last executing test programs: 8m14.664714852s ago: executing program 32 (id=38): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2004800, &(0x7f0000000180)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfe, 0x3bc, &(0x7f00000002c0)="$eJzs3cGLG2UUAPC32e3uttrNgiKoiB8FD17Cdv0HukgL4oJSG6kehKmb1ZA0KUlYSREtXrz6H3gvHr0J4j/Qg969eevFYw+lI8kku8k2bV3rbqj+frDMy3zfm3wzQ4a3h+Hdvfrd9cZut7Kb9aJ0IUUpIkr3ItaHUWFhtC0N4+WYdCveLF/9/bUPPvr43a3t7YuXU7q0deWtzZTS2us/f/HlD+d+6T334Y9rP63EnfVP7v65+cedl+68fPfBlc/r3VTvpqV2L2XpWrvdy641a2mn3m1UUnq/Wcu6tVRvdWudqfHdZvvGjX7KWjtnz9zo1LrdlLX6qVHrp1479db6Kfssq7dSpVJJZ88ET1K9fflytlXEq4+Zd+GkFsQx6HS2ssFveOWhkertuSwIAJirp63/l5+u/m9N1/+notuovPBGcegj1/8d9f8RTdb//FcN6v/l0e83IvKD/wPU/wAAAAAAAAAAAAAA8Cy4l+flPM/L4+3+ywGjz3NeHsfsoft/6G/e6+N4Tby4txrR/HavulcttsX41m7Uoxm12Ihy3B88FsaK+NI72xc30tB6nL3+9TD/3K8R1cXp/PNRjvXZ+eeL/LSfH4PtqTgzmb8Z5Xhxdv7mfn6+cJC/HBvfT+RXohy/fRrtaMbO8PF2kP/V+ZTefm/70PevDOcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P9QSWOvRtH3fq8acTr2Rv37KwcT1qf74xf5o/76pdiIctyf3Z9/Y2Z//6V4ZWm+5w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAY93+zUbWbNY6JxWMe/4P9yyPg0dnLRTTbx0aOh3Tk1eedJy/H+R5nj/I83xqqHSk45weneSMocGRv1kthos9O61/6/KuLpzorXya4FREPGZOPrqAk0OL8U++6/n96zxzzkpEHOuZrg2C0tHTyzHn23TijyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYu/2m34MPC/NeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPS7d9sZM3mYmcU1KaDpTi8J2suxiMmPyqY9zkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8S/4KAAD//31oB3w=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, 0x0, 0x0, 0xe7c) bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfe63, 0xe7c) 7m11.618653731s ago: executing program 33 (id=437): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r0, 0x100000000000011, 0x2000, 0x2f93) 6m3.809554136s ago: executing program 34 (id=938): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) read(r2, 0x0, 0x0) 4m54.067736173s ago: executing program 35 (id=1534): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000440)=r0, 0x8) r2 = socket$kcm(0x11, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000480)=r0, 0x4) 3m45.90672582s ago: executing program 36 (id=1746): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x3, 0x100, @val=0x80}}}}}}}, 0x0) 2m47.274489715s ago: executing program 7 (id=1975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r2}, &(0x7f0000000980)=0x20000, &(0x7f00000009c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r2}, &(0x7f0000000a80)=0x2000000, &(0x7f0000000ac0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000d00)={r2, &(0x7f0000000d40)}, 0x20) 2m46.321562702s ago: executing program 7 (id=1979): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f00000001c0)="e1483f4367ab", 0xfdea}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002380)=""/4096, 0xfdfa}], 0x1}}], 0x1, 0x40000141, 0x0) 2m45.905262097s ago: executing program 7 (id=1984): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001200)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x3, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb79, 0xbd, 0x0, 0x1, 0x3, 0x5, 0x9d, 0xffc, 0x9, 0x701, 0x13, 0x40001, 0xfffffffa, 0x4, 0x6, 0x101, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0xc, 0x5, 0x81, 0x2, 0x1, 0x5, 0x2000004, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x200, 0xaa, 0x81, 0x2, 0x180001, 0x84007, 0x3, 0x2, 0x6, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x0, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x756, 0x0, 0x3, 0x0, 0x10001, 0x4, 0x10, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x3, 0x20006, 0x5, 0x8, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0xfff, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x0, 0x0, 0x401, 0x66cd, 0x10, 0x8000, 0x2008da0, 0x1fc, 0x0, 0x4]}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000180)={0x18, 0x0, {0x3, @local, 'lo\x00'}}, 0x1e) 2m45.399540495s ago: executing program 7 (id=1989): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x84000, 0x0) 2m44.655440644s ago: executing program 7 (id=1995): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xeec}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m43.23905157s ago: executing program 7 (id=2002): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000440)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000cc0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x11, 0x1000}}}}}}}, 0x0) 2m42.558990233s ago: executing program 37 (id=2002): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000440)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000cc0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x11, 0x1000}}}}}}}, 0x0) 1m31.538982657s ago: executing program 8 (id=2570): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) 1m31.287291531s ago: executing program 8 (id=2572): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x8, 0x4) r2 = socket(0x2, 0x3, 0x66) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0x6a0000e0}, 0x6e) 1m30.992603907s ago: executing program 8 (id=2575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x4040941) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[], 0xfffffdcf) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)=""/195, 0xc3}], 0x1}, 0xe0}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/113, 0x71}], 0x1}, 0x2}], 0x2, 0x0, 0x0) 1m29.867044767s ago: executing program 8 (id=2586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000440), 0x1, 0xbe0, &(0x7f0000001c00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20034, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1m29.353956071s ago: executing program 8 (id=2589): r0 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0x3, 0x2) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000100)="1471c11be4955031894146e657b7", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 1m28.422649296s ago: executing program 8 (id=2599): unshare(0x22020600) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) 1m27.374326153s ago: executing program 38 (id=2599): unshare(0x22020600) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) 1m18.264050917s ago: executing program 0 (id=2661): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800, 0x8) read$FUSE(r0, &(0x7f0000000fc0)={0x2020}, 0x2020) 1m18.00683546s ago: executing program 0 (id=2664): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x4, 0x7}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m16.798035453s ago: executing program 0 (id=2674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000500ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f00000003c0)=""/90, 0x5a}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x3}, 0x10000) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 1m16.338020423s ago: executing program 0 (id=2679): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 1m16.036646131s ago: executing program 0 (id=2682): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000805000000f1"], 0x11) 1m15.290191735s ago: executing program 0 (id=2685): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000013c0)={0x0, 0x10, &(0x7f0000001400)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000001440)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000001480)={r2, @in6={{0xa, 0x4e21, 0x4, @mcast1}}}, &(0x7f0000001540)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x8, 0xffff, 0xfffffffd, 0x800}, 0x14) 1m14.629233473s ago: executing program 39 (id=2685): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000013c0)={0x0, 0x10, &(0x7f0000001400)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000001440)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000001480)={r2, @in6={{0xa, 0x4e21, 0x4, @mcast1}}}, &(0x7f0000001540)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x8, 0xffff, 0xfffffffd, 0x800}, 0x14) 35.655972879s ago: executing program 2 (id=2965): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) 35.278626746s ago: executing program 2 (id=2970): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000080)={0x0, [[0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xfffffeff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x6, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000300)={0x0, &(0x7f0000000340)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000380)={0x1, 0x800, 0xe323, 0x5, 0x5, 0x9, 0x80000002, 0xffe, 0x2, 0x7, 0x7, 0x4}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 34.245072611s ago: executing program 2 (id=2982): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x10001, 0x0) 33.291656715s ago: executing program 2 (id=2989): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES64], 0x43, 0x5542, &(0x7f0000007240)="$eJzs3M2LG2UYAPBndrv9ti7iwVsHirALTWi2H+itaosf2FKqHjxpNklD2iSzbNLsuiB48Cge/E9EwZNH/wYPnr2JB8WbUMnMRLtqQdl8tN3fD5Jn3jdvnnnesASemSUBHFqr6W+/JHEmTkTEckScjhgfP0giIpksulqEFyLibEQsPfRIyvk/J45GxMmIODNOXuRMype+OD86d/nnt3799vtjR059+c0Pi9s1sGgvRkRvqzje6RUxaxfxbjlfH3Xy2Ls0KmPxQu9eOc6KuNPazDPs1Cfr6nm82C7WZ1v3B+N4p1tvjGO7cyef3+oXJxyM2pM8+Rvu1rfzcbO1mcfOIMtje6+oa3ev+G7bGwyLPM0y30d5+hgOJ7GYb+22iv1s3ctjoz8s54u8WbO1O46jMk6+extZt5nXsXmAD/ox93anf383HbW2B52sn16u1l6q1q5UattZszVsXarUe80rl9K1dne8rDJs1XtX21nW7raqjay3nq61G41KrZauXWttdur9tFarXqxeqFxeL4/Op6/ffC/tNtO1cXy1078/7HQH6Z1sOy3esZ5uVC++vJ6eq6Xv3LiV3rp9/fqNW+9+cO39m6/cePO1ctE/ykrXNi5sbFRqFyobtfVDtP9Py6KnuH84kGTRBQA8eR7R/4f+H5il2fX/27cjZt//xwz7//J0+v/Hrf897P3/DPYPB/J/+/+PZ1QHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABz9+PKV2/kB6vF+FQ5/0w59Vw5TiJiKSIe/IvlOLov53KZZ+UR61f+VsN3SeQZxuc4Vj5ORsTV8vH7s7P+FAAAAODp9fUnZz8vuvXiaXXRBTFPxUWbpdMfTilfEhErqz9NKdvS+On5KSXL/76PxO6UsuUXsI5PKVlxye3ItLL9J8v7wvGHQlKEpbmWAwAAzMX+TmC+XQgAAADz9NmiC2AxkpjcypzcC87/8/6vG4In9o0AAACAJ1Cy6AIAAACAmcv7f7//BwAAAE+34vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiDnbvJWRqI4wD8b6F8+BGJce9V3MEpjEdw6dJwAC/BynW9ghfgDBg3HsFQQ6cQNIImTIu+eZ6k73T6lh8zBBJmJgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJ++VPXq0/uXH27N2TfNJCKaP5hfuidPbwAAAIDf2VX1qj1ZpPrj7vrT7tLzrl5ERHlh8D6KyVni7JRTXbi/+qUNnyPahMNzTLvjUUS86o7vz/p+FQAAAODh2q43y4jR4bT9s7h3gxhSmrQpn7zJlFdERLX4limtPOS9yBTWvr/H8S5TWjuBNcsUlqbcxrnS/kr7cT/N2s3OiiIV5fXHZ+s7AAAwoDQSOH7fH3YUAgAAwJDe3rsB9OT19X8XcVzKPC0FTlPRLe/Nf6oBAAAA/6Hi3g0AAAAAeteO/3dV/fFr5Nz/L/2mwP5/AAAA8G9I+/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQp11Vr7brzfLWnH1zmzy9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjB/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9JARECyhAGkBhgoem1tHQDBlDEwJ+AFKXXEnrlR5uBVhUoCxtk7oLKiBASKGydWTu3UpewdchQJOag5x+JQy/igNY+ms9Heve+tnx+3+ermnz9fAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGrbb+/FWXyZLeO02nf7/rWV2N/5Sx/d3Li7EFuMkzaT/n+YaW4k890lAgAAwOGQVLV9Vm1v5ZtLsU9ni/o/r4+LNf+Np/feE8bU/XVf1/6x/fLzved3B5stx4knPbc6Gh5/MJ3eo5vpdHvmb4/oFVe+uPeSFR9I+t76c9t5cT2Tr2/deqdfhEfayBYAONDOwT+Mj5Xd1o0qqH8fiv2gpfQAONx6jcK7rv+z2W5zAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjD9np4so6TEMJCby+O7ty/tjKuv7lxd6Fup69f32ieM54iDyGcWx0Nj7c4l2l3+crVC8uj0fBS+8GLIYSuRn+zmv6FDyY4OIROro/gIQVp9WFPSz5l8Ou/f/tO/a/3EWX4Vghh1NF/SAAAPLbyqsW6fivfXIr7krkQdr7bX/+/0ojDhPX/vQ9P3y4O/ibdN16s/wftTXHqLa5d/HTx8pWrr61eXD4/PD/8+PUTgzcGJ8+cOnVmsbhXsuiOCQAAAP9Nv2rN+j+de3D9/2gjDhPW/599O/iiOVam/h9rb9Gv60wAAAAOt2df+uP3ZMz+pN8Pny+vrV0alK+72yfK1w5S/ceOVK1Z/2dzXWcFAAAAtGF7Pdm3/n+2EYcJ1/+f+v6FH5vnzEIIM9X6/7GVT0Zn25vOVHuYXx7+8oDvyXc9RwAAALo1U7Xm+n9ePP+f7j7ykIYQXn25jKs/AzhR/Z+9+9UPzbGaz/+fbG+KUymdL69H0c+H0JvvOiMAAAAeZ09ULRb7v+WbSx/9dPT9vuf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANr2ZwAAAP//Gg03mw==") mkdir(&(0x7f0000000100)='./bus\x00', 0x63) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 30.808544345s ago: executing program 2 (id=3021): r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001540)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000001580)='.\x00', &(0x7f00000015c0)='proc\x00', 0x80, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000001600)='environ\x00') syz_usb_disconnect(0xffffffffffffffff) pread64(r2, 0x0, 0x0, 0x4) 28.142671783s ago: executing program 2 (id=3039): r0 = fsopen(&(0x7f0000000ac0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) setresuid(0xee00, 0xee00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r2, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) 27.415185914s ago: executing program 40 (id=3039): r0 = fsopen(&(0x7f0000000ac0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) setresuid(0xee00, 0xee00, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r2, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) 5.852357642s ago: executing program 9 (id=3241): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/39, 0x27) gettid() 5.57876871s ago: executing program 9 (id=3244): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 5.154583219s ago: executing program 6 (id=3249): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="00012cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010012034e05080001000800000008000100080000000c00018008000100050000000800028004"], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x8044) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.981651852s ago: executing program 6 (id=3265): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r0, @ANYRESHEX=r3], 0x15) 2.854397027s ago: executing program 9 (id=3266): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) io_uring_setup(0x6a83, &(0x7f0000000640)={0x0, 0x834a, 0x2, 0x2, 0x325}) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000180100800c00018008000400", @ANYRES32=r0], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 2.838418109s ago: executing program 4 (id=3267): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x17e) close(r0) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0), 0x10800, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.683543965s ago: executing program 1 (id=3269): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x407f, r1, 0x4}, 0x38) eventfd2(0x10000, 0x800) 2.611932289s ago: executing program 6 (id=3270): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x5, 0x4) read(r0, &(0x7f00000000c0)=""/90, 0x5a) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) 2.555575335s ago: executing program 4 (id=3271): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)='X', 0x34000, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) 2.482121739s ago: executing program 9 (id=3272): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000800)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000880)=0x1) ioctl$PPPIOCSMRU1(r1, 0x40047452, 0x0) 2.242963102s ago: executing program 1 (id=3274): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x40000, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x17) 2.210350445s ago: executing program 9 (id=3275): r0 = syz_open_dev$evdev(&(0x7f0000000480), 0x20000000000, 0x840) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 2.139303264s ago: executing program 3 (id=3276): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000d80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002dc0)={0x50, 0x0, r1, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) read$FUSE(r0, &(0x7f0000002e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004ec0)="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", 0x2000, &(0x7f0000006ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006f80)={0x78, 0x0, 0x9, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x10000000008, 0x3, 0x9, 0x2, 0x0, 0x200800, 0x0, 0x1000, 0x1000, 0xbca4, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x0) 2.118686412s ago: executing program 5 (id=3277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000002c0)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), r0) 2.006567548s ago: executing program 3 (id=3278): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r0, &(0x7f0000000680)=""/4096, 0x1000) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x2d45, 0x1080, 0x400000}, &(0x7f0000ffe000), 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) 1.974864352s ago: executing program 5 (id=3279): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.662084879s ago: executing program 6 (id=3280): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x81, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 1.524285779s ago: executing program 6 (id=3281): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000100)='-', 0x1}], 0x1, 0x0) 1.524150486s ago: executing program 4 (id=3282): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1}) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 1.37298373s ago: executing program 5 (id=3283): connect$inet(0xffffffffffffffff, &(0x7f0000000880)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) write$cgroup_subtree(r1, &(0x7f0000000880)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 1.305935339s ago: executing program 4 (id=3284): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000b80)={0x0, 0x0}) write(r1, &(0x7f0000000bc0)="fa", 0xfffffdef) 1.217991868s ago: executing program 1 (id=3285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x2000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x0) read(r1, &(0x7f0000000340), 0x1000) 1.063009035s ago: executing program 5 (id=3286): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fchdir(r0) r1 = syz_clone(0x2000, 0x0, 0xfffffffffffffca8, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r2 = syz_open_procfs(r1, &(0x7f0000000100)='personality\x00') pread64(r2, &(0x7f0000000140)=""/11, 0xb, 0x4) 1.051724356s ago: executing program 3 (id=3287): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x1d8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv4=@empty, [0x0, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0x101000000], 0x80, 0x54, 0x0, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3e0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 939.238324ms ago: executing program 1 (id=3288): renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000719000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f000055d000/0x1000)=nil, &(0x7f00007c3000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r0, 0x4095, 0x7721, 0x16, 0x0, 0x0) 678.561078ms ago: executing program 3 (id=3289): r0 = fsopen(&(0x7f0000001bc0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001b00)='.\x00', 0x0, 0x104) getdents64(r2, &(0x7f0000001b40)=""/72, 0x48) getdents(r2, 0x0, 0x58) 639.231698ms ago: executing program 1 (id=3290): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r1) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) 634.365313ms ago: executing program 5 (id=3291): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) 462.905156ms ago: executing program 3 (id=3292): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x2, 0x7, 0x5}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fff7ffe}]}) close_range(r1, 0xffffffffffffffff, 0x0) 400.926448ms ago: executing program 1 (id=3293): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) socket$nl_generic(0x10, 0x3, 0x10) 365.057932ms ago: executing program 9 (id=3294): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$dsp(r0, &(0x7f0000000080)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0xa) landlock_restrict_self(0xffffffffffffffff, 0xc) 256.810531ms ago: executing program 4 (id=3295): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) write$UHID_INPUT(r0, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2) 193.937094ms ago: executing program 5 (id=3296): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 165.859502ms ago: executing program 6 (id=3297): syz_mount_image$ext4(&(0x7f0000000c80)='ext4\x00', &(0x7f0000000cc0)='./file1\x00', 0x21081e, &(0x7f0000000d00)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000d40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000001240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000001280)={0x8, 0x7, 0x1000, 0x8, 0x6, 0x0, 0x5, 0xf64, 0xffffffff}) syz_mount_image$vfat(&(0x7f0000001300), &(0x7f0000001340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000013c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000001400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./config\x00', 0x1ff) fchown(r0, 0xee00, 0xee01) fchown(r0, 0x0, 0x0) 36.092241ms ago: executing program 3 (id=3298): openat$comedi(0xffffffffffffff9c, &(0x7f0000000740)='/dev/comedi4\x00', 0x8a241, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x158, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x8e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 0s ago: executing program 4 (id=3299): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000001680)={0x40, 0x1, 0x3}, 0x10) close(r1) kernel console output (not intermixed with test programs): e_irq_disable+0x3b/0x140 [ 501.120819][T14165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.120853][T14165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.120879][T14165] RIP: 0033:0x7f0f3f79f559 [ 501.120903][T14165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.120925][T14165] RSP: 002b:00007f0f40638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 501.120953][T14165] RAX: ffffffffffffffda RBX: 00007f0f3fa25fa0 RCX: 00007f0f3f79f559 [ 501.120973][T14165] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000004 [ 501.120990][T14165] RBP: 00007f0f3f836b20 R08: 0000000000000000 R09: 0000000000000000 [ 501.121007][T14165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.121024][T14165] R13: 00007f0f3fa26038 R14: 00007f0f3fa25fa0 R15: 00007ffd1afbf618 [ 501.121066][T14165] [ 502.243850][T14197] FAULT_INJECTION: forcing a failure. [ 502.243850][T14197] name failslab, interval 1, probability 0, space 0, times 0 [ 502.243891][T14197] CPU: 1 UID: 0 PID: 14197 Comm: syz.2.2533 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.243928][T14197] Tainted: [L]=SOFTLOCKUP [ 502.243938][T14197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 502.243953][T14197] Call Trace: [ 502.243964][T14197] [ 502.243976][T14197] dump_stack_lvl+0xe8/0x150 [ 502.244019][T14197] should_fail_ex+0x410/0x560 [ 502.244065][T14197] should_failslab+0xa8/0x100 [ 502.244105][T14197] __kmalloc_noprof+0xf9/0x710 [ 502.244134][T14197] ? __fget_files+0x2a/0x420 [ 502.244160][T14197] ? bpf_map_meta_alloc+0x1ac/0x7f0 [ 502.244189][T14197] ? bpf_map_meta_alloc+0x1ac/0x7f0 [ 502.244220][T14197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.244258][T14197] bpf_map_meta_alloc+0x1ac/0x7f0 [ 502.244296][T14197] array_of_map_alloc+0x38/0xc0 [ 502.244325][T14197] map_create+0xf3d/0x1b70 [ 502.244371][T14197] ? __pfx_map_create+0x10/0x10 [ 502.244410][T14197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.244448][T14197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.244479][T14197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.244510][T14197] ? security_bpf+0x7e/0x2d0 [ 502.244554][T14197] __sys_bpf+0xaea/0xd90 [ 502.244600][T14197] ? __pfx___sys_bpf+0x10/0x10 [ 502.244639][T14197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.244670][T14197] ? do_futex+0x3e7/0x4e0 [ 502.244753][T14197] ? rcu_is_watching+0x16/0xb0 [ 502.244790][T14197] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.244829][T14197] __x64_sys_bpf+0xba/0xd0 [ 502.244864][T14197] do_syscall_64+0x166/0x520 [ 502.244899][T14197] ? trace_irq_disable+0x3b/0x140 [ 502.244930][T14197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.244965][T14197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.244992][T14197] RIP: 0033:0x7f8f40d9f559 [ 502.245016][T14197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.245039][T14197] RSP: 002b:00007f8f41d51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 502.245068][T14197] RAX: ffffffffffffffda RBX: 00007f8f41025fa0 RCX: 00007f8f40d9f559 [ 502.245089][T14197] RDX: 0000000000000050 RSI: 0000200000001200 RDI: 0000000000000000 [ 502.245107][T14197] RBP: 00007f8f40e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 502.245125][T14197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.245142][T14197] R13: 00007f8f41026038 R14: 00007f8f41025fa0 R15: 00007ffdb57a56e8 [ 502.245184][T14197] [ 502.853633][T14207] loop0: detected capacity change from 0 to 512 [ 502.976185][T14208] loop2: detected capacity change from 0 to 4096 [ 502.981574][T14207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.981696][T14207] ext4 filesystem being mounted at /59/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.014975][T14208] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 503.015001][T14208] EXT4-fs (loop2): Test dummy encryption mode enabled [ 503.052011][T14208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.171311][T14215] FAULT_INJECTION: forcing a failure. [ 503.171311][T14215] name failslab, interval 1, probability 0, space 0, times 0 [ 503.171354][T14215] CPU: 0 UID: 0 PID: 14215 Comm: syz.1.2537 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.171389][T14215] Tainted: [L]=SOFTLOCKUP [ 503.171399][T14215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 503.171416][T14215] Call Trace: [ 503.171426][T14215] [ 503.171438][T14215] dump_stack_lvl+0xe8/0x150 [ 503.171483][T14215] should_fail_ex+0x410/0x560 [ 503.171532][T14215] should_failslab+0xa8/0x100 [ 503.171571][T14215] ? security_inode_alloc+0x39/0x310 [ 503.171601][T14215] kmem_cache_alloc_noprof+0x9c/0x600 [ 503.171635][T14215] ? security_inode_alloc+0x39/0x310 [ 503.171672][T14215] security_inode_alloc+0x39/0x310 [ 503.171704][T14215] inode_init_always_gfp+0x97e/0xd30 [ 503.171753][T14215] ? __pfx_proc_alloc_inode+0x10/0x10 [ 503.171788][T14215] alloc_inode+0x82/0x1b0 [ 503.171830][T14215] new_inode+0x1f/0x170 [ 503.171861][T14215] proc_sys_make_inode+0x50/0x4e0 [ 503.171906][T14215] proc_sys_fill_cache+0x2c9/0x3c0 [ 503.171948][T14215] ? __pfx_proc_sys_fill_cache+0x10/0x10 [ 503.171989][T14215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.172025][T14215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.172056][T14215] ? do_raw_spin_unlock+0xf5/0x200 [ 503.172103][T14215] proc_sys_readdir+0x57d/0xc70 [ 503.172155][T14215] iterate_dir+0x3db/0x880 [ 503.172197][T14215] __se_sys_getdents64+0xf1/0x280 [ 503.172242][T14215] ? __pfx___se_sys_getdents64+0x10/0x10 [ 503.172277][T14215] ? __pfx_filldir64+0x10/0x10 [ 503.172314][T14215] ? rcu_is_watching+0x16/0xb0 [ 503.172349][T14215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.172398][T14215] do_syscall_64+0x166/0x520 [ 503.172432][T14215] ? trace_irq_disable+0x3b/0x140 [ 503.172462][T14215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.172497][T14215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.172523][T14215] RIP: 0033:0x7ff9d779f559 [ 503.172547][T14215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.172570][T14215] RSP: 002b:00007ff9d866f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 503.172598][T14215] RAX: ffffffffffffffda RBX: 00007ff9d7a25fa0 RCX: 00007ff9d779f559 [ 503.172618][T14215] RDX: 0000000000000100 RSI: 0000200000000200 RDI: 0000000000000005 [ 503.172636][T14215] RBP: 00007ff9d7836b20 R08: 0000000000000000 R09: 0000000000000000 [ 503.172654][T14215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.172670][T14215] R13: 00007ff9d7a26038 R14: 00007ff9d7a25fa0 R15: 00007ffd7a093f28 [ 503.172714][T14215] [ 503.405992][T14216] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4223: comm syz.0.2535: Allocating blocks 44-108 which overlap fs metadata [ 503.504875][T11611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.688548][T14224] veth0: entered promiscuous mode [ 503.714383][T14220] veth0: left promiscuous mode [ 503.819699][T14216] EXT4-fs (loop0): pa ffff888076670cb0: logic 1, phys. 44, len 63 [ 503.819740][T14216] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5460: group 0, free 0, pa_free 32 [ 504.240605][T12428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.146458][ T30] audit: type=1326 audit(1792573283.510:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.4.2555" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6dbd9f559 code=0x7ffc0000 [ 505.146522][ T30] audit: type=1326 audit(1792573283.510:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.4.2555" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6dbd9f559 code=0x7ffc0000 [ 505.150781][ T30] audit: type=1326 audit(1792573283.510:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.4.2555" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe6dbd9f559 code=0x7ffc0000 [ 505.150883][ T30] audit: type=1326 audit(1792573283.510:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.4.2555" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6dbd9f559 code=0x7ffc0000 [ 505.151047][ T30] audit: type=1326 audit(1792573283.510:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.4.2555" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6dbd9f559 code=0x7ffc0000 [ 505.151973][ T30] audit: type=1326 audit(1792573283.510:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.4.2555" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe6dbd9f559 code=0x7ffc0000 [ 505.613500][ T30] audit: type=1326 audit(1792573283.970:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.4.2555" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6dbd9f559 code=0x7ffc0000 [ 505.613564][ T30] audit: type=1326 audit(1792573283.970:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.4.2555" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6dbd9f559 code=0x7ffc0000 [ 505.807681][ T30] audit: type=1326 audit(1792573284.170:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.4.2555" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fe6dbd9f559 code=0x7ffc0000 [ 505.807745][ T30] audit: type=1326 audit(1792573284.170:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.4.2555" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6dbd9f559 code=0x7ffc0000 [ 506.366215][T14304] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 506.381065][T14309] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 506.504935][T14308] clocksource: Switched to clocksource acpi_pm [ 506.538596][T14311] clocksource: Switched to clocksource tsc [ 506.859354][T14322] syzkaller0: entered promiscuous mode [ 506.859383][T14322] syzkaller0: entered allmulticast mode [ 506.895338][T14322] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 507.489533][T14349] ip_tables: iptables: counters copy to user failed while replacing table [ 507.639193][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2574'. [ 507.769358][T14355] team1: entered promiscuous mode [ 507.769386][T14355] team1: entered allmulticast mode [ 508.608102][T14383] ip_tables: iptables: counters copy to user failed while replacing table [ 508.980577][T14389] loop8: detected capacity change from 0 to 4096 [ 509.000001][T14389] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.023684][T14390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.186269][T14395] 9p: Bad value for 'rfdno' [ 509.629014][ T9104] EXT4-fs error (device loop8): ext4_lookup:1791: inode #12: comm syz-executor: deleted inode referenced: 14 [ 509.640408][ T9104] EXT4-fs error (device loop8): ext4_lookup:1791: inode #12: comm syz-executor: deleted inode referenced: 14 [ 509.987540][ T9104] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.756530][T14436] FAULT_INJECTION: forcing a failure. [ 510.756530][T14436] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 510.756575][T14436] CPU: 0 UID: 0 PID: 14436 Comm: syz.0.2598 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.756609][T14436] Tainted: [L]=SOFTLOCKUP [ 510.756620][T14436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 510.756637][T14436] Call Trace: [ 510.756647][T14436] [ 510.756659][T14436] dump_stack_lvl+0xe8/0x150 [ 510.756702][T14436] should_fail_ex+0x410/0x560 [ 510.756750][T14436] prepare_alloc_pages+0x21e/0x5f0 [ 510.756793][T14436] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 510.756833][T14436] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 510.756875][T14436] ? __pfx_policy_nodemask+0x10/0x10 [ 510.756918][T14436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.756949][T14436] ? __lock_acquire+0x747/0x2de0 [ 510.756983][T14436] alloc_pages_mpol+0x21e/0x390 [ 510.757030][T14436] folio_alloc_mpol_noprof+0x39/0x160 [ 510.757072][T14436] vma_alloc_folio_noprof+0xe1/0x1e0 [ 510.757116][T14436] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 510.757156][T14436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.757189][T14436] ? lock_acquire+0x115/0x350 [ 510.757220][T14436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.757261][T14436] do_pte_missing+0x173a/0x34b0 [ 510.757302][T14436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.757346][T14436] handle_mm_fault+0x1a53/0x3750 [ 510.757385][T14436] ? handle_mm_fault+0xf1/0x3750 [ 510.757424][T14436] ? __pfx_handle_mm_fault+0x10/0x10 [ 510.757466][T14436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.757496][T14436] ? follow_page_pte+0x748/0xf10 [ 510.757533][T14436] ? __pfx_follow_page_pte+0x10/0x10 [ 510.757573][T14436] __get_user_pages+0x1670/0x2750 [ 510.757623][T14436] ? do_syscall_64+0x166/0x520 [ 510.757687][T14436] __gup_longterm_locked+0xe24/0x16f0 [ 510.757737][T14436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.757776][T14436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.757806][T14436] ? lock_acquire+0x115/0x350 [ 510.757834][T14436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.757871][T14436] pin_user_pages_remote+0xdc/0x130 [ 510.757917][T14436] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 510.757961][T14436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.757991][T14436] ? down_read+0x2b9/0x320 [ 510.758026][T14436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.758056][T14436] ? mm_access+0x188/0x2c0 [ 510.758095][T14436] process_vm_rw+0x650/0xba0 [ 510.758137][T14436] ? __pfx_process_vm_rw+0x10/0x10 [ 510.758160][T14436] ? futex_wait+0x2a2/0x390 [ 510.758253][T14436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.758298][T14436] ? rcu_is_watching+0x16/0xb0 [ 510.758334][T14436] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.758370][T14436] __x64_sys_process_vm_writev+0xe0/0x100 [ 510.758405][T14436] do_syscall_64+0x166/0x520 [ 510.758438][T14436] ? trace_irq_disable+0x3b/0x140 [ 510.758468][T14436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.758501][T14436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.758527][T14436] RIP: 0033:0x7f0f3f79f559 [ 510.758551][T14436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.758573][T14436] RSP: 002b:00007f0f40638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 510.758600][T14436] RAX: ffffffffffffffda RBX: 00007f0f3fa25fa0 RCX: 00007f0f3f79f559 [ 510.758621][T14436] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 00000000000000af [ 510.758638][T14436] RBP: 00007f0f3f836b20 R08: 000000000000023a R09: 0000000000000000 [ 510.758656][T14436] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 510.758672][T14436] R13: 00007f0f3fa26038 R14: 00007f0f3fa25fa0 R15: 00007ffd1afbf618 [ 510.758713][T14436] [ 511.488244][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 511.495471][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 511.510187][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 511.514413][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 511.530030][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 511.649770][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2607'. [ 512.333825][T14483] FAULT_INJECTION: forcing a failure. [ 512.333825][T14483] name failslab, interval 1, probability 0, space 0, times 0 [ 512.333896][T14483] CPU: 1 UID: 0 PID: 14483 Comm: syz.0.2612 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.333930][T14483] Tainted: [L]=SOFTLOCKUP [ 512.333940][T14483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 512.333956][T14483] Call Trace: [ 512.333967][T14483] [ 512.333978][T14483] dump_stack_lvl+0xe8/0x150 [ 512.334023][T14483] should_fail_ex+0x410/0x560 [ 512.334070][T14483] should_failslab+0xa8/0x100 [ 512.334111][T14483] __kmalloc_cache_noprof+0x9e/0x600 [ 512.334144][T14483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.334178][T14483] ? snd_seq_timer_new+0x54/0x6d0 [ 512.334202][T14483] ? snd_seq_timer_new+0x54/0x6d0 [ 512.334229][T14483] ? __kmalloc_cache_noprof+0x31c/0x600 [ 512.334265][T14483] snd_seq_timer_new+0x54/0x6d0 [ 512.334292][T14483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.334328][T14483] snd_seq_queue_alloc+0x169/0x740 [ 512.334367][T14483] ? clientptr+0x17/0x160 [ 512.334399][T14483] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 512.334437][T14483] snd_seq_oss_open+0x657/0xf40 [ 512.334477][T14483] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 512.334522][T14483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.334552][T14483] ? __mutex_trylock_common+0x15f/0x270 [ 512.334594][T14483] ? __pfx___mutex_trylock_common+0x10/0x10 [ 512.334649][T14483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.334679][T14483] ? rcu_is_watching+0x16/0xb0 [ 512.334714][T14483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.334743][T14483] ? trace_contention_end+0x3d/0x140 [ 512.334810][T14483] ? __pfx___mutex_lock+0x10/0x10 [ 512.334852][T14483] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 512.334885][T14483] ? __pfx_free_devinfo+0x10/0x10 [ 512.334915][T14483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.334944][T14483] ? do_raw_spin_unlock+0xf5/0x200 [ 512.334988][T14483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.335017][T14483] ? soundcore_open+0x2da/0x490 [ 512.335053][T14483] odev_open+0x67/0xa0 [ 512.335084][T14483] chrdev_open+0x4d9/0x600 [ 512.335123][T14483] ? __pfx_chrdev_open+0x10/0x10 [ 512.335157][T14483] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 512.335192][T14483] ? devcgroup_check_permission+0x31/0x8f0 [ 512.335232][T14483] ? __pfx_chrdev_open+0x10/0x10 [ 512.335266][T14483] do_dentry_open+0x80e/0x1360 [ 512.335316][T14483] vfs_open_consume+0x4a/0x350 [ 512.335349][T14483] ? path_openat+0x16e5/0x20f0 [ 512.335384][T14483] path_openat+0x1700/0x20f0 [ 512.335438][T14483] do_file_open+0x23e/0x4a0 [ 512.335476][T14483] ? __pfx_do_file_open+0x10/0x10 [ 512.335532][T14483] ? _raw_spin_unlock+0x28/0x50 [ 512.335563][T14483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.335595][T14483] ? alloc_fd+0x6af/0x760 [ 512.335652][T14483] do_sys_openat2+0x115/0x200 [ 512.335690][T14483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.335720][T14483] ? __se_sys_futex+0x3a8/0x450 [ 512.335766][T14483] ? __pfx_do_sys_openat2+0x10/0x10 [ 512.335812][T14483] ? rcu_is_watching+0x16/0xb0 [ 512.335848][T14483] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.335884][T14483] __x64_sys_openat+0x138/0x170 [ 512.335932][T14483] do_syscall_64+0x166/0x520 [ 512.335965][T14483] ? trace_irq_disable+0x3b/0x140 [ 512.335995][T14483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.336029][T14483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.336055][T14483] RIP: 0033:0x7f0f3f79f559 [ 512.336079][T14483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.336102][T14483] RSP: 002b:00007f0f40638028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 512.336130][T14483] RAX: ffffffffffffffda RBX: 00007f0f3fa25fa0 RCX: 00007f0f3f79f559 [ 512.336150][T14483] RDX: 0000000000080a02 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 512.336169][T14483] RBP: 00007f0f3f836b20 R08: 0000000000000000 R09: 0000000000000000 [ 512.336187][T14483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.336204][T14483] R13: 00007f0f3fa26038 R14: 00007f0f3fa25fa0 R15: 00007ffd1afbf618 [ 512.336246][T14483] [ 513.078850][T14451] rxe_eth0 speed is unknown, defaulting to 1000 [ 513.142541][ T5640] Bluetooth: hci6: command 0x0406 tx timeout [ 513.208809][T14501] loop0: detected capacity change from 0 to 512 [ 513.381091][T14501] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.2618: iget: bad extended attribute block 134217728 [ 513.381130][T14501] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 513.382372][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 513.382394][ C0] EXT4-fs (loop0): initial error at time 2000000006: ext4_orphan_get:1403: inode 15 [ 513.382430][ C0] EXT4-fs (loop0): last error at time 2000000006: ext4_orphan_get:1403: inode 15 [ 513.423154][T14501] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.2618: couldn't read orphan inode 15 (err -117) [ 513.423191][T14501] loop0: lost filesystem error report for type 5 error -117 [ 513.443438][T14501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.618702][ T5634] Bluetooth: hci3: command tx timeout [ 514.292137][T12428] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.457611][T14536] FAULT_INJECTION: forcing a failure. [ 514.457611][T14536] name failslab, interval 1, probability 0, space 0, times 0 [ 514.457653][T14536] CPU: 0 UID: 0 PID: 14536 Comm: syz.1.2626 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.457688][T14536] Tainted: [L]=SOFTLOCKUP [ 514.457698][T14536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 514.457714][T14536] Call Trace: [ 514.457725][T14536] [ 514.457736][T14536] dump_stack_lvl+0xe8/0x150 [ 514.457787][T14536] should_fail_ex+0x410/0x560 [ 514.457836][T14536] should_failslab+0xa8/0x100 [ 514.457880][T14536] __kmalloc_noprof+0xf9/0x710 [ 514.457915][T14536] ? __vb2_queue_alloc+0x2a0/0x1660 [ 514.457948][T14536] ? __vb2_queue_alloc+0x2a0/0x1660 [ 514.457990][T14536] __vb2_queue_alloc+0x2a0/0x1660 [ 514.458024][T14536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.458062][T14536] ? trace_kmalloc+0x2a/0xf0 [ 514.458117][T14536] vb2_core_reqbufs+0xc3f/0x1470 [ 514.458170][T14536] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 514.458203][T14536] ? vb2_verify_memory_type+0x1fc/0x570 [ 514.458240][T14536] ? vb2_reqbufs+0x399/0x630 [ 514.458283][T14536] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 514.458329][T14536] __video_do_ioctl+0x8af/0xc70 [ 514.458378][T14536] ? __pfx___video_do_ioctl+0x10/0x10 [ 514.458432][T14536] video_usercopy+0x860/0x1430 [ 514.458479][T14536] ? __pfx___video_do_ioctl+0x10/0x10 [ 514.458518][T14536] ? __pfx_video_usercopy+0x10/0x10 [ 514.458575][T14536] ? __fget_files+0x2a/0x420 [ 514.458599][T14536] ? srso_alias_return_thunk+0x5/0xfbef5 [ 514.458631][T14536] ? __fget_files+0x2a/0x420 [ 514.458660][T14536] v4l2_ioctl+0x18d/0x1e0 [ 514.458695][T14536] ? __pfx_v4l2_ioctl+0x10/0x10 [ 514.458729][T14536] __se_sys_ioctl+0xfc/0x170 [ 514.458766][T14536] do_syscall_64+0x166/0x520 [ 514.458805][T14536] ? trace_irq_disable+0x3b/0x140 [ 514.458836][T14536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.458870][T14536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.458896][T14536] RIP: 0033:0x7ff9d779f559 [ 514.458921][T14536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.458946][T14536] RSP: 002b:00007ff9d866f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.458975][T14536] RAX: ffffffffffffffda RBX: 00007ff9d7a25fa0 RCX: 00007ff9d779f559 [ 514.458994][T14536] RDX: 0000200000000140 RSI: 00000000c0145608 RDI: 0000000000000004 [ 514.459013][T14536] RBP: 00007ff9d7836b20 R08: 0000000000000000 R09: 0000000000000000 [ 514.459029][T14536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.459047][T14536] R13: 00007ff9d7a26038 R14: 00007ff9d7a25fa0 R15: 00007ffd7a093f28 [ 514.459090][T14536] [ 515.524255][ T5801] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 515.674580][ T5801] usb 1-1: Using ep0 maxpacket: 8 [ 515.685370][ T5801] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 515.691385][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 515.691420][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 515.691445][ T5801] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 515.691473][ T5801] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 515.691516][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.762521][ T5634] Bluetooth: hci3: command tx timeout [ 516.047788][T14451] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.048064][T14451] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.048276][T14451] bridge_slave_0: entered allmulticast mode [ 516.074816][T14451] bridge_slave_0: entered promiscuous mode [ 516.087646][T14451] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.087758][T14451] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.116145][T14451] bridge_slave_1: entered allmulticast mode [ 516.120493][T14451] bridge_slave_1: entered promiscuous mode [ 516.219423][T14451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.244694][T14451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.371205][T14451] team0: Port device team_slave_0 added [ 516.388669][T14451] team0: Port device team_slave_1 added [ 516.483961][T14451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.483984][T14451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.484015][T14451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.542826][T14451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.542847][T14451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.542880][T14451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.603165][ T5801] usb 1-1: config 0 descriptor?? [ 516.631743][T14550] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 517.015692][T14451] hsr_slave_0: entered promiscuous mode [ 517.028381][T14451] hsr_slave_1: entered promiscuous mode [ 517.038199][T14451] debugfs: 'hsr0' already exists in 'hsr' [ 517.038376][T14451] Cannot create hsr debugfs directory [ 517.243330][ T5634] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 517.249167][ T5776] usb 1-1: USB disconnect, device number 10 [ 517.772880][ T5640] Bluetooth: hci3: command tx timeout [ 518.702376][ T5776] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 518.853361][ T5776] usb 1-1: Using ep0 maxpacket: 16 [ 518.856494][ T5776] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 518.858158][ T5776] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 518.858186][ T5776] usb 1-1: config 0 has no interface number 0 [ 518.858230][ T5776] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 518.858260][ T5776] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 518.877242][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 518.877273][ T5776] usb 1-1: Product: syz [ 518.877292][ T5776] usb 1-1: SerialNumber: syz [ 518.941157][ T5776] usb 1-1: config 0 descriptor?? [ 518.955855][ T5776] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 518.958666][ T5776] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input33 [ 519.324736][T14626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.547858][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 519.550798][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 519.551082][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 519.551342][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 519.551560][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 519.551812][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 519.552026][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 519.552235][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 519.559422][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 519.567064][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 519.574580][ T5776] usb 1-1: USB disconnect, device number 11 [ 519.574711][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 519.681548][ T5776] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 519.852878][ T5640] Bluetooth: hci3: command tx timeout [ 520.647630][T14451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 520.669375][T14451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 520.672723][T14451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 520.696713][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 520.696735][ T30] audit: type=1326 audit(2000000013.509:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14666 comm="syz.0.2664" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f3f79f559 code=0x0 [ 520.711766][T14451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 520.718510][T14451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 520.918320][T14451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 520.925595][T14451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 521.061554][T14451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 521.429842][T14451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.496632][T14451] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.532158][ T3375] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.532348][ T3375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.615701][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.615818][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.853953][T14705] fuse: Bad value for 'fd' [ 522.058561][T14712] Set syz1 is full, maxelem 1029 reached [ 522.773942][T14710] loop2: detected capacity change from 0 to 32768 [ 522.777318][T14710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2675 (14710) [ 522.970384][T14710] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 522.970424][T14710] BTRFS info (device loop2): using crc32c checksum algorithm [ 523.152154][T14757] netlink: 'syz.1.2684': attribute type 39 has an invalid length. [ 523.187178][T14710] BTRFS info (device loop2): enabling ssd optimizations [ 523.187210][T14710] BTRFS info (device loop2): turning on flush-on-commit [ 523.187231][T14710] BTRFS info (device loop2): enabling free space tree [ 523.187251][T14710] BTRFS info (device loop2): enabling auto defrag [ 523.187273][T14710] BTRFS info (device loop2): use lzo compression, level 1 [ 523.187305][T14710] BTRFS info (device loop2): max_inline set to 4096 [ 523.789909][T11611] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 523.836667][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.121045][T14776] FAULT_INJECTION: forcing a failure. [ 524.121045][T14776] name failslab, interval 1, probability 0, space 0, times 0 [ 524.121090][T14776] CPU: 1 UID: 0 PID: 14776 Comm: syz.1.2687 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.121125][T14776] Tainted: [L]=SOFTLOCKUP [ 524.121136][T14776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 524.121152][T14776] Call Trace: [ 524.121164][T14776] [ 524.121175][T14776] dump_stack_lvl+0xe8/0x150 [ 524.121221][T14776] should_fail_ex+0x410/0x560 [ 524.121269][T14776] should_failslab+0xa8/0x100 [ 524.121317][T14776] __kmalloc_noprof+0xf9/0x710 [ 524.121349][T14776] ? nft_pernet+0x23/0x240 [ 524.121384][T14776] ? nf_tables_newrule+0x1524/0x28a0 [ 524.121416][T14776] ? nf_tables_newrule+0x1524/0x28a0 [ 524.121459][T14776] nf_tables_newrule+0x1524/0x28a0 [ 524.121512][T14776] ? __pfx_nf_tables_newrule+0x10/0x10 [ 524.121544][T14776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.121576][T14776] ? lock_acquire+0x115/0x350 [ 524.121611][T14776] ? nfnl_pernet+0x23/0x240 [ 524.121657][T14776] ? __nla_parse+0x40/0x60 [ 524.121692][T14776] nfnetlink_rcv+0x1288/0x28c0 [ 524.121769][T14776] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 524.121822][T14776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.121854][T14776] ? ref_tracker_free+0x689/0x830 [ 524.121911][T14776] ? skb_clone+0x246/0x3a0 [ 524.121949][T14776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.121979][T14776] ? __netlink_deliver_tap+0x811/0x860 [ 524.122022][T14776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.122057][T14776] ? netlink_deliver_tap+0x2e/0x1b0 [ 524.122092][T14776] ? netlink_deliver_tap+0x2e/0x1b0 [ 524.122137][T14776] netlink_unicast+0x8ef/0xa80 [ 524.122193][T14776] netlink_sendmsg+0x884/0xba0 [ 524.122231][T14776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.122272][T14776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.122320][T14776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.122349][T14776] ? aa_sock_msg_perm+0x144/0x210 [ 524.122383][T14776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.122411][T14776] ? apparmor_socket_sendmsg+0x98/0x360 [ 524.122445][T14776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.122480][T14776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.122516][T14776] sock_sendmsg_nosec+0x13a/0x180 [ 524.122558][T14776] ____sys_sendmsg+0x54e/0x850 [ 524.122596][T14776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.122630][T14776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.122667][T14776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.122697][T14776] ? import_iovec+0x73/0xa0 [ 524.122731][T14776] ___sys_sendmsg+0x2a5/0x360 [ 524.122759][T14776] ? __lock_acquire+0x747/0x2de0 [ 524.122792][T14776] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.122825][T14776] ? futex_wake+0x51b/0x5f0 [ 524.122881][T14776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.122909][T14776] ? __fget_files+0x3a2/0x420 [ 524.122935][T14776] ? __fget_files+0x2a/0x420 [ 524.122972][T14776] __x64_sys_sendmsg+0x1b1/0x290 [ 524.123000][T14776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.123029][T14776] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.123069][T14776] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.123113][T14776] do_syscall_64+0x166/0x520 [ 524.123144][T14776] ? trace_irq_disable+0x3b/0x140 [ 524.123171][T14776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.123202][T14776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.123228][T14776] RIP: 0033:0x7ff9d779f559 [ 524.123250][T14776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.123268][T14776] RSP: 002b:00007ff9d866f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.123297][T14776] RAX: ffffffffffffffda RBX: 00007ff9d7a25fa0 RCX: 00007ff9d779f559 [ 524.123313][T14776] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 524.123327][T14776] RBP: 00007ff9d7836b20 R08: 0000000000000000 R09: 0000000000000000 [ 524.123341][T14776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.123353][T14776] R13: 00007ff9d7a26038 R14: 00007ff9d7a25fa0 R15: 00007ffd7a093f28 [ 524.123389][T14776] [ 524.458671][T14451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.854231][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.982760][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 524.993338][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 525.007714][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 525.009803][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 525.012108][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 525.224797][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.333448][T14451] veth0_vlan: entered promiscuous mode [ 525.359942][T14451] veth1_vlan: entered promiscuous mode [ 525.673153][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.808731][T14451] veth0_macvtap: entered promiscuous mode [ 525.830491][T14451] veth1_macvtap: entered promiscuous mode [ 525.931920][T14451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.990324][T14451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.054873][ T6080] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.295233][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.295437][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.295716][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.913736][ T66] bridge_slave_1: left allmulticast mode [ 526.913768][ T66] bridge_slave_1: left promiscuous mode [ 526.913993][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.950853][ T66] bridge_slave_0: left allmulticast mode [ 526.950881][ T66] bridge_slave_0: left promiscuous mode [ 526.968170][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.132836][ T5634] Bluetooth: hci1: command tx timeout [ 527.349631][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.380968][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.397014][ T66] bond0 (unregistering): Released all slaves [ 527.497357][T14859] ipvlan2: entered promiscuous mode [ 527.737030][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.737058][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.789751][T14791] rxe_eth0 speed is unknown, defaulting to 1000 [ 528.042012][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.042041][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.732559][ T5634] Bluetooth: hci4: command 0x1003 tx timeout [ 528.732673][ T5640] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 528.929543][T14893] syz_tun: entered allmulticast mode [ 528.929791][T14893] syz_tun: left allmulticast mode [ 529.212853][ T5640] Bluetooth: hci1: command tx timeout [ 529.577086][ T66] hsr_slave_0: left promiscuous mode [ 529.581121][ T66] hsr_slave_1: left promiscuous mode [ 529.584989][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.585015][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.617395][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.617424][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.669171][ T66] veth1_macvtap: left promiscuous mode [ 529.669221][ T66] veth0_macvtap: left promiscuous mode [ 529.669335][ T66] veth1_vlan: left promiscuous mode [ 529.669409][ T66] veth0_vlan: left promiscuous mode [ 529.923321][T14936] FAULT_INJECTION: forcing a failure. [ 529.923321][T14936] name failslab, interval 1, probability 0, space 0, times 0 [ 529.923370][T14936] CPU: 1 UID: 0 PID: 14936 Comm: syz.2.2730 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.923404][T14936] Tainted: [L]=SOFTLOCKUP [ 529.923414][T14936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 529.923430][T14936] Call Trace: [ 529.923440][T14936] [ 529.923455][T14936] dump_stack_lvl+0xe8/0x150 [ 529.923499][T14936] should_fail_ex+0x410/0x560 [ 529.923546][T14936] should_failslab+0xa8/0x100 [ 529.923587][T14936] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 529.923620][T14936] ? __kasan_kmalloc+0x93/0xb0 [ 529.923655][T14936] ? allocate_partition+0x193/0x1980 [ 529.923693][T14936] ? allocate_partition+0x193/0x1980 [ 529.923731][T14936] ? __kmalloc_cache_noprof+0x148/0x600 [ 529.923769][T14936] kstrdup+0x42/0x100 [ 529.923804][T14936] allocate_partition+0x193/0x1980 [ 529.923850][T14936] ? is_bpf_text_address+0x26/0x2b0 [ 529.923899][T14936] mtd_add_partition+0x25e/0x590 [ 529.923946][T14936] ? __pfx_mtd_add_partition+0x10/0x10 [ 529.924005][T14936] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 529.924036][T14936] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 529.924082][T14936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.924131][T14936] mtdchar_ioctl+0x14f7/0x1bc0 [ 529.924180][T14936] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 529.924233][T14936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.924264][T14936] ? __lock_acquire+0x747/0x2de0 [ 529.924302][T14936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.924338][T14936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.924377][T14936] ? tomoyo_path_number_perm+0x219/0x5f0 [ 529.924425][T14936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.924455][T14936] ? __mutex_trylock_common+0x15f/0x270 [ 529.924496][T14936] ? __pfx___mutex_trylock_common+0x10/0x10 [ 529.924537][T14936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.924567][T14936] ? rcu_is_watching+0x16/0xb0 [ 529.924602][T14936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.924633][T14936] ? trace_contention_end+0x3d/0x140 [ 529.924671][T14936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.924701][T14936] ? __mutex_lock+0x305/0x15a0 [ 529.924736][T14936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.924766][T14936] ? hook_file_ioctl+0x1f2/0x600 [ 529.924805][T14936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.924844][T14936] ? mtdchar_unlocked_ioctl+0xa1/0xd0 [ 529.924888][T14936] ? __pfx___mutex_lock+0x10/0x10 [ 529.924935][T14936] ? __fget_files+0x2a/0x420 [ 529.924960][T14936] ? srso_alias_return_thunk+0x5/0xfbef5 [ 529.924992][T14936] ? __fget_files+0x2a/0x420 [ 529.925024][T14936] mtdchar_unlocked_ioctl+0xae/0xd0 [ 529.925064][T14936] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 529.925106][T14936] __se_sys_ioctl+0xfc/0x170 [ 529.925142][T14936] do_syscall_64+0x166/0x520 [ 529.925174][T14936] ? trace_irq_disable+0x3b/0x140 [ 529.925204][T14936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.925237][T14936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.925264][T14936] RIP: 0033:0x7f8f40d9f559 [ 529.925286][T14936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.925308][T14936] RSP: 002b:00007f8f41d51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 529.925335][T14936] RAX: ffffffffffffffda RBX: 00007f8f41025fa0 RCX: 00007f8f40d9f559 [ 529.925360][T14936] RDX: 00002000000009c0 RSI: 0000000000001269 RDI: 0000000000000004 [ 529.925378][T14936] RBP: 00007f8f40e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 529.925394][T14936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.925410][T14936] R13: 00007f8f41026038 R14: 00007f8f41025fa0 R15: 00007ffdb57a56e8 [ 529.925453][T14936] [ 530.065884][T14936] memory allocation error while creating partitions for "mtdram test device" [ 530.862907][ T6080] IPVS: starting estimator thread 0... [ 530.886982][T14967] IPVS: fo: FWM 3 0x00000003 - no destination available [ 530.954452][T14970] IPVS: using max 25 ests per chain, 60000 per kthread [ 531.066300][ T66] team0 (unregistering): Port device team_slave_1 removed [ 531.162973][ T66] team0 (unregistering): Port device team_slave_0 removed [ 531.202070][T14977] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2742'. [ 531.236994][T14977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2742'. [ 531.292746][ T5640] Bluetooth: hci1: command tx timeout [ 531.329101][T14965] loop2: detected capacity change from 0 to 40427 [ 531.347311][T14965] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 531.347334][T14965] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 531.355659][T14965] F2FS-fs (loop2): invalid crc value [ 531.815754][T14965] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 531.852046][T14965] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 531.852078][T14965] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 532.038067][T14993] syz.2.2739: attempt to access beyond end of device [ 532.038067][T14993] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 532.127134][T14987] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 532.130853][T14987] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 532.131155][T14987] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 532.422054][T11611] syz-executor: attempt to access beyond end of device [ 532.422054][T11611] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 532.442684][T11611] CPU: 1 UID: 0 PID: 11611 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 532.442725][T11611] Tainted: [L]=SOFTLOCKUP [ 532.442738][T11611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 532.442754][T11611] Call Trace: [ 532.442765][T11611] [ 532.442776][T11611] dump_stack_lvl+0xe8/0x150 [ 532.442825][T11611] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 532.442861][T11611] f2fs_write_end_bio+0x1211/0x16e0 [ 532.442901][T11611] ? blkg_put+0x22/0x240 [ 532.442947][T11611] __submit_merged_bio+0x258/0x6a0 [ 532.442976][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.443007][T11611] ? rcu_is_watching+0x16/0xb0 [ 532.443050][T11611] __submit_merged_write_cond+0x3c9/0x4e0 [ 532.443091][T11611] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 532.443138][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.443179][T11611] f2fs_write_data_pages+0x2a1d/0x36f0 [ 532.443213][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.443243][T11611] ? is_bpf_text_address+0x292/0x2b0 [ 532.443322][T11611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 532.443410][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.443441][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.443470][T11611] ? __bfs+0x153/0x290 [ 532.443499][T11611] ? __pfx_hlock_conflict+0x10/0x10 [ 532.443541][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.443585][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.443615][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.443645][T11611] ? __lock_acquire+0x1511/0x2de0 [ 532.443708][T11611] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 532.443744][T11611] do_writepages+0x338/0x560 [ 532.443780][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.443819][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.443855][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.443884][T11611] ? do_raw_spin_unlock+0xf5/0x200 [ 532.443930][T11611] filemap_fdatawrite+0x1e9/0x2f0 [ 532.443968][T11611] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 532.444047][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.444082][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.444117][T11611] ? do_raw_spin_unlock+0xf5/0x200 [ 532.444166][T11611] f2fs_sync_dirty_inodes+0x30e/0x830 [ 532.444221][T11611] f2fs_write_checkpoint+0xa38/0x2710 [ 532.444257][T11611] ? __lock_acquire+0x747/0x2de0 [ 532.444325][T11611] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 532.444361][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.444457][T11611] kill_f2fs_super+0x2dd/0x700 [ 532.444505][T11611] ? __pfx_kill_f2fs_super+0x10/0x10 [ 532.444555][T11611] ? call_rcu+0x64d/0x8b0 [ 532.444589][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.444616][T11611] ? lockdep_hardirqs_on+0x7b/0x110 [ 532.444648][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.444692][T11611] deactivate_locked_super+0xbe/0x110 [ 532.444737][T11611] cleanup_mnt+0x204/0x2a0 [ 532.444776][T11611] task_work_run+0x1d9/0x260 [ 532.444817][T11611] ? __pfx_task_work_run+0x10/0x10 [ 532.444861][T11611] exit_to_user_mode_loop+0x204/0x770 [ 532.444891][T11611] ? srso_alias_return_thunk+0x5/0xfbef5 [ 532.444920][T11611] ? rcu_is_watching+0x16/0xb0 [ 532.444960][T11611] do_syscall_64+0x328/0x520 [ 532.444994][T11611] ? trace_irq_disable+0x3b/0x140 [ 532.445024][T11611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.445058][T11611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.445085][T11611] RIP: 0033:0x7f8f40da0797 [ 532.445109][T11611] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 532.445130][T11611] RSP: 002b:00007ffdb57a4958 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 532.445157][T11611] RAX: 0000000000000000 RBX: 00007f8f40e35f63 RCX: 00007f8f40da0797 [ 532.445174][T11611] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb57a4a10 [ 532.445191][T11611] RBP: 00007ffdb57a4a10 R08: 00007ffdb57a5a10 R09: 00000000ffffffff [ 532.445210][T11611] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb57a5aa0 [ 532.445227][T11611] R13: 00007f8f40e35f63 R14: 0000000000081e5b R15: 00007ffdb57a5ae0 [ 532.445268][T11611] [ 532.446247][T11611] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 533.023501][ T66] IPVS: stop unused estimator thread 0... [ 533.377463][ T5640] Bluetooth: hci1: command tx timeout [ 533.574550][T14791] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.576338][T14791] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.576508][T14791] bridge_slave_0: entered allmulticast mode [ 533.580026][T14791] bridge_slave_0: entered promiscuous mode [ 533.591721][T14791] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.594021][T14791] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.594175][T14791] bridge_slave_1: entered allmulticast mode [ 533.600185][T14791] bridge_slave_1: entered promiscuous mode [ 533.852005][T14791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.852339][T15017] syzkaller1: entered promiscuous mode [ 533.852361][T15017] syzkaller1: entered allmulticast mode [ 533.864963][T14791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.127787][T14791] team0: Port device team_slave_0 added [ 534.141273][T14791] team0: Port device team_slave_1 added [ 534.179776][T14996] overlayfs: failed to clone upperpath [ 534.181874][T15036] netlink: 'syz.4.2753': attribute type 10 has an invalid length. [ 534.181895][T15036] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2753'. [ 535.400504][T14791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.400527][T14791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.400560][T14791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.412016][T14791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.412036][T14791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.412068][T14791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.739694][T14791] hsr_slave_0: entered promiscuous mode [ 535.745767][T14791] hsr_slave_1: entered promiscuous mode [ 535.746558][T14791] debugfs: 'hsr0' already exists in 'hsr' [ 535.746580][T14791] Cannot create hsr debugfs directory [ 535.945686][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2765'. [ 537.671573][T15089] loop2: detected capacity change from 0 to 4096 [ 537.701646][T15089] EXT4-fs: Ignoring removed mblk_io_submit option [ 537.701761][T15089] EXT4-fs: Ignoring removed orlov option [ 537.761235][T15089] EXT4-fs (loop2): Test dummy encryption mode enabled [ 537.817443][T15089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.076783][T15101] overlayfs: failed to clone upperpath [ 538.268891][T14791] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.268939][T14791] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.460333][T11611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.849682][T14791] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.849729][T14791] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.259256][T14791] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.265621][T14791] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.500742][T14791] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.500785][T14791] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.622634][T15140] lo: entered promiscuous mode [ 539.653710][T15140] tunl0: entered promiscuous mode [ 539.653997][T15140] gre0: entered promiscuous mode [ 539.683283][T15140] erspan0: entered promiscuous mode [ 539.691090][T15140] ip_vti0: entered promiscuous mode [ 539.715556][T15140] ip6_vti0: entered promiscuous mode [ 539.733391][T15140] sit0: entered promiscuous mode [ 539.751030][T15140] ip6tnl0: entered promiscuous mode [ 539.765983][T15140] ip6gre0: entered promiscuous mode [ 539.770031][T15154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2784'. [ 539.800199][T15140] syz_tun: entered promiscuous mode [ 539.821537][T15140] ip6gretap0: entered promiscuous mode [ 539.840489][T15140] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.840756][T15140] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.845280][T15140] bridge0: entered promiscuous mode [ 539.961530][T15140] dummy0: entered promiscuous mode [ 540.033526][T15140] nlmon0: entered promiscuous mode [ 540.046109][T15140] batadv0: entered promiscuous mode [ 540.089482][T15172] loop2: detected capacity change from 0 to 1024 [ 540.121160][T15140] veth0: entered promiscuous mode [ 540.131055][T15140] veth1: entered promiscuous mode [ 540.157699][T15140] wg0: entered promiscuous mode [ 540.170661][T15140] wg1: entered promiscuous mode [ 540.200390][T15174] af_packet: tpacket_rcv: packet too big, clamped from 2595 to 4294967272. macoff=96 [ 540.225500][T15140] wg2: entered promiscuous mode [ 540.227288][T15140] veth0_to_bridge: entered promiscuous mode [ 540.231541][T15140] veth1_to_bridge: entered promiscuous mode [ 540.256173][T15140] veth0_to_bond: entered promiscuous mode [ 540.259561][T15140] veth1_to_bond: entered promiscuous mode [ 540.275780][T15140] veth0_to_team: entered promiscuous mode [ 540.289417][T15140] veth1_to_team: entered promiscuous mode [ 540.309866][T15140] veth0_to_batadv: entered promiscuous mode [ 540.312218][T15140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.327893][T15140] batadv_slave_0: entered promiscuous mode [ 540.330344][T15140] veth1_to_batadv: entered promiscuous mode [ 540.345302][T15140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.345359][T15140] batadv_slave_1: entered promiscuous mode [ 540.347733][T15140] xfrm0: entered promiscuous mode [ 540.349847][T15140] veth0_to_hsr: entered promiscuous mode [ 540.417297][T15140] veth1_to_hsr: entered promiscuous mode [ 540.497830][T15140] hsr0: entered promiscuous mode [ 540.540336][T15140] veth1_virt_wifi: entered promiscuous mode [ 540.595638][T15140] veth0_virt_wifi: entered promiscuous mode [ 540.618324][T15140] virt_wifi0: entered promiscuous mode [ 540.665264][T15140] macvtap0: entered promiscuous mode [ 540.678641][T15140] macsec0: entered promiscuous mode [ 540.703486][T15140] geneve0: entered promiscuous mode [ 540.711031][T15140] geneve1: entered promiscuous mode [ 540.749819][T15140] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 540.767690][T15140] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 540.780600][T15140] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 540.827015][T15140] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 540.845069][T15140] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 540.861496][T15140] D: entered promiscuous mode [ 540.872152][T15140] sit1: entered promiscuous mode [ 540.918337][T15140] bond1: entered promiscuous mode [ 540.919305][T15140] gre1: entered promiscuous mode [ 540.954804][ T1015] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.954846][ T1015] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.954897][ T1015] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.967727][ T1015] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.385370][ T6080] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.385411][ T6080] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.387844][ T1097] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.387875][ T1097] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.608024][T15202] xt_hashlimit: size too large, truncated to 1048576 [ 541.906872][T14791] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 541.924533][T14791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.928787][T14791] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 541.961164][T14791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.964808][T14791] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 541.992526][T14791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 541.996920][T14791] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 542.031510][T14791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.422183][T15243] netlink: 'syz.1.2808': attribute type 12 has an invalid length. [ 542.628016][T14791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.715570][T14791] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.767030][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.767150][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.840500][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.840621][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.271758][T15280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2819'. [ 544.376394][T15288] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 544.921741][T15307] overlayfs: failed to clone upperpath [ 545.047722][T15313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'. [ 545.438294][T14791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.716043][T15329] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2832'. [ 546.148703][T15345] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2834'. [ 546.327770][T15350] overlayfs: failed to clone upperpath [ 546.605122][T15321] loop2: detected capacity change from 0 to 32768 [ 546.625065][T15321] xfs: Deprecated parameter 'attr2' [ 546.625089][T15321] XFS: attr2 mount option is deprecated. [ 546.712633][T15321] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 546.836823][T14791] veth0_vlan: entered promiscuous mode [ 546.899676][T15321] XFS (loop2): Ending clean mount [ 546.958510][T14791] veth1_vlan: entered promiscuous mode [ 547.042562][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2840'. [ 547.066389][T15321] XFS (loop2): Quotacheck needed: Please wait. [ 547.234893][ T31] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 547.240304][T14791] veth0_macvtap: entered promiscuous mode [ 547.284670][T14791] veth1_macvtap: entered promiscuous mode [ 547.440220][T14791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.480457][T14791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.548569][ T6080] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.549663][ T6080] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.549743][ T6080] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.550247][T15321] XFS (loop2): Quotacheck: Done. [ 547.553100][ T445] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.761275][T15385] tipc: Started in network mode [ 547.761302][T15385] tipc: Node identity 1000004, cluster identity 4711 [ 547.761318][T15385] tipc: Node number set to 16777220 [ 547.823872][T15385] tipc: Enabled bearer , priority 0 [ 547.919066][T11611] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 547.947510][T15387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2842'. [ 547.947554][T15387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2842'. [ 548.206305][ T6080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.206339][ T6080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.451217][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.451242][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.195307][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2853'. [ 549.295654][T15428] FAULT_INJECTION: forcing a failure. [ 549.295654][T15428] name fail_futex, interval 1, probability 0, space 0, times 0 [ 549.295697][T15428] CPU: 1 UID: 0 PID: 15428 Comm: syz.2.2855 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.295730][T15428] Tainted: [L]=SOFTLOCKUP [ 549.295741][T15428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 549.295756][T15428] Call Trace: [ 549.295767][T15428] [ 549.295779][T15428] dump_stack_lvl+0xe8/0x150 [ 549.295828][T15428] should_fail_ex+0x410/0x560 [ 549.295874][T15428] get_futex_key+0x1ab/0x1410 [ 549.295924][T15428] ? __pfx_get_futex_key+0x10/0x10 [ 549.295960][T15428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 549.296002][T15428] futex_wake+0x119/0x5f0 [ 549.296037][T15428] ? __pfx_futex_wake+0x10/0x10 [ 549.296073][T15428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 549.296115][T15428] do_futex+0x458/0x4e0 [ 549.296150][T15428] ? mntput_no_expire+0x1c/0x1c0 [ 549.296194][T15428] ? __pfx_do_futex+0x10/0x10 [ 549.296234][T15428] ? mntput_no_expire+0x1c/0x1c0 [ 549.296278][T15428] __se_sys_futex+0x3a8/0x450 [ 549.296324][T15428] ? __pfx___se_sys_futex+0x10/0x10 [ 549.296370][T15428] ? __pfx___se_sys_fsmount+0x10/0x10 [ 549.296403][T15428] ? srso_alias_return_thunk+0x5/0xfbef5 [ 549.296433][T15428] ? __x64_sys_futex+0x21/0xf0 [ 549.296475][T15428] do_syscall_64+0x166/0x520 [ 549.296509][T15428] ? trace_irq_disable+0x3b/0x140 [ 549.296540][T15428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.296573][T15428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.296600][T15428] RIP: 0033:0x7f8f40d9f559 [ 549.296623][T15428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.296646][T15428] RSP: 002b:00007f8f41d510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 549.296673][T15428] RAX: ffffffffffffffda RBX: 00007f8f41025fa8 RCX: 00007f8f40d9f559 [ 549.296693][T15428] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8f41025fac [ 549.296712][T15428] RBP: 00007f8f41025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 549.296731][T15428] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 549.296747][T15428] R13: 00007f8f41026038 R14: 00007ffdb57a5600 R15: 00007ffdb57a56e8 [ 549.296788][T15428] [ 550.262212][T15464] fuse: Bad value for 'fd' [ 550.506585][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 550.675886][T15468] FAULT_INJECTION: forcing a failure. [ 550.675886][T15468] name failslab, interval 1, probability 0, space 0, times 0 [ 550.675932][T15468] CPU: 0 UID: 0 PID: 15468 Comm: syz.6.2867 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.675967][T15468] Tainted: [L]=SOFTLOCKUP [ 550.675978][T15468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 550.675993][T15468] Call Trace: [ 550.676004][T15468] [ 550.676015][T15468] dump_stack_lvl+0xe8/0x150 [ 550.676061][T15468] should_fail_ex+0x410/0x560 [ 550.676106][T15468] ? __alloc_skb+0x1db/0x7a0 [ 550.676135][T15468] should_failslab+0xa8/0x100 [ 550.676175][T15468] ? __alloc_skb+0x1db/0x7a0 [ 550.676200][T15468] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 550.676232][T15468] ? __alloc_skb+0x18d/0x7a0 [ 550.676260][T15468] ? __alloc_skb+0x1db/0x7a0 [ 550.676295][T15468] __alloc_skb+0x1db/0x7a0 [ 550.676329][T15468] xfrm_send_state_notify+0x888/0x18d0 [ 550.676376][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.676414][T15468] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 550.676454][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.676489][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.676519][T15468] ? __local_bh_enable_ip+0xd6/0x140 [ 550.676555][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.676586][T15468] ? xfrm_state_add+0x8f2/0xd40 [ 550.676622][T15468] ? xfrm_policy_inexact_insert_node+0xa22/0xb90 [ 550.676654][T15468] ? km_state_notify+0x25/0x1f0 [ 550.676679][T15468] ? km_state_notify+0x25/0x1f0 [ 550.676703][T15468] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 550.676745][T15468] km_state_notify+0x110/0x1f0 [ 550.676776][T15468] xfrm_add_sa+0x36ff/0x40a0 [ 550.676815][T15468] ? __pfx_xfrm_add_sa+0x10/0x10 [ 550.676839][T15468] ? apparmor_capable+0x126/0x170 [ 550.676886][T15468] ? __nla_parse+0x40/0x60 [ 550.676920][T15468] xfrm_user_rcv_msg+0x7a8/0xf30 [ 550.676951][T15468] ? look_up_lock_class+0x57/0x110 [ 550.676988][T15468] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 550.677055][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.677085][T15468] ? __mutex_trylock_common+0x15f/0x270 [ 550.677127][T15468] ? __pfx___mutex_trylock_common+0x10/0x10 [ 550.677167][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.677198][T15468] ? rcu_is_watching+0x16/0xb0 [ 550.677233][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.677263][T15468] ? trace_contention_end+0x3d/0x140 [ 550.677311][T15468] netlink_rcv_skb+0x226/0x4a0 [ 550.677345][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.677378][T15468] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 550.677408][T15468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 550.677460][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.677494][T15468] ? netlink_deliver_tap+0x2e/0x1b0 [ 550.677530][T15468] ? netlink_deliver_tap+0x2e/0x1b0 [ 550.677569][T15468] xfrm_netlink_rcv+0x79/0x90 [ 550.677597][T15468] netlink_unicast+0x8ef/0xa80 [ 550.677651][T15468] netlink_sendmsg+0x884/0xba0 [ 550.677700][T15468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.677741][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.677771][T15468] ? aa_sock_msg_perm+0x144/0x210 [ 550.677803][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.677833][T15468] ? apparmor_socket_sendmsg+0x98/0x360 [ 550.677877][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.677911][T15468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.677947][T15468] sock_sendmsg_nosec+0x13a/0x180 [ 550.677990][T15468] ____sys_sendmsg+0x54e/0x850 [ 550.678029][T15468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.678064][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.678101][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.678132][T15468] ? import_iovec+0x73/0xa0 [ 550.678165][T15468] ___sys_sendmsg+0x2a5/0x360 [ 550.678194][T15468] ? __lock_acquire+0x747/0x2de0 [ 550.678231][T15468] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.678268][T15468] ? futex_wait+0x2a2/0x390 [ 550.678334][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.678364][T15468] ? __fget_files+0x3a2/0x420 [ 550.678391][T15468] ? __fget_files+0x2a/0x420 [ 550.678429][T15468] __x64_sys_sendmsg+0x1b1/0x290 [ 550.678461][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.678495][T15468] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 550.678538][T15468] ? srso_alias_return_thunk+0x5/0xfbef5 [ 550.678584][T15468] do_syscall_64+0x166/0x520 [ 550.678617][T15468] ? trace_irq_disable+0x3b/0x140 [ 550.678648][T15468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.678682][T15468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.678708][T15468] RIP: 0033:0x7f97ffd9f559 [ 550.678732][T15468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.678754][T15468] RSP: 002b:00007f9800cf4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.678781][T15468] RAX: ffffffffffffffda RBX: 00007f9800025fa0 RCX: 00007f97ffd9f559 [ 550.678802][T15468] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 550.678819][T15468] RBP: 00007f97ffe36b20 R08: 0000000000000000 R09: 0000000000000000 [ 550.678835][T15468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.678851][T15468] R13: 00007f9800026038 R14: 00007f9800025fa0 R15: 00007ffebd0b9088 [ 550.678900][T15468] [ 551.101433][T15476] syzkaller1: entered promiscuous mode [ 551.101459][T15476] syzkaller1: entered allmulticast mode [ 552.329302][T15507] fuse: Bad value for 'fd' [ 553.029075][T15518] bridge0: port 1(veth0) entered blocking state [ 553.029206][T15518] bridge0: port 1(veth0) entered disabled state [ 553.029394][T15518] veth0: entered allmulticast mode [ 553.048485][T15518] veth0: entered promiscuous mode [ 553.078774][T15518] bridge0: port 1(veth0) entered blocking state [ 553.078907][T15518] bridge0: port 1(veth0) entered forwarding state [ 553.143063][ T5276] 8021q: adding VLAN 0 to HW filter on device eth6 [ 553.376023][T15534] loop6: detected capacity change from 0 to 512 [ 553.412527][T15534] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 553.493558][T15534] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.2887: bad orphan inode 15 [ 553.493596][T15534] loop6: lost filesystem error report for type 5 error -117 [ 553.502312][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 553.502346][ C1] EXT4-fs (loop6): initial error at time 2000000046: ext4_orphan_get:1429 [ 553.502374][ C1] EXT4-fs (loop6): last error at time 2000000046: ext4_orphan_get:1429 [ 553.503538][T15534] ext4_test_bit(bit=14, block=18) = 1 [ 553.503558][T15534] is_bad_inode(inode)=0 [ 553.503569][T15534] NEXT_ORPHAN(inode)=1023 [ 553.503580][T15534] max_ino=32 [ 553.503590][T15534] i_nlink=0 [ 553.627447][T15534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 553.627903][T15534] ext2 filesystem being mounted at /8/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 553.988887][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2893'. [ 554.074564][T15561] bond0: (slave bond_slave_1): Releasing backup interface [ 554.132367][T15164] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 554.249836][T15547] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set [ 554.293186][T15164] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 554.294677][T15164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.320320][T15164] usb 2-1: config 0 descriptor?? [ 554.506173][T14791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 554.538739][T15164] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 554.557682][ T5276] 8021q: adding VLAN 0 to HW filter on device eth7 [ 554.823941][T15164] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 554.823972][T15164] [drm] Initialized udl on minor 1 [ 554.951234][T15164] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 554.951704][T15164] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 554.960317][T15168] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 554.992945][T15164] usb 2-1: USB disconnect, device number 26 [ 555.005502][T15168] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 555.005716][T15168] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 555.994110][ T5276] 8021q: adding VLAN 0 to HW filter on device eth8 [ 556.271037][T15626] xt_hashlimit: size too large, truncated to 1048576 [ 557.509140][T15657] xt_hashlimit: size too large, truncated to 1048576 [ 557.695820][T15164] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 557.863381][T15164] usb 7-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 557.865477][T15164] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.893272][T15164] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.893305][T15164] usb 7-1: Product: syz [ 557.893324][T15164] usb 7-1: Manufacturer: syz [ 557.893341][T15164] usb 7-1: SerialNumber: syz [ 557.931767][T15164] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 558.118570][T15666] infiniband syz0: set down [ 558.118624][T15666] infiniband syz0: added bond0 [ 558.191894][T15666] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 558.191969][T15666] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 558.192019][T15666] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 558.318701][T15666] RDS/IB: syz0: added [ 558.318796][T15666] smc: adding ib device syz0 with port count 1 [ 558.318817][T15666] smc: ib device syz0 port 1 has no pnetid [ 558.600856][T15164] gspca_mr97310a: reg write [21] error -71 [ 558.601003][T15164] mr97310a 7-1:1.0: probe with driver mr97310a failed with error -71 [ 558.695699][T15164] usb 7-1: USB disconnect, device number 18 [ 559.127009][T15691] lo: entered promiscuous mode [ 559.179744][T15691] tunl0: entered promiscuous mode [ 559.202821][T15691] gre0: entered promiscuous mode [ 559.217817][T15679] loop2: detected capacity change from 0 to 131072 [ 559.221678][T15679] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 559.221706][T15679] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 559.221734][T15679] F2FS-fs (loop2): Test dummy encryption mode enabled [ 559.287400][T15679] F2FS-fs (loop2): invalid crc value [ 559.358103][T15679] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 559.358164][T15679] loop2: lost filesystem error report for type 5 error -117 [ 559.380845][T15679] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 559.391125][T15691] gretap0: entered promiscuous mode [ 559.392998][T15679] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 559.393024][T15679] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 559.393053][T15679] F2FS-fs (loop2): Start checkpoint disabled! [ 559.413786][T15679] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 559.425285][T15679] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 559.425344][T15679] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 559.479711][T15691] erspan0: entered promiscuous mode [ 559.510710][T15691] ip_vti0: entered promiscuous mode [ 559.544946][T15691] ip6_vti0: entered promiscuous mode [ 559.582155][T15691] sit0: entered promiscuous mode [ 559.616268][T15691] ip6tnl0: entered promiscuous mode [ 559.683063][T15691] ip6gre0: entered promiscuous mode [ 559.704692][T15691] tipc: Resetting bearer [ 559.744820][T15691] syz_tun: entered promiscuous mode [ 559.807779][T15691] ip6gretap0: entered promiscuous mode [ 559.826768][T15691] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.827416][T15691] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.844493][T15691] bridge0: entered promiscuous mode [ 559.875586][T15691] vcan0: entered promiscuous mode [ 559.923964][T15691] bond0: entered promiscuous mode [ 559.923992][T15691] bond_slave_0: entered promiscuous mode [ 559.924203][T15691] bond_slave_1: entered promiscuous mode [ 559.953062][T15691] team0: entered promiscuous mode [ 559.953086][T15691] team_slave_0: entered promiscuous mode [ 559.953300][T15691] team_slave_1: entered promiscuous mode [ 559.960991][T15691] dummy0: entered promiscuous mode [ 560.003473][T15691] nlmon0: entered promiscuous mode [ 560.007056][T15691] batadv0: entered promiscuous mode [ 560.025498][T15691] veth0: entered promiscuous mode [ 560.039138][T15691] veth1: entered promiscuous mode [ 560.056712][T15691] wg0: entered promiscuous mode [ 560.071086][T15691] wg2: entered promiscuous mode [ 560.078909][T15691] veth0_to_bridge: entered promiscuous mode [ 560.090324][T15691] veth1_to_bridge: entered promiscuous mode [ 560.101400][T15691] veth0_to_bond: entered promiscuous mode [ 560.111946][T15691] veth1_to_bond: entered promiscuous mode [ 560.125600][T15691] veth0_to_team: entered promiscuous mode [ 560.130211][T15691] veth1_to_team: entered promiscuous mode [ 560.147494][T15691] veth0_to_batadv: entered promiscuous mode [ 560.150091][T15691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.150146][T15691] batadv_slave_0: entered promiscuous mode [ 560.184937][T15691] veth1_to_batadv: entered promiscuous mode [ 560.189863][T15691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.189922][T15691] batadv_slave_1: entered promiscuous mode [ 560.219220][T15691] xfrm0: entered promiscuous mode [ 560.228592][T15691] veth0_to_hsr: entered promiscuous mode [ 560.241209][T15691] veth1_to_hsr: entered promiscuous mode [ 560.266796][T15691] hsr0: entered promiscuous mode [ 560.271565][T15691] veth1_virt_wifi: entered promiscuous mode [ 560.291272][T15691] veth0_virt_wifi: entered promiscuous mode [ 560.342623][T15691] virt_wifi0: entered promiscuous mode [ 560.377749][T15691] vlan0: entered promiscuous mode [ 560.391152][T15691] vlan1: entered promiscuous mode [ 560.409728][T15691] macvlan0: entered promiscuous mode [ 560.422599][T15691] macvlan1: entered promiscuous mode [ 560.425135][T15691] ipvlan0: entered promiscuous mode [ 560.427505][T15691] ipvlan1: entered promiscuous mode [ 560.476235][T15691] macvtap0: entered promiscuous mode [ 560.481044][T15691] macsec0: entered promiscuous mode [ 560.497052][T15691] geneve0: entered promiscuous mode [ 560.501652][T15691] geneve1: entered promiscuous mode [ 560.521755][T15691] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 560.538286][T15691] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 560.563122][T15691] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 560.580830][T15691] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 560.593772][T15714] netlink: 'syz.6.2940': attribute type 1 has an invalid length. [ 560.593811][T15714] netlink: 'syz.6.2940': attribute type 4 has an invalid length. [ 560.593828][T15714] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2940'. [ 560.636022][T15691] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 560.703050][T15691] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 560.713774][T15691] sit1: entered promiscuous mode [ 560.840041][T15691] sit2: entered promiscuous mode [ 560.893141][ T6080] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.894941][ T1113] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.895758][ T1113] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.896415][ T1113] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.749258][T15740] ipvlan2: entered promiscuous mode [ 561.769900][T15740] team0: Device ipvlan2 failed to register rx_handler [ 561.907113][T15741] ipvlan2: entered promiscuous mode [ 561.920313][T15741] team0: Device ipvlan2 failed to register rx_handler [ 562.257947][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.258019][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.288805][ T445] IPVS: starting estimator thread 0... [ 562.402817][T15754] IPVS: using max 27 ests per chain, 64800 per kthread [ 562.416704][T15758] overlayfs: failed to clone upperpath [ 563.214565][T15781] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.2967'. [ 563.798355][T15799] loop6: detected capacity change from 0 to 128 [ 563.849287][T15799] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 563.868904][T15799] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 564.019972][T15807] EXT4-fs error (device loop6): ext4_check_dx_root:2203: inode #2: comm syz.6.2975: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 564.728889][T14791] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 565.580133][T15846] loop6: detected capacity change from 0 to 128 [ 566.572186][T15843] loop2: detected capacity change from 0 to 40427 [ 566.589379][T15843] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 566.589414][T15843] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 566.596803][T15843] F2FS-fs (loop2): invalid crc value [ 566.805092][T15887] ip_tables: iptables: counters copy to user failed while replacing table [ 566.893705][T15889] fuse: Bad value for 'fd' [ 566.941479][T15843] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 567.010872][T15843] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 567.010907][T15843] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 567.047470][T15894] overlayfs: failed to clone upperpath [ 567.355940][T15878] f2fs_ckpt-7:2: attempt to access beyond end of device [ 567.355940][T15878] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 567.393290][T15878] CPU: 1 UID: 0 PID: 15878 Comm: f2fs_ckpt-7:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.393341][T15878] Tainted: [L]=SOFTLOCKUP [ 567.393354][T15878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 567.393375][T15878] Call Trace: [ 567.393388][T15878] [ 567.393401][T15878] dump_stack_lvl+0xe8/0x150 [ 567.393457][T15878] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 567.393503][T15878] f2fs_write_end_bio+0x1211/0x16e0 [ 567.393553][T15878] ? blkg_put+0x22/0x240 [ 567.393609][T15878] __submit_merged_bio+0x258/0x6a0 [ 567.393642][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.393679][T15878] ? rcu_is_watching+0x16/0xb0 [ 567.393725][T15878] __submit_merged_write_cond+0x3c9/0x4e0 [ 567.393767][T15878] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 567.393815][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.393858][T15878] f2fs_write_data_pages+0x2a1d/0x36f0 [ 567.393942][T15878] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 567.394049][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.394120][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.394157][T15878] ? __bfs+0x153/0x290 [ 567.394193][T15878] ? __pfx_hlock_conflict+0x10/0x10 [ 567.394244][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.394299][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.394335][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.394372][T15878] ? __lock_acquire+0x1511/0x2de0 [ 567.394424][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.394492][T15878] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 567.394538][T15878] do_writepages+0x338/0x560 [ 567.394574][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.394607][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.394643][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.394674][T15878] ? do_raw_spin_unlock+0xf5/0x200 [ 567.394722][T15878] filemap_fdatawrite+0x1e9/0x2f0 [ 567.394763][T15878] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 567.394849][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.394884][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.394922][T15878] ? do_raw_spin_unlock+0xf5/0x200 [ 567.394970][T15878] f2fs_sync_dirty_inodes+0x30e/0x830 [ 567.395030][T15878] f2fs_write_checkpoint+0xa38/0x2710 [ 567.395115][T15878] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 567.395204][T15878] ? __pfx_down_write+0x10/0x10 [ 567.395245][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.395283][T15878] ? rcu_is_watching+0x16/0xb0 [ 567.395320][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.395358][T15878] __checkpoint_and_complete_reqs+0x135/0x480 [ 567.395420][T15878] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 567.395480][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.395516][T15878] ? schedule+0x90/0x2b0 [ 567.395556][T15878] issue_checkpoint_thread+0xd5/0x270 [ 567.395592][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.395627][T15878] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 567.395663][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.395694][T15878] ? __pfx_autoremove_wake_function+0x10/0x10 [ 567.395733][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.395763][T15878] ? __kthread_parkme+0x71/0x1f0 [ 567.395804][T15878] ? __kthread_parkme+0x199/0x1f0 [ 567.395851][T15878] kthread+0x38b/0x480 [ 567.395879][T15878] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 567.395915][T15878] ? __pfx_kthread+0x10/0x10 [ 567.395945][T15878] ret_from_fork+0x514/0xb70 [ 567.395977][T15878] ? __pfx_ret_from_fork+0x10/0x10 [ 567.396003][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.396033][T15878] ? __switch_to+0xc78/0x1410 [ 567.396073][T15878] ? __pfx_kthread+0x10/0x10 [ 567.396103][T15878] ret_from_fork_asm+0x1a/0x30 [ 567.396148][T15878] [ 567.424421][T15878] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 567.424691][T15878] CPU: 1 UID: 0 PID: 15878 Comm: f2fs_ckpt-7:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.424725][T15878] Tainted: [L]=SOFTLOCKUP [ 567.424735][T15878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 567.424750][T15878] Call Trace: [ 567.424761][T15878] [ 567.424772][T15878] dump_stack_lvl+0xe8/0x150 [ 567.424817][T15878] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 567.424853][T15878] f2fs_write_end_bio+0x1211/0x16e0 [ 567.424915][T15878] __submit_merged_bio+0x258/0x6a0 [ 567.424942][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.424972][T15878] ? rcu_is_watching+0x16/0xb0 [ 567.425013][T15878] __submit_merged_write_cond+0x3c9/0x4e0 [ 567.425055][T15878] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 567.425098][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.425138][T15878] f2fs_write_data_pages+0x2a1d/0x36f0 [ 567.425211][T15878] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 567.425296][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.425326][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.425356][T15878] ? __bfs+0x153/0x290 [ 567.425385][T15878] ? __pfx_hlock_conflict+0x10/0x10 [ 567.425433][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.425476][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.425505][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.425535][T15878] ? __lock_acquire+0x1511/0x2de0 [ 567.425572][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.425626][T15878] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 567.425662][T15878] do_writepages+0x338/0x560 [ 567.425697][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.425729][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.425763][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.425793][T15878] ? do_raw_spin_unlock+0xf5/0x200 [ 567.425838][T15878] filemap_fdatawrite+0x1e9/0x2f0 [ 567.425876][T15878] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 567.425953][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.425989][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.426025][T15878] ? do_raw_spin_unlock+0xf5/0x200 [ 567.426070][T15878] f2fs_sync_dirty_inodes+0x30e/0x830 [ 567.426124][T15878] f2fs_write_checkpoint+0xa38/0x2710 [ 567.426200][T15878] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 567.426280][T15878] ? __pfx_down_write+0x10/0x10 [ 567.426319][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.426354][T15878] ? rcu_is_watching+0x16/0xb0 [ 567.426389][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.426430][T15878] __checkpoint_and_complete_reqs+0x135/0x480 [ 567.426482][T15878] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 567.426539][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.426573][T15878] ? schedule+0x90/0x2b0 [ 567.426615][T15878] issue_checkpoint_thread+0xd5/0x270 [ 567.426650][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.426685][T15878] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 567.426720][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.426751][T15878] ? __pfx_autoremove_wake_function+0x10/0x10 [ 567.426790][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.426820][T15878] ? __kthread_parkme+0x71/0x1f0 [ 567.426862][T15878] ? __kthread_parkme+0x199/0x1f0 [ 567.426908][T15878] kthread+0x38b/0x480 [ 567.426935][T15878] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 567.426971][T15878] ? __pfx_kthread+0x10/0x10 [ 567.427000][T15878] ret_from_fork+0x514/0xb70 [ 567.427031][T15878] ? __pfx_ret_from_fork+0x10/0x10 [ 567.427057][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.427086][T15878] ? __switch_to+0xc78/0x1410 [ 567.427127][T15878] ? __pfx_kthread+0x10/0x10 [ 567.427157][T15878] ret_from_fork_asm+0x1a/0x30 [ 567.427203][T15878] [ 567.456566][T15878] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 567.456666][T15878] CPU: 1 UID: 0 PID: 15878 Comm: f2fs_ckpt-7:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.456700][T15878] Tainted: [L]=SOFTLOCKUP [ 567.456710][T15878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 567.456726][T15878] Call Trace: [ 567.456737][T15878] [ 567.456748][T15878] dump_stack_lvl+0xe8/0x150 [ 567.456793][T15878] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 567.456830][T15878] f2fs_write_end_bio+0x1211/0x16e0 [ 567.456892][T15878] __submit_merged_bio+0x258/0x6a0 [ 567.456920][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.456952][T15878] ? rcu_is_watching+0x16/0xb0 [ 567.456993][T15878] __submit_merged_write_cond+0x3c9/0x4e0 [ 567.457035][T15878] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 567.457081][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.457122][T15878] f2fs_write_data_pages+0x2a1d/0x36f0 [ 567.457203][T15878] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 567.457289][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.457319][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.457348][T15878] ? __bfs+0x153/0x290 [ 567.457377][T15878] ? __pfx_hlock_conflict+0x10/0x10 [ 567.457423][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.457466][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.457496][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.457526][T15878] ? __lock_acquire+0x1511/0x2de0 [ 567.457562][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.457616][T15878] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 567.457652][T15878] do_writepages+0x338/0x560 [ 567.457687][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.457720][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.457754][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.457783][T15878] ? do_raw_spin_unlock+0xf5/0x200 [ 567.457827][T15878] filemap_fdatawrite+0x1e9/0x2f0 [ 567.457865][T15878] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 567.457942][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.457975][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.458010][T15878] ? do_raw_spin_unlock+0xf5/0x200 [ 567.458054][T15878] f2fs_sync_dirty_inodes+0x30e/0x830 [ 567.458108][T15878] f2fs_write_checkpoint+0xa38/0x2710 [ 567.458184][T15878] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 567.458264][T15878] ? __pfx_down_write+0x10/0x10 [ 567.458302][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.458337][T15878] ? rcu_is_watching+0x16/0xb0 [ 567.458371][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.458406][T15878] __checkpoint_and_complete_reqs+0x135/0x480 [ 567.458462][T15878] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 567.458519][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.458552][T15878] ? schedule+0x90/0x2b0 [ 567.458595][T15878] issue_checkpoint_thread+0xd5/0x270 [ 567.458631][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.458666][T15878] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 567.458701][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.458734][T15878] ? __pfx_autoremove_wake_function+0x10/0x10 [ 567.458772][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.458802][T15878] ? __kthread_parkme+0x71/0x1f0 [ 567.458844][T15878] ? __kthread_parkme+0x199/0x1f0 [ 567.458890][T15878] kthread+0x38b/0x480 [ 567.458918][T15878] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 567.458953][T15878] ? __pfx_kthread+0x10/0x10 [ 567.458983][T15878] ret_from_fork+0x514/0xb70 [ 567.459014][T15878] ? __pfx_ret_from_fork+0x10/0x10 [ 567.459040][T15878] ? srso_alias_return_thunk+0x5/0xfbef5 [ 567.459070][T15878] ? __switch_to+0xc78/0x1410 [ 567.459111][T15878] ? __pfx_kthread+0x10/0x10 [ 567.459140][T15878] ret_from_fork_asm+0x1a/0x30 [ 567.459186][T15878] [ 567.481492][T15878] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 567.599864][ T445] bridge_slave_1: left allmulticast mode [ 567.601621][ T445] bridge_slave_1: left promiscuous mode [ 567.603244][ T445] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.677570][ T445] bridge_slave_0: left allmulticast mode [ 567.677600][ T445] bridge_slave_0: left promiscuous mode [ 567.677848][ T445] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.828247][T11611] syz-executor: attempt to access beyond end of device [ 567.828247][T11611] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 567.828395][T11611] syz-executor: attempt to access beyond end of device [ 567.828395][T11611] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 568.676051][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3024'. [ 569.009756][ T445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.024076][ T445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.026518][ T445] bond0 (unregistering): Released all slaves [ 569.096533][T15921] batman_adv: batadv0: Adding interface: gretap1 [ 569.096561][T15921] batman_adv: batadv0: Interface activated: gretap1 [ 569.112213][T15925] netlink: 'syz.4.3023': attribute type 12 has an invalid length. [ 569.112619][T15925] netlink: 'syz.4.3023': attribute type 29 has an invalid length. [ 569.112638][T15925] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3023'. [ 569.112659][T15925] netlink: 'syz.4.3023': attribute type 2 has an invalid length. [ 569.112675][T15925] netlink: 'syz.4.3023': attribute type 3 has an invalid length. [ 569.379131][T15931] erspan0: entered promiscuous mode [ 569.380311][T15931] macvtap1: entered promiscuous mode [ 569.380877][T15931] macvtap1: entered allmulticast mode [ 569.380896][T15931] erspan0: entered allmulticast mode [ 569.436991][T15932] erspan0: left allmulticast mode [ 569.437163][T15932] erspan0: left promiscuous mode [ 569.437506][T15932] macvtap1: left promiscuous mode [ 569.437525][T15932] macvtap1: left allmulticast mode [ 569.456561][ T445] tipc: Disabling bearer [ 569.456843][ T445] tipc: Left network mode [ 569.456913][T15948] ªªªªªª: renamed from vlan0 (while UP) [ 569.535974][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3029'. [ 571.248944][ T445] hsr_slave_0: left promiscuous mode [ 571.268893][ T445] hsr_slave_1: left promiscuous mode [ 571.269855][ T445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.269878][ T445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.303005][ T445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.303031][ T445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.341388][ T445] dummy0: left allmulticast mode [ 571.341491][ T445] veth1_macvtap: left promiscuous mode [ 571.341523][ T445] veth0_macvtap: left promiscuous mode [ 571.349196][ T445] veth1_vlan: left promiscuous mode [ 571.349275][ T445] veth0_vlan: left promiscuous mode [ 571.459552][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 571.469877][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 571.480676][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 571.493817][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 571.495819][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 571.743235][T16010] fuse: Bad value for 'fd' [ 572.016274][T16021] FAULT_INJECTION: forcing a failure. [ 572.016274][T16021] name failslab, interval 1, probability 0, space 0, times 0 [ 572.016307][T16021] CPU: 0 UID: 0 PID: 16021 Comm: syz.1.3052 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.016332][T16021] Tainted: [L]=SOFTLOCKUP [ 572.016340][T16021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 572.016357][T16021] Call Trace: [ 572.016368][T16021] [ 572.016380][T16021] dump_stack_lvl+0xe8/0x150 [ 572.016430][T16021] should_fail_ex+0x410/0x560 [ 572.016467][T16021] should_failslab+0xa8/0x100 [ 572.016497][T16021] __kmalloc_noprof+0xf9/0x710 [ 572.016521][T16021] ? netlink_realloc_groups+0xf4/0x310 [ 572.016550][T16021] ? netlink_realloc_groups+0xf4/0x310 [ 572.016585][T16021] netlink_realloc_groups+0xf4/0x310 [ 572.016614][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 572.016641][T16021] netlink_setsockopt+0x367/0x710 [ 572.016669][T16021] ? __pfx_aa_sk_perm+0x10/0x10 [ 572.016702][T16021] ? __pfx_netlink_setsockopt+0x10/0x10 [ 572.016733][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 572.016755][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 572.016777][T16021] ? __pfx_netlink_setsockopt+0x10/0x10 [ 572.016807][T16021] do_sock_setsockopt+0x17c/0x1b0 [ 572.016829][T16021] ? srso_alias_return_thunk+0x5/0xfbef5 [ 572.016856][T16021] __x64_sys_setsockopt+0x13d/0x1b0 [ 572.016883][T16021] do_syscall_64+0x166/0x520 [ 572.016908][T16021] ? trace_irq_disable+0x3b/0x140 [ 572.016933][T16021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.016958][T16021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.016977][T16021] RIP: 0033:0x7ff9d779f559 [ 572.016995][T16021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.017012][T16021] RSP: 002b:00007ff9d866f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 572.017032][T16021] RAX: ffffffffffffffda RBX: 00007ff9d7a25fa0 RCX: 00007ff9d779f559 [ 572.017047][T16021] RDX: 0000000000000002 RSI: 000000000000010e RDI: 0000000000000003 [ 572.017059][T16021] RBP: 00007ff9d7836b20 R08: 0000000000000004 R09: 0000000000000000 [ 572.017071][T16021] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.017084][T16021] R13: 00007ff9d7a26038 R14: 00007ff9d7a25fa0 R15: 00007ffd7a093f28 [ 572.017114][T16021] [ 572.239933][ T445] team0 (unregistering): Port device team_slave_1 removed [ 572.305878][ T445] team0 (unregistering): Port device team_slave_0 removed [ 572.955857][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3053'. [ 572.955885][T16023] tipc: Started in network mode [ 572.955901][T16023] tipc: Node identity 4, cluster identity 4711 [ 572.955916][T16023] tipc: Node number set to 4 [ 573.612403][ T5640] Bluetooth: hci4: command tx timeout [ 574.009917][T16080] FAULT_INJECTION: forcing a failure. [ 574.009917][T16080] name failslab, interval 1, probability 0, space 0, times 0 [ 574.009961][T16080] CPU: 0 UID: 0 PID: 16080 Comm: syz.6.3070 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.009996][T16080] Tainted: [L]=SOFTLOCKUP [ 574.010006][T16080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 574.010023][T16080] Call Trace: [ 574.010034][T16080] [ 574.010046][T16080] dump_stack_lvl+0xe8/0x150 [ 574.010091][T16080] should_fail_ex+0x410/0x560 [ 574.010138][T16080] should_failslab+0xa8/0x100 [ 574.010181][T16080] __kmalloc_cache_noprof+0x9e/0x600 [ 574.010212][T16080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 574.010245][T16080] ? fanout_add+0x24d/0x13b0 [ 574.010274][T16080] ? fanout_add+0x24d/0x13b0 [ 574.010313][T16080] fanout_add+0x24d/0x13b0 [ 574.010354][T16080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 574.010385][T16080] ? _copy_from_user+0x94/0xb0 [ 574.010419][T16080] packet_setsockopt+0xc34/0x1510 [ 574.010457][T16080] ? __pfx_packet_setsockopt+0x10/0x10 [ 574.010485][T16080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 574.010527][T16080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 574.010557][T16080] ? aa_sk_perm+0x713/0x900 [ 574.010601][T16080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 574.010641][T16080] ? __pfx_aa_sk_perm+0x10/0x10 [ 574.010680][T16080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 574.010715][T16080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 574.010745][T16080] ? aa_sock_opt_perm+0x142/0x1e0 [ 574.010777][T16080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 574.010807][T16080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 574.010837][T16080] ? __pfx_packet_setsockopt+0x10/0x10 [ 574.010868][T16080] do_sock_setsockopt+0x17c/0x1b0 [ 574.010900][T16080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 574.010936][T16080] __x64_sys_setsockopt+0x13d/0x1b0 [ 574.010974][T16080] do_syscall_64+0x166/0x520 [ 574.011006][T16080] ? trace_irq_disable+0x3b/0x140 [ 574.011037][T16080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.011070][T16080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.011097][T16080] RIP: 0033:0x7f97ffd9f559 [ 574.011120][T16080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.011142][T16080] RSP: 002b:00007f9800cf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 574.011169][T16080] RAX: ffffffffffffffda RBX: 00007f9800025fa0 RCX: 00007f97ffd9f559 [ 574.011189][T16080] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000005 [ 574.011206][T16080] RBP: 00007f97ffe36b20 R08: 0000000000000004 R09: 0000000000000000 [ 574.011223][T16080] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 574.011240][T16080] R13: 00007f9800026038 R14: 00007f9800025fa0 R15: 00007ffebd0b9088 [ 574.011282][T16080] [ 574.445915][T16002] rxe_eth0 speed is unknown, defaulting to 1000 [ 574.582669][T16097] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 575.649489][T16131] lo: entered promiscuous mode [ 575.660940][T16131] tunl0: entered promiscuous mode [ 575.664801][T16131] gre0: entered promiscuous mode [ 575.693021][ T5640] Bluetooth: hci4: command tx timeout [ 575.704254][T16131] gretap0: entered promiscuous mode [ 575.728997][T16131] erspan0: entered promiscuous mode [ 575.780859][T16131] ip_vti0: entered promiscuous mode [ 575.798412][T16131] ip6_vti0: entered promiscuous mode [ 575.816615][T16131] sit0: entered promiscuous mode [ 575.847585][T16131] ip6tnl0: entered promiscuous mode [ 575.870505][T16131] ip6gre0: entered promiscuous mode [ 575.889526][T16131] syz_tun: entered promiscuous mode [ 575.919228][T16131] ip6gretap0: entered promiscuous mode [ 575.937491][T16131] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.938198][T16131] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.945667][T16131] bridge0: entered promiscuous mode [ 575.966462][T16131] vcan0: entered promiscuous mode [ 575.981360][T16131] bond0: entered promiscuous mode [ 575.981388][T16131] bond_slave_0: entered promiscuous mode [ 575.981613][T16131] bond_slave_1: entered promiscuous mode [ 576.010444][T16131] team0: entered promiscuous mode [ 576.010470][T16131] team_slave_0: entered promiscuous mode [ 576.010683][T16131] team_slave_1: entered promiscuous mode [ 576.036087][T16131] dummy0: entered promiscuous mode [ 576.116966][T16131] nlmon0: entered promiscuous mode [ 576.118442][T16131] batadv0: entered promiscuous mode [ 576.150495][T16131] vxcan0: entered promiscuous mode [ 576.167529][T16131] vxcan1: entered promiscuous mode [ 576.170197][T16131] veth0: entered promiscuous mode [ 576.202502][T16131] veth1: entered promiscuous mode [ 576.232074][T16131] wg0: entered promiscuous mode [ 576.248518][T16131] wg1: entered promiscuous mode [ 576.265614][T16131] wg2: entered promiscuous mode [ 576.278189][T16131] veth0_to_bridge: entered promiscuous mode [ 576.327765][T16131] veth1_to_bridge: entered promiscuous mode [ 576.369939][T16131] veth0_to_bond: entered promiscuous mode [ 576.387431][T16131] veth1_to_bond: entered promiscuous mode [ 576.409235][T16131] veth0_to_team: entered promiscuous mode [ 576.461813][T16131] veth1_to_team: entered promiscuous mode [ 576.494090][T16131] veth0_to_batadv: entered promiscuous mode [ 576.512677][T16131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.512731][T16131] batadv_slave_0: entered promiscuous mode [ 576.527699][T16131] veth1_to_batadv: entered promiscuous mode [ 576.550197][T16131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.550281][T16131] batadv_slave_1: entered promiscuous mode [ 576.568299][T16131] xfrm0: entered promiscuous mode [ 576.586170][T16131] veth0_to_hsr: entered promiscuous mode [ 576.605419][T16131] veth1_to_hsr: entered promiscuous mode [ 576.635071][T16131] hsr0: entered promiscuous mode [ 576.642172][T16131] veth1_virt_wifi: entered promiscuous mode [ 576.651319][T16131] veth0_virt_wifi: entered promiscuous mode [ 576.682222][T16131] virt_wifi0: entered promiscuous mode [ 576.729146][T16160] fuse: Bad value for 'fd' [ 576.729632][T16131] vlan0: entered promiscuous mode [ 576.737900][T16131] vlan1: entered promiscuous mode [ 576.749977][T16131] macvlan0: entered promiscuous mode [ 576.765771][T16131] macvlan1: entered promiscuous mode [ 576.773394][T16131] ipvlan0: entered promiscuous mode [ 576.773577][T16131] ipvlan1: entered promiscuous mode [ 576.798679][T16131] macvtap0: entered promiscuous mode [ 576.812173][T16131] macsec0: entered promiscuous mode [ 576.821838][T16131] geneve0: entered promiscuous mode [ 576.831105][T16162] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3092'. [ 576.832994][T16131] geneve1: entered promiscuous mode [ 576.858356][T16131] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 576.877695][T16131] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 576.899647][T16131] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 576.913275][T16131] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 576.956854][T16131] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 576.992143][T16131] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode [ 577.042707][ T1113] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.043609][ T1113] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.043653][ T1113] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.043694][ T1113] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.170918][T16177] lo: entered allmulticast mode [ 577.190691][T16175] lo: left allmulticast mode [ 577.556905][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3102'. [ 577.717201][T16002] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.717465][T16002] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.717639][T16002] bridge_slave_0: entered allmulticast mode [ 577.753656][T16002] bridge_slave_0: entered promiscuous mode [ 577.769382][T16002] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.769509][T16002] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.769644][T16002] bridge_slave_1: entered allmulticast mode [ 577.772422][ T5640] Bluetooth: hci4: command tx timeout [ 577.786258][T16002] bridge_slave_1: entered promiscuous mode [ 577.905442][T16002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.919994][T16002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.067231][T16002] team0: Port device team_slave_0 added [ 578.086816][T16002] team0: Port device team_slave_1 added [ 578.170246][T16207] tipc: Started in network mode [ 578.170287][T16207] tipc: Node identity 7f000001, cluster identity 4711 [ 578.171593][T16207] tipc: Enabled bearer , priority 10 [ 578.218783][T16002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.218805][T16002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.218834][T16002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.220620][T16207] tipc: Enabling of bearer rejected, failed to enable media [ 578.223683][T16002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.223699][T16002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.223730][T16002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.468625][T16002] hsr_slave_0: entered promiscuous mode [ 578.471624][T16002] hsr_slave_1: entered promiscuous mode [ 578.480236][T16002] debugfs: 'hsr0' already exists in 'hsr' [ 578.480260][T16002] Cannot create hsr debugfs directory [ 579.022745][T16230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3114'. [ 579.740761][T15147] tipc: Node number set to 2130706433 [ 579.852645][ T5640] Bluetooth: hci4: command tx timeout [ 581.140768][T16002] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 581.161533][T16002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 581.163801][T16002] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 581.190163][T16002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 581.192997][T16002] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 581.224183][T16002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 581.228734][T16002] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 581.256354][T16002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 581.612059][T16319] fuse: fd is not a fuse device [ 581.637295][T16002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.714277][T16002] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.747544][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.747663][ T6080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.809661][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.809810][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.653964][T16354] loop6: detected capacity change from 0 to 4096 [ 582.693734][T16360] ip6gre2: entered promiscuous mode [ 582.693760][T16360] ip6gre2: entered allmulticast mode [ 582.726861][T16354] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 582.795624][T16365] overlayfs: failed to clone upperpath [ 582.822223][T16354] ntfs3(loop6): Failed to load $Extend (-22). [ 582.828585][T16354] ntfs3(loop6): Failed to initialize $Extend. [ 583.481210][T16383] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3158'. [ 583.481253][T16383] netlink: 'syz.6.3158': attribute type 8 has an invalid length. [ 583.481269][T16383] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3158'. [ 583.548355][T16387] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3158'. [ 583.548398][T16387] netlink: 'syz.6.3158': attribute type 8 has an invalid length. [ 583.548414][T16387] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3158'. [ 583.662059][T16389] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3160'. [ 583.970635][T16002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.196161][T16408] gretap1: entered promiscuous mode [ 584.993513][T16002] veth0_vlan: entered promiscuous mode [ 585.000370][ C0] Unknown status report in ack skb [ 585.021401][T16002] veth1_vlan: entered promiscuous mode [ 585.212261][T16002] veth0_macvtap: entered promiscuous mode [ 585.240244][T16002] veth1_macvtap: entered promiscuous mode [ 585.313450][T16002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.371147][T16002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.614997][ T1097] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.616258][ T1015] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.616314][ T1015] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.616356][ T1015] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.889032][ T3375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.889058][ T3375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.047100][ T3375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.047127][ T3375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.263040][T16474] overlayfs: failed to clone upperpath [ 586.987562][T16499] device-mapper: ioctl: The device has no table. [ 588.030045][T16496] device-mapper: ioctl: device has been removed from the dev hash table. [ 588.901255][T16555] FAULT_INJECTION: forcing a failure. [ 588.901255][T16555] name failslab, interval 1, probability 0, space 0, times 0 [ 588.901299][T16555] CPU: 0 UID: 0 PID: 16555 Comm: syz.6.3205 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.901339][T16555] Tainted: [L]=SOFTLOCKUP [ 588.901350][T16555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 588.901366][T16555] Call Trace: [ 588.901376][T16555] [ 588.901387][T16555] dump_stack_lvl+0xe8/0x150 [ 588.901439][T16555] should_fail_ex+0x410/0x560 [ 588.901486][T16555] should_failslab+0xa8/0x100 [ 588.901528][T16555] __kmalloc_noprof+0xf9/0x710 [ 588.901559][T16555] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.901590][T16555] ? trace_kmalloc+0x2a/0xf0 [ 588.901619][T16555] ? tomoyo_encode+0x2ad/0x570 [ 588.901647][T16555] ? tomoyo_encode+0x2ad/0x570 [ 588.901683][T16555] tomoyo_encode+0x2ad/0x570 [ 588.901720][T16555] tomoyo_realpath_from_path+0x5fa/0x640 [ 588.901766][T16555] tomoyo_check_open_permission+0x229/0x470 [ 588.901808][T16555] ? tomoyo_check_open_permission+0x1d3/0x470 [ 588.901848][T16555] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 588.901889][T16555] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.901919][T16555] ? __asan_memset+0x22/0x50 [ 588.901985][T16555] ? mnt_get_write_access+0x66/0x280 [ 588.902018][T16555] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.902058][T16555] security_file_open+0xa9/0x240 [ 588.902099][T16555] do_dentry_open+0x495/0x1360 [ 588.902150][T16555] vfs_open_consume+0x4a/0x350 [ 588.902186][T16555] ? path_openat+0x16e5/0x20f0 [ 588.902221][T16555] path_openat+0x1700/0x20f0 [ 588.902275][T16555] do_file_open+0x23e/0x4a0 [ 588.902314][T16555] ? __pfx_do_file_open+0x10/0x10 [ 588.902357][T16555] ? __pfx_kfree_link+0x10/0x10 [ 588.902397][T16555] ? _raw_spin_unlock+0x28/0x50 [ 588.902431][T16555] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.902461][T16555] ? alloc_fd+0x6af/0x760 [ 588.902515][T16555] do_sys_openat2+0x115/0x200 [ 588.902552][T16555] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.902582][T16555] ? __se_sys_futex+0x3a8/0x450 [ 588.902622][T16555] ? __pfx_do_sys_openat2+0x10/0x10 [ 588.902667][T16555] ? rcu_is_watching+0x16/0xb0 [ 588.902703][T16555] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.902739][T16555] __x64_sys_openat+0x138/0x170 [ 588.902786][T16555] do_syscall_64+0x166/0x520 [ 588.902819][T16555] ? trace_irq_disable+0x3b/0x140 [ 588.902849][T16555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.902883][T16555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.902910][T16555] RIP: 0033:0x7f97ffd5fd8e [ 588.902932][T16555] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 588.902955][T16555] RSP: 002b:00007f9800cf3ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 588.902983][T16555] RAX: ffffffffffffffda RBX: 00007f9800cf46c0 RCX: 00007f97ffd5fd8e [ 588.903003][T16555] RDX: 0000000000000002 RSI: 00007f9800cf3f90 RDI: ffffffffffffff9c [ 588.903022][T16555] RBP: 00007f97ffe36b20 R08: 0000000000000000 R09: 0000000000000000 [ 588.903039][T16555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.903054][T16555] R13: 00007f9800026038 R14: 00007f9800025fa0 R15: 00007ffebd0b9088 [ 588.903096][T16555] [ 588.911252][T16555] ERROR: Out of memory at tomoyo_realpath_from_path. [ 590.284490][T16590] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 590.694699][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3219'. [ 590.694730][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3219'. [ 592.016850][T16646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 592.237453][ T30] audit: type=1326 audit(2000000085.049:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16642 comm="syz.1.3232" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9d779f559 code=0x0 [ 592.279595][T16658] loop6: detected capacity change from 0 to 512 [ 592.290096][T16658] EXT4-fs: Ignoring removed bh option [ 592.322951][T16658] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.3237: corrupted in-inode xattr: e_value size too large [ 592.322993][T16658] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 592.328324][T16658] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.3237: couldn't read orphan inode 15 (err -117) [ 592.328360][T16658] loop6: lost filesystem error report for type 5 error -117 [ 592.388570][T16658] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.591410][T14791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.452807][T15191] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 593.603941][T15191] usb 10-1: Using ep0 maxpacket: 16 [ 593.606116][T15191] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 593.607206][T15191] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 593.607233][T15191] usb 10-1: config 0 has no interface number 0 [ 593.609971][T15191] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.609999][T15191] usb 10-1: Product: syz [ 593.610016][T15191] usb 10-1: Manufacturer: syz [ 593.610034][T15191] usb 10-1: SerialNumber: syz [ 593.613756][T16705] FAULT_INJECTION: forcing a failure. [ 593.613756][T16705] name failslab, interval 1, probability 0, space 0, times 0 [ 593.613793][T16705] CPU: 1 UID: 0 PID: 16705 Comm: syz.1.3251 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.613827][T16705] Tainted: [L]=SOFTLOCKUP [ 593.613838][T16705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 593.613853][T16705] Call Trace: [ 593.613864][T16705] [ 593.613875][T16705] dump_stack_lvl+0xe8/0x150 [ 593.613918][T16705] should_fail_ex+0x410/0x560 [ 593.613971][T16705] should_failslab+0xa8/0x100 [ 593.614012][T16705] __kmalloc_cache_noprof+0x9e/0x600 [ 593.614046][T16705] ? vicodec_open+0xf3/0xbf0 [ 593.614077][T16705] ? vicodec_open+0xf3/0xbf0 [ 593.614116][T16705] vicodec_open+0xf3/0xbf0 [ 593.614158][T16705] v4l2_open+0x1bc/0x3a0 [ 593.614198][T16705] chrdev_open+0x4d9/0x600 [ 593.614237][T16705] ? __pfx_chrdev_open+0x10/0x10 [ 593.614271][T16705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.614300][T16705] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 593.614334][T16705] ? devcgroup_check_permission+0x31/0x8f0 [ 593.614374][T16705] ? __pfx_chrdev_open+0x10/0x10 [ 593.614408][T16705] do_dentry_open+0x80e/0x1360 [ 593.614457][T16705] vfs_open_consume+0x4a/0x350 [ 593.614493][T16705] ? path_openat+0x16e5/0x20f0 [ 593.614529][T16705] path_openat+0x1700/0x20f0 [ 593.614584][T16705] do_file_open+0x23e/0x4a0 [ 593.614622][T16705] ? __pfx_do_file_open+0x10/0x10 [ 593.614681][T16705] ? _raw_spin_unlock+0x28/0x50 [ 593.614709][T16705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.614744][T16705] ? alloc_fd+0x6af/0x760 [ 593.614798][T16705] do_sys_openat2+0x115/0x200 [ 593.614836][T16705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.614867][T16705] ? __se_sys_futex+0x3a8/0x450 [ 593.614906][T16705] ? __pfx_do_sys_openat2+0x10/0x10 [ 593.614955][T16705] ? rcu_is_watching+0x16/0xb0 [ 593.614991][T16705] ? srso_alias_return_thunk+0x5/0xfbef5 [ 593.615027][T16705] __x64_sys_openat+0x138/0x170 [ 593.615073][T16705] do_syscall_64+0x166/0x520 [ 593.615107][T16705] ? trace_irq_disable+0x3b/0x140 [ 593.615137][T16705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.615171][T16705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.615197][T16705] RIP: 0033:0x7ff9d779f559 [ 593.615221][T16705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.615246][T16705] RSP: 002b:00007ff9d866f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 593.615274][T16705] RAX: ffffffffffffffda RBX: 00007ff9d7a25fa0 RCX: 00007ff9d779f559 [ 593.615294][T16705] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 593.615312][T16705] RBP: 00007ff9d7836b20 R08: 0000000000000000 R09: 0000000000000000 [ 593.615329][T16705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.615345][T16705] R13: 00007ff9d7a26038 R14: 00007ff9d7a25fa0 R15: 00007ffd7a093f28 [ 593.615386][T16705] [ 593.617572][T15191] usb 10-1: config 0 descriptor?? [ 593.633810][T15191] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 594.443731][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3257'. [ 594.443785][T16723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3257'. [ 594.851318][T16706] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3249'. [ 595.124861][T15191] gspca_spca1528: reg_w err -71 [ 595.124947][T15191] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 595.142144][T15191] usb 10-1: USB disconnect, device number 5 [ 595.832568][T16755] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 595.928435][T16761] 9p: Bad value for 'wfdno' [ 596.492818][T16790] fuse: Bad value for 'fd' [ 596.929188][ T6084] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 597.083080][ T6084] usb 10-1: Using ep0 maxpacket: 8 [ 597.083807][ T6084] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 597.091453][ T6084] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.091482][ T6084] usb 10-1: Product: syz [ 597.091500][ T6084] usb 10-1: Manufacturer: syz [ 597.091518][ T6084] usb 10-1: SerialNumber: syz [ 597.145419][ T6084] usb 10-1: config 0 descriptor?? [ 597.356056][ T6084] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 597.583053][ T6084] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 597.602647][ T6084] usb 10-1: USB disconnect, device number 6 [ 598.483903][T16861] loop6: detected capacity change from 0 to 512 [ 598.618626][T16861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.618737][T16861] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.657851][T16855] nbd1: detected capacity change from 0 to 4 [ 598.763983][T16860] block nbd1: shutting down sockets [ 598.799904][T16861] [ 598.802251][T16861] ====================================================== [ 598.809264][T16861] WARNING: possible circular locking dependency detected [ 598.816280][T16861] syzkaller #0 Tainted: G L [ 598.822251][T16861] ------------------------------------------------------ [ 598.829258][T16861] syz.6.3297/16861 is trying to acquire lock: [ 598.835318][T16861] ffff888054410960 (&dquot->dq_lock){+.+.}-{4:4}, at: dqget+0x69d/0xbd0 [ 598.843697][T16861] [ 598.843697][T16861] but task is already holding lock: [ 598.851050][T16861] ffff888076702500 (&ei->xattr_sem){++++}-{4:4}, at: ext4_setattr+0x891/0x1df0 [ 598.860036][T16861] [ 598.860036][T16861] which lock already depends on the new lock. [ 598.860036][T16861] [ 598.870431][T16861] [ 598.870431][T16861] the existing dependency chain (in reverse order) is: [ 598.879447][T16861] [ 598.879447][T16861] -> #10 (&ei->xattr_sem){++++}-{4:4}: [ 598.887121][T16861] down_read+0x45/0x320 [ 598.891819][T16861] ext4_readpage_inline+0x36/0x6a0 [ 598.897463][T16861] ext4_read_folio+0x15e/0x520 [ 598.902761][T16861] filemap_read_folio+0x12c/0x3a0 [ 598.908327][T16861] filemap_get_pages+0xc86/0x1ec0 [ 598.913889][T16861] filemap_read+0x421/0x11e0 [ 598.919013][T16861] ext4_file_read_iter+0x553/0xad0 [ 598.924647][T16861] __kernel_read+0x4ca/0x960 [ 598.929761][T16861] integrity_kernel_read+0x89/0xd0 [ 598.935408][T16861] ima_calc_file_hash+0x451/0x890 [ 598.940959][T16861] ima_collect_measurement+0x51b/0xa00 [ 598.946946][T16861] process_measurement+0x1272/0x1c10 [ 598.952757][T16861] ima_file_check+0xe1/0x130 [ 598.957874][T16861] security_file_post_open+0xb3/0x260 [ 598.963783][T16861] path_openat+0x174c/0x20f0 [ 598.968902][T16861] do_file_open+0x23e/0x4a0 [ 598.973944][T16861] do_sys_openat2+0x115/0x200 [ 598.979153][T16861] __x64_sys_openat+0x138/0x170 [ 598.984562][T16861] do_syscall_64+0x166/0x520 [ 598.989662][T16861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.996057][T16861] [ 598.996057][T16861] -> #9 (mapping.invalidate_lock#2){++++}-{4:4}: [ 599.003799][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.003888][ C0] buffer_io_error: 9 callbacks suppressed [ 599.003903][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 599.027383][T16861] down_read+0x45/0x320 [ 599.032079][T16861] page_cache_ra_order+0xb37/0xee0 [ 599.037722][T16861] do_sync_mmap_readahead+0x75e/0x990 [ 599.043613][T16861] filemap_fault+0x7d9/0x13b0 [ 599.048805][T16861] __do_fault+0x138/0x2a0 [ 599.053654][T16861] do_pte_missing+0x2215/0x34b0 [ 599.059026][T16861] handle_mm_fault+0x1a53/0x3750 [ 599.064519][T16861] do_user_addr_fault+0x7f6/0x1480 [ 599.070149][T16861] exc_page_fault+0x6a/0xc0 [ 599.075179][T16861] asm_exc_page_fault+0x26/0x30 [ 599.080549][T16861] _copy_from_iter+0x216/0x1660 [ 599.085928][T16861] tcp_sendmsg_locked+0x20cf/0x5400 [ 599.091644][T16861] tcp_sendmsg+0x2f/0x50 [ 599.096404][T16861] sock_sendmsg_nosec+0x10e/0x180 [ 599.101957][T16861] sock_write_iter+0x2de/0x3e0 [ 599.107247][T16861] vfs_write+0x612/0xba0 [ 599.112008][T16861] ksys_write+0x150/0x270 [ 599.116854][T16861] do_syscall_64+0x166/0x520 [ 599.121965][T16861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.128378][T16861] [ 599.128378][T16861] -> #8 (sk_lock-AF_INET){+.+.}-{0:0}: [ 599.136068][T16861] lock_sock_nested+0x41/0x100 [ 599.141395][T16861] inet_shutdown+0x6a/0x390 [ 599.146422][T16861] nbd_mark_nsock_dead+0x2cb/0x550 [ 599.152066][T16861] recv_work+0x1cee/0x1e10 [ 599.157000][T16861] process_scheduled_works+0xc3d/0x1630 [ 599.163086][T16861] worker_thread+0xa47/0xfb0 [ 599.168216][T16861] kthread+0x38b/0x480 [ 599.172812][T16861] ret_from_fork+0x514/0xb70 [ 599.177930][T16861] ret_from_fork_asm+0x1a/0x30 [ 599.183219][T16861] [ 599.183219][T16861] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 599.187166][ T2029] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.187204][ T2029] Buffer I/O error on dev nbd1, logical block 0, async page read [ 599.191760][ T2029] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.191793][ T2029] Buffer I/O error on dev nbd1, logical block 0, async page read [ 599.196532][ T2029] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.196564][ T2029] Buffer I/O error on dev nbd1, logical block 0, async page read [ 599.196678][ T2029] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.196705][ T2029] Buffer I/O error on dev nbd1, logical block 0, async page read [ 599.196741][T16219] ldm_validate_partition_table(): Disk read failed. [ 599.196813][ T2029] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.196841][ T2029] Buffer I/O error on dev nbd1, logical block 0, async page read [ 599.196937][ T2029] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.196965][ T2029] Buffer I/O error on dev nbd1, logical block 0, async page read [ 599.197057][ T2029] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.197084][ T2029] Buffer I/O error on dev nbd1, logical block 0, async page read [ 599.197199][ T2029] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.197228][ T2029] Buffer I/O error on dev nbd1, logical block 0, async page read [ 599.197294][T16219] Dev nbd1: unable to read RDB block 0 [ 599.200330][ T2029] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.200361][ T2029] Buffer I/O error on dev nbd1, logical block 0, async page read [ 599.200569][T16219] nbd1: unable to read partition table [ 599.200731][T16219] nbd1: partition table beyond EOD, truncated [ 599.368345][T16861] __mutex_lock+0x197/0x15a0 [ 599.373497][T16861] nbd_queue_rq+0x373/0xff0 [ 599.378521][T16861] blk_mq_dispatch_rq_list+0x499/0x1990 [ 599.384587][T16861] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 599.391446][T16861] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 599.397953][T16861] blk_mq_run_work_fn+0x167/0x2f0 [ 599.403525][T16861] process_scheduled_works+0xc3d/0x1630 [ 599.409595][T16861] worker_thread+0xa47/0xfb0 [ 599.414707][T16861] kthread+0x38b/0x480 [ 599.419317][T16861] ret_from_fork+0x514/0xb70 [ 599.424424][T16861] ret_from_fork_asm+0x1a/0x30 [ 599.429699][T16861] [ 599.429699][T16861] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 599.436906][T16861] __mutex_lock+0x197/0x15a0 [ 599.442100][T16861] nbd_queue_rq+0xc1/0xff0 [ 599.447064][T16861] blk_mq_dispatch_rq_list+0x499/0x1990 [ 599.453129][T16861] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 599.459983][T16861] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 599.466488][T16861] blk_mq_run_work_fn+0x167/0x2f0 [ 599.472024][T16861] process_scheduled_works+0xc3d/0x1630 [ 599.478087][T16861] worker_thread+0xa47/0xfb0 [ 599.483199][T16861] kthread+0x38b/0x480 [ 599.487778][T16861] ret_from_fork+0x514/0xb70 [ 599.492874][T16861] ret_from_fork_asm+0x1a/0x30 [ 599.498144][T16861] [ 599.498144][T16861] -> #5 (set->srcu){.+.+}-{0:0}: [ 599.505262][T16861] __synchronize_srcu+0xc9/0x2e0 [ 599.510713][T16861] elevator_switch+0x1e8/0x7b0 [ 599.515995][T16861] elevator_change+0x2fa/0x480 [ 599.521275][T16861] elevator_set_default+0x375/0x440 [ 599.526990][T16861] blk_register_queue+0x3f3/0x4e0 [ 599.532524][T16861] __add_disk+0x6b8/0xdb0 [ 599.537362][T16861] add_disk_fwnode+0x100/0x3a0 [ 599.542633][T16861] nbd_dev_add+0x733/0xb60 [ 599.547567][T16861] nbd_init+0x168/0x1f0 [ 599.552243][T16861] do_one_initcall+0x250/0x870 [ 599.557533][T16861] do_initcall_level+0x10a/0x1a0 [ 599.562980][T16861] do_initcalls+0x59/0xa0 [ 599.567818][T16861] kernel_init_freeable+0x29d/0x3e0 [ 599.573526][T16861] kernel_init+0x22/0x1d0 [ 599.578378][T16861] ret_from_fork+0x514/0xb70 [ 599.583476][T16861] ret_from_fork_asm+0x1a/0x30 [ 599.588748][T16861] [ 599.588748][T16861] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 599.596564][T16861] __mutex_lock+0x197/0x15a0 [ 599.601676][T16861] elevator_change+0x1af/0x480 [ 599.606957][T16861] elv_iosched_store+0x504/0x630 [ 599.612415][T16861] queue_attr_store+0x207/0x2b0 [ 599.617780][T16861] kernfs_fop_write_iter+0x3a4/0x540 [ 599.623587][T16861] vfs_write+0x612/0xba0 [ 599.628339][T16861] ksys_write+0x150/0x270 [ 599.633176][T16861] do_syscall_64+0x166/0x520 [ 599.638283][T16861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.644683][T16861] [ 599.644683][T16861] -> #3 (&q->q_usage_counter(io)#66){++++}-{0:0}: [ 599.653288][T16861] blk_alloc_queue+0x544/0x690 [ 599.658572][T16861] __blk_mq_alloc_disk+0x194/0x390 [ 599.664191][T16861] null_add_dev+0xe82/0x1d70 [ 599.669297][T16861] null_init+0x1e3/0x390 [ 599.674063][T16861] do_one_initcall+0x250/0x870 [ 599.679349][T16861] do_initcall_level+0x10a/0x1a0 [ 599.684799][T16861] do_initcalls+0x59/0xa0 [ 599.689639][T16861] kernel_init_freeable+0x29d/0x3e0 [ 599.695352][T16861] kernel_init+0x22/0x1d0 [ 599.700205][T16861] ret_from_fork+0x514/0xb70 [ 599.705304][T16861] ret_from_fork_asm+0x1a/0x30 [ 599.710577][T16861] [ 599.710577][T16861] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 599.717782][T16861] fs_reclaim_acquire+0x71/0x100 [ 599.723235][T16861] __kmalloc_noprof+0xbc/0x710 [ 599.728512][T16861] find_tree_dqentry+0x5c/0x1090 [ 599.733969][T16861] qtree_read_dquot+0x5ac/0x8a0 [ 599.739336][T16861] ocfs2_acquire_dquot+0x2d4/0xb70 [ 599.744957][T16861] dqget+0x725/0xbd0 [ 599.749363][T16861] __dquot_initialize+0x3c8/0xd40 [ 599.754899][T16861] ocfs2_get_init_inode+0x147/0x1c0 [ 599.760623][T16861] ocfs2_mknod+0x8af/0x21a0 [ 599.765648][T16861] ocfs2_create+0x195/0x460 [ 599.770669][T16861] lookup_open+0xee3/0x1970 [ 599.775685][T16861] path_openat+0x710/0x20f0 [ 599.780699][T16861] do_file_open+0x23e/0x4a0 [ 599.785714][T16861] do_sys_openat2+0x115/0x200 [ 599.790911][T16861] __x64_sys_openat+0x138/0x170 [ 599.796287][T16861] do_syscall_64+0x166/0x520 [ 599.801401][T16861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.807811][T16861] [ 599.807811][T16861] -> #1 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}: [ 599.818328][T16861] down_write+0x91/0x200 [ 599.823098][T16861] ocfs2_lock_global_qf+0x206/0x400 [ 599.828807][T16861] ocfs2_acquire_dquot+0x28c/0xb70 [ 599.834436][T16861] dqget+0x725/0xbd0 [ 599.838872][T16861] __dquot_initialize+0x3c8/0xd40 [ 599.844429][T16861] ocfs2_get_init_inode+0x147/0x1c0 [ 599.850156][T16861] ocfs2_mknod+0x8af/0x21a0 [ 599.855185][T16861] ocfs2_create+0x195/0x460 [ 599.860210][T16861] lookup_open+0xee3/0x1970 [ 599.865226][T16861] path_openat+0x710/0x20f0 [ 599.870323][T16861] do_file_open+0x23e/0x4a0 [ 599.875337][T16861] do_sys_openat2+0x115/0x200 [ 599.880535][T16861] __x64_sys_openat+0x138/0x170 [ 599.885902][T16861] do_syscall_64+0x166/0x520 [ 599.891009][T16861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.897504][T16861] [ 599.897504][T16861] -> #0 (&dquot->dq_lock){+.+.}-{4:4}: [ 599.905150][T16861] __lock_acquire+0x164c/0x2de0 [ 599.910518][T16861] lock_acquire+0x115/0x350 [ 599.915533][T16861] __mutex_lock+0x197/0x15a0 [ 599.920641][T16861] dqget+0x69d/0xbd0 [ 599.925049][T16861] dquot_transfer+0x2ac/0x660 [ 599.930243][T16861] ext4_setattr+0x8a3/0x1df0 [ 599.935349][T16861] notify_change+0xbba/0xea0 [ 599.940457][T16861] chown_common+0x41c/0x630 [ 599.945475][T16861] ksys_fchown+0xe9/0x160 [ 599.950324][T16861] __x64_sys_fchown+0x7a/0x90 [ 599.955516][T16861] do_syscall_64+0x166/0x520 [ 599.960626][T16861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.967029][T16861] [ 599.967029][T16861] other info that might help us debug this: [ 599.967029][T16861] [ 599.977240][T16861] Chain exists of: [ 599.977240][T16861] &dquot->dq_lock --> mapping.invalidate_lock#2 --> &ei->xattr_sem [ 599.977240][T16861] [ 599.991072][T16861] Possible unsafe locking scenario: [ 599.991072][T16861] [ 599.998513][T16861] CPU0 CPU1 [ 600.003865][T16861] ---- ---- [ 600.009213][T16861] rlock(&ei->xattr_sem); [ 600.013620][T16861] lock(mapping.invalidate_lock#2); [ 600.021421][T16861] lock(&ei->xattr_sem); [ 600.028263][T16861] lock(&dquot->dq_lock); [ 600.032671][T16861] [ 600.032671][T16861] *** DEADLOCK *** [ 600.032671][T16861] [ 600.040795][T16861] locks held by syz.6.3297/16861: 3, last CPU#1: [ 600.047107][T16861] #0: ffff88807a788460 (sb_writers#4){++++}-{0:0}, at: mnt_want_write_file+0x60/0x200 [ 600.056795][T16861] #1: ffff8880767027c0 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: chown_common+0x313/0x630 [ 600.067006][T16861] #2: ffff888076702500 (&ei->xattr_sem){++++}-{4:4}, at: ext4_setattr+0x891/0x1df0 [ 600.076425][T16861] [ 600.076425][T16861] stack backtrace: [ 600.082310][T16861] CPU: 1 UID: 0 PID: 16861 Comm: syz.6.3297 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.093257][T16861] Tainted: [L]=SOFTLOCKUP [ 600.097564][T16861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 600.107609][T16861] Call Trace: [ 600.110876][T16861] [ 600.113794][T16861] dump_stack_lvl+0xe8/0x150 [ 600.118387][T16861] print_circular_bug+0x2e2/0x300 [ 600.123416][T16861] check_noncircular+0x12f/0x150 [ 600.128365][T16861] __lock_acquire+0x164c/0x2de0 [ 600.133214][T16861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.138844][T16861] ? dqget+0x3ae/0xbd0 [ 600.142902][T16861] ? kmem_cache_alloc_noprof+0x151/0x600 [ 600.148528][T16861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.154155][T16861] ? kasan_save_track+0x4f/0x80 [ 600.159003][T16861] ? kasan_save_track+0x3e/0x80 [ 600.163845][T16861] ? __kasan_slab_alloc+0x6c/0x80 [ 600.168867][T16861] ? kmem_cache_alloc_noprof+0x2b4/0x600 [ 600.174491][T16861] ? dqget+0x3ae/0xbd0 [ 600.178550][T16861] ? dquot_transfer+0x2ac/0x660 [ 600.183391][T16861] ? ext4_setattr+0x8a3/0x1df0 [ 600.188148][T16861] ? notify_change+0xbba/0xea0 [ 600.192905][T16861] ? chown_common+0x41c/0x630 [ 600.197579][T16861] ? ksys_fchown+0xe9/0x160 [ 600.202082][T16861] lock_acquire+0x115/0x350 [ 600.206586][T16861] ? dqget+0x69d/0xbd0 [ 600.210662][T16861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.216294][T16861] __mutex_lock+0x197/0x15a0 [ 600.220883][T16861] ? dqget+0x69d/0xbd0 [ 600.224949][T16861] ? dqget+0x69d/0xbd0 [ 600.229009][T16861] ? __pfx___mutex_lock+0x10/0x10 [ 600.234030][T16861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.239654][T16861] ? from_kuid+0x1c6/0x660 [ 600.244061][T16861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.249689][T16861] ? percpu_counter_add_batch+0xec/0x1d0 [ 600.255329][T16861] dqget+0x69d/0xbd0 [ 600.259224][T16861] dquot_transfer+0x2ac/0x660 [ 600.263898][T16861] ? __pfx_dquot_transfer+0x10/0x10 [ 600.269095][T16861] ? down_read+0x2b9/0x320 [ 600.273513][T16861] ext4_setattr+0x8a3/0x1df0 [ 600.278097][T16861] ? current_time+0x25a/0x380 [ 600.282774][T16861] ? try_break_deleg+0x5b/0x180 [ 600.287618][T16861] ? __pfx_ext4_setattr+0x10/0x10 [ 600.292635][T16861] notify_change+0xbba/0xea0 [ 600.297231][T16861] chown_common+0x41c/0x630 [ 600.301734][T16861] ? __pfx_chown_common+0x10/0x10 [ 600.306756][T16861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.312388][T16861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.318021][T16861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.323648][T16861] ? mnt_get_write_access+0x216/0x280 [ 600.329018][T16861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 600.334644][T16861] ? mnt_want_write_file+0x172/0x200 [ 600.339954][T16861] ksys_fchown+0xe9/0x160 [ 600.344284][T16861] __x64_sys_fchown+0x7a/0x90 [ 600.348958][T16861] do_syscall_64+0x166/0x520 [ 600.353546][T16861] ? trace_irq_disable+0x3b/0x140 [ 600.358565][T16861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.364627][T16861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.370508][T16861] RIP: 0033:0x7f97ffd9f559 [ 600.374913][T16861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.394507][T16861] RSP: 002b:00007f9800cf4028 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 600.402916][T16861] RAX: ffffffffffffffda RBX: 00007f9800025fa0 RCX: 00007f97ffd9f559 [ 600.410877][T16861] RDX: 000000000000ee01 RSI: 000000000000ee00 RDI: 0000000000000004 [ 600.418869][T16861] RBP: 00007f97ffe36b20 R08: 0000000000000000 R09: 0000000000000000 [ 600.426831][T16861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.434788][T16861] R13: 00007f9800026038 R14: 00007f9800025fa0 R15: 00007ffebd0b9088 [ 600.442759][T16861] [ 600.497468][T16219] ldm_validate_partition_table(): Disk read failed. [ 600.497805][T16219] Dev nbd1: unable to read RDB block 0 [ 600.500910][T16219] nbd1: unable to read partition table [ 600.501072][T16219] nbd1: partition table beyond EOD, truncated [ 600.583405][ T1015] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.659291][ T1015] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.729588][ T1015] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.808313][ T1015] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.860385][T14791] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.969983][ T1015] bridge_slave_1: left allmulticast mode [ 600.970014][ T1015] bridge_slave_1: left promiscuous mode [ 600.970176][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.971975][ T1015] bridge_slave_0: left allmulticast mode [ 600.971993][ T1015] bridge_slave_0: left promiscuous mode [ 600.972103][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.147839][ T1015] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 601.161728][ T1015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.171931][ T1015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.174586][ T1015] bond0 (unregistering): Released all slaves [ 601.178164][ T1015] bond1 (unregistering): Released all slaves [ 601.614973][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 601.779301][ T1015] hsr_slave_0: left promiscuous mode [ 601.780248][ T1015] hsr_slave_1: left promiscuous mode [ 601.780783][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.780803][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.781401][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.781421][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.827377][ T1015] veth1_macvtap: left promiscuous mode [ 601.827413][ T1015] veth0_macvtap: left promiscuous mode [ 601.827500][ T1015] veth1_vlan: left promiscuous mode [ 601.827551][ T1015] veth0_vlan: left promiscuous mode [ 602.099566][ T1015] team0 (unregistering): Port device team_slave_1 removed [ 602.121595][ T1015] team0 (unregistering): Port device team_slave_0 removed [ 602.209647][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 602.470568][ T1015] IPVS: stop unused estimator thread 0... [ 602.732361][ T5276] 8021q: adding VLAN 0 to HW filter on device eth11 [ 603.036782][ T5276] 8021q: adding VLAN 0 to HW filter on device eth12