last executing test programs: 20.743657835s ago: executing program 4 (id=123): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = dup(r0) read$FUSE(r1, 0x0, 0x2) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x4, 0x6bc, 0x80}}, 0x30) 20.60627465s ago: executing program 4 (id=126): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0xc000400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 20.405484623s ago: executing program 4 (id=129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x20, 0xfffe, 0x0, 0x5c, 0x0, @local, @loopback}}}}, 0x3e) 20.200335148s ago: executing program 4 (id=131): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x46e, &(0x7f0000000400)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000940)=""/28, 0x1c) 19.376449089s ago: executing program 4 (id=137): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b24, 0x0) 17.296407846s ago: executing program 4 (id=149): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1=0xe000030a}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}], 0x20}, 0x0) 16.820558536s ago: executing program 32 (id=149): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1=0xe000030a}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}], 0x20}, 0x0) 9.874515506s ago: executing program 0 (id=189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000080081000040"]) 9.495701983s ago: executing program 0 (id=191): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0xfff, 0x3ff}, &(0x7f0000000180)=0x10) 9.253463127s ago: executing program 0 (id=192): socket(0x1e, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x5945, &(0x7f0000005cc0)="$eJzs3X+QXFW9IPBzu3synZlMMgnwiCCTIZD3ePA0E34V6qtn3tv39BXwqFi88hE2CgOZYDQJqSQIBJTgggsFWGhpKeofaCG1aLSoglUiJfJjE1ZQitWltpBa3EX/cAuRlECWslxna6bv6em503duT09PSMLnU8ncvqdvf8+5556+fb+ne6YDAAAAbwv7bt5+4ILj/umpz4y8ccM//3DzjaG3PF5ejRv0p8tr3qoWcjB1V5aOL7Pj4q+u+/ZvBi//h5/c3/OtN/euP3HDL//xqMsf/vi5e+762mOv9z3455eK4sbxdOrEevJKEkL1R/u/9Nm9Tx87VpaEEMpJ/64QFidLHlucZEIM/TGEsD4TL3rgjTM2jC1vvK17UvmizHbG+9tbNR1nOw9cfVp48e/X3vSzZd/7btful3dNbJJUG8ZTCAsvbXx8Vwhhfvp/TBxtS+OD0+WaEEJPw+POyWnP77/w1Fljy5NabP/KnPXj0+W8dNlbECfevzyzXspsl12PujLLnoL6ZiuvHe1uV2RBZn3iZPTloq5tSV47Y/nidPmDdHnqDOOX4/8klJJQqTd/UzIxRkLDcUtCMr59tb5eqh/bkO5/Zj3JrJcy6+WuzH6N15v2XjlJJpfH7TLl8XRcSctPbHLub3RhTvk70mU1faK+GddD9kZN75Qb9f0aF9u1f5q2HAylhnNQs/L6gU8PxtjujI6OjvYmS6Y8ZrSJeN/etbevKK97fF9/TjuS+5M0fjJe50zj7/zp4gUf/c6tVy3Ni39pKY1faiv+r8575tWLb/3mV3Pj3xnjl9uKf/ojPa+c98TNy3P7Z3/sn0pb8YdfevKOZUdftju3/XfH+NW24q/e80x334FHHs1t/1Dsn/ltxX/hfR/49X3PPfRybvwQ4/e0FX/dnq2f6x44cEpu/Edj//S2N35e23328wMDvx3Mi/9sjN/XVvx7d9313nsW3XZu7vFdE/unv63455/88E0LDjx0Qt65M7m7U6+cAG9PR6XXWLek6+3mmbPVkC98ZbBSuw5ckP7vC1/qXEWZi8+xehZ2LjoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjDvmtP/6wf/94f5XKul6d3rjhVJtGcvnhZDMDyFs3zG8bcfGLVcMfvzKq7ZtGd40OLxjcGTLjm3XDp75N4PbRrZuGr527N6hd51Re9ySkNSWyQlT6u4eHR0t9U8ui/X9u5N3v7jinP/zuxCGjvnFQCW3/Svv2nzP0U1+ZiSrR9+/+aoLfnHWN9L96k/b1d+kXaOjo6Mhp12/v+hP93xh/29OCWHoL6Zr15Mv/N2PJzVovGAiTqrUHWoN6k56mraj3uq0PbG/Khs2bhoZmr5/xx5fztmPf3/dy3/ccM3n/1Tr32rufrTYv/NXj24qfXnt+f/vy9fXCora9VYd96L+jnsR2xf7r5r298J0vxbm7FclZ79u/tmjz/3ouFtf3xWGKq8tm1p30X51pQOgK3lHS/XGGnqSxZPKq+n28YjHx63csXnryu3X7nzXxs3DV4xcMbLlPavOXHX20Flnn7VyfM9Xdnj/Y/1/2eL+H5zxtOiTu34Qf7Y2noraVdQfY+0q7o/GFuU9/3ou/OwX33PXExfUCorGedy6fj5Jlz1jx3lVaBhvU/uq2X4V9UMIYbBZP7z6+rnh2P+x8aai81DjkWn8mZGsHn16+R++cc7Xl/5treCgnOcbG9Tmeb7e6on2jPdXNT0eo4do/3aHcrpfvU3bterpJ7pu3/e7T9XbN29euGZ4x45tq2o/F6QtXZAc37Rd2dK4X8vGf5ZD2i2hPkybjNcxXaHWvuz5M26e7dXe9L7eZEnT/cqK9+1de/uK8rrH9+X1dHJ/rcb5oa+2TN6Zs+WmzAPL9QY3q/9Qff4VjY+BD379wQ8/+P0zp4yP02s/i/Yrydmv7z137xe/9fn/+P3O7dcH/+6Z/j/8z4+tqBUcLueVeqvT9iSN55XTQyh6/i0Lzfcj9/lXar4/Rc+/bD0T2zePN5hZ7w3ltp6vpz/S88p5T9y8PPf5ur/V5+v1k9bKBc/XQ2X8ZJ9fSWVyO+bu+TVpoCSrR39yy1G7HrthzXG1gqJxXd+62bg+o4X8I2e/fnzx8wNXDv6H/96588a3/+aBS345vPrTtYL2j3tsS2eOezXt32pO/9ZbHfPOxv599+VXblpfKz90r3/TZUH+E08l26/d+YnhTZtGtm1vbb9afT2N9WR7ud3X03h2W1KwX6Up+zV3N1rpr1afb2n7y9kY7T7fekPS1uvCzp8uXvDR79x6Vf+UR6UVXVpK45faiv+r85559eJbv/nV3Ph3xviVtuIPv/TkHcuOvmx3bvy7kzR+ta34q/c809134JFHc+MPxfbPbyv+C+/7wK/ve+6hl3Pjhxi/t73+f2332c8PDPw2N/6zSVrP2DVSCA+8ccaG2noSutLnW2xH16R2hex6klkvZdbLjeul2lxrvYJykkwuj9ul5Sc2tKWZf8spj1dh1aW15ZtxPWRvTF9+qCk1nPublRddpwIAHOni+//xGjS+/z+SXijlzzTAhNnmYUtz4sY8bGI+Z96k+5em8ePj4zzgwLvD0NjyxsHahf5M30eIz4fsPGes55STJsdod56zaP59eWY9tqs2X15pyENTU/OaSmhh/n1qPdPPv2d2v3h+fPCWKc0abJi3yh6/rnTGrNnnHTLtrYxFyBsf2Xmx+HmOgYVhzXh9LY6P7Odo4nHIfo4m1nNc5sTZ7udoZjs+YrOnGR/jTS5+f2Pq8QvT9O/E8WseLXv8ZnC8q2Pbz/X7sx2YN2x6Sjt484Zz+36Yecmc+OkT7FCfN4zlcT8qLc4nfjinvFPzifF0Edu1f5q2HAzmE4EjVcz/42vEWP4/dgH+fzPbFV2HZq8aY7zczwlNeYe3pijvmPo5vZ62XsfX7dn6ue6BA6fkXuc82urnfrZOWusp+NxPUT+uyKwX9mPOBE1Rvpetp6jfs5/L6A19bfX7vbvueu89i247N7ff19ReSIv7/YuT1voK+v0wyBeax5cvvC3yhbmeP3vL8pH0g09zlY/8a075TPORnik36vs17rDLR7oObrsAgMNHzP/r75+l+f//ihuk1xFFeeupmfUYLzdvzbk+yctb/yVdXpPZvjf9jYqZXjeff/LDNy048NAJuXnL3a3mof9p0lp/YR46u7w5N49Y05nPi+fmEfU8a3Z5Ym7763ni7PL03Pj1PH12eXRu/9Tz6NnNA+TGr88DHO55bsF8XaayuNrqfN0Rm0envz47V3n0hTnlM82je6fcqO/XOHk0AMBbK+b/8TIu5v9PZLab7fvsuXlBh67bs38PpB7/2YOVV8513jfXeetc5/VzPS9Ry4tL4XDNi+d6Xmhu58ne9nlxWqm8GACAQ1nM/+en6/n5/+zyk2b5W9ek/ER+3jT+EZafH7HvW+fEP3Tmv+T/80K4MZZ7X7w5+T8AwJEt5v/x1x7j3//7L+l69u/Wy9Nz4svT5enTjZ+W8/TOz7MFnwN4az8fP39ie/MAAAC8FbrGM6Wpv2f/kXSZ/T37vN/Lvzhn+1ZV0svjy3ZsGxm55Kqt64d3jFyy5cr1I9svuXrbxh07RrbUtptt3pibt6R5Y1eopP3RfLts3rYo/XsIi3L+HkJ2+xj2+PEbU/8eQrba+QV/R2Di+LXW3rzjV5pm+2bjI+9458X/t5zto/rxv/xjp1+yYfslG7ds3LFxeNPGnSOTtxvLWntm8L2ZsVtm9H2pmR9TlGb+/Z2daUdpSju60v7I+372JNOOxWlLFud9/0FOu5/6b1/45Mmjf7ovhKFjyu+cVf8lq0f/80Uj/7Jj3y+2jrW/NG3761um7Sr6vtLs9nF/Kpuu3L7jtA1XXrVlfW7bZyLOZ5Tq63M0n5E+/cstzk+syymf6ecUylNuHJpanp8AAGCS+P5/vJ6N7x9+Pr2AiuWt5+mze/84N08fai1Pz34vWVGent0+7m+reXp1lnl6tv6iPL3Z9s3y9Ly8Oy/+v+ZsP1Otj5PZfc4jd5xc2to4yX6fQdE4yW4/03GSzHKcZOsvGifNtm82TvKOe178D+Vsn6f18TC7z+Xkjoc7WxsPf51ZLxoP2e1nOh5KsxwP2fqLxkOz7ZuNh7zjmxf/gpztWzV5fIwNjPFxMXLJ1Vdu+0TDdnP9/RdjXpxV++b2+z/a1Xr75/ZzX3Pf/rn9XNnct392nyvLbf+zs5sJa739c/v9Lu06aPO16YfNij5/VjSPu3bqDoyb6TzuvCk3Dk3mceGtE/P/+HZPzP9vS5edfhuok9dJo4smbh+870nzPWZN43foe8yKrmMO+9fzVNHr+a57J2/v9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgyNJdWTq+3Hfz9gMXHPdPT31m5I0b/vmHm2/8q+u+/ZvBy//hJ/f3fOvNvetP3PDLfzzq8oc/fu6eu7722Ot9D/75pcLA/eM/K6emq9UQkleSEKo/2v+lz+59+tixsiSEUE76d4WwOFny2OIkE2HojyGE9fV2Tr7zgTfO2DC2vPG27knlizJBsvsVesuxPY3tDOGawj3iMFRNx9nOA1efFl78+7U3/WzZ977btfvlXRObJNWG8RTCwksbH98VQpif/h8TR9vS+OB0uSaE0NPwuHMK2nVSi+1fmbN+fLqcly57C+LE+5dn1kuZ7bLrUVdm2VNQ32zltaPd7YosyKxnT0azldfOWL44Xf4gXZ46w/jl+D8JpSRU6s3flEyMkdBw3JKQjB/Lan29VD+2Id3/zHqSWS9l1stdmf0arzcdaOUkmVwet8uUx9NxJS0/sfFc3cSFOeXvSJfV9In6ZlwP2Rs1vVNu1PdrXGzX/mnacjCUGs5BzcrrBz49GL1pWW+yZMpjRpuI9+1de/uK8rrH9/XntCO5P0njJ23F3/nTxQs++p1br1qaF//SUhq/1Fb8X533zKsX3/rNr+bGvzPGL7cV//RHel4574mbl+f2z/7YP5W24g+/9OQdy46+bHdu+++O8astx58XJuKv3vNMd9+BRx7Nbf9Q7J/5bbX/hfd94Nf3PffQy7nxQ4zf01b8dXu2fq574MApufEfjf3T2974eW332c8PDPx2MC/+szF+X1vx791113vvWXTbubnHd03sn/624p9/8sM3LTjw0Al5587k7k69cgK8PR2VXmPdkq435Jl9M8kzZ6shX/jKYKV2zbcg/d/XyYoyxupZOIfxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mv38+jM/ctH7P7S2koSQ5Gwz2kS8rzxv9erBNuodfunJO5YdfdnuxrKlbcQBAAAAisU8vFQvqYal4epkfji+6fZxjuD4uJZMLs/OIcQ42TmCduOUOhSn3KE4lQ7F6epQnHkditPdoTjVgjjV0Fqc+dPEqYyNihbb0zNte1qP09uhOAs6FKevQ3EWdijOog7F6Z82TuvjcHGH4izpUJyjOhTn6A7FOaZDcf6iQ3GO7VCc7JzyTMdhX7rlcXlxxm+UC+NUknL9jmbz6cem9Zwwy3p6C+rpK3o9brGe+S3Wc1LmcaUZ1lNtsZ6/nGU9SYv1/PUs6ykV1BPH7TXZ9sV64lqL4//aDsXZ2aE413UozvUdivOpDsX5dIfi3DDLOACtivn/RL7XH7orfxt60jNOdhYg5rvLxn9Ofb3LOyHFeO/MlM8ripdN1DPxls20fdkJhEy85ZnyrknxKvV8ZJp41cZ4KzJ3Fu5vdkIh075TM+XdRfGyEwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMId+fv2ZH7no/R9aG5Iw9q+p0SbifeV5q1cPtlHv3rW3ryive3xfY1l3pY1AAAAAQKGYh3fVS6qhu7IqdCfzJm1XTecBqul6ub+2HFgY1owtk8HS+HpPsnjax1XSx63csXnryu3X7nzXxs3DV4xcMbLlPavOXHX20Flnn7Vyw8ZNI0O1nyF0F8QLIYxPP2y/ducnhjdtGtm2vVaYbf/S9HFL0/UkfdzAu8PQ2PLGtP1LCuorTalv7m4UHz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/s2t3IXJeZRzAzzszOzPdNmalX9PQbIZ8lKhFk7iVVEv3BcFCm4QsBZmtriXYBIubJrRJiXVsA7Y1QRFaAiGSCyOx2Fq86YctYj8IVGo04MYgbdFe6IXSaiUtuZCUkezOmZ2ZncmsY2na9Pe7mHfmnOec5z1zsfB/dwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPfXVHVkojI6Nj6YhJB0qal1EOey+TQt99H3q89u/2Fh+NTK5rFCro+NAAAAgJ5iDh9ojBRDIZcN2XDF9KeloWkizOZ+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgo2eqOjJRGR0bvzAJIelSU+sgzmXzaVruo+/rbz/+uVeGh//ePFbqYx8AAACgt5jDM42RYiiFZWEguaKlLj4bWNS2vr0u7rN4nnXtzw661S2bZ91V86z7RI+6DfXrrgAAAAAffjH/5xojQ6GQW9A1//fK9bFuSVtdtn7t57cCAAAAwP8n5v9CY6QUCrlSI6/PN+8vbauL63v93z6uX9Flfa//56+vX/2fHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+PKaqIxOV0bHxbBJC0qWm1kGcy+bTtNxH3zXPDf7zpiMPLG0eK+T62AgAAADoKebw2ehdDIXcYBgIF07n/uEbDj755SefHgkhzMT8fD7s2rRjx51rZl5j3eqjRwZ+8NKb35lTt3rm9ZwdEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeM9MVUcmKqNj4xckISRdamodxLlsPk3LffR97Qtf+uujJ555o3ms1Mc+AAAAQG8xh89m/2IohXzIh8umPzVn/TMybeu7PTMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzh93feueb26anNx8pzfeeONN4825/ssEAAC815aEJNT+R5dvPNd3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBBMVUcmKqNj48UkhKRLTa2DOJfNp2m5j77ps8cKC04990LzWKmPfQAAAIDeYg6fzf7FUAoDYSBcOv2p0zOB6fw/9D7eJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCBMlUdmaiMjo0vSEJIutTUOohz2Xyalvvo+8juA58/vPD7NzaPFXJ9bAQAAAD0FHN4vjFSDIXcJ0MhXFn/PNm6IMnWr52fC8yu296ybHDe66ot67LzXren7WS5+mlm1hXjfkMz18a68tx15aZ1pdBoX25ZF/a1rFrQ4z4DAAAAnEMx/xcaI0OhkCs05dyftdQPybkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBdT1ZGJyujYeJKEkHSpqXUQ57L5NC330fee3338oq/9fO/O5rFSH/sAAAAAvcUcPpv9i6EUFoePhcXTuT8MtdbHun9VTh9++N9/WxnCqsuOD+fat/1xfPOb165/vv0lhExrdSaEhfV+SZd+v/3Dw3cvr51+NIRVl2avnNMvnL1f65Zp7anK5vU7toftPb4cAAAAOE/E/D/QGBkKhdwdXfN/TN498n/DdABfePfuX15Sf60n8rYVmaF6v0yXfl9c/vhfVqz9x5tn8v/Z+n3mwNbDl7Q0nBlpk6S10a07Nxy/5lAmnnqmf7atf/xevvLtN/6zZddDp2f6F0OxPr4o16n/3Nc2F6S1ycz+8XXv7q+29s91Of8Dv3/hxK8X7X3nTP+3lww2+l91lvOfvf/gzQ/uu/bAkQ2t/UMI5U7933rnxnD5n26/v/38g20bN3/zza9tkrR2dOnJQ2sPlq5r7Z+09Y/f/y9OPLLvpw997+nYP/5WZOWy+fbPtPV/ec/Fu1+8b+Oi1v6ZLud//pZXhreVv/vH9vPf1rJrrutdzD3/Y1c/ceurm9J726cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOL1PVkYnK6Nh4Jgkh6VJT6yDOZfNpWu6j7+s3HXvrlr0/+VHzWKmPfQAAAIDeYg6fzf7FUAr5kA+D07n/qcrm9TteOr49DM3MJvVrbnLbXTs+tWXbzjtuO0d3DgAAAMxXzP+5xshQKOSWh4F6/h/dunPD8WsOZWL+z8T8v+X2yc2rQqPu5T0X737xvo2LGs8JQpj+WUDxTN1nZ+tuuP7Y0Mk/f2NFx7o1s3VHl548tPZg6bpYF5rrVofG84nHrn7i1lc3pfc27q+57tNf3zZZfzwR9x28+cF91x44sqFxjvp1sL5vrJvM7B9f9+7+aqzL1q/F+rkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLmmqiMTldGx8ZANIelSU+sgzmXzaVruo++65b+6/6JTzyxuHivk+tgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWG//kKkquI4gJ8zs9uOO7u6q0Fb0bpaUdhDUhBRLxUVoSFCT4aEpfkQBUFEYQ+toZFY0UuQ9SJRQbWFUJCbJFqs0T/ppYcKCqyHQKSFcpGgP+zMuePs3blNXS0oPx8Yzpwz937nd885c2cGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/5S+npFGe2j7AzNrzrvp48fuPv7oLe/et/WSR177fmzjDR/t6X/5xNSmZZu/unHJxn33rJrc9cLBnwff/u1I1+CHm82K1K2FEI/FEGrvTT/7+NQn58yOxRBCNQ6NhzAcFx8cjrmElb+EEDa16pz74lvHr9w8227d2TdnfFEuJH9doV7N6mkamlsv/y+1tM+2zDx0Wfjm+nXbPlv65hu9E0fHTx4Sa237KYSFG9rP7w0hLEiPWdluG8lOTu3aEEJ/23lXd6nrwr9Y/+UF/fNTe1Zq611ysteX5/qV3HH5fqY3hF/XpPkIuWv9JxTVUfa4bgZy/fzN6FQV1ZmND6f2ndSu+Jv51ewRQyWGnlb598aTeyS0rVsMsbGWtVa/0lrbkK4/14+5fiXXr/bmrqvxvmmjVWOcO54dlxvPbsc9aXxZ+726g9sKxs9NbS19UE9k/ZB/0lSf96R1XQ1ZXdN/Usu/odJ2D+o03lr4tBj1NFaPi+ed83sH2WtT6568uLr+/UNDBXXEPTHlx+75Q2Fe/pZPhwfueH3HgyNF+RsqKb9Sqv5vVx/+8fYdLz5fmP9Mll8tlX/F/v5jqz/YvrzD/Cxs5E9n89NTKv/OIx8+tfTsuyY6rXUjf3eWXyuVf93k4b7Bmf0HCtd3ZTY/C0rlf33tzd+9+sXeo4X5IcvvL5W/fvL+p/tGZy4tzD/Q/CjUGzu0xP75aeKqL0dHfxgryv88m//BDvmxa/4r47uueWnRzlWF+3NtNj9Dpeq/9aJ92wZm9l5QdO+Mu0/XNyfAmWlJ+o31ROqX/Z95qtr+Lzw31tP8BhpIj8HT+UY5MfvBAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAHO3AsAAAAACDM37o3iA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKYAAAD//3cKLp4=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fsync(r0) 8.900656274s ago: executing program 1 (id=195): syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x5976, &(0x7f0000000bc0)="$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") open(&(0x7f0000000000)='./file2\x00', 0x6840, 0x120) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000080)='./file1\x00', 0x0, 0xffffffffffffffff) 7.354510913s ago: executing program 0 (id=197): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x141242, 0x1b4) pwrite64(r0, &(0x7f0000000940)='2', 0x1, 0x8000c61) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fallocate(r0, 0x8, 0x0, 0x10000) 7.062619136s ago: executing program 1 (id=199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32) 6.305323697s ago: executing program 1 (id=200): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14967e, 0x0) write$UHID_INPUT(r0, &(0x7f0000005600)={0x8, {"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", 0x1000}}, 0x1006) open(&(0x7f0000000300)='.\x00', 0x418601, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x101241, 0x1c) 4.879484568s ago: executing program 5 (id=206): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x40}}]}, 0xff, 0xbb8, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x3, '\x00', @d}) 4.367598712s ago: executing program 1 (id=209): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e010000082402010102000008"], 0x0) 4.326793309s ago: executing program 5 (id=210): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2200000, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40) chdir(&(0x7f0000000200)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 3.935095863s ago: executing program 3 (id=211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000480)={0x4, 0x0, 0x70}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009e02"]) 3.640179438s ago: executing program 5 (id=212): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) 3.639148129s ago: executing program 3 (id=213): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x400) close_range(r0, 0xffffffffffffffff, 0x0) 3.240489337s ago: executing program 5 (id=214): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0xffbc}], 0x1}, 0x0) 2.875622148s ago: executing program 5 (id=216): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{}]}, 0xa, 0xb921, &(0x7f0000022ac0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 2.636818501s ago: executing program 2 (id=218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000f0ffff9f000040"]) 2.455066662s ago: executing program 0 (id=219): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000740)=ANY=[@ANYBLOB='very_degraded,no_splitbrain_check,norecovery,inline_data,journal_flush_disabled,norecovery,erasure_code,reconstruct_alloc,errors=continue,errors=continue,fsuuid=aaVec30f-abc2-15ce-e6a0-bb10b1b8,dont_appraise,measure,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c66736d616769633d3078303030303030303030303030303030342c6f626a5f747970653d6e6f6e652c00908c4b384a8ab47b8f779e81ffb72c1c01ec488927c907ca6c961f1c36e00001001b0926ffc13c8c96c3f3035d90062d5960f2aec2690adecc2b4da40af36f7fd68e5984ac60fe3cb0c5"], 0xff, 0x59c1, &(0x7f0000005e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe0000000) 2.224167928s ago: executing program 2 (id=220): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.847965925s ago: executing program 2 (id=221): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000300)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.744470419s ago: executing program 2 (id=222): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x1) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="58020094001400000000323b478925458da9b45602117fff81", 0x19}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 1.488852447s ago: executing program 2 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x54, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_a, @from_mac=@broadcast, {0x9, 0xc4d}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0x10, 0x9, @device_a, {0x0, 0x6, @default_ap_ssid}, @void, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) 1.347781872s ago: executing program 2 (id=224): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) write$char_usb(r1, &(0x7f0000000a40)="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", 0x5c1) 863.540394ms ago: executing program 1 (id=225): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8000000000000002, 0x8000000000000000, 0x0, 0x0, 0x8020, 0x4, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003eafffeffff00", "0347c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a12ffffffffffffffe000000000e8f20000000200", "b90000cd1a0900000000000000000002000000000200", [0x1]}) 698.489111ms ago: executing program 5 (id=226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000011c0)={0x7, 0x1, 0xfd}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0xab00000000000000, 0xd000, 0x0, 0x3be66fef576f3e54}) 467.149789ms ago: executing program 3 (id=227): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 331.895543ms ago: executing program 3 (id=228): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) 248.367467ms ago: executing program 3 (id=229): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0xffe, &(0x7f0000003480)={@remote, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x3b, 0xff0, 0x67, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "ab2e3f180db8976e917dc8ad59080c4b6e6d7b13e1b923c64167e5fae66c2bec1d501a2113f346546511e5d2da3871ed00702d43a9ef56d5a88ec127cd5eb09a8244cd2cdf876ab703a2c084bbb21cf62ad01d4d9efe5eef2d87d1cf60c85420bc009a5d4302d77ba6fc819c88fe81eb6a96fa7af62206d2c214929f229b21e1dd3cd675f003d4cb56fa368366c7ce3e07a7b885c3dc2673b7ef4deaec53278a5d8ffee36a45ad833dfb0fcb07fd8aaa083e60c4f769664d6cdd1b2e793d5310e35d3403d42da0a8a3276ed09ff1e3e670cb73a1309c81cee6bf55693e613a66d5fb32cc7df91781b5acc421c5029753f5c337d000344c4d2a6badacf04502ee543f8ebe9e9fec869ea6809d760f1003d2424aa8f03d29ad1adfd5352cdad2fe5df7e80c48aa7e59be8adf72d10d2c8a72d564ffda6b78ba8a91c82ca8f0161c4e2747a0bf789df942f4b014e8beaf2ceefcab370aa685365875f677016bc0d236b7c1785174d95b1d1acd0ecdd5ba2e63916f99936f99bb133393d226da44593e327dfddd072e1b890e424e1e07006157d494439b77e5937775cc634632a232b1498b1f5ee17efb9ae515847b1b1b7d6152cbc94dee50fe828c5f3a506035257aa3e85ebb92275efddae95b04c5fad1c165cfddf76229c75e82aeaad671d04bbef3ab395f708aec9d459938755fc4bb4f83f9f2a5200b885cd1d1fc8059d60753d04e93813a84656dd3228455a5e72466039a3c23d97af74d043701c88807758d6b072cf7985ad5edd12786f4097cc401e4070193a2b4127b8c00c9af9bef0c4089413bb0ead1181422bbbd350ac037e7c5a6bdae5ef05f44d1b83fe3748f5b5b2d14b8efa21517b321234f7f0eb72e40b1caa231743a1ac30315b47af8c2d77f7eb3828ddac3fecdf9056e0b98c745ca6c7526ed34ddd7aa4b350faccfa183a6240073cb052fe93538fa88156228cc02ce972a1ebdd1ab826cb4764cd03cd87dfbb00ecc2469f6fa0429e839d24c9fbc741dde80c264e97290790bf626a6d70d97dbc0e1cc2e7fc194061472a5b0d8f376786f1585e342dcea30868c9dea214a4e67643853a449836c9dd9f90a03de46b39546fce787f14289019bc1a8b6ca819b076f6ac4811d1fbbd4d6f2ac6e7740000d37c878664094423a65e82f6f52c034b084faaa2369be40adc6cb47efe5cf78594270fc38fc84c1ceac0238f914777584455c9ae48f05c46f2e4ff378629da6d604f6194f2ff688564f2a520c152528be134db0cef8a5a375e7c1a78234ace37d8eee05944e909525ae5e21b5166c120c349f8a2d1fcb5a5f1ece5cfc907f515c0b1a513b875e2caffbf3d5355f83c446e89ff718efc6507a814b06ff9f69ed95447e65e07d298ed750c27d2c8ad13972fbe5afddeef7b5de9813f787feaba1db7638c65fa6f58df74c4614d761217e95d75193817d27f16faca2a81a4c741618b452885126d6e3a6ee3a2e307e812e1251d8244685cb2be40660bb7977305179fed2938be0a0cd66ab48c3f72c6bec396ca7536504862d7aafc5aceabfd5ba2655a50633803b903c2e1fa14e42b61d0bdb7cf561a6cfa6452451ea5c601712b2a81ed79232933dc637b6576906cea5d3cd9d51ef3c001d0e4b59a7170ef92d2952b502c34a85a66c2582b1b3c2beee1f2d79c01ea9704b535bb81f599cdb12cfba938fea71f1849a43925eb758bd940a4bad2f68eea9817c2f0aab0475104e67785dd912dbf2db04f57a0ede7e1e1d70221f4264ae762ffce2e889c2f7f747605f2fc387873a2dc58b67b47a2d22ac15a67c67af94deef160daf6fe0da30b9a9b395223f03e9dc67bb7cde8098482425e4d9bc7e4c2bffcbdfc086ceecf39f0c92133d0db8164537db2c0793860f0b125aca00134d75a6e2d850f89ceaa2e35b4ff28b9541efb7b4074dafcd350e3d1e5fa9494fb7ecd8693538237f94f54c6408c304e6a430d14207cc07b4defb1e811c6ca0f5b2ed6814b9e325cfa907dbdc9b460491837f3b83f67ac9f9d842a9b124fdd86b818a336c376c7296823a18308f2ab2bca36a3ff75593b133d1125f572c55771fef3660b2ea360bc155fe93990065fd5f5e7700d1a68216c02a9ecf61b4292bd2b77e68c2c59cfd438b619bab5f28b390f4449cdd5b049d9f2f09037cffea5ce253e29a4b94e76344fa7f7fb730f8b8ef0ec18dea0ae2e4ce649e76a248abad110654645eb3c27b7eea85dd69a34aba39a8db024f8e5ded11a026659af242f02c056df4dd4ad3b3053f28ea824a2129a708db6df328ec285abe6938bbace37308bd335e6356af67fb424c26f270e7fa70259b92c6a36469a201c3089d3c2d0989b2d014d7a3c2457fe530741d53b0f880957f54135d7ddb513a96414784efac0818b1faeb48a36588cf9269ff572b3058a712c6618cd8bbb44da046f3ad858b588c49b0634940f0124be3c4077603e8a9b22dfc986941a0118ffad1613652543a607c864c2a4d9925b957c82116b7ec75575deb8d457650c0027980c92420475c003f97f7967a5e3a7b42d9be0f8fd4ced4d77cdddef29fbc028e89cb655f60a6988f3dbdf4b5e75adfb306efff22be8903e15859d9c2a1fa9c07f60088e6ae69afd7d7e537181fe408e786c5c9b5c9786733338045ff4de128eb3e91feb2d1be85f7f17aa298cd038a7713eb50ce2277f2999a1ae0342fff4367710bcc2c66479b256772872a325695a0cf9ab07a3bc1a0f707f004aa56cc8ef042cfe754c346f63c622d645519c6f41ef2903a1084edf8cf660138f8709a970db0c8a8a07ae8457f7bfc9ab0584faa99054fb6b26b30885d8cb72f50f4ce0d6965e17416f99a971a41b67b8e1049196ad76da73be3d8b99bff7cc6f34772676309ed1eef226e008aca22f9b70dd3fb1aaa10f3d7dceac73f37ed8a48ae2f4cdb9a061487aec405358a6714e9b4f4ba96278a3062bfbf1e9960e33f0b7611f8ae15bb182bf576076ba41ef6d6052c5b38b355293c76a2ad4cb432e9d5b74eee0b6385b025981c5b017ec768a9444860a7a36e89b6a1df7f13e2fb5d866632a101195c97fee029cb56f84edd5bb31a8521d0155686660e229e74f5cf753bd27cfa3ac1dda1a7412f95d552c3b8af95f478738cf011fbcb21632f8b1a8cb0d7302cd99e73ae1842205733bcb19ff4b3e6beff21b0a310a083d7461f6003525912b236417cc03c1e009d352f7a75d0d9fe8287b8916c978e1aec2e9e3357e04ae05ab25c5c5444fc8ab387481f2c7c1704d06260184f48c980c6ec56fbb46c5a74420e58957f2f683477a3802d7b5af91211e3100afc3160f102cdf3a8b4fb43ef8cf75edc859c203ba4e58a31d9302f69c1cf2c7204a14cd4f2f9ea95469607a6dc02d875709977e245434bad480f3391c8ca721484f46df4d8de5dba076546d6ea7208ceea5d3a6ebcd0d7b144e146e6a8f0197e5587e30a24b0d1107e564f227b2258fb04f016e5f984ac0def5944ba03c00377a71a0e7462151a511199d780330a713ec1d080c213ded123e88f3b4f43182a6d96250bdcbb7113f1e19f381a58cacb4e16eaacc6ea4ace4a935ae8f9e24de7bcb882dc16088d39d9d0415eca40516f0c55b28ecb7c1a92f44c1ed468d2eaec6ce1413ccbf0b5bf4190c71324b4990a0093378d49fcc28607540417f37991c50b01afb8c6c02fd2d02249686377f357270397c87b32b84982b9fe14aec6f99f99c05e55bb3b21ac7e794b979272aeee1b9472a1d79e15f3a2a21a912251edf6af525b60b71933ce935b775c0f2bcedefac249f9a27e3ff2476efc20dcfe74a36b8da97bd3cfa00fe22756daf4fb63084473cb8f4faf42a6a716aab187d5d14b9471a79e629a2c6e81c53e48501d89702910c3750ff22a7dc49659fa7f24a19428e0a15094a50f3b588a1b313c689faf284dc0f061d40a4e6fa4fb2559eb6d2052b4240d4b3adf19438666d7e334a42b8863f9b171ec5a51f1896536d73dcd42810820d4f1fa07341fa4244e0142715e9b85236293ffad665f3544aed224d649ad1133bb65901c228959ad17ca2abb0e85471fb055fbf0aa47a1fc48eaea3085c4bf92b2b5aad1eca06304de6f602256f3ddbce909438441d8fa914f68f5d2c63d635ef267c3f511a70efd8ed331aa8275debb8fd85a996149ee55896ef23cd8db2b233afb6f72e8a742b1ebacd45d502907ade520b85ad2e91257bf9bc427d50de5c0a0824899d7ed3e1e518e89ad47bc2de98ae3a5e6dab691f8cf101a909df51e7db74dee4fe48529dc30e4f12d6f7e851a100d647cc08039d001d92d811e05af31ca1411a51acdc5f41da17b44692442ca0a07cfe7ed099dca20daa3371cd2a2716d148606ac638b61e669e1af0c045289e3e8cfcb2b1dafdf73911a6cdff5c090ff1e05129f47fe6d5f069cef245f98bdfaa5af5f66b6e342a7fa171177c6072435b8e334c97b89ffc7893c593dda774d5d2fd03dc538be386db05a4d8f37351a88dabe02c5d29f0eb60402ffd35975f0a8ee2a49fc65ac26f10765f7b58425978250082d6a839356b801614a63dc73f49f6db4b8f4a1a5575fb1a674f611875d69214165d84b34aaea324ab3436a7f87983e973b3c7a07d040a37b7f5d9a188ea0a317737a362dee07fadff98a603f171f368ce196528149b92e599598fd2801eedfae745ee8d613c5fd3c35c692d13e817a57b84d3077777bf272c7d8dbcce02ca5343d69b247e61a3e6314602c951781603e04cb42bd86e00b0a76d7eca5a21d88f70b24b539e01cdc31ca952cb5b1f2d3285481444223c74a74bc41d884a6083485c9a3ec1cba25db9e4299dbbfb9952113352653e1bfd604577edb45fb4c3f5837055c6a5d0c39af21b8e8145a98ae87872561fa164de1dada4cade48d3056390a4dd35613c4f01bc2747cfda3d5ed7d40b2750b80db41a331e60f236e26a94a3ea05958a583c6c0d4fc67d4ce7166aca5823dd3dc8413df0410f0a7c872ee5c33a8e34a7795a3724dfef53c56a766fa3d78bc688bb75cfa37b8d4b5847a138fa87488d9046cf68d8baabea0ab0e21a73a805d713f96af8a251242ac5371c1c9142ea58b4ec90505a0ba8406c456c3d18b0ef3fbab16f734cf01097eaa4d646faf238af41fed6ad2397af55d07b5b08105b88b5d863bba495d50cf455e80c603794321463860c4438edde183a28fadd81c72d241b63c"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "a454be046e536e2668a0f5bcb1f824f399695789b764c1d4e649e7a8163009cd0a2d0f45342248e401e99b2042ff01ba807b39ab44fb5f3853026ed1d945ad488f020fe6c2aa582b66d8207a783466a86e2571232b809ccfdf54d5e1f820d65d09c2d0361345a90f4c6153c263c3baf3f28e6e7d0527a1c0f00980d0301e054af9e6f291f8b83d3c30aae82243a2660cad24e858dd806e6de5a5a59f96a7b00a20edf78ce5209ba7222961a30f48734ea71b8f79bf9a83d9cea17d135c0786a9175f0362270cd224619f8a11d6e69b00207f05839b07be48f0a1efb807c31ddf56889f1de8ec5078fab770"}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x1, 0x0, 0x6, 0x40}, 0x1, {0x8000}}}, {0x8, 0x22eb, 0x0, {{0x6, 0x2, 0x0, 0x1, 0x1, 0x0, 0x3, 0x7}, 0x2, {0xc6, 0x0, 0x1, 0x6, 0x1, 0x0, 0x3}}}, {0x8, 0x6558, 0x1, "f1472b02e2ff02e6c6352a698441f532a45b2f895b7ba98d83a6b627fb6067cdde2542464d72df64d0860717ebcf9f302e038f7b6be03d576e95c31f576280"}}}}}}, 0x0) 136.057928ms ago: executing program 1 (id=230): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x3, 0x5a2d, &(0x7f0000000d00)="$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") syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000440)=ANY=[], 0x83, 0x14fe, &(0x7f0000002180)="$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") symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(0x0, 0x0) 51.452008ms ago: executing program 3 (id=231): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0xfffffffffffffcd2, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=232): sched_setscheduler(0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) kernel console output (not intermixed with test programs): aa:aa:3f) already exists on: batadv_slave_1 [ 83.243423][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.287408][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.300058][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.318749][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.329741][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.340981][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.354257][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.379815][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.432007][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.462132][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.472392][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.496339][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.542352][ T5928] random: crng reseeded on system resumption [ 83.867280][ T5926] loop1: detected capacity change from 0 to 32768 [ 84.008366][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.021596][ T5926] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc [ 84.040367][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.041641][ T5926] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 84.064683][ T5926] bcachefs (loop1): Version upgrade required: [ 84.064683][ T5926] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 84.064683][ T5926] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 84.064683][ T5926] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 84.089040][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.144121][ T5926] bcachefs (loop1): dropping and reconstructing all alloc info [ 84.163945][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.182640][ T5926] bcachefs (loop1): accounting_read... done [ 84.192835][ T5926] bcachefs (loop1): alloc_read... done [ 84.202593][ T5885] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 84.225603][ T5926] bcachefs (loop1): snapshots_read... done [ 84.233318][ T5926] bcachefs (loop1): done starting filesystem [ 84.238815][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.246225][ T5837] Bluetooth: hci1: command tx timeout [ 84.252386][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.252915][ T54] Bluetooth: hci0: command tx timeout [ 84.300811][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.325846][ T54] Bluetooth: hci4: command tx timeout [ 84.326691][ T5837] Bluetooth: hci2: command tx timeout [ 84.331273][ T54] Bluetooth: hci3: command tx timeout [ 84.345855][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.370997][ T5885] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 84.393440][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 84.428955][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 84.452062][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 84.544584][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 84.589012][ T5885] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 84.605794][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 84.637043][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 84.663458][ T5926] capability: warning: `syz.1.7' uses deprecated v2 capabilities in a way that may be insecure [ 84.686165][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 84.718722][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 84.756433][ T5885] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 84.774027][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 84.790922][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 84.813050][ T5830] bcachefs (loop1): shutting down [ 84.816173][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 84.839332][ T5939] loop4: detected capacity change from 0 to 8192 [ 84.865289][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 84.884401][ T5939] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.921019][ T5885] usb 4-1: string descriptor 0 read error: -22 [ 84.929285][ T5885] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 84.965662][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.027892][ T5830] bcachefs (loop1): shutdown complete [ 85.034451][ T5885] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 85.276390][ T124] usb 4-1: USB disconnect, device number 2 [ 85.422384][ T5937] loop0: detected capacity change from 0 to 32768 [ 85.450585][ T5937] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (5937) [ 85.499353][ T5941] loop2: detected capacity change from 0 to 32768 [ 85.499511][ T5937] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 85.520183][ T5937] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 85.530538][ T5937] BTRFS info (device loop0): using free-space-tree [ 85.709603][ T5944] loop4: detected capacity change from 0 to 32768 [ 85.930250][ T5840] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.169570][ T5944] bcachefs (loop4): filesystem UUID already open [ 86.174546][ T5941] bcachefs (loop2): starting version 0.263: (unknown version) opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 86.190171][ T5944] bcachefs (loop4): shutdown complete [ 86.195585][ T5941] bcachefs (loop2): initializing new filesystem [ 86.217837][ T5941] bcachefs (loop2): going read-write [ 86.238653][ T5944] bcachefs: bch2_fs_get_tree() error: EINVAL [ 86.343787][ T5941] bcachefs (loop2): marking superblocks [ 86.365155][ T1209] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.384588][ T5941] bcachefs (loop2): initializing freespace [ 86.404157][ T5941] bcachefs (loop2): done initializing freespace [ 86.428156][ T5941] bcachefs (loop2): reading snapshots table [ 86.445429][ T5941] bcachefs (loop2): reading snapshots done [ 86.520137][ T5941] bcachefs (loop2): done starting filesystem [ 86.525804][ T1209] usb 1-1: Using ep0 maxpacket: 32 [ 86.557313][ T1209] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 86.557341][ T1209] usb 1-1: config 0 has no interface number 0 [ 86.569499][ T1209] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 86.569529][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.569546][ T1209] usb 1-1: Product: syz [ 86.569559][ T1209] usb 1-1: Manufacturer: syz [ 86.569571][ T1209] usb 1-1: SerialNumber: syz [ 86.579381][ T1209] usb 1-1: config 0 descriptor?? [ 86.582373][ T1209] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 86.640007][ T5941] syz.2.9 (5941) used greatest stack depth: 15152 bytes left [ 86.731864][ T24] cfg80211: failed to load regulatory.db [ 86.770304][ T5835] bcachefs (loop2): shutting down [ 86.806905][ T5835] bcachefs (loop2): going read-only [ 86.812456][ T5835] bcachefs (loop2): finished waiting for writes to stop [ 86.817811][ T1209] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 86.841100][ T5835] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 86.864503][ T1209] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 86.961992][ T5835] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 86.975203][ T5942] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.055210][ T5835] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 87.106734][ T5835] bcachefs (loop2): marking filesystem clean [ 87.147635][ T5942] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.168729][ T5942] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 87.192361][ T5942] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.202115][ T5942] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 87.217498][ T5942] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 87.235236][ T5942] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.244637][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.254398][ T5835] bcachefs (loop2): shutdown complete [ 87.263214][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 87.270943][ T5942] usb 5-1: Product: syz [ 87.271343][ T5913] usb 1-1: USB disconnect, device number 2 [ 87.281585][ T5942] usb 5-1: Manufacturer: syz [ 87.313626][ T5913] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 87.315301][ T5942] cdc_wdm 5-1:1.0: skipping garbage [ 87.341215][ T5942] cdc_wdm 5-1:1.0: skipping garbage [ 87.361915][ T5942] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 87.380581][ T5913] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 87.381721][ T5942] cdc_wdm 5-1:1.0: Unknown control protocol [ 87.417152][ T5913] quatech2 1-1:0.51: device disconnected [ 87.451072][ T5983] loop3: detected capacity change from 0 to 40427 [ 87.480062][ T5983] ======================================================= [ 87.480062][ T5983] WARNING: The mand mount option has been deprecated and [ 87.480062][ T5983] and is ignored by this kernel. Remove the mand [ 87.480062][ T5983] option from the mount to silence this warning. [ 87.480062][ T5983] ======================================================= [ 87.673874][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 87.680642][ T5942] usb 5-1: USB disconnect, device number 2 [ 87.680673][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 87.692541][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 87.726292][ T5986] loop1: detected capacity change from 0 to 40427 [ 87.759038][ T5986] F2FS-fs (loop1): build fault injection rate: 771 [ 87.799497][ T5983] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 87.812177][ T5986] F2FS-fs (loop1): invalid crc value [ 87.839967][ T30] audit: type=1800 audit(1744385899.917:2): pid=5983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 87.904493][ T5842] syz-executor: attempt to access beyond end of device [ 87.904493][ T5842] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.935822][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 87.935848][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.935861][ T5842] Call Trace: [ 87.935868][ T5842] [ 87.935875][ T5842] dump_stack_lvl+0x241/0x360 [ 87.935905][ T5842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.935935][ T5842] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 87.935952][ T5842] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 87.935971][ T5842] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 87.935999][ T5842] f2fs_handle_critical_error+0x392/0x5a0 [ 87.936030][ T5842] f2fs_write_end_io+0x58f/0x7d0 [ 87.936054][ T5842] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 87.936075][ T5842] ? bio_endio+0x7e4/0x890 [ 87.936100][ T5842] ? bio_endio+0x82a/0x890 [ 87.936125][ T5842] __submit_merged_bio+0x2a9/0x710 [ 87.936145][ T5842] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 87.936172][ T5842] f2fs_submit_merged_write_cond+0x29f/0x380 [ 87.936205][ T5842] f2fs_write_data_pages+0x2f99/0x3910 [ 87.936259][ T5842] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 87.936290][ T5842] ? __pfx_stack_trace_save+0x10/0x10 [ 87.936308][ T5842] ? __bfs+0x14a/0x270 [ 87.936354][ T5842] ? __bfs+0x14a/0x270 [ 87.936389][ T5842] ? __lock_acquire+0xad5/0xd80 [ 87.936410][ T5842] ? do_raw_spin_lock+0x151/0x370 [ 87.936439][ T5842] ? do_raw_spin_unlock+0x13c/0x8b0 [ 87.936462][ T5842] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 87.936481][ T5842] do_writepages+0x38c/0x640 [ 87.936502][ T5842] ? __lock_acquire+0xad5/0xd80 [ 87.936522][ T5842] ? __pfx_do_writepages+0x10/0x10 [ 87.936541][ T5842] ? do_raw_spin_lock+0x151/0x370 [ 87.936571][ T5842] ? do_raw_spin_unlock+0x13c/0x8b0 [ 87.936597][ T5842] filemap_fdatawrite+0x1f2/0x2a0 [ 87.936617][ T5842] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 87.936675][ T5842] ? do_raw_spin_unlock+0x13c/0x8b0 [ 87.936697][ T5842] f2fs_sync_dirty_inodes+0x34f/0x860 [ 87.936730][ T5842] f2fs_write_checkpoint+0x857/0x1da0 [ 87.936768][ T5842] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 87.936834][ T5842] ? kill_f2fs_super+0x290/0x6d0 [ 87.936856][ T5842] kill_f2fs_super+0x2b8/0x6d0 [ 87.936880][ T5842] ? __pfx_kill_f2fs_super+0x10/0x10 [ 87.936905][ T5842] ? shrinker_free+0x2ca/0x3d0 [ 87.936932][ T5842] deactivate_locked_super+0xc4/0x130 [ 87.936951][ T5842] cleanup_mnt+0x422/0x4c0 [ 87.936968][ T5842] ? lockdep_hardirqs_on+0x9d/0x150 [ 87.936990][ T5842] task_work_run+0x251/0x310 [ 87.937017][ T5842] ? __pfx_task_work_run+0x10/0x10 [ 87.937042][ T5842] ? syscall_exit_to_user_mode+0xa3/0x340 [ 87.937064][ T5842] syscall_exit_to_user_mode+0x13f/0x340 [ 87.937085][ T5842] do_syscall_64+0x100/0x230 [ 87.937104][ T5842] ? clear_bhb_loop+0x45/0xa0 [ 87.937123][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.937143][ T5842] RIP: 0033:0x7f625e18e497 [ 87.937163][ T5842] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 87.937176][ T5842] RSP: 002b:00007ffe19f07e78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 87.937194][ T5842] RAX: 0000000000000000 RBX: 00007f625e20e77c RCX: 00007f625e18e497 [ 87.937205][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe19f07f30 [ 87.937215][ T5842] RBP: 00007ffe19f07f30 R08: 0000000000000000 R09: 0000000000000000 [ 87.937224][ T5842] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe19f08fc0 [ 87.937235][ T5842] R13: 00007f625e20e77c R14: 0000000000015705 R15: 00007ffe19f09000 [ 87.937264][ T5842] [ 87.937271][ T5842] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 88.024885][ T5995] loop0: detected capacity change from 0 to 1024 [ 88.067007][ T5986] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 88.135284][ T5995] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.336770][ T5830] syz-executor: attempt to access beyond end of device [ 88.336770][ T5830] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.353861][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 88.353885][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.353895][ T5830] Call Trace: [ 88.353902][ T5830] [ 88.353909][ T5830] dump_stack_lvl+0x241/0x360 [ 88.353941][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.353963][ T5830] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 88.353984][ T5830] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 88.354000][ T5830] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 88.354026][ T5830] f2fs_handle_critical_error+0x392/0x5a0 [ 88.354056][ T5830] f2fs_write_end_io+0x58f/0x7d0 [ 88.354079][ T5830] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 88.354099][ T5830] ? bio_endio+0x7e4/0x890 [ 88.354123][ T5830] ? bio_endio+0x82a/0x890 [ 88.354146][ T5830] __submit_merged_bio+0x2a9/0x710 [ 88.354164][ T5830] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 88.354191][ T5830] f2fs_submit_merged_write_cond+0x29f/0x380 [ 88.354222][ T5830] f2fs_write_data_pages+0x2f99/0x3910 [ 88.354236][ T5830] ? __lock_acquire+0xad5/0xd80 [ 88.354295][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 88.354367][ T5830] ? arch_stack_walk+0xff/0x150 [ 88.354414][ T5830] ? __lock_acquire+0xad5/0xd80 [ 88.354435][ T5830] ? do_raw_spin_lock+0x151/0x370 [ 88.354466][ T5830] ? do_raw_spin_unlock+0x13c/0x8b0 [ 88.354491][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 88.354510][ T5830] do_writepages+0x38c/0x640 [ 88.354532][ T5830] ? __lock_acquire+0xad5/0xd80 [ 88.354554][ T5830] ? __pfx_do_writepages+0x10/0x10 [ 88.354573][ T5830] ? do_raw_spin_lock+0x151/0x370 [ 88.354609][ T5830] ? do_raw_spin_unlock+0x13c/0x8b0 [ 88.354648][ T5830] filemap_fdatawrite+0x1f2/0x2a0 [ 88.354670][ T5830] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 88.354684][ T5830] ? mlock_drain_local+0x79/0x490 [ 88.354753][ T5830] ? do_raw_spin_unlock+0x13c/0x8b0 [ 88.354785][ T5830] f2fs_sync_dirty_inodes+0x34f/0x860 [ 88.354822][ T5830] f2fs_write_checkpoint+0x857/0x1da0 [ 88.354864][ T5830] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 88.354939][ T5830] ? kfree+0x198/0x430 [ 88.354956][ T5830] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 88.354976][ T5830] ? kill_f2fs_super+0x290/0x6d0 [ 88.354999][ T5830] kill_f2fs_super+0x2b8/0x6d0 [ 88.355021][ T5830] ? __pfx_kill_f2fs_super+0x10/0x10 [ 88.355049][ T5830] ? shrinker_free+0x2ca/0x3d0 [ 88.355072][ T5830] deactivate_locked_super+0xc4/0x130 [ 88.355092][ T5830] cleanup_mnt+0x422/0x4c0 [ 88.355110][ T5830] ? lockdep_hardirqs_on+0x9d/0x150 [ 88.355134][ T5830] task_work_run+0x251/0x310 [ 88.355164][ T5830] ? __pfx_task_work_run+0x10/0x10 [ 88.355191][ T5830] ? syscall_exit_to_user_mode+0xa3/0x340 [ 88.355212][ T5830] syscall_exit_to_user_mode+0x13f/0x340 [ 88.355234][ T5830] do_syscall_64+0x100/0x230 [ 88.355252][ T5830] ? clear_bhb_loop+0x45/0xa0 [ 88.355269][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.355282][ T5830] RIP: 0033:0x7f1f4158e497 [ 88.355297][ T5830] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 88.355308][ T5830] RSP: 002b:00007ffdbae6e1b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 88.355324][ T5830] RAX: 0000000000000000 RBX: 00007f1f4160e77c RCX: 00007f1f4158e497 [ 88.355334][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbae6e270 [ 88.355343][ T5830] RBP: 00007ffdbae6e270 R08: 0000000000000000 R09: 0000000000000000 [ 88.355352][ T5830] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdbae6f300 [ 88.355362][ T5830] R13: 00007f1f4160e77c R14: 000000000001589d R15: 00007ffdbae6f340 [ 88.355393][ T5830] [ 88.363090][ T5995] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.19: Invalid block bitmap block 0 in block_group 0 [ 88.380839][ T5830] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 88.392634][ T5995] Quota error (device loop0): write_blk: dquota write failed [ 88.752693][ T5995] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 88.752784][ T5995] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.19: Failed to acquire dquot type 0 [ 88.756992][ T5995] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.19: Freeing blocks not in datazone - block = 0, count = 4096 [ 88.792385][ T5995] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.19: Invalid inode bitmap blk 0 in block_group 0 [ 88.816022][ T5995] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 88.829189][ T5995] EXT4-fs (loop0): 1 orphan inode deleted [ 88.843509][ T52] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 88.875573][ T52] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 0 [ 88.884651][ T5995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.946226][ T5995] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 89.044021][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.375570][ T6008] loop1: detected capacity change from 0 to 256 [ 89.394085][ T6008] exfat: Deprecated parameter 'utf8' [ 89.436243][ T6008] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 89.467282][ T6009] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.727246][ T6003] loop4: detected capacity change from 0 to 32768 [ 89.830255][ T6003] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.054735][ T6005] loop0: detected capacity change from 0 to 32768 [ 90.120124][ T6003] XFS (loop4): Ending clean mount [ 90.163601][ T6005] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=ro,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,read_only,reconstruct_alloc [ 90.174027][ T6003] XFS (loop4): Quotacheck needed: Please wait. [ 90.187254][ T6005] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 90.202064][ T6005] bcachefs (loop0): Version upgrade required: [ 90.202064][ T6005] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 90.202064][ T6005] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 90.202064][ T6005] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 90.438676][ T6005] bcachefs (loop0): dropping and reconstructing all alloc info [ 90.492929][ T6003] XFS (loop4): Quotacheck: Done. [ 90.535165][ T6011] loop3: detected capacity change from 0 to 32768 [ 90.558116][ T6005] bcachefs (loop0): accounting_read... [ 90.578331][ T6011] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.594044][ T6005] done [ 90.604729][ T6005] bcachefs (loop0): alloc_read... done [ 90.627994][ T6005] bcachefs (loop0): done starting filesystem [ 90.699105][ T5834] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.771207][ T6011] XFS (loop3): Ending clean mount [ 90.807595][ T6011] XFS (loop3): Quotacheck needed: Please wait. [ 90.826761][ T5840] bcachefs (loop0): shutting down [ 90.915315][ T6011] XFS (loop3): Quotacheck: Done. [ 90.986606][ T5840] bcachefs (loop0): shutdown complete [ 91.023995][ T6023] loop1: detected capacity change from 0 to 32768 [ 91.058910][ T5842] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 91.405328][ T5913] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 91.547594][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.31'. [ 91.609628][ T5913] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 91.616374][ T1209] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.620574][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 91.636999][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 91.649543][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 91.661342][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 91.673475][ T5913] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 91.675156][ T5942] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.681387][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 91.698505][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 91.708394][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 91.720359][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 91.733045][ T5913] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 91.742874][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 91.768112][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 91.775151][ T1209] usb 3-1: Using ep0 maxpacket: 16 [ 91.781384][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 91.786385][ T1209] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 91.794213][ T5913] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 91.804020][ T1209] usb 3-1: config 0 has no interface number 0 [ 91.820642][ T5913] usb 5-1: string descriptor 0 read error: -22 [ 91.821967][ T1209] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=32.5e [ 91.830639][ T5913] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 91.852463][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.854210][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.860568][ T5942] usb 4-1: Using ep0 maxpacket: 8 [ 91.883994][ T1209] usb 3-1: Product: syz [ 91.889797][ T5942] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.900215][ T5884] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.908402][ T1209] usb 3-1: Manufacturer: syz [ 91.913015][ T1209] usb 3-1: SerialNumber: syz [ 91.917757][ T5942] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.929462][ T5913] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 91.932854][ T1209] usb 3-1: config 0 descriptor?? [ 91.943560][ T5942] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.954662][ T5942] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.972383][ T1209] ttusb_dec_send_command: command bulk message failed: error -22 [ 91.981165][ T5942] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.990492][ T1209] ttusb-dec 3-1:0.217: probe with driver ttusb-dec failed with error -22 [ 92.000539][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.079178][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 92.097298][ T5884] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.106743][ T5884] usb 2-1: config 0 has no interface number 0 [ 92.112978][ T5884] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.126574][ T5884] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.137119][ T5884] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 92.150153][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.161812][ T5884] usb 2-1: config 0 descriptor?? [ 92.200707][ T6038] usb 5-1: Couldn't submit interrupt_out_urb -90 [ 92.210412][ T5913] usb 5-1: USB disconnect, device number 3 [ 92.235928][ T5942] usb 4-1: GET_CAPABILITIES returned 0 [ 92.265138][ T5942] usbtmc 4-1:16.0: can't read capabilities [ 92.291336][ T1209] usb 3-1: USB disconnect, device number 2 [ 92.503671][ T5942] usb 4-1: USB disconnect, device number 3 [ 92.657604][ T5837] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 92.666161][ T5837] Bluetooth: hci1: Injecting HCI hardware error event [ 92.674494][ T5837] Bluetooth: hci1: hardware error 0x00 [ 92.810013][ T5884] uclogic 0003:28BD:0071.0001: pen parameters not found [ 92.826834][ T6056] loop4: detected capacity change from 0 to 256 [ 92.847398][ T5884] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 92.852526][ T6056] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84977, utbl_chksum : 0xe619d30d) [ 92.904074][ T6056] exFAT-fs (loop4): error, data size is invalid(17179870234) [ 92.914297][ T6056] exFAT-fs (loop4): Filesystem has been set read-only [ 92.942296][ T6059] netlink: 'syz.2.35': attribute type 10 has an invalid length. [ 92.982961][ T6059] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 93.066481][ T5913] usb 2-1: USB disconnect, device number 2 [ 93.075110][ T5942] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.087667][ T6061] loop4: detected capacity change from 0 to 128 [ 93.115995][ T6061] EXT4-fs: Ignoring removed nobh option [ 93.123903][ T6063] loop2: detected capacity change from 0 to 512 [ 93.160788][ T6063] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.177920][ T6066] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.229508][ T6061] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.245117][ T5942] usb 1-1: Using ep0 maxpacket: 8 [ 93.251098][ T6063] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 93.255461][ T5942] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 93.271956][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.275216][ T6061] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.284179][ T5942] usb 1-1: Product: syz [ 93.294402][ T5942] usb 1-1: Manufacturer: syz [ 93.299457][ T5942] usb 1-1: SerialNumber: syz [ 93.299742][ T6063] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.315447][ T5942] usb 1-1: config 0 descriptor?? [ 93.337397][ T5942] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 93.346178][ T5942] usb 1-1: setting power ON [ 93.346995][ T6070] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 93.356596][ T5942] dvb-usb: bulk message failed: -22 (2/0) [ 93.365267][ T6061] fscrypt (loop4, inode 12): Unsupported log2_data_unit_size in encryption policy: 227 [ 93.391980][ T5942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 93.408159][ T5942] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 93.420461][ T5942] usb 1-1: media controller created [ 93.433732][ T6070] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 93.448423][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.491845][ T5834] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.498193][ T6070] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.512858][ T5942] usb 1-1: selecting invalid altsetting 6 [ 93.554669][ T5942] usb 1-1: digital interface selection failed (-22) [ 93.560706][ T6073] loop3: detected capacity change from 0 to 2048 [ 93.567678][ T6057] dvb-usb: bulk message failed: -22 (3/0) [ 93.567722][ T6057] usb 1-1: gpio_write failed. [ 93.567740][ T6057] cxusb: i2c rd: len=99 is too big! [ 93.567740][ T6057] [ 93.569147][ T5942] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 93.668531][ T5835] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 93.696625][ T5942] usb 1-1: setting power OFF [ 93.701489][ T5942] dvb-usb: bulk message failed: -22 (2/0) [ 93.711076][ T6073] NILFS (loop3): corrupt root inode [ 93.721476][ T5942] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 93.750029][ T5942] (NULL device *): no alternate interface [ 93.771530][ T6075] loop4: detected capacity change from 0 to 2048 [ 93.881201][ T5942] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 93.908018][ T6075] loop4: p1 < > p4 < > [ 93.925684][ T5942] usb 1-1: USB disconnect, device number 3 [ 94.077845][ T6087] loop3: detected capacity change from 0 to 512 [ 94.210302][ T6087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.265855][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.46'. [ 94.285848][ T6087] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.334307][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 94.449767][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 94.523410][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.725278][ T5837] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 95.549870][ T6083] loop1: detected capacity change from 0 to 32768 [ 95.570538][ T6083] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.43 (6083) [ 95.610120][ T6083] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.622310][ T6083] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 95.639156][ T6083] BTRFS info (device loop1): using free-space-tree [ 95.806942][ T6096] loop0: detected capacity change from 0 to 32768 [ 96.013163][ T6131] loop4: detected capacity change from 0 to 4096 [ 96.026217][ T6131] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 96.092982][ T6096] bcachefs (loop0): starting version 0.263: (unknown version) opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 96.228511][ T6096] bcachefs (loop0): initializing new filesystem [ 96.256161][ T5830] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.273961][ T6096] bcachefs (loop0): going read-write [ 96.396850][ T6096] bcachefs (loop0): marking superblocks [ 96.515342][ T5942] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.530128][ T6096] bcachefs (loop0): initializing freespace [ 96.540722][ T6096] bcachefs (loop0): done initializing freespace [ 96.549191][ T6096] bcachefs (loop0): reading snapshots table [ 96.549254][ T6096] bcachefs (loop0): reading snapshots done [ 96.617080][ T6096] bcachefs (loop0): done starting filesystem [ 96.722046][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.740779][ T5942] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 96.750181][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.762326][ T5942] usb 3-1: config 0 descriptor?? [ 96.767425][ T1209] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.915881][ T5840] bcachefs (loop0): shutting down [ 96.924653][ T5840] bcachefs (loop0): going read-only [ 96.936364][ T5840] bcachefs (loop0): finished waiting for writes to stop [ 96.945708][ T1209] usb 5-1: Using ep0 maxpacket: 8 [ 96.962731][ T1209] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 96.992912][ T5942] usbhid 3-1:0.0: can't add hid device: -71 [ 97.005101][ T1209] usb 5-1: config 0 has no interface number 0 [ 97.013686][ T5840] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 97.027247][ T5942] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 97.050208][ T1209] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 97.081436][ T5942] usb 3-1: USB disconnect, device number 3 [ 97.094879][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.169531][ T5840] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 97.182238][ T1209] usb 5-1: Product: syz [ 97.189221][ T1209] usb 5-1: Manufacturer: syz [ 97.196327][ T1209] usb 5-1: SerialNumber: syz [ 97.204402][ T5840] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 97.214568][ T1209] usb 5-1: config 0 descriptor?? [ 97.229228][ T1209] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 97.239147][ T1209] pctv452e: pctv452e_power_ctrl: 1 [ 97.239147][ T1209] [ 97.246864][ T1209] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 97.246864][ T1209] [ 97.258522][ T5840] bcachefs (loop0): marking filesystem clean [ 97.266923][ T1209] dvb-usb: bulk message failed: -22 (5/0) [ 97.294268][ T1209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 97.320587][ T1209] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 97.330225][ T1209] usb 5-1: media controller created [ 97.339872][ T1209] dvb-usb: bulk message failed: -22 (8/0) [ 97.356569][ T1209] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 97.364725][ T1209] dvb-usb: MAC address reading failed. [ 97.376562][ T5840] bcachefs (loop0): shutdown complete [ 97.414368][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.65'. [ 97.421284][ T1209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.506006][ T1209] DVB: Unable to find symbol stb0899_attach() [ 97.523558][ T1209] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 97.769956][ T1209] rc_core: IR keymap rc-tt-1500 not found [ 97.795134][ T1209] Registered IR keymap rc-empty [ 97.819696][ T1209] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 97.840074][ T1209] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input5 [ 97.861455][ T1209] dvb-usb: schedule remote query interval to 100 msecs. [ 97.876889][ T1209] pctv452e: pctv452e_power_ctrl: 0 [ 97.876889][ T1209] [ 97.889340][ T1209] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 97.929570][ T1209] usb 5-1: USB disconnect, device number 4 [ 98.176932][ T1209] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 98.334053][ T6168] loop2: detected capacity change from 0 to 32768 [ 98.346690][ T6177] netlink: 56 bytes leftover after parsing attributes in process `syz.3.70'. [ 98.378784][ T6168] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.67 (6168) [ 98.420537][ T6168] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 98.448320][ T6168] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 98.457307][ T6168] BTRFS info (device loop2): using free-space-tree [ 98.604616][ T6184] netlink: 44 bytes leftover after parsing attributes in process `syz.3.71'. [ 98.701466][ T6168] BTRFS info (device loop2): rebuilding free space tree [ 98.812191][ T6199] loop3: detected capacity change from 0 to 256 [ 98.867225][ T6199] exfat: Deprecated parameter 'utf8' [ 98.872602][ T6199] exfat: Deprecated parameter 'namecase' [ 98.915198][ T6199] exfat: Deprecated parameter 'utf8' [ 99.037796][ T6199] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 99.136293][ T6199] exFAT-fs (loop3): start_clu is invalid cluster(0x0) [ 99.156064][ T30] audit: type=1800 audit(1744385911.217:3): pid=6199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.73" name="file1" dev="loop3" ino=6 res=0 errno=0 [ 99.258769][ T5835] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.297232][ T6173] loop1: detected capacity change from 0 to 40427 [ 99.334891][ T6173] F2FS-fs (loop1): build fault injection rate: 690 [ 99.343975][ T6173] F2FS-fs (loop1): build fault injection type: 0x2 [ 99.355733][ T6173] F2FS-fs (loop1): Image doesn't support compression [ 99.395373][ T6173] F2FS-fs (loop1): Image doesn't support compression [ 99.462734][ T6173] F2FS-fs (loop1): invalid crc value [ 99.468289][ T5942] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.637748][ T5942] usb 5-1: Using ep0 maxpacket: 8 [ 99.693182][ T5942] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 99.711924][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.730521][ T5942] usb 5-1: Product: syz [ 99.737597][ T5942] usb 5-1: Manufacturer: syz [ 99.755762][ T5942] usb 5-1: SerialNumber: syz [ 99.777583][ T6173] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.789415][ T5942] usb 5-1: config 0 descriptor?? [ 99.842411][ T5942] gspca_main: se401-2.14.0 probing 047d:5003 [ 99.951598][ T5830] syz-executor: attempt to access beyond end of device [ 99.951598][ T5830] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 99.989856][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 99.989883][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.989900][ T5830] Call Trace: [ 99.989908][ T5830] [ 99.989916][ T5830] dump_stack_lvl+0x241/0x360 [ 99.989948][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.989972][ T5830] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 99.989990][ T5830] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 99.990010][ T5830] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 99.990041][ T5830] f2fs_handle_critical_error+0x392/0x5a0 [ 99.990075][ T5830] f2fs_write_end_io+0x58f/0x7d0 [ 99.990102][ T5830] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 99.990125][ T5830] ? blkg_put+0x18f/0x250 [ 99.990143][ T5830] ? bio_endio+0x7e4/0x890 [ 99.990168][ T5830] ? bio_endio+0x82a/0x890 [ 99.990195][ T5830] __submit_merged_bio+0x2a9/0x710 [ 99.990228][ T5830] f2fs_submit_merged_write+0x1f9/0x2d0 [ 99.990258][ T5830] f2fs_sync_node_pages+0x1563/0x1700 [ 99.990306][ T5830] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 99.990330][ T5830] ? __lock_acquire+0xad5/0xd80 [ 99.990386][ T5830] ? __pfx_up_write+0x10/0x10 [ 99.990404][ T5830] ? iput+0x3be/0xa50 [ 99.990437][ T5830] f2fs_write_checkpoint+0xce9/0x1da0 [ 99.990483][ T5830] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 99.990561][ T5830] ? kill_f2fs_super+0x290/0x6d0 [ 99.990587][ T5830] kill_f2fs_super+0x2b8/0x6d0 [ 99.990613][ T5830] ? __pfx_kill_f2fs_super+0x10/0x10 [ 99.990639][ T5830] ? shrinker_free+0x2ca/0x3d0 [ 99.990661][ T5830] deactivate_locked_super+0xc4/0x130 [ 99.990682][ T5830] cleanup_mnt+0x422/0x4c0 [ 99.990700][ T5830] ? lockdep_hardirqs_on+0x9d/0x150 [ 99.990723][ T5830] task_work_run+0x251/0x310 [ 99.990754][ T5830] ? __pfx_task_work_run+0x10/0x10 [ 99.990781][ T5830] ? syscall_exit_to_user_mode+0xa3/0x340 [ 99.990801][ T5830] syscall_exit_to_user_mode+0x13f/0x340 [ 99.990824][ T5830] do_syscall_64+0x100/0x230 [ 99.990844][ T5830] ? clear_bhb_loop+0x45/0xa0 [ 99.990866][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.990881][ T5830] RIP: 0033:0x7f1f4158e497 [ 99.990903][ T5830] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 99.990916][ T5830] RSP: 002b:00007ffdbae6e1b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 99.990934][ T5830] RAX: 0000000000000000 RBX: 00007f1f4160e77c RCX: 00007f1f4158e497 [ 99.990945][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbae6e270 [ 99.990955][ T5830] RBP: 00007ffdbae6e270 R08: 0000000000000000 R09: 0000000000000000 [ 99.990965][ T5830] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdbae6f300 [ 99.990976][ T5830] R13: 00007f1f4160e77c R14: 000000000001861e R15: 00007ffdbae6f340 [ 99.991010][ T5830] [ 99.991018][ T5830] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 100.336366][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 100.336393][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.336402][ T5830] Call Trace: [ 100.336409][ T5830] [ 100.336416][ T5830] dump_stack_lvl+0x241/0x360 [ 100.336447][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.336470][ T5830] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 100.336491][ T5830] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 100.336509][ T5830] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 100.336537][ T5830] f2fs_handle_critical_error+0x392/0x5a0 [ 100.336568][ T5830] f2fs_write_end_io+0x58f/0x7d0 [ 100.336601][ T5830] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 100.336623][ T5830] ? blkg_put+0x18f/0x250 [ 100.336640][ T5830] ? bio_endio+0x7e4/0x890 [ 100.336664][ T5830] ? bio_endio+0x82a/0x890 [ 100.336689][ T5830] __submit_merged_bio+0x2a9/0x710 [ 100.336718][ T5830] f2fs_submit_merged_write+0x1f9/0x2d0 [ 100.336746][ T5830] f2fs_sync_node_pages+0x1563/0x1700 [ 100.336788][ T5830] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 100.336810][ T5830] ? __lock_acquire+0xad5/0xd80 [ 100.336856][ T5830] ? __pfx_up_write+0x10/0x10 [ 100.336874][ T5830] ? iput+0x3be/0xa50 [ 100.336905][ T5830] f2fs_write_checkpoint+0xce9/0x1da0 [ 100.336944][ T5830] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 100.337012][ T5830] ? kill_f2fs_super+0x290/0x6d0 [ 100.337034][ T5830] kill_f2fs_super+0x2b8/0x6d0 [ 100.337058][ T5830] ? __pfx_kill_f2fs_super+0x10/0x10 [ 100.337084][ T5830] ? shrinker_free+0x2ca/0x3d0 [ 100.337106][ T5830] deactivate_locked_super+0xc4/0x130 [ 100.337126][ T5830] cleanup_mnt+0x422/0x4c0 [ 100.337143][ T5830] ? lockdep_hardirqs_on+0x9d/0x150 [ 100.337165][ T5830] task_work_run+0x251/0x310 [ 100.337193][ T5830] ? __pfx_task_work_run+0x10/0x10 [ 100.337218][ T5830] ? syscall_exit_to_user_mode+0xa3/0x340 [ 100.337239][ T5830] syscall_exit_to_user_mode+0x13f/0x340 [ 100.337260][ T5830] do_syscall_64+0x100/0x230 [ 100.337279][ T5830] ? clear_bhb_loop+0x45/0xa0 [ 100.337298][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.337313][ T5830] RIP: 0033:0x7f1f4158e497 [ 100.337329][ T5830] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 100.337342][ T5830] RSP: 002b:00007ffdbae6e1b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 100.337360][ T5830] RAX: 0000000000000000 RBX: 00007f1f4160e77c RCX: 00007f1f4158e497 [ 100.337371][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbae6e270 [ 100.337381][ T5830] RBP: 00007ffdbae6e270 R08: 0000000000000000 R09: 0000000000000000 [ 100.337390][ T5830] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdbae6f300 [ 100.337401][ T5830] R13: 00007f1f4160e77c R14: 000000000001861e R15: 00007ffdbae6f340 [ 100.337430][ T5830] [ 100.337457][ T5830] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 100.629867][ T5942] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 100.688806][ T24] usb 5-1: USB disconnect, device number 5 [ 100.738154][ T6217] loop0: detected capacity change from 0 to 40427 [ 100.747702][ T6217] F2FS-fs (loop0): build fault injection rate: 694 [ 100.783318][ T6217] F2FS-fs (loop0): invalid crc value [ 100.978777][ T5153] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 100.987453][ T5153] Bluetooth: hci0: Injecting HCI hardware error event [ 100.996194][ T5153] Bluetooth: hci0: hardware error 0x00 [ 101.085821][ T6217] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.175074][ T1209] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.203272][ T5840] syz-executor: attempt to access beyond end of device [ 101.203272][ T5840] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 101.238018][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 101.238042][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.238052][ T5840] Call Trace: [ 101.238059][ T5840] [ 101.238065][ T5840] dump_stack_lvl+0x241/0x360 [ 101.238096][ T5840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.238118][ T5840] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 101.238136][ T5840] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 101.238154][ T5840] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 101.238184][ T5840] f2fs_handle_critical_error+0x392/0x5a0 [ 101.238214][ T5840] f2fs_write_end_io+0x58f/0x7d0 [ 101.238238][ T5840] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 101.238259][ T5840] ? bio_endio+0x7e4/0x890 [ 101.238283][ T5840] ? bio_endio+0x82a/0x890 [ 101.238308][ T5840] __submit_merged_bio+0x2a9/0x710 [ 101.238328][ T5840] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 101.238355][ T5840] f2fs_submit_merged_write_cond+0x29f/0x380 [ 101.238389][ T5840] f2fs_write_data_pages+0x2f99/0x3910 [ 101.238443][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.238529][ T5840] ? __lock_acquire+0xad5/0xd80 [ 101.238550][ T5840] ? do_raw_spin_lock+0x151/0x370 [ 101.238577][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 101.238599][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.238614][ T5840] do_writepages+0x38c/0x640 [ 101.238636][ T5840] ? __lock_acquire+0xad5/0xd80 [ 101.238654][ T5840] ? __pfx_do_writepages+0x10/0x10 [ 101.238672][ T5840] ? do_raw_spin_lock+0x151/0x370 [ 101.238704][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 101.238731][ T5840] filemap_fdatawrite+0x1f2/0x2a0 [ 101.238748][ T5840] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 101.238760][ T5840] ? mlock_drain_local+0x79/0x490 [ 101.238820][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 101.238848][ T5840] f2fs_sync_dirty_inodes+0x34f/0x860 [ 101.238880][ T5840] f2fs_write_checkpoint+0x857/0x1da0 [ 101.238916][ T5840] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 101.238973][ T5840] ? kfree+0x198/0x430 [ 101.238988][ T5840] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 101.239006][ T5840] ? kill_f2fs_super+0x290/0x6d0 [ 101.239027][ T5840] kill_f2fs_super+0x2b8/0x6d0 [ 101.239049][ T5840] ? __pfx_kill_f2fs_super+0x10/0x10 [ 101.239071][ T5840] ? shrinker_free+0x2ca/0x3d0 [ 101.239089][ T5840] deactivate_locked_super+0xc4/0x130 [ 101.239108][ T5840] cleanup_mnt+0x422/0x4c0 [ 101.239125][ T5840] ? lockdep_hardirqs_on+0x9d/0x150 [ 101.239147][ T5840] task_work_run+0x251/0x310 [ 101.239172][ T5840] ? __pfx_task_work_run+0x10/0x10 [ 101.239195][ T5840] ? syscall_exit_to_user_mode+0xa3/0x340 [ 101.239215][ T5840] syscall_exit_to_user_mode+0x13f/0x340 [ 101.239236][ T5840] do_syscall_64+0x100/0x230 [ 101.239255][ T5840] ? clear_bhb_loop+0x45/0xa0 [ 101.239274][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.239289][ T5840] RIP: 0033:0x7fe1c0d8e497 [ 101.239304][ T5840] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 101.239317][ T5840] RSP: 002b:00007ffd141a7e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 101.239334][ T5840] RAX: 0000000000000000 RBX: 00007fe1c0e0e77c RCX: 00007fe1c0d8e497 [ 101.239345][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd141a7f40 [ 101.239355][ T5840] RBP: 00007ffd141a7f40 R08: 0000000000000000 R09: 0000000000000000 [ 101.239364][ T5840] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd141a8fd0 [ 101.239374][ T5840] R13: 00007fe1c0e0e77c R14: 0000000000018b12 R15: 00007ffd141a9010 [ 101.239402][ T5840] [ 101.239410][ T5840] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.329883][ T6230] loop2: detected capacity change from 0 to 1024 [ 101.415555][ T1209] usb 4-1: Using ep0 maxpacket: 8 [ 101.423724][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 101.423747][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.423757][ T5840] Call Trace: [ 101.423763][ T5840] [ 101.423770][ T5840] dump_stack_lvl+0x241/0x360 [ 101.423800][ T5840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.423822][ T5840] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 101.423839][ T5840] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 101.423856][ T5840] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 101.423884][ T5840] f2fs_handle_critical_error+0x392/0x5a0 [ 101.423913][ T5840] f2fs_write_end_io+0x58f/0x7d0 [ 101.423936][ T5840] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 101.423955][ T5840] ? bio_endio+0x7e4/0x890 [ 101.423979][ T5840] ? bio_endio+0x82a/0x890 [ 101.424003][ T5840] __submit_merged_bio+0x2a9/0x710 [ 101.424021][ T5840] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 101.424047][ T5840] f2fs_submit_merged_write_cond+0x29f/0x380 [ 101.424078][ T5840] f2fs_write_data_pages+0x2f99/0x3910 [ 101.424129][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.424211][ T5840] ? __lock_acquire+0xad5/0xd80 [ 101.424232][ T5840] ? do_raw_spin_lock+0x151/0x370 [ 101.424259][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 101.424281][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.424298][ T5840] do_writepages+0x38c/0x640 [ 101.424318][ T5840] ? __lock_acquire+0xad5/0xd80 [ 101.424336][ T5840] ? __pfx_do_writepages+0x10/0x10 [ 101.424354][ T5840] ? do_raw_spin_lock+0x151/0x370 [ 101.424384][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 101.424411][ T5840] filemap_fdatawrite+0x1f2/0x2a0 [ 101.424430][ T5840] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 101.424444][ T5840] ? mlock_drain_local+0x79/0x490 [ 101.424507][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 101.424535][ T5840] f2fs_sync_dirty_inodes+0x34f/0x860 [ 101.424566][ T5840] f2fs_write_checkpoint+0x857/0x1da0 [ 101.424601][ T5840] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 101.424658][ T5840] ? kfree+0x198/0x430 [ 101.424673][ T5840] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 101.424691][ T5840] ? kill_f2fs_super+0x290/0x6d0 [ 101.424713][ T5840] kill_f2fs_super+0x2b8/0x6d0 [ 101.424735][ T5840] ? __pfx_kill_f2fs_super+0x10/0x10 [ 101.424759][ T5840] ? shrinker_free+0x2ca/0x3d0 [ 101.424779][ T5840] deactivate_locked_super+0xc4/0x130 [ 101.424797][ T5840] cleanup_mnt+0x422/0x4c0 [ 101.424814][ T5840] ? lockdep_hardirqs_on+0x9d/0x150 [ 101.424834][ T5840] task_work_run+0x251/0x310 [ 101.424861][ T5840] ? __pfx_task_work_run+0x10/0x10 [ 101.424885][ T5840] ? syscall_exit_to_user_mode+0xa3/0x340 [ 101.424905][ T5840] syscall_exit_to_user_mode+0x13f/0x340 [ 101.424926][ T5840] do_syscall_64+0x100/0x230 [ 101.424943][ T5840] ? clear_bhb_loop+0x45/0xa0 [ 101.424961][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.424980][ T5840] RIP: 0033:0x7fe1c0d8e497 [ 101.424995][ T5840] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 101.425008][ T5840] RSP: 002b:00007ffd141a7e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 101.425025][ T5840] RAX: 0000000000000000 RBX: 00007fe1c0e0e77c RCX: 00007fe1c0d8e497 [ 101.425035][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd141a7f40 [ 101.425045][ T5840] RBP: 00007ffd141a7f40 R08: 0000000000000000 R09: 0000000000000000 [ 101.425054][ T5840] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd141a8fd0 [ 101.425064][ T5840] R13: 00007fe1c0e0e77c R14: 0000000000018b12 R15: 00007ffd141a9010 [ 101.425091][ T5840] [ 101.431686][ T5840] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.489987][ T1209] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 101.571671][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 101.571694][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.571703][ T5840] Call Trace: [ 101.571710][ T5840] [ 101.571717][ T5840] dump_stack_lvl+0x241/0x360 [ 101.571746][ T5840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.571768][ T5840] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 101.571784][ T5840] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 101.571802][ T5840] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 101.571829][ T5840] f2fs_handle_critical_error+0x392/0x5a0 [ 101.571857][ T5840] f2fs_write_end_io+0x58f/0x7d0 [ 101.571880][ T5840] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 101.571900][ T5840] ? bio_endio+0x7e4/0x890 [ 101.571923][ T5840] ? bio_endio+0x82a/0x890 [ 101.571947][ T5840] __submit_merged_bio+0x2a9/0x710 [ 101.571965][ T5840] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 101.571991][ T5840] f2fs_submit_merged_write_cond+0x29f/0x380 [ 101.572023][ T5840] f2fs_write_data_pages+0x2f99/0x3910 [ 101.572074][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.572157][ T5840] ? __lock_acquire+0xad5/0xd80 [ 101.572177][ T5840] ? do_raw_spin_lock+0x151/0x370 [ 101.572205][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 101.572227][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.572245][ T5840] do_writepages+0x38c/0x640 [ 101.572265][ T5840] ? __lock_acquire+0xad5/0xd80 [ 101.572284][ T5840] ? __pfx_do_writepages+0x10/0x10 [ 101.572302][ T5840] ? do_raw_spin_lock+0x151/0x370 [ 101.572332][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 101.572359][ T5840] filemap_fdatawrite+0x1f2/0x2a0 [ 101.572380][ T5840] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 101.572394][ T5840] ? mlock_drain_local+0x79/0x490 [ 101.572452][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 101.572480][ T5840] f2fs_sync_dirty_inodes+0x34f/0x860 [ 101.572518][ T5840] f2fs_write_checkpoint+0x857/0x1da0 [ 101.572555][ T5840] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 101.572612][ T5840] ? kfree+0x198/0x430 [ 101.572629][ T5840] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 101.572648][ T5840] ? kill_f2fs_super+0x290/0x6d0 [ 101.572670][ T5840] kill_f2fs_super+0x2b8/0x6d0 [ 101.572694][ T5840] ? __pfx_kill_f2fs_super+0x10/0x10 [ 101.572719][ T5840] ? shrinker_free+0x2ca/0x3d0 [ 101.572741][ T5840] deactivate_locked_super+0xc4/0x130 [ 101.572761][ T5840] cleanup_mnt+0x422/0x4c0 [ 101.572778][ T5840] ? lockdep_hardirqs_on+0x9d/0x150 [ 101.572799][ T5840] task_work_run+0x251/0x310 [ 101.572826][ T5840] ? __pfx_task_work_run+0x10/0x10 [ 101.572851][ T5840] ? syscall_exit_to_user_mode+0xa3/0x340 [ 101.572871][ T5840] syscall_exit_to_user_mode+0x13f/0x340 [ 101.572893][ T5840] do_syscall_64+0x100/0x230 [ 101.572911][ T5840] ? clear_bhb_loop+0x45/0xa0 [ 101.572930][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.572945][ T5840] RIP: 0033:0x7fe1c0d8e497 [ 101.572960][ T5840] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 101.572973][ T5840] RSP: 002b:00007ffd141a7e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 101.572991][ T5840] RAX: 0000000000000000 RBX: 00007fe1c0e0e77c RCX: 00007fe1c0d8e497 [ 101.573002][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd141a7f40 [ 101.573012][ T5840] RBP: 00007ffd141a7f40 R08: 0000000000000000 R09: 0000000000000000 [ 101.573023][ T5840] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd141a8fd0 [ 101.573033][ T5840] R13: 00007fe1c0e0e77c R14: 0000000000018b12 R15: 00007ffd141a9010 [ 101.573061][ T5840] [ 101.573068][ T5840] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.592426][ T1209] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 102.226305][ T6237] loop4: detected capacity change from 0 to 32768 [ 102.234478][ T1209] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.252609][ T12] hfsplus: b-tree write err: -5, ino 4 [ 102.254015][ T1209] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.381694][ T6237] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.89 (6237) [ 102.398990][ T1209] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.415536][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.439137][ T6239] loop2: detected capacity change from 0 to 128 [ 102.509845][ T6237] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 102.553485][ T6237] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 102.577745][ T6239] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.591602][ T6237] BTRFS info (device loop4): using free-space-tree [ 102.666065][ T1209] usb 4-1: GET_CAPABILITIES returned 0 [ 102.671608][ T1209] usbtmc 4-1:16.0: can't read capabilities [ 102.700243][ T6239] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.836944][ T6265] Zero length message leads to an empty skb [ 102.929027][ T30] audit: type=1800 audit(1744385915.007:4): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.89" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 103.034511][ T6226] usb 4-1: usbtmc_ioctl_clear_in_halt returned -32 [ 103.045615][ T5153] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 103.056556][ T1209] usb 4-1: USB disconnect, device number 4 [ 103.093612][ T5834] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 103.095938][ T5835] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.857920][ T6278] syz.2.96 uses obsolete (PF_INET,SOCK_PACKET) [ 104.335659][ T24] IPVS: starting estimator thread 0... [ 104.342740][ T6291] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 104.351196][ T1209] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.465181][ T6293] IPVS: using max 32 ests per chain, 76800 per kthread [ 104.525175][ T1209] usb 5-1: Using ep0 maxpacket: 8 [ 104.572262][ T1209] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 104.597826][ T1209] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 104.621991][ T1209] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.653364][ T1209] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.715148][ T1209] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.744658][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.755362][ T6303] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.866230][ T6305] syz_tun: entered promiscuous mode [ 104.898456][ T6305] syz_tun: left promiscuous mode [ 104.988941][ T1209] usb 5-1: GET_CAPABILITIES returned 0 [ 104.994481][ T1209] usbtmc 5-1:16.0: can't read capabilities [ 105.013391][ T6289] loop1: detected capacity change from 0 to 40427 [ 105.041943][ T6289] F2FS-fs (loop1): build fault injection rate: 690 [ 105.075135][ T6289] F2FS-fs (loop1): heap/no_heap options were deprecated [ 105.118203][ T6289] F2FS-fs (loop1): invalid crc value [ 105.227503][ T24] usb 5-1: USB disconnect, device number 6 [ 105.275851][ T6295] loop2: detected capacity change from 0 to 40427 [ 105.292094][ T6295] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 105.305916][ T6289] F2FS-fs (loop1): Start checkpoint disabled! [ 105.316446][ T6295] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 105.343742][ T6289] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 105.404210][ T6289] syz.1.101: attempt to access beyond end of device [ 105.404210][ T6289] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.478150][ T30] audit: type=1804 audit(1744385917.557:5): pid=6322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.101" name="/newroot/23/file2/file1" dev="loop1" ino=10 res=1 errno=0 [ 105.562469][ T13] kworker/u8:1: attempt to access beyond end of device [ 105.562469][ T13] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 105.600797][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 105.600822][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.600833][ T13] Workqueue: writeback wb_workfn (flush-7:1) [ 105.600858][ T13] Call Trace: [ 105.600865][ T13] [ 105.600885][ T13] dump_stack_lvl+0x241/0x360 [ 105.600914][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.600937][ T13] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 105.600954][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 105.600973][ T13] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 105.601004][ T13] f2fs_handle_critical_error+0x392/0x5a0 [ 105.601035][ T13] f2fs_write_end_io+0x58f/0x7d0 [ 105.601061][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 105.601083][ T13] ? blkg_put+0x18f/0x250 [ 105.601101][ T13] ? bio_endio+0x7e4/0x890 [ 105.601134][ T13] ? bio_endio+0x82a/0x890 [ 105.601159][ T13] __submit_merged_bio+0x2a9/0x710 [ 105.601190][ T13] f2fs_submit_merged_write+0x1f9/0x2d0 [ 105.601220][ T13] f2fs_sync_node_pages+0x1563/0x1700 [ 105.601267][ T13] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 105.601338][ T13] ? rcu_is_watching+0x15/0xb0 [ 105.601356][ T13] ? blk_start_plug+0x53/0x1b0 [ 105.601376][ T13] f2fs_write_node_pages+0x310/0x730 [ 105.601405][ T13] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 105.601442][ T13] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 105.601466][ T13] do_writepages+0x38c/0x640 [ 105.601486][ T13] ? __lock_acquire+0xad5/0xd80 [ 105.601509][ T13] ? __pfx_do_writepages+0x10/0x10 [ 105.601528][ T13] ? __lock_acquire+0xad5/0xd80 [ 105.601555][ T13] ? reacquire_held_locks+0x12a/0x1e0 [ 105.601572][ T13] ? writeback_sb_inodes+0x43f/0x1360 [ 105.601608][ T13] __writeback_single_inode+0x14f/0x10d0 [ 105.601637][ T13] writeback_sb_inodes+0x822/0x1360 [ 105.601698][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 105.601766][ T13] ? rcu_is_watching+0x15/0xb0 [ 105.601785][ T13] ? queue_io+0x310/0x4d0 [ 105.601815][ T13] wb_writeback+0x415/0xb90 [ 105.601843][ T13] ? queue_io+0x271/0x4d0 [ 105.601865][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 105.601906][ T13] wb_workfn+0x412/0x10b0 [ 105.601961][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 105.601976][ T13] ? register_lock_class+0x54/0x330 [ 105.602006][ T13] ? __lock_acquire+0xad5/0xd80 [ 105.602024][ T13] ? lockdep_hardirqs_on+0x9d/0x150 [ 105.602066][ T13] ? process_scheduled_works+0x9cb/0x18e0 [ 105.602081][ T13] process_scheduled_works+0xac3/0x18e0 [ 105.602141][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 105.602171][ T13] ? assign_work+0x367/0x3d0 [ 105.602194][ T13] worker_thread+0x870/0xd50 [ 105.602232][ T13] ? __kthread_parkme+0x1a8/0x200 [ 105.602256][ T13] ? __pfx_worker_thread+0x10/0x10 [ 105.602273][ T13] kthread+0x7b7/0x940 [ 105.602295][ T13] ? __pfx_worker_thread+0x10/0x10 [ 105.602314][ T13] ? __pfx_kthread+0x10/0x10 [ 105.602330][ T13] ? __pfx_kthread+0x10/0x10 [ 105.602348][ T13] ? __pfx_kthread+0x10/0x10 [ 105.602366][ T13] ? __pfx_kthread+0x10/0x10 [ 105.602384][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.602398][ T13] ? lockdep_hardirqs_on+0x9d/0x150 [ 105.602415][ T13] ? __pfx_kthread+0x10/0x10 [ 105.602435][ T13] ret_from_fork+0x4b/0x80 [ 105.602450][ T13] ? __pfx_kthread+0x10/0x10 [ 105.602469][ T13] ret_from_fork_asm+0x1a/0x30 [ 105.602505][ T13] [ 105.645996][ T6329] random: crng reseeded on system resumption [ 105.649750][ T13] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 105.676560][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 105.676582][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 105.676592][ T13] Workqueue: writeback wb_workfn (flush-7:1) [ 105.676616][ T13] Call Trace: [ 105.676622][ T13] [ 105.676629][ T13] dump_stack_lvl+0x241/0x360 [ 105.676655][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.676677][ T13] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 105.676693][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 105.676710][ T13] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 105.676746][ T13] f2fs_handle_critical_error+0x392/0x5a0 [ 105.676774][ T13] f2fs_write_end_io+0x58f/0x7d0 [ 105.676804][ T13] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 105.676825][ T13] ? blkg_put+0x18f/0x250 [ 105.676842][ T13] ? bio_endio+0x7e4/0x890 [ 105.676864][ T13] ? bio_endio+0x82a/0x890 [ 105.676888][ T13] __submit_merged_bio+0x2a9/0x710 [ 105.676915][ T13] f2fs_submit_merged_write+0x1f9/0x2d0 [ 105.676941][ T13] f2fs_sync_node_pages+0x1563/0x1700 [ 105.676980][ T13] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 105.677038][ T13] ? rcu_is_watching+0x15/0xb0 [ 105.677055][ T13] ? blk_start_plug+0x53/0x1b0 [ 105.677074][ T13] f2fs_write_node_pages+0x310/0x730 [ 105.677106][ T13] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 105.677138][ T13] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 105.677160][ T13] do_writepages+0x38c/0x640 [ 105.677181][ T13] ? __lock_acquire+0xad5/0xd80 [ 105.677204][ T13] ? __pfx_do_writepages+0x10/0x10 [ 105.677223][ T13] ? __lock_acquire+0xad5/0xd80 [ 105.677246][ T13] ? reacquire_held_locks+0x12a/0x1e0 [ 105.677262][ T13] ? writeback_sb_inodes+0x43f/0x1360 [ 105.677289][ T13] __writeback_single_inode+0x14f/0x10d0 [ 105.677315][ T13] writeback_sb_inodes+0x822/0x1360 [ 105.677364][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 105.677418][ T13] ? rcu_is_watching+0x15/0xb0 [ 105.677436][ T13] ? queue_io+0x310/0x4d0 [ 105.677462][ T13] wb_writeback+0x415/0xb90 [ 105.677486][ T13] ? queue_io+0x271/0x4d0 [ 105.677505][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 105.677540][ T13] wb_workfn+0x412/0x10b0 [ 105.677577][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 105.677590][ T13] ? register_lock_class+0x54/0x330 [ 105.677617][ T13] ? __lock_acquire+0xad5/0xd80 [ 105.677634][ T13] ? lockdep_hardirqs_on+0x9d/0x150 [ 105.677669][ T13] ? process_scheduled_works+0x9cb/0x18e0 [ 105.677684][ T13] process_scheduled_works+0xac3/0x18e0 [ 105.677728][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 105.677753][ T13] ? assign_work+0x367/0x3d0 [ 105.677773][ T13] worker_thread+0x870/0xd50 [ 105.677804][ T13] ? __kthread_parkme+0x1a8/0x200 [ 105.677824][ T13] ? __pfx_worker_thread+0x10/0x10 [ 105.677841][ T13] kthread+0x7b7/0x940 [ 105.677861][ T13] ? __pfx_worker_thread+0x10/0x10 [ 105.677878][ T13] ? __pfx_kthread+0x10/0x10 [ 105.677893][ T13] ? __pfx_kthread+0x10/0x10 [ 105.677910][ T13] ? __pfx_kthread+0x10/0x10 [ 105.677927][ T13] ? __pfx_kthread+0x10/0x10 [ 105.677945][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.677958][ T13] ? lockdep_hardirqs_on+0x9d/0x150 [ 105.677973][ T13] ? __pfx_kthread+0x10/0x10 [ 105.677992][ T13] ret_from_fork+0x4b/0x80 [ 105.678006][ T13] ? __pfx_kthread+0x10/0x10 [ 105.678024][ T13] ret_from_fork_asm+0x1a/0x30 [ 105.678054][ T13] [ 105.678061][ T13] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 105.807378][ T6295] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 105.941848][ T6295] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 106.005150][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.375154][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 106.382512][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.382540][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.382562][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.382582][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.382619][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.382640][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.599010][ T24] usb 4-1: usb_control_msg returned -32 [ 106.604840][ T24] usbtmc 4-1:16.0: can't read capabilities [ 106.728391][ T6335] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 106.745265][ T6337] IPVS: stopping backup sync thread 6338 ... [ 106.761605][ T6338] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 107.164051][ T6352] syzkaller1: entered promiscuous mode [ 107.189825][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 107.192881][ T6352] syzkaller1: entered allmulticast mode [ 107.385087][ T6363] syzkaller1: entered promiscuous mode [ 107.390792][ T6363] syzkaller1: entered allmulticast mode [ 107.584444][ T6368] loop4: detected capacity change from 0 to 512 [ 107.629388][ T6368] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 107.666444][ T6368] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 107.711042][ T6370] loop0: detected capacity change from 0 to 512 [ 107.722131][ T6372] input: syz1 as /devices/virtual/input/input8 [ 107.730415][ T6372] input: failed to attach handler leds to device input8, error: -6 [ 107.756337][ T6370] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.768308][ T6368] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 107.789863][ T6370] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 107.800255][ T6368] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #11: comm syz.4.131: corrupted inode contents [ 107.833044][ T6370] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 107.836554][ T6368] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #11: comm syz.4.131: mark_inode_dirty error [ 107.861123][ T6368] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.131: invalid indirect mapped block 1 (level 1) [ 107.887835][ T6354] loop1: detected capacity change from 0 to 40427 [ 107.899541][ T6354] F2FS-fs (loop1): build fault injection type: 0x7 [ 107.910355][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 107.922473][ T6368] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #11: comm syz.4.131: corrupted inode contents [ 107.963105][ T6354] F2FS-fs (loop1): invalid crc value [ 107.991693][ T6368] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 108.013502][ T6368] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #11: comm syz.4.131: corrupted inode contents [ 108.048083][ T6368] EXT4-fs error (device loop4): ext4_truncate:4254: inode #11: comm syz.4.131: mark_inode_dirty error [ 108.081328][ T6368] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 108.122275][ T6368] EXT4-fs (loop4): 1 truncate cleaned up [ 108.136260][ T6354] F2FS-fs (loop1): Start checkpoint disabled! [ 108.144633][ T6368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.164963][ T6354] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 108.292450][ T3492] kworker/u8:8: attempt to access beyond end of device [ 108.292450][ T3492] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.334934][ T5834] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 108.350396][ T3492] CPU: 1 UID: 0 PID: 3492 Comm: kworker/u8:8 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 108.350422][ T3492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.350432][ T3492] Workqueue: writeback wb_workfn (flush-7:1) [ 108.350458][ T3492] Call Trace: [ 108.350465][ T3492] [ 108.350472][ T3492] dump_stack_lvl+0x241/0x360 [ 108.350500][ T3492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.350522][ T3492] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 108.350539][ T3492] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 108.350558][ T3492] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 108.350588][ T3492] f2fs_handle_critical_error+0x392/0x5a0 [ 108.350620][ T3492] f2fs_write_end_io+0x58f/0x7d0 [ 108.350645][ T3492] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 108.350667][ T3492] ? bio_endio+0x7e4/0x890 [ 108.350691][ T3492] ? bio_endio+0x82a/0x890 [ 108.350717][ T3492] __submit_merged_bio+0x2a9/0x710 [ 108.350754][ T3492] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 108.350783][ T3492] f2fs_submit_merged_write_cond+0x29f/0x380 [ 108.350817][ T3492] f2fs_write_data_pages+0x2f99/0x3910 [ 108.350872][ T3492] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.350902][ T3492] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 108.350920][ T3492] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 108.350976][ T3492] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 108.351014][ T3492] ? trace_f2fs_writepages+0x8c/0x220 [ 108.351039][ T3492] ? f2fs_write_node_pages+0x4ba/0x730 [ 108.351067][ T3492] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 108.351102][ T3492] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.351121][ T3492] do_writepages+0x38c/0x640 [ 108.351148][ T3492] ? __lock_acquire+0xad5/0xd80 [ 108.351170][ T3492] ? __pfx_do_writepages+0x10/0x10 [ 108.351190][ T3492] ? __lock_acquire+0xad5/0xd80 [ 108.351215][ T3492] ? reacquire_held_locks+0x12a/0x1e0 [ 108.351233][ T3492] ? writeback_sb_inodes+0x43f/0x1360 [ 108.351267][ T3492] __writeback_single_inode+0x14f/0x10d0 [ 108.351295][ T3492] writeback_sb_inodes+0x822/0x1360 [ 108.351349][ T3492] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 108.351409][ T3492] ? rcu_is_watching+0x15/0xb0 [ 108.351429][ T3492] ? queue_io+0x310/0x4d0 [ 108.351456][ T3492] wb_writeback+0x415/0xb90 [ 108.351483][ T3492] ? queue_io+0x271/0x4d0 [ 108.351504][ T3492] ? __pfx_wb_writeback+0x10/0x10 [ 108.351542][ T3492] wb_workfn+0x412/0x10b0 [ 108.351583][ T3492] ? __pfx_wb_workfn+0x10/0x10 [ 108.351598][ T3492] ? register_lock_class+0x54/0x330 [ 108.351627][ T3492] ? __lock_acquire+0xad5/0xd80 [ 108.351668][ T3492] ? process_scheduled_works+0x9cb/0x18e0 [ 108.351685][ T3492] process_scheduled_works+0xac3/0x18e0 [ 108.351733][ T3492] ? __pfx_process_scheduled_works+0x10/0x10 [ 108.351761][ T3492] ? assign_work+0x367/0x3d0 [ 108.351784][ T3492] worker_thread+0x870/0xd50 [ 108.351818][ T3492] ? __kthread_parkme+0x1a8/0x200 [ 108.351840][ T3492] ? __pfx_worker_thread+0x10/0x10 [ 108.351857][ T3492] kthread+0x7b7/0x940 [ 108.351879][ T3492] ? __pfx_worker_thread+0x10/0x10 [ 108.351897][ T3492] ? __pfx_kthread+0x10/0x10 [ 108.351914][ T3492] ? __pfx_kthread+0x10/0x10 [ 108.351933][ T3492] ? __pfx_kthread+0x10/0x10 [ 108.351952][ T3492] ? __pfx_kthread+0x10/0x10 [ 108.351971][ T3492] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.351985][ T3492] ? lockdep_hardirqs_on+0x9d/0x150 [ 108.352003][ T3492] ? __pfx_kthread+0x10/0x10 [ 108.352023][ T3492] ret_from_fork+0x4b/0x80 [ 108.352038][ T3492] ? __pfx_kthread+0x10/0x10 [ 108.352058][ T3492] ret_from_fork_asm+0x1a/0x30 [ 108.352092][ T3492] [ 108.352671][ T3492] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 108.437460][ T5834] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 108.700969][ T5913] usb 4-1: USB disconnect, device number 5 [ 108.793242][ T5834] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 108.831800][ T5834] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 108.902798][ T5834] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 108.988882][ T5834] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 109.063424][ T5834] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 109.120360][ T5834] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 109.169199][ T5834] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 109.226186][ T5834] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 109.267965][ T6380] loop0: detected capacity change from 0 to 40427 [ 109.285271][ T6380] F2FS-fs (loop0): build fault injection rate: 690 [ 109.306529][ T6380] F2FS-fs (loop0): Image doesn't support compression [ 109.313292][ T6380] F2FS-fs (loop0): Image doesn't support compression [ 109.354525][ T6380] F2FS-fs (loop0): invalid crc value [ 109.634418][ T6380] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.854863][ T5840] syz-executor: attempt to access beyond end of device [ 109.854863][ T5840] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.895192][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 109.895209][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.895215][ T5840] Call Trace: [ 109.895219][ T5840] [ 109.895223][ T5840] dump_stack_lvl+0x241/0x360 [ 109.895244][ T5840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.895258][ T5840] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 109.895268][ T5840] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 109.895278][ T5840] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 109.895297][ T5840] f2fs_handle_critical_error+0x392/0x5a0 [ 109.895314][ T5840] f2fs_write_end_io+0x58f/0x7d0 [ 109.895328][ T5840] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 109.895340][ T5840] ? bio_endio+0x7e4/0x890 [ 109.895355][ T5840] ? bio_endio+0x82a/0x890 [ 109.895370][ T5840] __submit_merged_bio+0x2a9/0x710 [ 109.895382][ T5840] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 109.895398][ T5840] f2fs_submit_merged_write_cond+0x29f/0x380 [ 109.895416][ T5840] f2fs_write_data_pages+0x2f99/0x3910 [ 109.895425][ T5840] ? __lock_acquire+0xad5/0xd80 [ 109.895454][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 109.895501][ T5840] ? __lock_acquire+0xad5/0xd80 [ 109.895512][ T5840] ? do_raw_spin_lock+0x151/0x370 [ 109.895528][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 109.895542][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 109.895552][ T5840] do_writepages+0x38c/0x640 [ 109.895566][ T5840] ? __lock_acquire+0xad5/0xd80 [ 109.895577][ T5840] ? __pfx_do_writepages+0x10/0x10 [ 109.895589][ T5840] ? do_raw_spin_lock+0x151/0x370 [ 109.895607][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 109.895624][ T5840] filemap_fdatawrite+0x1f2/0x2a0 [ 109.895635][ T5840] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 109.895643][ T5840] ? mlock_drain_local+0x79/0x490 [ 109.895676][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 109.895693][ T5840] f2fs_sync_dirty_inodes+0x34f/0x860 [ 109.895711][ T5840] f2fs_write_checkpoint+0x857/0x1da0 [ 109.895731][ T5840] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 109.895776][ T5840] ? kill_f2fs_super+0x290/0x6d0 [ 109.895789][ T5840] kill_f2fs_super+0x2b8/0x6d0 [ 109.895803][ T5840] ? __pfx_kill_f2fs_super+0x10/0x10 [ 109.895817][ T5840] ? shrinker_free+0x2ca/0x3d0 [ 109.895830][ T5840] deactivate_locked_super+0xc4/0x130 [ 109.895841][ T5840] cleanup_mnt+0x422/0x4c0 [ 109.895852][ T5840] ? lockdep_hardirqs_on+0x9d/0x150 [ 109.895864][ T5840] task_work_run+0x251/0x310 [ 109.895880][ T5840] ? __pfx_task_work_run+0x10/0x10 [ 109.895895][ T5840] ? syscall_exit_to_user_mode+0xa3/0x340 [ 109.895907][ T5840] syscall_exit_to_user_mode+0x13f/0x340 [ 109.895920][ T5840] do_syscall_64+0x100/0x230 [ 109.895931][ T5840] ? clear_bhb_loop+0x45/0xa0 [ 109.895943][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.895952][ T5840] RIP: 0033:0x7fe1c0d8e497 [ 109.895962][ T5840] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 109.895970][ T5840] RSP: 002b:00007ffd141a7e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 109.895981][ T5840] RAX: 0000000000000000 RBX: 00007fe1c0e0e77c RCX: 00007fe1c0d8e497 [ 109.895987][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd141a7f40 [ 109.895993][ T5840] RBP: 00007ffd141a7f40 R08: 0000000000000000 R09: 0000000000000000 [ 109.895998][ T5840] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd141a8fd0 [ 109.896006][ T5840] R13: 00007fe1c0e0e77c R14: 000000000001acd0 R15: 00007ffd141a9010 [ 109.896031][ T5840] [ 109.896038][ T5840] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 110.135076][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.307059][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.453940][ T6416] loop3: detected capacity change from 0 to 256 [ 110.515529][ T6416] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.557364][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.572151][ T6416] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 110.585486][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 110.601617][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.611807][ T24] usb 2-1: config 4 has an invalid interface number: 248 but max is 0 [ 110.629461][ T24] usb 2-1: config 4 has no interface number 0 [ 110.647888][ T24] usb 2-1: config 4 interface 248 has no altsetting 0 [ 110.666374][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.669544][ T24] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=c4.4a [ 110.706246][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.723416][ T24] usb 2-1: Product: syz [ 110.729327][ T24] usb 2-1: Manufacturer: syz [ 110.733943][ T24] usb 2-1: SerialNumber: syz [ 110.789566][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.975314][ T6420] loop2: detected capacity change from 0 to 1024 [ 110.984149][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.008484][ T24] snd-usb-audio 2-1:4.248: probe with driver snd-usb-audio failed with error -71 [ 111.062494][ T24] usb 2-1: USB disconnect, device number 3 [ 111.085341][ T30] audit: type=1800 audit(1744385923.157:6): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.152" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 111.448141][ T13] bridge_slave_1: left allmulticast mode [ 111.474771][ T13] bridge_slave_1: left promiscuous mode [ 111.501883][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.606039][ T13] bridge_slave_0: left allmulticast mode [ 111.611728][ T13] bridge_slave_0: left promiscuous mode [ 111.648556][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.844776][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.861901][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.873570][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.884234][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.891957][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.961610][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.119750][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 112.171004][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 112.184670][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.229259][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 112.240816][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.275612][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.315206][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.369542][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 112.389858][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.401633][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.428368][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.435087][ T5913] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 112.449452][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.453451][ T6459] loop2: detected capacity change from 0 to 4096 [ 112.464426][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 112.492984][ T6459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.508593][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.546783][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.586883][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.598476][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.600748][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.627423][ T9] usb 1-1: string descriptor 0 read error: -22 [ 112.637113][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 112.638733][ T5913] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 112.649456][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.663763][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.683505][ T5913] usb 4-1: config 0 descriptor?? [ 112.697522][ T5913] cp210x 4-1:0.0: cp210x converter detected [ 112.699640][ T9] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 112.852612][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.867217][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.879832][ T13] bond0 (unregistering): Released all slaves [ 113.044172][ T9] usb 1-1: USB disconnect, device number 4 [ 113.096217][ T6469] loop1: detected capacity change from 0 to 64 [ 113.136913][ T5913] usb 4-1: cp210x converter now attached to ttyUSB0 [ 113.251005][ T6438] adutux: No device or device unplugged -19 [ 113.319347][ T24] usb 4-1: USB disconnect, device number 6 [ 113.360148][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 113.427179][ T24] cp210x 4-1:0.0: device disconnected [ 113.679151][ T6483] fuse: Bad value for 'fd' [ 113.697974][ T13] hsr_slave_0: left promiscuous mode [ 113.709579][ T13] hsr_slave_1: left promiscuous mode [ 113.717557][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.727296][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.758518][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.769299][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.801452][ T13] veth1_macvtap: left promiscuous mode [ 113.810630][ T13] veth0_macvtap: left promiscuous mode [ 113.816654][ T13] veth1_vlan: left promiscuous mode [ 113.822609][ T13] veth0_vlan: left promiscuous mode [ 113.862954][ T6467] loop2: detected capacity change from 0 to 32768 [ 113.899320][ T6467] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.162 (6467) [ 113.927404][ T5837] Bluetooth: hci1: command tx timeout [ 113.973874][ T6467] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.984244][ T6467] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 114.130893][ T6467] BTRFS info (device loop2): rebuilding free space tree [ 114.167759][ T6467] BTRFS info (device loop2): disabling free space tree [ 114.176633][ T6467] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.191829][ T6467] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.367706][ T6466] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.374588][ T6466] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.450965][ T6466] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.468130][ T6466] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.474282][ T6466] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.485576][ T6466] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.498847][ T6466] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.504841][ T6466] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 114.561644][ T13] team0 (unregistering): Port device team_slave_1 removed [ 114.625745][ T6466] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 114.633659][ T13] team0 (unregistering): Port device team_slave_0 removed [ 114.634920][ T6466] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.649192][ T6466] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.667464][ T6466] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.710185][ T5835] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 114.859386][ T30] audit: type=1326 audit(1744385926.937:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.1.169" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f4158d169 code=0x0 [ 115.125197][ T5153] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.586985][ T6519] loop0: detected capacity change from 0 to 256 [ 115.752674][ T6534] loop1: detected capacity change from 0 to 256 [ 115.868277][ T6534] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 115.942993][ T6439] chnl_net:caif_netlink_parms(): no params data found [ 116.012690][ T30] audit: type=1800 audit(1744385928.087:8): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.175" name="file2" dev="loop1" ino=9 res=0 errno=0 [ 116.040183][ T30] audit: type=1800 audit(1744385928.087:9): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.175" name="file2" dev="loop1" ino=9 res=0 errno=0 [ 116.247731][ T6553] syzkaller1: entered promiscuous mode [ 116.253243][ T6553] syzkaller1: entered allmulticast mode [ 116.446114][ T6439] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.460290][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.474047][ T6560] loop2: detected capacity change from 0 to 1024 [ 116.480838][ T6439] bridge_slave_0: entered allmulticast mode [ 116.487117][ T5153] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.496859][ T6439] bridge_slave_0: entered promiscuous mode [ 116.535063][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 116.552729][ T6439] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.565532][ T5153] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.587075][ T6560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.601509][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.615852][ T6439] bridge_slave_1: entered allmulticast mode [ 116.632008][ T6439] bridge_slave_1: entered promiscuous mode [ 116.645438][ T5153] Bluetooth: hci1: command 0x040f tx timeout [ 116.652266][ T6565] netlink: 160 bytes leftover after parsing attributes in process `syz.0.183'. [ 116.668668][ T6565] netlink: 160 bytes leftover after parsing attributes in process `syz.0.183'. [ 116.680228][ T6560] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 116.735754][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 116.747825][ T6560] EXT4-fs (loop2): Remounting filesystem read-only [ 116.752883][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.797474][ T6439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.826749][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.828200][ T6439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.869495][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.894504][ T6569] xt_hashlimit: overflow, rate too high: 0 [ 116.908029][ T6439] team0: Port device team_slave_0 added [ 116.921919][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.927162][ T6439] team0: Port device team_slave_1 added [ 116.962273][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.023767][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.085774][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.111661][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.127256][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.207681][ T5153] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.220325][ T6439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.240990][ T6439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.249076][ T6439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.277430][ T6439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.379111][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 117.384722][ T9] usbtmc 4-1:16.0: can't read capabilities [ 117.516387][ T6439] hsr_slave_0: entered promiscuous mode [ 117.541921][ T6439] hsr_slave_1: entered promiscuous mode [ 117.565923][ T6439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.573702][ T6439] Cannot create hsr debugfs directory [ 117.581348][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 117.603265][ T5913] usb 4-1: USB disconnect, device number 7 [ 118.186607][ T6439] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.274810][ T6439] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.282661][ T6576] loop2: detected capacity change from 0 to 40427 [ 118.316923][ T6576] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 118.317467][ T6598] could not open pipe file descriptor [ 118.324667][ T6576] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 118.348223][ T6439] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.466029][ T6439] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 118.567454][ T5153] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.645235][ T5153] Bluetooth: hci4: command 0x0c1a tx timeout [ 118.663921][ T6576] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 118.689523][ T6439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.720006][ T6576] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.725287][ T5153] Bluetooth: hci1: command 0x040f tx timeout [ 118.755692][ T6439] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.809267][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.816493][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.883348][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.891122][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.285296][ T5153] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.509262][ T6439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.593633][ T6607] loop0: detected capacity change from 0 to 32768 [ 119.773934][ T6607] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 119.799086][ T6607] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 119.815750][ T6607] bcachefs (loop0): Version upgrade required: [ 119.815750][ T6607] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 119.815750][ T6607] Doing incompatible version upgrade from 0.8: (unknown version) to 1.25: extent_flags [ 119.815750][ T6607] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 119.897078][ T6614] loop1: detected capacity change from 0 to 32768 [ 119.905704][ T6607] bcachefs (loop0): dropping and reconstructing all alloc info [ 119.983549][ T6614] bcachefs (loop1): filesystem UUID already open [ 120.045380][ T6614] bcachefs (loop1): shutdown complete [ 120.092170][ T6614] bcachefs: bch2_fs_get_tree() error: EINVAL [ 120.121490][ T6607] bcachefs (loop0): accounting_read... done [ 120.137169][ T6607] bcachefs (loop0): alloc_read... done [ 120.155153][ T6607] bcachefs (loop0): snapshots_read... done [ 120.195140][ T5942] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.213329][ T6607] bcachefs (loop0): done starting filesystem [ 120.311151][ T6607] bcachefs (loop0): bch2_fsync(): error EIO [ 120.357229][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 120.364100][ T5840] bcachefs (loop0): shutting down [ 120.379456][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.412478][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.442820][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.476959][ T5942] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.519587][ T6439] veth0_vlan: entered promiscuous mode [ 120.527513][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.547465][ T5840] bcachefs (loop0): shutdown complete [ 120.550874][ T6439] veth1_vlan: entered promiscuous mode [ 120.563502][ T5942] usb 3-1: config 0 descriptor?? [ 120.646679][ T5153] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.663081][ T6439] veth0_macvtap: entered promiscuous mode [ 120.678460][ T6439] veth1_macvtap: entered promiscuous mode [ 120.700632][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.721403][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.732388][ T5153] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.739182][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.755090][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.764935][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.777680][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.788073][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.799049][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.809818][ T5153] Bluetooth: hci1: command 0x040f tx timeout [ 120.819397][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.826066][ T124] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 120.831498][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.845130][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.856310][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.868592][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.879280][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.890499][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.900866][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.921556][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.949839][ T6439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.992016][ T5942] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 121.014505][ T6439] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.043667][ T6439] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.044772][ T5942] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input9 [ 121.053839][ T6439] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.079122][ T6439] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.088595][ T124] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.102319][ T124] usb 4-1: config 0 has no interface number 0 [ 121.134778][ T124] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 121.151122][ T5942] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 121.153927][ T124] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 121.189816][ T124] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 121.212044][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.233398][ T24] usb 3-1: USB disconnect, device number 4 [ 121.289892][ T124] usb 4-1: config 0 descriptor?? [ 121.336556][ T6645] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 121.386406][ T124] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 121.402715][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.417036][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.511837][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.525927][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.702497][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 121.721512][ T9] usb 4-1: USB disconnect, device number 8 [ 121.844393][ T6670] loop5: detected capacity change from 0 to 256 [ 121.914382][ T6670] FAT-fs (loop5): Directory bread(block 64) failed [ 121.943404][ T6670] FAT-fs (loop5): Directory bread(block 65) failed [ 121.965166][ T6670] FAT-fs (loop5): Directory bread(block 66) failed [ 121.971732][ T6670] FAT-fs (loop5): Directory bread(block 67) failed [ 121.979602][ T6675] loop2: detected capacity change from 0 to 2048 [ 121.990232][ T6670] FAT-fs (loop5): Directory bread(block 68) failed [ 122.005889][ T6670] FAT-fs (loop5): Directory bread(block 69) failed [ 122.022771][ T6670] FAT-fs (loop5): Directory bread(block 70) failed [ 122.053193][ T6670] FAT-fs (loop5): Directory bread(block 71) failed [ 122.055141][ T6675] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.082631][ T6670] FAT-fs (loop5): Directory bread(block 72) failed [ 122.099509][ T6670] FAT-fs (loop5): Directory bread(block 73) failed [ 122.307708][ T6683] netlink: 16 bytes leftover after parsing attributes in process `syz.2.202'. [ 122.549544][ T6665] loop1: detected capacity change from 0 to 40427 [ 122.578996][ T6665] F2FS-fs (loop1): build fault injection rate: 690 [ 122.596436][ T6665] F2FS-fs (loop1): Image doesn't support compression [ 122.603204][ T6665] F2FS-fs (loop1): Image doesn't support compression [ 122.630316][ T6665] F2FS-fs (loop1): invalid crc value [ 122.691091][ T6696] xt_hashlimit: overflow, rate too high: 0 [ 122.885546][ T5153] Bluetooth: hci1: command 0x040f tx timeout [ 122.999644][ T6665] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.065723][ T6665] syz.1.200: attempt to access beyond end of device [ 123.065723][ T6665] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 123.099181][ T6703] loop5: detected capacity change from 0 to 4096 [ 123.114744][ T6703] EXT4-fs: inline encryption not supported [ 123.175250][ T6703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.197979][ T6703] EXT4-fs (loop5): shut down requested (2) [ 123.212882][ T6703] EXT4-fs warning (device loop5): ext4_empty_dir:3097: inode #12: comm syz.5.206: directory missing '..' [ 123.324849][ T5830] syz-executor: attempt to access beyond end of device [ 123.324849][ T5830] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 123.380519][ T6439] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.383689][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 123.383712][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.383722][ T5830] Call Trace: [ 123.383729][ T5830] [ 123.383736][ T5830] dump_stack_lvl+0x241/0x360 [ 123.383770][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.383792][ T5830] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 123.383808][ T5830] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 123.383824][ T5830] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 123.383853][ T5830] f2fs_handle_critical_error+0x392/0x5a0 [ 123.383882][ T5830] f2fs_write_end_io+0x58f/0x7d0 [ 123.383905][ T5830] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 123.383926][ T5830] ? bio_endio+0x7e4/0x890 [ 123.383950][ T5830] ? bio_endio+0x82a/0x890 [ 123.383974][ T5830] __submit_merged_bio+0x2a9/0x710 [ 123.383992][ T5830] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 123.384019][ T5830] f2fs_submit_merged_write_cond+0x29f/0x380 [ 123.384051][ T5830] f2fs_write_data_pages+0x2f99/0x3910 [ 123.384065][ T5830] ? __lock_acquire+0xad5/0xd80 [ 123.384115][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 123.384205][ T5830] ? lockdep_hardirqs_on+0x9d/0x150 [ 123.384223][ T5830] ? __pfx_folios_put_refs+0x10/0x10 [ 123.384240][ T5830] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 123.384267][ T5830] ? __lock_acquire+0xad5/0xd80 [ 123.384280][ T5830] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 123.384297][ T5830] do_writepages+0x38c/0x640 [ 123.384317][ T5830] ? __lock_acquire+0xad5/0xd80 [ 123.384337][ T5830] ? __pfx_do_writepages+0x10/0x10 [ 123.384355][ T5830] ? do_raw_spin_lock+0x151/0x370 [ 123.384385][ T5830] ? do_raw_spin_unlock+0x13c/0x8b0 [ 123.384413][ T5830] filemap_fdatawrite+0x1f2/0x2a0 [ 123.384432][ T5830] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 123.384445][ T5830] ? mlock_drain_local+0x79/0x490 [ 123.384507][ T5830] ? do_raw_spin_unlock+0x13c/0x8b0 [ 123.384535][ T5830] f2fs_sync_dirty_inodes+0x34f/0x860 [ 123.384570][ T5830] f2fs_write_checkpoint+0x857/0x1da0 [ 123.384607][ T5830] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 123.384669][ T5830] ? kill_f2fs_super+0x290/0x6d0 [ 123.384691][ T5830] kill_f2fs_super+0x2b8/0x6d0 [ 123.384714][ T5830] ? __pfx_kill_f2fs_super+0x10/0x10 [ 123.384738][ T5830] ? shrinker_free+0x2ca/0x3d0 [ 123.384760][ T5830] deactivate_locked_super+0xc4/0x130 [ 123.384779][ T5830] cleanup_mnt+0x422/0x4c0 [ 123.384796][ T5830] ? lockdep_hardirqs_on+0x9d/0x150 [ 123.384816][ T5830] task_work_run+0x251/0x310 [ 123.384841][ T5830] ? __pfx_task_work_run+0x10/0x10 [ 123.384865][ T5830] ? syscall_exit_to_user_mode+0xa3/0x340 [ 123.384886][ T5830] syscall_exit_to_user_mode+0x13f/0x340 [ 123.384906][ T5830] do_syscall_64+0x100/0x230 [ 123.384923][ T5830] ? clear_bhb_loop+0x45/0xa0 [ 123.384942][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.384957][ T5830] RIP: 0033:0x7f1f4158e497 [ 123.384979][ T5830] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 123.384993][ T5830] RSP: 002b:00007ffdbae6e1b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 123.385010][ T5830] RAX: 0000000000000000 RBX: 00007f1f4160e77c RCX: 00007f1f4158e497 [ 123.385021][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbae6e270 [ 123.385031][ T5830] RBP: 00007ffdbae6e270 R08: 0000000000000000 R09: 0000000000000000 [ 123.385041][ T5830] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdbae6f300 [ 123.385051][ T5830] R13: 00007f1f4160e77c R14: 000000000001e0e8 R15: 00007ffdbae6f340 [ 123.385079][ T5830] [ 123.387533][ T5830] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 124.498403][ T6705] loop0: detected capacity change from 0 to 40427 [ 124.561577][ T6705] F2FS-fs (loop0): build fault injection rate: 771 [ 124.620796][ T6705] F2FS-fs (loop0): invalid crc value [ 124.915685][ T6705] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.966611][ T5153] Bluetooth: hci1: command 0x040f tx timeout [ 124.973730][ T6705] syz.0.197: attempt to access beyond end of device [ 124.973730][ T6705] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.008126][ T6752] netlink: 'syz.2.217': attribute type 28 has an invalid length. [ 125.108110][ T6705] syz.0.197: attempt to access beyond end of device [ 125.108110][ T6705] loop0: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 125.123331][ T5942] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.135597][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 125.254150][ T5840] syz-executor: attempt to access beyond end of device [ 125.254150][ T5840] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 125.278564][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 125.278592][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.278602][ T5840] Call Trace: [ 125.278609][ T5840] [ 125.278616][ T5840] dump_stack_lvl+0x241/0x360 [ 125.278647][ T5840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.278677][ T5840] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 125.278695][ T5840] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 125.278715][ T5840] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 125.278746][ T5840] f2fs_handle_critical_error+0x392/0x5a0 [ 125.278795][ T5840] f2fs_write_end_io+0x58f/0x7d0 [ 125.278821][ T5840] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 125.278844][ T5840] ? bio_endio+0x7e4/0x890 [ 125.278869][ T5840] ? bio_endio+0x82a/0x890 [ 125.278895][ T5840] __submit_merged_bio+0x2a9/0x710 [ 125.278915][ T5840] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 125.278945][ T5840] f2fs_submit_merged_write_cond+0x29f/0x380 [ 125.278981][ T5840] f2fs_write_data_pages+0x2f99/0x3910 [ 125.279046][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 125.279080][ T5840] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 125.279182][ T5840] ? lockdep_hardirqs_on+0x9d/0x150 [ 125.279201][ T5840] ? __pfx_folios_put_refs+0x10/0x10 [ 125.279220][ T5840] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 125.279250][ T5840] ? __lock_acquire+0xad5/0xd80 [ 125.279264][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 125.279284][ T5840] do_writepages+0x38c/0x640 [ 125.279306][ T5840] ? __lock_acquire+0xad5/0xd80 [ 125.279328][ T5840] ? __pfx_do_writepages+0x10/0x10 [ 125.279347][ T5840] ? do_raw_spin_lock+0x151/0x370 [ 125.279383][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 125.279414][ T5840] filemap_fdatawrite+0x1f2/0x2a0 [ 125.279436][ T5840] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 125.279450][ T5840] ? mlock_drain_local+0x79/0x490 [ 125.279522][ T5840] ? do_raw_spin_unlock+0x13c/0x8b0 [ 125.279554][ T5840] f2fs_sync_dirty_inodes+0x34f/0x860 [ 125.279591][ T5840] f2fs_write_checkpoint+0x857/0x1da0 [ 125.279635][ T5840] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 125.279712][ T5840] ? kfree+0x198/0x430 [ 125.279729][ T5840] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 125.279749][ T5840] ? kill_f2fs_super+0x290/0x6d0 [ 125.279774][ T5840] kill_f2fs_super+0x2b8/0x6d0 [ 125.279799][ T5840] ? __pfx_kill_f2fs_super+0x10/0x10 [ 125.279828][ T5840] ? shrinker_free+0x2ca/0x3d0 [ 125.279851][ T5840] deactivate_locked_super+0xc4/0x130 [ 125.279872][ T5840] cleanup_mnt+0x422/0x4c0 [ 125.279890][ T5840] ? lockdep_hardirqs_on+0x9d/0x150 [ 125.279912][ T5840] task_work_run+0x251/0x310 [ 125.279940][ T5840] ? __pfx_task_work_run+0x10/0x10 [ 125.279964][ T5840] ? syscall_exit_to_user_mode+0xa3/0x340 [ 125.279985][ T5840] syscall_exit_to_user_mode+0x13f/0x340 [ 125.280004][ T5840] do_syscall_64+0x100/0x230 [ 125.280017][ T5840] ? clear_bhb_loop+0x45/0xa0 [ 125.280032][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.280044][ T5840] RIP: 0033:0x7fe1c0d8e497 [ 125.280056][ T5840] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 125.280067][ T5840] RSP: 002b:00007ffd141a7e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 125.280086][ T5840] RAX: 0000000000000000 RBX: 00007fe1c0e0e77c RCX: 00007fe1c0d8e497 [ 125.280097][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd141a7f40 [ 125.280107][ T5840] RBP: 00007ffd141a7f40 R08: 0000000000000000 R09: 0000000000000000 [ 125.280118][ T5840] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd141a8fd0 [ 125.280127][ T5840] R13: 00007fe1c0e0e77c R14: 000000000001e905 R15: 00007ffd141a9010 [ 125.280160][ T5840] [ 125.280166][ T5840] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 125.295256][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 125.315268][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 125.375501][ T5942] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 125.446312][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 125.689943][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 125.699072][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.716348][ T24] usb 4-1: config 0 descriptor?? [ 125.729628][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 125.770835][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.801171][ T5942] usb 2-1: Product: syz [ 125.821396][ T5942] usb 2-1: Manufacturer: syz [ 125.841697][ T5942] usb 2-1: SerialNumber: syz [ 125.880481][ T5942] usb 2-1: config 0 descriptor?? [ 125.907231][ T5942] usb 2-1: Found UVC 0.00 device syz (046d:0721) [ 125.913741][ T5942] usb 2-1: No valid video chain found. [ 126.063860][ T5188] bcm5974 4-1:0.0: could not read from device [ 126.100604][ T6768] program syz.2.222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.118677][ T6729] bcm5974 4-1:0.0: could not read from device [ 126.151581][ T5188] bcm5974 4-1:0.0: could not read from device [ 126.158900][ T24] usb 4-1: USB disconnect, device number 9 [ 126.307209][ T9] usb 2-1: USB disconnect, device number 4 [ 126.672874][ T6749] loop5: detected capacity change from 0 to 65536 [ 126.685668][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.722337][ T6749] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 126.771771][ T6749] XFS (loop5): Ending clean mount [ 126.773193][ T6775] loop0: detected capacity change from 0 to 32768 [ 126.855403][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 126.874857][ T6775] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,very_degraded,no_splitbrain_check,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc [ 126.902348][ T6775] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: bad nr_required in entry journal: 4/1 [0], fixing [ 126.930120][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 126.930154][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 126.930177][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.930199][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.930248][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.930269][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.013440][ T6439] XFS (loop5): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 127.014037][ T6788] loop1: detected capacity change from 0 to 512 [ 127.036109][ T6788] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.046423][ T6775] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 127.153846][ T6775] bcachefs (loop0): Version upgrade required: [ 127.153846][ T6775] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 127.153846][ T6775] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 127.153846][ T6775] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 127.161389][ T6788] EXT4-fs (loop1): 1 truncate cleaned up [ 127.225549][ T6775] bcachefs (loop0): dropping and reconstructing all alloc info [ 127.243267][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 127.248863][ T24] usbtmc 3-1:16.0: can't read capabilities [ 127.357702][ T6788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.391656][ T6775] bcachefs (loop0): accounting_read... done [ 127.403912][ T6775] bcachefs (loop0): alloc_read... done [ 127.432465][ T6775] bcachefs (loop0): snapshots_read... done [ 127.443661][ T6775] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 127.474384][ T6775] bcachefs (loop0): done starting filesystem [ 127.479205][ T1209] usb 3-1: USB disconnect, device number 5 [ 127.596189][ T5830] EXT4-fs error (device loop1): htree_dirblock_to_tree:1082: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 127.677332][ T6105] ------------[ cut here ]------------ [ 127.682839][ T6105] WARNING: CPU: 0 PID: 6105 at block/bio.c:512 bio_alloc_bioset+0xd61/0x1130 [ 127.691999][ T6105] Modules linked in: [ 127.696402][ T6105] CPU: 0 UID: 0 PID: 6105 Comm: kworker/u8:9 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 127.708101][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.718261][ T6105] Workqueue: writeback wb_workfn (flush-bcachefs-11) [ 127.725405][ T6105] RIP: 0010:bio_alloc_bioset+0xd61/0x1130 [ 127.731172][ T6105] Code: db f6 ff 81 ce 00 20 09 00 e8 9b f1 3f fd 48 85 c0 0f 84 a1 00 00 00 48 89 c5 e8 8a 55 e1 fc e9 7a f8 ff ff e8 80 55 e1 fc 90 <0f> 0b 90 e9 7b fb ff ff e8 72 55 e1 fc 90 0f 0b 90 44 8b 7c 24 20 [ 127.750902][ T6105] RSP: 0018:ffffc9000b74ecf0 EFLAGS: 00010293 [ 127.757043][ T6105] RAX: ffffffff84e224c0 RBX: 0000000000000000 RCX: ffff888025933c00 [ 127.765383][ T6105] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000000 [ 127.773426][ T6105] RBP: dffffc0000000000 R08: ffffffff84e217c4 R09: 1ffffd4000340d48 [ 127.782370][ T6105] R10: dffffc0000000000 R11: fffff94000340d49 R12: 0000000000000100 [ 127.791217][ T6105] R13: 0000000000000cc0 R14: 0000000000000001 R15: 0000000000000100 [ 127.799246][ T6105] FS: 0000000000000000(0000) GS:ffff888124f80000(0000) knlGS:0000000000000000 [ 127.808261][ T6105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.814862][ T6105] CR2: 00007ffdbae6aec0 CR3: 000000000eb3a000 CR4: 00000000003526f0 [ 127.822916][ T6105] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.830957][ T6105] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.839014][ T6105] Call Trace: [ 127.842307][ T6105] [ 127.845516][ T6105] ? folio_unlock+0x10e/0x170 [ 127.850230][ T6105] __bch2_writepage+0x1624/0x2780 [ 127.855363][ T6105] ? folio_clear_dirty_for_io+0x25c/0x9b0 [ 127.861124][ T6105] ? unwind_next_frame+0xb8/0x23b0 [ 127.866330][ T6105] ? __pfx___bch2_writepage+0x10/0x10 [ 127.871726][ T6105] ? writeback_iter+0xcfd/0x12b0 [ 127.876750][ T6105] write_cache_pages+0xd2/0x240 [ 127.882494][ T6105] ? __pfx___bch2_writepage+0x10/0x10 [ 127.888681][ T6105] ? __pfx_write_cache_pages+0x10/0x10 [ 127.894178][ T6105] ? stack_trace_save+0x11a/0x1d0 [ 127.899286][ T6105] ? blk_start_plug+0x53/0x1b0 [ 127.904072][ T6105] bch2_writepages+0x158/0x390 [ 127.908947][ T6105] ? __pfx_bch2_writepages+0x10/0x10 [ 127.914262][ T6105] ? validate_chain+0x8a7/0x24e0 [ 127.919317][ T6105] ? __pfx_bch2_writepages+0x10/0x10 [ 127.924642][ T6105] do_writepages+0x38c/0x640 [ 127.929383][ T6105] ? __pfx_do_writepages+0x10/0x10 [ 127.934523][ T6105] ? __lock_acquire+0xad5/0xd80 [ 127.935332][ T5913] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 127.939468][ T6105] ? reacquire_held_locks+0x12a/0x1e0 [ 127.952324][ T6105] ? writeback_sb_inodes+0x43f/0x1360 [ 127.957789][ T6105] __writeback_single_inode+0x14f/0x10d0 [ 127.963458][ T6105] writeback_sb_inodes+0x822/0x1360 [ 127.968803][ T6105] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 127.974493][ T6105] ? rcu_is_watching+0x15/0xb0 [ 127.979323][ T6105] ? queue_io+0x310/0x4d0 [ 127.984587][ T6105] wb_writeback+0x415/0xb90 [ 127.989791][ T6105] ? queue_io+0x271/0x4d0 [ 127.994182][ T6105] ? __pfx_wb_writeback+0x10/0x10 [ 127.999280][ T6105] wb_workfn+0x412/0x10b0 [ 128.003652][ T6105] ? __pfx_wb_workfn+0x10/0x10 [ 128.008766][ T6105] ? register_lock_class+0x54/0x330 [ 128.014001][ T6105] ? __lock_acquire+0xad5/0xd80 [ 128.018972][ T6105] ? process_scheduled_works+0x9cb/0x18e0 [ 128.024708][ T6105] process_scheduled_works+0xac3/0x18e0 [ 128.030359][ T6105] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.036398][ T6105] ? assign_work+0x367/0x3d0 [ 128.040997][ T6105] worker_thread+0x870/0xd50 [ 128.045675][ T6105] ? __kthread_parkme+0x1a8/0x200 [ 128.050720][ T6105] ? __pfx_worker_thread+0x10/0x10 [ 128.055924][ T6105] kthread+0x7b7/0x940 [ 128.060006][ T6105] ? __pfx_worker_thread+0x10/0x10 [ 128.065198][ T6105] ? __pfx_kthread+0x10/0x10 [ 128.069811][ T6105] ? __pfx_kthread+0x10/0x10 [ 128.074394][ T6105] ? ret_from_fork+0x42/0x80 [ 128.079023][ T6105] ? __pfx_kthread+0x10/0x10 [ 128.083624][ T6105] ret_from_fork+0x4b/0x80 [ 128.089017][ T6105] ? __pfx_kthread+0x10/0x10 [ 128.093615][ T6105] ret_from_fork_asm+0x1a/0x30 [ 128.099138][ T6105] [ 128.102190][ T6105] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.109472][ T6105] CPU: 0 UID: 0 PID: 6105 Comm: kworker/u8:9 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 128.121091][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.131141][ T6105] Workqueue: writeback wb_workfn (flush-bcachefs-11) [ 128.137860][ T6105] Call Trace: [ 128.141134][ T6105] [ 128.144059][ T6105] dump_stack_lvl+0x241/0x360 [ 128.148738][ T6105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.153932][ T6105] ? __pfx__printk+0x10/0x10 [ 128.158523][ T6105] ? vscnprintf+0x5d/0x90 [ 128.162850][ T6105] panic+0x349/0x880 [ 128.166737][ T6105] ? __warn+0x174/0x4d0 [ 128.170884][ T6105] ? __pfx_panic+0x10/0x10 [ 128.175300][ T6105] ? ret_from_fork_asm+0x1a/0x30 [ 128.180227][ T6105] __warn+0x344/0x4d0 [ 128.184196][ T6105] ? bio_alloc_bioset+0xd61/0x1130 [ 128.189306][ T6105] report_bug+0x2b3/0x500 [ 128.193626][ T6105] ? bio_alloc_bioset+0xd61/0x1130 [ 128.198736][ T6105] ? bio_alloc_bioset+0xd61/0x1130 [ 128.203842][ T6105] ? bio_alloc_bioset+0xd63/0x1130 [ 128.208944][ T6105] handle_bug+0x89/0x170 [ 128.213191][ T6105] exc_invalid_op+0x1a/0x50 [ 128.217687][ T6105] asm_exc_invalid_op+0x1a/0x20 [ 128.222525][ T6105] RIP: 0010:bio_alloc_bioset+0xd61/0x1130 [ 128.228237][ T6105] Code: db f6 ff 81 ce 00 20 09 00 e8 9b f1 3f fd 48 85 c0 0f 84 a1 00 00 00 48 89 c5 e8 8a 55 e1 fc e9 7a f8 ff ff e8 80 55 e1 fc 90 <0f> 0b 90 e9 7b fb ff ff e8 72 55 e1 fc 90 0f 0b 90 44 8b 7c 24 20 [ 128.247832][ T6105] RSP: 0018:ffffc9000b74ecf0 EFLAGS: 00010293 [ 128.253893][ T6105] RAX: ffffffff84e224c0 RBX: 0000000000000000 RCX: ffff888025933c00 [ 128.261854][ T6105] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000000 [ 128.269816][ T6105] RBP: dffffc0000000000 R08: ffffffff84e217c4 R09: 1ffffd4000340d48 [ 128.277774][ T6105] R10: dffffc0000000000 R11: fffff94000340d49 R12: 0000000000000100 [ 128.285736][ T6105] R13: 0000000000000cc0 R14: 0000000000000001 R15: 0000000000000100 [ 128.293704][ T6105] ? bio_alloc_bioset+0x64/0x1130 [ 128.298724][ T6105] ? bio_alloc_bioset+0xd60/0x1130 [ 128.303836][ T6105] ? folio_unlock+0x10e/0x170 [ 128.308513][ T6105] __bch2_writepage+0x1624/0x2780 [ 128.313540][ T6105] ? folio_clear_dirty_for_io+0x25c/0x9b0 [ 128.319272][ T6105] ? unwind_next_frame+0xb8/0x23b0 [ 128.324379][ T6105] ? __pfx___bch2_writepage+0x10/0x10 [ 128.329743][ T6105] ? writeback_iter+0xcfd/0x12b0 [ 128.334681][ T6105] write_cache_pages+0xd2/0x240 [ 128.339533][ T6105] ? __pfx___bch2_writepage+0x10/0x10 [ 128.344894][ T6105] ? __pfx_write_cache_pages+0x10/0x10 [ 128.350343][ T6105] ? stack_trace_save+0x11a/0x1d0 [ 128.355367][ T6105] ? blk_start_plug+0x53/0x1b0 [ 128.360126][ T6105] bch2_writepages+0x158/0x390 [ 128.364887][ T6105] ? __pfx_bch2_writepages+0x10/0x10 [ 128.370171][ T6105] ? validate_chain+0x8a7/0x24e0 [ 128.375109][ T6105] ? __pfx_bch2_writepages+0x10/0x10 [ 128.380388][ T6105] do_writepages+0x38c/0x640 [ 128.384978][ T6105] ? __pfx_do_writepages+0x10/0x10 [ 128.390086][ T6105] ? __lock_acquire+0xad5/0xd80 [ 128.394933][ T6105] ? reacquire_held_locks+0x12a/0x1e0 [ 128.400299][ T6105] ? writeback_sb_inodes+0x43f/0x1360 [ 128.405672][ T6105] __writeback_single_inode+0x14f/0x10d0 [ 128.411307][ T6105] writeback_sb_inodes+0x822/0x1360 [ 128.416519][ T6105] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 128.422175][ T6105] ? rcu_is_watching+0x15/0xb0 [ 128.426928][ T6105] ? queue_io+0x310/0x4d0 [ 128.431254][ T6105] wb_writeback+0x415/0xb90 [ 128.435751][ T6105] ? queue_io+0x271/0x4d0 [ 128.440085][ T6105] ? __pfx_wb_writeback+0x10/0x10 [ 128.445112][ T6105] wb_workfn+0x412/0x10b0 [ 128.449448][ T6105] ? __pfx_wb_workfn+0x10/0x10 [ 128.454197][ T6105] ? register_lock_class+0x54/0x330 [ 128.459393][ T6105] ? __lock_acquire+0xad5/0xd80 [ 128.464246][ T6105] ? process_scheduled_works+0x9cb/0x18e0 [ 128.469953][ T6105] process_scheduled_works+0xac3/0x18e0 [ 128.475511][ T6105] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.481486][ T6105] ? assign_work+0x367/0x3d0 [ 128.486068][ T6105] worker_thread+0x870/0xd50 [ 128.490655][ T6105] ? __kthread_parkme+0x1a8/0x200 [ 128.495673][ T6105] ? __pfx_worker_thread+0x10/0x10 [ 128.500774][ T6105] kthread+0x7b7/0x940 [ 128.504833][ T6105] ? __pfx_worker_thread+0x10/0x10 [ 128.509937][ T6105] ? __pfx_kthread+0x10/0x10 [ 128.514520][ T6105] ? __pfx_kthread+0x10/0x10 [ 128.519120][ T6105] ? ret_from_fork+0x42/0x80 [ 128.523714][ T6105] ? __pfx_kthread+0x10/0x10 [ 128.528312][ T6105] ret_from_fork+0x4b/0x80 [ 128.532744][ T6105] ? __pfx_kthread+0x10/0x10 [ 128.537346][ T6105] ret_from_fork_asm+0x1a/0x30 [ 128.542124][ T6105] [ 128.545280][ T6105] Kernel Offset: disabled [ 128.549596][ T6105] Rebooting in 86400 seconds..