T6744] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  136.118038][ T6744] REISERFS (device loop4): using ordered data mode
[  136.145136][ T6744] reiserfs: using flush barriers
[  136.155815][ T6744] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  136.177181][ T6744] REISERFS (device loop4): checking transaction log (loop4)
[  136.296118][ T6712] XFS (loop1): Ending clean mount
[  136.322809][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  136.352594][ T6712] XFS (loop1): Quotacheck needed: Please wait.
[  136.520113][ T6712] XFS (loop1): Quotacheck: Done.
[  136.761109][ T6744] REISERFS (device loop4): Using tea hash to sort names
[  136.817132][ T6744] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  136.901797][ T5774] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  137.223179][ T6774] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3)
[  137.303907][ T6774] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3)
[  137.766015][ T6757] loop3: detected capacity change from 0 to 32768
[  137.808605][ T6757] xfs: Unknown parameter 'biosize'
[  138.096737][ T6794] capability: warning: `syz.4.265' uses deprecated v2 capabilities in a way that may be insecure
[  138.211555][ T6799] nicvf0: tun_chr_ioctl cmd 1074025677
[  138.241484][ T6799] nicvf0: linktype set to 776
[  138.683931][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.855236][ T2181] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  138.865245][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  139.054884][ T2181] usb 4-1: Using ep0 maxpacket: 8
[  139.054890][    T9] usb 3-1: Using ep0 maxpacket: 16
[  139.066861][ T2181] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  139.087367][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.094704][ T2181] usb 4-1: config 0 interface 0 has no altsetting 0
[  139.101863][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  139.104200][ T2181] usb 4-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00
[  139.123253][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  139.135801][ T2181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.139688][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  139.155387][ T2181] usb 4-1: config 0 descriptor??
[  139.159759][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  139.181317][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  139.194217][    T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  139.208050][    T9] usb 3-1: Manufacturer: syz
[  139.221036][    T9] usb 3-1: config 0 descriptor??
[  139.612578][ T2181] wacom 0003:056A:00E3.0001: unknown main item tag 0x7
[  139.635536][    T9] rc_core: IR keymap rc-hauppauge not found
[  139.639873][ T2181] wacom 0003:056A:00E3.0001: unknown main item tag 0x0
[  139.649406][ T2181] wacom 0003:056A:00E3.0001: unknown main item tag 0x1
[  139.656986][    T9] Registered IR keymap rc-empty
[  139.657432][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  139.663435][ T2181] wacom 0003:056A:00E3.0001: unknown main item tag 0xd
[  139.680660][ T6832] loop1: detected capacity change from 0 to 256
[  139.695282][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.739027][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.746923][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  139.817366][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  139.824941][ T2181] wacom 0003:056A:00E3.0001: hidraw0: USB HID v0.77 Device [HID 056a:00e3] on usb-dummy_hcd.3-1/input0
[  139.908475][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7
[  139.943726][ T2181] usb 4-1: USB disconnect, device number 3
[  140.006728][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  140.073315][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  140.133038][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  140.170459][ T6835] fido_id[6835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  140.200582][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  140.252709][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  140.322976][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  140.361515][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  140.402770][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  140.449711][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  140.492413][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  140.561618][    T9] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  140.582880][    T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  140.604617][    T9] usb 3-1: USB disconnect, device number 3
[  140.970493][ T6829] loop4: detected capacity change from 0 to 40427
[  140.996798][ T6829] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  141.009349][ T6829] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  141.081857][ T6829] F2FS-fs (loop4): invalid crc value
[  141.437050][ T6829] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  141.450921][ T6829] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  141.493710][ T6873] lo: entered promiscuous mode
[  141.499711][ T6872] lo: left promiscuous mode
[  141.524986][ T6829] syz.4.276: attempt to access beyond end of device
[  141.524986][ T6829] loop4: rw=2049, sector=53248, nr_sectors = 16 limit=40427
[  141.759532][ T5968] syz-executor: attempt to access beyond end of device
[  141.759532][ T5968] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  141.832100][ T5968] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  142.027997][ T6885] loop1: detected capacity change from 0 to 1024
[  142.070807][ T6887] netlink: 27 bytes leftover after parsing attributes in process `syz.2.290'.
[  142.176694][ T6889] loop3: detected capacity change from 0 to 1024
[  143.386136][ T6917] loop3: detected capacity change from 0 to 4096
[  143.406537][ T6917] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  143.620005][ T6917] ntfs: volume version 3.1.
[  143.953023][ T6934] loop4: detected capacity change from 0 to 512
[  144.180943][   T11] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  144.625997][ T5156] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  144.835658][ T5156] usb 4-1: Using ep0 maxpacket: 16
[  144.851826][ T5156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.870334][ T5156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.900713][ T5156] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  144.924039][ T5156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.927264][ T6951] loop4: detected capacity change from 0 to 4096
[  144.952910][ T5156] usb 4-1: config 0 descriptor??
[  145.054019][ T6936] loop1: detected capacity change from 0 to 32768
[  145.092473][ T6936] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.308 (6936)
[  145.211859][ T6936] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  145.245283][ T6936] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  145.275127][ T6936] BTRFS info (device loop1): using free space tree
[  145.432195][ T6936] BTRFS info (device loop1): enabling ssd optimizations
[  145.466878][ T5156] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0
[  145.470245][ T6936] BTRFS info (device loop1): auto enabling async discard
[  145.803458][   T28] audit: type=1800 audit(1781783945.449:14): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.308" name="file2" dev="loop1" ino=261 res=0 errno=0
[  145.961064][   T23] usb 4-1: USB disconnect, device number 4
[  146.118652][ T6980] ЄЄЄЄЄЄ: renamed from vlan0 (while UP)
[  146.198862][ T5774] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  146.413178][ T6970] loop4: detected capacity change from 0 to 32768
[  146.611907][ T6970] read_mapping_page failed!
[  146.658190][ T6970] ERROR: (device loop4): txCommit: 
[  146.658190][ T6970] 
[  148.251870][ T5841] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  148.255345][ T7020] loop2: detected capacity change from 0 to 512
[  148.311133][ T7020] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  148.367153][ T7020] EXT4-fs (loop2): 1 truncate cleaned up
[  148.384320][ T7020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.465110][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.511319][ T5841] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  148.550946][ T5841] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  148.586851][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.615642][ T5841] usb 2-1: config 0 descriptor??
[  148.637270][ T5841] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  148.654547][ T5773] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  148.677043][ T5841] dvb-usb: bulk message failed: -22 (3/0)
[  148.704084][ T7010] loop3: detected capacity change from 0 to 40427
[  148.745849][ T5841] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  148.755496][ T7010] F2FS-fs (loop3): Invalid log blocks per segment (1)
[  148.781359][ T5841] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  148.781507][ T7010] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  148.798797][ T5841] usb 2-1: media controller created
[  148.822232][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  148.823852][ T7010] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[  148.846471][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.867311][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.899597][ T5841] dvb-usb: bulk message failed: -22 (6/0)
[  148.914027][ T7010] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff
[  148.941292][ T5841] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  148.954643][ T7026] loop4: detected capacity change from 0 to 1764
[  148.969559][ T5841] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11
[  148.986566][ T7010] F2FS-fs (loop3): Image doesn't support compression
[  149.029307][ T5841] dvb-usb: schedule remote query interval to 150 msecs.
[  149.039112][ T7010] F2FS-fs (loop3): invalid crc value
[  149.062174][ T5841] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  149.094321][ T7010] F2FS-fs (loop3): Found nat_bits in checkpoint
[  149.108343][ T5841] usb 2-1: USB disconnect, device number 4
[  149.299095][ T5841] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  149.349085][ T7010] F2FS-fs (loop3): Start checkpoint disabled!
[  149.375381][ T7010] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  149.384430][ T7010] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  149.410715][ T7031] loop4: detected capacity change from 0 to 1024
[  149.421923][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.604716][   T28] audit: type=1804 audit(1781783949.253:15): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.331" name="/newroot/84/file0/file0" dev="loop3" ino=10 res=1 errno=0
[  149.704866][   T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.989073][   T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.020255][ T1126] kworker/u4:6: attempt to access beyond end of device
[  150.020255][ T1126] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  150.045882][ T1126] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  150.086029][ T1126] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  150.153129][   T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.393139][   T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.045567][ T7049] input: syz0 as /devices/virtual/input/input12
[  151.105321][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  151.118302][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  151.130675][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  151.146739][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  151.156927][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  151.164825][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  151.337589][ T7040] loop4: detected capacity change from 0 to 32768
[  151.464698][ T7058] netem: change failed
[  152.265991][ T7055] loop3: detected capacity change from 0 to 32768
[  152.375579][ T7055] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  152.509472][ T7090] process 'syz.1.358' launched '/dev/fd/4' with NULL argv: empty string added
[  152.568647][ T7055] XFS (loop3): Ending clean mount
[  152.629778][ T7093] IPv6: Can't replace route, no match found
[  152.674396][ T7093] loop4: detected capacity change from 0 to 512
[  152.711472][ T7093] ext4: Unknown parameter 'nouser_xattr'
[  152.871797][ T7097] loop1: detected capacity change from 0 to 1024
[  152.945674][ T7097] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002]
[  153.011765][ T7097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.036359][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  153.055349][ T7050] chnl_net:caif_netlink_parms(): no params data found
[  153.173950][ T7097] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.360: bg 0: block 88: padding at end of block bitmap is not set
[  153.270901][ T7097] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  153.300452][ T5782] Bluetooth: hci0: command tx timeout
[  153.483781][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.512213][ T7101] loop4: detected capacity change from 0 to 32768
[  153.653513][ T7101] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.694238][   T36] hsr_slave_0: left promiscuous mode
[  153.733781][   T36] hsr_slave_1: left promiscuous mode
[  153.766744][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.774267][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.797687][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.805197][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.829769][   T36] bridge_slave_1: left allmulticast mode
[  153.835495][   T36] bridge_slave_1: left promiscuous mode
[  153.873271][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.896210][ T7120] loop3: detected capacity change from 0 to 64
[  153.910978][   T36] bridge_slave_0: left allmulticast mode
[  153.916955][   T36] bridge_slave_0: left promiscuous mode
[  153.922804][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.025969][ T7101] XFS (loop4): Ending clean mount
[  154.097565][ T7101] XFS (loop4): Quotacheck needed: Please wait.
[  154.148891][   T36] veth1_macvtap: left promiscuous mode
[  154.161106][   T36] veth0_macvtap: left promiscuous mode
[  154.173488][   T36] veth1_vlan: left promiscuous mode
[  154.207051][   T36] veth0_vlan: left promiscuous mode
[  154.276201][ T7101] XFS (loop4): Quotacheck: Done.
[  154.592174][ T5968] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  155.137542][ T7135] netlink: 'syz.4.370': attribute type 1 has an invalid length.
[  155.154606][ T7135] nbd: error processing sock list
[  155.161434][ T7135] block nbd0: shutting down sockets
[  155.373010][ T5782] Bluetooth: hci0: command tx timeout
[  156.086584][   T36] team0 (unregistering): Port device team_slave_1 removed
[  156.188521][   T36] team0 (unregistering): Port device team_slave_0 removed
[  156.279763][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.360139][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.944476][   T36] bond0 (unregistering): Released all slaves
[  157.116152][ T7132] netlink: 112 bytes leftover after parsing attributes in process `syz.3.371'.
[  157.145257][ T7050] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.184765][ T7050] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.192053][ T7050] bridge_slave_0: entered allmulticast mode
[  157.221109][ T7050] bridge_slave_0: entered promiscuous mode
[  157.245302][ T7050] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.254463][ T7050] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.261718][ T7050] bridge_slave_1: entered allmulticast mode
[  157.307134][ T7050] bridge_slave_1: entered promiscuous mode
[  157.418230][ T7050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.454486][ T5782] Bluetooth: hci0: command tx timeout
[  157.487217][ T7050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.668093][ T7050] team0: Port device team_slave_0 added
[  157.716672][ T7050] team0: Port device team_slave_1 added
[  157.828034][ T7050] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.856424][ T7050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.940199][ T7050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.008047][ T7050] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.040001][ T7050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.115060][ T7050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.322242][ T7050] hsr_slave_0: entered promiscuous mode
[  158.372362][ T7050] hsr_slave_1: entered promiscuous mode
[  158.387145][ T7050] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  158.404066][ T7050] Cannot create hsr debugfs directory
[  158.507004][ T7166] loop4: detected capacity change from 0 to 32768
[  158.586036][ T7166] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  158.742366][ T7166] XFS (loop4): Ending clean mount
[  159.026010][ T5968] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  159.182845][ T7050] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  159.262052][ T7050] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  159.322673][ T7050] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  159.407883][ T7050] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  159.523000][ T5782] Bluetooth: hci0: command tx timeout
[  159.621488][ T7050] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.709356][ T7050] 8021q: adding VLAN 0 to HW filter on device team0
[  159.793616][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.800866][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.868745][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.877188][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.380452][ T7050] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.442869][ T5156] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  160.552277][ T7243] loop4: detected capacity change from 0 to 256
[  160.660956][ T5156] usb 2-1: Using ep0 maxpacket: 32
[  160.684309][ T5156] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  160.709139][ T5156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.993878][ T5156] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  161.039007][ T5156] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  161.067375][ T5156] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  161.100494][ T5156] usb 2-1: media controller created
[  161.170388][ T5156] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  161.266287][ T5156] az6027: usb out operation failed. (-71)
[  161.277875][ T5156] az6027: usb out operation failed. (-71)
[  161.284977][ T7050] veth0_vlan: entered promiscuous mode
[  161.301973][ T5156] stb0899_attach: Driver disabled by Kconfig
[  161.329248][ T7050] veth1_vlan: entered promiscuous mode
[  161.346995][ T5156] az6027: no front-end attached
[  161.346995][ T5156] 
[  161.371771][ T5156] az6027: usb out operation failed. (-71)
[  161.384393][ T5156] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  161.407988][ T5156] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13
[  161.446197][ T5156] dvb-usb: schedule remote query interval to 400 msecs.
[  161.469576][ T7050] veth0_macvtap: entered promiscuous mode
[  161.487313][ T5156] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  161.531314][ T7050] veth1_macvtap: entered promiscuous mode
[  161.557678][ T5156] usb 2-1: USB disconnect, device number 5
[  161.673296][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.708296][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.749563][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.789589][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.805341][ T5156] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  161.820695][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.839240][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.869215][ T7050] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.909835][ T7275] netlink: 32 bytes leftover after parsing attributes in process `syz.3.406'.
[  162.015662][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.046245][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.071906][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.111912][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.170433][ T7050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.191924][ T7050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.233364][ T7050] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.276573][ T7050] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.306959][ T7050] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.331775][ T7050] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.360963][ T7050] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.642203][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.679628][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.743251][ T7288] block nbd3: shutting down sockets
[  162.780343][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.803761][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.959767][ T7294] netem: incorrect ge model size
[  162.965694][ T7294] netem: change failed
[  163.400533][ T7285] loop4: detected capacity change from 0 to 32768
[  163.466816][ T7285] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  163.596618][ T7285] XFS (loop4): Ending clean mount
[  163.626251][ T7318] loop5: detected capacity change from 0 to 8
[  163.794613][ T5968] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  163.821440][ T7287] loop1: detected capacity change from 0 to 40427
[  163.858578][ T7287] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  163.899847][ T7287] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  163.914518][ T7318] SQUASHFS error: Failed to read block 0x2d7: -5
[  163.929716][ T7287] F2FS-fs (loop1): invalid crc value
[  163.964430][ T7318] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  163.965389][ T7287] F2FS-fs (loop1): Found nat_bits in checkpoint
[  164.283897][ T7287] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  164.322483][ T7287] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  165.165308][ T7353] program syz.4.427 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  165.412652][ T7361] loop4: detected capacity change from 0 to 512
[  165.459649][ T7361] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  165.522592][ T7361] EXT4-fs (loop4): 1 truncate cleaned up
[  165.549788][ T7361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.933646][ T5968] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.970738][ T7375] netlink: 36 bytes leftover after parsing attributes in process `syz.1.425'.
[  166.142508][ T7381] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  166.153069][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'.
[  166.320196][ T5782] Bluetooth: hci0: command tx timeout
[  166.635482][ T7390] loop1: detected capacity change from 0 to 4096
[  166.666744][ T7390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.798937][ T7398] IPv6: addrconf: prefix option has invalid lifetime
[  166.869761][ T7400] loop5: detected capacity change from 0 to 512
[  166.928020][ T7400] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.439: invalid indirect mapped block 4294967295 (level 1)
[  167.110954][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.114199][ T7400] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.439: invalid indirect mapped block 4294967295 (level 1)
[  167.232701][ T7400] EXT4-fs (loop5): 2 truncates cleaned up
[  167.260529][ T7400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.344588][ T7400] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1430: inode #12: block 7: comm syz.5.439: path /5/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  167.377347][ T7392] loop4: detected capacity change from 0 to 32768
[  167.488956][ T7392] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  167.733946][ T7050] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.767511][ T7419] netlink: 'syz.3.445': attribute type 14 has an invalid length.
[  167.859428][ T7392] syz.4.435 (7392) used greatest stack depth: 18768 bytes left
[  168.024402][ T5968] ocfs2: Unmounting device (7,4) on (node local)
[  169.510624][ T5156] kernel write not supported for file /uinput (pid: 5156 comm: kworker/0:2)
[  170.965407][ T7518] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.010372][ T7518] batadv_slave_0: entered promiscuous mode
[  171.026013][ T7518] batadv_slave_0: entered allmulticast mode
[  171.203422][ T1126] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  171.347963][ T7528] vcan0: tx drop: invalid da for name 0x00000000000000f0
[  171.729192][ T5156] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  171.745576][ T7540] loop5: detected capacity change from 0 to 512
[  171.774617][ T7540] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  171.818350][ T7507] loop4: detected capacity change from 0 to 40427
[  171.856113][ T7507] F2FS-fs (loop4): invalid crc value
[  171.865597][ T7540] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.485: invalid indirect mapped block 256 (level 2)
[  171.912198][ T7507] F2FS-fs (loop4): Found nat_bits in checkpoint
[  171.936908][ T7540] EXT4-fs (loop5): 2 truncates cleaned up
[  171.944903][ T5156] usb 2-1: Using ep0 maxpacket: 16
[  171.966648][ T7540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.969657][ T5156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.025752][ T5156] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  172.065839][ T5156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.112268][ T5156] usb 2-1: config 0 descriptor??
[  172.128896][ T7540] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.485: bg 0: block 5: invalid block bitmap
[  172.168806][ T7507] F2FS-fs (loop4): Start checkpoint disabled!
[  172.182304][ T7540] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[  172.206095][ T7540] EXT4-fs (loop5): This should not happen!! Data will be lost
[  172.206095][ T7540] 
[  172.216052][ T7540] EXT4-fs (loop5): Total free blocks count 0
[  172.216568][ T7507] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  172.222570][ T7540] EXT4-fs (loop5): Free/Dirty block details
[  172.248630][ T7540] EXT4-fs (loop5): free_blocks=0
[  172.253704][ T7540] EXT4-fs (loop5): dirty_blocks=2
[  172.273487][ T7540] EXT4-fs (loop5): Block reservation details
[  172.293734][ T7540] EXT4-fs (loop5): i_reserved_data_blocks=2
[  172.418846][   T11] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  172.575810][ T5156] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  172.635527][   T11] kworker/u4:0: attempt to access beyond end of device
[  172.635527][   T11] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  172.681870][   T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  172.696629][   T11] kworker/u4:0: attempt to access beyond end of device
[  172.696629][   T11] loop4: rw=2049, sector=40984, nr_sectors = 8 limit=40427
[  172.718209][   T11] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  172.735130][ T7537] loop3: detected capacity change from 0 to 32768
[  172.943600][ T7537] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  173.100710][ T7537] XFS (loop3): Ending clean mount
[  173.175666][ T7537] XFS (loop3): Quotacheck needed: Please wait.
[  173.251672][   T23] usb 2-1: USB disconnect, device number 6
[  173.324507][ T7537] XFS (loop3): Quotacheck: Done.
[  173.846498][ T7565] program syz.5.488 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  174.062556][ T7569] netlink: 'syz.5.489': attribute type 29 has an invalid length.
[  174.076331][ T7571] loop1: detected capacity change from 0 to 256
[  174.076958][ T7569] netlink: 'syz.5.489': attribute type 29 has an invalid length.
[  174.147364][ T7571] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  174.155962][ T7569] netlink: 'syz.5.489': attribute type 29 has an invalid length.
[  174.179653][ T7569] netlink: 'syz.5.489': attribute type 29 has an invalid length.
[  174.261975][ T5776] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  174.262229][ T7573] loop4: detected capacity change from 0 to 256
[  174.988307][ T5816] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  175.170376][ T5816] usb 5-1: Using ep0 maxpacket: 16
[  175.183066][ T5816] usb 5-1: unable to get BOS descriptor or descriptor too short
[  175.204844][ T5816] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05
[  175.216064][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.229782][ T5816] usb 5-1: Product: syz
[  175.234058][ T5816] usb 5-1: Manufacturer: syz
[  175.241090][ T5816] usb 5-1: SerialNumber: syz
[  175.506550][ T5816] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  176.107301][ T5816] gspca_vc032x: reg_r err -71
[  176.121041][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.142245][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.151672][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.167225][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.187399][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.198225][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.203582][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.210068][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.215492][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.222006][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.227348][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.233165][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.243826][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.249596][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.254983][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.262484][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.268054][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.273383][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.279273][ T5816] gspca_vc032x: I2c Bus Busy Wait 00
[  176.287905][ T5816] gspca_vc032x: Unknown sensor...
[  176.297991][ T5816] vc032x: probe of 5-1:12.0 failed with error -22
[  176.348192][ T5816] usb 5-1: USB disconnect, device number 3
[  176.913816][ T7632] loop3: detected capacity change from 0 to 2048
[  177.030683][ T7637] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.099204][ T7638] loop4: detected capacity change from 0 to 256
[  177.202053][ T7637] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  177.236768][ T7637] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  177.270906][ T7637] Remounting filesystem read-only
[  177.276205][   T36] NILFS (loop3): discard dirty page: offset=4096, ino=6
[  177.293643][   T36] NILFS (loop3): discard dirty block: blocknr=39, size=1024
[  177.314022][   T36] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  177.337344][ T7638] FAT-fs (loop4): Directory bread(block 64) failed
[  177.345008][ T7638] FAT-fs (loop4): Directory bread(block 65) failed
[  177.351000][   T36] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  177.367846][ T7638] FAT-fs (loop4): Directory bread(block 66) failed
[  177.375938][   T36] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  177.380539][ T7645] loop5: detected capacity change from 0 to 512
[  177.392239][ T7638] FAT-fs (loop4): Directory bread(block 67) failed
[  177.393808][   T36] NILFS (loop3): discard dirty page: offset=0, ino=2
[  177.401868][ T7638] FAT-fs (loop4): Directory bread(block 68) failed
[  177.411892][   T36] NILFS (loop3): discard dirty block: blocknr=18, size=1024
[  177.413926][ T7645] EXT4-fs: Ignoring removed bh option
[  177.442201][ T7638] FAT-fs (loop4): Directory bread(block 69) failed
[  177.450537][ T7638] FAT-fs (loop4): Directory bread(block 70) failed
[  177.459224][ T7638] FAT-fs (loop4): Directory bread(block 71) failed
[  177.462921][   T36] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  177.475976][ T7638] FAT-fs (loop4): Directory bread(block 72) failed
[  177.501671][ T7638] FAT-fs (loop4): Directory bread(block 73) failed
[  177.516747][   T36] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  177.536979][ T7645] EXT4-fs (loop5): 1 truncate cleaned up
[  177.544355][ T7645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.587511][   T36] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  177.653600][ T7050] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.667054][   T36] NILFS (loop3): discard dirty page: offset=0, ino=5
[  177.687217][   T36] NILFS (loop3): discard dirty block: blocknr=41, size=1024
[  177.703537][   T36] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  177.724869][   T36] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  177.734196][   T36] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  177.759809][ T7632] NILFS (loop3): mounting fs with errors
[  177.782013][ T7632] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  177.802058][ T7632] Remounting filesystem read-only
[  177.810876][ T7632] NILFS (loop3): error -5 reading inode: ino=18
[  177.828248][ T7632] NILFS (loop3): cannot mark inode dirty (ino=18): error -5 loading inode block
[  177.865523][ T7632] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  177.900123][ T7632] NILFS (loop3): error -5 reading inode: ino=18
[  177.938219][ T7632] NILFS (loop3): cannot mark inode dirty (ino=18): error -5 loading inode block
[  177.976799][ T7632] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  178.013139][ T7632] NILFS (loop3): error -5 reading inode: ino=18
[  178.039994][ T7632] NILFS (loop3): cannot mark inode dirty (ino=18): error -5 loading inode block
[  178.169541][ T5776] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  178.195029][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=6
[  178.212941][ T5776] NILFS (loop3): discard dirty block: blocknr=35, size=1024
[  178.223324][ T5776] NILFS (loop3): discard dirty block: blocknr=36, size=1024
[  178.253748][ T5776] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[  178.270175][ T5776] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[  178.285019][ T5776] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  178.299643][ T7669] loop9: detected capacity change from 0 to 7
[  178.302308][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=18
[  178.324517][ T5776] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  178.335137][ T7669] Dev loop9: unable to read RDB block 7
[  178.345815][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  178.358261][ T7669]  loop9: unable to read partition table
[  178.361757][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  178.364821][ T7669] loop9: partition table beyond EOD, truncated
[  178.377483][ T5816] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  178.390430][ T7669] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5)
[  178.394525][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  178.413967][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=4
[  178.420932][ T5776] NILFS (loop3): discard dirty block: blocknr=40, size=1024
[  178.432494][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  178.443550][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  178.453900][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  178.465652][ T5776] NILFS (loop3): discard dirty page: offset=0, ino=3
[  178.489209][ T5776] NILFS (loop3): discard dirty block: blocknr=42, size=1024
[  178.496574][ T5776] NILFS (loop3): discard dirty block: blocknr=43, size=1024
[  178.515197][ T5776] NILFS (loop3): discard dirty block: blocknr=44, size=1024
[  178.522827][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  178.534329][ T5776] NILFS (loop3): discard dirty page: offset=65536, ino=3
[  178.555256][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  178.580862][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  178.597374][ T5776] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  178.604654][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  178.618128][ T5816] usb 5-1: Using ep0 maxpacket: 16
[  178.642686][ T5776] NILFS (loop3): discard dirty page: offset=196608, ino=3
[  178.666515][ T5816] usb 5-1: unable to get BOS descriptor or descriptor too short
[  178.679759][ T5816] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  178.695965][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  178.705080][ T5816] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  178.722936][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  178.732293][ T5776] NILFS (loop3): discard dirty block: blocknr=49, size=1024
[  178.745085][ T5776] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  178.756024][ T5816] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  178.767408][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.775468][ T5816] usb 5-1: Product: syz
[  178.812823][ T5816] usb 5-1: Manufacturer: syz
[  178.821143][ T5816] usb 5-1: SerialNumber: syz
[  179.060437][ T5816] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  179.069404][ T5816] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  179.227544][ T5781] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  179.447234][ T5781] usb 4-1: Using ep0 maxpacket: 16
[  179.460765][ T5781] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  179.478640][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3
[  179.484809][ T5816] usb 5-1: 2:1 : can't get Cluster Descriptor
[  179.507252][ T5781] usb 4-1: Product: syz
[  179.513975][ T5781] usb 4-1: Manufacturer: syz
[  179.525209][ T5781] usb 4-1: SerialNumber: syz
[  179.551011][ T5781] usb 4-1: config 0 descriptor??
[  179.568320][ T5781] ums-onetouch 4-1:0.0: USB Mass Storage device detected
[  179.845563][ T5816] usb 5-1: USB disconnect, device number 4
[  179.861018][ T5781] usb 4-1: USB disconnect, device number 5
[  180.314090][ T7711] loop1: detected capacity change from 0 to 512
[  180.345154][ T7711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.626083][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.850290][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.035906][ T7732] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  181.139104][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  181.327187][    T9] usb 2-1: Using ep0 maxpacket: 32
[  181.334862][    T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  181.347488][    T9] usb 2-1: config 0 has no interface number 0
[  181.356688][    T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  181.377120][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.385827][    T9] usb 2-1: Product: syz
[  181.403003][    T9] usb 2-1: Manufacturer: syz
[  181.428241][    T9] usb 2-1: SerialNumber: syz
[  181.454038][    T9] usb 2-1: config 0 descriptor??
[  181.474475][    T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  181.728015][    T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  181.772759][    T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  181.886972][ T5781] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  182.107516][ T5781] usb 4-1: Using ep0 maxpacket: 32
[  182.119229][ T5781] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  182.136879][ T5781] usb 4-1: config 0 has no interface number 0
[  182.161078][ T5781] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  182.183180][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.213620][ T5781] usb 4-1: Product: syz
[  182.224272][ T5781] usb 4-1: Manufacturer: syz
[  182.246947][ T5781] usb 4-1: SerialNumber: syz
[  182.248041][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  182.265240][    T9] usb 2-1: USB disconnect, device number 7
[  182.268305][ T5781] usb 4-1: config 0 descriptor??
[  182.294100][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  182.296285][ T5781] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  182.363406][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  182.401780][    T9] quatech2 2-1:0.51: device disconnected
[  182.540922][ T5781] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  182.571858][ T5781] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  183.031269][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  183.040676][ T2181] usb 4-1: USB disconnect, device number 6
[  183.065057][ T2181] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  183.093991][ T2181] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  183.140746][ T2181] quatech2 4-1:0.51: device disconnected
[  183.266738][ T5781] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  183.376181][ T7790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.572'.
[  183.457020][ T5781] usb 6-1: Using ep0 maxpacket: 32
[  183.472313][ T5781] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  183.497885][ T5781] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  183.516791][ T5781] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  183.535361][ T5781] usb 6-1: Product: syz
[  183.539973][ T5781] usb 6-1: Manufacturer: syz
[  183.569893][ T5781] usb 6-1: SerialNumber: syz
[  183.592750][ T5781] usb 6-1: config 0 descriptor??
[  183.607620][ T7781] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  183.616306][ T5781] hub 6-1:0.0: bad descriptor, ignoring hub
[  183.648014][ T5781] hub: probe of 6-1:0.0 failed with error -5
[  184.077775][ T5781] usb 6-1: USB disconnect, device number 2
[  184.257490][ T7811] loop4: detected capacity change from 0 to 256
[  184.355668][ T7811] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  184.905614][ T7784] loop1: detected capacity change from 0 to 65536
[  184.960540][ T7784] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  185.021784][   T28] audit: type=1326 audit(1781783984.687:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.4.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4c39ce59 code=0x7ffc0000
[  185.057377][   T28] audit: type=1326 audit(1781783984.687:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.4.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4c39ce59 code=0x7ffc0000
[  185.100689][   T28] audit: type=1326 audit(1781783984.707:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.4.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fac4c39ce59 code=0x7ffc0000
[  185.146265][ T7784] XFS (loop1): Ending clean mount
[  185.172428][   T28] audit: type=1326 audit(1781783984.797:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.4.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4c39ce59 code=0x7ffc0000
[  185.176096][ T7784] XFS (loop1): Quotacheck needed: Please wait.
[  185.238547][   T11] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x196/0x260, xfs_agf block 0x1 
[  185.277597][   T11] XFS (loop1): Unmount and run xfs_repair
[  185.285566][   T28] audit: type=1326 audit(1781783984.797:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.4.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4c39ce59 code=0x7ffc0000
[  185.300632][   T11] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  185.362803][   T11] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  185.426067][   T11] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  185.456805][   T11] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  185.498788][   T11] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  185.527591][   T11] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  185.565252][   T11] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  185.588959][   T28] audit: type=1326 audit(1781783985.257:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.4.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fac4c39ce59 code=0x7ffc0000
[  185.611646][   T11] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  185.673810][   T11] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  185.676512][   T28] audit: type=1326 audit(1781783985.257:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.4.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4c39ce59 code=0x7ffc0000
[  185.695241][   T11] XFS (loop1): metadata I/O error in "xfs_read_agf+0x294/0x590" at daddr 0x1 len 1 error 74
[  185.772670][ T7784] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  185.810507][   T28] audit: type=1326 audit(1781783985.257:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7838 comm="syz.4.583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4c39ce59 code=0x7ffc0000
[  185.963837][ T7859] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x196/0x260, xfs_agf block 0x1 
[  186.006601][ T7859] XFS (loop1): Unmount and run xfs_repair
[  186.027824][ T7859] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  186.055440][ T7859] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  186.093624][ T7859] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  186.132949][ T7859] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  186.186519][ T7859] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  186.212383][ T7859] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  186.258141][ T7859] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  186.271298][ T7859] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  186.301530][ T7859] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  186.333552][ T7859] XFS (loop1): metadata I/O error in "xfs_read_agf+0x294/0x590" at daddr 0x1 len 1 error 74
[  186.410494][ T7859] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  186.444339][ T7859] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  186.455617][ T5781] XFS (loop1): xfs_difree: xfs_ialloc_read_agi() returned error -5.
[  186.546158][ T5774] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  186.551337][ T7873] netlink: 36 bytes leftover after parsing attributes in process `syz.3.590'.
[  186.759253][ T7866] loop4: detected capacity change from 0 to 4096
[  186.820969][ T7866] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  187.384824][ T7861] loop5: detected capacity change from 0 to 40427
[  187.408853][ T7866] ntfs3: loop4: ino=0, attr_set_size
[  187.435867][ T7861] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x7ffff
[  187.458401][ T7861] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0xe4
[  187.484283][ T7861] F2FS-fs (loop5): invalid crc value
[  187.531720][ T7866] ntfs3: loop4: MFT: r=0, expect seq=0 instead of 1!
[  187.581480][ T7861] F2FS-fs (loop5): Found nat_bits in checkpoint
[  187.703897][ T7892] loop3: detected capacity change from 0 to 512
[  187.719207][ T7861] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0
[  187.821113][ T7892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.846367][ T7861] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  187.994577][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.067162][ T7861] F2FS-fs (loop5): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x754/0x1c70
[  188.155612][ T7861] syz.5.588: attempt to access beyond end of device
[  188.155612][ T7861] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  188.308322][ T7907] loop3: detected capacity change from 0 to 764
[  188.390568][ T7907] rock: directory entry would overflow storage
[  188.409845][ T7050] syz-executor: attempt to access beyond end of device
[  188.409845][ T7050] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  188.416187][ T7907] rock: sig=0x4654, size=5, remaining=4
[  188.469377][ T7050] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  189.668428][ T7921] loop3: detected capacity change from 0 to 256
[  189.696053][    C1] sched: RT throttling activated
[  189.874357][ T7921] FAT-fs (loop3): Directory bread(block 64) failed
[  189.935805][ T7921] FAT-fs (loop3): Directory bread(block 65) failed
[  189.992093][ T7921] FAT-fs (loop3): Directory bread(block 66) failed
[  190.009345][ T7912] loop4: detected capacity change from 0 to 131072
[  190.054470][ T7921] FAT-fs (loop3): Directory bread(block 67) failed
[  190.063319][ T7912] F2FS-fs (loop4): invalid crc value
[  190.082956][ T7921] FAT-fs (loop3): Directory bread(block 68) failed
[  190.116277][ T7921] FAT-fs (loop3): Directory bread(block 69) failed
[  190.119470][ T7912] F2FS-fs (loop4): Found nat_bits in checkpoint
[  190.136286][ T7921] FAT-fs (loop3): Directory bread(block 70) failed
[  190.142887][ T7921] FAT-fs (loop3): Directory bread(block 71) failed
[  190.203832][ T7912] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  190.204242][ T7921] FAT-fs (loop3): Directory bread(block 72) failed
[  190.237504][ T7921] FAT-fs (loop3): Directory bread(block 73) failed
[  190.342731][ T7901] loop1: detected capacity change from 0 to 40427
[  190.416237][ T7901] F2FS-fs (loop1): invalid crc value
[  190.485145][ T7901] F2FS-fs (loop1): Found nat_bits in checkpoint
[  190.697902][ T7901] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  190.937807][ T5774] syz-executor: attempt to access beyond end of device
[  190.937807][ T5774] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  190.998902][ T5774] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  192.168120][ T7967] loop1: detected capacity change from 0 to 512
[  192.904411][ T7961] loop3: detected capacity change from 0 to 32768
[  192.947699][ T7961] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.609 (7961)
[  193.018085][ T7961] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  193.056104][ T7961] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  193.064845][ T7961] BTRFS info (device loop3): using free space tree
[  193.110544][ T7983] loop1: detected capacity change from 0 to 8192
[  193.223584][ T7983] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  193.287511][ T7983] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  193.315975][ T7983] REISERFS (device loop1): using ordered data mode
[  193.337209][ T7983] reiserfs: using flush barriers
[  193.367780][ T7961] BTRFS info (device loop3): enabling ssd optimizations
[  193.374850][ T7961] BTRFS info (device loop3): auto enabling async discard
[  193.412506][ T7983] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  193.446579][ T7983] REISERFS (device loop1): checking transaction log (loop1)
[  193.496614][ T7983] REISERFS (device loop1): Using r5 hash to sort names
[  193.504971][ T7983] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  193.673777][   T28] audit: type=1800 audit(1781783993.328:24): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.615" name="file1" dev="loop1" ino=2 res=0 errno=0
[  193.758288][ T7961] fs-verity: sha256 using implementation "sha256-avx2"
[  193.850335][ T7961] BTRFS info (device loop3): setting compat-ro feature flag for VERITY (0x4)
[  194.205969][ T5776] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  194.242955][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  194.249519][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  194.286737][ T8016] loop1: detected capacity change from 0 to 764
[  194.346968][ T8016] rock: directory entry would overflow storage
[  194.353211][ T8016] rock: sig=0x4654, size=5, remaining=4
[  194.448392][ T7980] loop5: detected capacity change from 0 to 40427
[  194.479030][ T7980] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  194.525421][ T7980] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  194.604133][ T7980] F2FS-fs (loop5): Found nat_bits in checkpoint
[  194.917632][ T7980] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  194.924765][ T7980] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  197.756409][ T8065] loop4: detected capacity change from 0 to 32768
[  197.898424][ T8065] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  197.953508][ T8106] loop1: detected capacity change from 0 to 512
[  197.963738][ T8065] JBD2: Ignoring recovery information on journal
[  197.977369][ T8102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.034513][ T8065] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  198.092073][ T8106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.239576][ T8103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.293450][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.469323][ T8113] loop3: detected capacity change from 0 to 512
[  198.514040][ T8117] loop5: detected capacity change from 0 to 512
[  198.537814][ T8113] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.640: bg 0: block 393: padding at end of block bitmap is not set
[  198.566312][ T8117] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  198.574298][ T8117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[  198.600428][ T5968] ocfs2: Unmounting device (7,4) on (node local)
[  198.603530][ T8117] EXT4-fs (loop5): orphan cleanup on readonly fs
[  198.638373][ T8113] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  198.663907][ T8117] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #13: comm syz.5.641: iget: bad i_size value: 12154761577498
[  198.680049][ T8113] EXT4-fs (loop3): 2 truncates cleaned up
[  198.697578][ T8113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.700768][ T8117] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.641: couldn't read orphan inode 13 (err -117)
[  198.744832][ T8117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  198.762912][ T5816] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  198.781396][ T8113] EXT4-fs warning (device loop3): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed
[  198.834572][ T8117] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.641: dx entry: limit 65535 != root limit 120
[  198.869054][ T8117] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.641: Corrupt directory, running e2fsck is recommended
[  198.884843][ T8117] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.641: path /65/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  198.911734][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.950467][ T5816] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  198.962441][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.974839][ T7050] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.006444][ T5816] usb 2-1: config 0 descriptor??
[  199.046284][ T5816] cp210x 2-1:0.0: cp210x converter detected
[  199.092440][ T8123] loop3: detected capacity change from 0 to 512
[  199.184515][ T8123] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.643: corrupted in-inode xattr: e_value out of bounds
[  199.205104][ T8123] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.643: couldn't read orphan inode 15 (err -117)
[  199.244345][ T8123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.288248][ T8128] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2
[  199.317391][   T12] Bluetooth: hci4: Frame reassembly failed (-84)
[  199.323815][   T12] Bluetooth: hci4: Frame reassembly failed (-84)
[  199.408679][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.465898][ T5816] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  199.501315][ T5816] usb 2-1: cp210x converter now attached to ttyUSB0
[  199.674206][ T8138] loop5: detected capacity change from 0 to 512
[  199.681928][ T8138] EXT4-fs: Ignoring removed i_version option
[  199.688880][ T8138] EXT4-fs: Ignoring removed oldalloc option
[  199.699492][ T8138] EXT4-fs (loop5): Test dummy encryption mode enabled
[  199.715159][   T27] usb 2-1: USB disconnect, device number 8
[  199.738826][   T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  199.739465][ T8138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.757071][   T27] cp210x 2-1:0.0: device disconnected
[  199.981662][ T8138] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  200.042948][ T7050] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.535232][ T8147] loop5: detected capacity change from 0 to 32768
[  200.604923][ T8147] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  200.661853][ T8147] XFS (loop5): Ending clean mount
[  200.764571][ T7050] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  201.163434][ T8172] loop5: detected capacity change from 0 to 256
[  201.183888][ T8172] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  201.355712][   T51] Bluetooth: hci4: command 0x1003 tx timeout
[  201.355785][ T5782] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  201.673479][ T8183] loop5: detected capacity change from 0 to 8
[  201.889649][ T8170] loop3: detected capacity change from 0 to 32768
[  201.961953][ T8170] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.659 (8170)
[  202.008952][ T8170] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  202.040374][ T8170] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  202.061570][ T8170] BTRFS info (device loop3): enabling disk space caching
[  202.084454][ T8170] BTRFS info (device loop3): force clearing of disk cache
[  202.114360][ T8170] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  202.146740][ T8170] BTRFS info (device loop3): use zstd compression, level 3
[  202.154037][ T8170] BTRFS info (device loop3): disk space caching is enabled
[  202.368142][ T8170] BTRFS info (device loop3): enabling ssd optimizations
[  202.402469][ T8170] BTRFS info (device loop3): auto enabling async discard
[  202.432171][ T8170] BTRFS info (device loop3): rebuilding free space tree
[  202.518138][ T8170] BTRFS info (device loop3): disabling free space tree
[  202.557085][ T8170] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  202.594374][ T8170] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  202.778371][ T8177] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x7ffff
[  202.801702][ T8177] F2FS-fs (loop4): invalid crc value
[  202.829311][ T8177] F2FS-fs (loop4): Found nat_bits in checkpoint
[  202.913496][ T8177] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  202.927688][   T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  203.043929][ T5776] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  203.068283][ T8177] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  203.198880][  T741] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  203.199109][   T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  203.234604][   T23] usb 2-1: config 0 has no interface number 0
[  203.244080][ T8208] set_capacity_and_notify: 1 callbacks suppressed
[  203.244096][ T8208] loop5: detected capacity change from 0 to 32768
[  203.248040][   T23] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  203.294987][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.307359][   T23] usb 2-1: Product: syz
[  203.311660][   T23] usb 2-1: Manufacturer: syz
[  203.328640][   T23] usb 2-1: SerialNumber: syz
[  203.338236][   T23] usb 2-1: config 0 descriptor??
[  203.418393][ T8208] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  203.575706][   T23] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  203.619642][   T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  203.664443][   T23] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  203.684349][   T23] usb 2-1: media controller created
[  203.742835][ T8208] XFS (loop5): Ending clean mount
[  203.758425][ T8214] usb 2-1: dvb_usb_ec168: I2C read not implemented
[  203.776741][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  203.811541][ T8230] netlink: 64 bytes leftover after parsing attributes in process `syz.3.673'.
[  203.917719][   T23] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  204.095795][   T23] usb 2-1: USB disconnect, device number 9
[  204.154564][ T7050] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  204.716526][ T8249] loop4: detected capacity change from 0 to 64
[  204.858930][   T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  204.982816][ T8254] netlink: 48 bytes leftover after parsing attributes in process `syz.5.684'.
[  205.083833][   T27] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  205.094778][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.109239][   T27] usb 2-1: Product: syz
[  205.114006][   T27] usb 2-1: Manufacturer: syz
[  205.120269][   T27] usb 2-1: SerialNumber: syz
[  205.127935][   T27] usb 2-1: config 0 descriptor??
[  205.146486][   T27] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  205.276310][ T5781] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  205.297546][ T8267] loop4: detected capacity change from 0 to 256
[  205.483050][ T5781] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.498990][ T5781] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  205.520622][ T5781] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[  205.536048][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.556188][ T5781] usb 4-1: Product: syz
[  205.560493][ T5781] usb 4-1: Manufacturer: syz
[  205.565148][ T5781] usb 4-1: SerialNumber: syz
[  205.833375][ T5781] usb 4-1: 0:1 : does not exist
[  205.845458][ T5781] usb 4-1: unit 4 not found!
[  205.856154][ T5781] usb 4-1: unit 51 not found!
[  205.916183][ T5781] usb 4-1: USB disconnect, device number 7
[  205.982797][   T27] gspca_sunplus: reg_w_riv err -71
[  205.999742][   T27] sunplus: probe of 2-1:0.0 failed with error -71
[  206.029988][   T27] usb 2-1: USB disconnect, device number 10
[  206.153117][ T8269] loop5: detected capacity change from 0 to 32768
[  206.206959][ T8269] jfs_readdir called with invalid offset!
[  206.558138][ T5085] Bluetooth: hci1: command 0x0406 tx timeout
[  206.558154][ T5787] Bluetooth: hci2: command 0x0406 tx timeout
[  206.655806][ T8279] mkiss: ax0: crc mode is auto.
[  206.723201][ T8277] loop4: detected capacity change from 0 to 32768
[  206.833644][ T8277] JBD2: Ignoring recovery information on journal
[  206.993050][ T8277] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  207.235442][   T28] audit: type=1800 audit(1781784006.898:25): pid=8277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.694" name="bus" dev="loop4" ino=17059 res=0 errno=0
[  207.362155][ T8277] 
[  207.364546][ T8277] ======================================================
[  207.371565][ T8277] WARNING: possible circular locking dependency detected
[  207.378597][ T8277] syzkaller #0 Not tainted
[  207.383040][ T8277] ------------------------------------------------------
[  207.390089][ T8277] syz.4.694/8277 is trying to acquire lock:
[  207.396009][ T8277] ffff88805dadb498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  207.409030][ T8277] 
[  207.409030][ T8277] but task is already holding lock:
[  207.416422][ T8277] ffff88805dad9818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  207.429669][ T8277] 
[  207.429669][ T8277] which lock already depends on the new lock.
[  207.429669][ T8277] 
[  207.440082][ T8277] 
[  207.440082][ T8277] the existing dependency chain (in reverse order) is:
[  207.449187][ T8277] 
[  207.449187][ T8277] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}:
[  207.459714][ T8277]        down_write+0x97/0x200
[  207.464497][ T8277]        ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  207.470919][ T8277]        ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  207.477778][ T8277]        ocfs2_mknod+0xe8f/0x2300
[  207.482821][ T8277]        ocfs2_create+0x196/0x430
[  207.487936][ T8277]        path_openat+0x12a0/0x3230
[  207.493058][ T8277]        do_filp_open+0x1f5/0x430
[  207.498098][ T8277]        do_sys_openat2+0x134/0x1d0
[  207.503307][ T8277]        __x64_sys_openat+0x139/0x160
[  207.508693][ T8277]        do_syscall_64+0x55/0xb0
[  207.513635][ T8277]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.520060][ T8277] 
[  207.520060][ T8277] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}:
[  207.530610][ T8277]        down_write+0x97/0x200
[  207.535389][ T8277]        ocfs2_evict_inode+0x1d84/0x41e0
[  207.541028][ T8277]        evict+0x4ca/0x8d0
[  207.545467][ T8277]        ocfs2_dentry_iput+0x24e/0x390
[  207.550932][ T8277]        __dentry_kill+0x431/0x650
[  207.556052][ T8277]        dentry_kill+0xb8/0x290
[  207.560912][ T8277]        dput+0xfe/0x1e0
[  207.565179][ T8277]        __fput+0x5e5/0x970
[  207.569686][ T8277]        task_work_run+0x1d4/0x260
[  207.574838][ T8277]        exit_to_user_mode_loop+0xe6/0x110
[  207.580655][ T8277]        exit_to_user_mode_prepare+0xee/0x180
[  207.586733][ T8277]        syscall_exit_to_user_mode+0x1a/0x50
[  207.592732][ T8277]        do_syscall_64+0x61/0xb0
[  207.597682][ T8277]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.604128][ T8277] 
[  207.604128][ T8277] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}:
[  207.614487][ T8277]        __lock_acquire+0x2df1/0x7d40
[  207.619875][ T8277]        lock_acquire+0x19e/0x420
[  207.624930][ T8277]        down_write+0x97/0x200
[  207.629701][ T8277]        ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  207.636035][ T8277]        ocfs2_dio_end_io+0x1040/0x13c0
[  207.641591][ T8277]        dio_complete+0x254/0x710
[  207.646636][ T8277]        __blockdev_direct_IO+0x2ea8/0x3500
[  207.652532][ T8277]        ocfs2_direct_IO+0x235/0x2a0
[  207.657826][ T8277]        generic_file_direct_write+0x1d4/0x3e0
[  207.663987][ T8277]        __generic_file_write_iter+0x11b/0x230
[  207.670317][ T8277]        ocfs2_file_write_iter+0x167a/0x1e80
[  207.676308][ T8277]        do_iter_write+0x738/0xc30
[  207.681445][ T8277]        do_pwritev+0x241/0x3a0
[  207.686307][ T8277]        do_syscall_64+0x55/0xb0
[  207.691266][ T8277]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.697691][ T8277] 
[  207.697691][ T8277] other info that might help us debug this:
[  207.697691][ T8277] 
[  207.707920][ T8277] Chain exists of:
[  207.707920][ T8277]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type] --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3
[  207.707920][ T8277] 
[  207.729402][ T8277]  Possible unsafe locking scenario:
[  207.729402][ T8277] 
[  207.736856][ T8277]        CPU0                    CPU1
[  207.742220][ T8277]        ----                    ----
[  207.747608][ T8277]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3);
[  207.754904][ T8277]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2);
[  207.764716][ T8277]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3);
[  207.774535][ T8277]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]);
[  207.781649][ T8277] 
[  207.781649][ T8277]  *** DEADLOCK ***
[  207.781649][ T8277] 
[  207.789804][ T8277] 3 locks held by syz.4.694/8277:
[  207.794828][ T8277]  #0: ffff888023e20418 (sb_writers#13){.+.+}-{0:0}, at: do_pwritev+0x22a/0x3a0
[  207.803916][ T8277]  #1: ffff888075a75118 (&sb->s_type->i_mutex_key#20){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x440/0x1e80
[  207.815268][ T8277]  #2: ffff88805dad9818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  207.828942][ T8277] 
[  207.828942][ T8277] stack backtrace:
[  207.834916][ T8277] CPU: 1 PID: 8277 Comm: syz.4.694 Not tainted syzkaller #0
[  207.842212][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  207.852274][ T8277] Call Trace:
[  207.855564][ T8277]  <TASK>
[  207.858597][ T8277]  dump_stack_lvl+0x18c/0x250
[  207.863292][ T8277]  ? load_image+0x420/0x420
[  207.867812][ T8277]  ? show_regs_print_info+0x20/0x20
[  207.873022][ T8277]  ? print_circular_bug+0x12b/0x1a0
[  207.878231][ T8277]  check_noncircular+0x2fc/0x400
[  207.883198][ T8277]  ? print_deadlock_bug+0x5d0/0x5d0
[  207.888424][ T8277]  ? lockdep_lock+0xf5/0x230
[  207.893026][ T8277]  ? _find_first_zero_bit+0xd3/0x100
[  207.898603][ T8277]  __lock_acquire+0x2df1/0x7d40
[  207.903565][ T8277]  ? __lock_acquire+0x7d40/0x7d40
[  207.908604][ T8277]  ? verify_lock_unused+0x140/0x140
[  207.913813][ T8277]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  207.919475][ T8277]  ? do_raw_spin_lock+0x11f/0x2c0
[  207.924556][ T8277]  ? mutex_unlock+0x10/0x10
[  207.929073][ T8277]  lock_acquire+0x19e/0x420
[  207.933586][ T8277]  ? ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  207.939583][ T8277]  ? ocfs2_get_system_file_inode+0x202/0x850
[  207.945573][ T8277]  ? __might_sleep+0xe0/0xe0
[  207.950172][ T8277]  ? read_lock_is_recursive+0x20/0x20
[  207.955552][ T8277]  ? ocfs2_fast_symlink_read_folio+0x550/0x550
[  207.961721][ T8277]  down_write+0x97/0x200
[  207.966078][ T8277]  ? ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  207.972092][ T8277]  ? down_read_killable+0x340/0x340
[  207.977316][ T8277]  ? print_unlock_imbalance_bug+0x160/0x160
[  207.983294][ T8277]  ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  207.989133][ T8277]  ? ocfs2_add_inode_to_orphan+0x7b0/0x7b0
[  207.994956][ T8277]  ? __lock_acquire+0x7d40/0x7d40
[  208.000021][ T8277]  ? ocfs2_mark_extent_written+0x3d9/0x580
[  208.005844][ T8277]  ? sb_end_intwrite+0xe9/0x1c0
[  208.010703][ T8277]  ? ocfs2_commit_trans+0x134/0x250
[  208.015911][ T8277]  ? sb_end_intwrite+0x1c0/0x1c0
[  208.020863][ T8277]  ? up_write+0x1c3/0x410
[  208.025202][ T8277]  ocfs2_dio_end_io+0x1040/0x13c0
[  208.030242][ T8277]  ? verify_lock_unused+0x140/0x140
[  208.035450][ T8277]  ? ocfs2_dio_wr_get_block+0x1820/0x1820
[  208.041186][ T8277]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  208.047094][ T8277]  ? ocfs2_initialize_journal_triggers+0x540/0x540
[  208.053610][ T8277]  ? debug_check_no_obj_freed+0x51f/0x540
[  208.059357][ T8277]  ? mark_lock+0x94/0x320
[  208.063713][ T8277]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  208.069700][ T8277]  ? lock_chain_count+0x20/0x20
[  208.074588][ T8277]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  208.080525][ T8277]  ? lockdep_hardirqs_on+0x98/0x150
[  208.085746][ T8277]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  208.091650][ T8277]  ? ocfs2_dio_wr_get_block+0x1820/0x1820
[  208.097393][ T8277]  dio_complete+0x254/0x710
[  208.101921][ T8277]  __blockdev_direct_IO+0x2ea8/0x3500
[  208.107307][ T8277]  ? lock_chain_count+0x20/0x20
[  208.112200][ T8277]  ? show_vfsstat+0x3c0/0x3c0
[  208.116888][ T8277]  ? ocfs2_lock_get_block+0x60/0x60
[  208.122188][ T8277]  ? filemap_write_and_wait_range+0x1a5/0x230
[  208.128268][ T8277]  ? ocfs2_lock_get_block+0x60/0x60
[  208.133479][ T8277]  ocfs2_direct_IO+0x235/0x2a0
[  208.138257][ T8277]  generic_file_direct_write+0x1d4/0x3e0
[  208.143898][ T8277]  __generic_file_write_iter+0x11b/0x230
[  208.149536][ T8277]  ? ocfs2_file_write_iter+0x154a/0x1e80
[  208.155181][ T8277]  ocfs2_file_write_iter+0x167a/0x1e80
[  208.160657][ T8277]  ? __lock_acquire+0x7d40/0x7d40
[  208.165704][ T8277]  ? ocfs2_file_read_iter+0xa90/0xa90
[  208.171090][ T8277]  ? preempt_schedule_common+0x82/0xc0
[  208.176560][ T8277]  ? preempt_schedule+0xc0/0xd0
[  208.181416][ T8277]  ? verify_lock_unused+0x140/0x140
[  208.186625][ T8277]  ? aa_path_link+0xf70/0xf70
[  208.191336][ T8277]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  208.197245][ T8277]  ? _raw_spin_unlock+0x40/0x40
[  208.202108][ T8277]  ? end_current_label_crit_section+0x149/0x170
[  208.208384][ T8277]  ? common_file_perm+0x198/0x1f0
[  208.213426][ T8277]  do_iter_write+0x738/0xc30
[  208.218035][ T8277]  ? vfs_iter_write+0xa0/0xa0
[  208.222723][ T8277]  ? rcu_read_lock_any_held+0xb4/0x140
[  208.228194][ T8277]  do_pwritev+0x241/0x3a0
[  208.232537][ T8277]  ? do_preadv+0x390/0x390
[  208.236995][ T8277]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  208.242985][ T8277]  ? lock_chain_count+0x20/0x20
[  208.247850][ T8277]  ? lockdep_hardirqs_on+0x98/0x150
[  208.253058][ T8277]  ? __x64_sys_pwritev2+0xbe/0x100
[  208.258182][ T8277]  do_syscall_64+0x55/0xb0
[  208.262606][ T8277]  ? clear_bhb_loop+0x40/0x90
[  208.267289][ T8277]  ? clear_bhb_loop+0x40/0x90
[  208.271976][ T8277]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  208.277881][ T8277] RIP: 0033:0x7fac4c39ce59
[  208.282306][ T8277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  208.301928][ T8277] RSP: 002b:00007fac4d303028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  208.310363][ T8277] RAX: ffffffffffffffda RBX: 00007fac4c615fa0 RCX: 00007fac4c39ce59
[  208.318432][ T8277] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004
[  208.326415][ T8277] RBP: 00007fac4c432e6f R08: 0000000000000000 R09: 0000000000000003
[  208.334394][ T8277] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000
[  208.342377][ T8277] R13: 00007fac4c616038 R14: 00007fac4c615fa0 R15: 00007fffc7cdbbb8
[  208.350453][ T8277]  </TASK>
[  208.430445][ T8295] loop1: detected capacity change from 0 to 1024
[  208.466694][ T8283] loop3: detected capacity change from 0 to 32768
[  208.487926][ T8283] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  208.503531][ T8283] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  208.520002][ T5968] ocfs2: Unmounting device (7,4) on (node local)
[  208.520113][ T8283] JBD2: Ignoring recovery information on journal
[  208.614840][ T8283] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  208.749292][ T5776] ocfs2: Unmounting device (7,3) on (node local)