last executing test programs: 20.378613359s ago: executing program 3 (id=441): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x6, 0x8a}, 0x9c) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e24, 0x1, @local, 0x1f}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001900)='~', 0x1}], 0x1}, 0x801) 18.901631118s ago: executing program 3 (id=447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_PBSS={0x4}]}, 0x60}}, 0x0) 17.99388598s ago: executing program 3 (id=450): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x200414, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0xff, 0x5ad0, &(0x7f000000bec0)="$eJzs3X+QHNV9IPDXM7Pa2V39WAkcZDCrRUYJwbG14ldhOxXLucROgUPJ5ZRjcbJhgRWRLQmVfgSQSSxy4LMO7LJTziU4+YNQmDuM4uIKEqNQJvw4ibOxVSQOdYWps++w//AV4VAFUKiUj03tTL/Zmd7p7dnZWUnA51PS9vSbN9/3+vXrnn5vencCAAAAbwmHb9117LLTf/O7fzTx6ud+62+33RyGyrX0aswwnC5vOFE15Hjqr6ysLbP94pc++42fjl7969+5f/Drrx265qzNP/yNU65++NOXHLzjzx97ZcmDrz9fFDf2p3On15MXkxCq3z76J58/9NRpU2nJ0qmfpX0hLE9WPLY8aY3wL3/fqGMIYWUm/gOvnr95annzbf0t6csy+fT3t7ap/TzVsfYeu/5d4Ucf3HjL91d986/6DrywbzpLUm3qTyEsvbL59X0hhIH0f0j7Ymjqj7HTbgghDDa97uKCer2zw/qvzVk/I10uSpdDBXHi86sz66VMvux61JdZDhaUN1959egmX+2IX/HXs+ZZnFlPOiy/U3n1jOnL0+W30uW5c4xfTrehnIRSEiqN6m9NpvtIaNpvSUhq+7LaWC819m1Itz+znmTWS5n1cl9mu2rlph2tnCSt6TFfJj2ejitp+lnN5+o2PpaT/vZ0WU0P1Nfiesg+qBua8aCxXTWxXkdnqcvxUGo6B7VLb+z4dGcMpWlDyYoZr5lsIz53aOPta8qbHj883L4ajWKGaj1p7vH3fm/54k/dt39P9n29UcCVpTR+qav4P770yEuX77/ra7nxvxzjl7uKf94jgy9e+sStq3PaJyRHkzR+Zfb4ldbC4nPjzz/5xVWnXnUgt/53xvjVruq//uCR/iXHHnk0t/5jsX0Guor/3Ps/9JN7n3nohdz4IcYf7Cr+poM7vtQ/cuyc3PiPxvYZ6q7/vHzgomdHRn42mhf/6Rh/yVT8i8Mc49+z74733b3stkty9++G2D7DXdX/I2c/fMviYw+dmXfuTO7s9B0WgHZOSa+xvpCudzvOnK+m8cKfjVbqF2iL0/9LellQ5uJzqpylvYwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGEt73rf3z4/3x8+MVKut6fPniuVF/G9EUhJAMhhF27x3fu3rL92tFPX7dn5/bxraPju0cntu/eeePoBb8yunNix9bxG6eeHXv3+fXXrQhJfZmcOaPsgTA5WRpuTYvl/buzD/xozcX/959CGHvbD0YqufVfe8e2u09t8zMjWT/5gW17LvvBhX+ZbtdwWq/hNvWanJycDDn1+n+f+Pndf3z0p+eEMPYLs9Xryed+7e8aFarGhOk4qVJ/qFeoPxlsW49GrdP6xPaqbN6ydWJs9vaden05Zzv+/Wdf+NfNN3zl5/X2reZuR4ftO7B+cmvpTzd+5P//6U31hKJ6naj9XtTecSti/WL7VdP2Xppu19Kc7arkbNet33/0mW+fvj+/oQu2qy/tAH3J2zsqN27dYLK8Jb2a5o8Via9bu3vbjrW7btz77i3bxq+duHZi+3vXXbDuorELL7pwbW3L1/Zm+1/ZF8YqL68aDLH8X+xw+3vRnwayR9+Mcpf9/r5vxZ+d9afWei2ac3tM1au4PZprlHf8DX7s81997x1PXFZPKOrnMXfjfJIuB6f287rQ1N9mtlW77SraPyGE0Xbt8NIrl4TT/ueWW4rOQ817pvlnRrJ+8qnV//yXF//Fyl+tJxyX83xzhbo8zzdqPV2fWntV0/0xeZK2b38op9s11LZe6556ou/2w//0B436LVoUbhjfvXvnuvrPxWlNFydntK1XNjVu16raz3JImyU0ummb/jqlL9Trlz1/xuxnZsoYSp8bSla03a6s+NyhjbevKW96/HBeSyf310scCEvqy+QdOTm3Zl5YblS4Xfkn6/FX1D9GPvwXD378wb+5YEb/OK/+s2i7kpzt+uYz93z161/5j3/Tu+368K8dGf7n//V7a+oJJ/15pVyvSKPWaX2S5vPKeSEUHX+rQvvtaBx//7kc46Y1ar89Rcdftpzp/O3jjWbWh0K5q+P1vEcGX7z0iVtX5x6vR2c7Xps39qaW15ULjteTpf9kj6+k0lqPhTu+WjpKsn7yO184Zd9jn9twej2h6P2ykbtdvz6/g/FH++2KF3D/2Lvzxjd+5YErfji+/g/rCd3v91iX3uz3atq+1Zz2bdQ6jjub2/c9V1+39Zp6elE7n7jr33RZMP6Jp5JdN+79zPjWrRM7d3W2XZ2+n8Zysq3c7ftpPLutKNiu0oztWrgHnbRXzvEW/u7yZ0euG/0P/5htr2u6bq/W420oJF29L+z93vLFn7pv/57hGa9KC7qylMYvdRX/x5ceeeny/Xd9LTf+l2P8Slfxx59/8ourTr3qQG78O5M0frWr+OsPHulfcuyRR3Pjj8X6D3QV/7n3f+gn9z7z0Au58UOMP9Rd+7984KJnR0Z+lhv/6SQtZ+oaKYQHXj1/c309CX3p8Rbr0ddSr5BdTzLrpcx6uXm9FN+E0gLKSdKanoqPz2qqSzu/m5Mer8KqK+vL1+J6yD6YNX3RLEWfEKWmc3+79KLrVACAN7v4+X+8Bo2f/0+kF0r5Mw0wbb7jsJU5ceM4bHo+p3XIsTKNH18f5wFH3hPGppY3j9Yv9Of6OUI8HrLznLGcc97ZGqNwnnOyVv6Mec6i+ffVmfVYr/p8eaVpHJqaOa6phA7m31dnwhTNv2c2v/jzrNEvzKjWaNO8VXb/9aUzZu3udwit7VKZipDXP7LzYvF+jpGlYUOtvA77R/Y+mrgfsvfRxHJOz5w4u72PJq9/DM9sh5Z6xf4R883SP2pVLv48cub+C7O07/T+ax8tu//msL+rIfy3u+LKQn0+24N5w7antE7mDfvblBCf63zecGE/DzMvmRM/PcA6mDd8fVnL647PvGEpkx63o5KmF80nfjwnvUfziY3zVKzX0VnqcjyYTwTerOL4P75HTI3/py7A/yWTr2ickr1qjPFy79Mrt69P0bgje3U+FAa7eh/fdHDHl/pHjp2Te53zaKf36e1oWRssuO+nqB3XZNYL2zFngqZovJctp6jds/dlDIUlXbX7PfvueN/dy267JLfdN9TfSIvb/asta0sK2n2h7+fserzQd7LcZ2C80DZ+Y7zQXf85XvcxFM2fnbD7GNIbnxZqPPI7OelzHY8MznjQ2K6ak3c8Mv1G2t86gQcA0FYc/zc+P0vH//87ZkivI4rGredm1mO83HFrzvVJ3rj1t9PlDZn8Q+lvVMz1uvkjZz98y+JjD52ZO265s9Nx6H9tWRvOjEOzlZjvuDl3HLGhN/eL544jGuOs+Y0Tc+vfGCfOb5ye8zFt0zh9fuPo3PZpjKNb5wG+eqSz+PFzw9z4jXmAHo5zX5/OdPzu1y+Yr8sUFlc7na87IePopa3buSDj6PTXZxdqHP2xnPS5jqOHZjxobFfNyTuObk03jgYA3qzi+D9exsXx/xOZfPP9nD13XNCj6/bs3wNpxH96QcaV0/F7dL9o8bhvoceteeP6ZF+7UuKznY/rF3pe4o19v+jCzwsN1/6AZxp/3dIO43c6T3bCPl8+WcbFaaHGxQAAnMzi+H8gXc8f/89vfDJj/NZXv4ScHp+88cbnzflO3Pi8V5+7G5+3jd/p59Y58U+e+a+FvU/mLT/+j+vp6mSn4//G95HUGf8DALCQ4vg//tpj/Pt//z1dz/7d+oUfp881/mR6SbpAn6On7WGcbpweZhmnfyDn7w7E5zsfp/d4ni3Gb74PwDzA8b0/fmA6v/sAAAA4EfpqI6WZv2f/yXSZ/T37vN/Lvzwnf00HfxO1kl4eX7V758TEFXt2XDO+e+KK7dddM7Hriut3btm9e2J7Pd98x42545a0kn2hkrZH+3zZcduydGJgWc7fQ8jmj2HPqD2Y+fcQssUOFPw9u+n911l98/ZfaZb87fpH3v7Oi/+7Ofmjxv6/+vfOu2Lzriu2bN+ye8v41i17J1qjTzXE4By+NzNJ/8/p+1KffO4/HQ6h/qj2rZkZpbl/f2fcPXOsR8uPGQdSaapFktz9P1WPJFOP5WlNlud9/0FOvb/793/8+2dP/vzeEMbeVn7HXOvdGnL95F9/YuK3dx/+wY6p+pdmrX8jZ1qvou8rzeaP21PZet2u3e/afN2e7dlvlOxOnM8oNdYXaD4jPfzLHc5PbMpJn+vv75dnPDg5dTw/MeWDVx2/igEAnOTi5//xejZ+fviV9AIqpnc+Tq9fOHb7+XHuOH2ss3F69nvJisbp2fxxezsdp1fnOU7Plp8/Th/Izd9unJ437s6L/zs5+eeq837Sxe9jxOHnffv35PaTK7P9ZKBtvuz3GRT1k2z+ufaTZJ79JFt+0XxOu/zt+knefs+L/9Gc/HmK+kOl0R/m9/szuf3hy52dN345s17UH7L559ofSvPsD9nyi/pDu/zt+kPe/s2Lf1lO/k619o+pjlHrFxNXXH/dzs805Vvo778IM2/J6KR+i6ZfO+/vC2xfvyvn98Vinbfvwt73Nf/6h7C+lpJX/4W9r2z+9S9q/zn8/tfSMOO+stz6P51zAul5/Rf2+10y8rLPfP3xmq9NzwRF958VzeNuzEmf6zzuohkPTk5zmscFeiqO/+PHPXH8f1u67PXHQAt9nbTw35P2xvkes5b3reN2//38fo+96DrmLfd+nv3I3fs5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBtffwj9lZW1h4dv3XXsstN/87t/NPHq537rb7fd/Euf/cZPR6/+9e/cP/j11w5dc9bmH/7GKVc//OlLDt7x54+9suTB158vjD1c+1k5N12thpC8mIRQ/fbRP/n8oadOm0pLQgjlZHhfCMuTFY8tTzIRxv41hHBNrGql9ckHXj1/89Ty5tv6W9KXZYJktysMlWN9musZwg2FW8QbUDXtZ3uPXf+u8KMPbrzl+6u++Vd9B17YN50lqTb1pxCWXtn8+r4QwkD6P9QPmZqV8cXpckMIYbDpdRcX1OudHdZ/bc76GelyUbocKogTn1+dWS9l8mXXo77McrCgvPnKq0e3+YoszqxnT0bzlVfPmL48XX4rXZ47x/jl+D8JpSRUGtXfmkz3kdC035KQ1PZltbFeauzbkG5/Zj3JrJcy6+W+zHbVyk07WjlJWtNjvkx6PB1X0vSzms/VbXwsJ/3t6bKaHqivxfWQfVA3NONBY7tqYr2OzlKX1H8pztK9UtM5qF16Y8enO2MoTRtKVsx4zWQb8blDG29fU970+OHhnHok9ydp/KSr+Hu/t3zxp+7bv2dlXvwrS2n8Ulfxf3zpkZcu33/X13LjfznGL3cV/7xHBl+89IlbV+e2z9HYPpWu4o8//+QXV5161YHc+t8Z41e7ir/+4JH+JcceeTS3/mOxfQa6iv/c+z/0k3ufeeiF3Pghxh/sKv6mgzu+1D9y7Jzc+I/G9hnqrv+8fOCiZ0dGfjaaF//pGH9JV/Hv2XfH++5edtsluft3Q2yf4a7if+Tsh29ZfOyhM/POncmdvXrnBHhrOiW9xvpCut7tOHO+msYLfzZaqV/zLU7/L+llQRlT5SxdwPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALw5/cNNF3zyEx/46MZKEkKSk2eyjfhcedH69aNdlDv+/JNfXHXqVQea01a2z9rfRXgAAACgSRyHlxop1bAyXJ8MhDPa5o9zBGfEtaQ1PbuMcZrmCPrmEidk4pTa1KfURZxyl9uVjVPpUZy+HsVZ1KM42UmXOccZCG1l41RDZ/XJhmuOU5nqAR1u1+Cs9ek8zlCP4izuUZwlPYqztEdxlvUozvCscTrvz8t7FGdFj+Kc0qM4p86Ic0m1JWqHcd7Wo/r8Qo/inNajONk55bn2wyVpztPz4tQelAvjVJJy44l28+mnpeWcOc9yhmYtpzq5ZOb7cVflDBRsTyznnZnXlYrL2decv9phOb8493Jat7/Dcn55nuWUCsqJ/faGbP1iOXGtw/5/Y4/i7O1RnM/2KM5NPYrzB3OJ0+YzshjnD3tUn8/NMw5Ap+L4f3q8Nxz6K78aBtMzTnYWII53V9V+zny/yzshxXjvyKQvKoqXHahn4q2aa/2yEwiZeKsz0fpa4lUa45FZ4lWb463JPDnb9r5/ffu6Ncc7N5PeP0u8muzEAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsoH+46YJPfuIDH90YkjD1r63JNuJz5UXr1492Ue6hjbevKW96/HBzWn+li0AAAABAoTgO72ukVEN/ZV3oTxa15Kum8wDVdL08XF+OLA0b6jMHpdr6YLJ81tdV0tet3b1tx9pdN+5995Zt49dOXDux/b3rLlh30diFF124dvOWrRNj9Z8h9BfECyHUph923bj3M+Nbt07s3FVPzNZ/Zfq6qWU611F73ch7wtjU8ubRev1XFJRXmlHewj3obA8CAMC/sWu/oZLV5QPAnzMzd2a8uj/nh//Gxb0O6ypWVmrX0BLvgSDBP4sXIeZaN1lyJenqLrorZpNeSE0pAmVh2fBFGyZp0hv/pET+YcEwS+huEirli3pRaBkqvghl4t6ZM3dm7oxzG8RV+3xenHPm+T7f73O+58WF59wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/llqTM/XZ2bnJpOIZEhOc4BsLF9M09oYdb/y2M4flKbeOrU7ViqMsRAAAAAwUtaHT3Qi5SgV8pGP41d+bY6ugVjt+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP89S43p+frM7NzhSUQyJKc5QDaWL6ZpbYy6L7/xwGdfmJr6W3esOsY6AAAAwGhZH57rRMpRjZNiIjl+ufPvRLN3Axv75rfyVmXrbFpnXv+7g2F5J60z75R15n1sRN7W9vmGAAAAgA+/rP8vdCKVKBU2rOmHs/5/VF+f5Z3Yl5dvn9f/rUBx3ZkAAADAu8v6/1InUo1Sodrp19fb72/uy8vmj/q/fTb/5CHzR/0//+L22f/pAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODDY6kxPV+fmZ3LJxHJkJxms9ksdF0vy8byxTStjVH3zMcn/3HhgVs3d8dKhTEWAgAAAEbK+vDV1rscpcJkTMThK73+1Pl3P/Slhx6ZjohWm18sxg3bdu269szWMcs749kDE99/+tVvr8k7o3U8ZBsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADeM0uN6fn6zOzcYUlEMiSnOUA2li+maW2Mui99/ot/ue/5R1/pjlXHWAcAAAAYLevDV3v/clSjGMU4duVXd6+/LNc3f9g7AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCj47pv3viNbQsL2691cWgumvmID8BtuHDRe3Go/zIBAADvtRMjieZ/6bhLDvVdAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwRLjen5+szsXDmJSIbkNJvNxeVDt2wsX0zT2hh108eeK2146/Enu2PVMdYBAAAARsv68NXevxzVmIiJOGbl16B3Aiv9f+V9vEkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgA2WpMT1fn5md25BEJENymgNkY/limtbGqHvv4r7P3XPk9y7ojpUKYywEAAAAjJT14cVOpBylwsejFCe0fy/0Tkjy7fPg9wKr83b2TJtc97xG16xi5Nc97/a+nRXau2nNK7ej+Urr3JlXW52Xa8+rdc2rRqd8rTNv5WHt6am2YcR9Dnr2AAAA8H7J+v9SJ1KJUqHU1f//tCe/os8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIZYakzP12dm55IkIhmS0xwgG8sX07Q2Rt0bf/v/R3z1Z3fs7o5Vx1gHAAAAGC3rw1d7/3JUY1P8X2xa6fuj0puf5f2z/vY9d/3rr6dGnH7swalC/7I/yi5+/dJ5T/QfInK92bmII9v1kiH1fvP7u67f0nz7vojTj8mfsKZevHu93iXT5sP17RfvevrgzhEPBwAAAD4isv5/ohOpRKlwzdD+P+u8R/T/HSsN+JHXL/7i6Pax3ZH3zchV2vVyQ+p9YcsDfz757L+/utz/r633yc7Vp/ddfc/RPQVbkT5J2py5evfWg2ftz2W7btXP99XPnsuXv/XKv6+84c63W/XLUW7HN/bdSqva2mNf+UibC7m9cxe9s7fRW78wZP+3/u7J53+18Y43l+u/ceJkp/4pMah+a+eFofXjsLQ5eelte87Zd2Brb/2IqA2q/9qbF8Rxf7zqlv79T/Yt3P3ku4/9DyBtPrv59f1n3109t7d+0lc/e/4/f/7ePT+587uPZPWzb0VOPWm99XN99Z+5/ajFp26+ZGNv/dyQ/T9x2QtTO2rf+UP//q/oWbUw9C4ier6vSdLm/ac9ePmL29Kb+h8NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAR8tSY3q+PjM7l0sikiE5zQGysXwxTWtj1H35wudeu+yOH/+wO1YdYx0AAABgtKwPX+39y1GNYhRjcqXvf7i+/eJdTx/cGZXWaFKJSBYjCgs7rtv1iSt37L7mikN38wAAAMC6vHxhstL/FzqRSpQKW2Ki3f/PXL1768Gz9uey/j+3fE4i4sqrFrafHp28Z24/avGpmy/Z2HlPELHyWUB5Oe8zq3nnn/dc5fU/ff3kgXlnruY9u/n1/WffXT03y4vuvDOi837i/tMevPzFbelNnfvrzvvU13YstF9PZOtOXnrbnnP2Hdiaa+cX2ufJ9rpZ3kJu79xF7+xt5CpRWh7Pt/PK7X0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGstNabn6zOzc5GPSIbkNLu1A9lYvpimtTHqXrTll7cc8dajm7pjpcIYCwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwn79hUhV9nEAf56Z2Xdnd3Z1V19oK1pXKwq7UAoi6qaiIjRC6MqQsDQvoiCIKOyiNTQSK7oJsm4kKqi2EAxyk0SLNfon3XRRQYF1EYi0ULtIFxk785xx9jin0dkKpM8Hhmef55zzPb9znmfO7AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM4rvZWRentkxyOzd15062dP3T/z5O0fPLTtiife+mls082f7u1//eTU5uVbvr1l6aYDD6yZ3P3K4d8G3/vjWMfgxxvNytSthhBPxBCqH06/+PTU5xfMjcUQQjkOjYcwHJccHo65hNW/hxA2N+ucv3HfzDVb5tptu3rnjS/OheSvK9TKWT0NQ/PrbXUqH8Z5p5rW2dbZx64K39+0fvuXy959p2fi+PjpXeLcPuW0nkJYtLH1+J4QQl/6zMlW20h2cGrXhRD6W467rkNdl55l/asK+hen9n+prXXIybavyPVLuf3y/UxPru3vcL6FKqqj2/06Gcj18w+jhWrWuar9+HBq30/tynPML2efGEoxVJrlPxhPr5HQMm8xxPpcVpv9Uja3lZCuv6fluBhCzPVLuX65J3dd9fOmhVaOcf54tl9uPHscV9L48tZndRt3FYxfmNpq+qKezPoh/0dD7Yw/mtdVl9U1/Re1/BtKLc+gduPNiU+TUUtjtbjkjGNOtZFtm1r/7OXlDR8dGSqoI+6NKT92lb/1i+GBe97e+ehIUf7GUsovdZX/w9qjv9y989WXC/NfyPLLXeVffbD/xNqPd6wovD/T2f2pnFV+TP1s273HPnlu2f/vm2g31/X8PVl+tav6b5w82js4e/BQYf2rs/vT11X+dzfc9uObX+8/Xpgfsvz+rvI3TD78fO/o7JWF+YcaX4VafYV2sX5+nbj2m9HRn8eK8r/K7v9gm/zYMf+N8d3Xv7Z415rC9bkuuz9DKb/vnOq/47ID2wdm919S9OyMe/6uX06A/6al6X+sZ1K/03vmvplS2/fMhWp5X3hprNL4BRpIn07vhgsxd55F/2A+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCf7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATwUAAP//nCAIEA==") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) 15.601808874s ago: executing program 0 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x83}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c00000002060102000000000000000000000000140007800800124000060000080008400000003710000300686173683a69702c6d616300050005000a00000005000400000000000900020073797a31000000000500010007"], 0x5c}}, 0x0) 14.428769306s ago: executing program 0 (id=463): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="03022afd7000fddbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="2400238008000b00230a0000060002"], 0x40}, 0x1, 0x0, 0x0, 0x4e008}, 0x4000) 14.100113981s ago: executing program 3 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff0585000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000011c0)={'syz1\x00', {0x3c3, 0x9, 0x0, 0xa}, 0x1d, [0x80, 0x0, 0x4, 0x0, 0x4, 0x4, 0x1, 0x8, 0x10, 0x400, 0x5, 0xde11, 0x9, 0xfffffff1, 0xff, 0x5, 0x4, 0x81, 0x9, 0x5, 0x7f, 0x2, 0x2, 0x7fff, 0x80000000, 0x1, 0x40000, 0xffff8000, 0x0, 0x800, 0xf, 0xa54, 0x2, 0x5, 0xe, 0x2, 0x8, 0xfee, 0x62b, 0x7, 0x3, 0x4, 0x4, 0x7fffffff, 0x55, 0x7ff, 0x6a1, 0xf, 0x0, 0x3, 0x6, 0xb, 0x2, 0x6, 0x0, 0x1, 0xff, 0x2, 0x0, 0x80000001, 0x5d2c, 0xff, 0x7f], [0x1, 0x7ff, 0x0, 0x80000001, 0x2e, 0x0, 0x2e, 0xae, 0x5, 0x2, 0x5, 0x3, 0x9, 0x9, 0x8000, 0x9, 0x1, 0xfffffffb, 0x4, 0x1, 0x0, 0x5, 0x3, 0x696d, 0x8, 0x2, 0x6, 0x1, 0x86000000, 0x8, 0x4, 0x6, 0x3, 0x6, 0xfffffffa, 0x2c4, 0x9, 0x7, 0x800, 0x4, 0x4, 0xf, 0x0, 0x1, 0x7, 0x9, 0x7, 0x6, 0xe254, 0x101, 0x1, 0x4c9, 0x2, 0xfffffffb, 0x5, 0x1f2cde0a, 0x40, 0x5, 0x1bef, 0x1, 0xd95, 0x3, 0xfffffffe, 0x8], [0xffffffff, 0x8, 0xfffffffc, 0x80000001, 0x1, 0x1, 0xfffffff8, 0x8, 0x2, 0xc, 0x2, 0x9, 0x2, 0x7ff, 0x4a, 0x3, 0xffff, 0xf5, 0x101, 0x5, 0x6, 0xffffffff, 0xd, 0x80000000, 0x6, 0x8, 0x7, 0x1, 0xfff, 0x7f, 0x7, 0x7f, 0x80000000, 0x8, 0x1, 0x5, 0x5, 0x6, 0x8001, 0x101, 0xbc60, 0x2, 0x1, 0xb, 0x6, 0x4, 0x154, 0xa4, 0x5, 0x625, 0x7, 0xa977, 0x64, 0x1ff, 0x4, 0x6, 0x8, 0x8, 0xc, 0x20000007, 0x8, 0x7fff, 0x80c], [0x5, 0x6, 0x9, 0x2, 0x2, 0x2, 0x9, 0x2, 0x7, 0x5, 0x6, 0x24a5, 0x0, 0x2, 0x9, 0x0, 0xe402, 0x2, 0xf0000000, 0x8000, 0x8000, 0x67c, 0xffff, 0x8000, 0x7, 0x7fffffff, 0xfff, 0x3, 0x9, 0x4, 0x3, 0x1, 0x7ff, 0x80, 0x2, 0x80000001, 0xc, 0x9, 0x101, 0x80eb, 0x6, 0xfffffffc, 0x7fff, 0x8, 0x1ff, 0x9, 0x7, 0x4a, 0x70a, 0x400, 0xefe, 0x4, 0xfffeffff, 0x7, 0xfffffff3, 0x3, 0x7, 0x800, 0x2, 0x6, 0xc, 0x10000, 0x3, 0x6]}, 0x45c) socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) preadv(r5, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 14.089882284s ago: executing program 2 (id=466): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x44}}, 0x0) 13.897006746s ago: executing program 0 (id=468): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0xacd8e6b, 0x0, 0x4, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 13.639993555s ago: executing program 2 (id=469): syz_open_dev$video(0x0, 0x7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket(0x10, 0x40000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r0, 0x0, 0x86) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 13.491955859s ago: executing program 2 (id=470): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000640)={{0xb, 0x2, 0x81, 0x5, 'syz1\x00', 0x9}, 0x0, [0x380, 0x10e8af, 0x1, 0xcc0, 0xe, 0x101, 0x80, 0xa6da, 0x2, 0x1, 0x9, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x5, 0x4, 0x40f, 0x80, 0x962, 0x2, 0x1, 0x400, 0x7fffffff, 0xc360, 0x80000001, 0x6, 0x60e3, 0xa12, 0x8, 0x10000, 0x7, 0x9, 0x107430, 0x2, 0x2, 0x609, 0x1, 0x3, 0x8, 0x15, 0x8001, 0x8, 0x9, 0x1, 0x1, 0x4, 0xffff1688, 0x2, 0x0, 0x4, 0x9000, 0xe93, 0x4, 0x7ff, 0x7, 0x81, 0x50a, 0x0, 0x6, 0x802, 0x1000, 0xffffffff, 0x4, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x3, 0x7, 0x1000ac, 0x7, 0x7, 0x4, 0x8000, 0x9, 0x4, 0x7, 0xd, 0x7, 0x5, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x4, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x5, 0x4, 0xe, 0x1, 0x7, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x6, 0xfffffff7, 0xffffbf90, 0xfffffffd, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xffffffff, 0x73938332, 0x7763]}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x7fff, 0xc86, 0x2, 0x3, 0x8, 0x0}) prlimit64(r1, 0xc, &(0x7f0000000340)={0x101, 0x100}, &(0x7f0000000380)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fc5bdf255400000008000300", @ANYRES32=r9], 0x30}, 0x1, 0x0, 0x0, 0x20004801}, 0x20040080) 12.909391189s ago: executing program 4 (id=471): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000380)="1158b02b9f3480993feb0190c29425eeccf683e006ebc40cc4129b793fae413c3c7a64d1edd720c9c36f93da50c428d673780132954f933dc650773978c128fd3e0a3bd8415e5d182611cbc1a7f56d8dd89c1d4a8ed34bc35361abbb92bafa1854e3be689b8eb614822f66559adba2daf3555b0a711f1a4d89b2a72c770b14cc9f1eba7c4188cbf70b62a0ec7bd142a950963ddf26620e8be52c3e511eb21779c6497d5cf13e845a760ae608f0e7223d72aa317fffec85e778e59740fad0f80d8a47127f92e8512432486a0a46ce0fd8354158f6351500f684f913050d3b0571829a84ae8058a58f01e15694eef87316ed8361f95db76ca043dc1a335f83d2cd") io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 12.123056014s ago: executing program 1 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x9}) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @mcast1}, r4}}, 0x48) 11.950311856s ago: executing program 0 (id=473): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001380)={0x0, 0x183, 0x0, 'queue1\x00', 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, 0x9}) 11.946510316s ago: executing program 2 (id=474): creat(0x0, 0xc9028ba210c11f8b) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) 10.475885364s ago: executing program 1 (id=475): fcntl$lock(0xffffffffffffffff, 0x26, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x41) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="f5a233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc600f83c67cc6b675eb43188b5cbf9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8fc8e887c8f2de06f38e99174bf4d45b6f13c813dee4fba1204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) listen(r1, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r5, 0x7) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) writev(r6, &(0x7f0000000000)=[{0x0}], 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') connect$pppoe(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01) 10.350486168s ago: executing program 0 (id=476): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x800, &(0x7f0000000300)={[{@space_cache_v1}, {@flushoncommit}, {@notreelog}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@ref_verify}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 10.317449929s ago: executing program 2 (id=477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x83}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c00000002060102000000000000000000000000140007800800124000060000080008400000003710000300686173683a69702c6d616300050005000a00000005000400000000000900020073797a31000000000500010007"], 0x5c}}, 0x0) 9.724695644s ago: executing program 2 (id=478): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x200414, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0xff, 0x5ad0, &(0x7f000000bec0)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) 8.859632264s ago: executing program 5 (id=480): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r6 = socket(0x25, 0x1, 0x0) recvmsg$can_raw(r6, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r7, 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) vmsplice(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) write$binfmt_elf64(r9, &(0x7f0000000000)=ANY=[], 0x18c6) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3d8, 0x218, 0x218, 0x10c, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 0x5, 0x0, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x3, 0x7, 0x7fff, 0x0, 0x9, 0x1, 'ip6erspan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x2}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010101, @multicast2, 0x7}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @remote, @multicast2, 0x8, 0x1}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) 8.547040797s ago: executing program 1 (id=481): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x20, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, 0x0, &(0x7f0000000280)}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x18) r6 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) personality(0x8001a0ffffffff) readv(r6, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r8, 0x701, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r9, 0xc040564a, &(0x7f0000000200)={0x730, 0x0, 0x3007}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x3c, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x48040) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 7.452067462s ago: executing program 5 (id=482): syz_open_dev$video(0x0, 0x7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket(0x10, 0x40000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r0, 0x0, 0x86) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 7.227463716s ago: executing program 1 (id=483): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = syz_io_uring_setup(0x42e6, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0x4, 0x25d, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 6.815298215s ago: executing program 5 (id=484): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x43f01, 0x5000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xa884}, 0x8002) r3 = openat$dir(0xffffff9c, &(0x7f0000000200)='./file0\x00', 0x20d00, 0x0) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x20) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0186404, &(0x7f0000000000)={&(0x7f00003ae000/0x1000)=nil}) 6.570306778s ago: executing program 4 (id=485): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1c0, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x24c200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f00000002c0), 0x1, 0x55ae, &(0x7f0000005600)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x800, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_usbip_server_init(0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c8"], 0x7) 6.369352395s ago: executing program 1 (id=486): socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x825, 0x0) chdir(0x0) socket(0x40000000015, 0x5, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES16=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 6.312057887s ago: executing program 0 (id=487): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x5, 0xc, 0x8009, 0x0, 0x9}) readv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}, {0x0, 0xe0ff}], 0x2) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x101d0) 4.807225861s ago: executing program 5 (id=488): syz_open_dev$video4linux(0x0, 0x71, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x800, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="041606aaaafdf35fdeecb7aaaa125428abfb6d0ddeb47dfad9ebe38d65d67ac4d9291611b63efa4d7362311b308bc021ce5063161486ecc6bf477d6266ec332f498bd0"], 0x9) fsopen(&(0x7f0000000a00)='pstore\x00', 0x1) 3.959324992s ago: executing program 3 (id=489): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x2, 0x556, &(0x7f0000000580)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 3.323877546s ago: executing program 4 (id=490): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x80805513, &(0x7f00000000c0)}) 3.323289339s ago: executing program 1 (id=491): syz_open_dev$tty1(0xc, 0x4, 0x2) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00eee814", 0x7, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x3a, 0x2, @thr={&(0x7f0000000000), 0x0}}, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f00000001c0)="d6"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f00000025c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x3, 0x8002, 0x0, 0x3455}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x89745301ffea7a81}, 0x14}}, 0x0) 2.675490946s ago: executing program 5 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000005ac0)={'HL\x00'}, &(0x7f0000005b00)=0x1e) socket$key(0xf, 0x3, 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x62802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 2.488435343s ago: executing program 3 (id=493): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x8, 0x6, &(0x7f00000001c0)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 2.326767468s ago: executing program 4 (id=494): sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f00000004c0)=""/59, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000580)=0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 566.932508ms ago: executing program 5 (id=495): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) sendfile(r1, r2, 0x0, 0x200) 228.022683ms ago: executing program 4 (id=496): syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x3, 0xc8, 0xf0}}}, 0x7) timer_settime(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=497): syz_open_dev$video(0x0, 0x7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket(0x10, 0x40000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r0, 0x0, 0x86) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) kernel console output (not intermixed with test programs): n1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.772714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.861059][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.697564][ T6064] binder: 6063:6064 unknown command 0 [ 121.737060][ T6064] binder: 6063:6064 ioctl c0306201 200000000080 returned -22 [ 123.151643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.106280][ T6076] tty tty3: ldisc open failed (-12), clearing slot 2 [ 124.687994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.790232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 125.182214][ T6037] libceph: connect (1)[c::]:6789 error -101 [ 125.188645][ T6037] libceph: mon0 (1)[c::]:6789 connect error [ 125.213402][ T6037] libceph: connect (1)[c::]:6789 error -101 [ 125.219650][ T6037] libceph: mon0 (1)[c::]:6789 connect error [ 125.302847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.492481][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 125.529917][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 125.639470][ T6085] ceph: No mds server is up or the cluster is laggy [ 125.810377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 126.357597][ T6094] loop4: detected capacity change from 0 to 128 [ 126.513347][ T6094] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.634702][ T6094] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.115286][ T6101] Zero length message leads to an empty skb [ 128.061219][ T6107] netlink: 188 bytes leftover after parsing attributes in process `syz.4.19'. [ 128.891435][ T5989] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.253324][ T5869] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.604241][ T6115] loop4: detected capacity change from 0 to 128 [ 131.631737][ T6115] ======================================================= [ 131.631737][ T6115] WARNING: The mand mount option has been deprecated and [ 131.631737][ T6115] and is ignored by this kernel. Remove the mand [ 131.631737][ T6115] option from the mount to silence this warning. [ 131.631737][ T6115] ======================================================= [ 131.750901][ T6115] EXT4-fs (loop4): Test dummy encryption mode enabled [ 131.863116][ T6115] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.903157][ T6115] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.468740][ T6125] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 133.009721][ T30] audit: type=1400 audit(1758972945.469:2): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=73226865645F737769746368 pid=6113 comm="syz.4.23" [ 133.229833][ T5869] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.085367][ T6132] loop3: detected capacity change from 0 to 64 [ 134.781068][ T5989] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 135.231267][ T5989] usb 6-1: Using ep0 maxpacket: 8 [ 135.837705][ T6142] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 135.844469][ T6142] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 135.853966][ T6142] vhci_hcd vhci_hcd.0: Device attached [ 135.877080][ T5989] usb 6-1: unable to get BOS descriptor or descriptor too short [ 135.884962][ T6143] vhci_hcd: connection closed [ 135.904327][ T13] vhci_hcd: stop threads [ 135.922425][ T5989] usb 6-1: config 0 has no interfaces? [ 135.944971][ T13] vhci_hcd: release socket [ 135.954058][ T5989] usb 6-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 135.973171][ T13] vhci_hcd: disconnect device [ 136.010261][ T5989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.037898][ T5989] usb 6-1: Product: syz [ 136.061456][ T5989] usb 6-1: Manufacturer: syz [ 136.077407][ T5989] usb 6-1: SerialNumber: syz [ 136.123202][ T5989] usb 6-1: config 0 descriptor?? [ 136.418708][ T5949] usb 6-1: USB disconnect, device number 2 [ 137.612260][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.741205][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 138.763900][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 138.800154][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 140.191140][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.199179][ T9] usb 3-1: Product: syz [ 140.222818][ T9] usb 3-1: Manufacturer: syz [ 140.227536][ T9] usb 3-1: SerialNumber: syz [ 140.375711][ T9] usb 3-1: config 0 descriptor?? [ 141.709572][ T6179] netlink: 48 bytes leftover after parsing attributes in process `syz.4.40'. [ 141.979971][ T9] usb 3-1: can't set config #0, error -71 [ 141.994159][ T9] usb 3-1: USB disconnect, device number 2 [ 142.446820][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.477121][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.922356][ T6192] loop2: detected capacity change from 0 to 1024 [ 143.240000][ T6198] vim2m vim2m.0: vidioc_s_fmt queue busy [ 144.047290][ T6190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.617972][ T6192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.101214][ T5989] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 145.934965][ T5863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.960636][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.974998][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.985224][ T5989] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.019552][ T5989] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.041106][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.083556][ T5989] usb 4-1: config 0 descriptor?? [ 146.265642][ T6218] loop2: detected capacity change from 0 to 64 [ 146.781144][ T6223] loop1: detected capacity change from 0 to 128 [ 147.637576][ T5989] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 149.476466][ T5989] usb 4-1: USB disconnect, device number 2 [ 149.496511][ T6230] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 149.503131][ T6230] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 149.511333][ T6230] vhci_hcd vhci_hcd.0: Device attached [ 149.527427][ T6231] vhci_hcd: connection closed [ 149.528538][ T2944] vhci_hcd: stop threads [ 149.556824][ T2944] vhci_hcd: release socket [ 149.568783][ T2944] vhci_hcd: disconnect device [ 149.712399][ T6237] loop1: detected capacity change from 0 to 64 [ 149.836033][ T6239] loop3: detected capacity change from 0 to 512 [ 149.939116][ T6233] fido_id[6233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 150.144137][ T6239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.245859][ T6239] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.076267][ T6257] syz.4.58 (6257): drop_caches: 2 [ 152.478410][ T6263] loop0: detected capacity change from 0 to 512 [ 152.630366][ T6263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.917214][ T5866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.306743][ T5862] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.932322][ T48] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 155.021080][ T5989] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 155.141094][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 155.163576][ T48] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 155.193019][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.207995][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.253325][ T48] usb 6-1: config 0 descriptor?? [ 155.258517][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.285008][ T5989] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.321158][ T5989] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.341951][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.374142][ T5989] usb 4-1: config 0 descriptor?? [ 155.429789][ T6270] loop2: detected capacity change from 0 to 32768 [ 155.467334][ T6270] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.62 (6270) [ 155.497985][ T48] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 155.507602][ T6267] loop4: detected capacity change from 0 to 32768 [ 155.538577][ T6270] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 155.552696][ T48] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.592000][ T6270] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 155.592565][ T48] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 155.609501][ T48] usb 6-1: media controller created [ 155.649417][ T6267] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 155.676791][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.870272][ T5989] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 155.901680][ T48] az6027: usb out operation failed. (-71) [ 155.912681][ T48] az6027: usb out operation failed. (-71) [ 155.921723][ T48] stb0899_attach: Driver disabled by Kconfig [ 155.928936][ T48] az6027: no front-end attached [ 155.928936][ T48] [ 155.936693][ T48] az6027: usb out operation failed. (-71) [ 155.945801][ T48] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 155.955202][ T6270] BTRFS info (device loop2): enabling ssd optimizations [ 155.962670][ T6270] BTRFS info (device loop2): enabling free space tree [ 155.973731][ T48] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5 [ 155.987019][ T6270] BTRFS info (device loop2): use zstd compression, level 3 [ 156.058254][ T48] dvb-usb: schedule remote query interval to 400 msecs. [ 156.067443][ T6267] XFS (loop4): Ending clean mount [ 156.096866][ T48] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 156.135858][ T6267] XFS (loop4): Quotacheck needed: Please wait. [ 156.165965][ T48] usb 6-1: USB disconnect, device number 3 [ 156.320632][ T5863] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 156.384823][ T6267] XFS (loop4): Quotacheck: Done. [ 156.663889][ T5869] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.678007][ T48] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 157.373868][ T6286] loop1: detected capacity change from 0 to 32768 [ 157.422174][ T6286] XFS: noikeep mount option is deprecated. [ 157.444690][ T5989] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 157.500548][ T6286] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 157.621096][ T5989] usb 3-1: Using ep0 maxpacket: 8 [ 157.633625][ T5989] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.652538][ T5989] usb 3-1: config 0 has no interfaces? [ 157.663260][ T5989] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 157.674595][ T6286] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 157.681418][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.719971][ T5989] usb 3-1: Product: syz [ 157.736238][ T5989] usb 3-1: Manufacturer: syz [ 157.740854][ T5989] usb 3-1: SerialNumber: syz [ 157.831636][ T6286] XFS (loop1): Starting recovery (logdev: internal) [ 157.844630][ T5989] usb 3-1: config 0 descriptor?? [ 158.039296][ T6337] loop3: detected capacity change from 0 to 32768 [ 158.051275][ T973] usb 4-1: USB disconnect, device number 3 [ 158.192604][ T5989] usb 3-1: USB disconnect, device number 3 [ 158.364499][ T6337] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 158.364530][ T6337] allowing incompatible features above 0.0: (unknown version) [ 158.364547][ T6337] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 158.404128][ T6337] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 158.412381][ T6337] bcachefs (loop3): initializing new filesystem [ 158.428313][ T6337] bcachefs (loop3): going read-write [ 158.504276][ T6286] XFS (loop1): Ending recovery (logdev: internal) [ 158.533090][ T6347] loop4: detected capacity change from 0 to 256 [ 158.629006][ T6347] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 158.681395][ T6337] bcachefs (loop3): marking superblocks [ 158.699026][ T6337] bcachefs (loop3): initializing freespace [ 158.708570][ T6337] bcachefs (loop3): done initializing freespace [ 158.717830][ T6337] bcachefs (loop3): reading snapshots table [ 158.723794][ T6337] bcachefs (loop3): reading snapshots done [ 158.822102][ T6337] bcachefs (loop3): done starting filesystem [ 159.206713][ T6359] warning: `syz.3.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 159.284165][ T6347] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 159.330585][ T6337] syz.3.77 (6337) used greatest stack depth: 19016 bytes left [ 159.701143][ T6347] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 159.785545][ T5870] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.795037][ T6347] UDF-fs: Scanning with blocksize 512 failed [ 159.803656][ T5866] bcachefs (loop3): shutting down [ 159.832165][ T5866] bcachefs (loop3): going read-only [ 159.837852][ T5866] bcachefs (loop3): finished waiting for writes to stop [ 159.925182][ T6347] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 159.984829][ T5866] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 160.013176][ T6347] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.434344][ T5866] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 160.561124][ T5866] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 160.569649][ T5866] bcachefs (loop3): marking filesystem clean [ 160.866229][ T5866] bcachefs (loop3): shutdown complete [ 161.802822][ T6372] loop1: detected capacity change from 0 to 512 [ 161.869984][ T6372] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.957601][ T6372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.352303][ T6364] loop4: detected capacity change from 0 to 32768 [ 163.417805][ T5870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.421483][ T6364] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.81 (6364) [ 163.444357][ T6383] loop0: detected capacity change from 0 to 128 [ 163.470763][ T6383] msdos: Bad value for 'gid' [ 163.480193][ T6383] msdos: Bad value for 'gid' [ 163.635476][ T6364] BTRFS error (device loop4): open_ctree failed: -4 [ 166.595608][ T6395] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 166.603970][ T6395] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 166.612447][ T6395] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 166.754118][ T6393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.332099][ T6408] loop2: detected capacity change from 0 to 128 [ 167.576187][ T6408] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 167.666206][ T6408] hpfs: filesystem error: improperly stopped [ 167.715949][ T6408] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 167.765782][ T6408] hpfs: You really don't want any checks? You are crazy... [ 167.808835][ T6408] hpfs: hpfs_map_sector(): read error [ 167.862199][ T6408] hpfs: code page support is disabled [ 167.888147][ T6408] hpfs: hpfs_map_4sectors(): unaligned read [ 167.952728][ T6408] hpfs: hpfs_map_4sectors(): unaligned read [ 167.958649][ T6408] hpfs: filesystem error: unable to find root dir [ 168.427706][ T6422] ptrace attach of "./syz-executor exec"[5863] was attempted by ""[6422] [ 168.944023][ T6421] loop1: detected capacity change from 0 to 1024 [ 168.990215][ T6421] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.637941][ T6421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.136686][ T6434] program syz.1.98 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.783329][ T5870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.351733][ T48] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 171.621137][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 171.691139][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 171.765794][ T48] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 171.792311][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.811073][ T48] usb 3-1: Product: syz [ 171.815255][ T48] usb 3-1: Manufacturer: syz [ 171.819853][ T48] usb 3-1: SerialNumber: syz [ 171.864474][ T48] usb 3-1: config 0 descriptor?? [ 171.903811][ T48] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 171.939596][ T48] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 171.987071][ T6448] mmap: syz.1.106 (6448) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 172.514340][ T48] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 173.682783][ T48] em28xx 3-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 173.691766][ T48] em28xx 3-1:0.0: failed to read eeprom (err=-5) [ 173.698131][ T48] em28xx 3-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 173.761062][ T48] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 173.768911][ T48] em28xx 3-1:0.0: dvb set to bulk mode. [ 173.794118][ T5989] em28xx 3-1:0.0: Binding DVB extension [ 173.832710][ T48] usb 3-1: USB disconnect, device number 4 [ 173.888367][ T48] em28xx 3-1:0.0: Disconnecting em28xx [ 174.026174][ T5989] em28xx 3-1:0.0: Registering input extension [ 174.058397][ T48] em28xx 3-1:0.0: Closing input extension [ 174.391244][ T48] em28xx 3-1:0.0: Freeing device [ 175.945077][ T6466] loop0: detected capacity change from 0 to 64 [ 176.734151][ T6470] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 176.873909][ T6472] loop0: detected capacity change from 0 to 128 [ 176.967608][ T6472] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.026847][ T6472] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.750949][ T5862] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.385041][ T6500] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 182.086246][ T6513] loop3: detected capacity change from 0 to 16 [ 182.123068][ T6513] erofs (device loop3): mounted with root inode @ nid 36. [ 182.368420][ T6512] loop0: detected capacity change from 0 to 4096 [ 182.398907][ T6512] ntfs3: Unknown parameter '/dev/audio#' [ 182.732889][ T6498] loop4: detected capacity change from 0 to 32768 [ 183.474847][ T6498] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 183.476583][ T6498] (syz.4.121,6498,1):ocfs2_initialize_super:2229 ERROR: status = -12 [ 183.755641][ T6500] syz.5.122 (6500): drop_caches: 2 [ 183.786495][ T6498] (syz.4.121,6498,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 183.893002][ T6521] veth0_to_team: entered promiscuous mode [ 183.898831][ T6521] veth0_to_team: entered allmulticast mode [ 184.775064][ T6522] loop0: detected capacity change from 0 to 128 [ 185.158957][ T6522] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.996905][ T6522] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.460660][ T5862] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.564679][ T6553] syz.4.140 (6553): drop_caches: 2 [ 192.394147][ T6569] fuse: Unknown parameter '0xffffffffffffffff' [ 192.847391][ T6575] loop2: detected capacity change from 0 to 128 [ 192.956805][ T6575] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.203697][ T6575] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 194.941169][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.152'. [ 194.950147][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.152'. [ 195.621821][ T6590] ubi31: attaching mtd0 [ 195.629851][ T6590] ubi31: scanning is finished [ 195.634627][ T6590] ubi31: empty MTD device detected [ 195.941841][ T6590] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 195.949460][ T6590] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 195.958482][ T6590] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 195.965573][ T6590] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 195.973151][ T6590] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 195.980035][ T6590] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 195.988168][ T6590] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3097728172 [ 195.998368][ T6590] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 196.028659][ T6592] ubi31: background thread "ubi_bgt31d" started, PID 6592 [ 196.147426][ T5863] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.271178][ T5847] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 196.757351][ T5847] usb 6-1: device descriptor read/all, error -71 [ 198.181671][ T6605] loop3: detected capacity change from 0 to 64 [ 200.639949][ T6629] loop5: detected capacity change from 0 to 128 [ 201.016426][ T6629] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.099452][ T6608] loop0: detected capacity change from 0 to 32768 [ 201.112690][ T6629] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.412281][ T5877] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 202.422106][ T5877] CPU: 0 UID: 0 PID: 5877 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 202.422152][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.422177][ T5877] Workqueue: hci1 hci_rx_work [ 202.422233][ T5877] Call Trace: [ 202.422245][ T5877] [ 202.422258][ T5877] dump_stack_lvl+0x16c/0x1f0 [ 202.422322][ T5877] sysfs_warn_dup+0x7f/0xa0 [ 202.422365][ T5877] sysfs_create_dir_ns+0x24b/0x2b0 [ 202.422408][ T5877] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 202.422450][ T5877] ? find_held_lock+0x2b/0x80 [ 202.422505][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.422551][ T5877] ? do_raw_spin_unlock+0x172/0x230 [ 202.422598][ T5877] kobject_add_internal+0x2c4/0x9b0 [ 202.422647][ T5877] kobject_add+0x16e/0x240 [ 202.422686][ T5877] ? __pfx_kobject_add+0x10/0x10 [ 202.422735][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.422780][ T5877] ? do_raw_spin_unlock+0x172/0x230 [ 202.422823][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.422867][ T5877] ? kobject_put+0xab/0x5a0 [ 202.422906][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.422961][ T5877] device_add+0x288/0x1aa0 [ 202.423002][ T5877] ? __pfx_dev_set_name+0x10/0x10 [ 202.423048][ T5877] ? __pfx_device_add+0x10/0x10 [ 202.423087][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.423132][ T5877] ? mgmt_send_event_skb+0x2fb/0x460 [ 202.423197][ T5877] hci_conn_add_sysfs+0x17e/0x230 [ 202.423259][ T5877] le_conn_complete_evt+0x1260/0x2150 [ 202.423322][ T5877] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 202.423374][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.423437][ T5877] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 202.423491][ T5877] ? skb_pull_data+0x166/0x210 [ 202.423550][ T5877] hci_le_meta_evt+0x357/0x5e0 [ 202.423605][ T5877] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 202.423684][ T5877] hci_event_packet+0x685/0x11c0 [ 202.423741][ T5877] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 202.423800][ T5877] ? __pfx_hci_event_packet+0x10/0x10 [ 202.423852][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.423901][ T5877] ? kcov_remote_start+0x3c9/0x6d0 [ 202.423943][ T5877] ? lockdep_hardirqs_on+0x7c/0x110 [ 202.424002][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.424059][ T5877] hci_rx_work+0x2c5/0x16b0 [ 202.424117][ T5877] ? rcu_is_watching+0x12/0xc0 [ 202.424174][ T5877] process_one_work+0x9cf/0x1b70 [ 202.424243][ T5877] ? __pfx_process_one_work+0x10/0x10 [ 202.424287][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.424344][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.424390][ T5877] ? assign_work+0x1a0/0x250 [ 202.424432][ T5877] worker_thread+0x6c8/0xf10 [ 202.424497][ T5877] ? __pfx_worker_thread+0x10/0x10 [ 202.424540][ T5877] kthread+0x3c5/0x780 [ 202.424579][ T5877] ? __pfx_kthread+0x10/0x10 [ 202.424619][ T5877] ? srso_alias_return_thunk+0x5/0xfbef5 [ 202.424665][ T5877] ? rcu_is_watching+0x12/0xc0 [ 202.424713][ T5877] ? __pfx_kthread+0x10/0x10 [ 202.424757][ T5877] ret_from_fork+0x56d/0x730 [ 202.424792][ T5877] ? __pfx_kthread+0x10/0x10 [ 202.424831][ T5877] ret_from_fork_asm+0x1a/0x30 [ 202.424902][ T5877] [ 202.424937][ T5877] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 202.743696][ T5877] Bluetooth: hci1: failed to register connection device [ 202.785341][ T5878] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.881647][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.888061][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.981863][ T6656] sg_write: data in/out 768/16 bytes for SCSI command 0x2e-- guessing data in; [ 203.981863][ T6656] program syz.5.173 not setting count and/or reply_len properly [ 204.144391][ T6659] loop4: detected capacity change from 0 to 512 [ 204.221927][ T6659] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 204.334470][ T6647] loop0: detected capacity change from 0 to 32768 [ 204.343383][ T6659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.669688][ T6647] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 204.718774][ T5869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.746570][ T6649] loop2: detected capacity change from 0 to 32768 [ 204.804545][ T6649] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.171 (6649) [ 204.869247][ T6649] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 204.901510][ T6647] (syz.0.169,6647,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 204.921629][ T6649] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 205.220029][ T6678] loop4: detected capacity change from 0 to 1024 [ 205.274051][ T6649] BTRFS info (device loop2): rebuilding free space tree [ 205.297398][ T5862] ocfs2: Unmounting device (7,0) on (node local) [ 205.393205][ T6678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.409262][ T6690] loop1: detected capacity change from 0 to 64 [ 205.418316][ T6649] BTRFS info (device loop2): disabling free space tree [ 205.451276][ T6649] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 205.501899][ T6649] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 205.636020][ T6649] BTRFS info (device loop2): enabling ssd optimizations [ 206.593332][ T6649] BTRFS info (device loop2): force clearing of disk cache [ 206.616873][ T6678] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.175: inode #1163684815: comm syz.4.175: iget: illegal inode # [ 206.691917][ T6649] BTRFS info (device loop2): enabling auto defrag [ 206.775466][ T6649] BTRFS info (device loop2): doing ref verification [ 206.824728][ T6678] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.175: error while reading EA inode 1163684815 err=-117 [ 207.955652][ T5869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.003378][ T5863] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 208.474202][ T6711] loop1: detected capacity change from 0 to 1024 [ 208.662461][ T6711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.448725][ T6711] EXT4-fs error (device loop1): ext4_xattr_set_entry:1660: inode #15: comm syz.1.184: corrupted xattr entries [ 210.523298][ T6711] EXT4-fs error (device loop1): ext4_xattr_block_set:2209: inode #15: comm syz.1.184: bad block 113 [ 210.639557][ T6730] loop0: detected capacity change from 0 to 1024 [ 210.850655][ T5870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.261390][ T6732] loop5: detected capacity change from 0 to 32768 [ 213.527975][ T6732] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 213.893546][ T5878] ocfs2: Unmounting device (7,5) on (node local) [ 214.071837][ T6735] loop1: detected capacity change from 0 to 32768 [ 214.205051][ T6755] loop4: detected capacity change from 0 to 256 [ 214.211816][ T6735] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.189 (6735) [ 214.357514][ T6752] loop2: detected capacity change from 0 to 32768 [ 214.370773][ T6752] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.194 (6752) [ 214.483740][ T6755] FAT-fs (loop4): Directory bread(block 64) failed [ 214.520309][ T6755] FAT-fs (loop4): Directory bread(block 65) failed [ 214.559548][ T6755] FAT-fs (loop4): Directory bread(block 66) failed [ 214.601976][ T6752] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 214.616020][ T6752] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 214.640113][ T6755] FAT-fs (loop4): Directory bread(block 67) failed [ 214.955361][ T6755] FAT-fs (loop4): Directory bread(block 68) failed [ 215.154062][ T6755] FAT-fs (loop4): Directory bread(block 69) failed [ 215.160804][ T6755] FAT-fs (loop4): Directory bread(block 70) failed [ 215.312421][ T6755] FAT-fs (loop4): Directory bread(block 71) failed [ 215.332784][ T6752] BTRFS info (device loop2): enabling ssd optimizations [ 215.339748][ T6752] BTRFS info (device loop2): enabling free space tree [ 215.351086][ T5989] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 215.371195][ T6755] FAT-fs (loop4): Directory bread(block 72) failed [ 215.371253][ T6755] FAT-fs (loop4): Directory bread(block 73) failed [ 215.673584][ T5989] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.796350][ T5989] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.895790][ T5989] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.258892][ T6782] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 216.265540][ T6782] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 216.273735][ T6782] vhci_hcd vhci_hcd.0: Device attached [ 216.681673][ T6037] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 216.701644][ T5989] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.722816][ T6783] vhci_hcd: connection closed [ 216.731374][ T6158] vhci_hcd: stop threads [ 216.751402][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.769906][ T6158] vhci_hcd: release socket [ 216.778828][ T6158] vhci_hcd: disconnect device [ 216.814202][ T5989] usb 6-1: config 0 descriptor?? [ 216.891789][ T6037] usb 2-1: Using ep0 maxpacket: 32 [ 216.909913][ T6037] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 216.954077][ T6037] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 217.025200][ T6037] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 217.067406][ T6037] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 217.121126][ T6037] usb 2-1: Product: syz [ 217.125358][ T6037] usb 2-1: Manufacturer: syz [ 217.181619][ T6037] usb 2-1: SerialNumber: syz [ 217.265315][ T6792] loop3: detected capacity change from 0 to 256 [ 217.532288][ T5863] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 217.572450][ T5989] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 218.381336][ T6792] FAT-fs (loop3): Directory bread(block 64) failed [ 218.411633][ T6792] FAT-fs (loop3): Directory bread(block 65) failed [ 218.418304][ T6792] FAT-fs (loop3): Directory bread(block 66) failed [ 218.452676][ T6792] FAT-fs (loop3): Directory bread(block 67) failed [ 218.474487][ T5989] usb 6-1: USB disconnect, device number 6 [ 218.481824][ T6037] usb 2-1: config 0 descriptor?? [ 218.501415][ T6792] FAT-fs (loop3): Directory bread(block 68) failed [ 218.507952][ T6792] FAT-fs (loop3): Directory bread(block 69) failed [ 218.514640][ T6792] FAT-fs (loop3): Directory bread(block 70) failed [ 218.521827][ T6792] FAT-fs (loop3): Directory bread(block 71) failed [ 218.528630][ T6792] FAT-fs (loop3): Directory bread(block 72) failed [ 218.538725][ T6792] FAT-fs (loop3): Directory bread(block 73) failed [ 218.599771][ T6037] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 218.935278][ T6803] loop0: detected capacity change from 0 to 2048 [ 219.034648][ T6803] ext4: Unknown parameter 'appraise' [ 219.943390][ T12] usb 2-1: Failed to submit usb control message: -110 [ 219.950520][ T12] usb 2-1: unable to send the bmi data to the device: -110 [ 221.172402][ T12] usb 2-1: unable to get target info from device [ 221.178807][ T12] usb 2-1: could not get target info (-110) [ 221.238162][ T12] usb 2-1: could not probe fw (-110) [ 221.381925][ T5847] usb 2-1: USB disconnect, device number 2 [ 221.521261][ T6808] fido_id[6808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 221.994515][ T6803] loop0: detected capacity change from 0 to 512 [ 222.029586][ T6803] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.184020][ T6803] ext4: Bad value for 'max_batch_time' [ 222.342147][ T6817] loop1: detected capacity change from 0 to 128 [ 222.644683][ T6817] EXT4-fs (loop1): Test dummy encryption mode enabled [ 222.837641][ T6817] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.884253][ T6817] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 224.289843][ T5870] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.202574][ T6845] loop4: detected capacity change from 0 to 40427 [ 226.255843][ T6845] F2FS-fs (loop4): build fault injection rate: 14 [ 226.262531][ T6845] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 226.275952][ T6845] F2FS-fs (loop4): invalid crc value [ 226.293909][ C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 226.323290][ C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 226.429940][ T6845] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 226.439149][ T6845] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x49d/0x98b0 [ 226.473591][ T6845] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 226.492249][ T6845] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 226.530745][ T6845] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of __get_node_folio+0x12d/0x1b0 [ 226.542319][ T6845] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 226.598363][ T6851] loop1: detected capacity change from 0 to 2048 [ 226.599524][ T6853] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x236/0x1090 [ 226.714811][ T6845] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of __get_node_folio+0x12d/0x1b0 [ 226.726388][ T6845] F2FS-fs (loop4): inconsistent node block, node_type:0, nid:15, node_footer[nid:15,ino:3,ofs:2041,cpver:0,blkaddr:0] [ 226.850710][ T6854] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.075554][ T5869] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of commit_checkpoint+0x97/0x4e0 [ 227.873148][ T5882] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 227.882993][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) [ 227.883042][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 227.883067][ T5882] Workqueue: hci1 hci_rx_work [ 227.883124][ T5882] Call Trace: [ 227.883136][ T5882] [ 227.883149][ T5882] dump_stack_lvl+0x16c/0x1f0 [ 227.883214][ T5882] sysfs_warn_dup+0x7f/0xa0 [ 227.883257][ T5882] sysfs_create_dir_ns+0x24b/0x2b0 [ 227.883300][ T5882] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 227.883342][ T5882] ? find_held_lock+0x2b/0x80 [ 227.883397][ T5882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.883443][ T5882] ? do_raw_spin_unlock+0x172/0x230 [ 227.883489][ T5882] kobject_add_internal+0x2c4/0x9b0 [ 227.883538][ T5882] kobject_add+0x16e/0x240 [ 227.883577][ T5882] ? __pfx_kobject_add+0x10/0x10 [ 227.883618][ T5882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.883662][ T5882] ? do_raw_spin_unlock+0x172/0x230 [ 227.883728][ T5882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.883779][ T5882] ? kobject_put+0xab/0x5a0 [ 227.883818][ T5882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.883873][ T5882] device_add+0x288/0x1aa0 [ 227.883915][ T5882] ? __pfx_dev_set_name+0x10/0x10 [ 227.883961][ T5882] ? __pfx_device_add+0x10/0x10 [ 227.884000][ T5882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.884045][ T5882] ? mgmt_send_event_skb+0x2fb/0x460 [ 227.884110][ T5882] hci_conn_add_sysfs+0x17e/0x230 [ 227.884171][ T5882] le_conn_complete_evt+0x1260/0x2150 [ 227.884234][ T5882] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 227.884285][ T5882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.884348][ T5882] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 227.884402][ T5882] ? skb_pull_data+0x166/0x210 [ 227.884461][ T5882] hci_le_meta_evt+0x357/0x5e0 [ 227.884516][ T5882] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 227.884576][ T5882] hci_event_packet+0x685/0x11c0 [ 227.884627][ T5882] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 227.884685][ T5882] ? __pfx_hci_event_packet+0x10/0x10 [ 227.884736][ T5882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.884790][ T5882] ? kcov_remote_start+0x3c9/0x6d0 [ 227.884832][ T5882] ? lockdep_hardirqs_on+0x7c/0x110 [ 227.884891][ T5882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.884947][ T5882] hci_rx_work+0x2c5/0x16b0 [ 227.885006][ T5882] ? rcu_is_watching+0x12/0xc0 [ 227.885062][ T5882] process_one_work+0x9cf/0x1b70 [ 227.885123][ T5882] ? __pfx_process_one_work+0x10/0x10 [ 227.885166][ T5882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.885223][ T5882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.885268][ T5882] ? assign_work+0x1a0/0x250 [ 227.885310][ T5882] worker_thread+0x6c8/0xf10 [ 227.885373][ T5882] ? __pfx_worker_thread+0x10/0x10 [ 227.885415][ T5882] kthread+0x3c5/0x780 [ 227.885454][ T5882] ? __pfx_kthread+0x10/0x10 [ 227.885494][ T5882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.885539][ T5882] ? rcu_is_watching+0x12/0xc0 [ 227.885587][ T5882] ? __pfx_kthread+0x10/0x10 [ 227.885635][ T5882] ret_from_fork+0x56d/0x730 [ 227.885670][ T5882] ? __pfx_kthread+0x10/0x10 [ 227.885709][ T5882] ret_from_fork_asm+0x1a/0x30 [ 227.885788][ T5882] [ 227.885824][ T5882] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 228.211184][ T5882] Bluetooth: hci1: failed to register connection device [ 229.941166][ T5872] Bluetooth: hci0: command 0x0c1a tx timeout [ 230.211208][ T6862] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 230.471405][ T6862] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 230.538969][ T6862] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 230.591549][ T6862] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.621385][ T6862] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 230.945391][ T6862] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 230.963712][ T6880] pimreg: entered allmulticast mode [ 231.157775][ T6862] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 231.266563][ T6862] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.353368][ T6862] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 231.362033][ T6862] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 231.368455][ T6862] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 231.376182][ T6862] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.383612][ T6862] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 231.640610][ T5865] Bluetooth: hci5: command 0x0406 tx timeout [ 231.645387][ T6892] fuse: Bad value for 'fd' [ 231.694406][ T6862] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 231.696330][ T6862] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 232.271159][ T5882] Bluetooth: hci0: command 0x0c1a tx timeout [ 232.385779][ T6899] loop4: detected capacity change from 0 to 64 [ 232.672538][ T5882] Bluetooth: hci1: command 0x0c1a tx timeout [ 233.931523][ T5882] Bluetooth: hci3: command 0x0406 tx timeout [ 233.931851][ T5865] Bluetooth: hci2: command 0x0c1a tx timeout [ 233.937623][ T5882] Bluetooth: hci4: command 0x0c1a tx timeout [ 233.943666][ T5865] Bluetooth: hci5: command 0x0406 tx timeout [ 233.972196][ T6905] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 233.978831][ T6905] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 233.986620][ T6907] vhci_hcd: connection closed [ 233.986618][ T6905] vhci_hcd vhci_hcd.0: Device attached [ 234.004262][ T1155] vhci_hcd: stop threads [ 234.008558][ T1155] vhci_hcd: release socket [ 234.013038][ T1155] vhci_hcd: disconnect device [ 234.233258][ T6910] fuse: Bad value for 'fd' [ 234.351269][ T5872] Bluetooth: hci0: command 0x0c1a tx timeout [ 234.751118][ T5872] Bluetooth: hci1: command 0x0c1a tx timeout [ 235.951152][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 235.957282][ T5882] Bluetooth: hci2: command 0x0c1a tx timeout [ 236.031163][ T5872] Bluetooth: hci4: command 0x0c1a tx timeout [ 236.037231][ T5882] Bluetooth: hci5: command 0x0406 tx timeout [ 236.237712][ T6918] loop0: detected capacity change from 0 to 128 [ 236.351719][ T6918] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.457925][ T6918] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 236.832360][ T5865] Bluetooth: hci1: command 0x0c1a tx timeout [ 238.761851][ T5865] Bluetooth: hci5: command 0x0406 tx timeout [ 238.911126][ T5865] Bluetooth: hci1: command 0x0c1a tx timeout [ 239.898605][ T5862] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.480723][ T6948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.239'. [ 243.185748][ T6955] loop0: detected capacity change from 0 to 64 [ 244.804298][ T6962] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 244.810945][ T6962] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 244.818629][ T6962] vhci_hcd vhci_hcd.0: Device attached [ 244.825444][ T6965] vhci_hcd: connection closed [ 244.830226][ T5996] vhci_hcd: stop threads [ 244.873829][ T5996] vhci_hcd: release socket [ 244.878272][ T5996] vhci_hcd: disconnect device [ 247.648408][ T6990] loop5: detected capacity change from 0 to 512 [ 247.721485][ T6990] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 247.822158][ T6990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.972063][ T5878] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.018023][ T6975] loop2: detected capacity change from 0 to 32768 [ 248.148814][ T6975] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.247 (6975) [ 248.281315][ T6975] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 248.356971][ T6975] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 248.561339][ T6975] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 248.587683][ T6975] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 248.630930][ T6975] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 248.652937][ T6975] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 248.675759][ T6975] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 248.711325][ T6975] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 248.727065][ T6981] loop0: detected capacity change from 0 to 32768 [ 248.751866][ T6975] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 248.752233][ T6975] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 248.763164][ T6975] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 248.782190][ T6981] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.249 (6981) [ 248.852055][ T6975] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 248.852442][ T6975] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 248.909317][ T6975] BTRFS error (device loop2): open_ctree failed: -12 [ 250.811108][ T5989] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 251.303051][ T7027] loop2: detected capacity change from 0 to 32768 [ 251.311641][ T6037] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 251.321089][ T5989] usb 2-1: Using ep0 maxpacket: 8 [ 251.326704][ T7027] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.261 (7027) [ 251.352666][ T5989] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.378294][ T7027] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 251.388524][ T7027] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 251.399366][ T5989] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 251.449889][ T5989] usb 2-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 251.531910][ T5989] usb 2-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 251.562957][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.575818][ T6037] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 251.631238][ T6037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.643788][ T6037] usb 6-1: config 0 descriptor?? [ 251.649080][ T5989] usb 2-1: Product: syz [ 251.661355][ T7027] BTRFS info (device loop2): enabling ssd optimizations [ 251.669594][ T7027] BTRFS info (device loop2): enabling free space tree [ 251.683933][ T5989] usb 2-1: Manufacturer: syz [ 251.703432][ T5989] usb 2-1: SerialNumber: syz [ 252.400582][ T7045] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 252.407232][ T7045] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 252.415306][ T7045] vhci_hcd vhci_hcd.0: Device attached [ 252.578369][ T7047] vhci_hcd: connection closed [ 252.765858][ T48] vhci_hcd: vhci_device speed not set [ 252.818298][ T3016] vhci_hcd: stop threads [ 252.831230][ T3016] vhci_hcd: release socket [ 252.851703][ T3016] vhci_hcd: disconnect device [ 252.868969][ T6037] pegasus 6-1:0.0: probe with driver pegasus failed with error -71 [ 252.882765][ T48] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 252.924037][ T5989] usb 2-1: USB disconnect, device number 3 [ 252.935795][ T6037] usb 6-1: USB disconnect, device number 7 [ 252.956136][ T7052] loop3: detected capacity change from 0 to 128 [ 252.985912][ T7051] loop4: detected capacity change from 0 to 128 [ 252.998134][ T7052] EXT4-fs (loop3): Test dummy encryption mode enabled [ 253.019883][ T7051] EXT4-fs (loop4): Test dummy encryption mode enabled [ 253.046177][ T7026] loop0: detected capacity change from 0 to 32768 [ 253.082761][ T7052] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.101440][ T7051] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.116747][ T7026] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.260 (7026) [ 253.160706][ T7051] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 253.203038][ T7052] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 253.492262][ T5863] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 253.515904][ T7026] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 253.527287][ T7026] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 254.082160][ T7026] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 254.082565][ T7026] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 254.123292][ T7026] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 254.154086][ T7026] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 254.275750][ T7026] BTRFS error (device loop0): open_ctree failed: -12 [ 254.433863][ T5869] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.559133][ T7086] netlink: 788 bytes leftover after parsing attributes in process `syz.5.267'. [ 256.898302][ T5866] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.031383][ T48] vhci_hcd: vhci_device speed not set [ 260.877396][ T7126] loop2: detected capacity change from 0 to 64 [ 261.071136][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 262.151305][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 262.526863][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 263.017976][ T7132] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 263.024628][ T7132] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 263.033168][ T7132] vhci_hcd vhci_hcd.0: Device attached [ 263.161116][ T7133] vhci_hcd: connection closed [ 263.627241][ T9] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 263.731323][ T6158] vhci_hcd: stop threads [ 263.754659][ T6158] vhci_hcd: release socket [ 263.759213][ T9] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 264.041289][ T6158] vhci_hcd: disconnect device [ 264.062672][ T48] vhci_hcd: vhci_device speed not set [ 264.920805][ T9] usb 5-1: string descriptor 0 read error: -71 [ 264.938031][ T9] usb 5-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 265.013017][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.086848][ T9] usb 5-1: can't set config #7, error -71 [ 265.111737][ T9] usb 5-1: USB disconnect, device number 3 [ 265.320223][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.327447][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.759309][ T7172] loop4: detected capacity change from 0 to 2048 [ 268.803261][ T7172] udf: Bad value for 'lastblock' [ 269.239563][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 270.214056][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 270.481064][ T5949] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 270.596011][ T7197] loop1: detected capacity change from 0 to 128 [ 270.610619][ T7197] EXT4-fs (loop1): Test dummy encryption mode enabled [ 270.680521][ T7181] syz.3.292 (7181): drop_caches: 2 [ 270.691185][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 270.706426][ T5949] usb 6-1: unable to get BOS descriptor or descriptor too short [ 270.737714][ T7197] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 270.777396][ T5949] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 270.824687][ T5949] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 270.860179][ T7197] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 271.627698][ T5949] usb 6-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 271.702542][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.777950][ T5949] usb 6-1: Product: syz [ 272.060096][ T5949] usb 6-1: Manufacturer: syz [ 272.476736][ T30] audit: type=1400 audit(1758973085.269:3): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=73226865645F737769746368 pid=7196 comm="syz.1.298" [ 272.986075][ T5949] usb 6-1: SerialNumber: syz [ 273.021575][ T5870] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 273.141893][ T5949] usb 6-1: can't set config #7, error -71 [ 273.173101][ T5949] usb 6-1: USB disconnect, device number 8 [ 273.365543][ T7214] syz.5.304 (7214): drop_caches: 2 [ 273.956406][ T7222] netlink: 108 bytes leftover after parsing attributes in process `syz.1.306'. [ 274.165005][ T7228] loop3: detected capacity change from 0 to 64 [ 274.221995][ T7228] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 276.435004][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 276.883011][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 277.501180][ T5847] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 277.631127][ T9] usb 2-1: device descriptor read/all, error -71 [ 277.731480][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 277.751892][ T5847] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 277.814767][ T5847] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 277.851073][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.890214][ T5847] usb 1-1: Product: syz [ 277.910273][ T5847] usb 1-1: Manufacturer: syz [ 277.924919][ T5847] usb 1-1: SerialNumber: syz [ 278.031278][ T5969] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 278.176660][ T5847] usb 1-1: selecting invalid altsetting 1 [ 278.181067][ T5969] usb 3-1: Using ep0 maxpacket: 8 [ 278.205810][ T5969] usb 3-1: unable to get BOS descriptor or descriptor too short [ 278.242713][ T5969] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 278.325711][ T5969] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 278.369433][ T5847] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 278.369560][ T5847] dvb_usb_lmedm04 1-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 278.403389][ T5969] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 278.483958][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.504487][ T5847] usb 1-1: USB disconnect, device number 2 [ 278.566741][ T5969] usb 3-1: Product: syz [ 278.570928][ T5969] usb 3-1: Manufacturer: syz [ 278.637776][ T5969] usb 3-1: SerialNumber: syz [ 278.985352][ T5969] usb 3-1: USB disconnect, device number 5 [ 281.163832][ T7278] loop5: detected capacity change from 0 to 128 [ 281.484689][ T7278] EXT4-fs (loop5): Test dummy encryption mode enabled [ 282.295548][ T7278] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 282.353507][ T7278] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 283.477410][ T5878] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.572000][ T7291] fuse: Bad value for 'fd' [ 284.660709][ T7305] syz.3.338 (7305): drop_caches: 2 [ 285.060422][ T7309] loop5: detected capacity change from 0 to 40427 [ 285.127820][ T7309] F2FS-fs (loop5): build fault injection rate: 14 [ 285.134347][ T7309] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 285.143829][ T7309] F2FS-fs (loop5): invalid crc value [ 285.154304][ C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 285.170503][ C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 285.229410][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 285.245328][ T7309] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 285.255412][ T7309] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x49d/0x98b0 [ 285.276799][ T7309] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 285.339091][ T7309] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 285.360400][ T7309] F2FS-fs (loop5): inject inconsistent footer in sanity_check_node_footer of __get_node_folio+0x12d/0x1b0 [ 285.371867][ T7309] F2FS-fs (loop5): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 285.451380][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 285.468882][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 285.525465][ T7315] F2FS-fs (loop5): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x236/0x1090 [ 285.541774][ T10] usb 1-1: config 4 interface 0 has no altsetting 0 [ 285.575014][ T10] usb 1-1: string descriptor 0 read error: -22 [ 285.587232][ T10] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=4a.05 [ 285.617882][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.642200][ T7309] F2FS-fs (loop5): inject inconsistent footer in sanity_check_node_footer of __get_node_folio+0x12d/0x1b0 [ 285.653896][ T7309] F2FS-fs (loop5): inconsistent node block, node_type:0, nid:15, node_footer[nid:15,ino:3,ofs:2041,cpver:0,blkaddr:0] [ 285.668511][ T7316] F2FS-fs (loop5): inject evict_inode fail in f2fs_evict_inode of evict+0x3e6/0x920 [ 285.700531][ T10] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 285.731344][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 285.809116][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 285.869113][ T10] usb 1-1: media controller created [ 285.950221][ T7307] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 286.043871][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.340916][ C1] F2FS-fs (loop5): inject write IO error in f2fs_write_end_io of bio_endio+0x713/0x860 [ 286.350798][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 286.350843][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.350872][ C1] Call Trace: [ 286.350884][ C1] [ 286.350897][ C1] dump_stack_lvl+0x16c/0x1f0 [ 286.350961][ C1] f2fs_handle_critical_error+0x624/0x9f0 [ 286.351018][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.351065][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 286.351116][ C1] f2fs_write_end_io+0x958/0xcf0 [ 286.351173][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 286.351231][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.351286][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 286.351337][ C1] bio_endio+0x713/0x860 [ 286.351402][ C1] blk_update_request+0x93e/0x15f0 [ 286.351462][ C1] blk_mq_end_request+0x4f/0x90 [ 286.351504][ C1] lo_complete_rq+0x1d4/0x290 [ 286.351550][ C1] blk_complete_reqs+0xb1/0xf0 [ 286.351612][ C1] handle_softirqs+0x219/0x8e0 [ 286.351670][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 286.351721][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.351771][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 286.351818][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 286.351876][ C1] run_ksoftirqd+0x3a/0x60 [ 286.351921][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 286.351975][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.352027][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 286.352083][ C1] kthread+0x3c5/0x780 [ 286.352122][ C1] ? __pfx_kthread+0x10/0x10 [ 286.352162][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.352208][ C1] ? rcu_is_watching+0x12/0xc0 [ 286.352257][ C1] ? __pfx_kthread+0x10/0x10 [ 286.352297][ C1] ret_from_fork+0x56d/0x730 [ 286.352332][ C1] ? __pfx_kthread+0x10/0x10 [ 286.352370][ C1] ret_from_fork_asm+0x1a/0x30 [ 286.352439][ C1] [ 286.530467][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 286.537376][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 286.537421][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.537444][ C1] Call Trace: [ 286.537455][ C1] [ 286.537469][ C1] dump_stack_lvl+0x16c/0x1f0 [ 286.537535][ C1] f2fs_handle_critical_error+0x624/0x9f0 [ 286.537588][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.537634][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 286.537685][ C1] f2fs_write_end_io+0x958/0xcf0 [ 286.537741][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 286.537799][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.537854][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 286.537915][ C1] bio_endio+0x713/0x860 [ 286.537980][ C1] blk_update_request+0x93e/0x15f0 [ 286.538040][ C1] blk_mq_end_request+0x4f/0x90 [ 286.538082][ C1] lo_complete_rq+0x1d4/0x290 [ 286.538129][ C1] blk_complete_reqs+0xb1/0xf0 [ 286.538191][ C1] handle_softirqs+0x219/0x8e0 [ 286.538248][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 286.538300][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.538350][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 286.538397][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 286.538451][ C1] run_ksoftirqd+0x3a/0x60 [ 286.538497][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 286.538550][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.538602][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 286.538659][ C1] kthread+0x3c5/0x780 [ 286.538698][ C1] ? __pfx_kthread+0x10/0x10 [ 286.538737][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.538783][ C1] ? rcu_is_watching+0x12/0xc0 [ 286.538838][ C1] ? __pfx_kthread+0x10/0x10 [ 286.538883][ C1] ret_from_fork+0x56d/0x730 [ 286.538918][ C1] ? __pfx_kthread+0x10/0x10 [ 286.538957][ C1] ret_from_fork_asm+0x1a/0x30 [ 286.539027][ C1] [ 286.539039][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 286.724842][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 286.724885][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.724903][ C1] Call Trace: [ 286.724913][ C1] [ 286.724924][ C1] dump_stack_lvl+0x16c/0x1f0 [ 286.724976][ C1] f2fs_handle_critical_error+0x624/0x9f0 [ 286.725019][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.725056][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 286.725096][ C1] f2fs_write_end_io+0x958/0xcf0 [ 286.725141][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 286.725187][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.725231][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 286.725271][ C1] bio_endio+0x713/0x860 [ 286.725324][ C1] blk_update_request+0x93e/0x15f0 [ 286.725372][ C1] blk_mq_end_request+0x4f/0x90 [ 286.725406][ C1] lo_complete_rq+0x1d4/0x290 [ 286.725443][ C1] blk_complete_reqs+0xb1/0xf0 [ 286.725492][ C1] handle_softirqs+0x219/0x8e0 [ 286.725539][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 286.725579][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.725619][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 286.725656][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 286.725699][ C1] run_ksoftirqd+0x3a/0x60 [ 286.725735][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 286.725778][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.725820][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 286.725869][ C1] kthread+0x3c5/0x780 [ 286.725900][ C1] ? __pfx_kthread+0x10/0x10 [ 286.725931][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.725968][ C1] ? rcu_is_watching+0x12/0xc0 [ 286.726007][ C1] ? __pfx_kthread+0x10/0x10 [ 286.726038][ C1] ret_from_fork+0x56d/0x730 [ 286.726066][ C1] ? __pfx_kthread+0x10/0x10 [ 286.726096][ C1] ret_from_fork_asm+0x1a/0x30 [ 286.726151][ C1] [ 286.726162][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 286.911280][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 286.911318][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.911336][ C1] Call Trace: [ 286.911347][ C1] [ 286.911359][ C1] dump_stack_lvl+0x16c/0x1f0 [ 286.911413][ C1] f2fs_handle_critical_error+0x624/0x9f0 [ 286.911455][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.911491][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 286.911531][ C1] f2fs_write_end_io+0x958/0xcf0 [ 286.911575][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 286.911621][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.911664][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 286.911704][ C1] bio_endio+0x713/0x860 [ 286.911756][ C1] blk_update_request+0x93e/0x15f0 [ 286.911803][ C1] blk_mq_end_request+0x4f/0x90 [ 286.911836][ C1] lo_complete_rq+0x1d4/0x290 [ 286.911874][ C1] blk_complete_reqs+0xb1/0xf0 [ 286.911922][ C1] handle_softirqs+0x219/0x8e0 [ 286.911968][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 286.912008][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.912047][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 286.912088][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 286.912131][ C1] run_ksoftirqd+0x3a/0x60 [ 286.912167][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 286.912209][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.912250][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 286.912294][ C1] kthread+0x3c5/0x780 [ 286.912325][ C1] ? __pfx_kthread+0x10/0x10 [ 286.912356][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 286.912393][ C1] ? rcu_is_watching+0x12/0xc0 [ 286.912431][ C1] ? __pfx_kthread+0x10/0x10 [ 286.912463][ C1] ret_from_fork+0x56d/0x730 [ 286.912490][ C1] ? __pfx_kthread+0x10/0x10 [ 286.912521][ C1] ret_from_fork_asm+0x1a/0x30 [ 286.912575][ C1] [ 286.912585][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 287.097621][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 287.097658][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.097676][ C1] Call Trace: [ 287.097686][ C1] [ 287.097696][ C1] dump_stack_lvl+0x16c/0x1f0 [ 287.097749][ C1] f2fs_handle_critical_error+0x624/0x9f0 [ 287.097791][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.097827][ C1] ? f2fs_build_fault_attr+0x53/0x1f0 [ 287.097872][ C1] f2fs_write_end_io+0x958/0xcf0 [ 287.097916][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 287.097962][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.098005][ C1] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 287.098046][ C1] bio_endio+0x713/0x860 [ 287.098097][ C1] blk_update_request+0x93e/0x15f0 [ 287.098144][ C1] blk_mq_end_request+0x4f/0x90 [ 287.098177][ C1] lo_complete_rq+0x1d4/0x290 [ 287.098215][ C1] blk_complete_reqs+0xb1/0xf0 [ 287.098263][ C1] handle_softirqs+0x219/0x8e0 [ 287.098309][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 287.098349][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.098395][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 287.098440][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 287.098495][ C1] run_ksoftirqd+0x3a/0x60 [ 287.098541][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 287.098584][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.098625][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 287.098669][ C1] kthread+0x3c5/0x780 [ 287.098700][ C1] ? __pfx_kthread+0x10/0x10 [ 287.098731][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 287.098767][ C1] ? rcu_is_watching+0x12/0xc0 [ 287.098806][ C1] ? __pfx_kthread+0x10/0x10 [ 287.098837][ C1] ret_from_fork+0x56d/0x730 [ 287.098864][ C1] ? __pfx_kthread+0x10/0x10 [ 287.098899][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.098953][ C1] [ 287.098963][ C1] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 287.293598][ T5878] F2FS-fs (loop5): do_checkpoint failed err:-5, stop checkpoint [ 287.453808][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 287.713835][ T7324] loop4: detected capacity change from 0 to 512 [ 287.821632][ T7324] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 287.924645][ T10] usb 1-1: USB disconnect, device number 3 [ 287.949023][ T7324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.019145][ T7330] loop1: detected capacity change from 0 to 128 [ 288.043511][ T7331] loop0: detected capacity change from 0 to 1024 [ 288.090409][ T7330] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 288.165971][ T7330] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 288.166669][ T7331] hfsplus: bad catalog entry type [ 288.338005][ T5869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.455834][ T13] hfsplus: b-tree write err: -5, ino 4 [ 289.510321][ T5870] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.783312][ T5989] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 289.976013][ T7344] loop0: detected capacity change from 0 to 64 [ 290.024696][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.071206][ T5989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.130521][ T7342] loop1: detected capacity change from 0 to 4096 [ 290.137008][ T5989] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.199313][ T5989] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.256270][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.276122][ T7342] NILFS (loop1): invalid segment: Checksum error in segment payload [ 290.323008][ T5989] usb 5-1: config 0 descriptor?? [ 290.344751][ T7342] NILFS (loop1): trying rollback from an earlier position [ 290.446127][ T7342] NILFS (loop1): recovery complete [ 290.486808][ T7349] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.530768][ T7322] loop2: detected capacity change from 0 to 32768 [ 290.799004][ T5989] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 291.210298][ T5989] usb 5-1: USB disconnect, device number 4 [ 291.226779][ T7363] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -19 [ 293.459314][ T7375] loop4: detected capacity change from 0 to 40427 [ 293.504437][ T7375] F2FS-fs (loop4): invalid crc value [ 293.600616][ T7375] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 293.620524][ T7375] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 294.317600][ T5869] syz-executor: attempt to access beyond end of device [ 294.317600][ T5869] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 294.420215][ T5869] CPU: 1 UID: 0 PID: 5869 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 294.420266][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 294.420288][ T5869] Call Trace: [ 294.420299][ T5869] [ 294.420313][ T5869] dump_stack_lvl+0x16c/0x1f0 [ 294.420379][ T5869] f2fs_handle_critical_error+0x624/0x9f0 [ 294.420433][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.420479][ T5869] ? f2fs_build_fault_attr+0x53/0x1f0 [ 294.420533][ T5869] f2fs_write_end_io+0x958/0xcf0 [ 294.420591][ T5869] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 294.420650][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.420708][ T5869] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 294.420760][ T5869] bio_endio+0x713/0x860 [ 294.420826][ T5869] submit_bio_noacct+0x306/0x1ed0 [ 294.420895][ T5869] __submit_merged_bio+0x33c/0x770 [ 294.420956][ T5869] __submit_merged_write_cond+0x319/0x3f0 [ 294.421028][ T5869] f2fs_write_cache_pages+0x2067/0x2570 [ 294.421123][ T5869] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 294.421192][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.421237][ T5869] ? __lock_acquire+0x62e/0x1ce0 [ 294.421311][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.421356][ T5869] ? __lock_acquire+0x62e/0x1ce0 [ 294.421463][ T5869] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 294.421562][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.421607][ T5869] ? mod_memcg_lruvec_state+0x389/0x5f0 [ 294.421658][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.421703][ T5869] ? __mod_zone_page_state+0xcc/0x1a0 [ 294.421754][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.421808][ T5869] f2fs_write_data_pages+0x4ad/0xd90 [ 294.421887][ T5869] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 294.421966][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.422013][ T5869] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 294.422077][ T5869] do_writepages+0x27a/0x600 [ 294.422133][ T5869] ? __pfx_do_writepages+0x10/0x10 [ 294.422180][ T5869] ? do_raw_spin_unlock+0x172/0x230 [ 294.422223][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.422268][ T5869] ? _raw_spin_unlock+0x28/0x50 [ 294.422328][ T5869] filemap_fdatawrite_wbc+0x104/0x160 [ 294.422382][ T5869] __filemap_fdatawrite_range+0xb9/0x100 [ 294.422446][ T5869] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 294.422580][ T5869] ? find_held_lock+0x2b/0x80 [ 294.422630][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.422677][ T5869] ? do_raw_spin_unlock+0x172/0x230 [ 294.422719][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.422772][ T5869] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 294.422860][ T5869] block_operations+0x2b0/0xfe0 [ 294.422934][ T5869] ? __pfx___schedule+0x10/0x10 [ 294.422993][ T5869] ? __pfx_block_operations+0x10/0x10 [ 294.423120][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.423165][ T5869] ? down_write+0x14d/0x200 [ 294.423203][ T5869] ? __pfx_down_write+0x10/0x10 [ 294.423244][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.423289][ T5869] ? rcu_is_watching+0x12/0xc0 [ 294.423345][ T5869] f2fs_write_checkpoint+0x2b8/0x4c60 [ 294.423390][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.423435][ T5869] ? kfree+0x2b4/0x4d0 [ 294.423480][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.423530][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.423575][ T5869] ? rcu_is_watching+0x12/0xc0 [ 294.423621][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.423666][ T5869] ? kthread_stop+0x273/0x630 [ 294.423707][ T5869] kill_f2fs_super+0x3c2/0x470 [ 294.423745][ T5869] ? __pfx_kill_f2fs_super+0x10/0x10 [ 294.423796][ T5869] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.423885][ T5869] deactivate_locked_super+0xc1/0x1a0 [ 294.423943][ T5869] deactivate_super+0xde/0x100 [ 294.424002][ T5869] cleanup_mnt+0x225/0x450 [ 294.424066][ T5869] task_work_run+0x150/0x240 [ 294.424111][ T5869] ? __pfx_task_work_run+0x10/0x10 [ 294.424150][ T5869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 294.424199][ T5869] ? __pfx___x64_sys_umount+0x10/0x10 [ 294.424248][ T5869] exit_to_user_mode_loop+0xeb/0x110 [ 294.424291][ T5869] do_syscall_64+0x41c/0x4e0 [ 294.424331][ T5869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.424369][ T5869] RIP: 0033:0x7f2e81b901f7 [ 294.424398][ T5869] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 294.424434][ T5869] RSP: 002b:00007fff4bf88ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 294.424469][ T5869] RAX: 0000000000000000 RBX: 00007f2e81c11d7d RCX: 00007f2e81b901f7 [ 294.424493][ T5869] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4bf88fa0 [ 294.424516][ T5869] RBP: 00007fff4bf88fa0 R08: 0000000000000000 R09: 0000000000000000 [ 294.424539][ T5869] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff4bf8a030 [ 294.424563][ T5869] R13: 00007f2e81c11d7d R14: 0000000000047c3a R15: 00007fff4bf8a070 [ 294.424616][ T5869] [ 295.146787][ T5869] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 295.295148][ T7371] loop1: detected capacity change from 0 to 32768 [ 295.347524][ T7373] loop5: detected capacity change from 0 to 32768 [ 295.363798][ T7371] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.358 (7371) [ 295.435410][ T7371] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 295.513702][ T7371] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 295.723566][ T7373] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 295.723616][ T7373] allowing incompatible features above 0.0: (unknown version) [ 295.723636][ T7373] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 295.776771][ T7371] BTRFS info (device loop1): rebuilding free space tree [ 295.852302][ T7373] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 295.907637][ T7371] BTRFS info (device loop1): disabling free space tree [ 295.926416][ T7373] bcachefs (loop5): initializing new filesystem [ 295.954541][ T7371] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 296.013572][ T7371] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 296.021354][ T7373] syz.5.359: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 296.130597][ T7371] BTRFS info (device loop1): enabling ssd optimizations [ 296.142706][ T7373] CPU: 0 UID: 0 PID: 7373 Comm: syz.5.359 Not tainted syzkaller #0 PREEMPT(full) [ 296.142753][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 296.142776][ T7373] Call Trace: [ 296.142787][ T7373] [ 296.142800][ T7373] dump_stack_lvl+0x16c/0x1f0 [ 296.142867][ T7373] warn_alloc+0x248/0x3a0 [ 296.142931][ T7373] ? __pfx_warn_alloc+0x10/0x10 [ 296.143009][ T7373] ? bch2_fs_journal_start+0x2ce/0x1390 [ 296.143051][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.143099][ T7373] ? __vmalloc_node_noprof+0xad/0xf0 [ 296.143164][ T7373] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 296.143216][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.143277][ T7373] ? bch2_fs_journal_start+0x2ce/0x1390 [ 296.143332][ T7373] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 296.143384][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.143437][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.143484][ T7373] ? ___kmalloc_large_node+0xed/0x160 [ 296.143531][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.143586][ T7373] __kvmalloc_node_noprof+0x30a/0x620 [ 296.143645][ T7373] ? bch2_fs_journal_start+0x2ce/0x1390 [ 296.143686][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.143736][ T7373] ? bch2_fs_journal_start+0x2ce/0x1390 [ 296.143805][ T7373] ? bch2_fs_journal_start+0x2ce/0x1390 [ 296.143846][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.143893][ T7373] bch2_fs_journal_start+0x2ce/0x1390 [ 296.143938][ T7373] ? bch2_trans_put+0x86c/0x10d0 [ 296.144005][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.144056][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.144103][ T7373] ? find_held_lock+0x2b/0x80 [ 296.144157][ T7373] ? __pfx_bch2_fs_journal_start+0x10/0x10 [ 296.144202][ T7373] ? enumerated_ref_put+0xc3/0x270 [ 296.144248][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.144295][ T7373] ? bch2_fs_journal_alloc+0x3f6/0x5e0 [ 296.144347][ T7373] bch2_fs_initialize+0x966/0x1bc0 [ 296.144421][ T7373] ? __entry_text_end+0xfdfb5/0x1020b9 [ 296.144471][ T7373] ? __pfx_bch2_fs_initialize+0x10/0x10 [ 296.144536][ T7373] ? finish_task_switch.isra.0+0x221/0xc10 [ 296.144614][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.144702][ T7373] ? find_held_lock+0x2b/0x80 [ 296.144774][ T7373] ? __lock_acquire+0xb97/0x1ce0 [ 296.144906][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.144955][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.145005][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.145055][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.145110][ T7373] ? bch2_fs_start+0xdd0/0x1450 [ 296.145155][ T7373] bch2_fs_start+0xdd0/0x1450 [ 296.145213][ T7373] bch2_fs_get_tree+0xd9b/0x1b70 [ 296.145278][ T7373] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 296.145328][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.145416][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.145465][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.145512][ T7373] ? aa_get_newest_label+0xd2/0x250 [ 296.145555][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.145602][ T7373] ? apparmor_capable+0x114/0x1d0 [ 296.145646][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.145692][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.145746][ T7373] vfs_get_tree+0x8e/0x340 [ 296.145800][ T7373] path_mount+0x1513/0x2000 [ 296.145852][ T7373] ? __pfx_path_mount+0x10/0x10 [ 296.145901][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.145948][ T7373] ? kmem_cache_free+0x2d1/0x4d0 [ 296.146005][ T7373] ? putname+0x154/0x1a0 [ 296.146054][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.146100][ T7373] ? putname+0x154/0x1a0 [ 296.146153][ T7373] ? __x64_sys_mount+0x28d/0x310 [ 296.146193][ T7373] __x64_sys_mount+0x28d/0x310 [ 296.146242][ T7373] ? __pfx___x64_sys_mount+0x10/0x10 [ 296.146284][ T7373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 296.146346][ T7373] do_syscall_64+0xcd/0x4e0 [ 296.146386][ T7373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.146424][ T7373] RIP: 0033:0x7f908c39066a [ 296.146454][ T7373] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.146492][ T7373] RSP: 002b:00007f908d2d3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 296.146528][ T7373] RAX: ffffffffffffffda RBX: 00007f908d2d3ef0 RCX: 00007f908c39066a [ 296.146554][ T7373] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 00007f908d2d3eb0 [ 296.146579][ T7373] RBP: 0000200000000100 R08: 00007f908d2d3ef0 R09: 0000000000200414 [ 296.146604][ T7373] R10: 0000000000200414 R11: 0000000000000246 R12: 0000200000000180 [ 296.146628][ T7373] R13: 00007f908d2d3eb0 R14: 0000000000005ad0 R15: 0000200000001440 [ 296.146676][ T7373] [ 296.191018][ T7371] BTRFS info (device loop1): disabling tree log [ 296.228273][ T7373] Mem-Info: [ 296.431025][ T7371] BTRFS info (device loop1): turning on flush-on-commit [ 296.509336][ T7373] active_anon:18029 inactive_anon:0 isolated_anon:0 [ 296.509336][ T7373] active_file:3789 inactive_file:40172 isolated_file:0 [ 296.509336][ T7373] unevictable:768 dirty:331 writeback:0 [ 296.509336][ T7373] slab_reclaimable:6610 slab_unreclaimable:101731 [ 296.509336][ T7373] mapped:35367 shmem:12194 pagetables:1411 [ 296.509336][ T7373] sec_pagetables:0 bounce:0 [ 296.509336][ T7373] kernel_misc_reclaimable:0 [ 296.509336][ T7373] free:1282700 free_pcp:20106 free_cma:0 [ 296.684979][ T7373] Node 0 active_anon:72116kB inactive_anon:0kB active_file:15156kB inactive_file:160488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141468kB dirty:1320kB writeback:0kB shmem:47240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13428kB pagetables:5516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 296.717550][ T7373] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 296.847477][ T7373] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.886889][ T7373] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 296.896066][ T7373] Node 0 DMA32 free:1224104kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:67372kB inactive_anon:0kB active_file:15156kB inactive_file:159160kB unevictable:1536kB writepending:1320kB present:3129332kB managed:2539432kB mlocked:0kB bounce:0kB free_pcp:64432kB local_pcp:26928kB free_cma:0kB [ 296.945620][ T7371] BTRFS info (device loop1): force clearing of disk cache [ 296.955087][ T7371] BTRFS info (device loop1): doing ref verification [ 297.060890][ T7373] lowmem_reserve[]: 0 0 1 1 1 [ 297.068609][ T7373] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 297.172793][ T7373] lowmem_reserve[]: 0 0 0 0 0 [ 297.177584][ T7373] Node 1 Normal free:3892828kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19008kB local_pcp:7968kB free_cma:0kB [ 297.289729][ T5870] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 297.762358][ T7373] lowmem_reserve[]: 0 0 0 0 0 [ 297.767160][ T7373] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 297.850589][ T7373] Node 0 DMA32: 1*4kB (E) 556*8kB (UE) 558*16kB (UME) 177*32kB (UME) 88*64kB (UME) 20*128kB (UME) 13*256kB (ME) 15*512kB (UME) 7*1024kB (UM) 1*2048kB (U) 287*4096kB (M) = 1223012kB [ 297.938990][ T7373] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 298.129534][ T7373] Node 1 Normal: 165*4kB (UME) 67*8kB (UME) 47*16kB (UME) 90*32kB (UME) 34*64kB (UME) 12*128kB (UME) 5*256kB (UM) 6*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (UM) = 3892828kB [ 298.261029][ T7373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.301126][ T7427] loop4: detected capacity change from 0 to 256 [ 298.307287][ T7373] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.351031][ T7373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.422644][ T7373] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.490135][ T7373] 53101 total pagecache pages [ 298.495847][ T7433] syz.2.369 uses obsolete (PF_INET,SOCK_PACKET) [ 298.530550][ T7373] 0 pages in swap cache [ 298.537577][ T7433] netlink: zone id is out of range [ 298.550564][ T7373] Free swap = 124996kB [ 298.573154][ T7373] Total swap = 124996kB [ 298.574846][ T7433] netlink: zone id is out of range [ 298.607188][ T7436] 9pnet_fd: Insufficient options for proto=fd [ 298.613920][ T7373] 2097051 pages RAM [ 298.619770][ T7433] netlink: zone id is out of range [ 298.831182][ T7373] 0 pages HighMem/MovableOnly [ 298.871653][ T7373] 430231 pages reserved [ 298.875825][ T7373] 0 pages cma reserved [ 299.234886][ T7373] bcachefs (loop5): error reallocating journal fifo (32768 open entries) [ 299.256115][ T7433] netlink: zone id is out of range [ 299.273560][ T7373] bcachefs (loop5): bch2_fs_initialize(): error ENOMEM_journal_pin_fifo [ 299.295716][ T7433] netlink: zone id is out of range [ 299.316291][ T7433] netlink: zone id is out of range [ 299.327731][ T7373] bcachefs (loop5): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo [ 299.336257][ T7433] netlink: zone id is out of range [ 299.368413][ T7433] netlink: zone id is out of range [ 299.390921][ T7373] bcachefs (loop5): shutting down [ 299.394848][ T7433] netlink: zone id is out of range [ 299.572348][ T7433] netlink: zone id is out of range [ 299.724105][ T7373] bcachefs (loop5): shutdown complete [ 299.771483][ T7442] block nbd4: NBD_DISCONNECT [ 299.823929][ T7442] block nbd4: Disconnected due to user request. [ 299.868340][ T7442] block nbd4: shutting down sockets [ 300.095490][ T7448] loop2: detected capacity change from 0 to 64 [ 301.780748][ T7458] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 301.787367][ T7458] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 301.795247][ T7458] vhci_hcd vhci_hcd.0: Device attached [ 301.800935][ T7461] vhci_hcd: connection closed [ 301.806681][ T13] vhci_hcd: stop threads [ 301.841424][ T13] vhci_hcd: release socket [ 301.845969][ T13] vhci_hcd: disconnect device [ 303.171130][ T48] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 303.368879][ T48] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.419577][ T48] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.530904][ T48] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 303.571077][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.829109][ T48] usb 2-1: usb_control_msg returned -32 [ 303.871485][ T48] usbtmc 2-1:16.0: can't read capabilities [ 304.069288][ T7482] fuse: Bad value for 'fd' [ 304.279016][ T7373] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo [ 304.409374][ T48] usb 2-1: USB disconnect, device number 6 [ 304.513478][ T7473] loop2: detected capacity change from 0 to 32768 [ 304.568871][ T7473] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.379 (7473) [ 304.648258][ T7473] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 304.716217][ T7473] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 305.097704][ T7473] BTRFS info (device loop2): rebuilding free space tree [ 305.163268][ T7473] BTRFS info (device loop2): disabling free space tree [ 305.193162][ T7473] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 305.249566][ T7473] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 305.327692][ T7473] BTRFS info (device loop2): enabling ssd optimizations [ 305.371229][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 305.381082][ T7473] BTRFS info (device loop2): disabling tree log [ 305.438046][ T7473] BTRFS info (device loop2): turning on flush-on-commit [ 305.482684][ T7473] BTRFS info (device loop2): force clearing of disk cache [ 305.545338][ T7473] BTRFS info (device loop2): doing ref verification [ 305.645763][ T7501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.688201][ T10] libceph: connect (1)[c::]:6789 error -101 [ 305.801270][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 305.886786][ T7502] macvlan2: entered promiscuous mode [ 305.905360][ T7505] ceph: No mds server is up or the cluster is laggy [ 305.929621][ T7502] macvlan2: entered allmulticast mode [ 305.975596][ T7502] bond1: entered promiscuous mode [ 306.005261][ T7502] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 306.123369][ T9] libceph: connect (1)[c::]:6789 error -101 [ 306.134336][ T7502] bond1: left promiscuous mode [ 306.206719][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 306.348427][ T5863] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 306.800709][ T5865] Bluetooth: hci5: unexpected event for opcode 0x1407 [ 306.899126][ T7517] loop5: detected capacity change from 0 to 1024 [ 307.810482][ T30] audit: type=1326 audit(1758973120.839:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.4.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e81b8eec9 code=0x7ffc0000 [ 308.019482][ T30] audit: type=1326 audit(1758973120.869:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.4.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e81b8eec9 code=0x7ffc0000 [ 308.048113][ T30] audit: type=1326 audit(1758973120.889:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.4.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f2e81b8eec9 code=0x7ffc0000 [ 308.070053][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.153182][ T30] audit: type=1326 audit(1758973120.889:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.4.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e81b8eec9 code=0x7ffc0000 [ 308.178094][ T30] audit: type=1326 audit(1758973120.889:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.4.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e81b8eec9 code=0x7ffc0000 [ 308.200108][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.414100][ T7536] loop0: detected capacity change from 0 to 256 [ 308.994109][ T7538] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 309.031116][ T7538] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 309.039820][ T7538] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 309.098881][ T7542] loop5: detected capacity change from 0 to 128 [ 309.271445][ T7542] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 309.305393][ T7542] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 309.595100][ T7519] loop3: detected capacity change from 0 to 32768 [ 310.588267][ T5878] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.601829][ T7548] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 310.958386][ T7558] netlink: 'syz.3.402': attribute type 10 has an invalid length. [ 311.059147][ T7558] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 311.621090][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 311.832331][ T5865] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 311.841102][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 311.858516][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 311.881062][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 311.911691][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 311.912507][ T7571] loop1: detected capacity change from 0 to 128 [ 311.952243][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 311.982493][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.009380][ T7571] EXT4-fs (loop1): Test dummy encryption mode enabled [ 312.051274][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 312.114799][ T7571] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.115446][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.135144][ T7555] loop5: detected capacity change from 0 to 32768 [ 312.171322][ T7555] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.401 (7555) [ 312.191294][ T7571] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.408804][ T7555] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 312.472651][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 312.478201][ T10] usbtmc 4-1:16.0: can't read capabilities [ 312.506413][ T7555] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 314.282872][ T5870] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 314.595173][ T7603] loop4: detected capacity change from 0 to 128 [ 314.634899][ T7555] BTRFS error (device loop5): open_ctree failed: -4 [ 314.698346][ T7603] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 314.784090][ T7603] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 318.692857][ T10] usb 4-1: USB disconnect, device number 4 [ 318.992627][ T5869] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.260581][ T7621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.417'. [ 319.290854][ T7622] 9pnet_fd: Insufficient options for proto=fd [ 323.436415][ T5983] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 323.687356][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.731095][ T5969] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 323.749471][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.795935][ T5983] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.823287][ T5983] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.857308][ T5983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.879896][ T5983] usb 4-1: config 0 descriptor?? [ 323.938774][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 324.004516][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 324.021088][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 324.060732][ T5969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 324.148575][ T5969] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 324.307439][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.384276][ T5969] usb 6-1: Product: syz [ 324.389504][ T5969] usb 6-1: Manufacturer: syz [ 324.400445][ T5969] usb 6-1: SerialNumber: syz [ 324.466674][ T5983] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 324.482608][ T5969] usb 6-1: config 0 descriptor?? [ 324.838136][ T5983] usb 4-1: USB disconnect, device number 5 [ 324.844820][ T5969] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 325.049008][ T5969] usb 6-1: USB disconnect, device number 9 [ 325.556458][ T7657] fido_id[7657]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 326.466340][ T7649] loop0: detected capacity change from 0 to 32768 [ 326.481270][ T7649] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.426 (7649) [ 326.541413][ T7649] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 326.552860][ T7649] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 326.756973][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.763540][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.790286][ T7649] BTRFS info (device loop0): rebuilding free space tree [ 327.749436][ T7649] BTRFS info (device loop0): disabling free space tree [ 327.773569][ T7649] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 327.887858][ T7649] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 328.458234][ T7703] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 328.467899][ T7649] BTRFS info (device loop0): enabling ssd optimizations [ 328.478980][ T7706] loop3: detected capacity change from 0 to 512 [ 328.544285][ T7649] BTRFS info (device loop0): disabling tree log [ 328.583053][ T7649] BTRFS info (device loop0): turning on flush-on-commit [ 328.590198][ T7649] BTRFS info (device loop0): force clearing of disk cache [ 328.613033][ T7706] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 328.638552][ T7649] BTRFS info (device loop0): doing ref verification [ 328.717279][ T7706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.734611][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 328.943595][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 329.044932][ T5862] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 329.082768][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 329.134286][ T5866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.214408][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.249467][ T9] usb 3-1: Product: syz [ 329.289917][ T9] usb 3-1: Manufacturer: syz [ 329.317880][ T9] usb 3-1: SerialNumber: syz [ 329.411564][ T9] usb 3-1: config 0 descriptor?? [ 329.777838][ T7724] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 329.784460][ T7724] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 329.825381][ T7724] vhci_hcd vhci_hcd.0: Device attached [ 329.839266][ T7728] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 329.845886][ T7728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 329.864081][ T7728] vhci_hcd vhci_hcd.0: Device attached [ 329.898739][ T7724] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 329.905349][ T7724] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 329.957168][ T7724] vhci_hcd vhci_hcd.0: Device attached [ 329.967414][ T7728] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 330.026702][ T7724] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(17) [ 330.033334][ T7724] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 330.057479][ T9] usb 3-1: USB disconnect, device number 6 [ 330.073091][ T48] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 330.093399][ T7728] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(21) [ 330.100012][ T7728] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 330.115028][ T7724] vhci_hcd vhci_hcd.0: Device attached [ 330.124631][ T7741] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 330.148209][ T7091] udevd[7091]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.173433][ T7728] vhci_hcd vhci_hcd.0: Device attached [ 330.227951][ T7724] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 330.264825][ T7724] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 330.314113][ T7724] vhci_hcd vhci_hcd.0: port 0 already used [ 330.445913][ T7739] vhci_hcd: connection closed [ 330.448417][ T7734] vhci_hcd: connection closed [ 330.449170][ T7726] vhci_hcd: connection reset by peer [ 330.453370][ T7731] vhci_hcd: connection closed [ 330.471079][ T7729] vhci_hcd: connection closed [ 330.472368][ T13] vhci_hcd: stop threads [ 330.523144][ T13] vhci_hcd: release socket [ 330.529378][ T13] vhci_hcd: disconnect device [ 330.537589][ T13] vhci_hcd: stop threads [ 330.548085][ T13] vhci_hcd: release socket [ 330.553408][ T13] vhci_hcd: disconnect device [ 330.558377][ T13] vhci_hcd: stop threads [ 330.573233][ T13] vhci_hcd: release socket [ 330.577978][ T13] vhci_hcd: disconnect device [ 330.583170][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 330.591907][ T13] vhci_hcd: stop threads [ 330.612029][ T13] vhci_hcd: release socket [ 330.644131][ T13] vhci_hcd: disconnect device [ 330.661680][ T13] vhci_hcd: stop threads [ 330.676675][ T13] vhci_hcd: release socket [ 330.701141][ T13] vhci_hcd: disconnect device [ 330.773014][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.787965][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.634799][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.650801][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.660281][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.671948][ T10] usb 6-1: config 0 descriptor?? [ 332.186393][ T10] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 332.540127][ T973] usb 6-1: USB disconnect, device number 10 [ 332.546468][ T7768] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -19 [ 332.665890][ T7766] fido_id[7766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 332.921835][ T7776] netlink: 'syz.0.455': attribute type 10 has an invalid length. [ 332.957425][ T7776] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.966058][ T7776] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.038933][ T7760] loop3: detected capacity change from 0 to 32768 [ 333.058293][ T7776] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.065529][ T7776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.073525][ T7776] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.081230][ T7776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.117136][ T7776] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 333.324277][ T7760] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 333.324318][ T7760] allowing incompatible features above 0.0: (unknown version) [ 333.324335][ T7760] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 333.619293][ T7760] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 333.860466][ T7760] bcachefs (loop3): initializing new filesystem [ 333.886066][ T7760] bcachefs (loop3): going read-write [ 334.782170][ T7760] bcachefs (loop3): marking superblocks [ 334.952861][ T7760] bcachefs (loop3): initializing freespace [ 334.995714][ T7760] bcachefs (loop3): done initializing freespace [ 335.089360][ T7760] bcachefs (loop3): reading snapshots table [ 335.091289][ T7763] loop4: detected capacity change from 0 to 32768 [ 335.127317][ T7760] bcachefs (loop3): reading snapshots done [ 335.200516][ T7760] bcachefs (loop3): done starting filesystem [ 335.231206][ T48] vhci_hcd: vhci_device speed not set [ 335.431184][ T7760] syz.3.450 (7760) used greatest stack depth: 18672 bytes left [ 335.502352][ T5866] bcachefs (loop3): shutting down [ 335.507411][ T5866] bcachefs (loop3): going read-only [ 335.535355][ T5866] bcachefs (loop3): finished waiting for writes to stop [ 335.635253][ T7816] loop1: detected capacity change from 0 to 64 [ 335.653667][ T5866] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 335.963474][ T7822] syz.2.469 (7822): drop_caches: 2 [ 336.518242][ T5866] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14 [ 336.570455][ T5866] bcachefs (loop3): clean shutdown complete, journal seq 15 [ 336.611654][ T7825] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 336.618279][ T7825] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 336.626145][ T7825] vhci_hcd vhci_hcd.0: Device attached [ 336.635436][ T7827] vhci_hcd: connection closed [ 336.636187][ T36] vhci_hcd: stop threads [ 336.646570][ T5866] bcachefs (loop3): marking filesystem clean [ 336.877082][ T7831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.470'. [ 336.946619][ T36] vhci_hcd: release socket [ 337.597300][ T36] vhci_hcd: disconnect device [ 337.684095][ T5866] bcachefs (loop3): shutdown complete [ 337.721186][ T7835] fuse: Bad value for 'fd' [ 337.761383][ T6037] usb usb36-port1: attempt power cycle [ 339.202965][ T6037] usb usb36-port1: unable to enumerate USB device [ 340.436348][ T7846] net_ratelimit: 165 callbacks suppressed [ 340.436375][ T7846] sctp: failed to load transform for md5: -2 [ 340.436543][ T7855] sctp: failed to load transform for md5: -2 [ 340.456166][ T7849] sctp: failed to load transform for md5: -2 [ 340.456890][ T7847] sctp: failed to load transform for md5: -2 [ 340.468929][ T7851] sctp: failed to load transform for md5: -2 [ 341.251058][ T30] audit: type=1326 audit(1758973154.259:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.1.481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb342b8eec9 code=0x0 [ 341.829290][ T7859] loop2: detected capacity change from 0 to 32768 [ 341.951097][ T7884] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.481'. [ 341.999251][ T7850] loop0: detected capacity change from 0 to 32768 [ 342.049051][ T7850] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.476 (7850) [ 342.231767][ T7850] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 342.282383][ T7850] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 342.472903][ T7887] syz.5.482 (7887): drop_caches: 2 [ 342.478322][ T7850] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 342.478658][ T7850] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 342.497494][ T7850] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 342.519599][ T7850] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 342.550734][ T7850] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 342.572324][ T7850] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 342.734339][ T7850] BTRFS error (device loop0): open_ctree failed: -12 [ 342.898640][ T7859] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 342.898703][ T7859] allowing incompatible features above 0.0: (unknown version) [ 342.898725][ T7859] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 342.973993][ T7859] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 342.982226][ T7859] bcachefs (loop2): initializing new filesystem [ 343.024449][ T7859] warn_alloc: 1 callbacks suppressed [ 343.024474][ T7859] syz.2.478: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 343.084376][ T7915] loop4: detected capacity change from 0 to 64 [ 343.333066][ T7859] CPU: 0 UID: 0 PID: 7859 Comm: syz.2.478 Not tainted syzkaller #0 PREEMPT(full) [ 343.333118][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.333141][ T7859] Call Trace: [ 343.333153][ T7859] [ 343.333168][ T7859] dump_stack_lvl+0x16c/0x1f0 [ 343.333242][ T7859] warn_alloc+0x248/0x3a0 [ 343.333309][ T7859] ? __pfx_warn_alloc+0x10/0x10 [ 343.333389][ T7859] ? bch2_fs_journal_start+0x2ce/0x1390 [ 343.333432][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.333481][ T7859] ? __vmalloc_node_noprof+0xad/0xf0 [ 343.333542][ T7859] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 343.333595][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.333662][ T7859] ? bch2_fs_journal_start+0x2ce/0x1390 [ 343.333719][ T7859] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 343.333772][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.333826][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.333874][ T7859] ? ___kmalloc_large_node+0xed/0x160 [ 343.333923][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.333979][ T7859] __kvmalloc_node_noprof+0x30a/0x620 [ 343.334039][ T7859] ? bch2_fs_journal_start+0x2ce/0x1390 [ 343.334080][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.334131][ T7859] ? bch2_fs_journal_start+0x2ce/0x1390 [ 343.334184][ T7859] ? bch2_fs_journal_start+0x2ce/0x1390 [ 343.334230][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.334278][ T7859] bch2_fs_journal_start+0x2ce/0x1390 [ 343.334323][ T7859] ? bch2_trans_put+0x86c/0x10d0 [ 343.334392][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.334444][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.334492][ T7859] ? find_held_lock+0x2b/0x80 [ 343.334542][ T7859] ? __pfx_bch2_fs_journal_start+0x10/0x10 [ 343.334588][ T7859] ? enumerated_ref_put+0xc3/0x270 [ 343.334634][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.334682][ T7859] ? bch2_fs_journal_alloc+0x3f6/0x5e0 [ 343.334735][ T7859] bch2_fs_initialize+0x966/0x1bc0 [ 343.334810][ T7859] ? __entry_text_end+0xfdfb5/0x1020b9 [ 343.334863][ T7859] ? __pfx_bch2_fs_initialize+0x10/0x10 [ 343.334921][ T7859] ? __asan_memcpy+0x3c/0x60 [ 343.335006][ T7859] ? __pfx__prb_read_valid+0x10/0x10 [ 343.335045][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.335093][ T7859] ? find_held_lock+0x2b/0x80 [ 343.335167][ T7859] ? __lock_acquire+0xb97/0x1ce0 [ 343.335308][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.335357][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.335408][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.335458][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.335515][ T7859] ? bch2_fs_start+0xdd0/0x1450 [ 343.335556][ T7859] bch2_fs_start+0xdd0/0x1450 [ 343.335615][ T7859] bch2_fs_get_tree+0xd9b/0x1b70 [ 343.335682][ T7859] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 343.335734][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.335825][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.335876][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.335924][ T7859] ? aa_get_newest_label+0xd2/0x250 [ 343.335968][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.336016][ T7859] ? apparmor_capable+0x114/0x1d0 [ 343.336062][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.336110][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.336167][ T7859] vfs_get_tree+0x8e/0x340 [ 343.336226][ T7859] path_mount+0x1513/0x2000 [ 343.336279][ T7859] ? __pfx_path_mount+0x10/0x10 [ 343.336326][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.336373][ T7859] ? kmem_cache_free+0x2d1/0x4d0 [ 343.336432][ T7859] ? putname+0x154/0x1a0 [ 343.336482][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.336530][ T7859] ? putname+0x154/0x1a0 [ 343.336580][ T7859] ? __x64_sys_mount+0x28d/0x310 [ 343.336622][ T7859] __x64_sys_mount+0x28d/0x310 [ 343.336668][ T7859] ? __pfx___x64_sys_mount+0x10/0x10 [ 343.336712][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 343.336776][ T7859] do_syscall_64+0xcd/0x4e0 [ 343.336818][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.336858][ T7859] RIP: 0033:0x7f8715b9066a [ 343.336888][ T7859] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.336927][ T7859] RSP: 002b:00007f8716a92e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 343.336964][ T7859] RAX: ffffffffffffffda RBX: 00007f8716a92ef0 RCX: 00007f8715b9066a [ 343.336991][ T7859] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 00007f8716a92eb0 [ 343.337017][ T7859] RBP: 0000200000000100 R08: 00007f8716a92ef0 R09: 0000000000200414 [ 343.337043][ T7859] R10: 0000000000200414 R11: 0000000000000246 R12: 0000200000000180 [ 343.337069][ T7859] R13: 00007f8716a92eb0 R14: 0000000000005ad0 R15: 0000200000001440 [ 343.337119][ T7859] [ 343.970671][ T7859] Mem-Info: [ 343.974013][ T7859] active_anon:17782 inactive_anon:0 isolated_anon:0 [ 343.974013][ T7859] active_file:3854 inactive_file:40090 isolated_file:0 [ 343.974013][ T7859] unevictable:768 dirty:245 writeback:0 [ 343.974013][ T7859] slab_reclaimable:6604 slab_unreclaimable:101401 [ 343.974013][ T7859] mapped:35476 shmem:11950 pagetables:1402 [ 343.974013][ T7859] sec_pagetables:0 bounce:0 [ 343.974013][ T7859] kernel_misc_reclaimable:0 [ 343.974013][ T7859] free:1276873 free_pcp:18523 free_cma:0 [ 344.196990][ T7859] Node 0 active_anon:61528kB inactive_anon:0kB active_file:15416kB inactive_file:160160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142904kB dirty:976kB writeback:0kB shmem:36564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13196kB pagetables:5684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 344.228897][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.236565][ T7859] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 344.266522][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.272814][ T7859] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.302164][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.688041][ T7859] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 344.688138][ T7859] Node 0 DMA32 free:1205680kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:82796kB inactive_anon:0kB active_file:15416kB inactive_file:158844kB unevictable:1536kB writepending:976kB present:3129332kB managed:2539432kB mlocked:0kB bounce:0kB free_pcp:38764kB local_pcp:20012kB free_cma:0kB [ 344.688283][ T7859] lowmem_reserve[]: 0 0 1 1 1 [ 344.688367][ T7859] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 344.688494][ T7859] lowmem_reserve[]: 0 0 0 0 0 [ 344.688577][ T7859] Node 1 Normal free:3893620kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20276kB local_pcp:12560kB free_cma:0kB [ 344.688721][ T7859] lowmem_reserve[]: 0 0 0 0 0 [ 344.688805][ T7859] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 344.689096][ T7859] Node 0 DMA32: 1811*4kB (UME) 714*8kB (UME) 324*16kB (UME) 234*32kB (UME) 93*64kB (UME) 44*128kB (UME) 36*256kB (UME) 18*512kB (UME) 13*1024kB (UM) 3*2048kB (UM) 276*4096kB (M) = 1205596kB [ 344.689465][ T7859] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 344.689700][ T7859] Node 1 Normal: 167*4kB (UME) 69*8kB (UME) 49*16kB (UME) 99*32kB (UME) 37*64kB (UME) 14*128kB (UME) 5*256kB (UM) 6*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (UM) = 3893620kB [ 344.690063][ T7859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.690099][ T7859] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 344.690131][ T7859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.690164][ T7859] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 344.690197][ T7859] 58744 total pagecache pages [ 344.690218][ T7859] 0 pages in swap cache [ 344.690231][ T7859] Free swap = 124996kB [ 344.690246][ T7859] Total swap = 124996kB [ 344.690262][ T7859] 2097051 pages RAM [ 344.690276][ T7859] 0 pages HighMem/MovableOnly [ 344.690290][ T7859] 430231 pages reserved [ 344.690305][ T7859] 0 pages cma reserved [ 344.698778][ T7859] bcachefs (loop2): error reallocating journal fifo (32768 open entries) [ 344.698808][ T7859] bcachefs (loop2): bch2_fs_initialize(): error ENOMEM_journal_pin_fifo [ 344.698835][ T7859] bcachefs (loop2): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo [ 344.698863][ T7859] bcachefs (loop2): shutting down [ 344.722010][ T7927] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 344.722051][ T7927] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 344.722116][ T7927] vhci_hcd vhci_hcd.0: Device attached [ 344.724386][ T7928] vhci_hcd: connection closed [ 344.730529][ T13] vhci_hcd: stop threads [ 344.730547][ T13] vhci_hcd: release socket [ 344.730562][ T13] vhci_hcd: disconnect device [ 345.695365][ T7859] bcachefs (loop2): shutdown complete [ 346.242868][ T7938] loop3: detected capacity change from 0 to 512 [ 346.443420][ T7938] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 346.655336][ T7938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.022728][ T5866] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.266541][ T7948] loop5: detected capacity change from 0 to 128 [ 347.386623][ T7948] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.530264][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 347.551579][ T7948] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 347.711269][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 347.923582][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 348.751106][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.802241][ T9] usb 4-1: config 0 descriptor?? [ 349.024886][ T5878] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 349.226489][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 349.295244][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 349.356615][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 349.456000][ T9] usb 4-1: media controller created [ 349.610725][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.784376][ T9] az6027: usb out operation failed. (-71) [ 349.802338][ T7859] BUG: unable to handle page fault for address: fffff91ffffff920 [ 349.810056][ T7859] #PF: supervisor read access in kernel mode [ 349.816020][ T7859] #PF: error_code(0x0000) - not-present page [ 349.821982][ T7859] PGD 23ffe5067 P4D 23ffe5067 PUD 1cb13067 PMD 1cb14067 PTE 0 [ 349.829470][ T7859] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 349.835015][ T7859] CPU: 1 UID: 0 PID: 7859 Comm: syz.2.478 Not tainted syzkaller #0 PREEMPT(full) [ 349.844210][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 349.854255][ T7859] RIP: 0010:rcu_segcblist_advance+0x7e/0x420 [ 349.860248][ T7859] Code: 48 8d 7b 08 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 1a 03 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 08 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 0d 03 00 00 49 8b 04 24 48 85 c0 0f 84 93 01 00 [ 349.879868][ T7859] RSP: 0018:ffffc9001f587748 EFLAGS: 00010012 [ 349.885931][ T7859] RAX: dffffc0000000000 RBX: ffffe8ffffc835c0 RCX: dffffc0000000000 [ 349.893896][ T7859] RDX: 1ffffd1ffffff920 RSI: fffffffffffffe70 RDI: ffffe8ffffc835c8 [ 349.901864][ T7859] RBP: 0000000000000246 R08: 4b21b045db16ba9e R09: 0000000000000001 [ 349.909827][ T7859] R10: 0000000000000000 R11: 0000000000000000 R12: ffffe8ffffffc900 [ 349.917793][ T7859] R13: ffff888047484388 R14: ffffe8ffffc83540 R15: ffffe8ffffc835c0 [ 349.925758][ T7859] FS: 00007f8716a936c0(0000) GS:ffff8881247b3000(0000) knlGS:0000000000000000 [ 349.934696][ T7859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.941270][ T7859] CR2: fffff91ffffff920 CR3: 00000000782f1000 CR4: 0000000000350ef0 [ 349.949239][ T7859] Call Trace: [ 349.952512][ T7859] [ 349.955435][ T7859] srcu_gp_start_if_needed+0x30f/0xe70 [ 349.960901][ T7859] ? __pfx_debug_object_active_state+0x10/0x10 [ 349.967072][ T7859] ? __pfx_srcu_gp_start_if_needed+0x10/0x10 [ 349.973088][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.978720][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.984352][ T7859] ? lockdep_init_map_type+0x5c/0x280 [ 349.989741][ T7859] __synchronize_srcu+0x257/0x290 [ 349.994761][ T7859] ? __pfx___synchronize_srcu+0x10/0x10 [ 350.000302][ T7859] ? pcpu_block_update+0x562/0x660 [ 350.005416][ T7859] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 350.010793][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.016428][ T7859] ? kfree+0x24f/0x4d0 [ 350.020528][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.026164][ T7859] ? free_percpu+0x6db/0x13c0 [ 350.030858][ T7859] bch2_fs_btree_iter_exit+0x451/0x5f0 [ 350.036337][ T7859] bch2_fs_release+0x181/0xa10 [ 350.041120][ T7859] kobject_put+0x1e7/0x5a0 [ 350.045534][ T7859] bch2_fs_get_tree+0xd5e/0x1b70 [ 350.050483][ T7859] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 350.055864][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.061516][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.067151][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.072787][ T7859] ? aa_get_newest_label+0xd2/0x250 [ 350.077984][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.083617][ T7859] ? apparmor_capable+0x114/0x1d0 [ 350.088641][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.094273][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.099909][ T7859] vfs_get_tree+0x8e/0x340 [ 350.104332][ T7859] path_mount+0x1513/0x2000 [ 350.108832][ T7859] ? __pfx_path_mount+0x10/0x10 [ 350.113677][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.119308][ T7859] ? kmem_cache_free+0x2d1/0x4d0 [ 350.124254][ T7859] ? putname+0x154/0x1a0 [ 350.128495][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.134124][ T7859] ? putname+0x154/0x1a0 [ 350.138365][ T7859] ? __x64_sys_mount+0x28d/0x310 [ 350.143295][ T7859] __x64_sys_mount+0x28d/0x310 [ 350.148058][ T7859] ? __pfx___x64_sys_mount+0x10/0x10 [ 350.153339][ T7859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 350.158976][ T7859] do_syscall_64+0xcd/0x4e0 [ 350.163471][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.169357][ T7859] RIP: 0033:0x7f8715b9066a [ 350.173762][ T7859] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.193364][ T7859] RSP: 002b:00007f8716a92e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 350.201781][ T7859] RAX: ffffffffffffffda RBX: 00007f8716a92ef0 RCX: 00007f8715b9066a [ 350.209743][ T7859] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 00007f8716a92eb0 [ 350.217704][ T7859] RBP: 0000200000000100 R08: 00007f8716a92ef0 R09: 0000000000200414 [ 350.225666][ T7859] R10: 0000000000200414 R11: 0000000000000246 R12: 0000200000000180 [ 350.233634][ T7859] R13: 00007f8716a92eb0 R14: 0000000000005ad0 R15: 0000200000001440 [ 350.241603][ T7859] [ 350.244604][ T7859] Modules linked in: [ 350.248481][ T7859] CR2: fffff91ffffff920 [ 350.252616][ T7859] ---[ end trace 0000000000000000 ]--- [ 350.258052][ T7859] RIP: 0010:rcu_segcblist_advance+0x7e/0x420 [ 350.264038][ T7859] Code: 48 8d 7b 08 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 1a 03 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 08 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 0d 03 00 00 49 8b 04 24 48 85 c0 0f 84 93 01 00 [ 350.283639][ T7859] RSP: 0018:ffffc9001f587748 EFLAGS: 00010012 [ 350.289695][ T7859] RAX: dffffc0000000000 RBX: ffffe8ffffc835c0 RCX: dffffc0000000000 [ 350.297654][ T7859] RDX: 1ffffd1ffffff920 RSI: fffffffffffffe70 RDI: ffffe8ffffc835c8 [ 350.305614][ T7859] RBP: 0000000000000246 R08: 4b21b045db16ba9e R09: 0000000000000001 [ 350.313574][ T7859] R10: 0000000000000000 R11: 0000000000000000 R12: ffffe8ffffffc900 [ 350.321532][ T7859] R13: ffff888047484388 R14: ffffe8ffffc83540 R15: ffffe8ffffc835c0 [ 350.329493][ T7859] FS: 00007f8716a936c0(0000) GS:ffff8881247b3000(0000) knlGS:0000000000000000 [ 350.338418][ T7859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.344990][ T7859] CR2: fffff91ffffff920 CR3: 00000000782f1000 CR4: 0000000000350ef0 [ 350.352958][ T7859] Kernel panic - not syncing: Fatal exception [ 350.359277][ T7859] Kernel Offset: disabled [ 350.363594][ T7859] Rebooting in 86400 seconds..