last executing test programs:

3.124476487s ago: executing program 2 (id=4302):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x31, 0x1, 0x1, "d569e861dd2f1aeb7ee8589325f457a0c04b14100000000096ba216b1e8ac19e", 0x32344d59})

2.963895s ago: executing program 2 (id=4307):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006)

2.514320326s ago: executing program 2 (id=4316):
r0 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x8100)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0xe7, 0x2}})

2.303974443s ago: executing program 2 (id=4320):
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x6, 0x8001)
writev(r0, &(0x7f0000000680)=[{&(0x7f0000000300)="cd", 0x1}, {0x0}], 0x2)

2.160027394s ago: executing program 2 (id=4323):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x2, 0x62a6, &(0x7f0000009900)="$eJzs3c1vHGcdB/Df7JtfStOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFBQogjJ/6AHrhy4w8gUoIE6qmD1n4eZzxde+2k3ln7+XwkZ+Y3z4z3mXx3vLueGT8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMQPf/Dj81VEXP1VWnAy4nPRj+hFLI3rlYhYWjmZ1x9ExPOx2RzPRcRwIaLKjc9EvBYRH52IePDw7up40YV99uP7f/nnH37y1I/+8efh2f/99Xb/9d3Wu3Pnt//9273H318AAAAoUV3XdZU+5p9Kn+97XXcKAJiJ/PpfJ3m5eu7q9Tnrj1qtVquPYN1UT3avWUTEenOb8XsGp+MB4IhZj4+77gIdkn/RBhHxVNedAOZa1XUHOBQPHt5drVK+VfP1YGWrPV8LsiP/9Wr7/o7dptO0rzGZ1fNrI/rx7C79WZpRH+ZJzr/Xzv/qVvsorXfY+c/KbvmPtm59Kk7Ov9/Ov+X45N+bmH+pcv6DA+Xflz8AAAAAAMyx/Pv/kx2f/1148l3Zl73O/67MqA8AAAAAAAAA8Fl70vH/tlXG/wMAAIB5Nf6sPva7E4+WNa/1H8XO5VeqiKdb6wOFSTfLLHfdDwAAAAAAAAAAAAAoyWDrGt4rVcQwIp5eXq7revzV1K4P6km3P+pK338oWdc/5AEAYMtHJ1r38lcRixFxJf2tv+Hy8nJdLy4t18v10kJ+PztaWKyXGp9r83S8bGG0jzfEg1E9/maLje2apn1entbe/n7jxxrV/X10bDY6DBwAImLr1eiBV6Rjpq6fia7f5XA0OP6PH8c/+9H18xQAAAA4fHVd11X6c96n0jn/XtedAgBmIr/+t88LqNVqtVqtPn51Uz3ZvWYREevNbcbvGQzHDwBHzHp83HUX6JD8izaIiOe77gQw16quO8ChePDw7mqV8q2arwdpfPd8LciO/Nerze3y9pOm07SvMZnV82sj+vHsLv15bkZ9mCc5/147/6tb7aO03mHnPyu75T/ez5Md9KdrOf9+O/+W45N/b2L+pcr5Dw6Uf1/+AAAAAAAwx/Lv/0/O1fnf0ePuzlR7nf9dObRHBQAAAAAAAIDD9eDh3dV832s+//+FCeu5//N4yvlX8i9Szr/Xyv+rrfX6jfn7bz3K/z8P767+8fa/P5+n+81/Ic9U6ZlVpWdElR6pGqTpk+zdp20M+6PxIw2rXn+Qrvmph+/E9bgRa3Fux7q99P/xqP38jvZxT4eb7XV/q/3CjvbBdnve/uKO9mG60qleyu1nYjV+Hjfi7c32cdvClP1fnNJeT2nP+fcd/0XK+Q8aX+P8l1N71ZqO3f+w96njvjmd9DhvXv/ib84d/u5MtRH97X1rGu/fix30Z/P/5KlR/PLW2s0zd67dvn3zfKTJjqUXIk0+Yzn/Yfra/vn/0lZ7/rnfPF7vfzg6cP7zYiMGu+b/UmN+vL8vz7hvXcj5j9JXzv/t1D75+D9A/r0/zWxf9mOv4/+VDvoDAAAAAAAAAAAAAAAAe6nrevMW0Tcj4lK6/6erezMBgNnKr/91kpfPqu7P+PHU6iNeV3PWn5nWn9Tz1R+1+ijWTfVkbzSLiPh7c5vxe4ZfT/pmAMA8+yQi/tV1J+iM/AuW/97feHq6684AM3Xr/Q9+eu3GjbWbt7ruCQAAAAAAAADwuPL4nyuN8Z9P13V9r7XejvFf34qVJx3/dZBntgcY3WWg6v7B92kvG71Rv9cYbvyF2G387+H23F7jfw+mPN5wSvtoSvvClPbFKe0Tb/RoyPm/0Bjv/HREnGoNv/7Y47/Omb3Gf22PeV+CnP+LjefzOP+vtNZr5l///ijn39uR/9nb7/3i7K33P3j1+nvX3l17d+1nF8+fP3fx0qXLly+ffef6jbVzW/922OPDlfPPY1+7DrQsOf+cufzLkvP/UqrlX5ac/5dTLf+y5Pzz+z35lyXnnz/7yL8sOf+XUy3/suT8v5Zq+Zcl5/9KquVflpz/11Mt/7Lk/F9NtfzLkvM/k2r5lyXnfzbV+8x/6bD7xWzk/PMZLsd/WXL++coG+Zcl538h1fIvS87/YqrlX5ac/2upln9Zcv7fSLX8y5Lzv5Rq+Zcl5//NVMu/LDn/y6mWf1ly/t9KtfzLkvP/dqrlX5ac/+upln9Zcv7fSbX8y5Lz/26q5V+WnP/3Ui3/suT830i1/Mvy6O//mzFjxkye6fonEwAAAAAAAAAAAADQNovLibveRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCnv3FiPXXd8B/MzevHEgMRBSJzVh4xhjnE12fYkvtC4mXBtuJSEUesF2vWuz4BteuwQa1Y4CJRJGRRVtw0NbQKjNS4VV8UArQHlArSpVgvaBviAqVB6iKqCAVKmtgK1mzv//35nZ2Zld73h95pzPR4Kfd+bMnP858z9n5reb7xwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmt39htlP1bIsq9Vq+Q2bsuxF9XrTxKbGLa+9seMDAAAA1u7njf9/4dZ0w+EVPKhpmX+669tfXVhYWMjeN/yno59bWEh3TGTZ6IYsa9wXXf3B+2vNywRPZuO1oaafh3qsfrjH/SM97h/tcf9Yj/s39Lh/vMf9S3bAEjdltfRk2xr/3JTv0uy2bLRx37YOj3qytmGovu/SY7Na4zELoyeyuexUNptNtyyfL1trLP/1u+vremsW1zXUtK4t9Rnyk8ePxzHUwj7e1rKuxeeMfvT6bOKnP3n8+F9feP6OTrXnbmh5vnycO7bWx/mJcEs+1lq2Ie2TOM6hpnFu6fCaDLeMs9Z4XP3f7eN8YYXjHF4c5rpqf83Hs6HGv7/T2E8jtazDftoSbvufe7Isu7w47PZllqwrG8o2ttwytPj6jOczsv4c9an00myk+zxdqLXM07vTv5efp/U6s611nrYfE/H1vzs8bmSZMTS/TD96Yqzpdf/ZwrXM06i+1csdK+1zsN/HSlHmYJwX32ls9FMd5+C2sP2Pb19+DnacOx3mYNrupjm4tdccHBobbow5vQi1xmMWz5W7WpYfbqyp1qjPbe8+B6cunD43Nf+xj983d/rYydmTs2f27No1vWffvgMHDkydmDs1O53//zXu7eLbmA2lY2Br2HfxGHh127LNU3Xhi2NLzr/XehyOdzkON7Ut2+/jcKR942rrc0AundP5sfGe+k4fvzKULXOMNV6fnWs/DtN2Nx2HI03HYcf3lA7H4cgKjsP6Mud2ruwzy0jT/zqNYfn3grXNwU1Nc7D980j7HOz355GizMHxMC++t3P594ItYbxPTa7288jwkjmYNjece+q3pM/74wcapdO8vLN+x81j2cX52fP3P3bswoXzu7JQ1sXLmuZK+3zd2LRN2ZL5OrTq+Xp47q6n7uxw+6awr8bvq//f+LKvVX2Zvfd3f60a726d92fLrbuzUPos7M+FDeu0Pzu9m9f351iWff5bTzz8jcc//4Zl92e93/zE1No/i6e+tOn8O7rM+Tf2/b/I15ee6snh0ZH8+B1Oe2e05Xzc+lKNNM5dtca6X5jqcT4eyY7HMY3egPPxbV3Ox5vblu33+Xi0fePi+bjW67cda9P+eo6HeXJquvv5uL7M5t2rnZMjXc/H94RaC/v/NaFTSH1R09xZbt6mdY2MjIbtGolraJ2ne1qWHw29WX1dz+xe2eeG9nm64578uYbT1i1ar3k60bZsv+dp+t3XcvO01uu3b9em/fUcD/Pitj3d52l9mWf3rv3ceVP8Z9O5c6zXHBwdHquPeTRNwsb5Plu4Kc7B+7Pj2dnsVDbTuHesMZ9qjXVNPrCyOTgW/rfe58rNXebgjrZl+z0H0/vYcnOvNrJ04/ug/fUcD/Pi6Qe6z8H6Mm/c39/PrjvCLWmZps+u7b9fW+53Xne27abecyW2Jav/nVd9nN/a3/13s/VlTh1YbZ/ZfT/dG265ucN+aj9+lzumZrLV7qdrP6bq43z+wPL7qT6e+jKfO7jC+XQ4y7JLH3mw8fve8PeVv7v43a+2/N2l0990Ln3kwR+/+MQ/rmb8AAy+X+RlY/5e1/SXqZX8/R8AAAAYCLHvHwo10f8DAABAacS+P/5X4Yn+HwAAAEoj9v0joSYV6f83v/H5uV9cylIyfyGI96fd8FC+XMy4ToefJxYW1W9/8Muz//0Pl1a27qEsy3720B90XH7zQ3FcuYkwzqtvar19ia/et6J1H330Ulpvc379C+H54/asdBp0iuBOZ1n29Vs/01jPxPuvNOqzDx1t1IcvP/VkfZkXDuY/x8c/97J8+b8I4d/DJ461PP65sB9+GOr02zrvj/i4r1x5zZb9711cX3xcbestjc1++gP588bvyfnsk/nycT8vN/5vfPqZr9SXf+xVncd/aajz+J8Jz/vlUP/3Ffnyza9B/ef4uE+G8cf1xcfd/6Vvdhz/1U/ly597c77c0VDj+neEn7e9+fm55v31WO1Yy3Zlb8mXi+uf/u4fN+6Pzxefv33840eutOyP9vnx7L/lzzPVtny8Pa4n+vu29defp3l+xvU/80dHW/Zzr/Vfffi5V9Sft33997Ytd+4jOxvrX3y+1m9s+stPfqbj+uJ4Dv/tuZbtOfzucByH9T/9gTAfw/3/dzV/vvZvVzj67tbzT1z+C5suNW3P4jeSvvWn+fqvvu5ko24Yv2njzS968S2XX1nfd1n2nQ358/Va/8m/Otsy/i/enu+PeH9cY9yeXuL6z3908szZ+YtzM2mvPn5r47tz3p6PJ4731nBubf/5yNkLH5w9PzE9MZ1lE+X9Cr1r9qVQf5yXy92XXlhyBt35aHg97/zzr2/c/q+fjrf/+3vy26+8LX/fenVY7rPh9k3h9Vvd+pd6+u7bG8d37dkwwoWl3xe8Flu2/deBFS0Ytr/9c0Gc7+de/sHGfqjf13jfiMf1Gsf//Zn8eb4W9utC+Gbmrbcvrq95+fjdCFceyY/3Ne+/cJqLr+vfhNf7HT/Mnz+OK27v98PnmG9ubj3fxfnxtUtD7c/f+BaPy+F8kl3O749Lxf195YXbOw4vfg9JdvmOxs9/kp7njlVt5nLmPzY/dWruzMXHpi7Mzl+Ymv/Yx4+cPnvxzIUjje/yPPKhXo9fPD9tbJyfZmb37c0aZ6uzebnObvT4zz16fGb/9PaZ2RPHLp648Oi52fMnj8/PH5+dmd9+7MSJ2Y/2evzczKFduw/u2b978uTczKEDBw/uOTg5d+ZsfRj5oHrYN/3hyTPnjzQeMn9o78FdDzywd3ry9NmZ2UP7p6cnL/Z6fOO9abL+6N+fPD976tiFudOzk/NzH589tOvgvn27e34b4OlzJ+Ynps5fPDN1cX72/FS+LRMXGjfX3/t6PZ5ymv+P/PNsu1r+RXzZu+7dl76fte7LTyz7VPkibV8g+nz4Lpp/fsm5Ayv5Ofb9o6EmFen/AQAAoApi3z8WaqL/BwAAgNKIff+GUBP9PwAAAJRG7PvHQ00q0v+XLv+/+dKK1i//L//fvL/k/8uQ/19cvmf+/5Gi5f/z84X8f3+sNX8v/x/I/8v/y/8PTP5/Ibwhyf9TREXL/8e+/6Ysq2T/DwAAAFUQ+/6NoSb6fwAAACiN2PffHGqi/wcAAIDSiH3/i0JNKtL/y//L/8v/y//L/3dev/z/YJL/707+vwf5/6msWvn/y/0cv+v/y/+zVNHy/7Hvf3GoSUX6fwAAAKiC2PffEmqi/wcAAIDSiH3/raEm+n8AAAAojdj3bwo1qUj/L/8v/y//L/8v/995/fL/g0n+vzv5/x7k/13/X/5f/p++Klr+P/b9Lwk1qUj/DwAAAFUQ+/6Xhpro/wEAAKB4Rq7tYbHvf1moyZL+/xpXAAAAANxwse+/LWsLglfk7//y//L/xc//b0j3yf/L/2eFzP8PZ/L/xSH/3538fw/y//L/8v/y//RV0fL/jb4/G89eHmpSkf4fAAAAqiD2/beHmuj/AQAAoDRi3/9LoSb6fwAAACiN2PdvDjWpSP8v/y//f6Pz/6NtY3f9/8XHyf/nip//d/3/IpH/707+vwf5f/l/+X/5f/qqaPn/2PffEWpSkf4fAAAAqiD2/XeGmuj/AQAAoDRi3//LoSb6fwAAACiN2PdvCTWpSP8v/1/w/H9MjpY4/9/7+v/y//L/8v/y/ysn/9+d/H8P8v/y//L/8v/0VdHy/7Hvf0WoSUX6fwAAAKiC2PffFWqi/wcAAIDSiH3/K0NN9P8AAABQGrHvnwg1qUj/L/9f8Px/noMfK/P1/+X/5f/l/+X/+0n+vzv5/x7Cae5HWZbJ/1c4/x9bAvl/+X/WrGj5/9j33x1qUpH+HwAAAKog9v1bQ030/wAAAFAase+/J9RE/w8AAAClEfv+baEmFen/5f8HIv+fyf/L/8v/y//L/6+M/H938v89uP6//L/r/8v/01dFy//Hvv9VoSYV6f8BAACgCmLfvz3URP8PAAAApRH7/leHmuj/AQAAoDRi378j1KQi/b/8v/y//L/8v/x/5/XL/w8m+f/u5P97kP+X/5f/l/+nr4qW/499/2tCTSrS/wMAAEAVxL5/Z6iJ/h8AAABKI/b994aa6P8BAACgNGLfPxlqUpH+X/5f/l/+X/5f/r/z+uX/B5P8f3fy/z3I/8v/y//L/9NXRcv/x77/vlCTivT/AAAAUAWx778/1ET/DwAAAKUR+/6pUBP9PwAAAJRG7PunQ00q0v/L/8v/y//L/68q///KxeeV/8/J/xeL/H938v89yP/L/9/w/P+o/D+lUrT8f+z7d4WapMZv7Bq2EgAAACiS2PfvDjWpyN//AQAAoApi378n1ET/DwAAAKUR+/69oSYV6f/l/+X/5f/l/13/v/P65f8Hk/x/d/3P/8dNlP+X/5f/d/1/+X+WKlr+P/b9D4SaVKT/BwAAgCqIff++UBP9PwAAAJRG7Pv3h5ro/wEAAKA0Yt9/INSkIv2//L/8v/y//L/8f+f1y/8PJvn/7lz/v4fi5f9f1/zw9cz/19cl/y//L//P6j3yh80/FS3/H/v+g6EmFen/AQAAoApi3//aUBP9PwAAAJRG7Pt/JdSke/+/4fqOCgAAAOin2Pf/aqhJRf7+L/8v/y//L/8v/995/fL/g0n+vzv5/x6Kl/9v4fr/xR6//L/8P0sVLf8f+/5DoSYV6f8BAACgCmLf/2uhJvp/AAAAKI3Y978u1ET/DwAAAKUR+/7DoQad4tylJP8v/z+Y+f9x+X/5/9Ll/8fi88r/r4n8f3fy/z3I/8v/y//L/9NXRcv/x77/9aEm/v4PAAAApRH7/gdDTfT/AAAAUBqx739DqIn+HwAAAEoj9v1vDDWpSP8v/y//P5j5f9f/z+T/S5f/d/3//pD/707+vwf5f/l/+X/5f/qqaPn/2Pe/KdSkIv0/AAAAVEHs+98caqL/BwAAgNKIff9bQk30/wAAAFAase9/a6hJRfp/+X/5/xuZ/89dlv+X/2+Q/5f/7wf5/+7k/3uQ/5f/l/+X/6evipb/j33/r4eaVKT/BwAAgCqIff9DoSb6fwAAACiN2Pe/LdRE/w8AAAClEfv+t4eaVKT/l/+X/3f9f/l/+f/O65f/H0zy/90NWP7/57eE2+X/c/L/xR7/avP/I20/X5f8/w+Wy/8vbGh/vPw/10PR8v+x739HqElF+n8AAACogtj3vzPURP8PAAAApRH7/neFmjT1/339D+8AAACAdRf7/t8INanI3//l/+vjWEwvy//L/zdukP+X/5f/H1jy/90NWP7f9f/byP8Xe/yu/y//z1JFy//Hvv/doSYV6f8BAACgCmLf/3Coif4fAAAASiP2/Y+Emuj/AQAAoDRi3/+eUJOK9P/y/67/L/8v/y//33n98v+DSf6/O/n/HuT/5f+Llv//T/l/BlvR8v+x73801KQi/T8AAABUQez73xtqov8HAACA0oh9/2+Gmuj/AQAAoDRi3/++UJOK9P/y/4OS/58Y0Pz/E/L/1zH/f9ct+XLy//L/LJL/707+vwf5f/n/ouX/Xf+fAVe0/H/s+98farLy/n98xUsCAAAA19HIsvfEvv+3Qk0q8vd/AAAAqILY9/92qIn+HwAAAEoj9v2/E2pSkf5f/n9Q8v+u/5/J/7v+f9v2yP/L/3eyfvn/eOaR/5f/L1b+f9OqNrjVjc7Pr9WNHn918//5O6P8P50ULf8f+/7fDTWpSP8PAAAAVRD7/g+Emuj/AQAAYCB0+m+y28W+/0ioif4fAAAASiP2/UdDTSrS/8v/y//L/xc0//9nW//le99+59Fd8v/y//L/q7Ku1/+vH/yu/y//X7D8/1rc6Pz8eo2/tsylweT/Xf+f/ita/j/2/cdCTSrS/wMAAEAVxL7/90JN9P8AAABQGrHvPx5qov8HAACA0oh9/0yoSUX6f/l/+X/5/4Lm/wf4+v9xf8j/t+pb/j+edOX/O1rX/P97F3Pi8v+rzf+PdbxV/l/+f5DHL/8v/89SRcv/x75/NtSkIv0/AAAAVEHo+4dO5HXxDv0/AAAAlEbs+0+Gmuj/AQAAoDRi3//BUJOK9P/y//L/8v/y/67/33n93fL/tRHX/y8q+f/uipP/70z+X/5/kMcv/y//T5YtfjLPFS3/H/v+uVCTivT/AAAAUAWx7/9QqIn+HwAAAEoj9v0fDjXR/wMAAEBpxL7/VKhJRfp/+X/5f/l/+X/5//9n706+LK3rO47fgoauPmSRXRbZ5Jws8yewCOtknyyyySI5JyfnBJKQhMw0GZxFUXFWFGcFBxBEVJwncEJxBhUV5xEnRD3toer7/XYNT91bVX1v3+f5/V6vBd90hep77dNCf7r67TP8+qN9/r/+fy79/3z6/wX0//p//b/+n6UaW/+fu//v4pZO9j8AAAD0IHf/5XGL/Q8AAADNyN1/Rdxi/wMAAEAzcvf/fdzSyf7X/+v/m+3//1j/f9Dr6//1/y3T/8+n/19A/6//1//r/1mqsfX/ufv/IW7pZP8DAABAD3L3/2PcYv8DAABAM3L3Xxm32P8AAADQjNz9/xS3dLL/9/T/G7M++//MePX/LfX/nv9/4Ovr/8+h/79Q/z9257f/v+axf/Lp//X/+v+g/z9U/3/yoM/X/9OisfX/ufv/OW7pZP8DAABAD3L3/0vcYv8DAADA9O36kzebs6viFvsfAAAAmpG7/1/jlk72//Ke/39q6+MT7f+L/l//v/UB/b/+/6D+/8TZb+v/x8nz/+frqf+/8r5LLn/49t+/4yivr//X/3v+v/6f5Rpb/5+7/9/ilk72PwAAAPQgd/+/xy32PwAAADQjd/9/xC32PwAAADQjd/9/xi2d7P/l9f+Tfv5/0f/r/7c+oP/X/x/U//+Z5/+Pnf5/vp76/+O8vv5f/6//1/+zXOvu//M7zm/n7v+vuKWT/Q8AAAA9yN3/33GL/Q8AAADNyN1/ddxi/wMAAEAzcvefjls62f/6/9X3/7/R/+v/4+r/9f/6/9XT/8+n/19A/6//1//r/1mqdff/e7+du/+auKWT/Q8AAAA9yN3/P3GL/Q8AAADNyN3/v3GL/Q8AAADNyN3/f3FLJ/tf/+/5//p//b/+f/j19f/TpP+fT/+/gP7/XPv5i/T/E+z/4xdS+n9W4Yj9/6Nz/rG9lP4/d///xy2d7H8AAADoQe7+x8Ut9j8AAAA0I3f/4+MW+x8AAACakbv/CXFLJ/tf/6//1//r/4/d/+//qbdF/z9M/39+6P/nG03/v3Fi8MP6/8n3/57/P8X+P+j/WYWxPf8/d/8T45ZO9j8AAAD0IHf/k+KWOfv/yL+ZDwAAAKxV7v4nxy2+/g8AAACTl9VZ7v6nxC2d7H/9v/5f/6//9/z/4def1//fseP96f/HRf8/32j6/wPo//X/U37/+v+z/X/+2kz/z9j6/9z9T41bOtn/AAAA0IPc/dfGLfY/AAAANCN3/9PiFvsfAAAAmpG7/+lxSyf7f7j/P/v/1/8fjv5/9/vX/w///FhW/5/fo/5/bv9/mef/90n/P9/57/9P6v93f//6/xVa9/tvvP8/tejzPf+fIWPr/3P3Xxe3dLL/AQAAoAe5+58Rt9j/AAAA0Izc/c+MW+x/AAAAaEbu/mfFLZ3s/zU///+aiw96X/r/Lfp//b/n/4/z+f+z897/n9D/H5L+fz7P/19A/6//1/8v5fn/+n/S2Pr/3P3Xxy2d7H8AAADowfWPzLZ2/7NnM/sfAAAApmjnnx3Y+wdKQ+7+58Qt9j8AAAA0I3f/c+OWTvb/mvv/VT3//6JFr63/1//v/PHS/+v/h15/XP2/5/8flv5/Pv3/Avr/VfTzJxrr/2846PPH0P9frf9nZHb1/3ed/fi6+v/c/c+LWzrZ/wAAANCD3P3Pj1vsfwAAAGhG7v4XxC32PwAAADQjd/8L45ZO9v/K+/9TB7/2Cvv/hfT/+v+dP176f/3/0Ovr/6dJ/z+f/n8B/b/n/3v+v/6fpdrV/++wrv4/d/+L4pZO9j8AAAD0IHf/i+MW+x8AAACakbv/hrjF/gcAAIBm5O5/SdzSyf5v9Pn/C+n/9f87f7z0//r/odfX/0+T/n8+/f8C+n/9v/5/cf+/91/UQf/PkLH1/7n7Xxq3dLL/AQAAoAe5+2+MW+x/AAAAaEbu/pfFLfY/AAAANCN3/8vjlk72v/5/tf1/flz/r/+fHaX/j0/Q/2/T/+v/j2Jq/f/e//4cu1/fGPo30X4H9P/3/M3pP939Ef2//l//r//3/H+WYBT9/5mzv7rM3f+KuKWT/Q8AAAA9yN3/yrjF/gcAAIBm5O5/Vdxi/wMAAEAzcve/Om454v7/3aW+q/NH/+/5//r/Efb/Qf+/Tf+v/z+KqfX/e3n+v/5f/z/d96//1/+z3yj6/x3fzt3/mrjF1/8BAACgGbn7Xxu32P8AAADQjNz9r4tb7H8AAABoRu7+m+KWTva//l//r//X/+v/h1//uP3/5myY/v/80P/Pp/9fQP+v/9f/6/9ZqrH1/7n7b45bOtn/AAAA0IPc/a+PW+x/AAAAaEbu/jfELfY/AAAATEmmY4Ny978xbulk/+v/9f/6f/2//n/49T3/f5om2v/XPwan2v9fOKX+/5Y5b2Co/z9zUv+v/9f/6/85prH1/7n73xS3dLL/AQAAoAe5+2+JW+x/AAAAaEbu/lvjFvsfAAAAmpG7/81xSyf7X/+v/19m/5/0/8M/P/T/+n/9/+pNtP8vU+3/Pf9f/z/T/+v/9f8MGFv/n7v/trilk/0PAAAAPcjdf3vcYv8DAABAM3L3vyVusf8BAACgGbn774hbOtn/+n/9v+f/6//1/8Ovr/+fptX1/7P19f8PXXDU7+ZA+v8F9P/6f/2//p+lGlv/n7v/rXFLJ/sfAAAAepC7/864xf4HAACAZuTuf1vcYv8DAABAM3L3vz1u6WT/6//1/9Ps/6/bHHr/+n/9/0z/3z3P/59P/7+A/l//r//X/7NUY+v/c/e/I27pZP8DAABAD3L33xW32P8AAADQjNz974xb7H8AAABoRu7+d8Utnex//b/+f3f/P5tNo//3/P+Z/r+F/n9zpv9fOv3/fIfr/y/T/+v/2+r/L5g11P+fOvDz9f+M0dj6/9z9745bOtn/AAAA0IPc/e+JW+x/AAAAaMD2n53J3f/euMX+BwAAgDE7cZS/OXf/++KWTvb/9Pv/k3s+Uf8/m83uv6r55//r/2f6/xb6//pR1f8vj/5/Ps//X0D/32b/7/n/+n/WZmz9f+7+98ctnex/AAAA6EHu/g/ELfY/AAAANCN3/wfjFvsfAAAAmpG7/0NxSyf7f/r9/95P1P/Pzun5//r/rQ/o//X/+v/J0v/Pp/9fQP+/sJ/fOODXPTP9v/5f/8+AsfX/ufs/HLd0sv8BAACgB7n7745b7H8AAABoRu7+e+IW+x8AAACakbv/I3FLJ/tf/6//1/9Ps//f1P/r//X/g8bS/1966Z/cq//X/7fY/8+j/9f/6//Za2z9f+7+j8Ytnex/AAAA6EHu/o/FLfY/AAAANCN3/8fjFvsfAAAAmpG7/xNxSyf7f3//f9Fsu1DdNtT/R6Om/99B/7/7/ev/h39+eP6//l//v3pj6f89//9471//r/+f8vs/Uv//B/s/X/9Pi8bW/+fuvzdu6WT/AwAAQA9y938ybrH/AQAAoBm5+z8Vt9j/AAAA0Izc/ffFLZ3sf8//1//r//X/+v/h19f/T5P+fz79/wL6f/2/5/9f8VcX6v9ZnrH1/7n7Px23bA2/P/ydY/7HBAAAAEYkd/9n4pZOvv4PAAAAPcjd/9m4xf4HAACAZuTu/1zc0sn+1//r//X/+n/9//Dr6/+nSf8/n/5/gX76/82hD667nz9X637/zfT/nv/PEo2t/8/d//m4pZP9DwAAAD3I3f+FuMX+BwAAgGbk7v9i3GL/AwAAQDNy998ft3Sy//X/+v/2+/+/1P/veX39v/6/Zfr//Df6MP3/Av30/4PW3c9P/f3r//X/7De2/j93/wNxSyf7HwAAAHqQu/9LcYv9DwAAAM3I3f/luMX+BwAAgGbk7v9K3NLJ/tf/99X/b8x67P89/1//r//vyXT6/xtPDH3U8//1//r/6b5//b/+n/3G1v/n7n9w40SX+x8AAACm6s//6G8fOOzf++DWXzdnX41b7H8AAABoRu7+r8Ut9j8AAAA0I3f/1+OWTva//r+v/r/P5//r//X/+v+eTKf/H6b/1//r/6f7/vX/+n/2G1v/n7v/obhlx/Ab/B/oAQAAACYjd/834pZOvv4PAAAAPcjd/824Zd/+P3PIP9UOAAAAjE3u/m/FLZ18/V//P/L+f7ai/j/+Pv3/Nv2//n/o9fX/09Ra/39yNqr+/8yG/l//P4f+X/+v/2evsfX/ufvvvG3W5f4HAACARu36HYVvb/11c/aduMX+BwAAgGbk7v9u3GL/AwAAQDNy938vbulk/+v/R97/H+v5/6fq//L8/877/2s3B19f/6//b1lr/b/n/29/XP+/Tf8/7vev/9f/s98R+v+tQbrq/j93//fjlk72PwAAAPQgd/8P4hb7HwAAAJqRu/+HcYv9DwAAAM3I3f+juKWT/a//X0P/f93J2Wyl/f8hnv+v/++j/z/g9dvp/3/vktN3/8Vf33qz/p+zzmf/nz8X9P/6/zX0/zfFzz/9/4jev/5f/89+Y3v+f+7+H8ctnex/AAAA6EHu/ofjFvsfAAAAmpG7/ydxi/0PAAAAzcjd/9O4pZP9r/9v8fn/0+z/88d6Df3/6en1/9kU997/e/6//n8/z/+fT/+/wHT6/61ve/7/uN6//l//z35j6/9z9/8sbulk/wMAAEAPcvf/PG7J/b9x5N+6BwAAAEYmd/8v4hZf/wcAAIBm5O5/JG7pZP/r//X/Y+n/k+f/n/08z//fpv/X/x+F/n8+/f8C+n/9v/5f/89Sja3/z93/y7ilk/0PAAAAPcjd/2jcYv8DAABAM3L3/ypusf8BAACgGbn7fx23dLL/9f/6f/2//l//P/z6+v9p0v/Pp/9/zMUHvwH9v/5f/6//Z6nG1v/n7v9tAAAA//89hVJZ")
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)

1.406428166s ago: executing program 2 (id=4335):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000740), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{}, 0x0, 0x0})

1.278594726s ago: executing program 0 (id=4337):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0)

1.143913077s ago: executing program 1 (id=4339):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0xc, 0x36314247, 0x2, 0x6, 0x6, 0x4, 0xa6e, 0x0, 0x2, 0x1, 0x5}})

1.028623757s ago: executing program 0 (id=4340):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000140)='./file0\x00', 0x810, &(0x7f0000000000)=ANY=[@ANYBLOB='dmask=00000000000000000000007,utf8,iocharset=iso8859-1,allow_utime=00000000000000000002001,fmask=00000000000000000000002,allow_utime=00000000000000000000005,umask=00000000000000000000001,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX, @ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000002a40)="$eJzs3AuYjVX7MPB1r7UexjSxm+QwrHvdDzsNlkOSHJLkkCRJkuSUkDRJkpAYckoakpDjJIkhJIdpTBrn8yHnJHmlSZKccgrru6be9/N/39736/t/b9/f9/3n/l3Xuva6Z+977Xvte8/s53nmuvYPPUfVa1G/djMiEv8W+O0mWQgRI4QYJoQoIIQIhBCV4yvH59yfT0Hyv/ck7M/1SNq1roBdS9z/3I37n7tx/3M37n/uxv3P3bj/uRv3P3fj/jOWm22bXfQGHrl38PX/3Iw///8byS43+ZsN5W7q9Z9I4f7nbtz/3I37n7tx/3M37n/uxv3P3bj/uRv3n7Hc7Fpff+Zxbce1fv8xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMsdzvurtBAi5zb4Vw9O/q+tjTHGGGOMMcYYY38On/daV8AYY4wxxhhjjLH/+0BIoYQWgcgj8ooYkU/EiutEnLhe5BcFRETcIOLFjaKguEkUEoVFEVFUJIhiorgwAoUVJEJRQpQUUXGzKCVuEYmitCgjygonyonyooKoKG4VlcRtorK4XVQRd4iqopqoLmqIO0VNcZeoJe4WtcU9oo6oK+qJ+uJe0UDcJxqK+0Uj8YBoLB4UTcRDoql4WDQTj4jm4lHRQjwmWorHRSvRWrQRbUW7/6P8l0Vf8YroJ/qLZDFADBSvikFisBgihoph4jUxXLwuRog3RIoYKUaJN8Vo8ZYYI94WY8U4MV68IyaIiWKSmCymiKkiVbwrpon3xHTx/si/vaJpYraYIz4Uc8U8MV98JBaIj8VCsUgsFktEuvhEZIilIlN8KpaJz0SWWC5WiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im/hcbBc7xE6xS+wWe8Re8YXYJ74U+8VX4oD4+j+Zf+4f8nuBAAESJGjQkAfyQAzEQCzEQhzEQX7IDxGIQDzEQ0EoCIWgEBSBIpAACVAcigMCAgFBCSgBUYhCKSgFiZAIZaAMOHBQHspDRbgVKkElqAyVoQpUgapQDapBDagBNaEm1IJaUBtqQx2oA/WgHtwL98J90BAaQiNoBI2hMTSBJtAUmkIzaAbNoTm0gBbQElpCK2gFbaANtIN20B7aQwfoAJ2gE3SGztAFukASJEFX6ArdoBt0h+7QA3pAT+gJvaA39IaX4WV4BV6B/lBHDoCBMBAGwSAYAkNhKLwGw+F1eB3egBQYCaPgTXgT3oIxcBbGwjgYD+OhppwIk2AykJwKqZAK02AaTIfpMAM+gA9gFqTBbJgDc2AuzIN58BEsgI/hY1gEi2AJpEM6ZMBSyIRMWAbnIAuWwwpYCatgNayCtbAO1sIG2AgbYDNshq2wFT6Hz2EH7IBdsAv2wB74Ar6AL+FLSIEDAPq3d9whOAyHIRuy4QgcgaNwFI7BMTgOx+EEnIRTcBLOwBk4C+fgPJyHi3ARLsGLCd8131N6fYqQObTUMo/MI2NkjIyVsTJOxsn8Mr+MyIiMl/GyoCwoC8lCsogsIhNkgiwui0uUKEmGsoQsIaMyKkvJUjJRJsoysox00snysrysKCvKSrKSrCxvl1XkHbKqrCY7uhqyhqwpO7la8m5ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUT+ZBsKgfAEHhE5nSmhRwJLeUoaCVbyzayrXwLnpDt5RjoIDvKTvIpOQ7GQhfZ3iXJZ2VXOQm6yeflZHhB9pBToad8SfaSvWUf+bLsKzu4frK/nAED5EA5CwbJwXKIHCrnQl2Z07F68g2ZIkfKUfJNuQTekmPk23KsHCfHy3fkBDlRTpKT5RQ5VabKd+U0+Z6cLt+XM+QHcqacJdPkbDlHfijnynlyvvxILpAfy4VykVwsl8h0+YnMkEtlpvxULpOfySy5XK6QK+UquVqukWvlOrlebpAb5Sa5WW6RW+U2+bncLnfInXKX3C33yL3yC7lPfin3y6/kAfm1PCj/Ig/Jb+Rh+a3Mlt/JI/J7eVT+II/JH+Vx+ZM8IU/KU/K0PCN/lmflOXleXpAX5S/ykrwsr0gvhQIllVJaBSqPyqtiVD4Vq65Tcep6lV8VUBF1g4pXN6qC6iZVSBVWRVRRlaCKqeLKKFRWkQpVCVVSRdXNqpS6RSWq0qqMKqucKqfKqwqqorpVVVK3qcrqdlVF3aGqqmqquqqh7lQ11V2qlrpb1Vb3qDqqrqqn6qt7VQN1n2qo7leN1AOqsXpQNVEPqabqYdVMPaKaq0dVC/WYaqkeV61Ua9VGtVXt1BOqvXpSdVAdVSf1lOqsnlZd1DMqST2ruqrnVDf1vOquXlA91Iuqp3pJ9VK9VR91WV1RXvVT/VWyGqAGqlfVIDVYDVFD1TD1mhquXlcj1BsqRY1Uo9SbarR6S41Rb6uxapwar95RE9RENUlNVlPUVJWq3lXT1HtqunpfzVAfqJlqlkpTs9WQv640/38j/71/kj/i12ffqrapz9V2tUPtVLvUbrVH7VV71T61T+1X+9UBdUAdVAfVIXVIHVaHVbbKVkfUEXVUHVXH1DF1XB1XJ9RJdUGdVmfUz+qsOqfOqQvqorqoLv31NRAatNRKax3oPDqvjtH5dKy+Tsfp63V+XUBH9A06Xt+oC+qbdCFdWBfRRXWCLqaLa6NRW0061CV0SR3VN+tS+hadqEvrMrqsdrqc9rrCv5VfXlfQf1RfO91Ot9ftdQfdQXfSnXRn3Vl30V10kk7SXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52sk/VA/aoepAfrIXqoHqZf08P1cD1Cj9ApOkWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+pUPU1P09P1dD1Dz9Az9UydptP0HD1Hz9Vz9Xw9Xy/QC/RCvVAv1ot1uk7XGTpDZ+pMvUwv01l6uV6uV+qVerVerdfqtXq9Xq836o16s96ss/Q2vU1v19v1Tr1T79a79V69V+/T+/R+vV8f0Af0QX1QH9KH9GF9WGfrbH1EH9FH9VF9TB/Tx/VxfUKf0Kf0KX1Gn9Fn9Vl9Xp/XF/VFfUlf0lf0lZzDvkAGMtCBDvIEeYKYICaIDWKDuCAuyB/kDyJBJIgP4oOCwU1BoaBwUCQoGiQExYLigQkwsAEFYVAiKBlEg5uDUsEtQWJQOigTlA1cUC4oH1QIKga3BpWC24LKwe1BleCOoGpQLage1AjuDGoGdwW1gruD2sE9QZ2gblAvqB/cGzQI7gsaBvcHjYIHgsbBg0GT4KGgafBw0Cx4JGgePBq0CB4LWgaPB62C1kGboG3Q7k9d3/uzhZ90/Ux/k2wGmIHmVTPIDDZDzFAzzLxmhpvXzQjzhkkxI80o86YZbd4yY8zbZqwZZ8abd8wEM9FMMpPNFDPVpJp3zTTznplu3jczzAdmppll0sxsM8d8aOaaeWa++cgsMB+bhWaRWWyWmHTzickwS02m+dQsM5+ZLLPcrDArzSqz2qwxa806s95sMBvNJrPZbDFbzTbzudludpidZpfZbfaYveYLs898afabr8wB87U5aP5iDplvzGHzrck235kj5ntz1PxgjpkfzXHzkzlhTppT5rQ5Y342Z805c95cMBfNL+aSuWyuGJ9zcJ/z8Y4aNebBPBiDMRiLsRiHcZgf82MEIxiP8VgQC2IhLIRFsAgmYAIWx+KYg5CwBJbAKEaxFJbCREzEMlgGHTosj+WxIlbESlgJK2NlrIJVsCpWxepYHe/EO/EuvAvvxrvxHrwH62JdrI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsjs2xBbbAltgSW2ErbINtsB22w/bYHjtgB+yEnbAzdsYu2AWTMAm7Ylfsht2wO3bHHtgDe2JP7IW9sA/2wb7YF/thP0zGZByIA3EQDsIhOASH4TAcjsNxBI7AFEzBUTgKR+NoHINjcCyOw/H4Dk7AiTgJJ+MUnIqpmIrTcBpOx+k4A2fgTJyJaZiGc3AOzsW5OB/n4wJcgAtxIS7GxZiO6ZiBGZiJmbgMl2EWZuEKXIGrcBWuwTW4DtfhBtyAm3ATbsEtuA234XbcjjtxJ+7G3bgX9+I+3If7cT8ewAN4EA/iITyEh/EwZmM2HsEjeBSP4jE8hsfxOJ7AE3gKT+EZPINn8Syex/N4EX/BS3gZr6DHGJvPxtrrbJy93ua3Bew/xkVsUZtgi9ni1thCtvDfxWitTbSlbRlb1jpbzpa3FX4XV7XVbHVbw95pa9q7bK3fxQ3sfbahvd82sg/Y+vbev4sb2wdtE/uYbWoft81sa9vctrUt7GO2pX3ctrKtbRvb1na2T9su9hmbZJ+1Xe1zv4sz7FK7zq63G+xGu89+ac/bC/ao/cFetL/Yfra/HWZfs8Pt63aEfcOm2JG/i8fbd+wEO9FOspPtFDv1d/FMO8um2dl2jv3QzrXzfhen20/sAptpF9pFdrFd8mucU1Om/dQus5/ZLLvcrrAr7Sq72q6xa/9nrSvtZrvFbrV77Rd2u91hd9pddrfd82ucs4/99it7wH5tj9jv7SH7jT1sj9ls+92vcc7+jtkf7XH7kz1hT9pT9rQ9Y3+2Z+25X/efs/fT9rK9Yr0VBCRJkaaA8lBeiqF8FEvXURxdT/mpAEXoBoqnG6kg3USFqDAVoaKUQMWoOBlCskQUUgkqSVG6mUrRLZRIpakMlSVH5ag8VaCKdCtVotuoMt1OVegOqkrVqDrVoDupJt1Ftehuqk33UB2qS/WoPt1LDeg+akj3UyN6gBrTg9SEHqKm9DA1o0eoOT1KLegxakmPUytqTW2oLbWjJ6g9PUkdqCN1oqeoMz1NXegZSqJnqSs9R93oeepOL1APepF60kvUi3pTH3qZ+tIr1I/6UzINoIH0Kg2iwTSEhtIweo2G0+s0gt6gFBpJo+hNGk1v0Rh6m8bSOBpP79AEmkiTaDJNoamUSu/SNHqPptP7NIM+oJk0i9JoNs2hD2kuzaP59BEtoI9pIS2ixbSE0ukTyqCllEmf0jL6jLJoOa2glbSKVtMaWkvraD1toI20iTbTFtpK2+hz2k47aCftot20h/bSF7SPvqT99BUdoK/pIP2FDtE3dJi+pWz6jo7Q93SUfqBj9CMdp5/oBJ2kU3SaztDPdJbO0Xm6QBfpF7pEl+kKeRIhhDJUoQ6DME+YN4wJ84Wx4XVhXHh9mD8sEEbCG8L48MawYHhTWCgsHBYJi4YJYbGweGhCDG1IYRiWCEuG0fDmsFR4S5gYlg7LhGVDF5YLy4cVworhrWGl8Lawcnh7WCW8I6waVgsfe6BGeGdYM7wrrBXeHdYO7wnrhHXDemH98N6wQXhf2DC8P2wUPhBWCh8Mm4QPhU3Dh8Nm4SNh8/DRsEX4WNgyfDxsFbYO24Rtw3bhE2H78MmwQ9gx7BQ+FXYOnw67hM+ESeGzYdfwuT+8PzkcEA4MXw1fDb2/Xy2OLommRz+JZkSXRjOjn0aXRT+LZkWXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0U3R7dEt0a9r59XOHDSKadd4PK4vC7G5XOx7joX5653+V0BF3E3uHh3oyvobnKFXGFXxBV1Ca6YK+6MQ2cdudCVcCVd1N3sSrlbXKIr7cq4ss65cq68a+vauXauvXvSdXAdXSf3lHvKPe2eds+4Z9yzrqt7znVzz7vu7gXXw73oXnQvuV6ut+vjXnZ93Suun+vvkl2yG+gGukFukBvihrhhbpgb7oa7EW6ES3EpbpQb5Ua70W6MG+PGurFuvBvvJrgJbpKb5Ka4KS7Vpbppbpqb7qa7GW6GnulmujSX5ua4OW6um+vmu/luQeICt9AtdIvdYpfu0l2Gy3CZLtMtc8tclstyK9wKt8qtcmvcGrfOrXMb3Aa3yW1yW9wWt81tc9vddrfT7XS73W631+11+9w+Ldx+d8AdcAfdQXfIHXKH3bcu233njrjv3VH3gzvmfnTH3U/uhDvpTrnT7oz72Z1159x5d8FddL+4S+6yu+K8S428G5kWeS8yPfJ+ZEbkg8jMyKxIWmR2ZE7kw8jcyLzI/MhHkQWRjyMLI4siiyNLIumRTyIZkaWRzMinkWWRzyJZkeWRFZGVkVWR1RHvi20PfQlf0kf9zb6Uv8Un+tK+jC/rnS/ny/sKvqK/1Vfyt/nK/nZfxd/hq/pqvrp/3LfyrX0b39a380/49v5J38F39J38U76zf9p38c/4JP+s7+qf89388767f8H38C/6nv4l38v39n38y76vf8X38/19sh/gB/pX/SA/2A/xQ/0w/5of7l/3I/wbPsWP9KP8m360f8uP8W/7sX6cH+/f8RP8RD/JT/ZT/FSf6t/10/x7frp/38/wH/iZfpZP87P9HP+hn+vn+fn+I7/Af+wX+kV+sV/i0/0nPsMv9Zn+U7/Mf+az/HK/wq/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/12/znfrvf4Xf6XX633+P3+i/8Pv+l3++/8gf81/6g/4s/5L/xh/23Ptt/54/47/1R/4M/5n/0x/1P/oQ/6U/50/6M/9mf9ef8eX/BX/S/+Ev+sr/ivb+GF9EZY4wxxv6/of7g/gH/5GfyryPHQCHE9TuKZv/jmpsK/TYfLBM6R4QQz/bv+cjfRp06ycl/+yqBLCWCkouEEJGr+XnE1Xi56CSeFkmio6j4T+sbLHtfpD9YP3q7ELH/ISdGXI2vrn/rv1j/iafGZ1QJz8f/L9ZfJERiyas5+cTVeLno9Ov/aDuKSv9i/cLt/6D+fN+kCtHhP+TEiatxTv2+wG/zJ8VzIunvHskYY4wxxhhjjP1msKze/Y/On3POzxP01Zy84mr8R+fnjDHGGGOMMcYYu/Ze6N3nmSeSkjp25wlPePL/1kRdy1/Pa/2XiTHGGGOMMfZnu3rQf60rYYwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGcq//iq8Tu9Z7ZIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxq61/xEAAP//aIcwug==")
mount$nfs(&(0x7f0000000100)='.>.', &(0x7f0000000140)='./file0\x00', 0x0, 0x2040, 0x0)

950.766993ms ago: executing program 3 (id=4341):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x9403, 0x3002, 0x300, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0x20}, {0x9, 0x0, 0x48, 0xfc, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz1\x00', 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x8, 0x3, 0x8001, '\x00', 'syz1\x00', {0x73c1}}}}, {{@ipv6={@local, @empty, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0x140b6964c6a3d8d0, 0x1ff0001ff, 0xff000000, 0xff], 'gre0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x2, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffff4, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548)

900.098787ms ago: executing program 1 (id=4342):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x20ea7fc}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x4c}}, 0x4000)

744.70038ms ago: executing program 1 (id=4343):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800)

716.977201ms ago: executing program 3 (id=4344):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_TIMEOUT(r0, 0x702, 0x800066a0)

663.986366ms ago: executing program 0 (id=4345):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000300)=@ethtool_link_settings={0x2, 0x4, 0x0, 0x0, 0x3, 0x0, 0x20, 0x0, 0x20, 0x10, [0x0, 0x0, 0x9, 0x2, 0x3, 0x0, 0x3]}})

588.608452ms ago: executing program 3 (id=4346):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000001c0)={0x7})

561.051574ms ago: executing program 0 (id=4347):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x9, 0x81, 0x0, 0x0, 0xfffffff7, 0x5, 0x3, 0x37f2, 0x8, 0x0})

560.854904ms ago: executing program 1 (id=4348):
syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14)

376.113559ms ago: executing program 3 (id=4349):
r0 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

375.926309ms ago: executing program 0 (id=4350):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0xffffff23, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5690}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}]}}}, @IFLA_MTU={0x8, 0x4, 0x40500}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000)

329.173063ms ago: executing program 1 (id=4351):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)

257.746398ms ago: executing program 3 (id=4352):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x14, 0x5, 0x6, 0xa03, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000)

220.655622ms ago: executing program 0 (id=4353):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100cc9a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0x2af, &(0x7f0000000240)="$eJzs3UFr1E4Yx/HfJNvt/v8tNbYVQTxVBU+lrRcRRJF9B148idrdQnGpoBXUi9Vz8eCxd9+CL8KTeBa8efIFFDxEZpI0yW6S3XbZxq3fD3TJJvMk83SyyTwLSwTgn3Wv/ePTjZ/2z0i+fKkpyZPUkhqSLuhi6+XO7vZur9up2pHvIuyfURRpBtps7nSLQm2ci4gF9l1D85l1zeIgjKv1/dghPv/8s8eEYRgWrPek2exon5WR36u7AzUzhzrUbN29AADUzc3+o4m/L/nz8fzd86Rr8W3fbk/v/9N7A/0dRuruR63c/f+VFpLKKzR2fM+5TWm950o4u91LqsTKnXrFq5vxNj/XgWFVpeuL99/Wdq+7uvms1/H0XndimWbL7rWTP3i2t+8Gd71SUJtWGCn3I28zJ9acy2HG5rBR0v+l8Y/ozJRu6RsV88V8NQ9NoAN13PhbjdDYYXIjFfSNVNT/NeWL9AyXZRC1KsnyvIu+lC/kK7P01deNrGa8z0Y2+SDtZ0XUYl8WUXbrQ6KWCqM2hkQt90elZ3N55KSZD+aBWdEvfVb7aPztWeJHl/rhn0zbxrWMz4zKfBquZeDuJ/Gnbu9yYcuSqwcmYl9PdFMLL16/efq41+s+Z2G0heQ6+7f050QLyUlw6kf33cJHSXXkvr96e8um7dYonuJO9KAazNTXiOGNcY6e3HdO3vkarkk4demgHzOweCqI6eO5r/9d/ZepV9bcZM2+BBXz9KFFdGaP6yW1waJ7/b+8gssx7quHufIKbtSa68p16WrJEdsHA7sN4n5OtbtKvsIxbX3To8z8HwAAAAAAAAAAAAAAAAAAAFNhvJ83hGH684aWyhrXnSMAAAAAAAAAAAAAAAAAAAAAANNu8Pm/ulXr83/vK3qXf/4vgAn4EwAA////Xngs")
truncate(&(0x7f0000000040)='./file1\x00', 0x40006)

144.555878ms ago: executing program 1 (id=4354):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x10000004000, 0x1)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))

0s ago: executing program 3 (id=4355):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
rt_sigpending(0x0, 0x1000000)

kernel console output (not intermixed with test programs):

error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  435.427893][T13614] hfsplus: failed to load root directory
[  435.690539][T13620] loop2: detected capacity change from 0 to 4096
[  435.716915][T13620] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[  435.719832][ T5870] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  435.747255][T13620] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  435.767068][T13620] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[  435.776593][T13620] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  435.791634][T13620] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  435.804688][T13620] ntfs: volume version 3.1.
[  435.809769][T13620] syz.2.3503: attempt to access beyond end of device
[  435.809769][T13620] loop2: rw=0, sector=4108, nr_sectors = 4 limit=4096
[  435.829097][T13620] syz.2.3503: attempt to access beyond end of device
[  435.829097][T13620] loop2: rw=0, sector=4112, nr_sectors = 4 limit=4096
[  435.932334][ T5870] usb 2-1: Using ep0 maxpacket: 8
[  435.946925][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  435.971306][ T5870] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  435.971654][T13626] loop2: detected capacity change from 0 to 2048
[  435.983402][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.987183][    T8] usb 1-1: new full-speed USB device number 113 using dummy_hcd
[  435.997951][ T5870] usb 2-1: Product: syz
[  436.007092][ T5870] usb 2-1: Manufacturer: syz
[  436.012662][ T5870] usb 2-1: SerialNumber: syz
[  436.034615][   T23] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[  436.046559][ T5870] usb 2-1: config 0 descriptor??
[  436.046666][T13626]  loop2: p3 < > p4 < >
[  436.061846][T13626] loop2: partition table partially beyond EOD, truncated
[  436.072059][T13626] loop2: p3 start 4284289 is beyond EOD, truncated
[  436.074362][ T5870] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints
[  436.191264][ T5800] udevd[5800]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  436.207583][    T8] usb 1-1: config 0 has an invalid interface number: 63 but max is 0
[  436.215297][   T23] usb 4-1: Using ep0 maxpacket: 32
[  436.232413][    T8] usb 1-1: config 0 has no interface number 0
[  436.248069][   T23] usb 4-1: config 1 has an invalid interface number: 248 but max is 0
[  436.258690][    T8] usb 1-1: config 0 interface 63 has no altsetting 0
[  436.265683][   T23] usb 4-1: config 1 has no interface number 0
[  436.271806][   T23] usb 4-1: config 1 interface 248 has no altsetting 0
[  436.284673][    T8] usb 1-1: New USB device found, idVendor=07ca, idProduct=a800, bcdDevice=2b.5e
[  436.301375][ T5838] usb 2-1: USB disconnect, device number 126
[  436.302441][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.322613][    T8] usb 1-1: Product: syz
[  436.327013][    T8] usb 1-1: Manufacturer: syz
[  436.345447][   T23] usb 4-1: New USB device found, idVendor=05c8, idProduct=0403, bcdDevice=56.9b
[  436.348256][    T8] usb 1-1: SerialNumber: syz
[  436.367624][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.375667][   T23] usb 4-1: Product: syz
[  436.379905][    T8] usb 1-1: config 0 descriptor??
[  436.392003][   T23] usb 4-1: Manufacturer: syz
[  436.392315][    T8] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state.
[  436.405580][   T23] usb 4-1: SerialNumber: syz
[  436.430847][    T8] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  436.457616][    T8] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800))
[  436.474360][    T8] usb 1-1: media controller created
[  436.483784][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  436.507362][    T8] dvb-usb: bulk message failed: -22 (6/0)
[  436.520018][    T8] dvb-usb: bulk message failed: -22 (6/0)
[  436.537917][    T8] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)'
[  436.639024][   T23] usb 4-1: Found UVC 0.00 device syz (05c8:0403)
[  436.653269][   T23] usb 4-1: No valid video chain found.
[  436.673108][   T23] usb 4-1: USB disconnect, device number 127
[  436.729534][    T8] rc_core: IR keymap rc-avermedia-m135a not found
[  436.736030][    T8] Registered IR keymap rc-empty
[  436.753962][    T8] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  436.772623][    T8] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input39
[  436.792123][    T8] dvb-usb: schedule remote query interval to 150 msecs.
[  436.802730][    T8] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected.
[  436.866896][    T8] usb 1-1: USB disconnect, device number 113
[  436.920104][ T5869] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  436.953917][    T8] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected.
[  436.983557][T13638] loop1: detected capacity change from 0 to 4096
[  436.993756][T13638] __ntfs_error: 4 callbacks suppressed
[  436.993774][T13638] ntfs: (device loop1): parse_options(): Unrecognized mount option n�s.
[  437.010070][T13638] ntfs: (device loop1): parse_options(): Unrecognized mount option mft_zone_multipli 4­åzer.
[  437.128071][ T5869] usb 3-1: Using ep0 maxpacket: 8
[  437.149786][ T5869] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  437.164792][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  437.189890][ T5869] usb 3-1: Product: syz
[  437.194121][ T5869] usb 3-1: Manufacturer: syz
[  437.218613][ T5869] usb 3-1: SerialNumber: syz
[  437.241744][ T5869] usb 3-1: config 0 descriptor??
[  437.256090][ T5869] usbtest 3-1:0.0: FX2 device
[  437.271169][ T5869] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  437.338730][    T9] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[  437.479328][   T23] usb 3-1: USB disconnect, device number 115
[  437.532506][    T9] usb 2-1: config 8 has an invalid interface number: 203 but max is 0
[  437.548071][    T9] usb 2-1: config 8 has no interface number 0
[  437.554241][    T9] usb 2-1: config 8 interface 203 altsetting 7 endpoint 0xA has invalid maxpacket 1455, setting to 64
[  437.566757][    T9] usb 2-1: config 8 interface 203 has no altsetting 0
[  437.578602][    T9] usb 2-1: New USB device found, idVendor=06f8, idProduct=0003, bcdDevice=a5.ab
[  437.591973][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.600503][    T9] usb 2-1: Product: syz
[  437.604690][    T9] usb 2-1: Manufacturer: syz
[  437.610932][    T9] usb 2-1: SerialNumber: syz
[  437.635351][T13642] loop0: detected capacity change from 0 to 32768
[  437.655467][T13642] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  437.688407][T13642] XFS (loop0): Ending clean mount
[  437.719563][ T5869] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  437.743019][ T5791] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  437.863090][    T9] usb 2-1: USB disconnect, device number 127
[  437.930694][ T5869] usb 4-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62
[  437.959677][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.966375][T13658] loop0: detected capacity change from 0 to 8
[  437.984295][T13658] Page size > filesystem block size (96).  This is currently not supported!
[  437.997190][ T5869] usb 4-1: config 0 descriptor??
[  438.006837][ T5869] usb 4-1: selecting invalid altsetting 1
[  438.012618][ T5869] flexcop_usb: set interface failed.
[  438.018671][ T5869] b2c2_flexcop_usb: probe of 4-1:0.0 failed with error -22
[  438.161828][T13663] loop0: detected capacity change from 0 to 2048
[  438.217543][T13663]  loop0: p3 p4 < >
[  438.230872][ T5870] usb 4-1: USB disconnect, device number 2
[  438.513804][ T5800] udevd[5800]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  438.523796][T13675] loop1: detected capacity change from 0 to 512
[  438.543847][ T6154] udevd[6154]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  438.614453][T13675] Quota error (device loop1): v2_read_file_info: Can't read info structure
[  438.637875][T13675] EXT4-fs warning (device loop1): ext4_enable_quotas:7173: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  438.661813][T13675] EXT4-fs (loop1): mount failed
[  438.880095][T13692] loop3: detected capacity change from 0 to 1024
[  438.900305][T13692] hfsplus: invalid gid specified
[  438.905292][T13692] hfsplus: unable to parse mount options
[  439.014268][T13696] dccp_v6_rcv: dropped packet with invalid checksum
[  439.082162][T13695] loop1: detected capacity change from 0 to 1764
[  439.176780][T13702] loop2: detected capacity change from 0 to 2048
[  439.225911][T13702] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  439.285968][T13705] syz.1.3539: attempt to access beyond end of device
[  439.285968][T13705] nbd1: rw=0, sector=16, nr_sectors = 8 limit=0
[  439.309302][T13705] REISERFS warning (device nbd1): sh-2006 read_super_block: bread failed (dev nbd1, block 2, size 4096)
[  439.324630][T13705] syz.1.3539: attempt to access beyond end of device
[  439.324630][T13705] nbd1: rw=0, sector=128, nr_sectors = 8 limit=0
[  439.338945][T13705] REISERFS warning (device nbd1): sh-2006 read_super_block: bread failed (dev nbd1, block 16, size 4096)
[  439.338981][ T5869] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[  439.350242][T13705] REISERFS warning (device nbd1): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd1
[  439.576476][ T5870] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  439.600485][ T5869] usb 1-1: config 0 has an invalid interface number: 156 but max is 1
[  439.622283][ T5869] usb 1-1: config 0 has no interface number 1
[  439.632366][ T5869] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  439.641862][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.662743][ T5869] usb 1-1: config 0 descriptor??
[  439.694075][ T5869] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  439.714517][ T5869] usb 1-1: MIDIStreaming interface descriptor not found
[  439.766878][ T5870] usb 4-1: Using ep0 maxpacket: 32
[  439.784440][ T5869] gspca_main: spca561-2.14.0 probing abcd:cdee
[  439.786970][ T5870] usb 4-1: config 1 has an invalid interface number: 173 but max is 0
[  439.808311][T13721] loop1: detected capacity change from 0 to 1024
[  439.814487][ T5870] usb 4-1: config 1 has no interface number 0
[  439.828319][ T5870] usb 4-1: config 1 interface 173 has no altsetting 0
[  439.842736][T13721] EXT4-fs (loop1): bad block size 16384
[  439.867973][ T5870] usb 4-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=55.c8
[  439.870032][ T5869] spca561: probe of 1-1:0.0 failed with error -22
[  439.893613][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.908077][ T5870] usb 4-1: Product: syz
[  439.913034][ T5869] usb 1-1: USB disconnect, device number 114
[  439.942496][ T5870] usb 4-1: Manufacturer: syz
[  439.956137][ T5870] usb 4-1: SerialNumber: syz
[  439.962133][   T23] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  439.995404][ T5870] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  440.156941][   T23] usb 3-1: Using ep0 maxpacket: 8
[  440.164368][   T23] usb 3-1: unable to get BOS descriptor or descriptor too short
[  440.173238][   T23] usb 3-1: config 4 has an invalid interface number: 143 but max is 0
[  440.181637][   T23] usb 3-1: config 4 has no interface number 0
[  440.187864][   T23] usb 3-1: config 4 interface 143 has no altsetting 0
[  440.197462][   T23] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=c8.48
[  440.207792][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.216342][   T23] usb 3-1: Product: syz
[  440.220554][   T23] usb 3-1: Manufacturer: syz
[  440.225227][ T5869] usb 4-1: USB disconnect, device number 3
[  440.237801][   T23] usb 3-1: SerialNumber: syz
[  440.337829][    T8] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  440.456146][   T23] powermate: probe of 3-1:4.143 failed with error -5
[  440.466726][   T23] usb 3-1: USB disconnect, device number 116
[  440.522403][    T8] usb 2-1: unable to get BOS descriptor or descriptor too short
[  440.540969][    T8] usb 2-1: not running at top speed; connect to a high speed hub
[  440.551226][    T8] usb 2-1: config 1 interface 0 has no altsetting 0
[  440.561724][    T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40
[  440.572240][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.582367][    T8] usb 2-1: Product: syz
[  440.586703][    T8] usb 2-1: Manufacturer: syz
[  440.591317][    T8] usb 2-1: SerialNumber: syz
[  440.777010][ T5870] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[  440.809376][    T8] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input40
[  440.821808][ T5143] bcm5974 2-1:1.0: could not read from device
[  440.829608][ T5143] bcm5974 2-1:1.0: could not read from device
[  440.844642][    T8] usb 2-1: USB disconnect, device number 2
[  440.852320][ T5143] bcm5974 2-1:1.0: could not read from device
[  440.967140][ T5870] usb 1-1: Using ep0 maxpacket: 8
[  440.995271][ T5870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  441.009417][T13736] loop2: detected capacity change from 0 to 512
[  441.019343][T13736] EXT4-fs: Ignoring removed oldalloc option
[  441.025386][ T5870] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[  441.025415][ T5870] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  441.041126][ T5870] usb 1-1: string descriptor 0 read error: -71
[  441.057819][T13736] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  441.067050][ T5870] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  441.070066][T13736] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  441.085228][T13736] System zones: 1-12
[  441.100889][T13736] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.3553: corrupted in-inode xattr: e_name out of bounds
[  441.113961][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.126411][T13736] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3553: couldn't read orphan inode 15 (err -117)
[  441.148658][T13736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.158768][T13740] loop3: detected capacity change from 0 to 256
[  441.170803][ T5870] usb 1-1: can't set config #1, error -71
[  441.223209][ T5870] usb 1-1: USB disconnect, device number 115
[  441.234096][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.485232][T13746] loop1: detected capacity change from 0 to 512
[  441.516745][T13746] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  441.529964][T13742] loop2: detected capacity change from 0 to 8192
[  441.566865][T13742] REISERFS warning (device loop2): super-6508 reiserfs_parse_options: bad value 0x0000000000000081=appraise_type=imasig for -ocommit
[  441.566865][T13742] 
[  442.108788][ T5870] usb 3-1: new full-speed USB device number 117 using dummy_hcd
[  442.329284][ T5870] usb 3-1: not running at top speed; connect to a high speed hub
[  442.344048][ T5870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  442.347246][    T8] usb 1-1: new full-speed USB device number 116 using dummy_hcd
[  442.356476][ T5870] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  442.372337][ T5870] usb 3-1: config 1 has no interface number 1
[  442.389489][ T5870] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  442.403050][ T5870] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  442.424950][ T5870] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  442.438041][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.447384][ T5870] usb 3-1: Product: syz
[  442.456605][ T5870] usb 3-1: Manufacturer: syz
[  442.461358][ T5870] usb 3-1: SerialNumber: syz
[  442.489363][ T5838] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  442.539473][    T8] usb 1-1: config 0 has an invalid interface number: 155 but max is 0
[  442.558633][    T8] usb 1-1: config 0 has no interface number 0
[  442.564877][    T8] usb 1-1: config 0 interface 155 has no altsetting 0
[  442.601679][    T8] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  442.613255][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.621284][    T8] usb 1-1: Product: syz
[  442.626096][    T8] usb 1-1: Manufacturer: syz
[  442.630727][    T8] usb 1-1: SerialNumber: syz
[  442.645180][    T8] usb 1-1: config 0 descriptor??
[  442.656821][    T8] radioshark2 1-1:0.155: Invalid radioSHARK2 device
[  442.664094][    T8] radioshark2: probe of 1-1:0.155 failed with error -22
[  442.674200][    T8] usbhid 1-1:0.155: couldn't find an input interrupt endpoint
[  442.678979][ T5870] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  442.690016][ T5838] usb 2-1: Using ep0 maxpacket: 16
[  442.700331][ T5838] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  442.724326][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  442.745003][ T5870] usb 3-1: USB disconnect, device number 117
[  442.765947][ T5838] usb 2-1: config 0 has no interface number 0
[  442.803139][ T5838] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  442.819613][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  442.836474][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.851059][ T5838] usb 2-1: Product: syz
[  442.860755][ T5838] usb 2-1: Manufacturer: syz
[  442.864241][    T8] usb 1-1: USB disconnect, device number 116
[  442.865370][ T5838] usb 2-1: SerialNumber: syz
[  442.868091][ T5838] usb 2-1: config 0 descriptor??
[  442.917217][ T5838] usb 2-1: Found UVC 0.00 device syz (046d:08f3)
[  442.938512][ T5838] usb 2-1: No valid video chain found.
[  443.018709][T13795] loop3: detected capacity change from 0 to 512
[  443.043602][T13795] Quota error (device loop3): v2_read_file_info: Can't read info structure
[  443.055768][T13795] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  443.075415][T13795] EXT4-fs (loop3): mount failed
[  443.105716][ T5869] usb 2-1: USB disconnect, device number 3
[  443.349384][T13802] loop2: detected capacity change from 0 to 8
[  443.396694][T13802] SQUASHFS error: lzo decompression failed, data probably corrupt
[  443.425017][T13802] SQUASHFS error: Failed to read block 0x91: -5
[  443.431320][T13802] SQUASHFS error: Unable to read metadata cache entry [8f]
[  443.475157][T13802] SQUASHFS error: Unable to read inode 0x11f
[  443.557553][T13804] loop3: detected capacity change from 0 to 4096
[  443.564957][T13804] ntfs: (device loop3): parse_options(): Invalid errors option argument: r%mount-ro
[  444.031806][ T5869] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  444.047050][T13814] loop2: detected capacity change from 0 to 4096
[  444.083346][T13814] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  444.140943][T13814] ntfs3: loop2: Failed to load $MFT (-2).
[  444.261422][ T5869] usb 2-1: Using ep0 maxpacket: 16
[  444.284162][ T5869] usb 2-1: config 4 has an invalid interface number: 141 but max is 0
[  444.298822][ T5869] usb 2-1: config 4 has no interface number 0
[  444.320469][ T5869] usb 2-1: New USB device found, idVendor=a168, idProduct=0617, bcdDevice= 0.d4
[  444.340629][T13820] loop3: detected capacity change from 0 to 8192
[  444.347294][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.355312][ T5869] usb 2-1: Product: syz
[  444.365654][ T5869] usb 2-1: Manufacturer: syz
[  444.370596][ T5869] usb 2-1: SerialNumber: syz
[  444.406992][T13806] loop0: detected capacity change from 0 to 32768
[  444.410159][T13820]  loop3: p1 p4
[  444.410159][T13820]  p1: <minix: p5 >
[  444.427102][T13820] loop3: p4 start 201785344 is beyond EOD, truncated
[  444.438320][T13806] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  444.481017][T13806] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  444.536295][ T5838] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  444.558211][T13806] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error
[  444.558211][T13806]   inode = 1 19
[  444.558211][T13806]   function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[  444.625205][ T5869] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0617
[  444.651425][T13806] gfs2: fsid=syz:syz.s: G:  s:SH n:2/13 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:6
[  444.661150][ T5869] gspca_sn9c20x: Write register 1000 failed -71
[  444.671763][T13806] gfs2: fsid=syz:syz.s:  H: s:SH f:eEcH e:0 p:13806 [syz.0.3585] init_journal+0x17f1/0x2260
[  444.681688][ T5869] gspca_sn9c20x: Device initialization failed
[  444.688709][T13806] gfs2: fsid=syz:syz.s:  I: n:1/19 t:8 f:0x00 d:0x00000200 s:50331648 p:0
[  444.701379][T13806] gfs2: fsid=syz:syz.s: about to withdraw this file system
[  444.715099][T13806] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount.
[  444.725146][ T5869] gspca_sn9c20x: probe of 2-1:4.141 failed with error -71
[  444.726679][T13806] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0
[  444.746036][ T5838] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  444.754474][ T5869] usb 2-1: USB disconnect, device number 4
[  444.755803][T13806] gfs2: fsid=syz:syz.s: File system withdrawn
[  444.771670][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.780805][ T5838] usb 3-1: Product: syz
[  444.792372][T13806] CPU: 1 PID: 13806 Comm: syz.0.3585 Not tainted 6.6.101-syzkaller #0
[  444.799373][ T6260] udevd[6260]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  444.800647][T13806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  444.814260][ T5800] udevd[5800]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  444.820480][T13806] Call Trace:
[  444.833609][T13806]  <TASK>
[  444.836564][T13806]  dump_stack_lvl+0x16c/0x230
[  444.841360][T13806]  ? kobject_uevent_env+0x363/0x8c0
[  444.846627][T13806]  ? show_regs_print_info+0x20/0x20
[  444.851861][T13806]  ? load_image+0x3b0/0x3b0
[  444.856406][T13806]  ? kobject_uevent_env+0x363/0x8c0
[  444.861691][T13806]  gfs2_withdraw+0xf16/0x14b0
[  444.866428][T13806]  ? gfs2_lm+0x220/0x220
[  444.870748][T13806]  ? gfs2_consist_inode_i+0xf5/0x110
[  444.876071][T13806]  gfs2_jdesc_check+0x13b/0x2a0
[  444.880957][T13806]  check_journal_clean+0x159/0x300
[  444.886106][T13806]  ? gfs2_trans_remove_revoke+0x370/0x370
[  444.891879][T13806]  ? init_journal+0x17f1/0x2260
[  444.896856][T13806]  ? __rwlock_init+0x150/0x150
[  444.902061][T13806]  ? do_raw_spin_unlock+0x121/0x230
[  444.907341][T13806]  ? _raw_spin_unlock+0x28/0x40
[  444.912187][T13806]  ? gfs2_jdesc_find+0xab/0xc0
[  444.917055][T13806]  init_journal+0x17f1/0x2260
[  444.921761][T13806]  ? gfs2_glock_dq_uninit+0x28/0xe0
[  444.926980][T13806]  ? init_inodes+0xdb/0x320
[  444.931492][T13806]  ? vsnprintf+0x7b2/0x1a40
[  444.936100][T13806]  ? _compound_head+0x120/0x120
[  444.941047][T13806]  ? vsnprintf+0x1957/0x1a40
[  444.945648][T13806]  ? snprintf+0xdb/0x120
[  444.949930][T13806]  ? init_inodes+0xdb/0x320
[  444.954419][T13806]  ? vscnprintf+0x80/0x80
[  444.958763][T13806]  ? gfs2_glock_nq_num+0x183/0x1c0
[  444.963865][T13806]  init_inodes+0xdb/0x320
[  444.968212][T13806]  gfs2_fill_super+0x1815/0x1f80
[  444.973150][T13806]  ? gfs2_reconfigure+0xb10/0xb10
[  444.978169][T13806]  ? init_locking+0xb8/0x200
[  444.982778][T13806]  ? setup_bdev_super+0x56b/0x660
[  444.987796][T13806]  get_tree_bdev+0x3e4/0x510
[  444.992482][T13806]  ? end_current_label_crit_section+0x170/0x170
[  444.998727][T13806]  ? gfs2_reconfigure+0xb10/0xb10
[  445.003923][T13806]  ? setup_bdev_super+0x660/0x660
[  445.008946][T13806]  gfs2_get_tree+0x51/0x1e0
[  445.013454][T13806]  vfs_get_tree+0x8c/0x280
[  445.017854][T13806]  do_new_mount+0x24b/0xa40
[  445.022359][T13806]  __se_sys_mount+0x2da/0x3c0
[  445.027022][T13806]  ? __x64_sys_mount+0xc0/0xc0
[  445.031771][T13806]  ? lockdep_hardirqs_on+0x98/0x150
[  445.036958][T13806]  ? __x64_sys_mount+0x20/0xc0
[  445.041722][T13806]  do_syscall_64+0x55/0xb0
[  445.046170][T13806]  ? clear_bhb_loop+0x40/0x90
[  445.050856][T13806]  ? clear_bhb_loop+0x40/0x90
[  445.055529][T13806]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  445.061479][T13806] RIP: 0033:0x7f58bcb9038a
[  445.065916][T13806] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  445.085611][T13806] RSP: 002b:00007f58bdaaae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  445.094107][T13806] RAX: ffffffffffffffda RBX: 00007f58bdaaaef0 RCX: 00007f58bcb9038a
[  445.102078][T13806] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f58bdaaaeb0
[  445.110042][T13806] RBP: 0000200000000400 R08: 00007f58bdaaaef0 R09: 0000000000200001
[  445.118009][T13806] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500
[  445.126067][T13806] R13: 00007f58bdaaaeb0 R14: 00000000000125bb R15: 0000200000000180
[  445.134136][T13806]  </TASK>
[  445.139065][T13806] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount.
[  445.139072][ T5838] usb 3-1: Manufacturer: syz
[  445.139091][ T5838] usb 3-1: SerialNumber: syz
[  445.181724][ T5838] usb 3-1: config 0 descriptor??
[  445.190965][ T5838] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  445.260281][ T5852] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  445.404102][ T5838] gspca_sunplus: reg_r err -71
[  445.421195][ T5838] usb 3-1: USB disconnect, device number 118
[  445.450538][ T5852] usb 4-1: Using ep0 maxpacket: 8
[  445.458135][ T5852] usb 4-1: unable to get BOS descriptor or descriptor too short
[  445.479201][ T5852] usb 4-1: config 8 has an invalid interface number: 141 but max is 0
[  445.487543][ T5852] usb 4-1: config 8 has no interface number 0
[  445.499030][ T5852] usb 4-1: config 8 interface 141 altsetting 11 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  445.519444][ T5852] usb 4-1: config 8 interface 141 has no altsetting 0
[  445.529634][ T5852] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=c1.47
[  445.542370][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.550736][ T5852] usb 4-1: Product: syz
[  445.555170][ T5852] usb 4-1: Manufacturer: syz
[  445.559798][ T5852] usb 4-1: SerialNumber: syz
[  445.692545][    T9] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[  445.775414][ T5852] ir_toy 4-1:8.141: required endpoints not found
[  445.784894][ T5852] usb 4-1: USB disconnect, device number 4
[  445.793150][ T5869] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  445.884371][    T9] usb 1-1: config 0 has an invalid interface number: 108 but max is 0
[  445.893741][    T9] usb 1-1: config 0 has no interface number 0
[  445.901858][    T9] usb 1-1: config 0 interface 108 altsetting 253 bulk endpoint 0xE has invalid maxpacket 1024
[  445.912243][    T9] usb 1-1: config 0 interface 108 has no altsetting 0
[  445.919528][    T9] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= e.b7
[  445.932692][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.943360][    T9] usb 1-1: config 0 descriptor??
[  445.961202][T13831] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  445.988139][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  446.000377][    T9] usbserial_generic 1-1:0.108: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  446.026412][ T5869] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  446.035779][    T9] usbserial_generic 1-1:0.108: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  446.053035][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.063930][    T9] usbserial_generic 1-1:0.108: generic converter detected
[  446.073344][ T5869] usb 2-1: Product: syz
[  446.077710][ T5869] usb 2-1: Manufacturer: syz
[  446.085822][ T5869] usb 2-1: SerialNumber: syz
[  446.092320][    T9] usb 1-1: generic converter now attached to ttyUSB0
[  446.115042][ T5869] usb 2-1: config 0 descriptor??
[  446.126224][   T27] audit: type=1326 audit(1754619864.110:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13836 comm="syz.2.3600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9c4f8ebe9 code=0x0
[  446.249285][    T9] usb 1-1: USB disconnect, device number 117
[  446.265790][    T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  446.274904][    T9] usbserial_generic 1-1:0.108: device disconnected
[  446.408705][ T5869] usb 2-1: USB disconnect, device number 5
[  446.469730][ T5838] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  446.692900][ T5838] usb 3-1: Using ep0 maxpacket: 32
[  446.700595][ T5838] usb 3-1: unable to get BOS descriptor or descriptor too short
[  446.711229][ T5838] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  446.721548][ T5838] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  446.731482][ T5838] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  446.748297][ T5838] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  446.757438][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.765659][ T5838] usb 3-1: Product: syz
[  446.769842][ T5838] usb 3-1: Manufacturer: syz
[  446.774545][ T5838] usb 3-1: SerialNumber: syz
[  447.024779][ T5838] usb 3-1: 0:2 : does not exist
[  447.060123][ T5838] usb 3-1: USB disconnect, device number 119
[  447.102030][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  447.460461][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  447.503230][T13861] loop3: detected capacity change from 0 to 8192
[  447.517514][T13861] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  447.545376][T13861] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  447.556008][T13861] REISERFS (device loop3): using ordered data mode
[  447.562555][T13861] reiserfs: using flush barriers
[  447.572948][T13861] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  447.599253][T13861] REISERFS (device loop3): checking transaction log (loop3)
[  447.608185][T13861] REISERFS warning: reiserfs-5085 is_leaf: item length seems wrong: *3.5*[1 2 0(1) DIR], item_len 0, item_location 4004, free_space(entry_count) 2306
[  447.626925][T13861] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  447.638193][T13861] REISERFS (device loop3): Remounting filesystem read-only
[  447.646274][T13861] REISERFS error (device loop3): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD]
[  447.660411][    T9] usb 2-1: Using ep0 maxpacket: 8
[  447.667482][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11
[  447.688986][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024
[  447.727240][    T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  447.759606][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.786669][    T9] usb 2-1: config 0 descriptor??
[  447.792775][T13853] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  447.834473][T13872] loop2: detected capacity change from 0 to 16
[  447.846189][T13872] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  448.052383][    T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  448.116885][    T9] usb 2-1: USB disconnect, device number 6
[  448.369592][T13877] loop3: detected capacity change from 0 to 32768
[  448.380488][T13877] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz.3.3619 (13877)
[  448.414761][T13877] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  448.432441][T13877] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  448.448023][T13877] BTRFS info (device loop3): using free space tree
[  448.460425][ T5869] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  448.504838][T13877] BTRFS info (device loop3): enabling ssd optimizations
[  448.507022][    T8] usb 3-1: new full-speed USB device number 120 using dummy_hcd
[  448.512531][T13877] BTRFS info (device loop3): auto enabling async discard
[  448.629831][ T5787] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  448.650574][ T5869] usb 1-1: Using ep0 maxpacket: 16
[  448.657982][T13901] loop1: detected capacity change from 0 to 64
[  448.658302][ T5869] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  448.680030][T13901] hfs: get root inode failed
[  448.701279][ T5869] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  448.722677][    T8] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[  448.742145][ T5869] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[  448.753871][    T8] usb 3-1: config 0 has no interface number 0
[  448.765863][    T8] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  448.776097][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.785090][ T5869] usb 1-1: Product: syz
[  448.790009][    T8] usb 3-1: config 0 interface 200 has no altsetting 0
[  448.797642][ T5869] usb 1-1: Manufacturer: syz
[  448.812841][ T5869] usb 1-1: SerialNumber: syz
[  448.831810][    T8] usb 3-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  448.849336][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.902650][    T8] usb 3-1: Product: syz
[  448.907803][    T8] usb 3-1: Manufacturer: syz
[  448.923561][    T8] usb 3-1: SerialNumber: syz
[  448.944061][    T8] usb 3-1: config 0 descriptor??
[  448.975807][ T5800] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 9 /dev/loop3 scanned by udevd (5800)
[  449.071021][ T5869] usb 1-1: 0:2 : does not exist
[  449.107852][ T5869] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5)
[  449.140053][ T5869] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5)
[  449.187609][    T8] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input41
[  449.233522][ T5869] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5)
[  449.253112][    T8] usb 3-1: USB disconnect, device number 120
[  449.265090][ T5869] usb 1-1: USB disconnect, device number 118
[  449.383131][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  449.790230][T13907] loop1: detected capacity change from 0 to 32768
[  449.843948][T13907] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.3626 (13907)
[  449.900569][T13907] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  449.910503][T13916] loop2: detected capacity change from 0 to 8
[  449.921960][T13912] loop3: detected capacity change from 0 to 32768
[  449.931010][T13907] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  449.942460][T13916] SQUASHFS error: Unable to read inode 0x11f
[  449.965055][T13907] BTRFS info (device loop1): using free space tree
[  449.971739][T13912] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.3628 (13912)
[  450.042277][T13912] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  450.056545][T13912] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  450.082120][T13912] BTRFS info (device loop3): using free space tree
[  450.201609][T13907] BTRFS info (device loop1): enabling ssd optimizations
[  450.221093][T13907] BTRFS info (device loop1): auto enabling async discard
[  450.272783][T13912] BTRFS info (device loop3): enabling ssd optimizations
[  450.280071][T13912] BTRFS info (device loop3): auto enabling async discard
[  450.392391][ T5787] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  450.463994][ T5784] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  450.865713][T13914] loop0: detected capacity change from 0 to 32768
[  450.920942][T13914] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.3629 (13914)
[  450.998541][T13914] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  451.039629][T13914] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  451.048927][T13914] BTRFS info (device loop0): using free space tree
[  451.172922][    T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  451.297346][T13914] BTRFS info (device loop0): enabling ssd optimizations
[  451.315448][T13914] BTRFS info (device loop0): auto enabling async discard
[  451.332947][T13937] loop2: detected capacity change from 0 to 32768
[  451.384633][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  451.393342][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  451.401883][T13937] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop2 scanned by syz.2.3631 (13937)
[  451.431858][    T9] usb 2-1: config 129 has an invalid interface number: 135 but max is 0
[  451.442592][ T5791] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  451.469214][    T9] usb 2-1: config 129 descriptor has 1 excess byte, ignoring
[  451.497522][    T9] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  451.548317][    T9] usb 2-1: config 129 has no interface number 1
[  451.573048][T13937] BTRFS info (device loop2): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31
[  451.584136][    T9] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  451.620435][T13937] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  451.648933][    T9] usb 2-1: config 129 interface 135 has no altsetting 0
[  451.656025][T13937] BTRFS info (device loop2): using free space tree
[  451.673359][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  451.691903][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.725254][    T9] usb 2-1: Product: syz
[  451.740063][    T9] usb 2-1: Manufacturer: syz
[  451.757020][    T9] usb 2-1: SerialNumber: syz
[  451.826482][T13991] loop0: detected capacity change from 0 to 128
[  451.866416][T13953] loop3: detected capacity change from 0 to 32768
[  451.912423][T13937] BTRFS info (device loop2): enabling ssd optimizations
[  451.934685][T13953] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.3632 (13953)
[  451.937285][T13937] BTRFS info (device loop2): auto enabling async discard
[  452.029214][    T9] au0828: au0828: Device initialization failed.
[  452.038740][T13953] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  452.067510][    T9] au0828: au0828: Device must be connected to a high-speed USB 2.0 port.
[  452.120920][    T9] usb 2-1: USB disconnect, device number 7
[  452.124814][T13953] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  452.159200][ T5794] BTRFS info (device loop2): last unmount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31
[  452.203352][T13953] BTRFS info (device loop3): using free space tree
[  452.238444][   T27] audit: type=1326 audit(1754619870.517:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13994 comm="syz.0.3637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58bcb8ebe9 code=0x0
[  452.309213][   T27] audit: type=1326 audit(1754619870.549:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13994 comm="syz.0.3637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f58bcb8ebe9 code=0x0
[  452.486530][T13953] BTRFS info (device loop3): enabling ssd optimizations
[  452.505600][T13953] BTRFS info (device loop3): auto enabling async discard
[  452.701391][ T5800] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 9 /dev/loop2 scanned by udevd (5800)
[  452.744956][ T5787] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  452.763432][T14015] loop1: detected capacity change from 0 to 724
[  453.031541][T14019] loop1: detected capacity change from 0 to 128
[  453.291066][T14023] loop1: detected capacity change from 0 to 128
[  453.700713][T14013] loop2: detected capacity change from 0 to 32768
[  453.721498][T14013] XFS: ikeep mount option is deprecated.
[  453.886567][ T5838] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  453.917427][T14013] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  454.034023][T14021] loop3: detected capacity change from 0 to 40427
[  454.036547][T13627] XFS (loop2): Metadata corruption detected at xfs_buf_ioend+0x260/0x6f0, xfs_inode block 0x2280 xfs_inode_buf_verify
[  454.054891][T14021] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  454.064058][T14021] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  454.093898][ T5838] usb 2-1: unable to get BOS descriptor or descriptor too short
[  454.118336][ T5838] usb 2-1: config 147 has an invalid interface number: 50 but max is 0
[  454.136376][T13627] XFS (loop2): Unmount and run xfs_repair
[  454.152363][ T5838] usb 2-1: config 147 has no interface number 0
[  454.162204][T13627] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  454.171740][T13627] 00000000: 49 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  I...............
[  454.191602][ T5838] usb 2-1: config 147 interface 50 altsetting 2 endpoint 0x8F has an invalid bInterval 129, changing to 11
[  454.209972][T13627] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  454.224950][ T5838] usb 2-1: config 147 interface 50 has no altsetting 0
[  454.240215][T13627] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  454.260475][ T5838] usb 2-1: New USB device found, idVendor=0f11, idProduct=2040, bcdDevice=2a.ec
[  454.276580][T13627] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  454.285945][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.293983][ T5838] usb 2-1: Product: syz
[  454.315541][T13627] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  454.325314][ T5838] usb 2-1: Manufacturer: syz
[  454.329954][ T5838] usb 2-1: SerialNumber: syz
[  454.334801][T13627] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  454.348083][T13627] 00000060: ff ff ff ff b6 6d 5f 8d 00 00 00 00 00 00 00 00  .....m_.........
[  454.359077][T13627] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  454.368602][T14013] XFS (loop2): metadata I/O error in "xfs_imap_to_bp+0x114/0x180" at daddr 0x2280 len 64 error 117
[  454.380660][T14013] XFS (loop2): Failed to read root inode 0x1140, error 117
[  454.571104][ T5838] ldusb 2-1:147.50: Interrupt out endpoint not found (using control endpoint instead)
[  454.582090][T14037] loop3: detected capacity change from 0 to 16
[  454.598359][T14037] erofs: (device loop3): mounted with root inode @ nid 36.
[  454.634243][ T5838] ldusb 2-1:147.50: LD USB Device #0 now attached to major 180 minor 0
[  454.695919][ T5838] usb 2-1: USB disconnect, device number 8
[  454.763794][ T5838] ldusb 2-1:147.50: LD USB Device #0 now disconnected
[  454.836860][T14039] loop2: detected capacity change from 0 to 720
[  454.927519][ T5800] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  454.980112][T14041] loop3: detected capacity change from 0 to 1024
[  455.073338][T14041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  455.078653][T14045] loop2: detected capacity change from 0 to 512
[  455.140709][T14045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  455.160915][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.339335][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.456991][T14050] loop1: detected capacity change from 0 to 4096
[  455.506439][T14052] loop2: detected capacity change from 0 to 512
[  455.537577][T14050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  455.558878][T14049] loop3: detected capacity change from 0 to 4096
[  455.612098][T14049] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  455.625474][T14052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  455.638314][T14052] ext4 filesystem being mounted at /921/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  455.664615][T14049] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  455.723114][T14057] loop0: detected capacity change from 0 to 512
[  455.730874][T14049] ntfs3: loop3: Failed to load $LogFile (-22).
[  455.792430][T14057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  455.823894][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.842601][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.974298][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.994093][T14061] loop1: detected capacity change from 0 to 16
[  456.029431][T14061] erofs: (device loop1): mounted with root inode @ nid 36.
[  456.082584][T14064] loop2: detected capacity change from 0 to 2048
[  456.179435][T14064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.215049][T14068] loop3: detected capacity change from 0 to 1024
[  456.255115][T14070] loop0: detected capacity change from 0 to 1024
[  456.280710][T14068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.357067][T14070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.459220][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.494981][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.541866][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.707250][T14076] loop0: detected capacity change from 0 to 4096
[  456.709308][T14080] loop3: detected capacity change from 0 to 512
[  456.786914][T14080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.831251][T14076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.003691][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.020435][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.175884][T14084] loop3: detected capacity change from 0 to 512
[  457.252998][T14084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  457.278144][T14074] loop1: detected capacity change from 0 to 32768
[  457.298499][T14078] loop2: detected capacity change from 0 to 32768
[  457.308459][T14074] BTRFS: device fsid 16bad5ef-498e-43ba-8a30-25ddcaa179c7 devid 1 transid 8 /dev/loop1 scanned by syz.1.3658 (14074)
[  457.314365][T14084] ext4 filesystem being mounted at /909/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.404181][T14078] BTRFS: device fsid 18898830-c59e-4026-919d-fe1055706c2c devid 1 transid 8 /dev/loop2 scanned by syz.2.3660 (14078)
[  457.416827][T14074] BTRFS info (device loop1): first mount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7
[  457.427662][T14074] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  457.447672][T14074] BTRFS info (device loop1): using free space tree
[  457.473755][T14078] BTRFS info (device loop2): first mount of filesystem 18898830-c59e-4026-919d-fe1055706c2c
[  457.485277][T14078] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  457.516705][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.532913][T14078] BTRFS info (device loop2): using free space tree
[  457.729972][T14074] BTRFS info (device loop1): enabling ssd optimizations
[  457.745349][T14074] BTRFS info (device loop1): auto enabling async discard
[  457.751348][T14119] loop3: detected capacity change from 0 to 512
[  457.805762][T14078] BTRFS info (device loop2): enabling ssd optimizations
[  457.813180][T14078] BTRFS info (device loop2): auto enabling async discard
[  457.829535][T14119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  457.923532][ T5794] BTRFS info (device loop2): last unmount of filesystem 18898830-c59e-4026-919d-fe1055706c2c
[  457.940220][ T5784] BTRFS info (device loop1): last unmount of filesystem 16bad5ef-498e-43ba-8a30-25ddcaa179c7
[  457.964968][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.003069][T14086] loop0: detected capacity change from 0 to 32768
[  458.018959][T14086] BTRFS: device fsid 9c2593b3-5c40-4e29-8ff3-7b58260955bc devid 1 transid 8 /dev/loop0 scanned by syz.0.3663 (14086)
[  458.119293][T14086] BTRFS info (device loop0): first mount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc
[  458.163972][T14086] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  458.173840][T14086] BTRFS info (device loop0): using free space tree
[  458.228220][T14125] loop3: detected capacity change from 0 to 512
[  458.254190][T14125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  458.330387][T14086] BTRFS info (device loop0): enabling ssd optimizations
[  458.363772][T14086] BTRFS info (device loop0): auto enabling async discard
[  458.389151][T14144] loop1: detected capacity change from 0 to 512
[  458.483172][T14144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  458.547438][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.630447][ T5791] BTRFS info (device loop0): last unmount of filesystem 9c2593b3-5c40-4e29-8ff3-7b58260955bc
[  458.719269][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.919662][T14151] loop3: detected capacity change from 0 to 2048
[  459.018467][T14150] loop1: detected capacity change from 0 to 4096
[  459.035224][T14150] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  459.045903][T14151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  459.128259][T14147] loop2: detected capacity change from 0 to 32768
[  459.156206][T14147] BTRFS: device fsid 9399ba92-402c-46cb-a272-9c4c6c4f62f5 devid 1 transid 8 /dev/loop2 scanned by syz.2.3665 (14147)
[  459.219387][T14150] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  459.236598][T14150] ntfs3: loop1: Failed to initialize $Extend/$ObjId.
[  459.301737][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.321719][T14147] BTRFS info (device loop2): first mount of filesystem 9399ba92-402c-46cb-a272-9c4c6c4f62f5
[  459.366038][T14147] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  459.421847][T14147] BTRFS info (device loop2): using free space tree
[  459.647555][T14169] loop1: detected capacity change from 0 to 1024
[  459.702712][T14166] loop3: detected capacity change from 0 to 4096
[  459.787983][T14147] BTRFS info (device loop2): enabling ssd optimizations
[  459.807165][T14169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.847542][T14166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  459.860448][T14147] BTRFS info (device loop2): auto enabling async discard
[  460.078927][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.090892][ T5794] BTRFS info (device loop2): last unmount of filesystem 9399ba92-402c-46cb-a272-9c4c6c4f62f5
[  460.118279][T14156] loop0: detected capacity change from 0 to 32768
[  460.156703][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.175062][T14156] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.3671 (14156)
[  460.295173][T14156] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  460.334252][T14156] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  460.398321][T14156] BTRFS info (device loop0): using free space tree
[  460.617851][T14156] BTRFS info (device loop0): enabling ssd optimizations
[  460.635212][T14156] BTRFS info (device loop0): auto enabling async discard
[  460.804787][ T5791] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  461.418688][T14184] loop3: detected capacity change from 0 to 32768
[  461.418904][T14182] loop1: detected capacity change from 0 to 32768
[  461.426062][T14184] XFS: noattr2 mount option is deprecated.
[  461.459601][T14182] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.3674 (14182)
[  461.495428][T14182] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  461.547592][T14182] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  461.566801][T14184] XFS (loop3): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems.
[  461.599272][T14182] BTRFS info (device loop1): using free space tree
[  461.765568][T14182] BTRFS info (device loop1): enabling ssd optimizations
[  461.812851][T14182] BTRFS info (device loop1): auto enabling async discard
[  461.861183][T14191] loop2: detected capacity change from 0 to 32768
[  461.932590][T14191] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz"
[  461.940647][T14191] dlm: no local IP address has been set
[  462.039247][T14191] dlm: cannot start dlm midcomms -107
[  462.045095][T14191] gfs2: fsid=syz:syz: dlm_new_lockspace error -107
[  462.113498][ T5784] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  462.458359][T14227] loop3: detected capacity change from 0 to 32768
[  462.477315][T14227] BTRFS: device fsid ed4422de-dbc1-4dc1-8d60-3583f36c24cc devid 1 transid 8 /dev/loop3 scanned by syz.3.3678 (14227)
[  462.557102][T14227] BTRFS info (device loop3): first mount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc
[  462.589959][T14227] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  462.607704][T14227] BTRFS info (device loop3): using free space tree
[  462.887176][T14227] BTRFS info (device loop3): enabling ssd optimizations
[  462.902663][T14227] BTRFS info (device loop3): auto enabling async discard
[  463.104523][T14204] loop0: detected capacity change from 0 to 32768
[  463.139025][T14204] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  463.148229][ T5787] BTRFS info (device loop3): last unmount of filesystem ed4422de-dbc1-4dc1-8d60-3583f36c24cc
[  463.164718][T14204] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  463.281941][T14204] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  463.342161][ T5869] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  463.348984][ T5869] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  463.579804][ T5869] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 242ms
[  463.605906][ T5869] gfs2: fsid=syz:syz.0: jid=0: Done
[  463.621683][T14204] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  463.792120][T14231] loop1: detected capacity change from 0 to 32768
[  463.832616][T14231] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[  463.857476][T14231] CPU: 1 PID: 14231 Comm: syz.1.3679 Not tainted 6.6.101-syzkaller #0
[  463.865872][T14231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  463.875987][T14231] Call Trace:
[  463.879282][T14231]  <TASK>
[  463.882231][T14231]  dump_stack_lvl+0x16c/0x230
[  463.886915][T14231]  ? show_regs_print_info+0x20/0x20
[  463.892120][T14231]  ? load_image+0x3b0/0x3b0
[  463.896729][T14231]  sysfs_create_dir_ns+0x256/0x280
[  463.901853][T14231]  ? sysfs_warn_dup+0xa0/0xa0
[  463.906620][T14231]  ? do_raw_spin_unlock+0x121/0x230
[  463.911820][T14231]  kobject_add_internal+0x6b8/0xc70
[  463.917025][T14231]  kobject_init_and_add+0x126/0x190
[  463.922224][T14231]  ? lockdep_softirqs_off+0x430/0x430
[  463.927596][T14231]  ? kobject_add+0x220/0x220
[  463.932198][T14231]  ? __init_swait_queue_head+0xa9/0x150
[  463.937745][T14231]  gfs2_sys_fs_add+0x238/0x470
[  463.942518][T14231]  ? gfs2_recover_set+0x250/0x250
[  463.947545][T14231]  ? apply_workqueue_attrs+0x180/0x180
[  463.953015][T14231]  gfs2_fill_super+0x1323/0x1f80
[  463.958054][T14231]  ? gfs2_reconfigure+0xb10/0xb10
[  463.963087][T14231]  ? setup_bdev_super+0x56b/0x660
[  463.968192][T14231]  get_tree_bdev+0x3e4/0x510
[  463.972774][T14231]  ? end_current_label_crit_section+0x170/0x170
[  463.979013][T14231]  ? gfs2_reconfigure+0xb10/0xb10
[  463.984040][T14231]  ? setup_bdev_super+0x660/0x660
[  463.989067][T14231]  gfs2_get_tree+0x51/0x1e0
[  463.993585][T14231]  vfs_get_tree+0x8c/0x280
[  463.998001][T14231]  do_new_mount+0x24b/0xa40
[  464.002507][T14231]  __se_sys_mount+0x2da/0x3c0
[  464.007202][T14231]  ? __x64_sys_mount+0xc0/0xc0
[  464.011972][T14231]  ? lockdep_hardirqs_on+0x98/0x150
[  464.017167][T14231]  ? __x64_sys_mount+0x20/0xc0
[  464.021924][T14231]  do_syscall_64+0x55/0xb0
[  464.026345][T14231]  ? clear_bhb_loop+0x40/0x90
[  464.031648][T14231]  ? clear_bhb_loop+0x40/0x90
[  464.036404][T14231]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  464.042326][T14231] RIP: 0033:0x7faad0b9038a
[  464.046992][T14231] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  464.066615][T14231] RSP: 002b:00007faad1aa3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  464.075032][T14231] RAX: ffffffffffffffda RBX: 00007faad1aa3ef0 RCX: 00007faad0b9038a
[  464.082998][T14231] RDX: 000020000003b280 RSI: 000020000003b2c0 RDI: 00007faad1aa3eb0
[  464.091155][T14231] RBP: 000020000003b280 R08: 00007faad1aa3ef0 R09: 0000000000000000
[  464.099142][T14231] R10: 0000000000000000 R11: 0000000000000246 R12: 000020000003b2c0
[  464.107116][T14231] R13: 00007faad1aa3eb0 R14: 000000000003b273 R15: 000020000003b300
[  464.115105][T14231]  </TASK>
[  464.131158][T14231] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[  464.159409][T14231] gfs2: fsid=syz:syz: error -17 adding sysfs files
[  464.587756][T14256] loop1: detected capacity change from 0 to 4096
[  464.643878][T14256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  464.775755][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.594983][T14260] loop1: detected capacity change from 0 to 32768
[  465.636008][T14260] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.3683 (14260)
[  465.761953][T14260] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  465.811146][T14260] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  465.869693][T14260] BTRFS info (device loop1): using free space tree
[  466.059204][T14260] BTRFS info (device loop1): enabling ssd optimizations
[  466.102219][T14260] BTRFS info (device loop1): auto enabling async discard
[  466.324375][ T5784] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  466.737708][T14284] loop1: detected capacity change from 0 to 2048
[  466.842178][T14284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  466.930569][T14284] ext4 filesystem being mounted at /897/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  467.025152][T14279] loop0: detected capacity change from 0 to 32768
[  467.084814][T14279] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz"
[  467.132661][T14279] dlm: no local IP address has been set
[  467.139447][T14279] dlm: cannot start dlm midcomms -107
[  467.151827][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.178679][T14279] gfs2: fsid=syz:syz: dlm_new_lockspace error -107
[  467.331144][T14290] loop1: detected capacity change from 0 to 1024
[  467.445448][T14282] loop2: detected capacity change from 0 to 32768
[  467.481266][T14282] BTRFS: device fsid d4515e72-4b5f-44ec-805d-b3edf811e7f1 devid 1 transid 8 /dev/loop2 scanned by syz.2.3685 (14282)
[  467.555734][T14282] BTRFS info (device loop2): first mount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1
[  467.615922][T14282] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  467.663322][T14282] BTRFS info (device loop2): using free space tree
[  467.770524][T14282] BTRFS info (device loop2): enabling ssd optimizations
[  467.777845][T14282] BTRFS info (device loop2): auto enabling async discard
[  467.982175][ T5794] BTRFS info (device loop2): last unmount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1
[  468.312915][ T5800] BTRFS: device fsid d4515e72-4b5f-44ec-805d-b3edf811e7f1 devid 1 transid 9 /dev/loop2 scanned by udevd (5800)
[  468.374063][T14294] loop0: detected capacity change from 0 to 32768
[  468.392696][T14292] loop3: detected capacity change from 0 to 32768
[  468.431570][T14294] BTRFS: device fsid a4d06b90-61a4-49cd-bf5f-2183c3574322 devid 1 transid 8 /dev/loop0 scanned by syz.0.3689 (14294)
[  468.496193][T14292] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 8 /dev/loop3 scanned by syz.3.3688 (14292)
[  468.523191][T14294] BTRFS info (device loop0): first mount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322
[  468.557441][T14294] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  468.579323][T14294] BTRFS info (device loop0): using free space tree
[  468.591766][T14292] BTRFS info (device loop3): first mount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a
[  468.662033][T14292] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  468.724593][T14292] BTRFS info (device loop3): using free space tree
[  468.782344][T14294] BTRFS info (device loop0): enabling ssd optimizations
[  468.796432][T14294] BTRFS info (device loop0): auto enabling async discard
[  468.883553][T14301] loop1: detected capacity change from 0 to 32768
[  468.926023][T14292] BTRFS info (device loop3): enabling ssd optimizations
[  468.970430][T14301] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  468.979104][ T5791] BTRFS info (device loop0): last unmount of filesystem a4d06b90-61a4-49cd-bf5f-2183c3574322
[  468.982554][T14292] BTRFS info (device loop3): auto enabling async discard
[  469.037725][T14301] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  469.131177][T14301] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  469.200254][ T5852] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  469.210260][T14354] loop2: detected capacity change from 0 to 2368
[  469.222760][ T5852] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  469.426861][ T5787] BTRFS info (device loop3): last unmount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a
[  469.596511][ T5852] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 392ms
[  469.636574][ T5852] gfs2: fsid=syz:syz.0: jid=0: Done
[  469.641952][T14301] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  471.626075][T14366] loop1: detected capacity change from 0 to 21
[  471.682086][T14366] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  471.895484][T14368] loop1: detected capacity change from 0 to 2
[  471.929424][T14368] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  472.000260][ T5800] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  472.828291][T14370] loop1: detected capacity change from 0 to 32768
[  472.865398][T14370] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop1 scanned by syz.1.3700 (14370)
[  472.902411][T14370] BTRFS info (device loop1): first mount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3
[  472.923460][T14370] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  472.962292][T14370] BTRFS info (device loop1): using free space tree
[  473.147510][T14370] BTRFS info (device loop1): enabling ssd optimizations
[  473.154569][T14370] BTRFS info (device loop1): auto enabling async discard
[  473.367147][ T5784] BTRFS info (device loop1): last unmount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3
[  473.402232][T14372] loop0: detected capacity change from 0 to 32768
[  473.462422][T14372] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz.0.3701 (14372)
[  473.515373][T14372] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  473.544884][T14372] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  473.565654][T14372] BTRFS info (device loop0): using free space tree
[  473.725842][T14372] BTRFS info (device loop0): enabling ssd optimizations
[  473.737746][T14372] BTRFS info (device loop0): auto enabling async discard
[  474.071294][ T5791] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  474.244852][T14391] loop3: detected capacity change from 0 to 32768
[  474.280623][T14391] BTRFS: device fsid 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 devid 1 transid 8 /dev/loop3 scanned by syz.3.3702 (14391)
[  474.381881][T14391] BTRFS info (device loop3): first mount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268
[  474.433007][T14391] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  474.451989][T14391] BTRFS info (device loop3): using free space tree
[  474.722014][T14391] BTRFS info (device loop3): enabling ssd optimizations
[  474.764059][T14391] BTRFS info (device loop3): auto enabling async discard
[  475.004716][ T5787] BTRFS info (device loop3): last unmount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268
[  476.030826][T14436] loop0: detected capacity change from 0 to 32768
[  476.078684][T14436] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  476.122402][T14436] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  476.190935][T14436] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  476.239902][ T5852] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  476.270632][ T5852] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  476.438310][ T5852] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 176ms
[  476.457752][ T5852] gfs2: fsid=syz:syz.0: jid=0: Done
[  476.470167][T14436] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  476.684836][T14442] loop3: detected capacity change from 0 to 32768
[  476.719061][T14442] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[  476.742474][T14442] CPU: 0 PID: 14442 Comm: syz.3.3709 Not tainted 6.6.101-syzkaller #0
[  476.750786][T14442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  476.760867][T14442] Call Trace:
[  476.764165][T14442]  <TASK>
[  476.767117][T14442]  dump_stack_lvl+0x16c/0x230
[  476.771997][T14442]  ? show_regs_print_info+0x20/0x20
[  476.777335][T14442]  ? load_image+0x3b0/0x3b0
[  476.781914][T14442]  sysfs_create_dir_ns+0x256/0x280
[  476.787071][T14442]  ? sysfs_warn_dup+0xa0/0xa0
[  476.791874][T14442]  ? do_raw_spin_unlock+0x121/0x230
[  476.797106][T14442]  kobject_add_internal+0x6b8/0xc70
[  476.802382][T14442]  kobject_init_and_add+0x126/0x190
[  476.807612][T14442]  ? lockdep_softirqs_off+0x430/0x430
[  476.813130][T14442]  ? kobject_add+0x220/0x220
[  476.817840][T14442]  ? __init_swait_queue_head+0xa9/0x150
[  476.823412][T14442]  gfs2_sys_fs_add+0x238/0x470
[  476.828209][T14442]  ? gfs2_recover_set+0x250/0x250
[  476.833274][T14442]  ? apply_workqueue_attrs+0x180/0x180
[  476.838775][T14442]  gfs2_fill_super+0x1323/0x1f80
[  476.843762][T14442]  ? gfs2_reconfigure+0xb10/0xb10
[  476.848825][T14442]  ? setup_bdev_super+0x56b/0x660
[  476.853878][T14442]  get_tree_bdev+0x3e4/0x510
[  476.858614][T14442]  ? end_current_label_crit_section+0x170/0x170
[  476.864889][T14442]  ? gfs2_reconfigure+0xb10/0xb10
[  476.869961][T14442]  ? setup_bdev_super+0x660/0x660
[  476.875023][T14442]  gfs2_get_tree+0x51/0x1e0
[  476.879594][T14442]  vfs_get_tree+0x8c/0x280
[  476.884327][T14442]  do_new_mount+0x24b/0xa40
[  476.888874][T14442]  __se_sys_mount+0x2da/0x3c0
[  476.893591][T14442]  ? __x64_sys_mount+0xc0/0xc0
[  476.898376][T14442]  ? lockdep_hardirqs_on+0x98/0x150
[  476.903603][T14442]  ? __x64_sys_mount+0x20/0xc0
[  476.908393][T14442]  do_syscall_64+0x55/0xb0
[  476.912926][T14442]  ? clear_bhb_loop+0x40/0x90
[  476.917617][T14442]  ? clear_bhb_loop+0x40/0x90
[  476.922318][T14442]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  476.928250][T14442] RIP: 0033:0x7fb807f9038a
[  476.932695][T14442] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  476.952421][T14442] RSP: 002b:00007fb808d82e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  476.960871][T14442] RAX: ffffffffffffffda RBX: 00007fb808d82ef0 RCX: 00007fb807f9038a
[  476.968962][T14442] RDX: 0000200000013400 RSI: 0000200000013440 RDI: 00007fb808d82eb0
[  476.976978][T14442] RBP: 0000200000013400 R08: 00007fb808d82ef0 R09: 0000000000000000
[  476.985066][T14442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000013440
[  476.993078][T14442] R13: 00007fb808d82eb0 R14: 00000000000133e6 R15: 0000200000013480
[  477.001370][T14442]  </TASK>
[  477.099379][T14442] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[  477.127759][T14442] gfs2: fsid=syz:syz: error -17 adding sysfs files
[  477.226130][T14452] loop1: detected capacity change from 0 to 1024
[  477.593504][T14454] loop3: detected capacity change from 0 to 2048
[  477.617061][T14456] loop1: detected capacity change from 0 to 64
[  477.882898][T14460] loop1: detected capacity change from 0 to 512
[  478.130988][T14464] loop1: detected capacity change from 0 to 128
[  478.180872][T14462] loop3: detected capacity change from 0 to 8192
[  478.435253][T14468] loop1: detected capacity change from 0 to 256
[  478.485694][T14451] loop2: detected capacity change from 0 to 32768
[  478.548347][T14451] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  478.591405][T14451] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  478.687134][T14471] loop3: detected capacity change from 0 to 128
[  478.815191][T14451] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 3ms
[  478.846343][    T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  478.857944][    T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  479.008479][    T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 158ms
[  479.026426][    T8] gfs2: fsid=syz:syz.0: jid=0: Done
[  479.036084][T14451] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  481.942014][T14481] loop0: detected capacity change from 0 to 4096
[  481.982077][T14482] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  482.339565][T14484] loop0: detected capacity change from 0 to 8192
[  482.388591][T14485] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  482.875915][T14489] loop1: detected capacity change from 0 to 8192
[  482.921583][T14492] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  483.056749][T14491] loop3: detected capacity change from 0 to 4096
[  483.441840][T14487] loop0: detected capacity change from 0 to 32768
[  483.473762][T14494] loop1: detected capacity change from 0 to 8192
[  483.495889][T14496] loop3: detected capacity change from 0 to 4096
[  483.516088][T14494] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  483.536432][T14496] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  483.731186][T14498] loop0: detected capacity change from 0 to 256
[  484.195929][T14506] loop3: detected capacity change from 0 to 2048
[  484.210884][T14502] loop1: detected capacity change from 0 to 8192
[  484.238663][T14502] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  484.266674][T14507] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  484.324500][T14505] loop0: detected capacity change from 0 to 4096
[  484.372821][T14505] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  485.201919][T14515] loop2: detected capacity change from 0 to 4096
[  485.214331][T14509] loop1: detected capacity change from 0 to 32768
[  485.238454][T14509] (syz.1.3736,14509,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  485.258038][T14513] loop0: detected capacity change from 0 to 32768
[  485.273484][T14509] (syz.1.3736,14509,1):ocfs2_fill_super:1178 ERROR: status = -22
[  485.279616][T14515] ntfs: volume version 3.1.
[  485.305298][T14513] (syz.0.3738,14513,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  485.356055][T14513] (syz.0.3738,14513,1):ocfs2_fill_super:1178 ERROR: status = -22
[  485.467909][T14511] loop3: detected capacity change from 0 to 32768
[  485.515878][T14511] (syz.3.3737,14511,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  485.554771][T14511] (syz.3.3737,14511,0):ocfs2_fill_super:1178 ERROR: status = -22
[  485.739099][T14521] loop0: detected capacity change from 0 to 2048
[  485.905804][T14524] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  486.341830][T14526] loop0: detected capacity change from 0 to 4096
[  486.480976][T14526] ntfs: volume version 3.1.
[  486.510924][T14520] loop2: detected capacity change from 0 to 32768
[  486.539777][T14520] (syz.2.3741,14520,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  486.571937][T14520] (syz.2.3741,14520,1):ocfs2_fill_super:1178 ERROR: status = -22
[  486.754527][T14523] loop3: detected capacity change from 0 to 32768
[  486.775468][T14523] (syz.3.3743,14523,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  486.823357][T14523] (syz.3.3743,14523,1):ocfs2_fill_super:1178 ERROR: status = -22
[  487.018964][T14530] loop2: detected capacity change from 0 to 4096
[  487.164837][T14530] ntfs: volume version 3.1.
[  487.558907][T14534] loop2: detected capacity change from 0 to 4096
[  487.663393][T14529] loop0: detected capacity change from 0 to 32768
[  487.693493][T14529] (syz.0.3745,14529,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  487.716419][T14529] (syz.0.3745,14529,1):ocfs2_fill_super:1178 ERROR: status = -22
[  488.626387][T14532] loop3: detected capacity change from 0 to 65536
[  488.643961][T14532] (syz.3.3747,14532,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  488.684139][T14538] loop0: detected capacity change from 0 to 32768
[  488.690822][T14532] (syz.3.3747,14532,0):ocfs2_fill_super:1178 ERROR: status = -22
[  488.710645][T14538] (syz.0.3750,14538,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  488.771467][T14538] (syz.0.3750,14538,1):ocfs2_fill_super:1178 ERROR: status = -22
[  489.480857][T14536] loop2: detected capacity change from 0 to 65536
[  489.507509][T14536] (syz.2.3749,14536,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  489.541285][T14536] (syz.2.3749,14536,1):ocfs2_fill_super:1178 ERROR: status = -22
[  489.646559][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  489.652987][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  489.867947][T14542] loop0: detected capacity change from 0 to 32768
[  489.877705][T14542] (syz.0.3752,14542,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  489.931027][T14542] (syz.0.3752,14542,1):ocfs2_fill_super:1178 ERROR: status = -22
[  492.582545][T14548] loop0: detected capacity change from 0 to 131072
[  492.625344][T14548] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  492.676675][T14548] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  492.752053][T14548] REISERFS (device loop0): using ordered data mode
[  492.776148][T14548] reiserfs: using flush barriers
[  492.804502][T14548] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30
[  492.873648][T14548] REISERFS (device loop0): checking transaction log (loop0)
[  493.764601][T14555] loop2: detected capacity change from 0 to 16384
[  493.811500][T14555] REISERFS warning (device loop2): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop2, block 16, size 4096)
[  493.863304][T14550] loop3: detected capacity change from 0 to 65536
[  493.880241][T14555] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2
[  494.120128][T14557] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  497.051576][T14563] syz.1.3761: attempt to access beyond end of device
[  497.051576][T14563] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0
[  497.099089][T14563] SQUASHFS error: Failed to read block 0x0: -5
[  497.117947][T14563] unable to read squashfs_super_block
[  497.645232][T14567] loop2: detected capacity change from 0 to 8
[  497.771219][T14548] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2
[  497.788155][T14548] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 15767. Fsck?
[  497.801120][T14548] REISERFS (device loop0): Remounting filesystem read-only
[  497.809740][T14548] REISERFS error (device loop0): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD]
[  497.852891][T14548] REISERFS warning (device loop0):  reiserfs_fill_super: corrupt root inode, run fsck
[  497.985597][T14569] loop2: detected capacity change from 0 to 1024
[  498.040983][T14569] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  498.330174][T14571] loop2: detected capacity change from 0 to 128
[  498.354850][T14571] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  498.380427][T14571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  498.615970][T14573] loop2: detected capacity change from 0 to 2048
[  498.703792][T14573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  498.742538][T14575] loop3: detected capacity change from 0 to 256
[  498.766486][T14575] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  498.793931][T14575] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  498.824235][T14575] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  498.848948][T14575] UDF-fs: Scanning with blocksize 512 failed
[  498.884363][T14575] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  498.915716][T14575] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  498.965965][T14577] loop2: detected capacity change from 0 to 128
[  499.024378][T14577] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  499.083623][T14577] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  499.125353][T14577] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  499.145558][T14579] loop3: detected capacity change from 0 to 128
[  499.160542][T14577] UDF-fs: Scanning with blocksize 512 failed
[  499.197274][T14577] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  499.228498][T14577] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  499.259762][T14577] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  499.281827][T14577] UDF-fs: Scanning with blocksize 1024 failed
[  499.314058][T14577] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  499.352550][T14581] loop3: detected capacity change from 0 to 512
[  499.364485][T14577] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  499.389098][T14577] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  499.396822][T14577] UDF-fs: Scanning with blocksize 2048 failed
[  499.435453][T14577] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  499.474944][T14577] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  499.501892][T14577] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  499.509594][T14577] UDF-fs: Scanning with blocksize 4096 failed
[  499.534686][T14577] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  499.549742][T14583] loop3: detected capacity change from 0 to 128
[  499.776899][T14586] loop3: detected capacity change from 0 to 128
[  499.794295][T14587] loop2: detected capacity change from 0 to 128
[  500.057075][T14589] loop3: detected capacity change from 0 to 128
[  500.087940][T14589] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  500.114260][T14565] loop1: detected capacity change from 0 to 131072
[  500.125220][T14589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  500.126124][T14591] loop2: detected capacity change from 0 to 512
[  500.155021][T14565] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  500.169918][T14565] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  500.179465][T14565] REISERFS (device loop1): using ordered data mode
[  500.185996][T14565] reiserfs: using flush barriers
[  500.199282][T14565] REISERFS (device loop1): journal params: device loop1, size 15748, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30
[  500.277675][T14565] syz.1.3762: vmalloc error: size 2269184, failed to allocated page array size 4432, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  500.339419][T14565] CPU: 1 PID: 14565 Comm: syz.1.3762 Not tainted 6.6.101-syzkaller #0
[  500.347639][T14565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  500.357729][T14565] Call Trace:
[  500.361038][T14565]  <TASK>
[  500.363987][T14565]  dump_stack_lvl+0x16c/0x230
[  500.368695][T14565]  ? show_regs_print_info+0x20/0x20
[  500.374030][T14565]  ? load_image+0x3b0/0x3b0
[  500.378570][T14565]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  500.385013][T14565]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  500.391541][T14565]  warn_alloc+0x210/0x300
[  500.395892][T14565]  ? zone_watermark_ok_safe+0x230/0x230
[  500.401452][T14565]  ? _raw_spin_unlock+0x28/0x40
[  500.406320][T14565]  ? __kasan_kmalloc+0x8f/0xa0
[  500.411136][T14565]  __vmalloc_node_range+0x662/0x1320
[  500.416458][T14565]  ? __asan_memset+0x22/0x40
[  500.421049][T14565]  ? free_vm_area+0x50/0x50
[  500.425561][T14565]  ? lockdep_softirqs_off+0x430/0x430
[  500.430929][T14565]  ? free_zapped_rcu+0x240/0x240
[  500.436556][T14565]  ? allocate_cnodes+0x3d/0x3b0
[  500.441412][T14565]  vzalloc+0x79/0x90
[  500.445304][T14565]  ? allocate_cnodes+0x3d/0x3b0
[  500.450192][T14565]  allocate_cnodes+0x3d/0x3b0
[  500.454872][T14565]  journal_init+0x17f6/0x2390
[  500.459656][T14565]  reiserfs_fill_super+0xe95/0x2340
[  500.464898][T14565]  ? reiserfs_kill_sb+0x140/0x140
[  500.469938][T14565]  ? down_write+0x162/0x1f0
[  500.474449][T14565]  ? down_read_killable+0x340/0x340
[  500.479711][T14565]  ? setup_bdev_super+0x56b/0x660
[  500.484736][T14565]  mount_bdev+0x22b/0x2d0
[  500.489061][T14565]  ? reiserfs_kill_sb+0x140/0x140
[  500.494095][T14565]  ? get_tree_bdev+0x510/0x510
[  500.498858][T14565]  ? vfs_parse_fs_param+0x420/0x420
[  500.504068][T14565]  legacy_get_tree+0xea/0x180
[  500.508830][T14565]  ? remove_save_link+0x3c0/0x3c0
[  500.514042][T14565]  vfs_get_tree+0x8c/0x280
[  500.518454][T14565]  do_new_mount+0x24b/0xa40
[  500.523052][T14565]  __se_sys_mount+0x2da/0x3c0
[  500.527730][T14565]  ? __x64_sys_mount+0xc0/0xc0
[  500.532508][T14565]  ? lockdep_hardirqs_on+0x98/0x150
[  500.537723][T14565]  ? __x64_sys_mount+0x20/0xc0
[  500.542485][T14565]  do_syscall_64+0x55/0xb0
[  500.546894][T14565]  ? clear_bhb_loop+0x40/0x90
[  500.552012][T14565]  ? clear_bhb_loop+0x40/0x90
[  500.556691][T14565]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  500.562688][T14565] RIP: 0033:0x7faad0b9038a
[  500.567103][T14565] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  500.586883][T14565] RSP: 002b:00007faad1aa3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  500.595324][T14565] RAX: ffffffffffffffda RBX: 00007faad1aa3ef0 RCX: 00007faad0b9038a
[  500.603291][T14565] RDX: 000020000000ffc0 RSI: 0000200000010000 RDI: 00007faad1aa3eb0
[  500.611279][T14565] RBP: 000020000000ffc0 R08: 00007faad1aa3ef0 R09: 0000000000000000
[  500.619248][T14565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000010000
[  500.627298][T14565] R13: 00007faad1aa3eb0 R14: 000000000000ffb7 R15: 0000200000010040
[  500.635289][T14565]  </TASK>
[  500.669431][T14596] loop3: detected capacity change from 0 to 256
[  500.696074][T14565] Mem-Info:
[  500.699361][T14565] active_anon:34483 inactive_anon:0 isolated_anon:0
[  500.699361][T14565]  active_file:7938 inactive_file:41109 isolated_file:0
[  500.699361][T14565]  unevictable:768 dirty:265 writeback:0
[  500.699361][T14565]  slab_reclaimable:12212 slab_unreclaimable:94530
[  500.699361][T14565]  mapped:25457 shmem:26843 pagetables:643
[  500.699361][T14565]  sec_pagetables:0 bounce:0
[  500.699361][T14565]  kernel_misc_reclaimable:0
[  500.699361][T14565]  free:1318821 free_pcp:11819 free_cma:0
[  500.759214][T14594] loop2: detected capacity change from 0 to 512
[  500.883137][T14565] Node 0 active_anon:126632kB inactive_anon:0kB active_file:31752kB inactive_file:164736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101828kB dirty:1056kB writeback:0kB shmem:94836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11000kB pagetables:2572kB sec_pagetables:0kB all_unreclaimable? no
[  501.047640][T14598] loop3: detected capacity change from 0 to 128
[  501.068117][T14565] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  501.106478][T14600] loop2: detected capacity change from 0 to 128
[  501.153213][T14565] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  501.183080][T14600] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  501.213728][T14565] lowmem_reserve[]: 0 2525 2526 2526 2526
[  501.227675][T14600] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  501.290806][T14565] Node 0 DMA32 free:1384840kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:104080kB inactive_anon:0kB active_file:31752kB inactive_file:163420kB unevictable:1536kB writepending:1056kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:39436kB local_pcp:20356kB free_cma:0kB
[  501.368064][T14565] lowmem_reserve[]: 0 0 1 1 1
[  501.378505][T14565] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  501.424307][T14565] lowmem_reserve[]: 0 0 0 0 0
[  501.458465][T14565] Node 1 Normal free:3904324kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12608kB local_pcp:3840kB free_cma:0kB
[  501.461888][T14606] loop2: detected capacity change from 0 to 512
[  501.493250][T14565] lowmem_reserve[]: 0 0 0 0 0
[  501.499260][T14565] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  501.559706][T14605] loop0: detected capacity change from 0 to 4096
[  501.562864][T14565] Node 0 DMA32: 542*4kB (UM) 837*8kB (UME) 756*16kB (UM) 514*32kB (UME) 278*64kB (UME) 166*128kB (UM) 76*256kB (UM) 32*512kB (UME) 23*1024kB (UME) 2*2048kB (ME) 304*4096kB (M) = 1385120kB
[  501.592877][T14605] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  501.609988][T14565] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  501.620136][T14605] UDF-fs: Scanning with blocksize 512 failed
[  501.633781][T14565] Node 1 Normal: 229*4kB (UME) 64*8kB (UME) 47*16kB (UME) 156*32kB (UME) 37*64kB (UME) 10*128kB (UE) 3*256kB (UE) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 949*4096kB (M) = 3904324kB
[  501.660260][T14565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  501.672560][T14565] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  501.683453][T14565] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  501.693415][T14565] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  501.720267][T14565] 66547 total pagecache pages
[  501.725330][T14605] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  501.777273][T14565] 0 pages in swap cache
[  501.786255][T14565] Free swap  = 124996kB
[  501.801779][T14565] Total swap = 124996kB
[  501.813203][T14565] 2097051 pages RAM
[  501.819443][T14565] 0 pages HighMem/MovableOnly
[  501.826376][T14565] 416137 pages reserved
[  501.830803][T14565] 0 pages cma reserved
[  501.851631][T14565] REISERFS warning (device loop1): journal-2004 journal_init: Journal cnode memory allocation failed (2267712 bytes). Journal is too large for available memory. Usually this is due to a journal that is too large.
[  501.920572][T14565] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  502.236595][T14610] loop0: detected capacity change from 0 to 16384
[  502.273106][T14610] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  502.280536][T14610] UDF-fs: Scanning with blocksize 512 failed
[  502.317608][T14610] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  502.326386][T14610] UDF-fs: Scanning with blocksize 1024 failed
[  502.359151][T14610] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  502.370177][T14610] UDF-fs: Scanning with blocksize 2048 failed
[  502.394339][T14610] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  502.616025][T14612] loop0: detected capacity change from 0 to 512
[  502.943838][T14614] loop0: detected capacity change from 0 to 8
[  503.053691][T14616] loop1: detected capacity change from 0 to 24
[  503.068100][T14616] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  503.113695][T14616] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  503.201631][T14618] loop0: detected capacity change from 0 to 3
[  503.225773][T14618] syz.0.3788: attempt to access beyond end of device
[  503.225773][T14618] loop0: rw=2048, sector=0, nr_sectors = 8 limit=3
[  503.275384][T14618] SQUASHFS error: Failed to read block 0x0: -5
[  503.289900][T14618] unable to read squashfs_super_block
[  503.975189][T14620] loop1: detected capacity change from 0 to 32768
[  504.204294][T14624] loop1: detected capacity change from 0 to 2048
[  504.256809][T14624]  loop1: p1 p2 p3
[  504.293907][T14622] loop0: detected capacity change from 0 to 32768
[  504.332868][ T5158]  loop1: p1 p2 p3
[  504.361053][T14622] XFS (loop0): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  504.615340][T14622] XFS (loop0): Ending clean mount
[  504.718321][ T5800] udevd[5800]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  504.734719][ T6260] udevd[6260]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  504.759630][ T5907] udevd[5907]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  504.776969][ T5791] XFS (loop0): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415
[  504.836595][ T5800] udevd[5800]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  504.850624][ T6260] udevd[6260]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  504.864934][ T5907] udevd[5907]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  505.034837][T14638] loop0: detected capacity change from 0 to 128
[  505.078475][T14638] vxfs: WRONG superblock magic 7b3185b5 at 1
[  505.123493][T14638] vxfs: WRONG superblock magic 7b318cb5 at 8
[  505.139687][T14638] vxfs: can't find superblock.
[  505.730515][T14640] loop0: detected capacity change from 0 to 16384
[  505.757795][T14640] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  505.765231][T14640] UDF-fs: Scanning with blocksize 512 failed
[  505.785446][T14640] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  505.805890][T14640] UDF-fs: Scanning with blocksize 1024 failed
[  505.812966][T14640] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  505.827881][T14640] UDF-fs: Scanning with blocksize 2048 failed
[  505.854917][T14640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  506.235564][T14642] loop2: detected capacity change from 0 to 32768
[  506.304841][T14642] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  506.425147][T14636] loop3: detected capacity change from 0 to 65536
[  506.468935][T14642] XFS (loop2): Ending clean mount
[  506.554459][T14636] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  506.614953][T14636] XFS (loop3): Ending clean mount
[  506.633934][ T5794] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  506.743675][ T5787] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  507.554733][T14664] loop3: detected capacity change from 0 to 128
[  508.729190][T14668] loop1: detected capacity change from 0 to 32768
[  508.762174][T14644] loop0: detected capacity change from 0 to 131072
[  508.781142][T14644] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  508.799841][T14644] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  508.809247][T14668]  loop1: p1 p3 < p5 p6 >
[  508.826133][T14644] REISERFS (device loop0): using ordered data mode
[  508.847637][T14644] reiserfs: using flush barriers
[  508.866265][T14644] REISERFS (device loop0): journal params: device loop0, size 15748, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  508.892683][T14644] REISERFS warning (device loop0): journal-2004 journal_init: Journal cnode memory allocation failed (2267712 bytes). Journal is too large for available memory. Usually this is due to a journal that is too large.
[  508.985843][T14644] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  509.188343][T14666] loop3: detected capacity change from 0 to 65536
[  509.278318][T14666] XFS (loop3): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5
[  509.302311][T14678] loop0: detected capacity change from 0 to 128
[  509.339434][ T6260] udevd[6260]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  509.353491][T10250] udevd[10250]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[  509.366729][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  509.388571][ T5800] udevd[5800]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  509.573265][T14666] XFS (loop3): Ending clean mount
[  509.684322][ T5787] XFS (loop3): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5
[  510.849363][T14671] loop1: detected capacity change from 0 to 65536
[  510.921518][T14671] XFS (loop1): Deprecated V4 format (crc=0) not supported by kernel.
[  513.867335][T14694] loop1: detected capacity change from 0 to 131072
[  513.927873][T14694] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop1": -EINTR
[  514.096836][T14702] loop3: detected capacity change from 0 to 2048
[  515.033877][T14710] x_tables: duplicate entry at hook 3
[  516.488708][T14719] loop2: detected capacity change from 0 to 32768
[  516.561761][T14719] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  516.699446][T14731] loop0: detected capacity change from 0 to 64
[  516.812252][T14719] XFS (loop2): Ending clean mount
[  516.959011][ T5794] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  517.120183][T14733] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3820'.
[  517.416268][T14737] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  517.582216][T14742] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3824'.
[  518.271603][T14771] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  518.639952][T14789] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  518.697469][T14789] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  518.798780][T14797] macvtap0: entered allmulticast mode
[  518.809273][T14797] veth0_macvtap: entered allmulticast mode
[  518.984366][T14805] loop2: detected capacity change from 0 to 16
[  519.030626][T14805] erofs: (device loop2): mounted with root inode @ nid 36.
[  519.069113][T14805] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[  519.089795][T14808] syz.3.3857 uses obsolete (PF_INET,SOCK_PACKET)
[  519.090721][T14805] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  519.122766][T14805] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[  519.132793][T14805] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  519.143543][T14805] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 72 of nid 36
[  519.342709][T14819] loop2: detected capacity change from 0 to 764
[  519.412583][T14820] netlink: 'syz.0.3862': attribute type 5 has an invalid length.
[  519.775099][T14838] loop0: detected capacity change from 0 to 64
[  519.782552][T14837] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3870'.
[  520.223033][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3880'.
[  520.353117][T14860] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3882'.
[  520.602944][T14875] loop0: detected capacity change from 0 to 128
[  520.660325][T14875] FAT-fs (loop0): Directory bread(block 162) failed
[  520.667008][T14875] FAT-fs (loop0): Directory bread(block 163) failed
[  520.703991][T14875] FAT-fs (loop0): Directory bread(block 164) failed
[  520.724005][T14875] FAT-fs (loop0): Directory bread(block 165) failed
[  520.751402][T14875] FAT-fs (loop0): Directory bread(block 166) failed
[  520.766450][T14875] FAT-fs (loop0): Directory bread(block 167) failed
[  520.777499][T14875] FAT-fs (loop0): Directory bread(block 168) failed
[  520.795172][T14875] FAT-fs (loop0): Directory bread(block 169) failed
[  520.845947][T14875] FAT-fs (loop0): Directory bread(block 162) failed
[  520.886319][T14875] FAT-fs (loop0): Directory bread(block 163) failed
[  520.895579][T14875] syz.0.3888: attempt to access beyond end of device
[  520.895579][T14875] loop0: rw=3, sector=226, nr_sectors = 6 limit=128
[  520.940351][T14889] loop1: detected capacity change from 0 to 256
[  520.942726][T14875] syz.0.3888: attempt to access beyond end of device
[  520.942726][T14875] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128
[  520.997140][T14889] FAT-fs (loop1): Directory bread(block 64) failed
[  521.026257][T14889] FAT-fs (loop1): Directory bread(block 65) failed
[  521.048489][T14889] FAT-fs (loop1): Directory bread(block 66) failed
[  521.055104][T14889] FAT-fs (loop1): Directory bread(block 67) failed
[  521.090961][T14889] FAT-fs (loop1): Directory bread(block 68) failed
[  521.123803][T14889] FAT-fs (loop1): Directory bread(block 69) failed
[  521.147848][T14889] FAT-fs (loop1): Directory bread(block 70) failed
[  521.194025][T14889] FAT-fs (loop1): Directory bread(block 71) failed
[  521.207068][T14889] FAT-fs (loop1): Directory bread(block 72) failed
[  521.221111][T14889] FAT-fs (loop1): Directory bread(block 73) failed
[  521.316149][T14898] AppArmor: change_hat: Invalid input '0'
[  521.850486][ T5852] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  521.919637][T14925] loop2: detected capacity change from 0 to 256
[  521.925670][T14928] netlink: 'syz.0.3916': attribute type 39 has an invalid length.
[  521.934866][T14928] netlink: 'syz.0.3916': attribute type 4 has an invalid length.
[  521.953522][T14928] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3916'.
[  521.967289][T14925] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  521.980035][T14925] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  522.030078][T14925] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  522.068695][T14928] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  522.075341][ T5852] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  522.149394][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.182965][ T5852] usb 2-1: Product: syz
[  522.187192][ T5852] usb 2-1: Manufacturer: syz
[  522.209726][ T5852] usb 2-1: SerialNumber: syz
[  522.230661][ T5852] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  522.251539][ T5870] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  522.858246][ T5838] usb 2-1: USB disconnect, device number 9
[  522.913775][T14953] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3927'.
[  522.949222][T14953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3927'.
[  522.968354][   T27] audit: type=1400 audit(1754619944.805:18): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14954 comm="syz.3.3929"
[  523.004166][T14953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3927'.
[  523.023470][T14953] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3927'.
[  523.242895][ T5870] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  523.274181][ T5870] ath9k_htc: Failed to initialize the device
[  523.294044][ T5838] usb 2-1: ath9k_htc: USB layer deinitialized
[  523.356962][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3934'.
[  523.380576][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3934'.
[  523.493446][T14976] overlay: Unknown parameter '\'
[  523.504403][T14973] loop3: detected capacity change from 0 to 4096
[  523.557265][T14973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.608540][T14982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3941'.
[  523.742530][T14973] EXT4-fs error (device loop3): ext4_get_first_dir_block:3604: inode #12: block 80: comm syz.3.3938: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  523.837281][T14973] EXT4-fs error (device loop3): ext4_get_first_dir_block:3606: inode #12: comm syz.3.3938: directory missing '..'
[  524.039103][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.358318][T15010] loop1: detected capacity change from 0 to 256
[  524.374183][T15010] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  524.382144][T15010] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  525.329266][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3977'.
[  525.385015][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3977'.
[  525.543910][T15066] netlink: 'syz.1.3981': attribute type 5 has an invalid length.
[  525.838270][T15077] netlink: 'syz.0.3989': attribute type 3 has an invalid length.
[  526.013099][T15086] comedi comedi2: rti800: I/O port conflict (0x1009e1,16)
[  526.120634][T15091] Illegal XDP return value 1853260785 on prog  (id 239) dev N/A, expect packet loss!
[  526.874720][T15123] loop1: detected capacity change from 0 to 4096
[  526.888001][T15129] loop0: detected capacity change from 0 to 512
[  526.939051][T15123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  526.988629][T15129] EXT4-fs (loop0): 1 truncate cleaned up
[  527.041349][T15129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  527.124915][T15123] EXT4-fs error (device loop1): ext4_get_first_dir_block:3604: inode #12: block 80: comm syz.1.4011: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  527.200483][T15123] EXT4-fs error (device loop1): ext4_get_first_dir_block:3606: inode #12: comm syz.1.4011: directory missing '..'
[  527.206727][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.229849][T15142] loop2: detected capacity change from 0 to 256
[  527.356626][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.674802][    T9] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  527.865423][    T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  527.889422][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.916542][    T9] usb 1-1: Product: syz
[  527.941502][    T9] usb 1-1: Manufacturer: syz
[  527.946164][    T9] usb 1-1: SerialNumber: syz
[  527.980127][    T9] r8152-cfgselector 1-1: config 0 descriptor??
[  528.168602][T15179] netlink: 'syz.2.4037': attribute type 39 has an invalid length.
[  528.178222][T15179] netlink: 'syz.2.4037': attribute type 4 has an invalid length.
[  528.188751][T15179] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4037'.
[  528.260084][T15179] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  528.380076][    T9] r8152-cfgselector 1-1: Unknown version 0x0000
[  528.395896][    T9] r8152-cfgselector 1-1: USB disconnect, device number 119
[  528.610386][T15197] netlink: 'syz.1.4045': attribute type 58 has an invalid length.
[  529.274808][T15227] batadv0: entered promiscuous mode
[  529.301939][T15227] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  529.382653][T15233] netlink: 'syz.0.4064': attribute type 1 has an invalid length.
[  529.407462][T15233] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4064'.
[  529.428600][T15233] NCSI netlink: No device for ifindex 0
[  529.612942][T15246] netlink: 'syz.3.4070': attribute type 39 has an invalid length.
[  529.634848][T15246] netlink: 'syz.3.4070': attribute type 4 has an invalid length.
[  529.654614][T15246] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4070'.
[  529.711055][T15246] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  530.973267][T15310] netlink: 'syz.0.4101': attribute type 1 has an invalid length.
[  530.988222][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4101'.
[  531.160422][T15319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4107'.
[  531.223201][T15321] netlink: 'syz.0.4108': attribute type 1 has an invalid length.
[  531.258668][T15321] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.4108'.
[  531.335155][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4111'.
[  531.618667][T15337] loop1: detected capacity change from 0 to 4096
[  531.697269][T15343] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  531.715534][T15337] ntfs: volume version 3.1.
[  531.727217][T15337] ntfs: (device loop1): ntfs_is_extended_system_file(): Unindexed file name. You should run chkdsk.
[  531.739190][T15343] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  531.769958][T15337] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing.
[  531.797368][T15337] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x18 as bad.  Run chkdsk.
[  531.831797][T15337] ntfs: (device loop1): load_and_init_quota(): Failed to load $Quota.
[  531.847862][T15349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4122'.
[  531.861694][T15337] ntfs: (device loop1): load_system_files(): Failed to load $Quota.  Mounting read-only.  Run chkdsk.
[  531.938144][T15353] loop0: detected capacity change from 0 to 256
[  532.477473][T15371] loop0: detected capacity change from 0 to 2048
[  532.512602][T15371] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  532.572304][T15378] loop3: detected capacity change from 0 to 256
[  532.577384][T15380] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  532.579313][T15371] syz.0.4135: attempt to access beyond end of device
[  532.579313][T15371] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  532.612699][T15382] tmpfs: Bad value for 'mpol'
[  532.689471][T15371] syz.0.4135: attempt to access beyond end of device
[  532.689471][T15371] loop0: rw=0, sector=9437254, nr_sectors = 2 limit=2048
[  532.740126][T15371] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=0)
[  533.104050][T15393] loop2: detected capacity change from 0 to 8192
[  533.125889][T15393] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  533.143637][T15393] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  533.153112][T15393] REISERFS (device loop2): using ordered data mode
[  533.159971][T15393] reiserfs: using flush barriers
[  533.167670][T15393] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  533.206959][T15393] REISERFS (device loop2): checking transaction log (loop2)
[  533.367140][T15407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4149'.
[  533.437782][T15393] REISERFS (device loop2): Using tea hash to sort names
[  533.457480][T15393] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  533.491262][T15393] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  533.600055][T15416] netlink: 'syz.1.4154': attribute type 39 has an invalid length.
[  533.618557][T15416] netlink: 'syz.1.4154': attribute type 4 has an invalid length.
[  533.632626][T15418] loop3: detected capacity change from 0 to 512
[  533.636552][T15416] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4154'.
[  533.780214][T15418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  533.799964][T15418] ext4 filesystem being mounted at /1037/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  533.812624][T15416] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  533.872879][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.477405][T15453] netlink: 'syz.0.4171': attribute type 5 has an invalid length.
[  534.487599][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4171'.
[  534.522072][T15453] ip6erspan0: entered promiscuous mode
[  534.622095][T15457] loop1: detected capacity change from 0 to 1024
[  534.713059][T15462] loop0: detected capacity change from 0 to 128
[  534.830467][T15462] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  534.870455][   T48] hfsplus: b-tree write err: -5, ino 4
[  534.927989][T15462] ext4 filesystem being mounted at /1061/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  535.026570][T15462] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 16387 (only 1 groups)
[  535.138502][ T5791] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  535.719316][T15471] loop3: detected capacity change from 0 to 32768
[  535.734349][T15471] (syz.3.4177,15471,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  535.782456][T15471] (syz.3.4177,15471,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  535.837461][T15476] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  535.863351][T15476] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  535.905164][T15471] JBD2: Ignoring recovery information on journal
[  535.941901][T15476] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  535.949019][T15476] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  536.052099][T15471] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  536.063176][T15476] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  536.086754][T15511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4190'.
[  536.110713][T15511] tc_dump_action: action bad kind
[  536.318164][T15516] netlink: 'syz.1.4193': attribute type 39 has an invalid length.
[  536.360280][T15516] netlink: 'syz.1.4193': attribute type 4 has an invalid length.
[  536.384064][T15516] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4193'.
[  536.412833][T15516] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  536.496109][ T5787] ocfs2: Unmounting device (7,3) on (node local)
[  536.759781][T15535] loop0: detected capacity change from 0 to 256
[  537.028203][T15544] No such timeout policy "syz0"
[  537.039693][T15546] loop3: detected capacity change from 0 to 256
[  537.126953][T15541] loop1: detected capacity change from 0 to 4096
[  537.157731][T15541] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  537.168455][ T5786] Bluetooth: hci0: command 0x0406 tx timeout
[  537.309817][T15541] ntfs3: loop1: Failed to initialize $Extend/$ObjId.
[  537.356337][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4206'.
[  537.434366][T15557] netlink: 'syz.3.4207': attribute type 2 has an invalid length.
[  537.442188][T15557] netlink: 'syz.3.4207': attribute type 8 has an invalid length.
[  537.481871][T15557] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4207'.
[  537.852676][ T5786] Bluetooth: hci2: command 0x0406 tx timeout
[  538.005422][ T5786] Bluetooth: hci3: command 0x0406 tx timeout
[  538.135015][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4220'.
[  538.161893][T15588] netlink: zone id is out of range
[  538.176686][T15588] netlink: del zone limit has 4 unknown bytes
[  538.197048][T15580] loop2: detected capacity change from 0 to 4096
[  538.227946][T15580] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  538.320033][T15580] ntfs3: loop2: failed to convert "c46c" to iso8859-3
[  538.483733][T15599] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4225'.
[  538.620553][   T27] audit: type=1326 audit(1754619961.263:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15603 comm="syz.3.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb807f8ebe9 code=0x7ffc0000
[  538.729270][   T27] audit: type=1326 audit(1754619961.263:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15603 comm="syz.3.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb807f8ebe9 code=0x7ffc0000
[  538.778773][   T27] audit: type=1326 audit(1754619961.295:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15603 comm="syz.3.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fb807f8ebe9 code=0x7ffc0000
[  538.841565][T15611] xt_TCPMSS: Only works on TCP SYN packets
[  538.849218][   T27] audit: type=1326 audit(1754619961.295:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15603 comm="syz.3.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb807f8ebe9 code=0x7ffc0000
[  538.858660][T15612] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4231'.
[  538.914039][   T27] audit: type=1326 audit(1754619961.295:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15603 comm="syz.3.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb807f8ebe9 code=0x7ffc0000
[  538.978863][T15616] netlink: 'syz.2.4232': attribute type 1 has an invalid length.
[  539.004269][T15618] loop1: detected capacity change from 0 to 512
[  539.014116][T15616] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.4232'.
[  539.151713][ T5786] Bluetooth: hci0: command 0x0406 tx timeout
[  539.492104][T15638] netlink: 'syz.0.4244': attribute type 1 has an invalid length.
[  539.833427][ T5786] Bluetooth: hci2: command 0x0406 tx timeout
[  540.040581][   T27] audit: type=1326 audit(1754619962.744:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15659 comm="syz.1.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad0b8ebe9 code=0x7ffc0000
[  540.128931][   T27] audit: type=1326 audit(1754619962.744:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15659 comm="syz.1.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad0b8ebe9 code=0x7ffc0000
[  540.183455][   T27] audit: type=1326 audit(1754619962.755:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15659 comm="syz.1.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7faad0b8ebe9 code=0x7ffc0000
[  540.232842][T15664] netlink: 'syz.1.4257': attribute type 2 has an invalid length.
[  540.248167][   T27] audit: type=1326 audit(1754619962.755:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15659 comm="syz.1.4255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad0b8ebe9 code=0x7ffc0000
[  540.266085][T15666] loop2: detected capacity change from 0 to 256
[  540.290345][T15664] netlink: 'syz.1.4257': attribute type 8 has an invalid length.
[  540.298131][T15664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4257'.
[  540.529835][T15670] loop1: detected capacity change from 0 to 1024
[  540.587037][T15648] loop3: detected capacity change from 0 to 40427
[  540.609938][T15648] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  540.646793][T15648] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  540.688844][T15648] F2FS-fs (loop3): invalid crc value
[  540.749920][T15648] F2FS-fs (loop3): Found nat_bits in checkpoint
[  540.935637][T15648] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  540.956667][T15648] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  541.569079][T15710] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  541.779712][T15711] loop2: detected capacity change from 0 to 8192
[  541.821908][T15711] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  541.876948][T15711] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  541.886614][T15711] REISERFS (device loop2): using ordered data mode
[  541.894348][T15711] reiserfs: using flush barriers
[  541.902675][T15711] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  541.923890][T15711] REISERFS (device loop2): checking transaction log (loop2)
[  541.946493][T15724] gtp0: entered promiscuous mode
[  541.964668][T15711] REISERFS (device loop2): Using r5 hash to sort names
[  541.987802][T15726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4285'.
[  542.023739][T15711] reiserfs: enabling write barrier flush mode
[  542.087845][T15711] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  542.434812][T15741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4289'.
[  542.453477][T15741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4289'.
[  542.586436][T15745] loop0: detected capacity change from 0 to 1024
[  542.642207][T15747] Cannot find add_set index 0 as target
[  542.717035][   T48] hfsplus: b-tree write err: -5, ino 4
[  543.882769][T15801] netlink: 'syz.3.4321': attribute type 21 has an invalid length.
[  543.915874][T15801] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4321'.
[  544.442918][T15803] loop2: detected capacity change from 0 to 32768
[  544.461622][T15803] 
[  544.461622][T15803]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  544.461622][T15803] 
[  544.536702][T15803] 
[  544.536702][T15803]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  544.536702][T15803] 
[  544.669544][T15821] loop3: detected capacity change from 0 to 4096
[  544.680624][ T5794] 
[  544.680624][ T5794]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  544.680624][ T5794] 
[  544.716988][ T5794] 
[  544.716988][ T5794]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  544.716988][ T5794] 
[  544.749353][T15821] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  544.893572][ T5787] ntfs3: loop3: ino=9, ntfs_sync_fs failed, -22.
[  545.194527][T15837] loop0: detected capacity change from 0 to 256
[  545.227525][T15837] exfat: Deprecated parameter 'utf8'
[  545.239450][T15837] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d)
[  545.613837][T15851] usb usb8: usbfs: process 15851 (syz.0.4347) did not claim interface 0 before use
[  545.771197][T15831] loop2: detected capacity change from 0 to 32768
[  545.807051][T15831] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4335 (15831)
[  545.885536][T15831] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  545.911319][T15831] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  545.945627][T15831] BTRFS info (device loop2): using free space tree
[  545.970696][T15864] loop0: detected capacity change from 0 to 64
[  546.116916][T15831] BTRFS info (device loop2): enabling ssd optimizations
[  546.126927][T15864] 
[  546.129305][T15864] ======================================================
[  546.134033][T15831] BTRFS info (device loop2): auto enabling async discard
[  546.136619][T15864] WARNING: possible circular locking dependency detected
[  546.136641][T15864] 6.6.101-syzkaller #0 Not tainted
[  546.136651][T15864] ------------------------------------------------------
[  546.136657][T15864] syz.0.4353/15864 is trying to acquire lock:
[  546.136668][T15864] ffff888059371af8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220
[  546.136714][T15864] 
[  546.136714][T15864] but task is already holding lock:
[  546.187190][T15864] ffff88802600a0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0
[  546.196908][T15864] 
[  546.196908][T15864] which lock already depends on the new lock.
[  546.196908][T15864] 
[  546.207445][T15864] 
[  546.207445][T15864] the existing dependency chain (in reverse order) is:
[  546.216480][T15864] 
[  546.216480][T15864] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}:
[  546.224789][T15864]        __mutex_lock+0x129/0xcc0
[  546.229845][T15864]        hfs_find_init+0x15f/0x1d0
[  546.234992][T15864]        hfs_get_block+0x51c/0xbd0
[  546.240210][T15864]        block_read_full_folio+0x42e/0xf40
[  546.246050][T15864]        filemap_read_folio+0x167/0x760
[  546.251620][T15864]        do_read_cache_folio+0x470/0x7e0
[  546.257295][T15864]        do_read_cache_page+0x32/0x250
[  546.262780][T15864]        __hfs_bnode_create+0x4a9/0x790
[  546.268447][T15864]        hfs_bnode_find+0x222/0xcc0
[  546.273673][T15864]        hfs_brec_find+0x15a/0x500
[  546.278965][T15864]        hfs_brec_read+0x24/0x110
[  546.284076][T15864]        hfs_cat_find_brec+0x15d/0x3f0
[  546.289582][T15864]        hfs_fill_super+0xdd5/0x1320
[  546.294899][T15864]        mount_bdev+0x22b/0x2d0
[  546.299779][T15864]        legacy_get_tree+0xea/0x180
[  546.305027][T15864]        vfs_get_tree+0x8c/0x280
[  546.309991][T15864]        do_new_mount+0x24b/0xa40
[  546.315041][T15864]        __se_sys_mount+0x2da/0x3c0
[  546.320267][T15864]        do_syscall_64+0x55/0xb0
[  546.325244][T15864]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  546.331879][T15864] 
[  546.331879][T15864] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}:
[  546.341217][T15864]        __lock_acquire+0x2ddb/0x7c80
[  546.346617][T15864]        lock_acquire+0x197/0x410
[  546.351750][T15864]        __mutex_lock+0x129/0xcc0
[  546.356889][T15864]        hfs_extend_file+0xdb/0x1220
[  546.362282][T15864]        hfs_bmap_reserve+0x107/0x430
[  546.368036][T15864]        __hfs_ext_write_extent+0x1fa/0x470
[  546.373949][T15864]        __hfs_ext_cache_extent+0x6b/0x9b0
[  546.379775][T15864]        hfs_extend_file+0x317/0x1220
[  546.385172][T15864]        hfs_get_block+0x3d8/0xbd0
[  546.390302][T15864]        __block_write_begin_int+0x566/0x1ad0
[  546.396434][T15864]        block_write_begin+0x9a/0x1e0
[  546.401836][T15864]        cont_write_begin+0x5c8/0x7e0
[  546.407299][T15864]        hfs_write_begin+0x8b/0xd0
[  546.412520][T15864]        cont_write_begin+0x2ad/0x7e0
[  546.417924][T15864]        hfs_write_begin+0x8b/0xd0
[  546.423054][T15864]        hfs_file_truncate+0x191/0x9b0
[  546.428555][T15864]        hfs_inode_setattr+0x4af/0x6e0
[  546.434036][T15864]        notify_change+0xb0d/0xe10
[  546.439175][T15864]        do_truncate+0x19b/0x220
[  546.444136][T15864]        vfs_truncate+0x266/0x300
[  546.449188][T15864]        do_sys_truncate+0xe0/0x1a0
[  546.454412][T15864]        do_syscall_64+0x55/0xb0
[  546.459389][T15864]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  546.466014][T15864] 
[  546.466014][T15864] other info that might help us debug this:
[  546.466014][T15864] 
[  546.476572][T15864]  Possible unsafe locking scenario:
[  546.476572][T15864] 
[  546.484059][T15864]        CPU0                    CPU1
[  546.489442][T15864]        ----                    ----
[  546.494826][T15864]   lock(&tree->tree_lock#2/1);
[  546.499716][T15864]                                lock(&HFS_I(tree->inode)->extents_lock);
[  546.508245][T15864]                                lock(&tree->tree_lock#2/1);
[  546.515652][T15864]   lock(&HFS_I(tree->inode)->extents_lock);
[  546.521661][T15864] 
[  546.521661][T15864]  *** DEADLOCK ***
[  546.521661][T15864] 
[  546.529824][T15864] 4 locks held by syz.0.4353/15864:
[  546.535141][T15864]  #0: ffff88805b870418 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  546.544409][T15864]  #1: ffff8880593729b8 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: do_truncate+0x187/0x220
[  546.554790][T15864]  #2: ffff8880593727f8 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220
[  546.565553][T15864]  #3: ffff88802600a0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0
[  546.575719][T15864] 
[  546.575719][T15864] stack backtrace:
[  546.581701][T15864] CPU: 0 PID: 15864 Comm: syz.0.4353 Not tainted 6.6.101-syzkaller #0
[  546.589873][T15864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  546.599972][T15864] Call Trace:
[  546.603264][T15864]  <TASK>
[  546.606203][T15864]  dump_stack_lvl+0x16c/0x230
[  546.610901][T15864]  ? load_image+0x3b0/0x3b0
[  546.615482][T15864]  ? show_regs_print_info+0x20/0x20
[  546.620716][T15864]  ? print_circular_bug+0x12b/0x1a0
[  546.625951][T15864]  check_noncircular+0x2bd/0x3c0
[  546.630917][T15864]  ? look_up_lock_class+0x75/0x140
[  546.636073][T15864]  ? print_deadlock_bug+0x5d0/0x5d0
[  546.641301][T15864]  ? lockdep_lock+0xe0/0x220
[  546.645919][T15864]  ? _find_first_zero_bit+0xd3/0x100
[  546.651228][T15864]  __lock_acquire+0x2ddb/0x7c80
[  546.656280][T15864]  ? stack_trace_save+0xe0/0xe0
[  546.661238][T15864]  ? arch_stack_walk+0x160/0x190
[  546.662071][   T27] audit: type=1326 audit(1754619969.708:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15891 comm="syz.1.4358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad0b8ebe9 code=0x7ffc0000
[  546.666178][T15864]  ? verify_lock_unused+0x140/0x140
[  546.666204][T15864]  ? stack_trace_save+0x9c/0xe0
[  546.666224][T15864]  ? stack_trace_snprint+0xf0/0xf0
[  546.688728][    C1] vkms_vblank_simulate: vblank timer overrun
[  546.693875][T15864]  ? check_noncircular+0x175/0x3c0
[  546.714989][T15864]  lock_acquire+0x197/0x410
[  546.719520][T15864]  ? hfs_extend_file+0xdb/0x1220
[  546.724484][T15864]  ? __might_sleep+0xe0/0xe0
[  546.729190][T15864]  ? __lock_acquire+0x2b6b/0x7c80
[  546.734386][T15864]  ? read_lock_is_recursive+0x20/0x20
[  546.739962][T15864]  __mutex_lock+0x129/0xcc0
[  546.744491][T15864]  ? hfs_extend_file+0xdb/0x1220
[  546.749457][T15864]  ? lock_chain_count+0x20/0x20
[  546.754336][T15864]  ? hfs_extend_file+0xdb/0x1220
[  546.759303][T15864]  ? verify_lock_unused+0x140/0x140
[  546.764554][T15864]  ? mutex_lock_nested+0x20/0x20
[  546.769524][T15864]  hfs_extend_file+0xdb/0x1220
[  546.774316][T15864]  ? hfs_get_block+0xbd0/0xbd0
[  546.779113][T15864]  ? __mutex_trylock_common+0x153/0x250
[  546.783050][   T27] audit: type=1326 audit(1754619969.708:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15891 comm="syz.1.4358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad0b8ebe9 code=0x7ffc0000
[  546.784755][T15864]  ? trace_raw_output_contention_end+0xd0/0xd0
[  546.813556][T15864]  ? rcu_is_watching+0x15/0xb0
[  546.818447][T15864]  ? hfs_brec_find+0x18f/0x500
[  546.823303][T15864]  ? __mutex_lock+0x304/0xcc0
[  546.825720][T15893] loop3: detected capacity change from 0 to 32768
[  546.827985][T15864]  hfs_bmap_reserve+0x107/0x430
[  546.828020][T15864]  __hfs_ext_write_extent+0x1fa/0x470
[  546.828038][T15864]  __hfs_ext_cache_extent+0x6b/0x9b0
[  546.828055][T15864]  ? hfs_find_init+0x15f/0x1d0
[  546.836008][   T27] audit: type=1326 audit(1754619969.708:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15891 comm="syz.1.4358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7faad0b8ebe9 code=0x7ffc0000
[  546.839993][T15864]  hfs_extend_file+0x317/0x1220
[  546.846248][   T27] audit: type=1326 audit(1754619969.708:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15891 comm="syz.1.4358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad0b8ebe9 code=0x7ffc0000
[  546.850629][T15864]  ? filemap_get_folios+0xe5/0x7b0
[  546.850655][T15864]  ? hfs_get_block+0xbd0/0xbd0
[  546.895632][   T27] audit: type=1800 audit(1754619969.897:32): pid=15893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4359" name="file1" dev="loop3" ino=4 res=0 errno=0
[  546.905376][T15864]  ? find_lock_entries+0xfe0/0xfe0
[  546.905412][T15864]  ? clean_bdev_aliases+0x55f/0x630
[  546.905438][T15864]  hfs_get_block+0x3d8/0xbd0
[  546.905459][T15864]  ? hfs_free_extents+0x430/0x430
[  546.950922][T15896] loop1: detected capacity change from 0 to 1024
[  546.950954][T15864]  ? _raw_spin_unlock+0x28/0x40
[  546.967589][T15864]  ? folio_add_lru+0x320/0xd50
[  546.972395][T15864]  __block_write_begin_int+0x566/0x1ad0
[  546.977990][T15864]  ? hfs_free_extents+0x430/0x430
[  546.983042][T15864]  ? folio_zero_new_buffers+0x550/0x550
[  546.988613][T15864]  ? hfs_free_extents+0x430/0x430
[  546.993671][T15864]  block_write_begin+0x9a/0x1e0
[  546.998587][T15864]  ? hfs_free_extents+0x430/0x430
[  547.003631][T15864]  cont_write_begin+0x5c8/0x7e0
[  547.009120][T15864]  ? generic_cont_expand_simple+0x200/0x200
[  547.015036][T15864]  ? __block_commit_write+0x23f/0x350
[  547.020426][T15864]  ? put_page+0xea/0x270
[  547.024674][T15864]  hfs_write_begin+0x8b/0xd0
[  547.029264][T15864]  ? hfs_free_extents+0x430/0x430
[  547.034297][T15864]  cont_write_begin+0x2ad/0x7e0
[  547.039243][T15864]  ? generic_cont_expand_simple+0x200/0x200
[  547.045145][T15864]  hfs_write_begin+0x8b/0xd0
[  547.049725][T15864]  ? hfs_free_extents+0x430/0x430
[  547.054762][T15864]  hfs_file_truncate+0x191/0x9b0
[  547.059699][T15864]  ? __up_read+0x280/0x670
[  547.064110][T15864]  ? up_read+0x20/0x20
[  547.068170][T15864]  ? up_read+0x20/0x20
[  547.072226][T15864]  ? hfs_extend_file+0x1220/0x1220
[  547.077500][T15864]  ? unmap_mapping_range+0xdf/0x170
[  547.082697][T15864]  ? unmap_mapping_pages+0x150/0x150
[  547.087978][T15864]  ? pagecache_isize_extended+0x1cd/0x580
[  547.093697][T15864]  hfs_inode_setattr+0x4af/0x6e0
[  547.098629][T15864]  ? bpf_lsm_inode_setattr+0x9/0x10
[  547.103906][T15864]  ? try_break_deleg+0x79/0x120
[  547.108782][T15864]  ? hfs_evict_inode+0x110/0x110
[  547.113713][T15864]  notify_change+0xb0d/0xe10
[  547.118305][T15864]  do_truncate+0x19b/0x220
[  547.122717][T15864]  ? put_page_bootmem+0x2c0/0x2c0
[  547.127747][T15864]  ? bpf_lsm_path_truncate+0x9/0x10
[  547.133210][T15864]  vfs_truncate+0x266/0x300
[  547.137706][T15864]  do_sys_truncate+0xe0/0x1a0
[  547.142488][T15864]  ? break_lease+0xd0/0xd0
[  547.147068][T15864]  ? lockdep_hardirqs_on+0x98/0x150
[  547.152262][T15864]  do_syscall_64+0x55/0xb0
[  547.156677][T15864]  ? clear_bhb_loop+0x40/0x90
[  547.161343][T15864]  ? clear_bhb_loop+0x40/0x90
[  547.166008][T15864]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  547.171908][T15864] RIP: 0033:0x7f58bcb8ebe9
[  547.176516][T15864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  547.196381][T15864] RSP: 002b:00007f58bdaab038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  547.204802][T15864] RAX: ffffffffffffffda RBX: 00007f58bcdb5fa0 RCX: 00007f58bcb8ebe9
[  547.213054][T15864] RDX: 0000000000000000 RSI: 0000000000040006 RDI: 0000200000000040
[  547.221203][T15864] RBP: 00007f58bcc11e19 R08: 0000000000000000 R09: 0000000000000000
[  547.229217][T15864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  547.237178][T15864] R13: 00007f58bcdb6038 R14: 00007f58bcdb5fa0 R15: 00007ffdeda9d908
[  547.245234][T15864]  </TASK>
[  547.345045][ T5794] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  547.394715][ T1103] kworker/u4:8: attempt to access beyond end of device
[  547.394715][ T1103] loop0: rw=1, sector=417, nr_sectors = 1 limit=64
[  547.421923][ T1103] Buffer I/O error on dev loop0, logical block 417, lost async page write
[  547.451705][ T1103] kworker/u4:8: attempt to access beyond end of device
[  547.451705][ T1103] loop0: rw=1, sector=420, nr_sectors = 1 limit=64
[  547.481904][ T1103] Buffer I/O error on dev loop0, logical block 420, lost async page write
[  547.516628][ T1103] kworker/u4:8: attempt to access beyond end of device
[  547.516628][ T1103] loop0: rw=1, sector=421, nr_sectors = 1 limit=64
[  547.538303][ T1103] Buffer I/O error on dev loop0, logical block 421, lost async page write
[  547.549911][ T1103] kworker/u4:8: attempt to access beyond end of device
[  547.549911][ T1103] loop0: rw=1, sector=422, nr_sectors = 1 limit=64
[  547.563260][ T1103] Buffer I/O error on dev loop0, logical block 422, lost async page write
[  547.587098][ T1103] kworker/u4:8: attempt to access beyond end of device
[  547.587098][ T1103] loop0: rw=1, sector=423, nr_sectors = 1 limit=64
[  547.605382][ T1103] Buffer I/O error on dev loop0, logical block 423, lost async page write
[  547.615779][ T1103] kworker/u4:8: attempt to access beyond end of device
[  547.615779][ T1103] loop0: rw=1, sector=424, nr_sectors = 1 limit=64
[  547.629995][ T1103] Buffer I/O error on dev loop0, logical block 424, lost async page write
[  547.656617][ T1103] kworker/u4:8: attempt to access beyond end of device
[  547.656617][ T1103] loop0: rw=1, sector=425, nr_sectors = 1 limit=64
[  547.672000][ T1103] Buffer I/O error on dev loop0, logical block 425, lost async page write
[  547.680941][ T1103] kworker/u4:8: attempt to access beyond end of device
[  547.680941][ T1103] loop0: rw=1, sector=426, nr_sectors = 1 limit=64
[  547.694836][ T1103] Buffer I/O error on dev loop0, logical block 426, lost async page write
[  547.703983][ T1103] kworker/u4:8: attempt to access beyond end of device
[  547.703983][ T1103] loop0: rw=1, sector=427, nr_sectors = 8 limit=64
[  547.717976][ T1103] kworker/u4:8: attempt to access beyond end of device
[  547.717976][ T1103] loop0: rw=1, sector=435, nr_sectors = 1 limit=64
[  547.731343][ T1103] Buffer I/O error on dev loop0, logical block 435, lost async page write
[  547.740031][ T1103] Buffer I/O error on dev loop0, logical block 436, lost async page write
[  548.138073][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  548.144481][ T1280] ieee802154 phy1 wpan1: encryption failed: -22