last executing test programs: 6m0.083665787s ago: executing program 32 (id=223): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50000000000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000fe80000000000000000000000000002386dd"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m45.251662568s ago: executing program 33 (id=806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) 4m20.840369533s ago: executing program 34 (id=857): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 4m6.383825382s ago: executing program 35 (id=1011): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x40000002, 0x0, 0x44}) 3m58.233835093s ago: executing program 36 (id=1058): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="800400001900", 0x0, 0x0, 0x10012, 0xfffbffff, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) 3m13.581888437s ago: executing program 3 (id=1331): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) getpeername(r0, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) 3m13.156705016s ago: executing program 3 (id=1335): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3f6a, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="10", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="b4", 0x1}], 0x1}}], 0x2, 0x5081) sendto$inet(r0, &(0x7f0000000280)="01", 0x1, 0x88c1, 0x0, 0x0) 3m11.910041806s ago: executing program 3 (id=1344): setns(0xc9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x9, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m11.303369438s ago: executing program 3 (id=1349): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) umount2(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) 3m11.128544112s ago: executing program 3 (id=1351): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x100, 0x5, 0x2, 0xc, 0xe, 0x5, 0x59, 0x3, 0x80008, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0), 0x5f) 3m10.694276766s ago: executing program 3 (id=1354): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000011c0)={0x1c, &(0x7f0000000c80)={0x20, 0x0, 0x2, "42e0"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3m10.123468894s ago: executing program 37 (id=1354): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000011c0)={0x1c, &(0x7f0000000c80)={0x20, 0x0, 0x2, "42e0"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2m36.868620512s ago: executing program 5 (id=1543): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x800, 0x7c, 0x0, 0x42}) 2m34.691967445s ago: executing program 5 (id=1549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 2m33.204775321s ago: executing program 5 (id=1553): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 2m32.668529709s ago: executing program 5 (id=1557): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000680)="c6d178d7653115176f387564517a4b", 0xfffffffffffffdd5, 0x20004010, 0x0, 0x35) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffffffffffff9f4, 0x0) 2m32.428692511s ago: executing program 5 (id=1559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0x60000, 0xffff1000, 0xf000, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0x4000, 0x10, 0x3, 0x7f, 0x7, 0x6, 0x6, 0x1, 0x4, 0x2, 0x5}, {0xf000, 0x4, 0x0, 0x4, 0x14, 0x81, 0x4, 0x13, 0x5, 0x4, 0x91, 0x80}, {0x9000, 0xeeef0000, 0xc, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0xc, 0x9}, {0xa000, 0x41000, 0xa, 0x9, 0xc8, 0x9, 0x7, 0xef, 0x2, 0x6e, 0x2, 0x7}, {0x4000, 0x10000, 0xe, 0x2, 0xad, 0x2, 0x4, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x60000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x9, 0x7f, 0x3, 0x0, 0x7f, 0x1, 0xfc, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x21, 0x5, 0x0, 0x8000900, 0x1, [0x6, 0x2, 0x8000000000000003, 0x3]}) 2m31.906539503s ago: executing program 5 (id=1563): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) kcmp(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, r1) 2m16.82614813s ago: executing program 38 (id=1563): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) kcmp(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, r1) 2m13.268016518s ago: executing program 1 (id=1650): mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[]) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000453000/0x3000)=nil, 0x3000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlockall(0x7) read(r0, &(0x7f00000002c0)=""/153, 0x99) 2m12.633405181s ago: executing program 1 (id=1653): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6}) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 2m11.996517926s ago: executing program 1 (id=1655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m11.711823477s ago: executing program 1 (id=1657): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$xfs(&(0x7f0000000300), &(0x7f00000002c0)='./file0\x00', 0x4000000, &(0x7f0000000400)={[{@dax}, {@noquota}, {@nolazytime}, {@discard}, {@logbufs={'logbufs', 0x3d, 0x7}}]}, 0x1, 0x9823, &(0x7f0000009dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x22043, 0x69) 2m10.701959331s ago: executing program 1 (id=1659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x400000b0, 0x0, 0x1}, {0x400000b1, 0x0, 0xfffffffffffffff7}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m9.65468135s ago: executing program 1 (id=1665): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x5e, &(0x7f0000000a00)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0) 2m8.792975208s ago: executing program 39 (id=1665): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x5e, &(0x7f0000000a00)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0) 1m25.359312499s ago: executing program 8 (id=1915): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000140)) 1m24.372288879s ago: executing program 8 (id=1926): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1fe}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700", 0x28, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 1m23.912831214s ago: executing program 8 (id=1933): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x6, 0x9270, 0x7ff, 0x2, 0x997f, 0x101}) 1m23.660603043s ago: executing program 8 (id=1934): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) ftruncate(r0, 0x1000) 1m22.762125611s ago: executing program 8 (id=1937): socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000100)="ed", 0x1, 0x20008005, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f00000012c0)=""/4081, 0xff1, 0x142, 0x0, 0x0) 1m21.531329844s ago: executing program 8 (id=1947): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1005}, 0x4) execveat(0xffffffffffffffff, &(0x7f0000000940)='\x00', 0x0, 0x0, 0x1100) mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) 1m6.438641241s ago: executing program 40 (id=1947): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1005}, 0x4) execveat(0xffffffffffffffff, &(0x7f0000000940)='\x00', 0x0, 0x0, 0x1100) mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x4, &(0x7f0000000000)={[{@none}, {@name={'name', 0x3d, 'none\xc8\xec\x00'/21}}]}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) 39.896613582s ago: executing program 2 (id=2188): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000002a80)={0x2020}, 0x2020) 39.754675202s ago: executing program 2 (id=2189): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="3cc81e0000004d61501d0100000000000000100000000000800700000000000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 37.103559396s ago: executing program 2 (id=2198): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) io_setup(0x8001, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 36.904550755s ago: executing program 2 (id=2200): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 36.301138066s ago: executing program 2 (id=2202): r0 = socket$inet6(0xa, 0x80002, 0x0) setreuid(0xffffffffffffffff, 0xee01) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x14, 0x800000000004}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001900)=[{&(0x7f0000000080)=""/226, 0xe2}], 0x1, &(0x7f0000001b40)=[{&(0x7f0000001980)=""/152, 0x98}], 0x1, 0x0) 33.627485678s ago: executing program 2 (id=2207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 32.729495476s ago: executing program 41 (id=2207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 7.52851966s ago: executing program 9 (id=2380): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) close(0x3) 7.326446305s ago: executing program 9 (id=2382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvzqUpFCHFjZvk85HO7+7rr9+9rxWd9O4iB3BqLSS//1qKy3E+ImYj4lJEtl+KiLnxpNU8vBQRVyJi5pGtVIw/HDgbERci4vIoeZ6zVLz15bXh1ZVf3vntux/Onbn41bc/Tm/VwLS9HBHdrXx/t5vHtJXH+8V4bdjOYvfmsIj5G90HxXGax93mRpZhtzaeV8vijVY+P93a6Y/iZqdWH8VWezMb3+rlJ+wPW+M82Qfu17az40ZzI4vtfprF1n5e195+fm3b7w/yPI0i3ydZ+hgMxjEfb+418/VsPchivTcoxvO8aaO5N4rDIhani3raaWR1bBzmm362vdvu7ewlw+Z2v532kpVK9ZVK9Va5up02moPmzXKt27h1M1lsdUbTyoNmrbvaStNWp1mpp92lZLFVr5er1WTxdnOjXesl1WrlRuV6eWWp2LuWvHn3g6TTSBZH8fV2b2fQ7vSTzXQ7yT+xlCxXbry6lFytJu+trSfr9+7cWVt//6PbH959be3tN4pJ/ygrWVy+vrxcrl4vL1eXTtH6PyuKnuD64VBK0y4A4Pj5r/7/4WVV/w9M2BP7/9EF6FD9//a9iKff/4f+fyKOVf/7zPT/83FS1g+Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpr7+q1sZyE/vliMP1cMvVAclyJiJiL+/BezcfZAztkiz9wT5s89VsP3pcgyjM5xrtguRMRqsf3x/NP+FgAAAODk+ubTK1/k3Xr+sjDtgjhK+U2bmUsfTyjffETMLfw8oWwzo5cXJ5Qs+/s+E3sTypbdwJqfULL8ltuZSWX7X2YPhPlHQikPM0daDgAAcCQOdgJH24UAAABwlD6fdgFMRynGjzLHz4Kz/7z/+4Hg+QNHAAAAwDFUmnYBAAAAwMQ9/hw/6//9/h8AAACcbPnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc7946gNRHEAfjYYyD8FRelzlXRwjBwhZcqIA+QSHCAFuUK6VJyBdDlChCPsCQu7FKwY26vV90nGeGT/eIOgmBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0u9qs/zx9cO3W3P29bV+RcTD1jy9AQAAAC7ZVZtl82beXr9K7W9S07t0XUREeXHkXtejmJxljlJOdXf/99P7q3s1/IxoEg6fMU3Hy4j4mI6/b7v+FgAAAOD52q7Wi3a03r7Mhy6IPrWTNuXrT5nyioio5n8ypZWHvPc5kibp9z2OLzni0sRWzDKFtVNu41xpV2n+7sdZu9nJqWhP5cXHjkVm6zsAANCj0dmp31EIAAAAffo8dAHkdt3yXBH/lzKPS4HTs+dfPCYNAAAAeIqKoQsAAAAAOteM/3va/6+2/x8AAAAMo93/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7tqs1yu1ovbs3Z17fJ0xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjH/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9pAXEEdEMQAokBFnq9lpZuiAEUMfAnIEXptYRe+dFmoFWFuIUNZe6CYEQICRS2/g+dWylL2DLcECRmkM92zvkhcUBkX5LPR3p+Xzsnv++zpShfP+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI3fncZJtunkcVwce7xzfyXrn+zrMw/XNxezlsVRnUkfDy9Xd6Juc4kAAABwoo2qO0lZ34cQttKNpayPO5P6Py0/k9X83z+bx2U9v7/uL/uy9s/ab79uv7g7UCcfJzvp9dXh4MLBvFpHPtNj4rl/+Hl+YaL82UsyuSHxB6MXxunkekbfPnr0XnsSnqkjWwDgvzhf9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfxKDxdxlEIYbE1jTNPdu6vHNY/XN9cLNuVBw/Ww9fTc2anSEMI11eHgwu1zma+3bl77+bycDi4XX/wSgihqdHfKaZ/86MZPhxCI9dHcERBXNzsecnneAQN/lICAOBESouW1fVb6cZSdixaCOGvH/bW/69X4jBj/b/98ZXH1bGq9X+/thnOv97arc97d+7ee3P11vKNwY3Bp29d7L/dv3T18uWrvcmzkp4nJgAAAPw/7aJV6/944eD6/7lKHGas/7/4rv9VdaxE/X+o6aJf05kAAACcbs+/+ucf0SHHo3Y7fLm8tna7n2939y/m2wZS/dfOFK1a/ycLTWcFAAAA1GE8ivas/1+rxGHG9f9nfnzp5+o5kxDC2WL9//zKZ8Nr9U1nrtXx78RNzxEAAIBmnS1adf0/nbz/H+++8hCHEN54LY+LrwGcqf5P3v/mp+pY1ff/L9U3xbkUd/PrMem7IbS6TWcEAADASfZU0bJi//d0Y+mTX8592Pb+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/g4AAP//MY062g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) lsetxattr$security_capability(&(0x7f0000002080)='./file0\x00', &(0x7f0000002100), 0x0, 0x0, 0x3) 4.950405684s ago: executing program 0 (id=2394): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000e00)={0x28, 0x7, r1, 0x0, &(0x7f0000000c00)="7f", 0x1, 0x7}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000000540)="bf4b", 0x2, 0x6e}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x6, r1, 0x0, &(0x7f00000003c0)='\x00', 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000480)={0x28, 0x6, r1, 0x0, &(0x7f0000000340)="c3", 0x1, 0x9f}) 4.781355621s ago: executing program 0 (id=2395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000002177fbac141516e0000001440c0510b18000890304000084508864325f003901050b038da1005725181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 4.637036295s ago: executing program 9 (id=2397): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) 3.97654932s ago: executing program 0 (id=2399): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, &(0x7f0000000180)=[{0x1, 0xfffd}], 0x1) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x10, 0x2d49}, 0xfffffffffffffff8, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x101}) semctl$SETVAL(r0, 0x0, 0x10, 0x0) 3.808681166s ago: executing program 4 (id=2400): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e23, 0x400, @private2, 0x4}}, 0x0, 0x8002}, 0x90) 3.704142606s ago: executing program 4 (id=2401): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 3.445875248s ago: executing program 4 (id=2403): syz_open_procfs(0x0, &(0x7f0000005c80)='net/ip_tables_names\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 3.330877174s ago: executing program 7 (id=2404): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x803, 0x0) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 3.239943787s ago: executing program 4 (id=2405): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @loopback, 0x4}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)='{', 0x1}], 0x1}}], 0x1, 0x24008884) close(r0) 3.186571593s ago: executing program 7 (id=2406): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000440)={@local, 0x1}) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000004}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000001900)={&(0x7f00000014c0)={{@local, 0x4e4f}, {@local, 0x5485}, 0x400, "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"}, 0x418, 0x40}) 2.999007606s ago: executing program 4 (id=2408): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r0, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9c7c, 0x800, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x400, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.93046102s ago: executing program 0 (id=2409): socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x404c840) 2.800681161s ago: executing program 9 (id=2410): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x3, 0xff, 0x0, 0xf84, 0x28, 0x0, 0xfa, 0x5, 0x40, 0x2, 0x3, 0x0, 0x10, 0x2, 0x8, 0x4, 0x1, 0x0, '\x00', 0x5, 0x7}) 2.267723676s ago: executing program 9 (id=2412): close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047452, 0x0) 2.127135101s ago: executing program 4 (id=2413): mremap(&(0x7f0000012000/0x6000)=nil, 0x6000, 0x2000, 0x3, &(0x7f000000e000/0x2000)=nil) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000807, 0x0) 2.10533232s ago: executing program 7 (id=2414): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x28}], 0x1}, 0x0) 2.066097985s ago: executing program 6 (id=2415): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@rand_addr=0x64010101, 0x4e24, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0x0, 0x0, 0x0, 0x2}, 0x40000000, 0x20000, 0x0, 0x1, 0x2, 0x1}, {{@in6=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xe}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(0x4) 1.835615669s ago: executing program 6 (id=2416): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 1.087523003s ago: executing program 9 (id=2417): r0 = memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) 1.086534205s ago: executing program 7 (id=2427): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x87}, {@in6=@loopback, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00', {0x2, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.085071875s ago: executing program 6 (id=2418): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRESOCT, @ANYRES32, @ANYRES32=r0, @ANYRES64], &(0x7f00002bf000)='GPL\x00', 0x4, 0x64, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 884.890609ms ago: executing program 6 (id=2419): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 568.013945ms ago: executing program 7 (id=2420): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000374429bd7000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c020044cc04004c0012800b00010069703667726500003c00028014000700fc0000000000000000000000000000001400060020"], 0x6c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) 458.646478ms ago: executing program 0 (id=2421): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$P9_RSTATu(r0, &(0x7f0000000500)={0xc4, 0x7d, 0xa, {{0x0, 0xab, 0x3, 0x6, {0x0, 0x1, 0x5}, 0x100000, 0x8, 0x7, 0x2, 0x3, 'R\x90\x00', 0x1, '\x00', 0x73, '\x17\xe0_|s/\xec\xcf\x1e|~\xf4*wIX\xbe[_\x12\xd4zZs\x85\xc4/\xa2?\xbc=\x82O\xc7\xf7\xf1\r\xd0\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0\xe3\xdf\x1c\x16{\"\f\x8c0\xd0I\xff\x02):9\xe7\xa6\x9e~\xa9\xa3\xf7\xaaW)o\x96\x1bm+\xcb\xf1\xbf\x0e\xaa\xd6|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00\x00\x00', 0x1, '{'}, 0x4, 'GPL\x00'}}, 0xc4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 252.547844ms ago: executing program 6 (id=2422): r0 = socket(0xa, 0x3, 0xff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@can={{0x0, 0x1, 0x1, 0x1}, 0x3, 0x6, 0x0, 0x0, "c9095300"}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) close_range(r0, 0xffffffffffffffff, 0x0) 199.707652ms ago: executing program 7 (id=2423): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) unlink(&(0x7f00000001c0)='./file0/file1\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, &(0x7f0000000100)=""/134, 0x86) 115.050788ms ago: executing program 0 (id=2424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000010000/0x2000)=nil}) ioctl(r1, 0x4048aec9, &(0x7f0000000600)="010000000000000001") ioctl(r2, 0x4048aecb, &(0x7f0000000700)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 6 (id=2425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 6][T12114] FAULT_INJECTION: forcing a failure. [ 367.198456][T12114] name failslab, interval 1, probability 0, space 0, times 0 [ 367.198490][T12114] CPU: 0 UID: 0 PID: 12114 Comm: syz.8.1720 Not tainted syzkaller #0 PREEMPT(full) [ 367.198515][T12114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.198528][T12114] Call Trace: [ 367.198537][T12114] [ 367.198546][T12114] dump_stack_lvl+0xe8/0x150 [ 367.198584][T12114] should_fail_ex+0x3eb/0x540 [ 367.198620][T12114] should_failslab+0xa8/0x100 [ 367.198654][T12114] __kmalloc_cache_noprof+0x9e/0x600 [ 367.198682][T12114] ? percpu_ref_init+0xc5/0x350 [ 367.198748][T12114] ? percpu_ref_init+0xc5/0x350 [ 367.198782][T12114] ? __pfx_blk_queue_usage_counter_release+0x10/0x10 [ 367.198868][T12114] percpu_ref_init+0xc5/0x350 [ 367.198894][T12114] ? mutex_init_lockdep+0xdf/0x110 [ 367.198926][T12114] blk_alloc_queue+0x42a/0x690 [ 367.198961][T12114] __blk_mq_alloc_disk+0x194/0x390 [ 367.199009][T12114] ? __pfx___blk_mq_alloc_disk+0x10/0x10 [ 367.199066][T12114] loop_add+0x480/0xb40 [ 367.199163][T12114] ? __pfx_loop_add+0x10/0x10 [ 367.199230][T12114] loop_control_ioctl+0x12b/0x5a0 [ 367.199257][T12114] ? __fget_files+0x2a/0x420 [ 367.199294][T12114] ? __pfx_loop_control_ioctl+0x10/0x10 [ 367.199316][T12114] ? __fget_files+0x2a/0x420 [ 367.199347][T12114] ? bpf_lsm_file_ioctl+0x9/0x20 [ 367.199369][T12114] ? __pfx_loop_control_ioctl+0x10/0x10 [ 367.199394][T12114] __se_sys_ioctl+0xfc/0x170 [ 367.199434][T12114] do_syscall_64+0x166/0x520 [ 367.199456][T12114] ? trace_irq_disable+0x3b/0x140 [ 367.199480][T12114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.199502][T12114] ? clear_bhb_loop+0x70/0xc0 [ 367.199529][T12114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.199550][T12114] RIP: 0033:0x7ff92a19e159 [ 367.199570][T12114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.199590][T12114] RSP: 002b:00007ff92b124028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.199613][T12114] RAX: ffffffffffffffda RBX: 00007ff92a425fa0 RCX: 00007ff92a19e159 [ 367.199629][T12114] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 367.199643][T12114] RBP: 00007ff92a23503b R08: 0000000000000000 R09: 0000000000000000 [ 367.199656][T12114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.199669][T12114] R13: 00007ff92a426038 R14: 00007ff92a425fa0 R15: 00007ffea69297b8 [ 367.199704][T12114] [ 367.653216][T11871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.963653][T11871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.091736][T12136] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 368.402765][T11740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.596903][T12152] geneve2: entered allmulticast mode [ 368.910505][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 368.910563][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 368.910597][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 368.910632][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 368.953911][T11871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 368.974552][T11871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.975893][T11871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 368.983283][T11871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 368.984788][T11871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 368.994235][T11871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 368.995649][T11871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 369.019828][T11871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.264838][T11740] veth0_vlan: entered promiscuous mode [ 369.283511][T11740] veth1_vlan: entered promiscuous mode [ 369.345069][T11871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.377713][T11871] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.404478][T11740] veth0_macvtap: entered promiscuous mode [ 369.414413][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.414517][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.444156][T11740] veth1_macvtap: entered promiscuous mode [ 369.457811][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.457930][ T7184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.505927][T11740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.531768][T11740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.650540][ T5820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.650898][ T5820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.651083][ T5820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.651425][ T5820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.958895][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.958921][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.652636][ T7184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.652661][ T7184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.976099][T12235] xt_hashlimit: size too large, truncated to 1048576 [ 372.762312][T12261] loop4: detected capacity change from 0 to 512 [ 372.788855][T12261] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 372.816679][T12261] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.1742: bad orphan inode 131083 [ 372.816714][T12261] loop4: lost filesystem error report for type 5 error -117 [ 372.830924][T12261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.913624][T12269] loop5: detected capacity change from 0 to 7 [ 372.917609][T12269] Dev loop5: unable to read RDB block 7 [ 372.917654][T12269] loop5: unable to read partition table [ 372.917878][T12269] loop5: partition table beyond EOD, truncated [ 372.917896][T12269] loop_reread_partitions: partition scan of loop5 (~h"+x|Q` ) failed (rc=-5) [ 372.939849][T11871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.014732][T11740] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.228587][T11871] veth0_vlan: entered promiscuous mode [ 373.275833][T11871] veth1_vlan: entered promiscuous mode [ 373.420852][T11871] veth0_macvtap: entered promiscuous mode [ 373.448866][T11871] veth1_macvtap: entered promiscuous mode [ 373.532134][T11871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.556656][T12290] loop4: detected capacity change from 0 to 128 [ 373.567642][T11871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.641841][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.645796][ T7186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.645863][ T7186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.645897][ T7186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.932132][ T7183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.932154][ T7183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.183562][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.183586][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.452081][T12307] 9p: Bad value for 'rfdno' [ 374.490012][T12303] loop4: detected capacity change from 0 to 32768 [ 374.532473][T12303] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 374.532496][T12303] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 374.620242][T12303] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 374.628989][ T942] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 374.629010][ T942] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 374.852208][ T942] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 223ms [ 374.913847][ T942] gfs2: fsid=syz:syz.0: jid=0: Done [ 374.913899][T12303] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 375.335784][T12331] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 375.589784][T12339] netlink: 'syz.8.1763': attribute type 1 has an invalid length. [ 375.769552][T12339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.835458][T12344] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.850904][ T9284] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 375.854463][T12344] bond1: (slave team0): Enslaving as a backup interface with an up link [ 376.020379][ T9284] usb 10-1: Using ep0 maxpacket: 16 [ 376.024097][ T9284] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 376.028757][ T9284] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 376.028792][ T9284] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 376.077252][ T9284] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.077284][ T9284] usb 10-1: Product: syz [ 376.077299][ T9284] usb 10-1: Manufacturer: syz [ 376.077314][ T9284] usb 10-1: SerialNumber: syz [ 376.109062][ T9284] usb 10-1: config 0 descriptor?? [ 376.135526][ T9284] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 376.135563][ T9284] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 376.732028][ T9284] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 376.736022][ T9284] em28xx 10-1:0.0: Config register raw data: 0xeb [ 376.736111][ T9284] em28xx 10-1:0.0: I2S Audio (1 sample rate(s)) [ 376.736127][ T9284] em28xx 10-1:0.0: No AC97 audio processor [ 377.394362][T12380] loop2: detected capacity change from 0 to 2048 [ 377.398997][ T9284] usb 10-1: USB disconnect, device number 9 [ 377.399702][T12380] ext2: Unknown parameter 'uid' [ 377.635843][ T32] audit: type=1800 audit(12336.950:414): pid=12347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1766" name="file1" dev="tmpfs" ino=1273 res=0 errno=0 [ 377.684913][T12387] af_packet: packet size is too long (65554 > 2016) [ 378.398112][T12412] loop8: detected capacity change from 0 to 4096 [ 378.450433][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 378.516747][T12412] ntfs3(loop8): Failed to load $Extend (-22). [ 378.516777][T12412] ntfs3(loop8): Failed to initialize $Extend. [ 378.601224][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 378.602406][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 378.604971][T12425] loop7: detected capacity change from 0 to 16384 [ 378.609281][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.609309][ T9] usb 5-1: Product: syz [ 378.609324][ T9] usb 5-1: Manufacturer: syz [ 378.609339][ T9] usb 5-1: SerialNumber: syz [ 378.658918][ T9] usb 5-1: config 0 descriptor?? [ 378.675592][ T9] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 378.790768][ T5745] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 378.881643][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.881710][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.931366][T12427] loop7: detected capacity change from 16384 to 0 [ 379.005274][ T32] audit: type=1800 audit(12338.320:415): pid=12412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1784" name="file2" dev="loop8" ino=31 res=0 errno=0 [ 379.908105][ T9] usb 5-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 380.132162][ T9] usb 5-1: USB disconnect, device number 8 [ 380.159297][ T9] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 380.180794][ T9] ssu100 5-1:0.0: device disconnected [ 380.725252][T12442] loop9: detected capacity change from 0 to 131072 [ 380.746567][T12442] F2FS-fs (loop9): Wrong secs_per_zone / total_sections (512, 24) [ 380.746598][T12442] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 380.746815][T12442] F2FS-fs (loop9): Test dummy encryption mode enabled [ 380.749017][T12442] F2FS-fs (loop9): invalid crc value [ 380.770093][ T5745] usb 9-1: unable to get BOS descriptor or descriptor too short [ 380.770147][ T5745] usb 9-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.40 [ 380.774036][ T5745] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 380.774069][ T5745] usb 9-1: can't read configurations, error -71 [ 380.907824][T12442] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 380.908957][T12442] loop9: lost filesystem error report for type 5 error -117 [ 380.927922][T12442] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 380.940835][T12442] F2FS-fs (loop9): f2fs_disable_checkpoint starts, unusable: 0 [ 380.940899][T12442] F2FS-fs (loop9): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 380.940955][T12442] F2FS-fs (loop9): Start checkpoint disabled! [ 380.954624][T12442] F2FS-fs (loop9): f2fs_disable_checkpoint finishes, err:0 [ 380.959875][T12442] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 380.960059][T12442] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 383.431613][ T5738] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 383.582784][ T5738] usb 9-1: Using ep0 maxpacket: 32 [ 383.586912][ T5738] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 383.590612][ T5738] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.685339][ T5738] usb 9-1: config 0 descriptor?? [ 383.716668][ T5738] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 384.504849][T12557] overlayfs: failed to clone upperpath [ 385.165356][ T5738] gspca_vc032x: reg_w err -71 [ 385.165442][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165456][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165466][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165476][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165486][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165495][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165505][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165515][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165524][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165533][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165543][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165553][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165563][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165572][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165581][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165589][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165598][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165608][ T5738] gspca_vc032x: I2c Bus Busy Wait 00 [ 385.165618][ T5738] gspca_vc032x: Unknown sensor... [ 385.165750][ T5738] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 385.175988][ T5738] usb 9-1: USB disconnect, device number 6 [ 385.396931][T12548] loop2: detected capacity change from 0 to 32768 [ 385.479409][T12548] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 385.619483][T12548] XFS (loop2): Ending clean mount [ 385.886258][T12548] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 385.886376][T12548] XFS (loop2): Unmount and run xfs_repair [ 385.886391][T12548] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 385.886409][T12548] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 385.886436][T12548] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 385.886452][T12548] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 385.886468][T12548] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 385.886484][T12548] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 385.886501][T12548] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 385.886517][T12548] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 385.886533][T12548] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 385.886551][T12548] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74 [ 385.891086][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 386.145437][T11871] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 386.233518][T11871] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 386.864061][T12598] syzkaller0: entered promiscuous mode [ 386.864090][T12598] syzkaller0: entered allmulticast mode [ 388.893624][T12645] loop2: detected capacity change from 0 to 32768 [ 388.896355][T12645] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1834 (12645) [ 388.980577][T12645] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 388.980712][T12645] BTRFS info (device loop2): using blake2b checksum algorithm [ 389.215553][T12645] BTRFS info (device loop2): enabling ssd optimizations [ 389.215583][T12645] BTRFS info (device loop2): turning on async discard [ 389.215619][T12645] BTRFS info (device loop2): enabling free space tree [ 389.218444][T12645] BTRFS info (device loop2): use zstd compression, level 3 [ 389.612857][T11871] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 392.377837][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 392.921377][ T5813] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 393.070264][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 393.073248][ T5813] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 393.074566][ T5813] usb 3-1: config 0 has no interfaces? [ 393.074603][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.109278][ T5813] usb 3-1: config 0 descriptor?? [ 393.376964][T12688] FAULT_INJECTION: forcing a failure. [ 393.376964][T12688] name failslab, interval 1, probability 0, space 0, times 0 [ 393.376999][T12688] CPU: 0 UID: 0 PID: 12688 Comm: syz.2.1845 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.377028][T12688] Tainted: [L]=SOFTLOCKUP [ 393.377035][T12688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.377047][T12688] Call Trace: [ 393.377057][T12688] [ 393.377067][T12688] dump_stack_lvl+0xe8/0x150 [ 393.377103][T12688] should_fail_ex+0x3eb/0x540 [ 393.377138][T12688] should_failslab+0xa8/0x100 [ 393.377172][T12688] __kmalloc_cache_noprof+0x9e/0x600 [ 393.377201][T12688] ? kobject_uevent_env+0x289/0x9e0 [ 393.377313][T12688] ? kobject_uevent_env+0x289/0x9e0 [ 393.377343][T12688] ? module_add_driver+0x31b/0x320 [ 393.377417][T12688] kobject_uevent_env+0x289/0x9e0 [ 393.377457][T12688] driver_register+0x2d4/0x320 [ 393.377507][T12688] usb_gadget_register_driver_owner+0xf9/0x270 [ 393.377606][T12688] raw_ioctl+0x1541/0x41c0 [ 393.377671][T12688] ? tomoyo_path_number_perm+0x219/0x5f0 [ 393.377747][T12688] ? do_vfs_ioctl+0x116f/0x1530 [ 393.377779][T12688] ? __pfx_raw_ioctl+0x10/0x10 [ 393.377814][T12688] ? hook_file_ioctl+0x1f2/0x600 [ 393.377893][T12688] ? __fget_files+0x2a/0x420 [ 393.377918][T12688] ? __fget_files+0x2a/0x420 [ 393.377939][T12688] ? __fget_files+0x3a2/0x420 [ 393.377959][T12688] ? __fget_files+0x2a/0x420 [ 393.377984][T12688] ? bpf_lsm_file_ioctl+0x9/0x20 [ 393.378004][T12688] ? __pfx_raw_ioctl+0x10/0x10 [ 393.378025][T12688] __se_sys_ioctl+0xfc/0x170 [ 393.378054][T12688] do_syscall_64+0x166/0x520 [ 393.378075][T12688] ? trace_irq_disable+0x3b/0x140 [ 393.378096][T12688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.378117][T12688] ? clear_bhb_loop+0x70/0xc0 [ 393.378143][T12688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.378163][T12688] RIP: 0033:0x7fc3cbb9ddeb [ 393.378184][T12688] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 393.378202][T12688] RSP: 002b:00007fc3ccaadf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.378225][T12688] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fc3cbb9ddeb [ 393.378240][T12688] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 393.378254][T12688] RBP: 00007fc3ccaaefd0 R08: 0000000000000001 R09: 00000000ffffffff [ 393.378269][T12688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.378282][T12688] R13: 00002000000001c0 R14: 0000000000000002 R15: 0000000000000868 [ 393.378313][T12688] [ 393.501610][ T1218] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 393.533418][T12688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.533782][T12688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.652250][ T5813] usb 3-1: USB disconnect, device number 15 [ 393.672017][ T1218] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 393.674124][ T1218] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 393.674216][ T1218] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.674262][ T1218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.011332][ T1218] usb 5-1: usb_control_msg returned -32 [ 394.011387][ T1218] usbtmc 5-1:16.0: can't read capabilities [ 394.054432][T12717] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 394.054456][T12717] binder: 12716:12717 ioctl 4018620d 2000000002c0 returned -1 [ 394.240026][T12723] loop9: detected capacity change from 0 to 128 [ 394.298000][T12723] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 394.359538][T12719] tipc: Started in network mode [ 394.359573][T12719] tipc: Node identity ac14140f, cluster identity 4711 [ 394.419865][T12719] tipc: New replicast peer: 255.255.255.255 [ 394.421259][T12719] tipc: Enabled bearer , priority 10 [ 394.429786][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 394.615590][T10205] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 394.632317][ T10] usb 5-1: USB disconnect, device number 9 [ 394.948922][T12745] syzkaller1: entered promiscuous mode [ 394.948947][T12745] syzkaller1: entered allmulticast mode [ 395.645434][ T9284] tipc: Node number set to 2886997007 [ 396.502526][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 397.966269][T12824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1884'. [ 398.133552][T12821] loop9: detected capacity change from 0 to 4096 [ 398.139515][T12830] loop2: detected capacity change from 0 to 512 [ 398.189566][T12833] fuse: fd is not a fuse device [ 398.207655][T12830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.249820][T12821] ntfs3(loop9): Failed to load $Extend (-22). [ 398.249850][T12821] ntfs3(loop9): Failed to initialize $Extend. [ 398.484677][T12841] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 3: comm syz.2.1887: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 399.018401][T12859] tipc: Started in network mode [ 399.018433][T12859] tipc: Node identity 0e82041f4ffc, cluster identity 4711 [ 399.018743][T12859] tipc: Enabled bearer , priority 10 [ 399.041111][T12858] tipc: Resetting bearer [ 399.108726][T12858] tipc: Disabling bearer [ 399.276750][T11871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.398916][T12914] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 401.204857][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1922'. [ 401.204894][T12945] netlink: 'syz.4.1922': attribute type 12 has an invalid length. [ 401.219447][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1922'. [ 401.219479][T12945] netlink: 'syz.4.1922': attribute type 12 has an invalid length. [ 401.236731][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.236804][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.236837][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.236877][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.300210][T12950] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 401.709223][ T5635] Bluetooth: hci5: unexpected event for opcode 0x0803 [ 401.811598][ T5738] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 401.814168][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 401.837384][T12966] loop2: detected capacity change from 0 to 64 [ 401.838462][T12966] hfs: Unknown parameter '18446744073709551615' [ 401.899119][T12966] syzkaller1: entered promiscuous mode [ 401.899143][T12966] syzkaller1: entered allmulticast mode [ 401.970310][ T5738] usb 10-1: Using ep0 maxpacket: 32 [ 401.971106][ T5738] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 401.972308][ T5738] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.972338][ T5738] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.972377][ T5738] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.974364][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40 [ 401.975671][ T10] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 401.975702][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 401.989747][ T10] usb 5-1: string descriptor 0 read error: -22 [ 401.990339][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.061097][ T5738] usb 10-1: config 0 descriptor?? [ 402.067355][T12958] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 402.151461][T12972] loop8: detected capacity change from 0 to 512 [ 402.189813][T12972] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.1934: iget: bad i_size value: 38620345925642 [ 402.194644][T12972] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 402.200839][T12972] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.1934: couldn't read orphan inode 15 (err -117) [ 402.200871][T12972] loop8: lost filesystem error report for type 5 error -117 [ 402.218221][T12972] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.356871][T12972] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.1934: bg 0: block 5: invalid block bitmap [ 402.439031][T12972] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 96 with error 28 [ 402.439070][T12972] EXT4-fs (loop8): This should not happen!! Data will be lost [ 402.439070][T12972] [ 402.439088][T12972] EXT4-fs (loop8): Total free blocks count 0 [ 402.439104][T12972] EXT4-fs (loop8): Free/Dirty block details [ 402.439189][T12972] EXT4-fs (loop8): free_blocks=0 [ 402.439234][T12972] EXT4-fs (loop8): dirty_blocks=100 [ 402.439250][T12972] EXT4-fs (loop8): Block reservation details [ 402.439264][T12972] EXT4-fs (loop8): i_reserved_data_blocks=100 [ 402.498341][T12974] EXT4-fs (loop8): shut down requested (0) [ 402.541887][ T10] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 402.541929][ T10] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 402.541954][ T10] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 402.541977][ T10] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 402.542000][ T10] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 402.542023][ T10] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 402.542047][ T10] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 402.542072][ T10] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 402.542097][ T10] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 402.542123][ T10] logitech 0003:046D:C29C.001C: unknown main item tag 0x0 [ 402.551635][ T5738] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 402.715802][ T10] logitech 0003:046D:C29C.001C: hidraw1: USB HID v0.22 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 402.732068][ T10] logitech 0003:046D:C29C.001C: no inputs found [ 402.831024][ T10] usb 5-1: USB disconnect, device number 10 [ 402.879941][ T9284] usb 10-1: USB disconnect, device number 10 [ 402.897135][T12979] fido_id[12979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 403.441223][T12990] loop4: detected capacity change from 0 to 8192 [ 403.653502][T12994] netlink: 'syz.9.1941': attribute type 8 has an invalid length. [ 403.653528][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1941'. [ 403.668532][T12994] veth1_to_team: entered promiscuous mode [ 403.670592][T12994] gretap0: entered promiscuous mode [ 403.690350][T12994] veth1_to_team: left promiscuous mode [ 403.700159][T12994] gretap0: left promiscuous mode [ 404.678305][T13022] loop9: detected capacity change from 0 to 512 [ 404.687965][T13022] EXT4-fs (loop9): Test dummy encryption mode enabled [ 404.687991][T13022] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 404.710345][T13022] EXT4-fs (loop9): 1 truncate cleaned up [ 404.735068][T13022] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.773616][ T32] audit: type=1804 audit(12364.090:416): pid=13022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1951" name="/newroot/93/file0/file1" dev="loop9" ino=15 res=1 errno=0 [ 404.930133][T10205] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.965459][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 405.122868][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 405.124887][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 405.125873][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.125900][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.125920][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 405.125956][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.188002][ T10] usb 5-1: config 0 descriptor?? [ 405.416672][T13026] loop4: detected capacity change from 0 to 256 [ 405.419044][T13026] exfat: Invalid uid '0x00000000ffffffff' [ 405.673964][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001D/input/input25 [ 405.759332][ T10] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 405.841811][ T10] usb 5-1: USB disconnect, device number 11 [ 405.926496][T13047] fuse: fd is not a fuse device [ 405.934255][T13043] fido_id[13043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 406.052758][ T32] audit: type=1326 audit(12365.370:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz.7.1960" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bb9e159 code=0x0 [ 406.296192][T13046] loop2: detected capacity change from 0 to 40427 [ 406.300536][T13046] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 406.300562][T13046] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 406.301705][T13046] F2FS-fs (loop2): invalid crc value [ 406.470100][T13046] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 406.474862][ T5738] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 406.517094][T13046] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 406.517128][T13046] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 406.640859][ T5738] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 406.642107][ T5738] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 406.642137][ T5738] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 128 [ 406.642172][ T5738] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.648856][T13052] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 406.649004][T13052] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 406.665893][ T5738] cyberjack 10-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 406.681482][ T5738] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 406.885298][ T5738] usb 10-1: USB disconnect, device number 11 [ 406.924625][ T5738] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 406.938555][ T5738] cyberjack 10-1:1.0: device disconnected [ 406.965212][ T32] audit: type=1326 audit(12366.270:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13065 comm="syz.7.1965" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bb9e159 code=0x7ffc0000 [ 406.965270][ T32] audit: type=1326 audit(12366.270:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13065 comm="syz.7.1965" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bb9e159 code=0x7ffc0000 [ 406.965314][ T32] audit: type=1326 audit(12366.280:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13065 comm="syz.7.1965" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bb9e159 code=0x7ffc0000 [ 406.965359][ T32] audit: type=1326 audit(12366.280:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13065 comm="syz.7.1965" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6b3bb9e159 code=0x7ffc0000 [ 406.965405][ T32] audit: type=1326 audit(12366.280:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13065 comm="syz.7.1965" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bb9e159 code=0x7ffc0000 [ 406.965469][ T32] audit: type=1326 audit(12366.280:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13065 comm="syz.7.1965" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bb9e159 code=0x7ffc0000 [ 406.965515][ T32] audit: type=1326 audit(12366.280:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13065 comm="syz.7.1965" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bb9e159 code=0x7ffc0000 [ 406.965558][ T32] audit: type=1326 audit(12366.280:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13065 comm="syz.7.1965" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bb9e159 code=0x7ffc0000 [ 407.316055][T13071] geneve2: left allmulticast mode [ 407.381425][T13073] geneve3: entered promiscuous mode [ 407.411290][ T36] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 20003 - 0 [ 407.411330][ T36] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 407.411818][ T36] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 407.411849][ T36] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 407.411884][ T36] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 407.411909][ T36] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 407.411940][ T36] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 20003 - 0 [ 407.411963][ T36] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 408.205836][T13084] overlayfs: failed to clone upperpath [ 408.209803][T13084] overlayfs: failed to clone upperpath [ 409.295434][T13112] FAULT_INJECTION: forcing a failure. [ 409.295434][T13112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.295471][T13112] CPU: 0 UID: 0 PID: 13112 Comm: syz.9.1980 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.295499][T13112] Tainted: [L]=SOFTLOCKUP [ 409.295508][T13112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.295521][T13112] Call Trace: [ 409.295530][T13112] [ 409.295540][T13112] dump_stack_lvl+0xe8/0x150 [ 409.295578][T13112] should_fail_ex+0x3eb/0x540 [ 409.295616][T13112] strncpy_from_user+0x36/0x2c0 [ 409.295650][T13112] do_getname+0x77/0x250 [ 409.295685][T13112] __se_sys_quotactl+0x1f1/0x9a0 [ 409.295752][T13112] ? __se_sys_futex+0x3a8/0x450 [ 409.295798][T13112] ? __pfx___se_sys_quotactl+0x10/0x10 [ 409.295830][T13112] ? rcu_is_watching+0x16/0xb0 [ 409.295873][T13112] do_syscall_64+0x166/0x520 [ 409.295897][T13112] ? trace_irq_disable+0x3b/0x140 [ 409.295920][T13112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.295942][T13112] ? clear_bhb_loop+0x70/0xc0 [ 409.295968][T13112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.295989][T13112] RIP: 0033:0x7fb0a6d9e159 [ 409.296010][T13112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.296033][T13112] RSP: 002b:00007fb0a7cbe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 409.296058][T13112] RAX: ffffffffffffffda RBX: 00007fb0a7025fa0 RCX: 00007fb0a6d9e159 [ 409.296074][T13112] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffff80000502 [ 409.296089][T13112] RBP: 00007fb0a6e3503b R08: 0000000000000000 R09: 0000000000000000 [ 409.296103][T13112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.296115][T13112] R13: 00007fb0a7026038 R14: 00007fb0a7025fa0 R15: 00007ffd00365bd8 [ 409.296158][T13112] [ 410.184905][T13133] FAULT_INJECTION: forcing a failure. [ 410.184905][T13133] name failslab, interval 1, probability 0, space 0, times 0 [ 410.184941][T13133] CPU: 0 UID: 0 PID: 13133 Comm: syz.4.1988 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.184970][T13133] Tainted: [L]=SOFTLOCKUP [ 410.184979][T13133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.184992][T13133] Call Trace: [ 410.185002][T13133] [ 410.185011][T13133] dump_stack_lvl+0xe8/0x150 [ 410.185050][T13133] should_fail_ex+0x3eb/0x540 [ 410.185088][T13133] should_failslab+0xa8/0x100 [ 410.185123][T13133] __kmalloc_noprof+0xf9/0x710 [ 410.185150][T13133] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 410.185186][T13133] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 410.185220][T13133] __memcg_list_lru_alloc+0x1d9/0x760 [ 410.185258][T13133] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 410.185303][T13133] __memcg_slab_post_alloc_hook+0x3c3/0xd90 [ 410.185335][T13133] ? __memcg_slab_post_alloc_hook+0x202/0xd90 [ 410.185381][T13133] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 410.185408][T13133] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 410.185433][T13133] ? proc_alloc_inode+0x2a/0xc0 [ 410.185459][T13133] ? proc_alloc_inode+0x2a/0xc0 [ 410.185493][T13133] ? __pfx_proc_alloc_inode+0x10/0x10 [ 410.185519][T13133] proc_alloc_inode+0x2a/0xc0 [ 410.185547][T13133] alloc_inode+0x6a/0x1b0 [ 410.185570][T13133] new_inode+0x1f/0x170 [ 410.185591][T13133] ? proc_get_inode+0x1a/0x6a0 [ 410.185622][T13133] proc_get_inode+0x22/0x6a0 [ 410.185649][T13133] ? proc_fill_super+0x525/0x760 [ 410.185680][T13133] proc_fill_super+0x53e/0x760 [ 410.185707][T13133] ? __pfx_proc_fill_super+0x10/0x10 [ 410.185739][T13133] get_tree_nodev+0xbb/0x150 [ 410.185768][T13133] vfs_get_tree+0x92/0x2a0 [ 410.185801][T13133] do_new_mount+0x319/0xdc0 [ 410.185830][T13133] ? __pfx_do_new_mount+0x10/0x10 [ 410.185855][T13133] ? ns_capable+0x84/0xe0 [ 410.185916][T13133] ? path_mount+0x647/0x1050 [ 410.185943][T13133] ? user_path_at+0xd4/0x160 [ 410.185971][T13133] __se_sys_mount+0x31d/0x420 [ 410.186002][T13133] ? __pfx___se_sys_mount+0x10/0x10 [ 410.186032][T13133] ? __x64_sys_mount+0x20/0xc0 [ 410.186058][T13133] do_syscall_64+0x166/0x520 [ 410.186081][T13133] ? trace_irq_disable+0x3b/0x140 [ 410.186104][T13133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.186126][T13133] ? clear_bhb_loop+0x70/0xc0 [ 410.186152][T13133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.186180][T13133] RIP: 0033:0x7fa69399e159 [ 410.186200][T13133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.186217][T13133] RSP: 002b:00007fa6948fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 410.186240][T13133] RAX: ffffffffffffffda RBX: 00007fa693c25fa0 RCX: 00007fa69399e159 [ 410.186256][T13133] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 410.186272][T13133] RBP: 00007fa693a3503b R08: 0000000000000000 R09: 0000000000000000 [ 410.186286][T13133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.186299][T13133] R13: 00007fa693c26038 R14: 00007fa693c25fa0 R15: 00007ffd567de6c8 [ 410.186335][T13133] [ 410.188682][T13133] proc_fill_super: get root inode failed [ 410.909423][T13139] FAULT_INJECTION: forcing a failure. [ 410.909423][T13139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.909461][T13139] CPU: 1 UID: 0 PID: 13139 Comm: syz.9.1989 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.909490][T13139] Tainted: [L]=SOFTLOCKUP [ 410.909497][T13139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.909509][T13139] Call Trace: [ 410.909518][T13139] [ 410.909529][T13139] dump_stack_lvl+0xe8/0x150 [ 410.909563][T13139] should_fail_ex+0x3eb/0x540 [ 410.909597][T13139] _copy_from_user+0x2d/0xb0 [ 410.909618][T13139] __ia32_sys_rt_sigreturn+0x362/0x8c0 [ 410.909690][T13139] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.909720][T13139] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 410.909755][T13139] ? _raw_spin_unlock_irq+0x2e/0x50 [ 410.909809][T13139] ? rcu_is_watching+0x16/0xb0 [ 410.909847][T13139] do_syscall_64+0x166/0x520 [ 410.909870][T13139] ? trace_irq_disable+0x3b/0x140 [ 410.909893][T13139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.909914][T13139] ? clear_bhb_loop+0x70/0xc0 [ 410.909940][T13139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.909961][T13139] RIP: 0033:0x7fb0a6d3f4d9 [ 410.909980][T13139] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 410.909998][T13139] RSP: 002b:00007fb0a7cbda80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 410.910022][T13139] RAX: ffffffffffffffda RBX: 00007fb0a7025fa0 RCX: 00007fb0a6d3f4d9 [ 410.910037][T13139] RDX: 00007fb0a7cbda80 RSI: 00007fb0a7cbdbb0 RDI: 0000000000000011 [ 410.910050][T13139] RBP: 00007fb0a6e3503b R08: 0000000000000000 R09: 0000000000000000 [ 410.910063][T13139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.910076][T13139] R13: 00007fb0a7026038 R14: 00007fb0a7025fa0 R15: 00007ffd00365bd8 [ 410.910108][T13139] [ 411.502093][ T5813] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 411.655526][ T5813] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 411.656988][ T5813] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 411.657022][ T5813] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 411.657063][ T5813] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.660270][T13117] Bluetooth: hci0: command 0x0406 tx timeout [ 411.740386][T13162] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 411.804446][ T5813] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 412.093844][ T32] kauditd_printk_skb: 26 callbacks suppressed [ 412.093866][ T32] audit: type=1800 audit(12371.400:452): pid=13173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1997" name="file1" dev="tmpfs" ino=268 res=0 errno=0 [ 412.355756][ T5813] usb 10-1: USB disconnect, device number 12 [ 412.466200][T13177] tipc: Started in network mode [ 412.466232][T13177] tipc: Node identity ac1414aa, cluster identity 4711 [ 412.466503][T13177] tipc: New replicast peer: 172.20.20.187 [ 412.466982][T13177] tipc: Enabled bearer , priority 10 [ 413.092539][T13194] loop9: detected capacity change from 0 to 512 [ 413.228973][T13194] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.291056][T13194] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 162332675 (only 1 groups) [ 413.461550][ T10] tipc: Node number set to 2886997162 [ 413.468672][T10205] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.797867][T13218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2008'. [ 414.203886][T13229] team0: Port device syz_tun added [ 419.771366][T13314] overlayfs: failed to clone upperpath [ 420.130613][T13117] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 420.139829][T13117] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 420.157665][T13117] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 420.173284][T13117] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 420.176067][T13117] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 420.666734][T13332] loop2: detected capacity change from 0 to 256 [ 421.208203][T13345] loop9: detected capacity change from 0 to 1024 [ 422.175000][T13365] loop9: detected capacity change from 0 to 512 [ 422.179002][T13365] EXT4-fs: Ignoring removed oldalloc option [ 422.193513][T13365] EXT4-fs (loop9): Test dummy encryption mode enabled [ 422.271866][T13365] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.300844][ T5623] Bluetooth: hci7: command tx timeout [ 422.527245][T10205] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.758038][T13384] loop9: detected capacity change from 0 to 1024 [ 422.771568][T13384] EXT4-fs (loop9): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 422.822112][T13384] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.933272][T10205] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.959553][T13389] FAULT_INJECTION: forcing a failure. [ 422.959553][T13389] name failslab, interval 1, probability 0, space 0, times 0 [ 422.959592][T13389] CPU: 1 UID: 0 PID: 13389 Comm: syz.2.2058 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.959622][T13389] Tainted: [L]=SOFTLOCKUP [ 422.959630][T13389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.959643][T13389] Call Trace: [ 422.959653][T13389] [ 422.959664][T13389] dump_stack_lvl+0xe8/0x150 [ 422.959701][T13389] should_fail_ex+0x3eb/0x540 [ 422.959736][T13389] should_failslab+0xa8/0x100 [ 422.959767][T13389] ? security_inode_alloc+0x39/0x310 [ 422.959856][T13389] kmem_cache_alloc_noprof+0x9c/0x600 [ 422.959887][T13389] ? security_inode_alloc+0x39/0x310 [ 422.959917][T13389] security_inode_alloc+0x39/0x310 [ 422.959943][T13389] inode_init_always_gfp+0x97e/0xd30 [ 422.959970][T13389] alloc_inode+0x82/0x1b0 [ 422.959993][T13389] path_from_stashed+0x205/0x580 [ 422.960027][T13389] pidfs_alloc_file+0xff/0x280 [ 422.960067][T13389] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 422.960102][T13389] pidfd_prepare+0xfd/0x170 [ 422.960133][T13389] __se_sys_pidfd_open+0xd5/0x260 [ 422.960158][T13389] ? __pfx___se_sys_pidfd_open+0x10/0x10 [ 422.960196][T13389] do_syscall_64+0x166/0x520 [ 422.960217][T13389] ? trace_irq_disable+0x3b/0x140 [ 422.960240][T13389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.960262][T13389] ? clear_bhb_loop+0x70/0xc0 [ 422.960288][T13389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.960309][T13389] RIP: 0033:0x7fc3cbb9e159 [ 422.960330][T13389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.960350][T13389] RSP: 002b:00007fc3ccab0018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 422.960374][T13389] RAX: ffffffffffffffda RBX: 00007fc3cbe25fa0 RCX: 00007fc3cbb9e159 [ 422.960390][T13389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000091 [ 422.960403][T13389] RBP: 00007fc3cbc3503b R08: 0000000000000000 R09: 0000000000000000 [ 422.960417][T13389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.960430][T13389] R13: 00007fc3cbe26038 R14: 00007fc3cbe25fa0 R15: 00007fff3bc9bf68 [ 422.960473][T13389] [ 423.796361][T13317] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.811288][T13317] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.811464][T13317] bridge_slave_0: entered allmulticast mode [ 423.840974][T13317] bridge_slave_0: entered promiscuous mode [ 423.859586][T13317] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.859720][T13317] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.862450][T13317] bridge_slave_1: entered allmulticast mode [ 423.876332][T13317] bridge_slave_1: entered promiscuous mode [ 424.069070][T13317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.093255][T13317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.278792][T13317] team0: Port device team_slave_0 added [ 424.304284][T13317] team0: Port device team_slave_1 added [ 424.390079][ T5623] Bluetooth: hci7: command tx timeout [ 424.441890][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 424.467893][T13317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.467911][T13317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.467927][T13317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.480434][T13317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.480450][T13317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.480472][T13317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.646577][T13317] hsr_slave_0: entered promiscuous mode [ 424.647737][T13317] hsr_slave_1: entered promiscuous mode [ 424.648600][T13317] debugfs: 'hsr0' already exists in 'hsr' [ 424.648622][T13317] Cannot create hsr debugfs directory [ 424.710778][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 425.231285][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 425.256921][T13423] ceph: No mds server is up or the cluster is laggy [ 425.260966][T13426] ceph: No mds server is up or the cluster is laggy [ 425.829133][T13437] loop9: detected capacity change from 0 to 32768 [ 425.894300][T13437] XFS (loop9): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 426.042474][T13437] XFS (loop9): Ending clean mount [ 426.056420][ T32] audit: type=1800 audit(12385.370:453): pid=13437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2072" name="file1" dev="loop9" ino=5766 res=0 errno=0 [ 426.357703][T13456] loop2: detected capacity change from 0 to 1024 [ 426.448437][T13456] EXT4-fs warning (device loop2): read_mmp_block:110: Error -117 while reading MMP block 64 [ 426.473970][ T5623] Bluetooth: hci7: command tx timeout [ 426.623176][T10205] XFS (loop9): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 427.032497][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 427.628947][T13474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2079'. [ 428.151334][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2084'. [ 428.541861][T13117] Bluetooth: hci7: command tx timeout [ 428.606277][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'. [ 428.606305][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2087'. [ 428.870848][T13502] FAULT_INJECTION: forcing a failure. [ 428.870848][T13502] name failslab, interval 1, probability 0, space 0, times 0 [ 428.870885][T13502] CPU: 0 UID: 0 PID: 13502 Comm: syz.4.2087 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.870915][T13502] Tainted: [L]=SOFTLOCKUP [ 428.870923][T13502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.870937][T13502] Call Trace: [ 428.870946][T13502] [ 428.870957][T13502] dump_stack_lvl+0xe8/0x150 [ 428.871010][T13502] should_fail_ex+0x3eb/0x540 [ 428.871059][T13502] should_failslab+0xa8/0x100 [ 428.871093][T13502] __kvmalloc_node_noprof+0x171/0x820 [ 428.871122][T13502] ? __kmalloc_cache_noprof+0x31c/0x600 [ 428.871149][T13502] ? alloc_netdev_mqs+0xd44/0x12a0 [ 428.871246][T13502] ? alloc_netdev_mqs+0xd44/0x12a0 [ 428.871285][T13502] alloc_netdev_mqs+0xd44/0x12a0 [ 428.871323][T13502] rtnl_create_link+0x321/0xd70 [ 428.871432][T13502] rtnl_newlink_create+0x258/0x7b0 [ 428.871468][T13502] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 428.871501][T13502] ? __pfx___mutex_lock+0x10/0x10 [ 428.871541][T13502] ? ns_capable+0x84/0xe0 [ 428.871577][T13502] rtnl_newlink+0x166d/0x1c30 [ 428.871621][T13502] ? __pfx_rtnl_newlink+0x10/0x10 [ 428.871643][T13502] ? do_syscall_64+0x166/0x520 [ 428.871666][T13502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.871737][T13502] ? kasan_quarantine_put+0xbb/0x1f0 [ 428.871764][T13502] ? lockdep_hardirqs_on+0x7b/0x110 [ 428.871793][T13502] ? nlmon_xmit+0xb0/0x100 [ 428.871864][T13502] ? kmem_cache_free+0x182/0x650 [ 428.871905][T13502] ? __lock_acquire+0x747/0x2de0 [ 428.871944][T13502] ? __local_bh_enable_ip+0xd6/0x140 [ 428.871973][T13502] ? lockdep_hardirqs_on+0x7b/0x110 [ 428.872004][T13502] ? __dev_queue_xmit+0x29b/0x3820 [ 428.872051][T13502] ? __local_bh_enable_ip+0xd6/0x140 [ 428.872077][T13502] ? __dev_queue_xmit+0x29b/0x3820 [ 428.872113][T13502] ? lock_acquire+0x115/0x350 [ 428.872157][T13502] ? __pfx_rtnl_newlink+0x10/0x10 [ 428.872180][T13502] rtnetlink_rcv_msg+0x802/0xc00 [ 428.872208][T13502] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 428.872231][T13502] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 428.872253][T13502] ? ref_tracker_free+0x689/0x830 [ 428.872277][T13502] ? __pfx_ref_tracker_free+0x10/0x10 [ 428.872297][T13502] ? __asan_memcpy+0x40/0x70 [ 428.872321][T13502] ? __skb_clone+0x5c/0x6c0 [ 428.872404][T13502] netlink_rcv_skb+0x226/0x4a0 [ 428.872485][T13502] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 428.872511][T13502] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.872554][T13502] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.872582][T13502] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.872618][T13502] netlink_unicast+0x7bd/0x940 [ 428.872655][T13502] netlink_sendmsg+0x7c3/0xae0 [ 428.872718][T13502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.872754][T13502] ? apparmor_socket_sendmsg+0x98/0x360 [ 428.872836][T13502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.872863][T13502] sock_sendmsg_nosec+0x13a/0x180 [ 428.872919][T13502] ____sys_sendmsg+0x54e/0x850 [ 428.872952][T13502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.872989][T13502] ? import_iovec+0x73/0xa0 [ 428.873015][T13502] ___sys_sendmsg+0x2a5/0x360 [ 428.873038][T13502] ? __lock_acquire+0x747/0x2de0 [ 428.873068][T13502] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.873107][T13502] ? futex_wait+0x2a2/0x390 [ 428.873163][T13502] ? __fget_files+0x2a/0x420 [ 428.873187][T13502] ? __fget_files+0x3a2/0x420 [ 428.873221][T13502] __x64_sys_sendmsg+0x1b1/0x290 [ 428.873252][T13502] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.873305][T13502] do_syscall_64+0x166/0x520 [ 428.873327][T13502] ? trace_irq_disable+0x3b/0x140 [ 428.873352][T13502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.873383][T13502] ? clear_bhb_loop+0x70/0xc0 [ 428.873410][T13502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.873432][T13502] RIP: 0033:0x7fa69399e159 [ 428.873454][T13502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.873471][T13502] RSP: 002b:00007fa6948fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.873497][T13502] RAX: ffffffffffffffda RBX: 00007fa693c25fa0 RCX: 00007fa69399e159 [ 428.873513][T13502] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 428.873527][T13502] RBP: 00007fa693a3503b R08: 0000000000000000 R09: 0000000000000000 [ 428.873540][T13502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.873554][T13502] R13: 00007fa693c26038 R14: 00007fa693c25fa0 R15: 00007ffd567de6c8 [ 428.873590][T13502] [ 428.916497][T13506] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 428.916523][T13506] overlayfs: failed to set xattr on upper [ 428.916531][T13506] overlayfs: ...falling back to redirect_dir=nofollow. [ 428.916539][T13506] overlayfs: ...falling back to index=off. [ 428.916546][T13506] overlayfs: ...falling back to uuid=null. [ 428.916561][T13506] overlayfs: maximum fs stacking depth exceeded [ 429.155324][T13513] netlink: 'syz.7.2090': attribute type 3 has an invalid length. [ 429.155344][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2090'. [ 429.654824][T13515] loop2: detected capacity change from 0 to 32768 [ 429.667197][T13515] (syz.2.2092,13515,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 429.667467][T13515] (syz.2.2092,13515,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 429.707274][T13515] JBD2: Ignoring recovery information on journal [ 429.757886][T13317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 429.788903][T13515] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 429.839105][T13317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.840517][T13317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 429.883614][T13317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.895032][T13317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 430.022700][T13317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.027161][T13317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 430.082875][T13317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.261627][T11871] ocfs2: Unmounting device (7,2) on (node local) [ 430.372434][T13317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.399824][T13317] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.429336][ T9074] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.429462][ T9074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.486461][ T9074] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.486574][ T9074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.640135][T13317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.235095][T13564] FAULT_INJECTION: forcing a failure. [ 431.235095][T13564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.235133][T13564] CPU: 0 UID: 0 PID: 13564 Comm: syz.9.2099 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.235162][T13564] Tainted: [L]=SOFTLOCKUP [ 431.235170][T13564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.235181][T13564] Call Trace: [ 431.235190][T13564] [ 431.235200][T13564] dump_stack_lvl+0xe8/0x150 [ 431.235238][T13564] should_fail_ex+0x3eb/0x540 [ 431.235273][T13564] _copy_to_user+0x31/0xb0 [ 431.235299][T13564] do_ip_getsockopt+0x1093/0x1d00 [ 431.235423][T13564] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 431.235441][T13564] ? futex_unqueue+0x22/0x240 [ 431.235470][T13564] ? aa_inet_opt_perm+0x94d/0xcd0 [ 431.235501][T13564] ? __lock_acquire+0x747/0x2de0 [ 431.235539][T13564] ? try_to_wake_up+0x8c5/0x14d0 [ 431.235582][T13564] ip_getsockopt+0xbb/0x230 [ 431.235611][T13564] ? __pfx_ip_getsockopt+0x10/0x10 [ 431.235633][T13564] ? __might_fault+0xaf/0x130 [ 431.235657][T13564] ? sctp_getsockopt+0x9b/0xb90 [ 431.235736][T13564] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 431.235768][T13564] do_sock_getsockopt+0x51d/0x7e0 [ 431.235800][T13564] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 431.235842][T13564] ? __fget_files+0x3a2/0x420 [ 431.235864][T13564] ? __fget_files+0x2a/0x420 [ 431.235891][T13564] __x64_sys_getsockopt+0x1a4/0x240 [ 431.235927][T13564] do_syscall_64+0x166/0x520 [ 431.235949][T13564] ? trace_irq_disable+0x3b/0x140 [ 431.235971][T13564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.235992][T13564] ? clear_bhb_loop+0x70/0xc0 [ 431.236019][T13564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.236039][T13564] RIP: 0033:0x7fb0a6d9e159 [ 431.236060][T13564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.236078][T13564] RSP: 002b:00007fb0a7cbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 431.236107][T13564] RAX: ffffffffffffffda RBX: 00007fb0a7025fa0 RCX: 00007fb0a6d9e159 [ 431.236123][T13564] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000003 [ 431.236134][T13564] RBP: 00007fb0a6e3503b R08: 0000200000000300 R09: 0000000000000000 [ 431.236146][T13564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.236159][T13564] R13: 00007fb0a7026038 R14: 00007fb0a7025fa0 R15: 00007ffd00365bd8 [ 431.236193][T13564] [ 431.256859][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2104'. [ 432.060655][T13578] loop9: detected capacity change from 0 to 32768 [ 432.061759][T13578] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 432.064859][T13578] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2101 (13578) [ 432.102010][T13578] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 432.102046][T13578] BTRFS info (device loop9): using sha256 checksum algorithm [ 432.389084][T13578] BTRFS info (device loop9): rebuilding free space tree [ 432.423215][T13578] BTRFS info (device loop9): disabling free space tree [ 432.423291][T13578] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 432.423343][T13578] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 432.444873][T13578] BTRFS info (device loop9): enabling ssd optimizations [ 432.444899][T13578] BTRFS info (device loop9): turning on async discard [ 432.444923][T13578] BTRFS info (device loop9): force clearing of disk cache [ 432.459477][T13317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.830675][T13317] veth0_vlan: entered promiscuous mode [ 432.982116][T13317] veth1_vlan: entered promiscuous mode [ 433.428323][T13317] veth0_macvtap: entered promiscuous mode [ 433.474495][T13317] veth1_macvtap: entered promiscuous mode [ 433.549523][T13317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.646436][T13317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.752160][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.753943][ T81] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.753983][ T81] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.754016][ T81] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.762603][T10205] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 433.838010][T13649] overlayfs: failed to clone upperpath [ 433.862993][T13646] loop2: detected capacity change from 0 to 2048 [ 434.038791][T13646] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 434.056184][T13646] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.177932][ T9074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.177957][ T9074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.266568][ T9074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.266592][ T9074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.440067][T13655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2115'. [ 434.825007][T13667] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2117'. [ 434.825037][T13667] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2117'. [ 435.491750][ T5724] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 435.644134][ T5724] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 435.645429][ T5724] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 435.645454][ T5724] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 435.645490][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.680269][ T5724] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 435.694751][ T5724] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 435.986230][T13708] CIFS: Attempting to mount //127.0.0.1/share [ 436.070254][T13684] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 436.070721][T13684] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 436.071013][T13684] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 436.173664][T13684] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 436.237030][T13718] loop9: detected capacity change from 0 to 512 [ 436.281459][T13681] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 436.284859][ T5745] usb 1-1: USB disconnect, device number 14 [ 436.309724][T13718] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.311477][ T5745] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 436.312136][ T5745] spcp8x5 1-1:1.0: device disconnected [ 436.472713][T10205] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.702489][T13728] loop9: detected capacity change from 0 to 2048 [ 436.826279][T13708] CIFS: VFS: Error connecting to socket. Aborting operation. [ 436.827341][T13708] CIFS: VFS: cifs_mount failed w/return code = -4 [ 436.975588][T13733] loop2: detected capacity change from 0 to 128 [ 437.032551][T13733] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 437.095126][T13728] loop9: detected capacity change from 0 to 4096 [ 437.139004][T13733] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 437.269559][T13733] fscrypt: key with identifier 7eb80af3f24ef086726a4cea3a154ce0 is too short (got 16 bytes, need 32+ bytes) [ 437.286080][T13728] ntfs3(loop9): Failed to load $Extend (-22). [ 437.286110][T13728] ntfs3(loop9): Failed to initialize $Extend. [ 437.445877][T11871] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 438.415911][T13786] FAULT_INJECTION: forcing a failure. [ 438.415911][T13786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.415945][T13786] CPU: 0 UID: 0 PID: 13786 Comm: syz.2.2151 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.415971][T13786] Tainted: [L]=SOFTLOCKUP [ 438.415978][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.415990][T13786] Call Trace: [ 438.415999][T13786] [ 438.416010][T13786] dump_stack_lvl+0xe8/0x150 [ 438.416047][T13786] should_fail_ex+0x3eb/0x540 [ 438.416082][T13786] _copy_to_user+0x31/0xb0 [ 438.416105][T13786] bpf_verifier_vlog+0x496/0x900 [ 438.416170][T13786] __btf_verifier_log+0xe2/0x140 [ 438.416208][T13786] ? __pfx___btf_verifier_log+0x10/0x10 [ 438.416249][T13786] __btf_verifier_log_type+0x4fd/0x6a0 [ 438.416290][T13786] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 438.416331][T13786] btf_datasec_check_meta+0x40e/0xad0 [ 438.416360][T13786] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 438.416393][T13786] btf_parse_type_sec+0x3cf/0x2360 [ 438.416423][T13786] ? btf_parse_hdr+0x1da/0x810 [ 438.416451][T13786] ? btf_parse_hdr+0x5f2/0x810 [ 438.416472][T13786] ? btf_parse_str_sec+0x244/0x2f0 [ 438.416500][T13786] btf_new_fd+0x487/0xbb0 [ 438.416531][T13786] __sys_bpf+0xd2e/0xd90 [ 438.416565][T13786] ? __pfx___sys_bpf+0x10/0x10 [ 438.416593][T13786] ? do_futex+0x3e7/0x4e0 [ 438.416650][T13786] ? rcu_is_watching+0x16/0xb0 [ 438.416683][T13786] __x64_sys_bpf+0xba/0xd0 [ 438.416708][T13786] do_syscall_64+0x166/0x520 [ 438.416731][T13786] ? trace_irq_disable+0x3b/0x140 [ 438.416753][T13786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.416774][T13786] ? clear_bhb_loop+0x70/0xc0 [ 438.416799][T13786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.416819][T13786] RIP: 0033:0x7fc3cbb9e159 [ 438.416840][T13786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.416863][T13786] RSP: 002b:00007fc3ccab0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 438.416887][T13786] RAX: ffffffffffffffda RBX: 00007fc3cbe25fa0 RCX: 00007fc3cbb9e159 [ 438.416913][T13786] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 438.416928][T13786] RBP: 00007fc3cbc3503b R08: 0000000000000000 R09: 0000000000000000 [ 438.416941][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.416955][T13786] R13: 00007fc3cbe26038 R14: 00007fc3cbe25fa0 R15: 00007fff3bc9bf68 [ 438.416989][T13786] [ 440.333707][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.333773][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.745461][T13829] loop9: detected capacity change from 0 to 40427 [ 440.763859][T13829] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 440.763887][T13829] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 440.783965][T13829] F2FS-fs (loop9): invalid crc value [ 441.088644][T13850] loop2: detected capacity change from 0 to 128 [ 441.243020][T13850] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 441.411304][T13829] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 441.475835][T13829] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 441.475877][T13829] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 441.816455][T13850] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 442.225431][T13850] fscrypt: Adiantum using blk-crypto-fallback [ 442.342309][T11871] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 443.003685][T13870] loop2: detected capacity change from 0 to 4096 [ 443.325201][ T32] audit: type=1800 audit(12402.640:454): pid=13870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2175" name="file1" dev="loop2" ino=34 res=0 errno=0 [ 443.726956][T13883] input: syz1 as /devices/virtual/input/input26 [ 443.952673][ T32] audit: type=1326 audit(12403.270:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.2.2180" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cbb9e159 code=0x7ffc0000 [ 443.952782][ T32] audit: type=1326 audit(12403.270:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.2.2180" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cbb9e159 code=0x7ffc0000 [ 443.953917][ T32] audit: type=1326 audit(12403.270:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.2.2180" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cbb9e159 code=0x7ffc0000 [ 443.954072][ T32] audit: type=1326 audit(12403.270:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.2.2180" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cbb9e159 code=0x7ffc0000 [ 443.954261][ T32] audit: type=1326 audit(12403.270:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.2.2180" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc3cbb9e159 code=0x7ffc0000 [ 443.954436][ T32] audit: type=1326 audit(12403.270:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.2.2180" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cbb9e159 code=0x7ffc0000 [ 443.954595][ T32] audit: type=1326 audit(12403.270:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.2.2180" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cbb9e159 code=0x7ffc0000 [ 443.955103][ T32] audit: type=1326 audit(12403.270:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.2.2180" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cbb9e159 code=0x7ffc0000 [ 443.955254][ T32] audit: type=1326 audit(12403.270:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13886 comm="syz.2.2180" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3cbb9e159 code=0x7ffc0000 [ 444.490016][ T10] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 444.642331][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 444.643568][ T10] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 444.646019][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 444.646124][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.709765][ T10] usb 10-1: config 0 descriptor?? [ 444.718243][T13889] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 445.178936][ T10] hid_parser_main: 2091 callbacks suppressed [ 445.179062][ T10] corsair-psu 0003:1B1C:1C0D.001E: unknown main item tag 0x0 [ 445.179096][ T10] corsair-psu 0003:1B1C:1C0D.001E: unknown main item tag 0x0 [ 445.179122][ T10] corsair-psu 0003:1B1C:1C0D.001E: unknown main item tag 0x0 [ 445.179147][ T10] corsair-psu 0003:1B1C:1C0D.001E: unknown main item tag 0x0 [ 445.179172][ T10] corsair-psu 0003:1B1C:1C0D.001E: unknown main item tag 0x0 [ 445.179196][ T10] corsair-psu 0003:1B1C:1C0D.001E: unknown main item tag 0x0 [ 445.179222][ T10] corsair-psu 0003:1B1C:1C0D.001E: unknown main item tag 0x0 [ 445.179248][ T10] corsair-psu 0003:1B1C:1C0D.001E: unknown main item tag 0x0 [ 445.179274][ T10] corsair-psu 0003:1B1C:1C0D.001E: unknown main item tag 0x0 [ 445.179299][ T10] corsair-psu 0003:1B1C:1C0D.001E: unknown main item tag 0x0 [ 445.198669][ T10] corsair-psu 0003:1B1C:1C0D.001E: unexpected long global item [ 445.199494][ T10] corsair-psu 0003:1B1C:1C0D.001E: probe with driver corsair-psu failed with error -22 [ 445.367503][ T9] usb 10-1: USB disconnect, device number 13 [ 446.311259][ T5745] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 446.483950][ T5745] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 446.485501][ T5745] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.485552][ T5745] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 446.485569][ T5745] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 446.485581][ T5745] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.485607][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.096098][ T5745] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 448.292428][T13929] loop9: detected capacity change from 0 to 32768 [ 448.309591][T13929] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2196 (13929) [ 448.358998][ T5745] gud 3-1:1.0: [drm] Cannot find any crtc or sizes [ 448.467351][T13929] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 448.467388][T13929] BTRFS info (device loop9): using sha256 checksum algorithm [ 448.537067][ T5745] usb 3-1: USB disconnect, device number 16 [ 448.770734][T13946] FAULT_INJECTION: forcing a failure. [ 448.770734][T13946] name failslab, interval 1, probability 0, space 0, times 0 [ 448.770775][T13946] CPU: 1 UID: 0 PID: 13946 Comm: syz.2.2198 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.770804][T13946] Tainted: [L]=SOFTLOCKUP [ 448.770813][T13946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.770826][T13946] Call Trace: [ 448.770834][T13946] [ 448.770845][T13946] dump_stack_lvl+0xe8/0x150 [ 448.770882][T13946] should_fail_ex+0x3eb/0x540 [ 448.770919][T13946] should_failslab+0xa8/0x100 [ 448.770954][T13946] __kmalloc_cache_noprof+0x9e/0x600 [ 448.770982][T13946] ? tipc_conn_alloc+0x57/0x4a0 [ 448.771087][T13946] ? tipc_conn_alloc+0x57/0x4a0 [ 448.771120][T13946] tipc_conn_alloc+0x57/0x4a0 [ 448.771146][T13946] tipc_topsrv_kern_subscr+0xf8/0x250 [ 448.771168][T13946] ? tipc_own_addr+0x45/0x2a0 [ 448.771193][T13946] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 448.771219][T13946] ? tipc_own_addr+0x45/0x2a0 [ 448.771245][T13946] ? __asan_memset+0x22/0x50 [ 448.771273][T13946] tipc_group_create+0x35b/0x4f0 [ 448.771304][T13946] tipc_sk_join+0x25d/0x6a0 [ 448.771331][T13946] ? __pfx_tipc_sk_join+0x10/0x10 [ 448.771380][T13946] ? tipc_setsockopt+0x731/0x9a0 [ 448.771414][T13946] ? __local_bh_enable_ip+0xd6/0x140 [ 448.771446][T13946] tipc_setsockopt+0x73e/0x9a0 [ 448.771484][T13946] ? __pfx_tipc_setsockopt+0x10/0x10 [ 448.771514][T13946] ? aa_sock_opt_perm+0x142/0x1e0 [ 448.771542][T13946] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 448.771571][T13946] ? __pfx_tipc_setsockopt+0x10/0x10 [ 448.771603][T13946] do_sock_setsockopt+0x17c/0x1b0 [ 448.771635][T13946] __x64_sys_setsockopt+0x13d/0x1b0 [ 448.771693][T13946] do_syscall_64+0x166/0x520 [ 448.771714][T13946] ? trace_irq_disable+0x3b/0x140 [ 448.771737][T13946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.771759][T13946] ? clear_bhb_loop+0x70/0xc0 [ 448.771785][T13946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.771806][T13946] RIP: 0033:0x7fc3cbb9e159 [ 448.771828][T13946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.771846][T13946] RSP: 002b:00007fc3ccab0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 448.771869][T13946] RAX: ffffffffffffffda RBX: 00007fc3cbe25fa0 RCX: 00007fc3cbb9e159 [ 448.771885][T13946] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 448.771898][T13946] RBP: 00007fc3cbc3503b R08: 00000000000004bd R09: 0000000000000000 [ 448.771912][T13946] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 448.771925][T13946] R13: 00007fc3cbe26038 R14: 00007fc3cbe25fa0 R15: 00007fff3bc9bf68 [ 448.771961][T13946] [ 448.807187][T13929] BTRFS info (device loop9): enabling ssd optimizations [ 448.807214][T13929] BTRFS info (device loop9): turning on async discard [ 448.807229][T13929] BTRFS info (device loop9): enabling free space tree [ 449.236017][T10205] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 451.888298][T13825] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2163'. [ 452.069052][T13961] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 452.620907][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 452.773093][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 452.774822][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.774856][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.774893][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.819898][ T9] usb 1-1: config 0 descriptor?? [ 453.266180][ T9] hid_parser_main: 366 callbacks suppressed [ 453.266208][ T9] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 453.266244][ T9] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 453.290945][ T9] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 453.290979][ T9] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 453.291003][ T9] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 453.291027][ T9] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 453.291050][ T9] pyra 0003:1E7D:2CF6.001F: unknown main item tag 0x0 [ 453.295859][ T9] pyra 0003:1E7D:2CF6.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 453.559742][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 453.569049][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 453.579578][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 453.587431][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 453.588171][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.625741][ T5745] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 453.816157][ T5745] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 453.817520][ T5745] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.817571][ T5745] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 453.817593][ T5745] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 453.817615][ T5745] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.817657][ T5745] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.284231][ T9] pyra 0003:1E7D:2CF6.001F: couldn't init struct pyra_device [ 454.284293][ T9] pyra 0003:1E7D:2CF6.001F: couldn't install mouse [ 454.286866][ T9] pyra 0003:1E7D:2CF6.001F: probe with driver pyra failed with error -71 [ 454.339664][ T9] usb 1-1: USB disconnect, device number 15 [ 454.681334][T14023] ip_tables: iptables: counters copy to user failed while replacing table [ 455.082182][ T5745] gud 10-1:1.0: USB-2: Failed to add properties (ret=-71) [ 455.082252][ T5745] gud 10-1:1.0: Failed to get connectors (error=-71) [ 455.082280][ T5745] gud 10-1:1.0: probe with driver gud failed with error -71 [ 455.132888][T14035] FAULT_INJECTION: forcing a failure. [ 455.132888][T14035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.132926][T14035] CPU: 1 UID: 0 PID: 14035 Comm: syz.0.2220 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.132954][T14035] Tainted: [L]=SOFTLOCKUP [ 455.132962][T14035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.132975][T14035] Call Trace: [ 455.132984][T14035] [ 455.132995][T14035] dump_stack_lvl+0xe8/0x150 [ 455.133032][T14035] should_fail_ex+0x3eb/0x540 [ 455.133067][T14035] _copy_to_user+0x31/0xb0 [ 455.133094][T14035] generic_map_lookup_batch+0xae9/0xf10 [ 455.133133][T14035] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 455.133157][T14035] ? __fget_files+0x2a/0x420 [ 455.133186][T14035] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 455.133211][T14035] bpf_map_do_batch+0x27f/0x630 [ 455.133248][T14035] ? bpf_lsm_bpf+0x9/0x20 [ 455.133268][T14035] ? security_bpf+0x7e/0x2d0 [ 455.133303][T14035] __sys_bpf+0xa9f/0xd90 [ 455.133338][T14035] ? __pfx___sys_bpf+0x10/0x10 [ 455.133368][T14035] ? do_futex+0x3e7/0x4e0 [ 455.133429][T14035] ? rcu_is_watching+0x16/0xb0 [ 455.133464][T14035] __x64_sys_bpf+0xba/0xd0 [ 455.133492][T14035] do_syscall_64+0x166/0x520 [ 455.133514][T14035] ? trace_irq_disable+0x3b/0x140 [ 455.133537][T14035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.133559][T14035] ? clear_bhb_loop+0x70/0xc0 [ 455.133585][T14035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.133606][T14035] RIP: 0033:0x7f1e8279e159 [ 455.133626][T14035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.133647][T14035] RSP: 002b:00007f1e8368e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 455.133673][T14035] RAX: ffffffffffffffda RBX: 00007f1e82a25fa0 RCX: 00007f1e8279e159 [ 455.133688][T14035] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 455.133703][T14035] RBP: 00007f1e8283503b R08: 0000000000000000 R09: 0000000000000000 [ 455.133716][T14035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.133729][T14035] R13: 00007f1e82a26038 R14: 00007f1e82a25fa0 R15: 00007fff9fc7a878 [ 455.133764][T14035] [ 455.199726][ T5745] usb 10-1: USB disconnect, device number 14 [ 455.350932][T14043] FAULT_INJECTION: forcing a failure. [ 455.350932][T14043] name failslab, interval 1, probability 0, space 0, times 0 [ 455.350964][T14043] CPU: 1 UID: 0 PID: 14043 Comm: syz.0.2222 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.350990][T14043] Tainted: [L]=SOFTLOCKUP [ 455.350998][T14043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.351009][T14043] Call Trace: [ 455.351017][T14043] [ 455.351027][T14043] dump_stack_lvl+0xe8/0x150 [ 455.351059][T14043] should_fail_ex+0x3eb/0x540 [ 455.351090][T14043] should_failslab+0xa8/0x100 [ 455.351121][T14043] __kvmalloc_node_noprof+0x171/0x820 [ 455.351147][T14043] ? __kvmalloc_node_noprof+0x340/0x820 [ 455.351170][T14043] ? bpf_check_cfg+0x1ad/0x3840 [ 455.351190][T14043] ? bpf_check_cfg+0x1ad/0x3840 [ 455.351216][T14043] bpf_check_cfg+0x1ad/0x3840 [ 455.351256][T14043] ? kasan_quarantine_put+0xbb/0x1f0 [ 455.351279][T14043] ? lockdep_hardirqs_on+0x7b/0x110 [ 455.351304][T14043] ? __pfx_bpf_check_cfg+0x10/0x10 [ 455.351324][T14043] ? bpf_prog_calc_tag+0x310/0x370 [ 455.351346][T14043] ? vfree+0x426/0x490 [ 455.351369][T14043] ? bpf_prog_calc_tag+0x310/0x370 [ 455.351396][T14043] ? check_and_resolve_insns+0x1d54/0x21d0 [ 455.351429][T14043] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 455.351455][T14043] ? add_kfuncs+0x251/0x2e0 [ 455.351481][T14043] bpf_check+0x24b6/0x2e40 [ 455.351514][T14043] ? ktime_get_with_offset+0x93/0x2d0 [ 455.351547][T14043] ? __pfx_bpf_check+0x10/0x10 [ 455.351572][T14043] ? bpf_obj_name_cpy+0x194/0x1e0 [ 455.351603][T14043] bpf_prog_load+0x14d1/0x1c20 [ 455.351638][T14043] ? __pfx_bpf_prog_load+0x10/0x10 [ 455.351675][T14043] ? __might_fault+0xaf/0x130 [ 455.351697][T14043] ? vfs_write+0x960/0xba0 [ 455.351726][T14043] __sys_bpf+0xd0d/0xd90 [ 455.351757][T14043] ? vfs_write+0x960/0xba0 [ 455.351778][T14043] ? __pfx___sys_bpf+0x10/0x10 [ 455.351806][T14043] ? do_futex+0x458/0x4e0 [ 455.351833][T14043] ? vfs_write+0x960/0xba0 [ 455.351878][T14043] ? rcu_is_watching+0x16/0xb0 [ 455.351908][T14043] __x64_sys_bpf+0xba/0xd0 [ 455.351932][T14043] do_syscall_64+0x166/0x520 [ 455.351951][T14043] ? trace_irq_disable+0x3b/0x140 [ 455.351971][T14043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.351990][T14043] ? clear_bhb_loop+0x70/0xc0 [ 455.352012][T14043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.352030][T14043] RIP: 0033:0x7f1e8279e159 [ 455.352049][T14043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.352064][T14043] RSP: 002b:00007f1e8368e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 455.352086][T14043] RAX: ffffffffffffffda RBX: 00007f1e82a25fa0 RCX: 00007f1e8279e159 [ 455.352099][T14043] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 455.352112][T14043] RBP: 00007f1e8283503b R08: 0000000000000000 R09: 0000000000000000 [ 455.352123][T14043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.352134][T14043] R13: 00007f1e82a26038 R14: 00007f1e82a25fa0 R15: 00007fff9fc7a878 [ 455.352164][T14043] [ 455.574380][T14037] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.575002][T14037] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.661866][T13117] Bluetooth: hci3: command tx timeout [ 455.922461][T14037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.951175][T14037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.392081][T14040] geneve2: entered promiscuous mode [ 456.604284][T13998] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.604410][T13998] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.604560][T13998] bridge_slave_0: entered allmulticast mode [ 456.617548][T13998] bridge_slave_0: entered promiscuous mode [ 456.649924][T13998] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.650149][T13998] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.650331][T13998] bridge_slave_1: entered allmulticast mode [ 456.654357][T13998] bridge_slave_1: entered promiscuous mode [ 456.749673][T13998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.768212][T13998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.822361][T13998] team0: Port device team_slave_0 added [ 456.826201][T13998] team0: Port device team_slave_1 added [ 456.891028][T14085] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 456.892239][T13998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.892255][T13998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.892279][T13998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.894424][T13998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.894437][T13998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.894461][T13998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.060712][T13998] hsr_slave_0: entered promiscuous mode [ 457.062053][T13998] hsr_slave_1: entered promiscuous mode [ 457.063068][T13998] debugfs: 'hsr0' already exists in 'hsr' [ 457.063089][T13998] Cannot create hsr debugfs directory [ 457.465366][T14100] FAULT_INJECTION: forcing a failure. [ 457.465366][T14100] name failslab, interval 1, probability 0, space 0, times 0 [ 457.465403][T14100] CPU: 0 UID: 0 PID: 14100 Comm: syz.4.2236 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.465431][T14100] Tainted: [L]=SOFTLOCKUP [ 457.465438][T14100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.465450][T14100] Call Trace: [ 457.465460][T14100] [ 457.465470][T14100] dump_stack_lvl+0xe8/0x150 [ 457.465508][T14100] should_fail_ex+0x3eb/0x540 [ 457.465545][T14100] should_failslab+0xa8/0x100 [ 457.465577][T14100] __kmalloc_cache_noprof+0x9e/0x600 [ 457.465613][T14100] ? nsim_fib_event_nb+0x185/0x11d0 [ 457.465760][T14100] ? nsim_fib_event_nb+0x185/0x11d0 [ 457.465795][T14100] nsim_fib_event_nb+0x185/0x11d0 [ 457.465826][T14100] ? lock_acquire+0x115/0x350 [ 457.465856][T14100] notifier_call_chain+0x1a5/0x3d0 [ 457.465884][T14100] ? atomic_notifier_call_chain+0x26/0x180 [ 457.465909][T14100] atomic_notifier_call_chain+0xda/0x180 [ 457.465935][T14100] call_fib_notifiers+0x31/0x60 [ 457.465988][T14100] fib6_del+0xf72/0x15a0 [ 457.466051][T14100] ? fib6_del+0x1131/0x15a0 [ 457.466091][T14100] ? __pfx_fib6_del+0x10/0x10 [ 457.466114][T14100] ? do_raw_spin_lock+0x12b/0x2f0 [ 457.466154][T14100] ? __ip6_del_rt+0x8e/0x180 [ 457.466200][T14100] __ip6_del_rt+0x9b/0x180 [ 457.466225][T14100] ip6_del_rt+0xc3/0x120 [ 457.466247][T14100] ? __pfx_ip6_del_rt+0x10/0x10 [ 457.466266][T14100] ? addrconf_leave_solict+0xd0/0x1a0 [ 457.466341][T14100] ? __local_bh_enable_ip+0xd6/0x140 [ 457.466374][T14100] __ipv6_dev_ac_dec+0x57f/0x660 [ 457.466419][T14100] __ipv6_sock_ac_close+0x23f/0x420 [ 457.466456][T14100] inet6_release+0x4f/0x70 [ 457.466483][T14100] __sock_release+0xa0/0x1f0 [ 457.466533][T14100] ? __pfx_sock_close+0x10/0x10 [ 457.466562][T14100] sock_close+0x1c/0x30 [ 457.466601][T14100] __fput+0x413/0xa50 [ 457.466632][T14100] fput_close_sync+0x11f/0x240 [ 457.466653][T14100] ? __pfx_fput_close_sync+0x10/0x10 [ 457.466688][T14100] __x64_sys_close+0x7e/0x110 [ 457.466711][T14100] do_syscall_64+0x166/0x520 [ 457.466734][T14100] ? trace_irq_disable+0x3b/0x140 [ 457.466757][T14100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.466779][T14100] ? clear_bhb_loop+0x70/0xc0 [ 457.466806][T14100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.466827][T14100] RIP: 0033:0x7fa69399e159 [ 457.466848][T14100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.466864][T14100] RSP: 002b:00007fa6948fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 457.466885][T14100] RAX: ffffffffffffffda RBX: 00007fa693c25fa0 RCX: 00007fa69399e159 [ 457.466899][T14100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 457.466912][T14100] RBP: 00007fa693a3503b R08: 0000000000000000 R09: 0000000000000000 [ 457.466926][T14100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.466939][T14100] R13: 00007fa693c26038 R14: 00007fa693c25fa0 R15: 00007ffd567de6c8 [ 457.466973][T14100] [ 457.740325][T13117] Bluetooth: hci3: command tx timeout [ 457.983347][T13371] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.983403][T13371] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.983439][T13371] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.983472][T13371] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.133299][T14120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2242'. [ 458.860275][T13117] Bluetooth: hci0: command 0x0406 tx timeout [ 459.489807][ T5631] udevd[5631]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 459.826594][T13117] Bluetooth: hci3: command tx timeout [ 460.255828][T14177] uprobe: syz.7.2254:14177 failed to unregister, leaking uprobe [ 460.867459][T14198] loop9: detected capacity change from 0 to 16 [ 460.923956][T14198] erofs (device loop9): mounted with root inode @ nid 36. [ 461.175929][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'. [ 461.339070][T14203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.432765][T14203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.902085][T13117] Bluetooth: hci3: command tx timeout [ 462.266399][T13998] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 462.318096][T13998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.325425][T13998] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 462.347161][T13998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.355887][T13998] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 462.391943][T13998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.403209][T13998] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 462.441746][T13998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.495846][T14211] loop9: detected capacity change from 0 to 32768 [ 462.544290][T14211] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 462.650860][T14211] XFS (loop9): Ending clean mount [ 462.932914][T13998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.006331][T13998] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.040415][T10205] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 463.046032][T13371] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.046177][T13371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.105926][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.106043][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.501651][T14270] overlayfs: failed to clone upperpath [ 464.452190][T14301] netlink: 'syz.0.2286': attribute type 10 has an invalid length. [ 464.628216][T14306] veth1_to_bond: entered allmulticast mode [ 464.628527][T14306] veth1_to_bond: entered promiscuous mode [ 464.646781][T14306] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2289'. [ 464.665718][T14306] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.692882][T14306] bridge_slave_0 (unregistering): left allmulticast mode [ 464.692912][T14306] bridge_slave_0 (unregistering): left promiscuous mode [ 464.693009][T14306] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.831933][T14305] veth1_to_bond: left promiscuous mode [ 464.832264][T14305] veth1_to_bond: left allmulticast mode [ 465.236329][T14329] fuse: Bad value for 'fd' [ 465.396007][T13998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.531434][ T5745] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 465.681316][ T5745] usb 1-1: Using ep0 maxpacket: 8 [ 465.685161][ T5745] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 465.700378][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.700405][ T5745] usb 1-1: Product: syz [ 465.700418][ T5745] usb 1-1: Manufacturer: syz [ 465.700431][ T5745] usb 1-1: SerialNumber: syz [ 465.713047][ T5745] usb 1-1: config 0 descriptor?? [ 465.734884][ T5745] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 466.859745][T14363] loop9: detected capacity change from 0 to 1764 [ 467.064204][ T5745] input: sonixj as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 467.068835][T13998] veth0_vlan: entered promiscuous mode [ 467.205755][T13998] veth1_vlan: entered promiscuous mode [ 467.385582][T13998] veth0_macvtap: entered promiscuous mode [ 467.412099][T13998] veth1_macvtap: entered promiscuous mode [ 467.474912][T13998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.538744][T13998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.612909][ T5745] usb 1-1: USB disconnect, device number 16 [ 467.684452][ T7185] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.684511][ T7185] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.900385][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.993375][ T7184] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.426909][ T9074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.426933][ T9074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.854689][ T7184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.854714][ T7184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.852829][T14422] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2319'. [ 469.852859][T14422] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2319'. [ 470.407339][T14444] FAULT_INJECTION: forcing a failure. [ 470.407339][T14444] name failslab, interval 1, probability 0, space 0, times 0 [ 470.407378][T14444] CPU: 1 UID: 0 PID: 14444 Comm: syz.9.2325 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.407406][T14444] Tainted: [L]=SOFTLOCKUP [ 470.407415][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 470.407427][T14444] Call Trace: [ 470.407436][T14444] [ 470.407446][T14444] dump_stack_lvl+0xe8/0x150 [ 470.407497][T14444] should_fail_ex+0x3eb/0x540 [ 470.407533][T14444] should_failslab+0xa8/0x100 [ 470.407567][T14444] __kmalloc_noprof+0xf9/0x710 [ 470.407588][T14444] ? __lock_acquire+0x747/0x2de0 [ 470.407612][T14444] ? dev_prep_valid_name+0x1bc/0x640 [ 470.407706][T14444] ? dev_prep_valid_name+0x1bc/0x640 [ 470.407744][T14444] dev_prep_valid_name+0x1bc/0x640 [ 470.407772][T14444] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 470.407851][T14444] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 470.407891][T14444] ? __raw_spin_lock_init+0x45/0x100 [ 470.407925][T14444] register_netdevice+0x52b/0x1eb0 [ 470.407954][T14444] ? __asan_memset+0x22/0x50 [ 470.407978][T14444] ? _get_random_bytes+0x1e7/0x260 [ 470.408043][T14444] ? __pfx_register_netdevice+0x10/0x10 [ 470.408071][T14444] ? __hw_addr_insert+0x1f8/0x220 [ 470.408101][T14444] ? dev_addr_mod+0x174/0x350 [ 470.408132][T14444] ? dev_addr_mod+0x1ba/0x350 [ 470.408164][T14444] ip6gre_newlink_common+0x403/0x5b0 [ 470.408222][T14444] ? __pfx_ip6gre_newlink_common+0x10/0x10 [ 470.408242][T14444] ? lockdep_rtnl_is_held+0x26/0x40 [ 470.408269][T14444] ? ip6gre_tunnel_find+0x500/0x5a0 [ 470.408302][T14444] ip6gre_newlink+0x23a/0x5f0 [ 470.408336][T14444] ? __pfx_ip6gre_newlink+0x10/0x10 [ 470.408367][T14444] rtnl_newlink_create+0x305/0x7b0 [ 470.408400][T14444] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 470.408430][T14444] ? __pfx___mutex_lock+0x10/0x10 [ 470.408466][T14444] ? ns_capable+0x84/0xe0 [ 470.408508][T14444] rtnl_newlink+0x166d/0x1c30 [ 470.408550][T14444] ? __pfx_rtnl_newlink+0x10/0x10 [ 470.408571][T14444] ? do_syscall_64+0x166/0x520 [ 470.408592][T14444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.408656][T14444] ? kasan_quarantine_put+0xbb/0x1f0 [ 470.408683][T14444] ? lockdep_hardirqs_on+0x7b/0x110 [ 470.408709][T14444] ? nlmon_xmit+0xb0/0x100 [ 470.408726][T14444] ? kmem_cache_free+0x182/0x650 [ 470.408763][T14444] ? __lock_acquire+0x747/0x2de0 [ 470.408796][T14444] ? __local_bh_enable_ip+0xd6/0x140 [ 470.408822][T14444] ? lockdep_hardirqs_on+0x7b/0x110 [ 470.408841][T14444] ? __dev_queue_xmit+0x29b/0x3820 [ 470.408866][T14444] ? __local_bh_enable_ip+0xd6/0x140 [ 470.408891][T14444] ? __dev_queue_xmit+0x29b/0x3820 [ 470.408926][T14444] ? lock_acquire+0x115/0x350 [ 470.408966][T14444] ? __pfx_rtnl_newlink+0x10/0x10 [ 470.408987][T14444] rtnetlink_rcv_msg+0x802/0xc00 [ 470.409014][T14444] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 470.409036][T14444] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 470.409056][T14444] ? ref_tracker_free+0x689/0x830 [ 470.409080][T14444] ? __pfx_ref_tracker_free+0x10/0x10 [ 470.409100][T14444] ? __asan_memcpy+0x40/0x70 [ 470.409124][T14444] ? __skb_clone+0x5c/0x6c0 [ 470.409157][T14444] netlink_rcv_skb+0x226/0x4a0 [ 470.409197][T14444] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 470.409221][T14444] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 470.409264][T14444] ? netlink_deliver_tap+0x2e/0x1b0 [ 470.409292][T14444] ? netlink_deliver_tap+0x2e/0x1b0 [ 470.409325][T14444] netlink_unicast+0x7bd/0x940 [ 470.409363][T14444] netlink_sendmsg+0x7c3/0xae0 [ 470.409396][T14444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.409435][T14444] ? apparmor_socket_sendmsg+0x98/0x360 [ 470.409468][T14444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.409504][T14444] sock_sendmsg_nosec+0x13a/0x180 [ 470.409538][T14444] ____sys_sendmsg+0x54e/0x850 [ 470.409570][T14444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.409607][T14444] ? import_iovec+0x73/0xa0 [ 470.409634][T14444] ___sys_sendmsg+0x2a5/0x360 [ 470.409657][T14444] ? __lock_acquire+0x747/0x2de0 [ 470.409686][T14444] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.409717][T14444] ? futex_wait+0x2a2/0x390 [ 470.409774][T14444] ? __fget_files+0x2a/0x420 [ 470.409796][T14444] ? __fget_files+0x3a2/0x420 [ 470.409831][T14444] __x64_sys_sendmsg+0x1b1/0x290 [ 470.409858][T14444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 470.409902][T14444] do_syscall_64+0x166/0x520 [ 470.409923][T14444] ? trace_irq_disable+0x3b/0x140 [ 470.409946][T14444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.409968][T14444] ? clear_bhb_loop+0x70/0xc0 [ 470.409993][T14444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.410015][T14444] RIP: 0033:0x7fb0a6d9e159 [ 470.410037][T14444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.410053][T14444] RSP: 002b:00007fb0a7cbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.410078][T14444] RAX: ffffffffffffffda RBX: 00007fb0a7025fa0 RCX: 00007fb0a6d9e159 [ 470.410093][T14444] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 470.410106][T14444] RBP: 00007fb0a6e3503b R08: 0000000000000000 R09: 0000000000000000 [ 470.410120][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.410133][T14444] R13: 00007fb0a7026038 R14: 00007fb0a7025fa0 R15: 00007ffd00365bd8 [ 470.410168][T14444] [ 471.486443][ T9074] IPVS: starting estimator thread 0... [ 471.569983][T14483] IPVS: using max 27 ests per chain, 64800 per kthread [ 473.020541][T13117] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 473.111040][T13117] Bluetooth: hci6: command 0x0406 tx timeout [ 473.614140][T14504] loop9: detected capacity change from 0 to 512 [ 473.618074][T14504] udf: Unknown parameter 'session500000000000000000005' [ 473.908794][T14532] FAULT_INJECTION: forcing a failure. [ 473.908794][T14532] name failslab, interval 1, probability 0, space 0, times 0 [ 473.908830][T14532] CPU: 1 UID: 0 PID: 14532 Comm: syz.6.2347 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.908861][T14532] Tainted: [L]=SOFTLOCKUP [ 473.908870][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.908882][T14532] Call Trace: [ 473.908891][T14532] [ 473.908901][T14532] dump_stack_lvl+0xe8/0x150 [ 473.908938][T14532] should_fail_ex+0x3eb/0x540 [ 473.908973][T14532] should_failslab+0xa8/0x100 [ 473.908999][T14532] ? mas_alloc_nodes+0x291/0x350 [ 473.909023][T14532] kmem_cache_alloc_noprof+0x9c/0x600 [ 473.909051][T14532] ? mas_alloc_nodes+0x291/0x350 [ 473.909078][T14532] mas_alloc_nodes+0x291/0x350 [ 473.909104][T14532] mas_preallocate+0x42a/0x840 [ 473.909124][T14532] ? rcu_is_watching+0x16/0xb0 [ 473.909151][T14532] ? trace_kmem_cache_alloc+0x29/0xe0 [ 473.909176][T14532] ? __pfx_mas_preallocate+0x10/0x10 [ 473.909213][T14532] ? anon_vma_name+0x61/0x210 [ 473.909244][T14532] ? __mas_set_range+0x11a/0x3a0 [ 473.909269][T14532] __split_vma+0x2fb/0xa60 [ 473.909300][T14532] ? __pfx___split_vma+0x10/0x10 [ 473.909336][T14532] ? kernel_text_address+0xa5/0xe0 [ 473.909360][T14532] ? __kernel_text_address+0xd/0x30 [ 473.909393][T14532] vma_modify+0x887/0x1f40 [ 473.909436][T14532] vma_modify_flags_uffd+0x2a5/0x360 [ 473.909469][T14532] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 473.909516][T14532] ? __pfx_vma_can_userfault+0x10/0x10 [ 473.909551][T14532] userfaultfd_register_range+0x3f8/0x5e0 [ 473.909585][T14532] ? __pfx_userfaultfd_register_range+0x10/0x10 [ 473.909623][T14532] ? mas_find+0x44e/0xcb0 [ 473.909649][T14532] userfaultfd_register+0xa80/0xc90 [ 473.909683][T14532] ? __pfx_userfaultfd_register+0x10/0x10 [ 473.909709][T14532] ? hook_file_ioctl+0x1f2/0x600 [ 473.909760][T14532] userfaultfd_ioctl+0x261/0x560 [ 473.909782][T14532] ? __fget_files+0x2a/0x420 [ 473.909808][T14532] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 473.909826][T14532] ? __fget_files+0x2a/0x420 [ 473.909849][T14532] ? __fget_files+0x3a2/0x420 [ 473.909868][T14532] ? __fget_files+0x2a/0x420 [ 473.909892][T14532] ? bpf_lsm_file_ioctl+0x9/0x20 [ 473.909912][T14532] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 473.909932][T14532] __se_sys_ioctl+0xfc/0x170 [ 473.909962][T14532] do_syscall_64+0x166/0x520 [ 473.909984][T14532] ? trace_irq_disable+0x3b/0x140 [ 473.910006][T14532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.910027][T14532] ? clear_bhb_loop+0x70/0xc0 [ 473.910051][T14532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.910072][T14532] RIP: 0033:0x7f867cd9e159 [ 473.910093][T14532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.910109][T14532] RSP: 002b:00007f867db99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.910133][T14532] RAX: ffffffffffffffda RBX: 00007f867d025fa0 RCX: 00007f867cd9e159 [ 473.910148][T14532] RDX: 0000200000000080 RSI: 00000000c020aa00 RDI: 0000000000000003 [ 473.910163][T14532] RBP: 00007f867ce3503b R08: 0000000000000000 R09: 0000000000000000 [ 473.910176][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.910189][T14532] R13: 00007f867d026038 R14: 00007f867d025fa0 R15: 00007ffc831d56d8 [ 473.910224][T14532] [ 474.394079][T14540] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 474.394079][T14540] [ 474.394372][T14540] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 474.394502][T14540] CIFS: Attempting to mount //127.0.0.1/share [ 474.490261][ T32] kauditd_printk_skb: 2471 callbacks suppressed [ 474.490283][ T32] audit: type=1326 audit(12433.810:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14545 comm="syz.9.2351" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a6d9e159 code=0x7ffc0000 [ 474.490552][ T32] audit: type=1326 audit(12433.810:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14545 comm="syz.9.2351" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a6d9e159 code=0x7ffc0000 [ 474.499725][ T32] audit: type=1326 audit(12433.810:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14545 comm="syz.9.2351" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb0a6d9e159 code=0x7ffc0000 [ 474.501463][ T32] audit: type=1326 audit(12433.820:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14545 comm="syz.9.2351" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a6d9e159 code=0x7ffc0000 [ 474.501996][ T32] audit: type=1326 audit(12433.820:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14545 comm="syz.9.2351" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a6d9e159 code=0x7ffc0000 [ 474.503185][ T32] audit: type=1326 audit(12433.820:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14545 comm="syz.9.2351" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb0a6d9e159 code=0x7ffc0000 [ 474.512766][ T32] audit: type=1326 audit(12433.830:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14545 comm="syz.9.2351" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a6d9e159 code=0x7ffc0000 [ 474.512979][ T32] audit: type=1326 audit(12433.830:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14545 comm="syz.9.2351" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a6d9e159 code=0x7ffc0000 [ 474.517407][ T32] audit: type=1326 audit(12433.830:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14545 comm="syz.9.2351" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fb0a6d9e159 code=0x7ffc0000 [ 474.517635][ T32] audit: type=1326 audit(12433.830:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14545 comm="syz.9.2351" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a6d9e159 code=0x7ffc0000 [ 474.519820][T14540] CIFS: VFS: Error connecting to socket. Aborting operation. [ 474.576429][T14540] CIFS: VFS: cifs_mount failed w/return code = -111 [ 476.397832][T14593] trusted_key: encrypted_key: master key parameter 'defaultweF}4T@"Tr0fQt' is invalid [ 476.465532][T14598] FAULT_INJECTION: forcing a failure. [ 476.465532][T14598] name failslab, interval 1, probability 0, space 0, times 0 [ 476.465568][T14598] CPU: 1 UID: 0 PID: 14598 Comm: syz.0.2366 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.465598][T14598] Tainted: [L]=SOFTLOCKUP [ 476.465606][T14598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.465619][T14598] Call Trace: [ 476.465628][T14598] [ 476.465638][T14598] dump_stack_lvl+0xe8/0x150 [ 476.465675][T14598] should_fail_ex+0x3eb/0x540 [ 476.465712][T14598] should_failslab+0xa8/0x100 [ 476.465746][T14598] __kmalloc_noprof+0xf9/0x710 [ 476.465772][T14598] ? rcu_is_watching+0x16/0xb0 [ 476.465798][T14598] ? handler_new_ref+0x244/0x930 [ 476.465868][T14598] ? handler_new_ref+0x244/0x930 [ 476.465900][T14598] handler_new_ref+0x244/0x930 [ 476.465932][T14598] ? __pfx_v4l2_ctrl_type_op_init+0x10/0x10 [ 476.465959][T14598] v4l2_ctrl_new+0x1395/0x1820 [ 476.465999][T14598] v4l2_ctrl_new_std+0x24e/0x300 [ 476.466039][T14598] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 476.466065][T14598] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 476.466106][T14598] ? find_ref_lock+0x425/0x480 [ 476.466136][T14598] handler_new_ref+0x153/0x930 [ 476.466170][T14598] ? __pfx_v4l2_ctrl_type_op_init+0x10/0x10 [ 476.466197][T14598] v4l2_ctrl_new+0x1395/0x1820 [ 476.466237][T14598] v4l2_ctrl_new_std+0x24e/0x300 [ 476.466278][T14598] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 476.466310][T14598] ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0 [ 476.466340][T14598] ? v4l2_ctrl_handler_init_class+0x1b3/0x2e0 [ 476.466370][T14598] ? __kvmalloc_node_noprof+0x340/0x820 [ 476.466410][T14598] ? v4l2_ctrl_handler_init_class+0x20d/0x2e0 [ 476.466438][T14598] vicodec_open+0x219/0xbf0 [ 476.466533][T14598] v4l2_open+0x1bc/0x3a0 [ 476.466608][T14598] chrdev_open+0x4d9/0x600 [ 476.466641][T14598] ? __pfx_chrdev_open+0x10/0x10 [ 476.466673][T14598] ? devcgroup_check_permission+0x31/0x8f0 [ 476.466707][T14598] ? __pfx_chrdev_open+0x10/0x10 [ 476.466736][T14598] do_dentry_open+0x80e/0x1360 [ 476.466779][T14598] vfs_open_consume+0x4a/0x350 [ 476.466807][T14598] ? path_openat+0x14bb/0x1e40 [ 476.466836][T14598] path_openat+0x14d7/0x1e40 [ 476.466886][T14598] do_file_open+0x23e/0x4a0 [ 476.466919][T14598] ? __pfx_do_file_open+0x10/0x10 [ 476.466972][T14598] ? _raw_spin_unlock+0x28/0x50 [ 476.467000][T14598] ? alloc_fd+0x651/0x6c0 [ 476.467034][T14598] do_sys_openat2+0x115/0x200 [ 476.467070][T14598] ? __pfx_do_sys_openat2+0x10/0x10 [ 476.467110][T14598] ? do_user_addr_fault+0xd3f/0x1480 [ 476.467139][T14598] __x64_sys_openat+0x138/0x170 [ 476.467167][T14598] do_syscall_64+0x166/0x520 [ 476.467188][T14598] ? trace_irq_disable+0x3b/0x140 [ 476.467212][T14598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.467234][T14598] ? clear_bhb_loop+0x70/0xc0 [ 476.467261][T14598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.467290][T14598] RIP: 0033:0x7f1e8275e98e [ 476.467312][T14598] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 476.467330][T14598] RSP: 002b:00007f1e8368db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 476.467355][T14598] RAX: ffffffffffffffda RBX: 00007f1e8368e6c0 RCX: 00007f1e8275e98e [ 476.467370][T14598] RDX: 0000000000000002 RSI: 00007f1e8368dc00 RDI: ffffffffffffff9c [ 476.467385][T14598] RBP: 00007f1e8368dc00 R08: 0000000000000000 R09: 0000000000000000 [ 476.467399][T14598] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 476.467413][T14598] R13: 00007f1e82a26038 R14: 00007f1e82a25fa0 R15: 00007fff9fc7a878 [ 476.467450][T14598] [ 476.868476][T14609] fuse: fd is not a fuse device [ 479.707071][T14675] loop6: detected capacity change from 0 to 512 [ 479.785436][T14675] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.816052][T14652] loop9: detected capacity change from 0 to 40427 [ 479.893264][T14652] F2FS-fs (loop9): invalid crc value [ 480.129358][T14652] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 480.140465][T13998] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.297289][T14652] F2FS-fs (loop9): f2fs_disable_checkpoint starts, unusable: 0 [ 480.297339][T14652] F2FS-fs (loop9): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 480.297367][T14652] F2FS-fs (loop9): Start checkpoint disabled! [ 480.511404][T14691] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 480.519095][T14652] F2FS-fs (loop9): f2fs_disable_checkpoint finishes, err:0 [ 480.522126][T14652] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 480.635641][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888079e5ec00: rx timeout, send abort [ 481.084062][ T5820] kworker/u8:8: attempt to access beyond end of device [ 481.084062][ T5820] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 481.084151][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.084178][ T5820] Tainted: [L]=SOFTLOCKUP [ 481.084186][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 481.084198][ T5820] Workqueue: writeback wb_workfn (flush-7:9) [ 481.084249][ T5820] Call Trace: [ 481.084259][ T5820] [ 481.084269][ T5820] dump_stack_lvl+0xe8/0x150 [ 481.084303][ T5820] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 481.084382][ T5820] f2fs_write_end_bio+0x1211/0x16e0 [ 481.084436][ T5820] ? blkg_put+0x22/0x240 [ 481.084506][ T5820] __submit_merged_bio+0x258/0x6a0 [ 481.084528][ T5820] ? rcu_is_watching+0x16/0xb0 [ 481.084560][ T5820] __submit_merged_write_cond+0x3c9/0x4e0 [ 481.084593][ T5820] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 481.084647][ T5820] f2fs_write_data_pages+0x2a1d/0x36f0 [ 481.084723][ T5820] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 481.084768][ T5820] ? filemap_get_entry+0xcd/0x3f0 [ 481.084878][ T5820] ? __lock_acquire+0x747/0x2de0 [ 481.084925][ T5820] ? __lock_acquire+0x747/0x2de0 [ 481.084948][ T5820] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 481.084975][ T5820] do_writepages+0x338/0x560 [ 481.085010][ T5820] ? reacquire_held_locks+0x117/0x1a0 [ 481.085036][ T5820] ? writeback_sb_inodes+0x450/0x1af0 [ 481.085064][ T5820] __writeback_single_inode+0x136/0x1220 [ 481.085089][ T5820] ? do_raw_spin_unlock+0xf5/0x200 [ 481.085120][ T5820] writeback_sb_inodes+0x9de/0x1af0 [ 481.085139][ T5820] ? __lock_acquire+0x747/0x2de0 [ 481.085189][ T5820] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 481.085275][ T5820] ? rcu_is_watching+0x16/0xb0 [ 481.085303][ T5820] ? queue_io+0x2d3/0x470 [ 481.085330][ T5820] wb_writeback+0x41c/0xad0 [ 481.085354][ T5820] ? queue_io+0x2d1/0x470 [ 481.085385][ T5820] ? __pfx_wb_writeback+0x10/0x10 [ 481.085404][ T5820] ? do_raw_spin_lock+0x12b/0x2f0 [ 481.085456][ T5820] wb_workfn+0x431/0x10f0 [ 481.085510][ T5820] ? __pfx_wb_workfn+0x10/0x10 [ 481.085545][ T5820] ? trace_hrtimer_start+0x82/0x200 [ 481.085575][ T5820] ? do_raw_spin_lock+0x12b/0x2f0 [ 481.085618][ T5820] ? lock_acquire+0x115/0x350 [ 481.085653][ T5820] ? rcu_is_watching+0x16/0xb0 [ 481.085683][ T5820] ? process_scheduled_works+0x97a/0x1630 [ 481.085714][ T5820] process_scheduled_works+0xc3d/0x1630 [ 481.085784][ T5820] ? __pfx_process_scheduled_works+0x10/0x10 [ 481.085823][ T5820] ? assign_work+0x3cf/0x5d0 [ 481.085860][ T5820] worker_thread+0xa47/0xfb0 [ 481.085908][ T5820] ? __kthread_parkme+0x71/0x1f0 [ 481.085955][ T5820] kthread+0x38b/0x480 [ 481.085979][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 481.086007][ T5820] ? __pfx_kthread+0x10/0x10 [ 481.086032][ T5820] ret_from_fork+0x514/0xb70 [ 481.086060][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 481.086083][ T5820] ? __switch_to+0xc89/0x1420 [ 481.086117][ T5820] ? __pfx_kthread+0x10/0x10 [ 481.086144][ T5820] ret_from_fork_asm+0x1a/0x30 [ 481.086198][ T5820] [ 481.094503][ T5820] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 481.138130][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056fce000: rx timeout, send abort [ 481.140068][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888079e5ec00: abort rx timeout. Force session deactivation [ 481.451657][T14714] xt_hashlimit: size too large, truncated to 1048576 [ 481.638185][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056fce000: abort rx timeout. Force session deactivation [ 482.798377][ T32] kauditd_printk_skb: 10 callbacks suppressed [ 482.798399][ T32] audit: type=1326 audit(12442.110:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.6.2407" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867cd9e159 code=0x7ffc0000 [ 482.832205][ T32] audit: type=1326 audit(12442.110:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.6.2407" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867cd9e159 code=0x7ffc0000 [ 482.832265][ T32] audit: type=1326 audit(12442.150:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.6.2407" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f867cd9e159 code=0x7ffc0000 [ 482.832310][ T32] audit: type=1326 audit(12442.150:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.6.2407" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867cd9e159 code=0x7ffc0000 [ 482.834291][ T32] audit: type=1326 audit(12442.150:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.6.2407" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867cd9e159 code=0x7ffc0000 [ 482.834347][ T32] audit: type=1326 audit(12442.150:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.6.2407" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f867cd9e159 code=0x7ffc0000 [ 482.834392][ T32] audit: type=1326 audit(12442.150:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.6.2407" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867cd9e159 code=0x7ffc0000 [ 482.834436][ T32] audit: type=1326 audit(12442.150:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.6.2407" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f867cd9e159 code=0x7ffc0000 [ 482.834480][ T32] audit: type=1326 audit(12442.150:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.6.2407" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867cd9e159 code=0x7ffc0000 [ 482.835803][ T32] audit: type=1326 audit(12442.150:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14749 comm="syz.6.2407" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f867cd9e159 code=0x7ffc0000 [ 483.362431][T14756] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.844129][T14756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.305391][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2414'. [ 484.448921][T14757] geneve2: entered promiscuous mode [ 485.417392][T14803] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2420'. [ 485.676736][T14810] overlayfs: failed to clone upperpath [ 485.741836][ T33] INFO: task syz.5.1563:11405 blocked for more than 143 seconds. [ 485.741868][ T33] Tainted: G ** replaying previous printk message ** [ 485.741868][ T33] Tainted: G L syzkaller #0 [ 485.741880][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.741891][ T33] task:syz.5.1563 state:D stack:28808 pid:11405 tgid:11403 ppid:6535 task_flags:0x400040 flags:0x00080002 [ 485.741958][ T33] Call Trace: [ 485.741966][ T33] [ 485.741980][ T33] __schedule+0x17dd/0x5940 [ 485.742021][ T33] ? __lock_acquire+0x747/0x2de0 [ 485.742099][ T33] ? __pfx___schedule+0x10/0x10 [ 485.742128][ T33] ? lock_acquire+0x115/0x350 [ 485.742171][ T33] ? schedule+0x90/0x2b0 [ 485.742206][ T33] schedule+0x164/0x2b0 [ 485.742240][ T33] cgroup_lock_and_drain_offline+0x51a/0x650 [ 485.742279][ T33] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 485.742302][ T33] ? __pfx_autoremove_wake_function+0x10/0x10 [ 485.742349][ T33] cgroup_kn_lock_live+0x120/0x230 [ 485.742374][ T33] cgroup_subtree_control_write+0x4b5/0x1080 [ 485.742413][ T33] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 485.742436][ T33] ? kernfs_root+0x1c/0x230 [ 485.742499][ T33] ? kernfs_root+0x1c/0x230 [ 485.742525][ T33] ? kernfs_root+0x1ea/0x230 [ 485.742552][ T33] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 485.742574][ T33] cgroup_file_write+0x331/0x8f0 [ 485.742638][ T33] ? __pfx_cgroup_file_write+0x10/0x10 [ 485.742668][ T33] ? __kmalloc_noprof+0x387/0x710 [ 485.742702][ T33] ? __pfx_cgroup_file_write+0x10/0x10 [ 485.742731][ T33] kernfs_fop_write_iter+0x3a4/0x540 [ 485.742769][ T33] vfs_write+0x612/0xba0 [ 485.742804][ T33] ? __pfx_vfs_write+0x10/0x10 [ 485.742841][ T33] ? __fget_files+0x2a/0x420 [ 485.742874][ T33] ksys_write+0x150/0x270 [ 485.742902][ T33] ? __pfx_ksys_write+0x10/0x10 [ 485.742926][ T33] ? __pfx_kcov_ioctl+0x10/0x10 [ 485.742959][ T33] do_syscall_64+0x166/0x520 [ 485.743895][ T33] ? trace_irq_disable+0x3b/0x140 [ 485.743924][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.743947][ T33] ? clear_bhb_loop+0x70/0xc0 [ 485.743973][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.743995][ T33] RIP: 0033:0x7fbf4b99e159 [ 485.744016][ T33] RSP: 002b:00007fbf4c7ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 485.744040][ T33] RAX: ffffffffffffffda RBX: 00007fbf4bc26090 RCX: 00007fbf4b99e159 [ 485.744055][ T33] RDX: 000000000000000b RSI: 0000200000000180 RDI: 0000000000000005 [ 485.744070][ T33] RBP: 00007fbf4ba3503b R08: 0000000000000000 R09: 0000000000000000 [ 485.744084][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.744098][ T33] R13: 00007fbf4bc26128 R14: 00007fbf4bc26090 R15: 00007fffccac48c8 [ 485.744133][ T33] [ 485.744189][ T33] [ 485.744189][ T33] Showing all locks held in the system: [ 485.744201][ T33] locks held by ksoftirqd/0/15: 1, last CPU#0: [ 485.744316][ T33] #0: ffffffff8ed5dc80 (rcu_callback){....}-{0:0}, at: rcu_core+0x8a8/0x1260 [ 485.744393][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 485.744408][ T33] #0: ffffffff8ed5db60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 485.744480][ T33] locks held by getty/5370: 2, on CPU#1: [ 485.744494][ T33] #0: ffff888034e330a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 485.744623][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 485.746343][ T33] locks held by syz.2.857/8518: 3, on CPU#1: [ 485.746362][ T33] #0: ffff888029fabcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 485.746419][ T33] #1: ffff88807b8f6460 (sb_writers#30){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 485.746477][ T33] #2: ffffffff8f0a1c00 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 485.746588][ T33] locks held by kworker/u8:21/9075: 2, last CPU#0: [ 485.746604][ T33] #0: ffff8880318d3140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.746662][ T33] #1: ffffc9000445fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 485.746726][ T33] locks held by syz.5.1563/11405: 3, on CPU#0: [ 485.746741][ T33] #0: ffff8880328a1270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 485.746792][ T33] #1: ffff888078dd2460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 485.746849][ T33] #2: ffff88803051a080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 485.746916][ T33] locks held by syz.4.2413/14771: 1, on CPU#0: [ 485.746931][ T33] #0: ffff888079929460 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330 [ 485.746988][ T33] locks held by syz.4.2413/14778: 1, on CPU#0: [ 485.747003][ T33] #0: ffff888079929460 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x3e/0x720 [ 485.747055][ T33] locks held by syz.7.2423/14808: 2, last CPU#1: [ 485.747070][ T33] #0: ffff88807c529d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 485.747118][ T33] #1: ffffffff8ed5db60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 485.747177][ T33] locks held by syz.0.2424/14812: 1, last CPU#1: [ 485.747192][ T33] #0: ffff888055f7d950 (&sb->s_type->i_mutex_key#3/1){+.+.}-{4:4}, at: start_dirop+0x4f/0x90 [ 485.747251][ T33] locks held by cmp/14813: 2, last CPU#0: [ 485.747265][ T33] #0: ffffffff8ed5db60 (rcu_read_lock){....}-{1:3}, at: fd_install+0x94/0x3d0 [ 485.747312][ T33] #1: ffff88802a4d0b18 (&lockref->lock){+.+.}-{3:3}, at: unwind_next_frame+0x8f/0x2550 [ 485.747366][ T33] [ 485.747372][ T33] ============================================= [ 485.747372][ T33] [ 485.747381][ T33] NMI backtrace for cpu 1 [ 485.747397][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 485.747421][ T33] Tainted: [L]=SOFTLOCKUP [ 485.747428][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.747440][ T33] Call Trace: [ 485.747448][ T33] [ 485.747458][ T33] dump_stack_lvl+0xe8/0x150 [ 485.747488][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 485.747549][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 485.747579][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 485.747609][ T33] sys_info+0x135/0x170 [ 485.747634][ T33] watchdog+0x1058/0x10d0 [ 485.747663][ T33] ? watchdog+0x209/0x10d0 [ 485.747691][ T33] kthread+0x38b/0x480 [ 485.747715][ T33] ? __pfx_watchdog+0x10/0x10 [ 485.747734][ T33] ? __pfx_kthread+0x10/0x10 [ 485.747756][ T33] ret_from_fork+0x514/0xb70 [ 485.747780][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 485.747800][ T33] ? __switch_to+0xc89/0x1420 [ 485.747830][ T33] ? __pfx_kthread+0x10/0x10 [ 485.747872][ T33] ret_from_fork_asm+0x1a/0x30 [ 485.747939][ T33] [ 485.747969][ T33] Sending NMI from CPU 1 to CPUs 0: [ 485.747998][ C0] NMI backtrace for cpu 0 [ 485.748016][ C0] CPU: 0 UID: 0 PID: 14813 Comm: cmp Tainted: G L syzkaller #0 PREEMPT(full) [ 485.748040][ C0] Tainted: [L]=SOFTLOCKUP [ 485.748047][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.748058][ C0] RIP: 0033:0x7f09f6ece7a7 [ 485.748075][ C0] Code: ff 96 0f 00 48 89 ea 48 8b 38 31 c0 e8 02 da f9 ff e9 71 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 05 79 96 0f 00 <53> 48 8b 1d 19 97 0f 00 66 0f 6e 08 8b 44 24 10 66 0f 6e 03 50 48 [ 485.748091][ C0] RSP: 002b:00007ffd0cff4dc8 EFLAGS: 00000246 [ 485.748108][ C0] RAX: 00007f09f6fc8244 RBX: 00007ffd0cff4ef0 RCX: 00007ffd0cff4df0 [ 485.748122][ C0] RDX: 00007ffd0cff4ea0 RSI: 00007ffd0cff56d8 RDI: 0000000000000004 [ 485.748135][ C0] RBP: 00007ffd0cff5450 R08: 0000000000000000 R09: 0000000000000000 [ 485.748146][ C0] R10: 000000000000006c R11: 00007ffd0cff4efc R12: 0000000000000000 [ 485.748159][ C0] R13: 00007f09f7093c26 R14: 00007ffd0cff5460 R15: 0000000000000000 [ 485.748172][ C0] FS: 00007f09f6d2ec80 GS: 0000000000000000 [ 485.760027][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 486.439164][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 486.448790][ T33] Tainted: [L]=SOFTLOCKUP [ 486.452689][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.461748][ T33] Call Trace: [ 486.464710][ T33] [ 486.467380][ T33] vpanic+0x56d/0xa70 [ 486.471309][ T33] ? __pfx___schedule+0x10/0x10 [ 486.475694][ T33] ? __pfx_vpanic+0x10/0x10 [ 486.479767][ T33] panic+0xc5/0xd0 [ 486.483132][ T33] ? __pfx_panic+0x10/0x10 [ 486.487131][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 486.492059][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 486.496914][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 486.502470][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 486.508023][ T33] watchdog+0x10cc/0x10d0 [ 486.511937][ T33] ? watchdog+0x209/0x10d0 [ 486.515928][ T33] kthread+0x38b/0x480 [ 486.519600][ T33] ? __pfx_watchdog+0x10/0x10 [ 486.523824][ T33] ? __pfx_kthread+0x10/0x10 [ 486.527971][ T33] ret_from_fork+0x514/0xb70 [ 486.532121][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 486.536737][ T33] ? __switch_to+0xc89/0x1420 [ 486.540973][ T33] ? __pfx_kthread+0x10/0x10 [ 486.545114][ T33] ret_from_fork_asm+0x1a/0x30 [ 486.549468][ T33] [ 486.552333][ T33] Kernel Offset: disabled [ 486.556224][ T33] Rebooting in 86400 seconds..