last executing test programs: 20m3.79554529s ago: executing program 32 (id=52): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1000000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r2, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', r4, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 17m58.468424516s ago: executing program 33 (id=359): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_normal', 0x149a82, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@multicast1, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e000100000000000000000200"], 0x50}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) 16m22.018555613s ago: executing program 34 (id=490): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x40800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b00, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8004745a, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x0, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x29, 0x3, 0xe}, 0x2c) 16m17.727862506s ago: executing program 35 (id=502): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) inotify_init() utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) inotify_init1(0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r3, 0x0, 0x8e14, 0x8ffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 16m12.763716537s ago: executing program 36 (id=513): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x0, 0x4000, 0xc, r2, r3, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x3c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xa0}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc041}, 0x20008800) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12m10.888890191s ago: executing program 37 (id=783): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x48100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x6, 0x101, 0x4}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) r1 = io_uring_setup(0x1f8e, &(0x7f0000000140)={0x0, 0x7bff, 0x1, 0x0, 0xc}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xea, 0x440, 0x0, 0x32}, 0x9c) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x93bdb000) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/138, &(0x7f0000000340)=0xfffffffffffffeab) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) lseek(r6, 0x9, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000800)={'nat\x00', 0x0, 0x0, 0x0, [0xbb, 0x8, 0x100000000, 0xfffffffffffffff4, 0x83, 0x4], 0x1, 0x0, 0x0, [{}]}, 0x88) 11m39.518921271s ago: executing program 5 (id=874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) 11m32.052784497s ago: executing program 5 (id=896): syz_mount_image$befs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x0, &(0x7f0000009e80), 0x1, 0x9dc3, &(0x7f0000009ec0)="$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") 11m17.661477607s ago: executing program 5 (id=933): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000540)={[{@utf8}, {@utf8}, {@dmask={'dmask', 0x3d, 0xadb5}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@dmask={'dmask', 0x3d, 0x7e6f}}, {@namecase}, {@discard}, {@gid}, {@umask={'umask', 0x3d, 0x8}}, {@errors_remount}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") chroot(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 11m17.068193568s ago: executing program 5 (id=937): inotify_init() openat$autofs(0xffffffffffffff9c, 0x0, 0x40002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$eJzs/QWcbXWhuP/PgUM3giBSUmKSEqJIhyJKihKCtKSACCgdSqigCCjd3d2d0t3d3R3/14EDKj5wvd/f/V+8Ps/zYmbPjlnz2Z/3Wou9Z83Ze6n5FptrYGDMgfd6//RvXbTbvcstPtpC6528y+Bb9t5x4SeGXjz8eydjzTH0dM6hp3MNDAwMGrqcQe9dNnj2k04eZmDwwJD//taoI408zKgDAyMPPTt0OQMzv3cyyiHv3+6dD8UDnXTIj9vhvY93G23IQoZ8sczyb609MDAw4t99/5BxTftPd1TaUnPOP9/frD5wG2bo1YP+dt27p4Pf+xjlgIGBUfYb+Oj1Y8hth/u77/3fbMjPHHPygSXu/QR+9v+5lppz/gU/5D9kWxx26GUzD9nGP7wNGvvwer7jYms8NnQKBw2duMF/t718Euv9/1NLzTnfQgMfvR0PLDzvpo++8+5+c/A8AwOD5x0YGDzfwMDg+T9pj/qf6RNd+aqqquoTac65ZhjynH2YDz0eGPH9x7X0uPCyN6d7cGBg8MLvPU8cvPz7zwWrqqqqqqqq6t+zOeeaYW54/j/mxz3/n/TMbcbq+X9VVVVVVVXV/50WnHOuGYY81//Q8//xP+75/7OPH33we3/7P8fM733X25/snaiqqqqqqqqqj22+BfH5/6Qf9/z/ipMmvbrn/1VVVVVVVVX/d1r0nXfe2fzvXmdv6MVTv389Pf8/+5G7l/3EBlxVVVVVVVVV/+3efuqMc/72mu8TD3zo9d7fbejvBQYdd961135iA/33aNA//z5ki096TP9fG+I84hGTDgysvcQnPZT6BPo/81r19f+X8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9x/P+D1/8/+4QV338v+M9POcOtZ/ztO9997//BCy/41Jaf0NA/if5Tj/8PrD5oYGCo75irDwwMLDznootPPTAwcMatM0w5xcAH180y5LrZxh723TeIf/+ficw7Fi94i8neOx2yogyM88Eyjnt3+Qu+s/+wgz40iL9rrFMOPni1pV6Z8cOnU330/Rjmg69GO/nx9/8tyzAfutGIH/HN7y///fvyYeehY596yNin2WCtdadZf+NNvrL6WiusuvKqK6896/QzTTfjrLPONNM0q6y+5srTvvf5o+Zs0nc/z/2vzNmoH56zp+b8+zn78H37qDmb9OPn7N0l7nr5iN96f84G/zfnbO6Pn7NJVx/6g8aaY7iB5d+dm0EDA2PNM9zARkPOTDfCwMBY8w697fhDbvuNsYcZGNj5b3d0yFcjfLAODtpiyG2Wmm+xud7bTQ0M/O30b33E+9kPP3Tkcww9nXPo6Vzv/ZgxB/62Kg6e/aSThxkyF/8wHaOONPIwow4MjDz07NDlDMz63snIZ75/u494n/UPDfTdl1nZ4b2PdxttYGBglCFfTLzC2dsOmfr/hfdp/3/6//8/ec0y6IP1cdDQj6G3ec9rzvkX/NvPencahszdsEMvm3mIyf/wW9v/Q/803klHHJj0Y8b7Ma+L8260fq15xrhb/U+9Lg6Nd/yPGe/HvI7vR453yQf3eOy9Rf2PjfdD+7qF3v08x7+yrxv4+H3dsLSAla+a6MP7uu989BD/YXf5/hyN8KEbfdS+bvy9JtliyPLn+Ph93UJDxj7cP+zrhhkYGGvu9/d1Q3Z88w03sPOQM9MPOTP/cAOHDTkzw7tnRho4b8iZr664zporDblggX9eD6Ye9A9/oAnb2Xwf2s4G/d19H/Shv+8c/N7pKAe8/x5OH7HfHDT0bv2X+wpab8f8mPF+zPtP4TwPuWyl40cc93/q/adovCN+/Hg/6v2yP3K8O7189r3/w+P9YDsb7u+ma4F/ZTub9B+3syF3cdi/2zL+1cdhK8Ht3/t6/A+WtuFmj3/wmGK4Dy33v3pMscDHb2djrv6h79t+v4FBHzc38/8rczPhP+2Dtvz7uflXH29NPfl71w/7MXMzwqzLTfX+3Az/35yb+f+7czPHwLD/ODeDB+YdGBiYYuj+Yb5/ZW7G//i5+VfXm5Hh9u99vfIHF82z4xGXvD83H56L/2pu5vvvzs2kH6w3U7x73WTDDAw//MBGK2ywwXrTvff5/bPTv/f547fBef6VuRzzf2YuJxj8UXP5t1V11AevPuC/2Ab/aZ/+/vLn+e/O5cAHczmw+oc3lvp3rd//ucvfXf7u8neXv7v83eUv7iOO/3/w+v+7jznbLkN/uTHc1ZOMt90nPd5PuP/o4/9Dff/h+P92401y9TADH1z3scdn37vNv+Xx2ZnfOxnlkPdv9+HjgzzQjz4+u9+sM2/zv3R89v+p97fVf+H3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/tO//HcAj0y3y/NADocM9sfXSi3zS4/2E+48+/j/U9x+O/y+y9NZPDDPwwXUfe/z/vds4jv/f/8Z8O/07H/9/f1vt+H/9F+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/HO//HcDRR++xyft/D3DjWDuc8UmP9xPuP/X4f+//7639v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c0OP/Ax96e8vvt15gcPz//3Yf4b9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/AcN5I9Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5U/ZvEfJ3/M4j9u/pjF/9P5Yxb/8fLHLP7j549Z/D+TP2bxnyB/zOL/2fwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/1z+mMV/svf9R/yExvVvmsV/8rZ/zOI/Rf6YxX/K/DGL/1T5Yxb/z+ePWfynzh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7X8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/PX/M4j9b/pjF/xv5Yxb/b+aPWfxnzx+z+H8rf8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/7fzxyz+38kfs/gvlD9m8f9u/pjFf+H8MYv/9/LHLP7fzx+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP4/yB+z+C+VP2bx/2H+mMX/R/ljFv+l88cs/svkj1n8l80fs/gvlz9m8f9x/pjFf/n8MYv/CvljFv+f5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/j/NH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/j/LH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/DfPHLP6/yB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/3X+mMX/N/ljFv/t88cs/jvkj1n8d8wfs/jvlD9m8f9t/pjF/3f5Yxb/3+ePWfx3zh+z+O+SP2bx/0P+mMX/j/ljFv9d88cs/n/KH7P475Y/ZvHfPX/M4r9H/pjF/8/5Yxb/v+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9B/9H/4f31c/6ZZ/A9r+8cs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+T+L9b/v+cxH/QlfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/Lf/h6UKL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4v/ul/n/cxb/QfljFv9h8scs/sPmj1n8B+ePWfyHyx+z+A+fP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9P5Y9Z/MfJH7P4j5s/ZvH/dP6YxX+8/DGL//j5Yxb/z+SPWfwnyB+z+H82f8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfw/lz9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+n88fs/hPnT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/afLHLP7T5o8Numi34QYGBv7j/afLH7Ns/9Pnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif+wA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+XP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP6fzx+z+E+dP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+gwfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyh+z+I+TP2bxHzd/zOL/6fwxi/94+WMW//Hzxyz+n8kfs/hPkD9m8f9s/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/Ln/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8P58/ZvGfOn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/9fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/9fwxi/9s+WMW/2/kj1n8v5k/ZvGfPX/M4v+t/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/t/OH7P4fyd/zOK/UP6Yxf+7+WMW/4Xzxyz+38sfs/h/P3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/IcbyB+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvEffiB/zOI/KH/M4j9M/pjFf9j8MYv/4Pwxi/9w+WMW/+Hzxyz+I+SPWfxHzB+z+I+UP2bxHzl/zOI/Sv6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4v+p/DGL/zj5Yxb/cfPHLP6fzh+z+I+XP2bxHz9/zOL/mfwxi/8E+WMW/8/mj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi//n8scs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/8/ljFv+p88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fy1/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fzx+z+M+WP2bx/0b+mMX/m/ljFv/Z88cs/t/KH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8zi/+38MYv/d/LHLP4L5Y9Z/L+bP2bxXzh/zOL/vfwxi//388cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/8P8scs/kvlj1n8f5g/ZvH/Uf6YxX/p/LH/UP9BH7Iefpn8sf9Q/3f7++1/2fwxi/9y+WMW/x/nj1n8l88fs/ivkD9m8f9J/pjFf8X8sUEXDRo6M//Z/ivlj1m2/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzHxgJLrP4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/hIH8MYv/oPwxi/8w+WMW/2Hzxyz+g/PHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+QxvxH85Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf1v0b42w+G+XNmbx/3X+mMX/N/ljFv/t88cs/jvkj1n8d3zP/613Pqlx/Ztm8d+p7R+z+P82f8zi/7v8MYv/7/PHLP47549Z/HfJH7P4/yF/zOL/x/wxi/+u+WMW/z/lj1n8d8sfs/jvnj9m8d8jf8zi/+f8MYv/X/LHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5/zR+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGJ/4gD+WMW/0H5Yxb/YfLHLP7D5o9Z/Afnj1n8h8sfs/gPnz9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/T+WPWfzHyR+z+I+bP2bx/3T+mMV/vPwxi//4+WMW/8/kj1n8J8gfs/h/Nn/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8P5c/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv+p8scs/p/PH7P4T50/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf9r+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/3r+mMV/tvwxi/838scs/t/MH7P4z54/ZvH/Vv6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv9v549Z/L+TP2bxXyh/zOL/3fwxi//C+WMW/+/lj1n8v58/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8f5A/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOL/4/wxi//y+WMW/xXyxyz+P8kfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYP/oMEDIz6dP2bwH7L9P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TPybxH2kgf8ziPyh/zOI/TP6YxX/Y/DGL/+D8MYv/cPljFv/h88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOL/qfwxi/84+WMW/3Hzxyz+n84fs/iPlz9m8R8/f8zi/5n8MYv/BPljFv/P5o9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/5/LHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF//P5Yxb/qfPHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP03+mMV/2oGBzT+pIf07Z/Gfru0fs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+Iw/kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/lT9m8R8nf8ziP27+mMX/0/ljFv/x8scs/uPnj1n8P5M/ZvGfIH/M4v/Z/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/XP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOI/df6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/6/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/DGL/x/yxyz+f8wfs/jvmj9m8f9T/pjFf7f8MYv/7vljFv898scs/n/OH7P4/yV/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/1/wxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8ykD9m8R+UP2bxHyZ/zOI/bP6YxX9w/pjFf7j8MYv/8PljFv8R8scs/iPmj1n8R8ofs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bx/1T+mMV/nPwxi/+4+WMW/0/nj1n8x8sfs/iPnz9m8f9M/pjFf4L8MYv/Z/PHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/3P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v/5/DGL/9T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/lj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/nj1n8Z8sfs/h/I3/M4v/N/DGL/+z5Yxb/b+WPWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/dv6Yxf87+WMW/4Xyxyz+380fs/gvnD9m8f9e/pjF//v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/wf5Yxb/pfLHLP4/zB+z+P8of8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+P84fs/gvnz9m8V8hf8zi/5P8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/p/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/Z/ljFv/18scs/uvnj1n8N8gfs/j/PH/M4r9h/pjF/xf5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP6/zh+z+P8mf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+v80fs/j/Ln/M4v/7/DGL/875Yxb/XfLHLP5/yB+z+P8xf8ziv2v+mMX/T/ljFv/d8scs/rvnj1n898gfs/j/OX/M4v+X/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mflj7/sPjDgw8J/sf1b+mGX7Pzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8/5o/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/ljzn8k/+oHP4DozzRWoBZ/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/Ugfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/6fyxyz+4+SPWfzHzR+z+H86f8ziP17+mMV//Pwxi/9n8scs/hPkj1n8P5s/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/p/LH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv/P549Z/KfOH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOL/tfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H89f8ziP1v+mMX/G/ljFv9v5o9Z/GfPH7P4fyt/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/t/PHLP7fyR+z+C+UP2bx/27+mMV/4fwxi//38scs/t/PH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/j/IH7P4L5U/ZvH/Yf6Yxf9H+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/3H+mMV/+fwxi/8K+WMW/5/kj1n8V8wfs/ivZPT/F+6wxX9lo/+/kMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6jDeSPWfwH5Y9Z/IfJH7P4D5s/ZvEfnD9m8R8uf8ziP3z+mMV/hPwxi/+I+WMW/5Hyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/D+VP2bxHyd/zOI/bv6Yxf/T+WMW//Hyxyz+4+ePWfw/kz9m8Z8gf8zi/9n8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8f9c/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/h/Pn/M4j91/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/r+WPWfxnyh+z+M+cP2bxnyV/7B/8h1425ic8pv9PfYT/rPljlu3/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/LH/VP8RP+T/h/yx/1T/gQ/5/zF/zOK/a/6Yxf9P+WMW/93yxyz+u+ePWfz3yB+z+P85f8zi/5f8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/X/PHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/5MP+W/wvj+vfNIv/o23/mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP/pA/pjFf1D+mMV/mPwxi/+w+WMW/8H5Yxb/4fLHLP7D549Z/EfIH7P4j5g/ZvEfKX/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMX/U/ljFv9x8scs/uPmj1n8P50/ZvEfL3/M4j9+/pjF/zP5Yxb/CfLHLP6fzR+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/z+WPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/+fzxyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif8YA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+X//+PnbsP97qu7zj+454sZ592Xeo122UXGnNtRiKjUQtRUTzenDLRzHuEw01yIzcSYApstFLHpkvdLNjEwjFnq5Y43Fx3KxqWNVsjtlY5xbUwxhwsMmfsOnAOwdnbc+182ffr8v14/ME5v9/x/Ut5Xi9/Py+uq1CW/sP0D2Xpf5z+oSz9j9c/lKX/a/UPZek/XP9Qlv6/oH8oS/8T9A9l6f+L+oey9H+d/qEs/X9J/1CW/r+sfyhL/xP1D2Xp/3r9Q1n6j9A/lKX/G/QPZel/kv6hLP1H6h/K0v9k/UNZ+o/SP5Sl/6/oH8rSf7T+oSz936h/KEv/X9U/lKX/GP1DWfq/Sf9Qlv5v1j+Upf+v6R/K0v8t+oey9B+rfyhL/1P0D2XpP07/UJb+p+ofytL/NP1DWfqfrn8oS//x+oey9D9D/1CW/mfqH8rSf4L+oSz9z9I/lKV/m/6hLP3P1j+Upf85+oey9D9X/1CW/ufpH8rSv13/UJb+b9U/lKX/2/QPZel/vv6hLP3frn8oS/8L9A9l6T9R/1CW/hfqH8rS/yL9Q1n6v0P/UJb+F+sfytL/nfqHsvS/RP9Qlv6X6h/K0v8y/UNZ+l+ufyhL/yv0D2Xpf6X+oSz9r9I/lKX/JP1DWfpfrX8oS//J+oey9J+ifyhL/w79Q1n6T9U/lKX/NP1DWfpP1z+Upf8M/UNZ+r9L/1CW/tfoH8rSf6b+oSz9Z+kfytJ/tv6hLP3n6B/K0v9a/UNZ+s/VP5Sl/zz9Q1n6z9c/lKX/Av1DWfpfp38oS/+F+oey9H+3/qEs/RfpH8rSf7H+oSz9l+gfytL/ev1DWfq/R/9Qlv436B/K0v9G/UNZ+i/VP5Sl/zL9Q1n6L9c/lKX/r+sfytL/N/QPZem/Qv9Qlv7v1T+Upf9v6h/K0v99+oey9H+//qEs/W/SP5Sl/836h7L0v0X/UJb+v6V/KEv/lfqHsvT/bf1DWfr/jv6hLP1v1T+Upf9t+oey9P9d/UNZ+n9A/1CW/rfrH8rS/w79Q1n636l/KEv/39M/lKX/7+sfytL/Lv1DWfp/UP9Qlv4f0j+Upf8q/UNZ+q/WP5Sl/x/oH8rS/w/1D2Xpf7f+oSz91+gfytL/Hv1DWfp/WP9Qlv4f0T+Upf9a/UNZ+t+rfyhL/z/SP5Sl/zr9Q1n6/7H+oSz979M/lKX/n+gfytL/fv1DWfp/VP9Qlv5/qn8oS/+P6R/K0v/j+oey9P+E/qEs/f9M/1CW/p/UP5Sl/wP6h7L0X69/KEv/B/UPZen/5/qHsvTfoH8oS/+H9A9l6f8X+oey9P9L/UNZ+j+sfyhL/7/SP5Sl/6f0D2Xp/2n9Q1n6f0b/UJb+n9U/lKX/5/QPZen/1/qHsvT/vP6hLP2/oH8oS/+N+oey9P+i/qEs/f9G/1CW/pv0D2Xp/4j+oSz9v6R/KEv/L+sfytL/Uf1DWfp/Rf9Qlv5f1T+Upf/f6h/K0v8x/UNZ+n9N/1CW/n+nfyhL/6/rH8rS/+/1D2Xpv1n/UJb+39A/lKX/Fv1DWfr/g/6hLP3/Uf9Qlv7f1D+Upf8/6R/K0v9b+oey9P+2/qEs/b+jfyhL/8f1D2Xp/8/6h7L0f0L/UJb+T+ofytJ/q/6hLP2f0j+Upf+/6B/K0v+7+oey9P9X/UNZ+n9P/1CW/tv0D2Xp/7T+oSz9v69/KEv/7fqHsvT/N/1DWfrv0D+Upf+/6x/K0v8Z/UNZ+v+H/qEs/XfqH8rSf5f+oSz9/1P/UJb+P9A/lKX/bv1DWfr/UP9Qlv7P6h/K0v9H+oey9H9O/1CW/v+lfyhL/+f1D2Xp/2P9Q1n679E/lKT/K1v6h7L076d/KEv//vqHsvQfoH8oS/+B+oey9B+kfyhL/8H6h7L0H6J/KEv/ofqHsvR/mf6hLP0P0z+Upf/L9Q9l6f8K/UNZ+h+ufyhL/5/RP5Sl/xH6h15y/QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6/mb94yTWTZs7smOcb3/jGN/u/ebH/zQQAAPxf+8mH/hf77wQAAAAAAAAAAAAAAAAAAADyauL/TuzF/mcEAAAAAAAAAAAAAICfdm3tp24f0O+gpwYc+ODnH+3Y+3XU7ounr137YOn+2vXjc4KX7H/ggz179uxZ/czY8V0Ph7Rarc7/tVd2PR7a87jz9Zcdu+rofY/KuM/f+fgVEw8/d9762wZ+Y/Ut7U8P2vvsoNZVU2fM7HhD/1arnD6otajzwUn9Wq1y5qDWrZ0PRnY+mDCota7zwcl7H7ys9ZnOB6+fPGfmlM4nzqr8ewYvFW3ty1oDDlps66B/Gxy4/2XHPjG9+2svL9n9agNbXfsftv5LR/X4WbcX2H/365dTe+6/z/+AwAvq2/6f3dL9tZeX/B/v/x/etHtJ9LMX3n/365fT7B/qE3z+P2ijPT/39/j8/5rgJfffnzJ00+2d+2+78L5Xdz018H/z+f8nr19O77n//gd9/u/8HD+++/P/kFarnHGIvx2QSlv78u29vf/3vv+BP9fjpt+B+7/nK1tf0bn/e59rreh6alAf9z++t/f/m3r8vQJ909a+Zk+P9/8+7L81PHjJ/fvftv7wvZ//t94/+cgDftaX/Z/Rc/8jFsy6dsT8xUtOnDFr0rSOaR2zx4wcfdKoMWNGjx6x9xPBvl8P8TcFkji09//WYT1u+rVaHfvvN953y/jO/e94aMVHup4a2sf9n9nr+/9rvP9DaFj/1uDBrUWTFiyYd9K+X7sfjtz3676/LNh/H/77/7gTuv6y7j8z7NdqHb3/fvgVY4Z07v/6uWVD11OD+7j/Cb3uf9zBf1YJ9M0hvv9P6XFz0P5P2Xbjws79H/+DV23teqqv//1/Vq/7v9v7PxyKtvZWrW+infs/ecjys6tdlzZ//gf1aWL/x+68dVe163K2/UN9mtj/xJVvvrradTnH/qE+Tez/wVlXrqx2Xc61f6hPE/t//md3HVPtupxn/1CfJvb/2HefWlvturTbP9Snif1/8K72k6tdl7faP9Snif2feN0Px1a7Lm+zf6hPE/uf+vIL1lW7LufbP9Snif2fvee0I6tdl7fbP9Snif33W/69ZdWuywX2D/VpYv9PTlo5p9p1mWj/UJ8m9r/u2OHPVrsuF9o/1KeJ/a94+o0Tql2Xi+wf6tPE/r96x6rHql2Xd9g/1KeJ/X/isletqnZdLrZ/qE8T+//RsIcOq3Zd3mn/UJ8m9r9587oHql2XS+wf6tPE/levGzCs2nW51P6hPk3sf+lZ0x6tdl0us3+oTxP7HzX6y5dWuy6X2z/Up4n9H/25bz1V7bpcYf9Qnyb2f8HDC+dXuy5X2j/Up4n9Lzzm4z+udl2usn+oTxP7f0vHMdOrXZdJ9g/1aWL/5bbDNle7LlfbP9Snif1fsmPNuGrXZbL9Q32a2P+GI77wsWrXZYr9Q32a2P/OubPHVLsuHfYP9Wli/99579L3VbsuU+0f6tPE/m9/7uul2nWZZv9Qnyb2v23kJZdVuy7T7R/q08T+15z7zCPVrssM+4f6NLH/lRseX1DturzL/qE+Tex/48Zznqh2Xa6xf6hPE/s/fviIw6tdl5n2D/VpYv9zLl7xoWrXZZb9Q32a2P/p99/x2mrXZbb9Q32a2P/Qr439ZLXrMsf+oT5N7P/TY9//qWrX5Vr7h/o0sf9d4447odp1mWv/UJ8m9r/lgZF3Vrsu8+wf6tPE/j/wyF0Vr8t8+4f6NLH/ua97fke167LA/qE+Tez/TRMvWlztulxn/1CfJvZ/5N0Tvljtuiy0f6hPE/u//NvfP7/adXm3/UN9mtj/cUdd/epq12WR/UN9mtj/9Bmbbq52XRbbP9Snif2PX71lVLXrssT+oT5N7P+IJ+ffU+26XG//UJ8m9r99wFHnVbsu77F/qE8T+7/3hoe/We263GD/UJ8m9n/zTR/tqHZdbrR/qE8T+//s7sE7q12XpfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2D6N0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//8mu+jL") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x165840, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) bind$phonet(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x0, 0x5, 0xf}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f000001bb80)={&(0x7f0000002840)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x0, {}, [{0x64, 0x1, [@m_xt={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x26, 'raw\x00'}}, @TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 11m14.687920335s ago: executing program 5 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) setgroups(0x0, &(0x7f0000000080)) 11m11.300719299s ago: executing program 5 (id=947): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000040000000100009302000000010000002430000001000100005f"], 0x0, 0x36, 0x0, 0x1, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/229, 0xe5, 0x0, 0x0}, &(0x7f00000002c0)=0x40) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) 10m55.94499783s ago: executing program 38 (id=947): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000040000000100009302000000010000002430000001000100005f"], 0x0, 0x36, 0x0, 0x1, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/229, 0xe5, 0x0, 0x0}, &(0x7f00000002c0)=0x40) ptrace$pokeuser(0x6, r2, 0x358, 0xffff8881f5c0a000) syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) 5m10.679588724s ago: executing program 6 (id=2473): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20040840) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x20000255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x252, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5m8.085472424s ago: executing program 6 (id=2481): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) gettid() r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000003c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1b00", 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe25, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "1983426a97e3503bbbc12ef01ae488918c1ea89a08a25f78de9f802d2628cc4b", "b6af91bfb69252b136c8f50eaee89ebe", {"26e39726e261b1997fe90de7841c2e1f", "8def4140df2b9c11e876f120f5f7bfc5"}}}}}}}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) 5m5.957274609s ago: executing program 6 (id=2487): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888"], 0x0) 5m1.193491838s ago: executing program 6 (id=2505): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 4m59.695041993s ago: executing program 6 (id=2514): syz_open_dev$video(0x0, 0x9, 0x1e3a00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000faffbfff000000004000000085000000c90000009500000000000000f34bf830d5783fa0610ccf4b7a1d0f2c0d1151d0752ef9e3df5946c1f29d2ed63ba289bc949c9434a932b8915ba4b105c6b72fbd920565a8ebdb6a95d1"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000000)={0x38, 0xfffff82d, 0xc, 0x5, 0x2, 0x81}) 4m52.636547339s ago: executing program 6 (id=2530): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r1, @ANYBLOB="089805000750050008001300", @ANYRES32=r2, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 4m37.463539483s ago: executing program 39 (id=2530): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r1, @ANYBLOB="089805000750050008001300", @ANYRES32=r2, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 4m26.501398958s ago: executing program 7 (id=2601): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @ipv4={'\x00', '\xff\xff', @local}, 0x12}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002ec0)=ANY=[@ANYBLOB="14010000370001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0) 4m25.158722304s ago: executing program 7 (id=2605): poll(0x0, 0x0, 0x1d) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mlockall(0x9) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000)=0x7d8, 0x0}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000009008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r6}, 0x18) 4m22.901117644s ago: executing program 7 (id=2610): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000001480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,flush,shortname=win95,nonumtail=0,codepage=950,utf8=0,shortname=win95,shortname=lower,shortname=win95,iocharset=cp1251,shortname=win95,shortname=lower,\x00'], 0x7f, 0x2d0, &(0x7f0000001180)="$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") openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) 4m19.825747652s ago: executing program 7 (id=2614): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2401, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r1 = getpid() syz_pidfd_open(r1, 0x0) setreuid(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) 4m18.6090998s ago: executing program 7 (id=2615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x57, 0xec}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000340)=""/102400, 0x19000) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0xe65b}], 0x2) semctl$SETALL(r3, 0x0, 0x11, &(0x7f00000006c0)=[0x7f, 0x7, 0x9c, 0x9]) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) waitid(0x2, 0x0, 0x0, 0x3, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5) 4m16.724819009s ago: executing program 7 (id=2616): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @ipv4={'\x00', '\xff\xff', @local}, 0x12}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002ec0)=ANY=[@ANYBLOB="14010000370001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0) 4m1.28578432s ago: executing program 40 (id=2616): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @ipv4={'\x00', '\xff\xff', @local}, 0x12}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002ec0)=ANY=[@ANYBLOB="14010000370001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0) 3m38.503220982s ago: executing program 0 (id=2678): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @ipv4={'\x00', '\xff\xff', @local}, 0x12}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002ec0)=ANY=[@ANYBLOB="14010000370001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0) 3m36.685974662s ago: executing program 0 (id=2682): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) clock_gettime(0xffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) capset(&(0x7f00000009c0)={0x20071026}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='kyber', 0x5) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) mmap$snddsp(&(0x7f0000556000/0x2000)=nil, 0x2000, 0x1000007, 0x12, 0xffffffffffffffff, 0x3000) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 3m32.93164045s ago: executing program 0 (id=2687): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000740)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) mount_setattr(r1, 0x0, 0x1900, 0x0, 0x0) socket$inet(0xa, 0x1, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0xb8f7) mount(&(0x7f0000000140)=@nullb, 0x0, 0x0, 0x2208004, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 3m29.728341846s ago: executing program 0 (id=2689): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) gettid() r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000003c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1b00", 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe25, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "1983426a97e3503bbbc12ef01ae488918c1ea89a08a25f78de9f802d2628cc4b", "b6af91bfb69252b136c8f50eaee89ebe", {"26e39726e261b1997fe90de7841c2e1f", "8def4140df2b9c11e876f120f5f7bfc5"}}}}}}}}, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) 3m29.128648272s ago: executing program 0 (id=2691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 3m27.706766072s ago: executing program 0 (id=2692): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @ipv4={'\x00', '\xff\xff', @local}, 0x12}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002ec0)=ANY=[@ANYBLOB="14010000370001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0) 3m11.808425926s ago: executing program 41 (id=2692): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @ipv4={'\x00', '\xff\xff', @local}, 0x12}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002ec0)=ANY=[@ANYBLOB="14010000370001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0) 13.833634072s ago: executing program 3 (id=3330): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, 0x0) 12.617019951s ago: executing program 3 (id=3337): syz_open_dev$rtc(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read$FUSE(r0, 0x0, 0x0) 10.516108063s ago: executing program 3 (id=3346): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000300)='./file1\x00', 0x1c886, &(0x7f0000005400)=ANY=[], 0x83, 0x614e, &(0x7f000000cc40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) 8.175664791s ago: executing program 4 (id=3355): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x1c, r2, 0x1536880451fbb607, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7.973385704s ago: executing program 4 (id=3356): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) 7.103279988s ago: executing program 1 (id=3357): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040) socket$unix(0x1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) 6.880012924s ago: executing program 4 (id=3360): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @ipv4={'\x00', '\xff\xff', @local}, 0x12}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002ec0)=ANY=[@ANYBLOB="14010000370001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0) 6.724327049s ago: executing program 1 (id=3361): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4000011) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000a0000000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x12, &(0x7f000000cf3d)=""/195}, 0x23) 6.565178985s ago: executing program 9 (id=3362): mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/psmouse/parameters/proto\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 6.233561697s ago: executing program 4 (id=3364): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 6.127489066s ago: executing program 2 (id=3365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0xe803, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0xffffffff}}}}}}, 0xfd78) 5.933268643s ago: executing program 1 (id=3366): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x4e20, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xfffe}, &(0x7f0000000040)=0x20) 5.900930882s ago: executing program 1 (id=3367): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000000280)="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", 0xfbd, 0x0) 5.883178798s ago: executing program 9 (id=3368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r0, &(0x7f0000002800)="25ee", 0x2, 0x48899, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)=0x40) 5.808208201s ago: executing program 8 (id=3369): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 5.720825079s ago: executing program 3 (id=3370): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000540)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.638803522s ago: executing program 1 (id=3371): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$rds(0xffffffffffffffff, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x0) 5.500024004s ago: executing program 9 (id=3372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000000cc0)="01562db1d027d65d0ee6dce1905b044d7812c979bed95e7832eb61f4bc9643e0f6084cefff0acb09b3028b646bc8513fc0289afdb8e024c746c69c20bedc1961858af6f1a4d732205066012769afcab13859bf1b9524aeed391c4745ce27f553da682de74851a6a31a025656a93357842c0445c3231ba92ede7a6e00497f08e013e7c218da0196e479345958c235180bfc46425867de9cdfc65ac580a66025b78ad442d25ec048178ae2affe0b31ba3d2d09f37c6dc7c3ff3f75f634b146cd652592e9ecb3a73da0f4c06bf5e5f7b93e5a0f4ca1281ecf03feb60cfa76542c4d20ab3d630679e9a361296b2693a6da155ba2d6b2b1dea412773225dcab91511946574a3a34554e42db14f9cb3060ede816838ad88d83f6cd1c7a176e51adfd39cfd2326d5d804adc4da5c43a7a89c578fc160837a8d1e366b868cbd27e6b98407784efffee31724a70c6811fd5c0dbec2eab77efb7c844bccbc1e496b4aa501b603e930e70b54477ffe6ae3a6250f12757a7849b480f5922a44304ed59b2d4fdd2a3ea10dcad20fcbbc426e636cc29d7ec0c37361ea13265359ca6fe6bedc4cbcef0caf68538d0bed1d60e6a57b06b901f0ff0ff8264ca7643f5acafae890e57f73579072d8caf1250486a393ee79b3352175f935f653388a809e64a23ec9927522fcf32776f7341f8f2cdc67633b66f6bd79e6a0eebd7e3655c13a4122a72be2ce6c112cebba9588d83013037a60878d076ecc84a757779c1589ec9a8f36096580be23ce18eaab848e2b581fde2cb1f4528d75d15377f42bdfdef5305dc9ee794d2926fa8640b2b8521c6a742bd8acae71478455d8a506c78c5aa63b411d1dd425b5c47178d2552a2a8a275f2b9f7c92d29b852e7ce2d766261db6bd0a530e72fa39683a614180d2530a76fb5abf195256ca1a2f0007566c358e4e5c24f2eae61e2fedc0d50c282cc37c310ad369efd248e0b5f1a332609da191cdc914d0346f84cf639512807e578994c55e2060e3b5c3cf89d22d6bb8d8cbf48b3b846c7af1b152f3995f54aadbc0162a8803cf8956d94873711134e3a9bbd7373269bea4044adaafd2a570362c6145b1fd6cd67a0c71f622ed991bbe9cd83b8b377040c2e0bb962a07088156b3a2d4d83c06131baa5a4ad0b5ab192a96f55dd2bd52a30ecca828bddd7ffdae06b292483f9e0f1f98a6b84434e4d77825eaafe723994d7d022324eac9babcd2b807290dac3a2fae860cd34eacb0d5b42cdb916f322eff3c79c609716d232ab7b1c279c55f4951e2dfe38da3e55897ad175f00226da4eec6919146b8fd4634be52d4577baa59e3b5d5ad8d2b5a4520c8d44b0cd78bafd52ff3cb89c7b145fab26f089537e2d83745aed7de83f49aa4aac297d87a608b703e0de464cd54b43d37751b3a5", 0x3eb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='=', 0x1}], 0x1}}], 0x3, 0x119e75c40277adee) 5.255003947s ago: executing program 2 (id=3373): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000002380)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000a40)='R', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4048044) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 5.122579208s ago: executing program 2 (id=3374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000880)="6dc029d186242d046f5ecf5bc9de", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.432804683s ago: executing program 1 (id=3375): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x5b04, 0x0) 4.426010874s ago: executing program 9 (id=3376): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @ipv4={'\x00', '\xff\xff', @local}, 0x12}, 0x1c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002ec0)=ANY=[@ANYBLOB="14010000370001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0) 4.36539543s ago: executing program 2 (id=3377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x22f0}, @void, @eth={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, '\x00\a\x00', 0x8, 0x2c, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x2c}]}}}}}}, 0x42) 4.299210504s ago: executing program 8 (id=3378): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$rds(0xffffffffffffffff, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'fo\x00', 0x15, 0x81, 0x2e}, {@private=0xa010100, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d56}}, 0x44) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x0) 3.890131223s ago: executing program 9 (id=3379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x15}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x6, 0x15, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa0100fd, @local}, @info_reply={0x10, 0x0, 0x0, 0xa6cf, 0xd0d4}}}, 0x2a) 3.000956241s ago: executing program 8 (id=3380): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2.84910798s ago: executing program 8 (id=3381): recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{&(0x7f0000000280)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}], 0x1, 0x40000000, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) 2.748178103s ago: executing program 2 (id=3382): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff00", 0x2000, &(0x7f0000000280)={&(0x7f0000000140)={0x50, 0x0, 0x1, {0x7, 0x2b, 0x0, 0xffffffff80050202, 0x5, 0xfc, 0x8, 0x9, 0x0, 0x0, 0x1f91affae52e4a1d, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x18, 0x0, 0x5, {0x800f4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.602464555s ago: executing program 8 (id=3383): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) shutdown(r3, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$unix(0x1, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r5, &(0x7f0000000280)='1', 0x1) 2.296933703s ago: executing program 4 (id=3384): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) splice(r0, 0x0, r2, 0x0, 0x402000784853bb, 0x0) fcntl$setpipe(r1, 0x407, 0x10001) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18, 0xd, 0x4002, {{0x40, 0x3, 0x7}, 0xe}}, 0x18) 1.533071154s ago: executing program 9 (id=3385): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 1.417817048s ago: executing program 8 (id=3386): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\t\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x143, &(0x7f0000000600)="$eJzs2r9Kw1AUBvCjCJU+glMgAeuQ/1oHd0Fw8gkMbW4aTLwlEaSdii+gOFwfwdVNdNJHyOwT6Bs4RdKm1ubiImoD/X5LPnrC6clypqMnPLZZqhNtja6PXlcTHittd7fDbObRxAERKUXI8vzGIMnxZz3LR4b0gvpYPluBOHxgYeQ7cg8AAAAAAAAAAAAAAAAAAAAAgCWhvpWh2RP8loWRb3+ppoPhiRdFfpJOf9GovNEhJvhe8b4716/1TqSN73dCsX9R1K25ujbttNkTfKX6f+ZZ3DfTwVAPYy/wA//Ucdy2tW1ZO4457mVWO2pX5UyU5fd9+Z5Iu5vdE71Y8j0RNSePtY1QXJ5Xu8++f7HhSanFGAi/HIi+LTXqMeEfhXWqxRg/D9X9Qd2Gqz4X+8Po8Kj7j/tD2mgAC/IRAAD//3sbNz8=") mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) 1.35364934s ago: executing program 2 (id=3387): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@codepage={'codepage', 0x3d, 'cp869'}}, {@creator={'creator', 0x3d, "44e026f5"}}, {}, {}]}, 0x5, 0x304, &(0x7f0000000240)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) 1.353187605s ago: executing program 3 (id=3388): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$rds(0xffffffffffffffff, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x0) 1.177183789s ago: executing program 4 (id=3389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x70}, @void, @eth={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4000, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x80, 0x6558, 0x8}}}}}}, 0x2e) 0s ago: executing program 3 (id=3390): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) getpgid(0x0) syz_emit_ethernet(0xfc2, &(0x7f0000002900)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "439620", 0xf8c, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0xb}, @mcast2, {[@srh={0x6c, 0x6, 0x4, 0x3, 0xf, 0x10, 0xbc7, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x33, 0x0, 0x61, 0x1, 0x0, 0x6, 0x66}, @hopopts={0xc, 0xb, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x7, 0x0, [0x3, 0xfffffffffffffffc, 0x0, 0x7654, 0x1af9, 0x10001, 0x7f]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0xf, [0x5]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x0, 0x1ce, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @pad1, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x80000000}, @pad1, @generic={0x9, 0xe30, "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"}]}], {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "5eb41565e6aeae40c8115062055b32a89b314ddaa32d915c1032b0cde2e9b38b", "f0959e18e55d09c8fcf1ae591fd3903b", {"2accc39c7ff32b7ca8e2cfedd896d10e", "909aae652449ec5e43a8e7aae9452614"}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): hci6: command tx timeout [ 1042.247498][ T6176] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.931812][ T6176] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.282660][ T4925] Bluetooth: hci6: command tx timeout [ 1044.563668][ T6176] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.110864][ T5271] v: left promiscuous mode [ 1046.362639][ T4925] Bluetooth: hci6: command tx timeout [ 1046.381723][T15485] tipc: Enabling of bearer rejected, failed to enable media [ 1046.444044][ T9877] v: entered promiscuous mode [ 1046.720577][ T6176] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.281732][T15496] fuse: fd is not a fuse device [ 1053.514665][ T6176] bridge_slave_1: left allmulticast mode [ 1053.514726][ T6176] bridge_slave_1: left promiscuous mode [ 1053.515000][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.574994][ T6176] bridge_slave_0: left allmulticast mode [ 1053.589673][ T6176] bridge_slave_0: left promiscuous mode [ 1053.596260][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.729799][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.736506][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.308178][ T6176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.359398][ T6176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.406049][ T6176] bond0 (unregistering): Released all slaves [ 1061.110688][T15389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.110837][T15389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.127130][T15389] bridge_slave_0: entered allmulticast mode [ 1061.140709][T15389] bridge_slave_0: entered promiscuous mode [ 1061.155550][T15389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.155754][T15389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.176562][T15389] bridge_slave_1: entered allmulticast mode [ 1061.187605][T15389] bridge_slave_1: entered promiscuous mode [ 1062.276284][T15389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.415451][T15389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.732665][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1201 jiffies old. [ 1066.388645][ T6176] hsr_slave_0: left promiscuous mode [ 1066.424089][ T6176] hsr_slave_1: left promiscuous mode [ 1066.425148][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.425206][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.452161][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.462675][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.546804][ T6176] veth1_macvtap: left promiscuous mode [ 1066.552427][ T6176] veth0_macvtap: left promiscuous mode [ 1066.558568][ T6176] veth1_vlan: left promiscuous mode [ 1066.560393][ T6176] v: left promiscuous mode [ 1074.259446][T15679] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1074.557001][ T6176] team0 (unregistering): Port device team_slave_1 removed [ 1074.639437][ T6176] team0 (unregistering): Port device team_slave_0 removed [ 1074.896756][T10541] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1074.919266][T10541] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1074.929080][T10541] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1074.951464][T10541] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1074.961903][T10541] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1075.658892][T15389] team0: Port device team_slave_0 added [ 1075.728807][T15389] team0: Port device team_slave_1 added [ 1077.002872][ T4925] Bluetooth: hci2: command tx timeout [ 1077.003378][T15389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.003406][T15389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.003468][T15389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.069715][T15389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.078758][T15389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.105501][T15389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.227994][T15389] hsr_slave_0: entered promiscuous mode [ 1077.240776][T15389] hsr_slave_1: entered promiscuous mode [ 1077.253357][T15389] debugfs: 'hsr0' already exists in 'hsr' [ 1077.253418][T15389] Cannot create hsr debugfs directory [ 1079.377047][ T4925] Bluetooth: hci2: command tx timeout [ 1081.471413][ T4925] Bluetooth: hci2: command tx timeout [ 1083.542762][ T4925] Bluetooth: hci2: command tx timeout [ 1088.847769][ T37] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.014141][ T5271] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1089.152037][T15780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2666'. [ 1091.123108][ T37] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.232029][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 13 (since boot) is 1092 jiffies old. [ 1094.439094][T15817] jffs2: notice: (15817) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 4 of xref (1 dead, 3 orphan) found. [ 1094.690440][ T37] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.456897][ T37] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.699142][T15849] 9pnet_virtio: no channels available for device syz [ 1101.725950][T10541] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1101.741891][T10541] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1101.755453][T10541] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1101.774633][T10541] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1101.782120][T10541] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1103.978843][T10541] Bluetooth: hci0: command tx timeout [ 1105.156860][T15890] jffs2: notice: (15890) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 4 of xref (1 dead, 3 orphan) found. [ 1106.812141][T10541] Bluetooth: hci0: command tx timeout [ 1106.999264][ T37] bridge_slave_1: left allmulticast mode [ 1106.999319][ T37] bridge_slave_1: left promiscuous mode [ 1106.999602][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.531380][ T37] bridge_slave_0: left allmulticast mode [ 1108.538818][ T37] bridge_slave_0: left promiscuous mode [ 1108.546660][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.862636][ T4925] Bluetooth: hci0: command tx timeout [ 1110.184020][ T4925] Bluetooth: hci3: Unable to find connection for big 0x00 [ 1110.923981][ T4925] Bluetooth: hci0: command tx timeout [ 1111.385575][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.406409][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.418746][ T37] bond0 (unregistering): Released all slaves [ 1111.563423][T15682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.563567][T15682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.563760][T15682] bridge_slave_0: entered allmulticast mode [ 1111.592495][T15682] bridge_slave_0: entered promiscuous mode [ 1111.608474][T15682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.617688][T15682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.625793][T15682] bridge_slave_1: entered allmulticast mode [ 1111.642311][T15682] bridge_slave_1: entered promiscuous mode [ 1111.656392][ T5271] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1111.656933][T15923] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2683'. [ 1112.354219][T15682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.387869][T15682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.885077][T15682] team0: Port device team_slave_0 added [ 1116.309221][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.315813][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.497582][T15682] team0: Port device team_slave_1 added [ 1116.807847][ T37] hsr_slave_0: left promiscuous mode [ 1116.808895][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1116.808948][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.842276][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.842331][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.902662][ T37] veth1_macvtap: left promiscuous mode [ 1116.908307][ T37] veth0_macvtap: left promiscuous mode [ 1116.916679][ T37] veth1_vlan: left promiscuous mode [ 1116.922218][ T37] veth0_vlan: left promiscuous mode [ 1119.464933][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1119.606273][T15979] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1119.633449][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1120.513749][T14955] IPVS: starting estimator thread 0... [ 1120.782732][T15986] IPVS: using max 22 ests per chain, 52800 per kthread [ 1120.926089][ T31] audit: type=1326 audit(33969621.033:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.9.2711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11059e159 code=0x7ffc0000 [ 1120.926208][ T31] audit: type=1326 audit(33969621.033:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.9.2711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11059e159 code=0x7ffc0000 [ 1120.926486][ T31] audit: type=1326 audit(33969621.033:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.9.2711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11059e159 code=0x7ffc0000 [ 1120.927308][ T31] audit: type=1326 audit(33969621.033:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.9.2711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11059e159 code=0x7ffc0000 [ 1120.928002][ T31] audit: type=1326 audit(33969621.033:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.9.2711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa11059e159 code=0x7ffc0000 [ 1120.928078][ T31] audit: type=1326 audit(33969621.033:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.9.2711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11059e159 code=0x7ffc0000 [ 1120.928150][ T31] audit: type=1326 audit(33969621.033:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.9.2711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11059e159 code=0x7ffc0000 [ 1120.928429][ T31] audit: type=1326 audit(33969621.033:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.9.2711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11059e159 code=0x7ffc0000 [ 1120.928945][ T31] audit: type=1326 audit(33969621.033:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.9.2711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11059e159 code=0x7ffc0000 [ 1120.929996][ T31] audit: type=1326 audit(33969621.033:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15987 comm="syz.9.2711" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa11059e159 code=0x7ffc0000 [ 1122.886277][T15682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.886330][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.886378][T15682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.896886][ T5271] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1123.013029][T15682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.013072][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.013120][T15682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.205499][T10541] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1123.214507][T10541] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1123.222963][T10541] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1123.232043][T10541] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1123.240099][T10541] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1123.716893][T15682] hsr_slave_0: entered promiscuous mode [ 1123.736346][T15682] hsr_slave_1: entered promiscuous mode [ 1123.739227][T15682] debugfs: 'hsr0' already exists in 'hsr' [ 1123.739262][T15682] Cannot create hsr debugfs directory [ 1124.228028][ T37] IPVS: stop unused estimator thread 0... [ 1125.322673][T10541] Bluetooth: hci6: command tx timeout [ 1127.403475][T10541] Bluetooth: hci6: command tx timeout [ 1128.253134][ T5271] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1128.688829][T15863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.689062][T15863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.689266][T15863] bridge_slave_0: entered allmulticast mode [ 1128.695585][T15863] bridge_slave_0: entered promiscuous mode [ 1128.702268][T15863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.702388][T15863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.707562][T15863] bridge_slave_1: entered allmulticast mode [ 1128.713625][T15863] bridge_slave_1: entered promiscuous mode [ 1129.008973][T15863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.320193][T15863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.495533][T10541] Bluetooth: hci6: command tx timeout [ 1129.596411][T15863] team0: Port device team_slave_0 added [ 1129.615982][T15863] team0: Port device team_slave_1 added [ 1129.930406][T15863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.939761][T15863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.939872][T15863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.989106][ T37] bridge_slave_1: left allmulticast mode [ 1129.989170][ T37] bridge_slave_1: left promiscuous mode [ 1129.989421][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.004725][ T37] bridge_slave_0: left allmulticast mode [ 1130.004762][ T37] bridge_slave_0: left promiscuous mode [ 1130.008695][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.453861][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.470465][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.489955][ T37] bond0 (unregistering): Released all slaves [ 1130.988119][T15863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.988169][T15863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.988239][T15863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.547834][ T37] hsr_slave_0: left promiscuous mode [ 1131.807495][T10541] Bluetooth: hci6: command tx timeout [ 1131.874143][ T37] hsr_slave_1: left promiscuous mode [ 1131.930948][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.473371][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.649885][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1133.691532][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1133.888436][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2734'. [ 1134.281631][ T4925] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1134.304005][ T4925] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1134.314402][ T4925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1134.322482][ T4925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1134.330308][ T4925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1134.654670][T15863] hsr_slave_0: entered promiscuous mode [ 1134.655915][T15863] hsr_slave_1: entered promiscuous mode [ 1134.656733][T15863] debugfs: 'hsr0' already exists in 'hsr' [ 1134.656762][T15863] Cannot create hsr debugfs directory [ 1136.442910][T10541] Bluetooth: hci5: command tx timeout [ 1137.152385][T15999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.163406][T15999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.170820][T15999] bridge_slave_0: entered allmulticast mode [ 1137.233415][T15999] bridge_slave_0: entered promiscuous mode [ 1137.507577][T15999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.507729][T15999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.507933][T15999] bridge_slave_1: entered allmulticast mode [ 1137.510622][T15999] bridge_slave_1: entered promiscuous mode [ 1137.695403][T16163] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2739'. [ 1137.707427][T16163] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2739'. [ 1138.522811][T10541] Bluetooth: hci5: command tx timeout [ 1138.553392][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.764230][T15999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.793770][T15999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.928992][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.652863][T10541] Bluetooth: hci5: command tx timeout [ 1141.181017][ T31] kauditd_printk_skb: 75 callbacks suppressed [ 1141.181083][ T31] audit: type=1326 audit(33969641.283:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.8.2753" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da479e159 code=0x7ffc0000 [ 1141.181172][ T31] audit: type=1326 audit(33969641.283:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.8.2753" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da479e159 code=0x7ffc0000 [ 1141.181927][ T31] audit: type=1326 audit(33969641.283:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.8.2753" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da479e159 code=0x7ffc0000 [ 1141.190756][ T31] audit: type=1326 audit(33969641.293:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.8.2753" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da479e159 code=0x7ffc0000 [ 1141.191462][ T31] audit: type=1326 audit(33969641.293:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.8.2753" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4da479e159 code=0x7ffc0000 [ 1141.191943][ T31] audit: type=1326 audit(33969641.293:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.8.2753" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da479e159 code=0x7ffc0000 [ 1141.192211][ T31] audit: type=1326 audit(33969641.293:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.8.2753" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da479e159 code=0x7ffc0000 [ 1141.261603][ T31] audit: type=1326 audit(33969641.293:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.8.2753" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da479e159 code=0x7ffc0000 [ 1141.261690][ T31] audit: type=1326 audit(33969641.363:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.8.2753" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da479e159 code=0x7ffc0000 [ 1141.261765][ T31] audit: type=1326 audit(33969641.363:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.8.2753" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4da479e159 code=0x7ffc0000 [ 1142.682687][T10541] Bluetooth: hci5: command tx timeout [ 1146.200677][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.280850][T15999] team0: Port device team_slave_0 added [ 1146.341475][T15999] team0: Port device team_slave_1 added [ 1146.679533][T15999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.679587][T15999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.679635][T15999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.697207][T15999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.697233][T15999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.697281][T15999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.983337][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.479069][T15999] hsr_slave_0: entered promiscuous mode [ 1147.486825][T15999] hsr_slave_1: entered promiscuous mode [ 1147.494647][T15999] debugfs: 'hsr0' already exists in 'hsr' [ 1147.503708][T15999] Cannot create hsr debugfs directory [ 1149.069456][ T37] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1149.116536][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.136593][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.147412][ T37] bond0 (unregistering): Released all slaves [ 1149.171290][ T37] bond1 (unregistering): Released all slaves [ 1149.421466][ T37] : left promiscuous mode [ 1149.877379][T16129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.885752][T16129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.893210][T16129] bridge_slave_0: entered allmulticast mode [ 1149.903849][T16129] bridge_slave_0: entered promiscuous mode [ 1151.601092][T16129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.609534][T16129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.617490][T16129] bridge_slave_1: entered allmulticast mode [ 1151.641973][T16129] bridge_slave_1: entered promiscuous mode [ 1152.124401][T15863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1152.659314][T15863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1152.751461][T16129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1153.136546][T15863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1153.151382][T15863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1153.265271][T16129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1153.324473][T15863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1153.348638][T15863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1153.358516][T15863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1153.393176][T15863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1153.606354][ T37] hsr_slave_0: left promiscuous mode [ 1153.616774][ T37] hsr_slave_1: left promiscuous mode [ 1153.623972][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.631456][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.653345][ T37] veth1_macvtap: left promiscuous mode [ 1153.659088][ T37] veth0_macvtap: left promiscuous mode [ 1153.666571][ T37] veth1_vlan: left promiscuous mode [ 1153.672063][ T37] veth0_vlan: left promiscuous mode [ 1154.100379][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1154.128419][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1154.387753][T16129] team0: Port device team_slave_0 added [ 1154.551275][T16129] team0: Port device team_slave_1 added [ 1154.796721][T16129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.796773][T16129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.800428][T16129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.806376][T16129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.806399][T16129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.806445][T16129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.626203][T16129] hsr_slave_0: entered promiscuous mode [ 1156.627563][T16129] hsr_slave_1: entered promiscuous mode [ 1156.628462][T16129] debugfs: 'hsr0' already exists in 'hsr' [ 1156.628490][T16129] Cannot create hsr debugfs directory [ 1156.837763][ T37] IPVS: stop unused estimator thread 0... [ 1156.999999][ T37] bridge_slave_1: left allmulticast mode [ 1157.000065][ T37] bridge_slave_1: left promiscuous mode [ 1157.000310][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.014346][ T37] bridge_slave_0: left allmulticast mode [ 1157.014384][ T37] bridge_slave_0: left promiscuous mode [ 1157.014663][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.915839][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.943554][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.965736][ T37] bond0 (unregistering): Released all slaves [ 1159.275086][ T37] hsr_slave_0: left promiscuous mode [ 1159.287456][ T37] hsr_slave_1: left promiscuous mode [ 1159.288521][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.306638][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.499293][ T4925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1159.513610][ T4925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1159.521444][ T4925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1159.529997][ T4925] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1159.546495][ T4925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1160.077949][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1160.167522][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1162.072358][ T4925] Bluetooth: hci2: command tx timeout [ 1163.256669][T15999] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1163.358155][T15999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1163.372830][T15999] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1163.410310][T15999] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1163.421374][T15999] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1163.480091][T15999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1163.495175][T15999] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1163.535203][T15999] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1164.134001][ T4925] Bluetooth: hci2: command tx timeout [ 1164.255167][T16129] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1164.290309][T16129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1164.690566][T16129] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1164.708567][T16129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1164.767693][T16129] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1164.800767][T16129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1164.871858][T16129] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1164.909651][T16129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1166.101482][T15999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.203250][ T4925] Bluetooth: hci2: command tx timeout [ 1166.901220][ T31] kauditd_printk_skb: 75 callbacks suppressed [ 1166.901285][ T31] audit: type=1326 audit(33969667.013:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.8.2811" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da479e159 code=0x7ffc0000 [ 1166.901375][ T31] audit: type=1326 audit(33969667.013:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.8.2811" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da479e159 code=0x7ffc0000 [ 1166.962492][ T31] audit: type=1326 audit(33969667.053:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.8.2811" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4da479e159 code=0x7ffc0000 [ 1166.962683][ T31] audit: type=1326 audit(33969667.053:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.8.2811" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da479e159 code=0x7ffc0000 [ 1167.172003][T16490] jffs2: notice: (16490) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 4 of xref (1 dead, 3 orphan) found. [ 1167.457728][T15999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.929911][T16390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.930060][T16390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.930276][T16390] bridge_slave_0: entered allmulticast mode [ 1167.960421][T16390] bridge_slave_0: entered promiscuous mode [ 1167.992376][ T6520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.992576][ T6520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.097360][T16390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.097514][T16390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.097728][T16390] bridge_slave_1: entered allmulticast mode [ 1168.109982][T16390] bridge_slave_1: entered promiscuous mode [ 1168.135370][T10225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.135526][T10225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.191074][ T37] bridge_slave_1: left allmulticast mode [ 1168.191140][ T37] bridge_slave_1: left promiscuous mode [ 1168.191391][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.221146][ T37] bridge_slave_0: left allmulticast mode [ 1168.221208][ T37] bridge_slave_0: left promiscuous mode [ 1168.228854][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.282697][ T4925] Bluetooth: hci2: command tx timeout [ 1168.644022][T16515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2819'. [ 1168.950178][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.972242][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.004158][ T37] bond0 (unregistering): Released all slaves [ 1169.649588][ T37] hsr_slave_0: left promiscuous mode [ 1169.658364][ T37] hsr_slave_1: left promiscuous mode [ 1169.659366][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.674662][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1170.279824][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2822'. [ 1170.345756][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1170.386999][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1172.083677][T16539] xt_connbytes: Forcing CT accounting to be enabled [ 1172.319103][T16539] xt_CT: No such helper "snmp" [ 1172.455068][T16390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.486516][T16390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.750299][T16390] team0: Port device team_slave_0 added [ 1172.820492][T16390] team0: Port device team_slave_1 added [ 1172.968386][T16129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.137922][ T1006] IPVS: starting estimator thread 0... [ 1174.184637][T16390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.184687][T16390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.184733][T16390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.187057][T16390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.187084][T16390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.187129][T16390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.262821][T16554] IPVS: using max 22 ests per chain, 52800 per kthread [ 1174.696801][T16129] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.070192][T14953] IPVS: starting estimator thread 0... [ 1176.177630][T16390] hsr_slave_0: entered promiscuous mode [ 1176.178895][T16390] hsr_slave_1: entered promiscuous mode [ 1176.188191][T16390] debugfs: 'hsr0' already exists in 'hsr' [ 1176.188221][T16390] Cannot create hsr debugfs directory [ 1176.192652][T16570] IPVS: using max 23 ests per chain, 55200 per kthread [ 1176.298643][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.298797][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.606834][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.606933][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.108500][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.108650][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.724006][T16592] jffs2: notice: (16592) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 4 of xref (1 dead, 3 orphan) found. [ 1179.977383][T15999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1181.318456][T15999] veth0_vlan: entered promiscuous mode [ 1181.741525][T15999] veth1_vlan: entered promiscuous mode [ 1181.928987][T16390] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1181.954608][T16390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1182.941020][T16390] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1182.984469][T16390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1183.008459][T16390] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1183.130033][T16390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1183.131199][T16390] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1183.320697][T16390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1184.332934][T10541] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1184.339316][T10541] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1184.344454][T10541] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1184.362496][T10541] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1184.372447][T10541] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1184.412028][T16129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.619555][T16390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.771082][T16390] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.818726][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.818882][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.886500][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.886640][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.874322][T16129] veth0_vlan: entered promiscuous mode [ 1185.938006][T16129] veth1_vlan: entered promiscuous mode [ 1186.449573][ T4925] Bluetooth: hci0: command tx timeout [ 1187.650651][T16129] veth0_macvtap: entered promiscuous mode [ 1187.924549][T16129] veth1_macvtap: entered promiscuous mode [ 1188.523023][ T4925] Bluetooth: hci0: command tx timeout [ 1188.969693][T16129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.020292][T16129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.139919][ T6176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.141030][ T6176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.141124][ T6176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.141195][ T6176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.930661][T16390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1190.657682][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.657737][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.682719][ T4925] Bluetooth: hci0: command tx timeout [ 1192.239145][ T12] bridge_slave_1: left allmulticast mode [ 1192.239212][ T12] bridge_slave_1: left promiscuous mode [ 1192.239481][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.261653][ T12] bridge_slave_0: left allmulticast mode [ 1192.261715][ T12] bridge_slave_0: left promiscuous mode [ 1192.267317][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.763374][ T4925] Bluetooth: hci0: command tx timeout [ 1193.543367][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1193.560496][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1193.574756][ T12] bond0 (unregistering): Released all slaves [ 1193.764997][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.765054][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.833809][ T12] hsr_slave_0: left promiscuous mode [ 1193.840543][ T12] hsr_slave_1: left promiscuous mode [ 1193.841561][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.855362][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1193.906815][ T12] veth1_vlan: left promiscuous mode [ 1193.906941][ T12] veth0_vlan: left promiscuous mode [ 1194.013475][T10541] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1194.027230][T10541] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1194.035837][T10541] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1194.051043][T10541] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1194.059017][T10541] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1194.517940][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1194.551143][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1195.799840][T16390] veth0_vlan: entered promiscuous mode [ 1195.807161][T16663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.807292][T16663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.807475][T16663] bridge_slave_0: entered allmulticast mode [ 1195.816005][T16663] bridge_slave_0: entered promiscuous mode [ 1195.828486][T16663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.828610][T16663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.828768][T16663] bridge_slave_1: entered allmulticast mode [ 1195.838011][T16663] bridge_slave_1: entered promiscuous mode [ 1196.058998][T16663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.096344][T16390] veth1_vlan: entered promiscuous mode [ 1196.123090][ T4925] Bluetooth: hci6: command tx timeout [ 1196.136036][T16663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.868481][T16663] team0: Port device team_slave_0 added [ 1197.924768][T16663] team0: Port device team_slave_1 added [ 1198.018658][T16663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1198.026843][T16663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.054506][T16663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1198.086261][T16663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1198.093752][T16663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.121016][T16663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.203540][ T4925] Bluetooth: hci6: command tx timeout [ 1198.235990][T16663] hsr_slave_0: entered promiscuous mode [ 1198.243254][T16663] hsr_slave_1: entered promiscuous mode [ 1198.249788][T16663] debugfs: 'hsr0' already exists in 'hsr' [ 1198.256332][T16663] Cannot create hsr debugfs directory [ 1198.631385][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.739288][T16390] veth0_macvtap: entered promiscuous mode [ 1198.947784][T16390] veth1_macvtap: entered promiscuous mode [ 1199.061452][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.419698][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.646962][T16832] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2894'. [ 1199.647094][T16832] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2894'. [ 1199.663344][T16390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.771176][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.890942][T16390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1200.075404][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.076246][T14953] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.076324][T14953] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.076409][T14953] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.290451][ T4925] Bluetooth: hci6: command tx timeout [ 1200.940957][ T12] bridge_slave_1: left allmulticast mode [ 1200.941025][ T12] bridge_slave_1: left promiscuous mode [ 1200.941283][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.710620][ T12] bridge_slave_0: left allmulticast mode [ 1201.714038][ T12] bridge_slave_0: left promiscuous mode [ 1201.714316][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.332376][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.354037][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.371481][T10541] Bluetooth: hci6: command tx timeout [ 1202.379161][ T12] bond0 (unregistering): Released all slaves [ 1202.794941][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.804606][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1203.420434][ T12] hsr_slave_0: left promiscuous mode [ 1203.436341][ T12] hsr_slave_1: left promiscuous mode [ 1203.442909][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1203.451363][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.465094][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1203.473410][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.514363][ T12] veth1_macvtap: left promiscuous mode [ 1203.514434][ T12] veth0_macvtap: left promiscuous mode [ 1203.514585][ T12] veth1_vlan: left promiscuous mode [ 1203.514682][ T12] veth0_vlan: left promiscuous mode [ 1204.215127][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1204.243313][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1204.463729][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.463779][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.547299][T16877] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2913'. [ 1204.974532][T16904] Bluetooth: ISO socket layer initialized [ 1205.436341][T16910] loop1: detected capacity change from 0 to 4096 [ 1205.455809][T16910] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1206.029991][T16910] ntfs3(loop1): failed to convert "076c" to cp932 [ 1206.103297][T16765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.103441][T16765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.103632][T16765] bridge_slave_0: entered allmulticast mode [ 1206.132568][T16765] bridge_slave_0: entered promiscuous mode [ 1206.149623][T16765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.158186][T16765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.158363][T16765] bridge_slave_1: entered allmulticast mode [ 1206.187635][T16765] bridge_slave_1: entered promiscuous mode [ 1206.414857][T16765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.467260][T16765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.825327][T16765] team0: Port device team_slave_0 added [ 1207.857096][T16765] team0: Port device team_slave_1 added [ 1208.074434][T16663] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1208.100284][T16663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1208.108804][T16765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.117698][T16765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.147904][T16765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.155532][T16765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.155554][T16765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1208.155599][T16765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.219870][T16663] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1208.231384][T16663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1208.235236][T16663] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1208.264386][T16663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1208.270927][T16663] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1208.299503][T16663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1208.498355][T16765] hsr_slave_0: entered promiscuous mode [ 1208.502852][T16765] hsr_slave_1: entered promiscuous mode [ 1208.503700][T16765] debugfs: 'hsr0' already exists in 'hsr' [ 1208.503729][T16765] Cannot create hsr debugfs directory [ 1209.138911][T16663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.253776][T16952] loop1: detected capacity change from 0 to 32768 [ 1209.273226][T16952] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2936 (16952) [ 1209.374664][T16952] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1209.385621][T16952] BTRFS info (device loop1): using blake2b checksum algorithm [ 1209.477977][T16663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1209.515092][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.515261][ T6176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.562496][T16952] BTRFS info (device loop1): enabling ssd optimizations [ 1209.562647][T16952] BTRFS info (device loop1): turning on async discard [ 1209.562709][T16952] BTRFS info (device loop1): enabling free space tree [ 1209.562747][T16952] BTRFS info (device loop1): use zstd compression, level 3 [ 1209.900758][T16390] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1209.959135][T10225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.959287][T10225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.103205][T17013] loop1: detected capacity change from 0 to 128 [ 1211.351215][T16663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1211.952126][T17027] netlink: 'syz.1.2952': attribute type 7 has an invalid length. [ 1211.952194][T17027] netlink: 'syz.1.2952': attribute type 3 has an invalid length. [ 1211.952217][T17027] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2952'. [ 1212.375218][T17034] loop1: detected capacity change from 0 to 512 [ 1212.550581][T17034] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1212.550639][T17034] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1212.550774][T17034] System zones: 0-1, 15-15, 18-18, 34-34 [ 1212.551155][T17034] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1212.738570][T17034] EXT4-fs error (device loop1): ext4_validate_block_bitmap:435: comm syz.1.2954: bg 0: block 15: invalid block bitmap [ 1212.844067][T17034] loop1: lost filesystem error report for type 5 error -117 [ 1212.852566][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1212.852621][ C1] EXT4-fs (loop1): initial error at time 33969712: ext4_validate_block_bitmap:435 [ 1212.852687][ C1] EXT4-fs (loop1): last error at time 33969712: ext4_validate_block_bitmap:435 [ 1213.468593][T17034] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1213.468681][T17034] loop1: lost filesystem error report for type 5 error -117 [ 1213.510073][T17034] EXT4-fs (loop1): 1 truncate cleaned up [ 1213.527849][T17034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1213.560443][T17034] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.2954: bad symlink. [ 1213.576916][T17034] EXT4-fs error (device loop1): ext4_encrypted_get_link:46: inode #16: comm syz.1.2954: bad symlink. [ 1213.726269][T16390] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.072158][T16765] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1214.121047][T16765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1214.128948][T16765] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1214.158386][T16765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1214.168224][T16765] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1214.214719][T16765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1214.249911][T16765] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1214.352377][T16765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1214.561293][T17067] FAULT_INJECTION: forcing a failure. [ 1214.561293][T17067] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.561435][T17067] CPU: 0 UID: 0 PID: 17067 Comm: syz.1.2960 Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.561496][T17067] Tainted: [L]=SOFTLOCKUP [ 1214.561511][T17067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1214.561534][T17067] Call Trace: [ 1214.561546][T17067] [ 1214.561561][T17067] dump_stack_lvl+0x100/0x190 [ 1214.561621][T17067] should_fail_ex.cold+0x5/0xa [ 1214.561666][T17067] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1214.561727][T17067] should_failslab+0xc2/0x120 [ 1214.561795][T17067] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1214.561853][T17067] ? __pfx_map_id_range_down+0x10/0x10 [ 1214.561893][T17067] ? security_inode_alloc+0x3b/0x2c0 [ 1214.561954][T17067] security_inode_alloc+0x3b/0x2c0 [ 1214.562008][T17067] inode_init_always_gfp+0xc6f/0xfb0 [ 1214.562083][T17067] alloc_inode+0x8e/0x250 [ 1214.562136][T17067] sock_alloc+0x44/0x280 [ 1214.562188][T17067] ? security_socket_create+0x7f/0x250 [ 1214.562240][T17067] __sock_create+0xc2/0x860 [ 1214.562314][T17067] __sys_socket+0x14d/0x260 [ 1214.562353][T17067] ? __pfx___sys_socket+0x10/0x10 [ 1214.562406][T17067] __x64_sys_socket+0x72/0xb0 [ 1214.562443][T17067] ? lockdep_hardirqs_on+0x7d/0x110 [ 1214.562503][T17067] do_syscall_64+0x123/0x790 [ 1214.562570][T17067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.562612][T17067] RIP: 0033:0x7f1c3a99e159 [ 1214.562643][T17067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.562688][T17067] RSP: 002b:00007f1c3b7c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1214.562726][T17067] RAX: ffffffffffffffda RBX: 00007f1c3ac26180 RCX: 00007f1c3a99e159 [ 1214.562754][T17067] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 1214.562779][T17067] RBP: 00007f1c3aa3503b R08: 0000000000000000 R09: 0000000000000000 [ 1214.562804][T17067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1214.562829][T17067] R13: 00007f1c3ac26218 R14: 00007f1c3ac26180 R15: 00007ffd27a24888 [ 1214.562882][T17067] [ 1214.563147][T17067] net_ratelimit: 2 callbacks suppressed [ 1214.563223][T17067] socket: no more sockets [ 1215.030437][T14952] IPVS: starting estimator thread 0... [ 1215.142844][T17068] IPVS: using max 22 ests per chain, 52800 per kthread [ 1215.414991][T16765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.540193][T16765] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.570498][ T6520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.570649][ T6520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.611034][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.611193][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.750270][T16663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.979513][T16663] veth0_vlan: entered promiscuous mode [ 1216.034371][T16663] veth1_vlan: entered promiscuous mode [ 1216.111011][T16663] veth0_macvtap: entered promiscuous mode [ 1216.147398][T16663] veth1_macvtap: entered promiscuous mode [ 1216.181342][T16663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1216.197426][T16663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1216.217056][ T1006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.242433][ T1006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.252433][ T1006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.253905][T14955] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.300495][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.300549][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.590222][T14955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.590275][T14955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.800159][T17075] loop1: detected capacity change from 0 to 32768 [ 1218.018283][T17075] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1218.444162][T16390] ocfs2: Unmounting device (7,1) on (node local) [ 1218.533121][T17119] loop3: detected capacity change from 0 to 4096 [ 1218.625242][T17129] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1219.032672][ T5760] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 1219.347919][T16765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1219.393325][ T5760] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1219.420591][ T5760] usb 2-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 1219.420667][ T5760] usb 2-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1219.420746][ T5760] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1219.420803][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.505423][T17144] FAULT_INJECTION: forcing a failure. [ 1219.505423][T17144] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1219.505478][T17144] CPU: 1 UID: 0 PID: 17144 Comm: syz.3.2977 Tainted: G L syzkaller #0 PREEMPT(full) [ 1219.505534][T17144] Tainted: [L]=SOFTLOCKUP [ 1219.505549][T17144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1219.505573][T17144] Call Trace: [ 1219.505586][T17144] [ 1219.505600][T17144] dump_stack_lvl+0x100/0x190 [ 1219.505660][T17144] should_fail_ex.cold+0x5/0xa [ 1219.505711][T17144] get_futex_key+0x1d0/0x14f0 [ 1219.505763][T17144] ? __pfx_get_futex_key+0x10/0x10 [ 1219.505811][T17144] ? __pfx___schedule+0x10/0x10 [ 1219.505866][T17144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.505915][T17144] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 1219.505971][T17144] futex_wait_setup+0x91/0x540 [ 1219.506045][T17144] __futex_wait+0x19f/0x300 [ 1219.506110][T17144] ? __pfx___futex_wait+0x10/0x10 [ 1219.506172][T17144] ? __pfx_try_to_wake_up+0x10/0x10 [ 1219.506220][T17144] ? futex_hash+0x311/0x400 [ 1219.506269][T17144] ? __pfx_futex_wake_mark+0x10/0x10 [ 1219.506336][T17144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.506384][T17144] ? find_held_lock+0x2b/0x80 [ 1219.506438][T17144] ? futex_wake+0x4ea/0x5e0 [ 1219.506496][T17144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.506546][T17144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.506601][T17144] futex_wait+0xe6/0x370 [ 1219.506660][T17144] ? __pfx_futex_wait+0x10/0x10 [ 1219.506729][T17144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.506777][T17144] ? rcu_read_lock_any_held+0x6a/0x90 [ 1219.506830][T17144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.506878][T17144] ? find_held_lock+0x2b/0x80 [ 1219.506939][T17144] do_futex+0x265/0x440 [ 1219.506990][T17144] ? __pfx_do_futex+0x10/0x10 [ 1219.507036][T17144] ? __fget_files+0x215/0x3d0 [ 1219.507114][T17144] __x64_sys_futex+0x34f/0x4d0 [ 1219.507171][T17144] ? __pfx___x64_sys_futex+0x10/0x10 [ 1219.507236][T17144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1219.507292][T17144] do_syscall_64+0x123/0x790 [ 1219.507356][T17144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.507397][T17144] RIP: 0033:0x7f1f5e79e159 [ 1219.507428][T17144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.507466][T17144] RSP: 002b:00007f1f5f6490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1219.507505][T17144] RAX: ffffffffffffffda RBX: 00007f1f5ea26188 RCX: 00007f1f5e79e159 [ 1219.507532][T17144] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1f5ea26188 [ 1219.507558][T17144] RBP: 00007f1f5ea26180 R08: 0000000000000000 R09: 0000000000000000 [ 1219.507583][T17144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.507607][T17144] R13: 00007f1f5ea26218 R14: 00007ffe16faf870 R15: 00007ffe16faf958 [ 1219.507658][T17144] [ 1219.601234][T10225] IPVS: starting estimator thread 0... [ 1219.752984][T17145] IPVS: using max 21 ests per chain, 50400 per kthread [ 1220.105340][ T5760] usb 2-1: config 0 descriptor?? [ 1220.107040][T17132] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1220.482805][T16850] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1220.557542][ T5760] hid (null): unknown global tag 0xe [ 1220.644165][T16850] usb 4-1: Using ep0 maxpacket: 32 [ 1220.654663][T16850] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1220.656024][T16850] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1220.656063][T16850] usb 4-1: config 0 has no interface number 0 [ 1220.656119][T16850] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1220.656167][T16850] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1220.662586][ T5760] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0935.0004/input/input11 [ 1220.671591][T16850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.671631][T16850] usb 4-1: Product: syz [ 1220.671658][T16850] usb 4-1: Manufacturer: syz [ 1220.671685][T16850] usb 4-1: SerialNumber: syz [ 1220.708204][T16850] usb 4-1: config 0 descriptor?? [ 1221.101575][ T5760] uclogic 0003:28BD:0935.0004: input,hidraw0: USB HID v1.63 Mouse [HID 28bd:0935] on usb-dummy_hcd.1-1/input0 [ 1221.166270][ T5760] usb 2-1: USB disconnect, device number 3 [ 1221.169485][T16850] appletouch 4-1:0.85: Geyser mode initialized. [ 1221.332145][T16850] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input12 [ 1221.525358][T17160] fido_id[17160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1221.626442][T16850] usb 4-1: USB disconnect, device number 6 [ 1221.626595][ C1] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1221.755637][T16765] veth0_vlan: entered promiscuous mode [ 1221.820104][T17166] tipc: Started in network mode [ 1221.820181][T17166] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1221.820375][T17166] tipc: Enabled bearer , priority 0 [ 1221.844303][T16765] veth1_vlan: entered promiscuous mode [ 1221.972370][T17168] loop1: detected capacity change from 0 to 4096 [ 1221.997333][T17168] ntfs3(loop1): ino=3, mi_enum_attr [ 1222.144255][T16765] veth0_macvtap: entered promiscuous mode [ 1222.149210][T16765] veth1_macvtap: entered promiscuous mode [ 1222.349032][T16765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1222.450193][T16765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1222.902280][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.360132][ T9614] tipc: Node number set to 11578026 [ 1223.366398][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.369184][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.370488][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.385444][T17183] loop3: detected capacity change from 0 to 16 [ 1223.407434][T16850] appletouch 4-1:0.85: input: appletouch disconnected [ 1223.462210][T17183] erofs (device loop3): mounted with root inode @ nid 36. [ 1223.536175][T17183] erofs (device loop3): invalid de[0].nameoff 14 @ nid 36 [ 1223.882630][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.882680][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.996535][T17194] loop3: detected capacity change from 0 to 256 [ 1224.121448][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.121507][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1225.396571][T17211] loop1: detected capacity change from 0 to 64 [ 1225.495281][T17217] loop3: detected capacity change from 0 to 8 [ 1225.793874][T17217] SQUASHFS error: Failed to read block 0x2d7: -5 [ 1225.793925][T17217] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1226.518020][T17233] FAULT_INJECTION: forcing a failure. [ 1226.518020][T17233] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1226.518167][T17233] CPU: 0 UID: 0 PID: 17233 Comm: syz.3.2999 Tainted: G L syzkaller #0 PREEMPT(full) [ 1226.518228][T17233] Tainted: [L]=SOFTLOCKUP [ 1226.518243][T17233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1226.518267][T17233] Call Trace: [ 1226.518281][T17233] [ 1226.518296][T17233] dump_stack_lvl+0x100/0x190 [ 1226.518356][T17233] should_fail_ex.cold+0x5/0xa [ 1226.518408][T17233] get_futex_key+0x1d0/0x14f0 [ 1226.518461][T17233] ? __pfx_get_futex_key+0x10/0x10 [ 1226.518509][T17233] ? __pfx___schedule+0x10/0x10 [ 1226.518575][T17233] futex_wait_setup+0x91/0x540 [ 1226.518650][T17233] __futex_wait+0x19f/0x300 [ 1226.518719][T17233] ? __pfx___futex_wait+0x10/0x10 [ 1226.518777][T17233] ? __pfx_try_to_wake_up+0x10/0x10 [ 1226.518818][T17233] ? futex_hash+0x311/0x400 [ 1226.518867][T17233] ? __pfx_futex_wake_mark+0x10/0x10 [ 1226.518933][T17233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.518985][T17233] ? find_held_lock+0x2b/0x80 [ 1226.519037][T17233] ? futex_wake+0x4ea/0x5e0 [ 1226.519096][T17233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.519147][T17233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.519203][T17233] futex_wait+0xe6/0x370 [ 1226.519264][T17233] ? __pfx_futex_wait+0x10/0x10 [ 1226.519335][T17233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.519383][T17233] ? rcu_is_watching+0x13/0xc0 [ 1226.519432][T17233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.519480][T17233] ? trace_sched_exit_tp+0x120/0x160 [ 1226.519537][T17233] do_futex+0x265/0x440 [ 1226.519589][T17233] ? __pfx_do_futex+0x10/0x10 [ 1226.519636][T17233] ? __fget_files+0x215/0x3d0 [ 1226.519719][T17233] __x64_sys_futex+0x34f/0x4d0 [ 1226.519776][T17233] ? __pfx___x64_sys_futex+0x10/0x10 [ 1226.519838][T17233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.519896][T17233] do_syscall_64+0x123/0x790 [ 1226.519961][T17233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.520004][T17233] RIP: 0033:0x7f1f5e79e159 [ 1226.520035][T17233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.520075][T17233] RSP: 002b:00007f1f5f6490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1226.520114][T17233] RAX: ffffffffffffffda RBX: 00007f1f5ea26188 RCX: 00007f1f5e79e159 [ 1226.520142][T17233] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1f5ea26188 [ 1226.520169][T17233] RBP: 00007f1f5ea26180 R08: 0000000000000000 R09: 0000000000000000 [ 1226.520194][T17233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.520217][T17233] R13: 00007f1f5ea26218 R14: 00007ffe16faf870 R15: 00007ffe16faf958 [ 1226.520270][T17233] [ 1227.245304][T17242] loop4: detected capacity change from 0 to 8 [ 1227.260938][T17242] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1227.399618][T16796] udevd[16796]: incorrect cramfs checksum on /dev/loop4 [ 1227.560175][T16796] udevd[16796]: incorrect cramfs checksum on /dev/loop4 [ 1229.062416][T17237] loop3: detected capacity change from 0 to 32768 [ 1229.570801][T17248] loop1: detected capacity change from 0 to 32768 [ 1229.820018][T17248] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1229.932118][T17282] FAULT_INJECTION: forcing a failure. [ 1229.932118][T17282] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1229.932255][T17282] CPU: 0 UID: 0 PID: 17282 Comm: syz.4.3016 Tainted: G L syzkaller #0 PREEMPT(full) [ 1229.932315][T17282] Tainted: [L]=SOFTLOCKUP [ 1229.932331][T17282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1229.932355][T17282] Call Trace: [ 1229.932368][T17282] [ 1229.932383][T17282] dump_stack_lvl+0x100/0x190 [ 1229.932443][T17282] should_fail_ex.cold+0x5/0xa [ 1229.932495][T17282] get_futex_key+0x1d0/0x14f0 [ 1229.932550][T17282] ? __pfx_get_futex_key+0x10/0x10 [ 1229.932598][T17282] ? __pfx___schedule+0x10/0x10 [ 1229.932663][T17282] futex_wait_setup+0x91/0x540 [ 1229.932746][T17282] __futex_wait+0x19f/0x300 [ 1229.932811][T17282] ? __pfx___futex_wait+0x10/0x10 [ 1229.932869][T17282] ? __pfx_try_to_wake_up+0x10/0x10 [ 1229.932920][T17282] ? __pfx_futex_wake_mark+0x10/0x10 [ 1229.932987][T17282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1229.933036][T17282] ? preempt_schedule_common+0x3c/0xb0 [ 1229.933091][T17282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1229.933143][T17282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1229.933194][T17282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1229.933250][T17282] futex_wait+0xe6/0x370 [ 1229.933310][T17282] ? __pfx_futex_wait+0x10/0x10 [ 1229.933382][T17282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1229.933430][T17282] ? rcu_is_watching+0x13/0xc0 [ 1229.933480][T17282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1229.933527][T17282] ? trace_sched_exit_tp+0x120/0x160 [ 1229.933584][T17282] do_futex+0x265/0x440 [ 1229.933636][T17282] ? __pfx_do_futex+0x10/0x10 [ 1229.933682][T17282] ? __fget_files+0x215/0x3d0 [ 1229.933765][T17282] __x64_sys_futex+0x34f/0x4d0 [ 1229.933824][T17282] ? __pfx___x64_sys_futex+0x10/0x10 [ 1229.933884][T17282] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1229.933941][T17282] do_syscall_64+0x123/0x790 [ 1229.934005][T17282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.934046][T17282] RIP: 0033:0x7f039c59e159 [ 1229.934077][T17282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.934116][T17282] RSP: 002b:00007f039d5090e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1229.934154][T17282] RAX: ffffffffffffffda RBX: 00007f039c826188 RCX: 00007f039c59e159 [ 1229.934181][T17282] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f039c826188 [ 1229.934207][T17282] RBP: 00007f039c826180 R08: 0000000000000000 R09: 0000000000000000 [ 1229.934232][T17282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1229.934257][T17282] R13: 00007f039c826218 R14: 00007ffffc94a560 R15: 00007ffffc94a648 [ 1229.934309][T17282] [ 1230.452284][T14955] IPVS: starting estimator thread 0... [ 1230.554518][T17284] IPVS: using max 23 ests per chain, 55200 per kthread [ 1230.996501][T17298] loop3: detected capacity change from 0 to 128 [ 1231.042690][T16390] ocfs2: Unmounting device (7,1) on (node local) [ 1231.077408][T17298] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1231.422774][T16850] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1231.561736][T16663] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1231.572915][T16850] usb 5-1: Using ep0 maxpacket: 8 [ 1231.580554][T16850] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1231.596170][T16850] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1231.596240][T16850] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1231.596300][T16850] usb 5-1: config 0 has no interface number 0 [ 1231.596360][T16850] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1231.596413][T16850] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1231.596468][T16850] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1231.668980][T16850] usb 5-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1231.677474][T16850] usb 5-1: Product: syz [ 1231.677544][T16850] usb 5-1: Manufacturer: syz [ 1231.692306][T16850] usb 5-1: config 0 descriptor?? [ 1231.702032][T17305] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1231.995882][T17323] loop1: detected capacity change from 0 to 22 [ 1232.009571][T17323] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1232.132279][T17327] loop3: detected capacity change from 0 to 1024 [ 1232.228237][T17323] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1232.913454][T16850] usb 5-1: USB disconnect, device number 6 [ 1234.219588][T17340] loop1: detected capacity change from 0 to 8 [ 1234.503846][T17345] jffs2: notice: (17345) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 4 of xref (1 dead, 3 orphan) found. [ 1235.215957][ T7327] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1236.038121][ T7327] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 1236.051949][ T7327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1236.052201][ T7327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1236.372035][ T7327] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1236.385011][ T7327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.396867][ T7327] usb 4-1: config 0 descriptor?? [ 1236.936466][ T7327] thrustmaster 0003:044F:B324.0005: hidraw0: USB HID v0.00 Device [HID 044f:b324] on usb-dummy_hcd.3-1/input0 [ 1237.115846][ T7327] usb 4-1: USB disconnect, device number 7 [ 1237.416485][T17405] fido_id[17405]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1237.744428][ T31] audit: type=1326 audit(33969737.833:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17416 comm="syz.9.3063" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11059e159 code=0x7ffc0000 [ 1237.744537][ T31] audit: type=1326 audit(33969737.843:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17416 comm="syz.9.3063" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11059e159 code=0x7ffc0000 [ 1237.766301][ T31] audit: type=1326 audit(33969737.863:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17416 comm="syz.9.3063" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fa11059e159 code=0x7ffc0000 [ 1237.829200][ T31] audit: type=1326 audit(33969737.933:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17416 comm="syz.9.3063" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11059e159 code=0x7ffc0000 [ 1237.829299][ T31] audit: type=1326 audit(33969737.933:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17416 comm="syz.9.3063" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11059e159 code=0x7ffc0000 [ 1238.049137][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.056246][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.427616][T17442] loop1: detected capacity change from 0 to 128 [ 1239.550053][T17442] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1239.550148][T17442] hpfs: filesystem error: improperly stopped [ 1239.550188][T17442] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1239.550227][T17442] hpfs: You really don't want any checks? You are crazy... [ 1239.550255][T17442] hpfs: Code page index out of array [ 1239.550274][T17442] hpfs: code page support is disabled [ 1239.602727][T17442] hpfs: hpfs_map_4sectors(): unaligned read [ 1239.602856][T17442] hpfs: hpfs_map_4sectors(): unaligned read [ 1239.602898][T17442] hpfs: filesystem error: unable to find root dir [ 1239.861366][T17442] hpfs: hpfs_map_4sectors(): unaligned read [ 1241.825488][T17438] loop3: detected capacity change from 0 to 32768 [ 1246.616966][T17506] loop1: detected capacity change from 0 to 1024 [ 1246.624218][T17506] EXT4-fs: Ignoring removed bh option [ 1246.630911][T17506] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1246.691317][T17506] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #3: block 2: comm syz.1.3092: lblock 2 mapped to illegal pblock 2 (length 1) [ 1246.691406][T17506] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1246.692634][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1246.692664][ C0] EXT4-fs (loop1): initial error at time 33969746: ext4_map_blocks:790: inode 3: block 2 [ 1246.692723][ C0] EXT4-fs (loop1): last error at time 33969746: ext4_map_blocks:790: inode 3: block 2 [ 1246.706717][T17506] EXT4-fs (loop1): Remounting filesystem read-only [ 1246.706751][T17506] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1246.706870][T17506] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1246.706999][T17506] EXT4-fs (loop1): 1 orphan inode deleted [ 1246.710780][T17506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1246.722099][T17506] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.279751][T17519] loop1: detected capacity change from 0 to 136 [ 1247.714610][T17519] rock: directory entry would overflow storage [ 1247.714656][T17519] rock: sig=0x4f50, size=4, remaining=3 [ 1247.714681][T17519] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 1248.609881][T15540] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1248.958877][T15540] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1248.990179][T15540] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1248.990239][T15540] usb 5-1: config 0 has no interface number 0 [ 1249.020337][T15540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.020397][T15540] usb 5-1: Product: syz [ 1249.020443][T15540] usb 5-1: Manufacturer: syz [ 1249.020477][T15540] usb 5-1: SerialNumber: syz [ 1249.136642][T15540] usb 5-1: config 0 descriptor?? [ 1249.160916][T15540] usb 5-1: selecting invalid altsetting 1 [ 1249.266132][T15540] dvb_ttusb_budget: ttusb_init_controller: error [ 1249.266181][T15540] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1249.957467][T15540] DVB: Unable to find symbol stv0299_attach() [ 1250.549139][T15540] DVB: Unable to find symbol tda8083_attach() [ 1250.549178][T15540] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1250.728625][T15540] usb 5-1: USB disconnect, device number 7 [ 1250.897719][T17566] loop4: detected capacity change from 0 to 1024 [ 1252.586985][T17587] netlink: 'syz.3.3094': attribute type 7 has an invalid length. [ 1252.587043][T17587] netlink: 'syz.3.3094': attribute type 3 has an invalid length. [ 1252.587066][T17587] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3094'. [ 1252.647536][T17585] netlink: 'syz.4.3118': attribute type 7 has an invalid length. [ 1252.647597][T17585] netlink: 'syz.4.3118': attribute type 3 has an invalid length. [ 1252.647646][T17585] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3118'. [ 1253.908817][T17604] loop4: detected capacity change from 0 to 128 [ 1254.110228][T17604] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1254.221211][T17604] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 1254.351504][T16765] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1254.951112][T17623] loop4: detected capacity change from 0 to 4096 [ 1255.632509][T17633] netlink: 'syz.3.3134': attribute type 7 has an invalid length. [ 1255.646495][T17633] netlink: 'syz.3.3134': attribute type 3 has an invalid length. [ 1255.646626][T17633] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3134'. [ 1255.767499][T17623] ntfs3(loop4): Failed to load $Extend (-22). [ 1255.767571][T17623] ntfs3(loop4): Failed to initialize $Extend. [ 1256.221137][T17644] loop3: detected capacity change from 0 to 256 [ 1259.219491][T17651] loop4: detected capacity change from 0 to 4096 [ 1260.512721][T17670] loop3: detected capacity change from 0 to 4096 [ 1260.885705][T17670] ntfs3(loop3): ino=9, mi_enum_attr [ 1260.895058][T17670] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1261.128760][T17670] ntfs3(loop3): ino=9, mi_enum_attr [ 1261.135295][T17670] ntfs3(loop3): ino=b, mi_enum_attr [ 1261.151623][T17670] ntfs3(loop3): Failed to load $Extend (-22). [ 1261.158092][T17670] ntfs3(loop3): Failed to initialize $Extend. [ 1262.235372][T17690] loop1: detected capacity change from 0 to 512 [ 1262.266400][T17690] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1262.282449][T17690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 1262.286900][T17690] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1262.371666][T17690] EXT4-fs error (device loop1): ext4_validate_block_bitmap:444: comm syz.1.3150: bg 0: block 361: padding at end of block bitmap is not set [ 1262.371746][T17690] loop1: lost filesystem error report for type 5 error -117 [ 1262.373510][ C0] EXT4-fs (loop1): initial error at time 33969762: ext4_validate_block_bitmap:444 [ 1262.373573][ C0] EXT4-fs (loop1): last error at time 33969762: ext4_validate_block_bitmap:444 [ 1262.535416][T17690] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1262.535479][T17690] loop1: lost filesystem error report for type 5 error -117 [ 1262.561254][T17690] EXT4-fs error (device loop1): ext4_clear_blocks:874: inode #11: comm syz.1.3150: attempt to clear invalid blocks 33619980 len 1 [ 1262.561332][T17690] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1262.602189][T17703] loop4: detected capacity change from 0 to 2048 [ 1262.628453][T17690] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.3150: invalid indirect mapped block 1811939328 (level 0) [ 1262.628528][T17690] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1262.663710][T17690] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.3150: invalid indirect mapped block 2185560079 (level 1) [ 1262.690776][T17690] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1263.172710][T17690] EXT4-fs (loop1): 1 truncate cleaned up [ 1263.218336][T17690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1263.296163][T17711] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1263.448492][T16390] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1263.574271][T17715] loop3: detected capacity change from 0 to 64 [ 1264.020666][T17729] loop3: detected capacity change from 0 to 8 [ 1264.078664][T17723] loop1: detected capacity change from 0 to 4096 [ 1264.121692][T17729] SQUASHFS error: Unable to read directory block [629:fe] [ 1264.203774][T17732] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1265.731498][T17754] loop4: detected capacity change from 0 to 512 [ 1265.747179][T17754] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1265.757550][T17754] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 1265.969697][T17763] loop1: detected capacity change from 0 to 256 [ 1266.108954][T17763] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 1266.681927][T17782] loop3: detected capacity change from 0 to 2048 [ 1266.726532][T17782] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1266.810581][T17782] CacheFiles: Failed to register: -95 [ 1267.258971][T17795] loop3: detected capacity change from 0 to 512 [ 1267.303270][T17795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 1267.303489][T17795] System zones: 1-12 [ 1267.338776][T17795] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.3187: missing EA_INODE flag [ 1267.338854][T17795] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 1267.342576][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1267.342606][ C1] EXT4-fs (loop3): initial error at time 33969767: ext4_xattr_inode_iget:437: inode 12 [ 1267.343390][ C1] EXT4-fs (loop3): last error at time 33969767: ext4_xattr_inode_iget:437: inode 12 [ 1267.356392][T17795] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: comm syz.3.3187: error while reading EA inode 12 err=-117 [ 1267.356440][T17795] loop3: lost filesystem error report for type 5 error -117 [ 1267.424579][T17795] EXT4-fs (loop3): 1 orphan inode deleted [ 1267.442368][T17795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1267.826270][T17769] loop4: detected capacity change from 0 to 32768 [ 1268.475929][T17769] Bad stbl[5] index:0 (stblindex 9) in dtpage [ 1268.475929][T17769] [ 1268.475988][T17769] ERROR: (device loop4): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 1268.475988][T17769] [ 1268.539883][T17769] ERROR: (device loop4): remounting filesystem as read-only [ 1268.539918][T17769] jfs_readdir: unexpected rc = -5 from dtReadNext [ 1268.675778][T16663] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1268.858974][T17810] fuse: fd is not a fuse device [ 1268.936227][T17813] netlink: 'syz.1.3193': attribute type 7 has an invalid length. [ 1268.946619][T17813] netlink: 'syz.1.3193': attribute type 3 has an invalid length. [ 1268.954563][T17813] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3193'. [ 1269.265967][T17820] loop1: detected capacity change from 0 to 512 [ 1269.287179][T17820] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1269.367990][T17820] EXT4-fs (loop1): 1 truncate cleaned up [ 1269.391557][T17820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1271.656026][T16390] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.735981][T17846] loop1: detected capacity change from 0 to 128 [ 1271.929681][T17843] loop3: detected capacity change from 0 to 4096 [ 1273.141471][T17843] ntfs3(loop3): ino=9, attr_set_size_ex [ 1273.217948][T17859] loop1: detected capacity change from 0 to 4096 [ 1273.376768][T17866] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1273.949340][T17869] loop3: detected capacity change from 0 to 32768 [ 1273.967794][T17869] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1273.967849][T17869] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1274.044927][T17869] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 2ms [ 1274.064462][T16740] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1274.071403][T16740] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1274.387512][T16740] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 316ms [ 1274.449058][T16740] gfs2: fsid=syz:syz.0: jid=0: Done [ 1274.456311][T17869] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1277.135674][T17920] netlink: 'syz.1.3223': attribute type 7 has an invalid length. [ 1277.135731][T17920] netlink: 'syz.1.3223': attribute type 3 has an invalid length. [ 1277.135775][T17920] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3223'. [ 1279.486625][T17950] loop4: detected capacity change from 0 to 4096 [ 1279.829452][T17950] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1279.916799][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1279.980829][T17950] ntfs3(loop4): Failed to load $Extend (-22). [ 1279.980909][T17950] ntfs3(loop4): Failed to initialize $Extend. [ 1280.007782][T17962] loop3: detected capacity change from 0 to 512 [ 1281.715279][T17984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1282.967152][T17999] loop4: detected capacity change from 0 to 128 [ 1283.090169][T17999] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1283.131135][T17999] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1283.219632][T18003] FAULT_INJECTION: forcing a failure. [ 1283.219632][T18003] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.219764][T18003] CPU: 0 UID: 0 PID: 18003 Comm: syz.3.3247 Tainted: G L syzkaller #0 PREEMPT(full) [ 1283.219824][T18003] Tainted: [L]=SOFTLOCKUP [ 1283.219838][T18003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1283.219869][T18003] Call Trace: [ 1283.219881][T18003] [ 1283.219897][T18003] dump_stack_lvl+0x100/0x190 [ 1283.219956][T18003] should_fail_ex.cold+0x5/0xa [ 1283.220001][T18003] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1283.220058][T18003] should_failslab+0xc2/0x120 [ 1283.220126][T18003] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1283.220183][T18003] ? __pfx_map_id_range_down+0x10/0x10 [ 1283.220223][T18003] ? security_inode_alloc+0x3b/0x2c0 [ 1283.220285][T18003] security_inode_alloc+0x3b/0x2c0 [ 1283.220337][T18003] inode_init_always_gfp+0xc6f/0xfb0 [ 1283.220413][T18003] alloc_inode+0x8e/0x250 [ 1283.220466][T18003] sock_alloc+0x44/0x280 [ 1283.220519][T18003] ? security_socket_create+0x7f/0x250 [ 1283.220570][T18003] __sock_create+0xc2/0x860 [ 1283.220643][T18003] __sys_socket+0x14d/0x260 [ 1283.220683][T18003] ? __pfx___sys_socket+0x10/0x10 [ 1283.220737][T18003] __x64_sys_socket+0x72/0xb0 [ 1283.220773][T18003] ? lockdep_hardirqs_on+0x7d/0x110 [ 1283.220833][T18003] do_syscall_64+0x123/0x790 [ 1283.220901][T18003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.220943][T18003] RIP: 0033:0x7f1f5e79e159 [ 1283.220975][T18003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.221014][T18003] RSP: 002b:00007f1f5f649028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1283.221052][T18003] RAX: ffffffffffffffda RBX: 00007f1f5ea26180 RCX: 00007f1f5e79e159 [ 1283.221080][T18003] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 1283.221105][T18003] RBP: 00007f1f5e83503b R08: 0000000000000000 R09: 0000000000000000 [ 1283.221130][T18003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1283.221155][T18003] R13: 00007f1f5ea26218 R14: 00007f1f5ea26180 R15: 00007ffe16faf958 [ 1283.221208][T18003] [ 1283.221412][T18003] socket: no more sockets [ 1283.755298][T17999] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1284.110749][T16765] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1284.819263][ T7299] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1285.185127][ T7299] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1285.206877][ T7299] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1285.206939][ T7299] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1285.206994][ T7299] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1285.207066][ T7299] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1285.207122][ T7299] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1285.282494][ T7299] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1285.282627][ T7299] usb 5-1: Product: syz [ 1285.282674][ T7299] usb 5-1: Manufacturer: syz [ 1285.371904][ T7299] cdc_wdm 5-1:1.0: skipping garbage [ 1285.380304][ T7299] cdc_wdm 5-1:1.0: skipping garbage [ 1285.479650][ T7299] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1285.479705][ T7299] cdc_wdm 5-1:1.0: Unknown control protocol [ 1285.607757][T18021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.608340][T18021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.734570][T15540] usb 5-1: USB disconnect, device number 8 [ 1286.185014][T18010] syz.1.3250 (18010): drop_caches: 2 [ 1286.226579][T18014] Bluetooth: hci2: command 0x0406 tx timeout [ 1288.467803][T18080] FAULT_INJECTION: forcing a failure. [ 1288.467803][T18080] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1288.467894][T18080] CPU: 0 UID: 0 PID: 18080 Comm: syz.3.3271 Tainted: G L syzkaller #0 PREEMPT(full) [ 1288.467953][T18080] Tainted: [L]=SOFTLOCKUP [ 1288.467968][T18080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1288.467993][T18080] Call Trace: [ 1288.468005][T18080] [ 1288.468020][T18080] dump_stack_lvl+0x100/0x190 [ 1288.468080][T18080] should_fail_ex.cold+0x5/0xa [ 1288.468132][T18080] get_futex_key+0x1d0/0x14f0 [ 1288.468184][T18080] ? __pfx_get_futex_key+0x10/0x10 [ 1288.468229][T18080] ? find_held_lock+0x2b/0x80 [ 1288.468282][T18080] ? futex_wake+0x4ea/0x5e0 [ 1288.468341][T18080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1288.468399][T18080] futex_wake+0xf4/0x5e0 [ 1288.468454][T18080] ? futex_wait+0x11e/0x370 [ 1288.468519][T18080] ? __pfx_futex_wake+0x10/0x10 [ 1288.468584][T18080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1288.468632][T18080] ? rcu_read_lock_any_held+0x6a/0x90 [ 1288.468686][T18080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1288.468734][T18080] ? find_held_lock+0x2b/0x80 [ 1288.468797][T18080] do_futex+0x2b2/0x440 [ 1288.468849][T18080] ? __pfx_do_futex+0x10/0x10 [ 1288.468900][T18080] ? __fget_files+0x215/0x3d0 [ 1288.468979][T18080] __x64_sys_futex+0x34f/0x4d0 [ 1288.469036][T18080] ? __pfx___x64_sys_futex+0x10/0x10 [ 1288.469088][T18080] ? __sys_setsockopt+0x1b5/0x220 [ 1288.469144][T18080] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1288.469201][T18080] do_syscall_64+0x123/0x790 [ 1288.469266][T18080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.469308][T18080] RIP: 0033:0x7f1f5e79e159 [ 1288.469338][T18080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.469377][T18080] RSP: 002b:00007f1f5f6280e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1288.469415][T18080] RAX: ffffffffffffffda RBX: 00007f1f5ea26278 RCX: 00007f1f5e79e159 [ 1288.469444][T18080] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1f5ea2627c [ 1288.469470][T18080] RBP: 00007f1f5ea26270 R08: 0000000000000001 R09: 0000000000000000 [ 1288.469496][T18080] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1288.469521][T18080] R13: 00007f1f5ea26308 R14: 00007ffe16faf870 R15: 00007ffe16faf958 [ 1288.469573][T18080] [ 1288.971652][T18085] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3273'. [ 1289.604951][T18098] 9p: Bad value for 'rfdno' [ 1290.073220][T18108] FAULT_INJECTION: forcing a failure. [ 1290.073220][T18108] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.073327][T18108] CPU: 0 UID: 0 PID: 18108 Comm: syz.3.3281 Tainted: G L syzkaller #0 PREEMPT(full) [ 1290.073387][T18108] Tainted: [L]=SOFTLOCKUP [ 1290.073401][T18108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1290.073425][T18108] Call Trace: [ 1290.073438][T18108] [ 1290.073454][T18108] dump_stack_lvl+0x100/0x190 [ 1290.073512][T18108] should_fail_ex.cold+0x5/0xa [ 1290.073557][T18108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1290.073613][T18108] should_failslab+0xc2/0x120 [ 1290.073680][T18108] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1290.073740][T18108] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1290.073788][T18108] ? find_held_lock+0x2b/0x80 [ 1290.073840][T18108] ? sock_alloc_inode+0x26/0x2c0 [ 1290.073910][T18108] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1290.073973][T18108] sock_alloc_inode+0x26/0x2c0 [ 1290.074030][T18108] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1290.074088][T18108] alloc_inode+0x68/0x250 [ 1290.074141][T18108] sock_alloc+0x44/0x280 [ 1290.074192][T18108] ? security_socket_create+0x7f/0x250 [ 1290.074245][T18108] __sock_create+0xc2/0x860 [ 1290.074318][T18108] __sys_socket+0x14d/0x260 [ 1290.074358][T18108] ? __pfx___sys_socket+0x10/0x10 [ 1290.074411][T18108] __x64_sys_socket+0x72/0xb0 [ 1290.074448][T18108] ? lockdep_hardirqs_on+0x7d/0x110 [ 1290.074508][T18108] do_syscall_64+0x123/0x790 [ 1290.074572][T18108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.074613][T18108] RIP: 0033:0x7f1f5e79e159 [ 1290.074645][T18108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.074684][T18108] RSP: 002b:00007f1f5f628028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1290.074723][T18108] RAX: ffffffffffffffda RBX: 00007f1f5ea26270 RCX: 00007f1f5e79e159 [ 1290.074751][T18108] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 1290.074776][T18108] RBP: 00007f1f5e83503b R08: 0000000000000000 R09: 0000000000000000 [ 1290.074801][T18108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1290.074825][T18108] R13: 00007f1f5ea26308 R14: 00007f1f5ea26270 R15: 00007ffe16faf958 [ 1290.074882][T18108] [ 1290.074919][T18108] socket: no more sockets [ 1290.806375][T18087] loop4: detected capacity change from 0 to 32768 [ 1290.963421][T18087] JBD2: Ignoring recovery information on journal [ 1291.348524][T18087] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1292.295364][T16765] ocfs2: Unmounting device (7,4) on (node local) [ 1292.693604][T18148] overlayfs: failed to clone upperpath [ 1292.958051][T18154] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 1293.075589][T18156] FAULT_INJECTION: forcing a failure. [ 1293.075589][T18156] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.075721][T18156] CPU: 0 UID: 0 PID: 18156 Comm: syz.1.3295 Tainted: G L syzkaller #0 PREEMPT(full) [ 1293.075781][T18156] Tainted: [L]=SOFTLOCKUP [ 1293.075796][T18156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1293.075820][T18156] Call Trace: [ 1293.075834][T18156] [ 1293.075848][T18156] dump_stack_lvl+0x100/0x190 [ 1293.075913][T18156] should_fail_ex.cold+0x5/0xa [ 1293.075956][T18156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1293.076012][T18156] should_failslab+0xc2/0x120 [ 1293.076080][T18156] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1293.076137][T18156] ? __pfx_map_id_range_down+0x10/0x10 [ 1293.076175][T18156] ? rcu_is_watching+0x13/0xc0 [ 1293.076225][T18156] ? security_inode_alloc+0x3b/0x2c0 [ 1293.076285][T18156] security_inode_alloc+0x3b/0x2c0 [ 1293.076339][T18156] inode_init_always_gfp+0xc6f/0xfb0 [ 1293.076415][T18156] alloc_inode+0x8e/0x250 [ 1293.076468][T18156] sock_alloc+0x44/0x280 [ 1293.076520][T18156] ? security_socket_create+0x7f/0x250 [ 1293.076571][T18156] __sock_create+0xc2/0x860 [ 1293.076645][T18156] __sys_socket+0x14d/0x260 [ 1293.076685][T18156] ? __pfx___sys_socket+0x10/0x10 [ 1293.076738][T18156] __x64_sys_socket+0x72/0xb0 [ 1293.076775][T18156] ? lockdep_hardirqs_on+0x7d/0x110 [ 1293.076835][T18156] do_syscall_64+0x123/0x790 [ 1293.076903][T18156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.076945][T18156] RIP: 0033:0x7f1c3a99e159 [ 1293.076977][T18156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.077017][T18156] RSP: 002b:00007f1c3b7c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1293.077055][T18156] RAX: ffffffffffffffda RBX: 00007f1c3ac26180 RCX: 00007f1c3a99e159 [ 1293.077083][T18156] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 1293.077107][T18156] RBP: 00007f1c3aa3503b R08: 0000000000000000 R09: 0000000000000000 [ 1293.077133][T18156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1293.077158][T18156] R13: 00007f1c3ac26218 R14: 00007f1c3ac26180 R15: 00007ffd27a24888 [ 1293.077210][T18156] [ 1293.077403][T18156] socket: no more sockets [ 1294.987680][T18165] loop4: detected capacity change from 0 to 131072 [ 1295.007312][T18165] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 1295.007373][T18165] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1295.030673][T18165] F2FS-fs (loop4): invalid crc value [ 1295.132832][T18165] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1295.149212][T18165] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1295.149266][T18165] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1296.859446][T18196] netlink: 'syz.1.3312': attribute type 7 has an invalid length. [ 1296.859499][T18196] netlink: 'syz.1.3312': attribute type 3 has an invalid length. [ 1296.859543][T18196] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3312'. [ 1297.668386][T18208] FAULT_INJECTION: forcing a failure. [ 1297.668386][T18208] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.668532][T18208] CPU: 1 UID: 0 PID: 18208 Comm: syz.1.3315 Tainted: G L syzkaller #0 PREEMPT(full) [ 1297.668592][T18208] Tainted: [L]=SOFTLOCKUP [ 1297.668607][T18208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1297.668631][T18208] Call Trace: [ 1297.668644][T18208] [ 1297.668658][T18208] dump_stack_lvl+0x100/0x190 [ 1297.668717][T18208] should_fail_ex.cold+0x5/0xa [ 1297.668761][T18208] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1297.668815][T18208] should_failslab+0xc2/0x120 [ 1297.668883][T18208] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1297.668940][T18208] ? __pfx_map_id_range_down+0x10/0x10 [ 1297.668977][T18208] ? rcu_is_watching+0x13/0xc0 [ 1297.669025][T18208] ? security_inode_alloc+0x3b/0x2c0 [ 1297.669085][T18208] security_inode_alloc+0x3b/0x2c0 [ 1297.669137][T18208] inode_init_always_gfp+0xc6f/0xfb0 [ 1297.669211][T18208] alloc_inode+0x8e/0x250 [ 1297.669263][T18208] sock_alloc+0x44/0x280 [ 1297.669315][T18208] ? security_socket_create+0x7f/0x250 [ 1297.669366][T18208] __sock_create+0xc2/0x860 [ 1297.669443][T18208] __sys_socket+0x14d/0x260 [ 1297.669482][T18208] ? __pfx___sys_socket+0x10/0x10 [ 1297.669535][T18208] __x64_sys_socket+0x72/0xb0 [ 1297.669572][T18208] ? lockdep_hardirqs_on+0x7d/0x110 [ 1297.669631][T18208] do_syscall_64+0x123/0x790 [ 1297.669694][T18208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.669734][T18208] RIP: 0033:0x7f1c3a99e159 [ 1297.669764][T18208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.669803][T18208] RSP: 002b:00007f1c3b7c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1297.669841][T18208] RAX: ffffffffffffffda RBX: 00007f1c3ac26180 RCX: 00007f1c3a99e159 [ 1297.669868][T18208] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 1297.669892][T18208] RBP: 00007f1c3aa3503b R08: 0000000000000000 R09: 0000000000000000 [ 1297.669918][T18208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1297.669942][T18208] R13: 00007f1c3ac26218 R14: 00007f1c3ac26180 R15: 00007ffd27a24888 [ 1297.669994][T18208] [ 1297.670216][T18208] socket: no more sockets [ 1298.313927][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1299.486442][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.486741][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.356985][T18242] syzkaller1: entered promiscuous mode [ 1300.363903][T18242] syzkaller1: entered allmulticast mode [ 1300.559238][T18251] netlink: 'syz.1.3327': attribute type 7 has an invalid length. [ 1300.559294][T18251] netlink: 'syz.1.3327': attribute type 3 has an invalid length. [ 1300.559317][T18251] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3327'. [ 1300.797816][T18253] input: syz0 as /devices/virtual/input/input14 [ 1300.859061][T18259] fuse: fd is not a fuse device [ 1301.198397][T18271] device-mapper: ioctl: Unable to rename non-existent device, to  [ 1302.205294][T18281] loop4: detected capacity change from 0 to 1024 [ 1302.206513][T18281] EXT4-fs: Ignoring removed oldalloc option [ 1302.211713][T18281] EXT4-fs: Ignoring removed oldalloc option [ 1302.270530][T18281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1302.392665][T15540] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1302.412703][ T7304] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1302.531615][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1302.543589][T15540] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1302.557654][T15540] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.557742][T15540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.579772][ T7304] usb 4-1: Using ep0 maxpacket: 32 [ 1302.585967][ T7304] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1302.622041][ T7304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.622103][ T7304] usb 4-1: Product: syz [ 1302.622203][ T7304] usb 4-1: Manufacturer: syz [ 1302.622237][ T7304] usb 4-1: SerialNumber: syz [ 1302.705418][T15540] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 1302.752512][T15540] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1302.753905][T15540] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1302.934804][ T7304] usb 4-1: config 0 descriptor?? [ 1303.211104][T15540] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1303.222712][T15540] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1303.255369][ T7304] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1303.268790][ T7304] dvb-usb: bulk message failed: -22 (4/0) [ 1303.281714][T15540] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1303.306433][ T7304] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1303.306616][ T7304] dvb-usb: bulk message failed: -22 (5/0) [ 1303.306646][ T7304] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1303.339666][T15540] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 1303.339767][T15540] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1303.432364][T15540] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1303.452303][ T7304] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1303.511423][T15540] usb 2-1: USB disconnect, device number 4 [ 1303.523943][ T7304] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1303.535002][ T7304] usb 4-1: media controller created [ 1303.554573][T16765] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.608477][T15540] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1303.627771][T15540] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1303.643188][ T7304] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1303.657302][T15540] keyspan 2-1:1.0: device disconnected [ 1303.712074][ T7304] usb 4-1: selecting invalid altsetting 3 [ 1303.719645][ T7304] ttusb2: set interface to alts=3 failed [ 1304.081362][ T7304] DVB: Unable to find symbol tda10086_attach() [ 1304.088862][ T7304] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1304.102809][ T7304] dvb-usb: bulk message failed: -22 (4/0) [ 1304.111713][ T7304] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1304.111881][ T7304] dvb-usb: bulk message failed: -22 (5/0) [ 1304.135102][ T7304] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1304.135194][ T7304] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1304.201329][ T7304] usb 4-1: USB disconnect, device number 8 [ 1304.312680][T15540] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1304.325953][ T7304] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1304.475283][T15540] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1304.490817][T15540] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.490877][T15540] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1304.516413][T18316] fuse: fd is not a fuse device [ 1304.522075][T15540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1304.522820][T15540] usb 5-1: SerialNumber: syz [ 1304.784825][T15540] usb 5-1: 0:2 : does not exist [ 1304.791624][T15540] usb 5-1: unit 3 not found! [ 1304.894594][ T7327] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1304.942072][T15540] usb 5-1: USB disconnect, device number 9 [ 1304.961405][T18324] 9p: Bad value for 'rfdno' [ 1305.027217][T18314] udevd[18314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1305.074428][ T7327] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1305.085914][ T7327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.232750][ T7327] usb 2-1: NFC: NXP PN500 firmware ver 0.0 now attached [ 1306.308926][ C0] usb 2-1: NFC: Urb failure (status -71) [ 1306.408664][ T7327] usb 2-1: NFC: Error on setting MAX_RETRIES config [ 1306.409526][ T7327] pn533_usb 2-1:1.0: probe with driver pn533_usb failed with error -71 [ 1306.693531][T10541] Bluetooth: hci0: command 0x0406 tx timeout [ 1306.695212][ T7327] usb 2-1: USB disconnect, device number 5 [ 1307.687492][ T31] audit: type=1326 audit(33969807.793:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.1.3357" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a99e159 code=0x7ffc0000 [ 1307.713016][ T31] audit: type=1326 audit(33969807.793:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.1.3357" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a99e159 code=0x7ffc0000 [ 1307.713131][ T31] audit: type=1326 audit(33969807.793:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.1.3357" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1c3a99e159 code=0x7ffc0000 [ 1307.713215][ T31] audit: type=1326 audit(33969807.793:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.1.3357" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a99e159 code=0x7ffc0000 [ 1307.713296][ T31] audit: type=1326 audit(33969807.793:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.1.3357" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a99e159 code=0x7ffc0000 [ 1307.713382][ T31] audit: type=1326 audit(33969807.793:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.1.3357" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1c3a99e159 code=0x7ffc0000 [ 1307.713472][ T31] audit: type=1326 audit(33969807.793:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.1.3357" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a99e159 code=0x7ffc0000 [ 1307.713555][ T31] audit: type=1326 audit(33969807.793:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18346 comm="syz.1.3357" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3a99e159 code=0x7ffc0000 [ 1307.771417][ T5271] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1308.045409][T18352] netlink: 'syz.4.3360': attribute type 7 has an invalid length. [ 1308.045480][T18352] netlink: 'syz.4.3360': attribute type 3 has an invalid length. [ 1308.045526][T18352] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3360'. [ 1308.092318][T18356] FAULT_INJECTION: forcing a failure. [ 1308.092318][T18356] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.105686][T18356] CPU: 1 UID: 0 PID: 18356 Comm: syz.1.3361 Tainted: G L syzkaller #0 PREEMPT(full) [ 1308.105751][T18356] Tainted: [L]=SOFTLOCKUP [ 1308.105766][T18356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1308.105790][T18356] Call Trace: [ 1308.105803][T18356] [ 1308.105822][T18356] dump_stack_lvl+0x100/0x190 [ 1308.105881][T18356] should_fail_ex.cold+0x5/0xa [ 1308.105942][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.105998][T18356] should_failslab+0xc2/0x120 [ 1308.106063][T18356] __kvmalloc_node_noprof+0x113/0x9b0 [ 1308.106121][T18356] ? lockdep_hardirqs_on+0x7d/0x110 [ 1308.106178][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.106229][T18356] ? bpf_compute_postorder+0x87/0x860 [ 1308.106289][T18356] bpf_compute_postorder+0x87/0x860 [ 1308.106339][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.106387][T18356] ? bpf_check_cfg+0x4a3/0x990 [ 1308.106448][T18356] bpf_check+0x7b5d/0xa980 [ 1308.106490][T18356] ? __css_rstat_updated+0x1ce/0x590 [ 1308.106536][T18356] ? __lock_acquire+0x5c0/0x1f40 [ 1308.106574][T18356] ? __pfx___css_rstat_updated+0x10/0x10 [ 1308.106650][T18356] ? __pfx_bpf_check+0x10/0x10 [ 1308.106690][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.106738][T18356] ? lock_acquire+0x1d1/0x380 [ 1308.106774][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.106822][T18356] ? find_held_lock+0x2b/0x80 [ 1308.106872][T18356] ? bpf_prog_load+0x1a09/0x2a80 [ 1308.106920][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.106972][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.107019][T18356] ? __asan_memset+0x23/0x50 [ 1308.107071][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.107127][T18356] ? bpf_prog_load+0x1ac3/0x2a80 [ 1308.107165][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.107213][T18356] bpf_prog_load+0x1ac3/0x2a80 [ 1308.107265][T18356] ? __pfx_bpf_prog_load+0x10/0x10 [ 1308.107303][T18356] ? lock_acquire+0x1d1/0x380 [ 1308.107344][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.107426][T18356] __sys_bpf+0x1f46/0x4a30 [ 1308.107491][T18356] ? __pfx___sys_bpf+0x10/0x10 [ 1308.107541][T18356] ? find_held_lock+0x2b/0x80 [ 1308.107591][T18356] ? futex_wake+0x4ea/0x5e0 [ 1308.107649][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.107698][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.107773][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.107819][T18356] ? rcu_read_lock_any_held+0x6a/0x90 [ 1308.107873][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.107926][T18356] ? find_held_lock+0x2b/0x80 [ 1308.107976][T18356] ? ksys_write+0x190/0x250 [ 1308.108029][T18356] ? ksys_write+0x190/0x250 [ 1308.108087][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.108158][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.108205][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.108253][T18356] ? __x64_sys_futex+0x358/0x4d0 [ 1308.108303][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.108353][T18356] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1308.108401][T18356] ? xfd_validate_state+0x129/0x190 [ 1308.108470][T18356] ? __x64_sys_bpf+0xce/0x140 [ 1308.108522][T18356] __x64_sys_bpf+0xce/0x140 [ 1308.108578][T18356] ? do_syscall_64+0xae/0x790 [ 1308.108639][T18356] do_syscall_64+0x123/0x790 [ 1308.108700][T18356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.108740][T18356] RIP: 0033:0x7f1c3a99e159 [ 1308.108772][T18356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1308.108810][T18356] RSP: 002b:00007f1c3b802028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1308.108849][T18356] RAX: ffffffffffffffda RBX: 00007f1c3ac25fa0 RCX: 00007f1c3a99e159 [ 1308.108876][T18356] RDX: 0000000000000023 RSI: 000020000000e000 RDI: 0000000000000005 [ 1308.108901][T18356] RBP: 00007f1c3aa3503b R08: 0000000000000000 R09: 0000000000000000 [ 1308.108931][T18356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1308.108956][T18356] R13: 00007f1c3ac26038 R14: 00007f1c3ac25fa0 R15: 00007ffd27a24888 [ 1308.109008][T18356] [ 1308.916225][ T31] audit: type=1326 audit(33969809.023:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.8.3369" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4da479e159 code=0x0 [ 1308.942223][ T7304] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1309.093552][ T7304] usb 5-1: Using ep0 maxpacket: 16 [ 1309.099622][ T7304] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1309.116656][ T7304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1309.129746][ T7304] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1309.129863][ T7304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.157241][ T7304] usb 5-1: config 0 descriptor?? [ 1309.442662][ T7327] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1309.538492][T18393] FAULT_INJECTION: forcing a failure. [ 1309.538492][T18393] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.538659][T18393] CPU: 1 UID: 0 PID: 18393 Comm: syz.1.3371 Tainted: G L syzkaller #0 PREEMPT(full) [ 1309.538722][T18393] Tainted: [L]=SOFTLOCKUP [ 1309.538737][T18393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1309.538761][T18393] Call Trace: [ 1309.538774][T18393] [ 1309.538788][T18393] dump_stack_lvl+0x100/0x190 [ 1309.538847][T18393] should_fail_ex.cold+0x5/0xa [ 1309.538891][T18393] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1309.538952][T18393] should_failslab+0xc2/0x120 [ 1309.539019][T18393] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1309.539076][T18393] ? __pfx_map_id_range_down+0x10/0x10 [ 1309.539115][T18393] ? rcu_is_watching+0x13/0xc0 [ 1309.539164][T18393] ? security_inode_alloc+0x3b/0x2c0 [ 1309.539225][T18393] security_inode_alloc+0x3b/0x2c0 [ 1309.539278][T18393] inode_init_always_gfp+0xc6f/0xfb0 [ 1309.539353][T18393] alloc_inode+0x8e/0x250 [ 1309.539406][T18393] sock_alloc+0x44/0x280 [ 1309.539459][T18393] ? security_socket_create+0x7f/0x250 [ 1309.539509][T18393] __sock_create+0xc2/0x860 [ 1309.539583][T18393] __sys_socket+0x14d/0x260 [ 1309.539622][T18393] ? __pfx___sys_socket+0x10/0x10 [ 1309.539675][T18393] __x64_sys_socket+0x72/0xb0 [ 1309.539712][T18393] ? lockdep_hardirqs_on+0x7d/0x110 [ 1309.539772][T18393] do_syscall_64+0x123/0x790 [ 1309.539836][T18393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.539878][T18393] RIP: 0033:0x7f1c3a99e159 [ 1309.539909][T18393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1309.539954][T18393] RSP: 002b:00007f1c3b7c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1309.539993][T18393] RAX: ffffffffffffffda RBX: 00007f1c3ac26180 RCX: 00007f1c3a99e159 [ 1309.540020][T18393] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 1309.540045][T18393] RBP: 00007f1c3aa3503b R08: 0000000000000000 R09: 0000000000000000 [ 1309.540070][T18393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1309.540095][T18393] R13: 00007f1c3ac26218 R14: 00007f1c3ac26180 R15: 00007ffd27a24888 [ 1309.540147][T18393] [ 1309.540424][T18393] socket: no more sockets [ 1310.181875][ T7327] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1310.184848][ T7327] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.184931][ T7327] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1310.184981][ T7327] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1310.185020][ T7327] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1310.185082][ T7327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.270818][ T7304] HID 045e:07da: Invalid code 65791 type 1 [ 1310.325139][ T7304] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input15 [ 1310.400924][ T7304] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1311.457762][ T7328] usb 5-1: USB disconnect, device number 10 [ 1311.572633][ T7304] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1311.736372][ T7304] usb 2-1: Using ep0 maxpacket: 8 [ 1311.738269][T18408] fido_id[18408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1311.761693][ T7304] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1311.778861][ T7304] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1311.778956][ T7304] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1311.779019][ T7304] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1311.779072][ T7304] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1311.779123][ T7304] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1311.779197][ T7304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.879311][T18421] raw_sendmsg: syz.8.3381 forgot to set AF_INET. Fix it! [ 1312.093558][ T7327] [drm] Initialized gud 1.0.0 for 4-1:1.0 on minor 1 [ 1312.129591][T18426] fuse: fd is not a fuse device [ 1312.263265][ T7304] usb 2-1: usb_control_msg returned -32 [ 1312.263346][ T7304] usbtmc 2-1:16.0: can't read capabilities [ 1313.454225][T18443] overlayfs: failed to resolve './file0': -2 [ 1313.786870][T18448] FAULT_INJECTION: forcing a failure. [ 1313.786870][T18448] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.787003][T18448] CPU: 0 UID: 0 PID: 18448 Comm: syz.3.3388 Tainted: G L syzkaller #0 PREEMPT(full) [ 1313.787063][T18448] Tainted: [L]=SOFTLOCKUP [ 1313.787078][T18448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1313.787102][T18448] Call Trace: [ 1313.787116][T18448] [ 1313.787130][T18448] dump_stack_lvl+0x100/0x190 [ 1313.787189][T18448] should_fail_ex.cold+0x5/0xa [ 1313.787233][T18448] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1313.787289][T18448] should_failslab+0xc2/0x120 [ 1313.787355][T18448] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1313.787412][T18448] ? __pfx_map_id_range_down+0x10/0x10 [ 1313.787455][T18448] ? rcu_is_watching+0x13/0xc0 [ 1313.787504][T18448] ? security_inode_alloc+0x3b/0x2c0 [ 1313.787564][T18448] security_inode_alloc+0x3b/0x2c0 [ 1313.787616][T18448] inode_init_always_gfp+0xc6f/0xfb0 [ 1313.787691][T18448] alloc_inode+0x8e/0x250 [ 1313.787744][T18448] sock_alloc+0x44/0x280 [ 1313.787796][T18448] ? security_socket_create+0x7f/0x250 [ 1313.787846][T18448] __sock_create+0xc2/0x860 [ 1313.787919][T18448] __sys_socket+0x14d/0x260 [ 1313.787958][T18448] ? __pfx___sys_socket+0x10/0x10 [ 1313.788011][T18448] __x64_sys_socket+0x72/0xb0 [ 1313.788047][T18448] ? lockdep_hardirqs_on+0x7d/0x110 [ 1313.788106][T18448] do_syscall_64+0x123/0x790 [ 1313.788170][T18448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.788212][T18448] RIP: 0033:0x7f1f5e79e159 [ 1313.788243][T18448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.788281][T18448] RSP: 002b:00007f1f5f649028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1313.788320][T18448] RAX: ffffffffffffffda RBX: 00007f1f5ea26180 RCX: 00007f1f5e79e159 [ 1313.788346][T18448] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 1313.788371][T18448] RBP: 00007f1f5e83503b R08: 0000000000000000 R09: 0000000000000000 [ 1313.788396][T18448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1313.788425][T18448] R13: 00007f1f5ea26218 R14: 00007f1f5ea26180 R15: 00007ffe16faf958 [ 1313.788477][T18448] [ 1313.788696][T18448] socket: no more sockets [ 1314.747439][ T7327] ================================================================== [ 1314.747467][ T7327] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0x94e/0xc60 [ 1314.747535][ T7327] Read of size 256 at addr ffff888037150760 by task kworker/0:16/7327 [ 1314.747567][ T7327] [ 1314.747588][ T7327] CPU: 0 UID: 0 PID: 7327 Comm: kworker/0:16 Tainted: G L syzkaller #0 PREEMPT(full) [ 1314.747644][ T7327] Tainted: [L]=SOFTLOCKUP [ 1314.747658][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1314.747685][ T7327] Workqueue: usb_hub_wq hub_event [ 1314.747742][ T7327] Call Trace: [ 1314.747755][ T7327] [ 1314.747769][ T7327] dump_stack_lvl+0x100/0x190 [ 1314.747823][ T7327] print_report+0x13d/0x4b0 [ 1314.747882][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.747930][ T7327] ? __virt_addr_valid+0x239/0x430 [ 1314.747995][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1314.748053][ T7327] kasan_report+0xdf/0x1c0 [ 1314.748096][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1314.748155][ T7327] kasan_check_range+0x10f/0x1e0 [ 1314.748196][ T7327] __asan_memcpy+0x23/0x60 [ 1314.748245][ T7327] fbcon_prepare_logo+0x94e/0xc60 [ 1314.748308][ T7327] fbcon_init+0x1065/0x1830 [ 1314.748362][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.748409][ T7327] visual_init+0x320/0x620 [ 1314.748473][ T7327] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1314.748522][ T7327] do_take_over_console+0x501/0x5d0 [ 1314.748567][ T7327] do_fbcon_takeover+0xe9/0x210 [ 1314.748617][ T7327] fbcon_fb_registered+0x364/0x4b0 [ 1314.748675][ T7327] do_register_framebuffer+0x503/0x870 [ 1314.748729][ T7327] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1314.748791][ T7327] ? find_held_lock+0x2b/0x80 [ 1314.748843][ T7327] register_framebuffer+0x23/0x40 [ 1314.748894][ T7327] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1314.748963][ T7327] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1314.749023][ T7327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1314.749086][ T7327] drm_fb_helper_initial_config+0x44/0x60 [ 1314.749138][ T7327] drm_fbdev_client_hotplug+0x19e/0x220 [ 1314.749185][ T7327] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1314.749231][ T7327] drm_client_register+0x197/0x280 [ 1314.749284][ T7327] drm_fbdev_client_setup+0x155/0x480 [ 1314.749331][ T7327] drm_client_setup+0x160/0x1a0 [ 1314.749375][ T7327] gud_probe+0x186c/0x1c60 [ 1314.749434][ T7327] ? __pfx_gud_probe+0x10/0x10 [ 1314.749480][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.749524][ T7327] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1314.749574][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1314.749622][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.749665][ T7327] ? __pm_runtime_set_status+0x13c/0x970 [ 1314.749721][ T7327] usb_probe_interface+0x386/0x9b0 [ 1314.749784][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1314.749842][ T7327] ? kernfs_put+0x3f/0x60 [ 1314.749885][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.749929][ T7327] ? sysfs_create_link+0x68/0xc0 [ 1314.749966][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1314.750027][ T7327] really_probe+0x241/0xa60 [ 1314.750073][ T7327] __driver_probe_device+0x210/0x460 [ 1314.750117][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.750164][ T7327] driver_probe_device+0x4a/0x140 [ 1314.750209][ T7327] __device_attach_driver+0x1df/0x320 [ 1314.750256][ T7327] ? __pfx___device_attach_driver+0x10/0x10 [ 1314.750302][ T7327] bus_for_each_drv+0x159/0x1e0 [ 1314.750336][ T7327] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1314.750371][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.750414][ T7327] ? lockdep_hardirqs_on+0x7d/0x110 [ 1314.750469][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.750512][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1314.750563][ T7327] __device_attach+0x1e4/0x4d0 [ 1314.750609][ T7327] ? __pfx___device_attach+0x10/0x10 [ 1314.750654][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.750697][ T7327] ? do_raw_spin_unlock+0x145/0x1e0 [ 1314.750739][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.750787][ T7327] device_initial_probe+0xaf/0xd0 [ 1314.750834][ T7327] bus_probe_device+0x64/0x160 [ 1314.750873][ T7327] device_add+0x121d/0x1970 [ 1314.750927][ T7327] ? __pfx_device_add+0x10/0x10 [ 1314.750977][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.751020][ T7327] ? mark_held_locks+0x40/0x70 [ 1314.751078][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.751122][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.751172][ T7327] usb_set_configuration+0xd97/0x1c60 [ 1314.751239][ T7327] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1314.751284][ T7327] usb_generic_driver_probe+0xa1/0xe0 [ 1314.751329][ T7327] usb_probe_device+0xef/0x400 [ 1314.751381][ T7327] ? __pfx_usb_probe_device+0x10/0x10 [ 1314.751439][ T7327] really_probe+0x241/0xa60 [ 1314.751484][ T7327] __driver_probe_device+0x210/0x460 [ 1314.751526][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.751573][ T7327] driver_probe_device+0x4a/0x140 [ 1314.751617][ T7327] __device_attach_driver+0x1df/0x320 [ 1314.751664][ T7327] ? __pfx___device_attach_driver+0x10/0x10 [ 1314.751709][ T7327] bus_for_each_drv+0x159/0x1e0 [ 1314.751743][ T7327] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1314.751777][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.751821][ T7327] ? lockdep_hardirqs_on+0x7d/0x110 [ 1314.751870][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.751913][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1314.751964][ T7327] __device_attach+0x1e4/0x4d0 [ 1314.752008][ T7327] ? __pfx___device_attach+0x10/0x10 [ 1314.752053][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.752096][ T7327] ? do_raw_spin_unlock+0x145/0x1e0 [ 1314.752136][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.752183][ T7327] device_initial_probe+0xaf/0xd0 [ 1314.752230][ T7327] bus_probe_device+0x64/0x160 [ 1314.752269][ T7327] device_add+0x121d/0x1970 [ 1314.752321][ T7327] ? __pfx_device_add+0x10/0x10 [ 1314.752370][ T7327] ? usb_detect_static_quirks+0x335/0x3e0 [ 1314.752421][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.752469][ T7327] usb_new_device.part.0+0xcc2/0x1686 [ 1314.752524][ T7327] ? do_raw_spin_lock+0x128/0x260 [ 1314.752570][ T7327] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1314.752627][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.752673][ T7327] ? mark_held_locks+0x40/0x70 [ 1314.752735][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.752786][ T7327] hub_event.cold+0x1e3/0xe90 [ 1314.752866][ T7327] ? __pfx_hub_event+0x10/0x10 [ 1314.752922][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.752971][ T7327] ? mark_lock+0xe60/0x1020 [ 1314.753035][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.753083][ T7327] ? lock_acquire+0x1d1/0x380 [ 1314.753118][ T7327] ? process_one_work+0xa2c/0x1b10 [ 1314.753174][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.753223][ T7327] ? process_one_work+0x906/0x1b10 [ 1314.753279][ T7327] ? process_one_work+0x906/0x1b10 [ 1314.753333][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.753386][ T7327] process_one_work+0xac7/0x1b10 [ 1314.753458][ T7327] ? __pfx_process_one_work+0x10/0x10 [ 1314.753516][ T7327] ? lock_acquire+0x1d1/0x380 [ 1314.753558][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.753610][ T7327] worker_thread+0x5ef/0xe50 [ 1314.753676][ T7327] ? kthread+0x13a/0x450 [ 1314.753725][ T7327] ? __pfx_worker_thread+0x10/0x10 [ 1314.753779][ T7327] kthread+0x373/0x450 [ 1314.753828][ T7327] ? __pfx_kthread+0x10/0x10 [ 1314.753879][ T7327] ret_from_fork+0x730/0xd60 [ 1314.753918][ T7327] ? __pfx_ret_from_fork+0x10/0x10 [ 1314.753956][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.754003][ T7327] ? rcu_is_watching+0x13/0xc0 [ 1314.754050][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1314.754098][ T7327] ? __switch_to+0x800/0x10f0 [ 1314.754147][ T7327] ? __switch_to_asm+0x39/0x70 [ 1314.754184][ T7327] ? __pfx_kthread+0x10/0x10 [ 1314.754236][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1314.754286][ T7327] [ 1314.754300][ T7327] [ 1314.754308][ T7327] Allocated by task 14955: [ 1314.754326][ T7327] kasan_save_stack+0x30/0x50 [ 1314.754382][ T7327] kasan_save_track+0x14/0x30 [ 1314.754442][ T7327] __kasan_kmalloc+0xaa/0xb0 [ 1314.754495][ T7327] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 1314.754552][ T7327] kmalloc_reserve+0xe8/0x350 [ 1314.754610][ T7327] __alloc_skb+0x185/0x710 [ 1314.754651][ T7327] nsim_dev_trap_report_work+0x2af/0xd20 [ 1314.754705][ T7327] process_one_work+0xac7/0x1b10 [ 1314.754757][ T7327] worker_thread+0x5ef/0xe50 [ 1314.754808][ T7327] kthread+0x373/0x450 [ 1314.754852][ T7327] ret_from_fork+0x730/0xd60 [ 1314.754886][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1314.754918][ T7327] [ 1314.754926][ T7327] Freed by task 14955: [ 1314.754942][ T7327] kasan_save_stack+0x30/0x50 [ 1314.754996][ T7327] kasan_save_track+0x14/0x30 [ 1314.755050][ T7327] kasan_save_free_info+0x3b/0x70 [ 1314.755094][ T7327] __kasan_slab_free+0x5f/0x80 [ 1314.755151][ T7327] kfree+0x22b/0x6d0 [ 1314.755190][ T7327] skb_free_head+0xb9/0x160 [ 1314.755226][ T7327] skb_release_data+0x6c5/0x8e0 [ 1314.755271][ T7327] consume_skb+0xc4/0x110 [ 1314.755319][ T7327] nsim_dev_trap_report_work+0x8de/0xd20 [ 1314.755372][ T7327] process_one_work+0xac7/0x1b10 [ 1314.755428][ T7327] worker_thread+0x5ef/0xe50 [ 1314.755480][ T7327] kthread+0x373/0x450 [ 1314.755523][ T7327] ret_from_fork+0x730/0xd60 [ 1314.755556][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1314.755588][ T7327] [ 1314.755596][ T7327] The buggy address belongs to the object at ffff888037150000 [ 1314.755596][ T7327] which belongs to the cache kmalloc-4k of size 4096 [ 1314.755626][ T7327] The buggy address is located 1888 bytes inside of [ 1314.755626][ T7327] freed 4096-byte region [ffff888037150000, ffff888037151000) [ 1314.755665][ T7327] [ 1314.755674][ T7327] The buggy address belongs to the physical page: [ 1314.755689][ T7327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37150 [ 1314.755721][ T7327] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1314.755752][ T7327] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1314.755786][ T7327] page_type: f5(slab) [ 1314.755816][ T7327] raw: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1314.755852][ T7327] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1314.755888][ T7327] head: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1314.755924][ T7327] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1314.755961][ T7327] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1314.755996][ T7327] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1314.756020][ T7327] page dumped because: kasan: bad access detected [ 1314.756037][ T7327] page_owner tracks the page as allocated [ 1314.756050][ T7327] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6520, tgid 6520 (kworker/u8:19), ts 740646061328 [ 1314.756113][ T7327] post_alloc_hook+0xfd/0x120 [ 1314.756154][ T7327] get_page_from_freelist+0x110d/0x35d0 [ 1314.756201][ T7327] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1314.756249][ T7327] new_slab+0xa9/0x6e0 [ 1314.756291][ T7327] refill_objects+0xe3/0x410 [ 1314.756333][ T7327] __pcs_replace_empty_main+0x35e/0x650 [ 1314.756374][ T7327] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 1314.756433][ T7327] kmalloc_reserve+0xe8/0x350 [ 1314.756486][ T7327] __alloc_skb+0x185/0x710 [ 1314.756524][ T7327] nsim_dev_trap_report_work+0x2af/0xd20 [ 1314.756573][ T7327] process_one_work+0xac7/0x1b10 [ 1314.756622][ T7327] worker_thread+0x5ef/0xe50 [ 1314.756671][ T7327] kthread+0x373/0x450 [ 1314.756716][ T7327] ret_from_fork+0x730/0xd60 [ 1314.756747][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1314.756778][ T7327] page last free pid 11487 tgid 11487 ts 740194084880 stack trace: [ 1314.756803][ T7327] __free_frozen_pages+0x79f/0x10f0 [ 1314.756840][ T7327] qlist_free_all+0x47/0xf0 [ 1314.756889][ T7327] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1314.756942][ T7327] __kasan_slab_alloc+0x69/0x90 [ 1314.756999][ T7327] kmem_cache_alloc_noprof+0x269/0x6a0 [ 1314.757051][ T7327] ptlock_alloc+0x1f/0x70 [ 1314.757088][ T7327] pte_alloc_one+0x82/0x3d0 [ 1314.757138][ T7327] __do_fault+0x26c/0x440 [ 1314.757186][ T7327] do_fault+0x585/0x1830 [ 1314.757243][ T7327] __handle_mm_fault+0x150b/0x2f60 [ 1314.757281][ T7327] handle_mm_fault+0x363/0xa20 [ 1314.757320][ T7327] do_user_addr_fault+0x59c/0x12f0 [ 1314.757362][ T7327] exc_page_fault+0x6f/0xd0 [ 1314.757411][ T7327] asm_exc_page_fault+0x26/0x30 [ 1314.757454][ T7327] [ 1314.757462][ T7327] Memory state around the buggy address: [ 1314.757481][ T7327] ffff888037150600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1314.757509][ T7327] ffff888037150680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1314.757536][ T7327] >ffff888037150700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1314.757558][ T7327] ^ [ 1314.757580][ T7327] ffff888037150780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1314.757607][ T7327] ffff888037150800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1314.757629][ T7327] ================================================================== [ 1314.993897][ T9614] usb 2-1: USB disconnect, device number 6 [ 1315.188270][ T7327] Disabling lock debugging due to kernel taint [ 1315.188291][ T7327] ================================================================== [ 1315.188308][ T7327] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0x94e/0xc60 [ 1315.188374][ T7327] Read of size 256 at addr ffff8880371506c0 by task kworker/0:16/7327 [ 1315.188406][ T7327] [ 1315.188431][ T7327] CPU: 0 UID: 0 PID: 7327 Comm: kworker/0:16 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1315.188491][ T7327] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1315.188508][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1315.188536][ T7327] Workqueue: usb_hub_wq hub_event [ 1315.188593][ T7327] Call Trace: [ 1315.188605][ T7327] [ 1315.188618][ T7327] dump_stack_lvl+0x100/0x190 [ 1315.188671][ T7327] print_report+0x13d/0x4b0 [ 1315.188728][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.188776][ T7327] ? __virt_addr_valid+0x239/0x430 [ 1315.188841][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1315.188898][ T7327] kasan_report+0xdf/0x1c0 [ 1315.188937][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1315.189001][ T7327] kasan_check_range+0x10f/0x1e0 [ 1315.189046][ T7327] __asan_memcpy+0x23/0x60 [ 1315.189096][ T7327] fbcon_prepare_logo+0x94e/0xc60 [ 1315.189167][ T7327] fbcon_init+0x1065/0x1830 [ 1315.189229][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.189281][ T7327] visual_init+0x320/0x620 [ 1315.189347][ T7327] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1315.189401][ T7327] do_take_over_console+0x501/0x5d0 [ 1315.189456][ T7327] do_fbcon_takeover+0xe9/0x210 [ 1315.189511][ T7327] fbcon_fb_registered+0x364/0x4b0 [ 1315.189575][ T7327] do_register_framebuffer+0x503/0x870 [ 1315.189636][ T7327] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1315.189705][ T7327] ? find_held_lock+0x2b/0x80 [ 1315.189761][ T7327] register_framebuffer+0x23/0x40 [ 1315.189818][ T7327] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1315.189894][ T7327] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1315.189961][ T7327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1315.190030][ T7327] drm_fb_helper_initial_config+0x44/0x60 [ 1315.190089][ T7327] drm_fbdev_client_hotplug+0x19e/0x220 [ 1315.190140][ T7327] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1315.190190][ T7327] drm_client_register+0x197/0x280 [ 1315.190250][ T7327] drm_fbdev_client_setup+0x155/0x480 [ 1315.190301][ T7327] drm_client_setup+0x160/0x1a0 [ 1315.190348][ T7327] gud_probe+0x186c/0x1c60 [ 1315.190409][ T7327] ? __pfx_gud_probe+0x10/0x10 [ 1315.190465][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.190515][ T7327] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1315.190570][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1315.190622][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.190671][ T7327] ? __pm_runtime_set_status+0x13c/0x970 [ 1315.190735][ T7327] usb_probe_interface+0x386/0x9b0 [ 1315.190790][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1315.190837][ T7327] ? kernfs_put+0x3f/0x60 [ 1315.190871][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.190906][ T7327] ? sysfs_create_link+0x68/0xc0 [ 1315.190937][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1315.190986][ T7327] really_probe+0x241/0xa60 [ 1315.191023][ T7327] __driver_probe_device+0x210/0x460 [ 1315.191058][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.191096][ T7327] driver_probe_device+0x4a/0x140 [ 1315.191132][ T7327] __device_attach_driver+0x1df/0x320 [ 1315.191170][ T7327] ? __pfx___device_attach_driver+0x10/0x10 [ 1315.191206][ T7327] bus_for_each_drv+0x159/0x1e0 [ 1315.191235][ T7327] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1315.191263][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.191298][ T7327] ? lockdep_hardirqs_on+0x7d/0x110 [ 1315.191338][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.191373][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1315.191414][ T7327] __device_attach+0x1e4/0x4d0 [ 1315.191455][ T7327] ? __pfx___device_attach+0x10/0x10 [ 1315.191492][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.191527][ T7327] ? do_raw_spin_unlock+0x145/0x1e0 [ 1315.191561][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.191599][ T7327] device_initial_probe+0xaf/0xd0 [ 1315.191637][ T7327] bus_probe_device+0x64/0x160 [ 1315.191669][ T7327] device_add+0x121d/0x1970 [ 1315.191711][ T7327] ? __pfx_device_add+0x10/0x10 [ 1315.191759][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.191807][ T7327] ? mark_held_locks+0x40/0x70 [ 1315.191864][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.191899][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.191939][ T7327] usb_set_configuration+0xd97/0x1c60 [ 1315.191993][ T7327] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1315.192029][ T7327] usb_generic_driver_probe+0xa1/0xe0 [ 1315.192065][ T7327] usb_probe_device+0xef/0x400 [ 1315.192108][ T7327] ? __pfx_usb_probe_device+0x10/0x10 [ 1315.192152][ T7327] really_probe+0x241/0xa60 [ 1315.192188][ T7327] __driver_probe_device+0x210/0x460 [ 1315.192232][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.192270][ T7327] driver_probe_device+0x4a/0x140 [ 1315.192306][ T7327] __device_attach_driver+0x1df/0x320 [ 1315.192343][ T7327] ? __pfx___device_attach_driver+0x10/0x10 [ 1315.192380][ T7327] bus_for_each_drv+0x159/0x1e0 [ 1315.192408][ T7327] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1315.192439][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.192474][ T7327] ? lockdep_hardirqs_on+0x7d/0x110 [ 1315.192515][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.192563][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1315.192619][ T7327] __device_attach+0x1e4/0x4d0 [ 1315.192666][ T7327] ? __pfx___device_attach+0x10/0x10 [ 1315.192716][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.192763][ T7327] ? do_raw_spin_unlock+0x145/0x1e0 [ 1315.192808][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.192859][ T7327] device_initial_probe+0xaf/0xd0 [ 1315.192910][ T7327] bus_probe_device+0x64/0x160 [ 1315.192952][ T7327] device_add+0x121d/0x1970 [ 1315.193012][ T7327] ? __pfx_device_add+0x10/0x10 [ 1315.193066][ T7327] ? usb_detect_static_quirks+0x335/0x3e0 [ 1315.193119][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.193172][ T7327] usb_new_device.part.0+0xcc2/0x1686 [ 1315.193233][ T7327] ? do_raw_spin_lock+0x128/0x260 [ 1315.193277][ T7327] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1315.193333][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.193381][ T7327] ? mark_held_locks+0x40/0x70 [ 1315.193449][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.193500][ T7327] hub_event.cold+0x1e3/0xe90 [ 1315.193576][ T7327] ? __pfx_hub_event+0x10/0x10 [ 1315.193631][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.193678][ T7327] ? mark_lock+0xe60/0x1020 [ 1315.193742][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.193790][ T7327] ? lock_acquire+0x1d1/0x380 [ 1315.193823][ T7327] ? process_one_work+0xa2c/0x1b10 [ 1315.193880][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.193929][ T7327] ? process_one_work+0x906/0x1b10 [ 1315.193983][ T7327] ? process_one_work+0x906/0x1b10 [ 1315.194038][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.194092][ T7327] process_one_work+0xac7/0x1b10 [ 1315.194151][ T7327] ? __pfx_process_one_work+0x10/0x10 [ 1315.194194][ T7327] ? lock_acquire+0x1d1/0x380 [ 1315.194225][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.194263][ T7327] worker_thread+0x5ef/0xe50 [ 1315.194311][ T7327] ? kthread+0x13a/0x450 [ 1315.194347][ T7327] ? __pfx_worker_thread+0x10/0x10 [ 1315.194387][ T7327] kthread+0x373/0x450 [ 1315.194427][ T7327] ? __pfx_kthread+0x10/0x10 [ 1315.194465][ T7327] ret_from_fork+0x730/0xd60 [ 1315.194494][ T7327] ? __pfx_ret_from_fork+0x10/0x10 [ 1315.194525][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.194566][ T7327] ? rcu_is_watching+0x13/0xc0 [ 1315.194601][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.194636][ T7327] ? __switch_to+0x800/0x10f0 [ 1315.194673][ T7327] ? __switch_to_asm+0x39/0x70 [ 1315.194699][ T7327] ? __pfx_kthread+0x10/0x10 [ 1315.194738][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1315.194774][ T7327] [ 1315.194784][ T7327] [ 1315.194791][ T7327] Allocated by task 14955: [ 1315.194804][ T7327] kasan_save_stack+0x30/0x50 [ 1315.194846][ T7327] kasan_save_track+0x14/0x30 [ 1315.194886][ T7327] __kasan_kmalloc+0xaa/0xb0 [ 1315.194927][ T7327] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 1315.194969][ T7327] kmalloc_reserve+0xe8/0x350 [ 1315.195013][ T7327] __alloc_skb+0x185/0x710 [ 1315.195042][ T7327] nsim_dev_trap_report_work+0x2af/0xd20 [ 1315.195084][ T7327] process_one_work+0xac7/0x1b10 [ 1315.195138][ T7327] worker_thread+0x5ef/0xe50 [ 1315.195188][ T7327] kthread+0x373/0x450 [ 1315.195233][ T7327] ret_from_fork+0x730/0xd60 [ 1315.195257][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1315.195282][ T7327] [ 1315.195288][ T7327] Freed by task 14955: [ 1315.195301][ T7327] kasan_save_stack+0x30/0x50 [ 1315.195340][ T7327] kasan_save_track+0x14/0x30 [ 1315.195381][ T7327] kasan_save_free_info+0x3b/0x70 [ 1315.195412][ T7327] __kasan_slab_free+0x5f/0x80 [ 1315.195458][ T7327] kfree+0x22b/0x6d0 [ 1315.195486][ T7327] skb_free_head+0xb9/0x160 [ 1315.195513][ T7327] skb_release_data+0x6c5/0x8e0 [ 1315.195545][ T7327] consume_skb+0xc4/0x110 [ 1315.195580][ T7327] nsim_dev_trap_report_work+0x8de/0xd20 [ 1315.195620][ T7327] process_one_work+0xac7/0x1b10 [ 1315.195657][ T7327] worker_thread+0x5ef/0xe50 [ 1315.195695][ T7327] kthread+0x373/0x450 [ 1315.195728][ T7327] ret_from_fork+0x730/0xd60 [ 1315.195752][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1315.195776][ T7327] [ 1315.195782][ T7327] The buggy address belongs to the object at ffff888037150000 [ 1315.195782][ T7327] which belongs to the cache kmalloc-4k of size 4096 [ 1315.195804][ T7327] The buggy address is located 1728 bytes inside of [ 1315.195804][ T7327] freed 4096-byte region [ffff888037150000, ffff888037151000) [ 1315.195832][ T7327] [ 1315.195839][ T7327] The buggy address belongs to the physical page: [ 1315.195850][ T7327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37150 [ 1315.195875][ T7327] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1315.195897][ T7327] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1315.195923][ T7327] page_type: f5(slab) [ 1315.195946][ T7327] raw: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1315.195972][ T7327] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1315.195999][ T7327] head: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1315.196024][ T7327] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1315.196051][ T7327] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1315.196076][ T7327] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1315.196092][ T7327] page dumped because: kasan: bad access detected [ 1315.196106][ T7327] page_owner tracks the page as allocated [ 1315.196115][ T7327] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6520, tgid 6520 (kworker/u8:19), ts 740646061328 [ 1315.196160][ T7327] post_alloc_hook+0xfd/0x120 [ 1315.196197][ T7327] get_page_from_freelist+0x110d/0x35d0 [ 1315.196245][ T7327] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1315.196294][ T7327] new_slab+0xa9/0x6e0 [ 1315.196336][ T7327] refill_objects+0xe3/0x410 [ 1315.196368][ T7327] __pcs_replace_empty_main+0x35e/0x650 [ 1315.196401][ T7327] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 1315.196447][ T7327] kmalloc_reserve+0xe8/0x350 [ 1315.196489][ T7327] __alloc_skb+0x185/0x710 [ 1315.196518][ T7327] nsim_dev_trap_report_work+0x2af/0xd20 [ 1315.196557][ T7327] process_one_work+0xac7/0x1b10 [ 1315.196595][ T7327] worker_thread+0x5ef/0xe50 [ 1315.196632][ T7327] kthread+0x373/0x450 [ 1315.196665][ T7327] ret_from_fork+0x730/0xd60 [ 1315.196690][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1315.196713][ T7327] page last free pid 11487 tgid 11487 ts 740194084880 stack trace: [ 1315.196732][ T7327] __free_frozen_pages+0x79f/0x10f0 [ 1315.196760][ T7327] qlist_free_all+0x47/0xf0 [ 1315.196796][ T7327] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1315.196835][ T7327] __kasan_slab_alloc+0x69/0x90 [ 1315.196878][ T7327] kmem_cache_alloc_noprof+0x269/0x6a0 [ 1315.196916][ T7327] ptlock_alloc+0x1f/0x70 [ 1315.196945][ T7327] pte_alloc_one+0x82/0x3d0 [ 1315.196981][ T7327] __do_fault+0x26c/0x440 [ 1315.197017][ T7327] do_fault+0x585/0x1830 [ 1315.197058][ T7327] __handle_mm_fault+0x150b/0x2f60 [ 1315.197087][ T7327] handle_mm_fault+0x363/0xa20 [ 1315.197115][ T7327] do_user_addr_fault+0x59c/0x12f0 [ 1315.197157][ T7327] exc_page_fault+0x6f/0xd0 [ 1315.197206][ T7327] asm_exc_page_fault+0x26/0x30 [ 1315.197238][ T7327] [ 1315.197245][ T7327] Memory state around the buggy address: [ 1315.197258][ T7327] ffff888037150580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1315.197280][ T7327] ffff888037150600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1315.197308][ T7327] >ffff888037150680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1315.197330][ T7327] ^ [ 1315.197350][ T7327] ffff888037150700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1315.197378][ T7327] ffff888037150780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1315.197400][ T7327] ================================================================== [ 1315.839812][T18455] FAULT_INJECTION: forcing a failure. [ 1315.839812][T18455] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1315.839864][T18455] CPU: 1 UID: 0 PID: 18455 Comm: syz.3.3390 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1315.839929][T18455] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1315.839945][T18455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1315.839968][T18455] Call Trace: [ 1315.839980][T18455] [ 1315.839992][T18455] dump_stack_lvl+0x100/0x190 [ 1315.840046][T18455] should_fail_ex.cold+0x5/0xa [ 1315.840091][T18455] should_fail_alloc_page+0xeb/0x140 [ 1315.840130][T18455] prepare_alloc_pages+0x1f0/0x5b0 [ 1315.840195][T18455] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1315.840247][T18455] ? sock_alloc_send_pskb+0x801/0x980 [ 1315.840288][T18455] ? tun_get_user+0x7d0/0x3cc0 [ 1315.840332][T18455] ? tun_chr_write_iter+0xdc/0x200 [ 1315.840377][T18455] ? vfs_write+0x6af/0x1050 [ 1315.840425][T18455] ? ksys_write+0x12a/0x250 [ 1315.840473][T18455] ? do_syscall_64+0x123/0x790 [ 1315.840527][T18455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.840576][T18455] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1315.840647][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.840692][T18455] ? trace_kmalloc+0xeb/0x110 [ 1315.840723][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.840768][T18455] ? __kasan_kmalloc+0xaa/0xb0 [ 1315.840823][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.840868][T18455] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 1315.840930][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.840976][T18455] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1315.841040][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.841085][T18455] ? policy_nodemask+0xed/0x4f0 [ 1315.841124][T18455] alloc_pages_mpol+0x201/0x550 [ 1315.841160][T18455] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1315.841195][T18455] ? __alloc_skb+0x5b7/0x710 [ 1315.841237][T18455] ? __pfx___alloc_skb+0x10/0x10 [ 1315.841278][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.841324][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.841372][T18455] alloc_pages_noprof+0x1a/0x160 [ 1315.841415][T18455] alloc_skb_with_frags+0x4e7/0x760 [ 1315.841468][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.841514][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.841561][T18455] sock_alloc_send_pskb+0x801/0x980 [ 1315.841610][T18455] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1315.841653][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.841697][T18455] ? rcu_is_watching+0x13/0xc0 [ 1315.841742][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.841788][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.841831][T18455] ? rcu_is_watching+0x13/0xc0 [ 1315.841875][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.841925][T18455] ? aa_file_perm+0x7e4/0x14d0 [ 1315.841963][T18455] tun_get_user+0x7d0/0x3cc0 [ 1315.842017][T18455] ? __pfx_aa_file_perm+0x10/0x10 [ 1315.842051][T18455] ? __pfx_tun_get_user+0x10/0x10 [ 1315.842095][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.842142][T18455] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1315.842205][T18455] ? tun_get+0x191/0x370 [ 1315.842243][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.842288][T18455] ? rcu_is_watching+0x13/0xc0 [ 1315.842332][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.842377][T18455] ? lock_release+0x24d/0x310 [ 1315.842417][T18455] tun_chr_write_iter+0xdc/0x200 [ 1315.842466][T18455] vfs_write+0x6af/0x1050 [ 1315.842516][T18455] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1315.842566][T18455] ? __pfx_vfs_write+0x10/0x10 [ 1315.842616][T18455] ? lock_release+0x24d/0x310 [ 1315.842662][T18455] ksys_write+0x12a/0x250 [ 1315.842712][T18455] ? __pfx_ksys_write+0x10/0x10 [ 1315.842764][T18455] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1315.842809][T18455] ? rcu_is_watching+0x13/0xc0 [ 1315.842856][T18455] do_syscall_64+0x123/0x790 [ 1315.842913][T18455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.842956][T18455] RIP: 0033:0x7f1f5e75e98e [ 1315.842983][T18455] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1315.843020][T18455] RSP: 002b:00007f1f5f68afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1315.843056][T18455] RAX: ffffffffffffffda RBX: 00007f1f5f68b6c0 RCX: 00007f1f5e75e98e [ 1315.843082][T18455] RDX: 0000000000000fc2 RSI: 0000200000002900 RDI: 00000000000000c8 [ 1315.843106][T18455] RBP: 00007f1f5e83503b R08: 0000000000000000 R09: 0000000000000000 [ 1315.843130][T18455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1315.843152][T18455] R13: 00007f1f5ea26038 R14: 00007f1f5ea25fa0 R15: 00007ffe16faf958 [ 1315.843189][T18455] [ 1316.008429][ T7327] ================================================================== [ 1316.008451][ T7327] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0x94e/0xc60 [ 1316.008516][ T7327] Read of size 256 at addr ffff888037150620 by task kworker/0:16/7327 [ 1316.008547][ T7327] [ 1316.008566][ T7327] CPU: 0 UID: 0 PID: 7327 Comm: kworker/0:16 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1316.008623][ T7327] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1316.008639][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1316.008665][ T7327] Workqueue: usb_hub_wq hub_event [ 1316.008720][ T7327] Call Trace: [ 1316.008732][ T7327] [ 1316.008745][ T7327] dump_stack_lvl+0x100/0x190 [ 1316.008797][ T7327] print_report+0x13d/0x4b0 [ 1316.008857][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.008904][ T7327] ? __virt_addr_valid+0x239/0x430 [ 1316.008968][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1316.009026][ T7327] kasan_report+0xdf/0x1c0 [ 1316.009067][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1316.009131][ T7327] kasan_check_range+0x10f/0x1e0 [ 1316.009176][ T7327] __asan_memcpy+0x23/0x60 [ 1316.009229][ T7327] fbcon_prepare_logo+0x94e/0xc60 [ 1316.009291][ T7327] fbcon_init+0x1065/0x1830 [ 1316.009345][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.009391][ T7327] visual_init+0x320/0x620 [ 1316.009456][ T7327] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1316.009505][ T7327] do_take_over_console+0x501/0x5d0 [ 1316.009551][ T7327] do_fbcon_takeover+0xe9/0x210 [ 1316.009601][ T7327] fbcon_fb_registered+0x364/0x4b0 [ 1316.009660][ T7327] do_register_framebuffer+0x503/0x870 [ 1316.009713][ T7327] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1316.009771][ T7327] ? find_held_lock+0x2b/0x80 [ 1316.009822][ T7327] register_framebuffer+0x23/0x40 [ 1316.009872][ T7327] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1316.009941][ T7327] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1316.010000][ T7327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1316.010062][ T7327] drm_fb_helper_initial_config+0x44/0x60 [ 1316.010120][ T7327] drm_fbdev_client_hotplug+0x19e/0x220 [ 1316.010172][ T7327] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1316.010221][ T7327] drm_client_register+0x197/0x280 [ 1316.010279][ T7327] drm_fbdev_client_setup+0x155/0x480 [ 1316.010330][ T7327] drm_client_setup+0x160/0x1a0 [ 1316.010377][ T7327] gud_probe+0x186c/0x1c60 [ 1316.010442][ T7327] ? __pfx_gud_probe+0x10/0x10 [ 1316.010490][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.010539][ T7327] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1316.010593][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1316.010645][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.010692][ T7327] ? __pm_runtime_set_status+0x13c/0x970 [ 1316.010751][ T7327] usb_probe_interface+0x386/0x9b0 [ 1316.010819][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1316.010883][ T7327] ? kernfs_put+0x3f/0x60 [ 1316.010928][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.010976][ T7327] ? sysfs_create_link+0x68/0xc0 [ 1316.011017][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1316.011082][ T7327] really_probe+0x241/0xa60 [ 1316.011132][ T7327] __driver_probe_device+0x210/0x460 [ 1316.011181][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.011232][ T7327] driver_probe_device+0x4a/0x140 [ 1316.011282][ T7327] __device_attach_driver+0x1df/0x320 [ 1316.011333][ T7327] ? __pfx___device_attach_driver+0x10/0x10 [ 1316.011382][ T7327] bus_for_each_drv+0x159/0x1e0 [ 1316.011425][ T7327] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1316.011463][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.011510][ T7327] ? lockdep_hardirqs_on+0x7d/0x110 [ 1316.011567][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.011615][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1316.011671][ T7327] __device_attach+0x1e4/0x4d0 [ 1316.011720][ T7327] ? __pfx___device_attach+0x10/0x10 [ 1316.011770][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.011817][ T7327] ? do_raw_spin_unlock+0x145/0x1e0 [ 1316.011864][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.011917][ T7327] device_initial_probe+0xaf/0xd0 [ 1316.011970][ T7327] bus_probe_device+0x64/0x160 [ 1316.012014][ T7327] device_add+0x121d/0x1970 [ 1316.012072][ T7327] ? __pfx_device_add+0x10/0x10 [ 1316.012128][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.012175][ T7327] ? mark_held_locks+0x40/0x70 [ 1316.012239][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.012287][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.012340][ T7327] usb_set_configuration+0xd97/0x1c60 [ 1316.012414][ T7327] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1316.012470][ T7327] usb_generic_driver_probe+0xa1/0xe0 [ 1316.012520][ T7327] usb_probe_device+0xef/0x400 [ 1316.012579][ T7327] ? __pfx_usb_probe_device+0x10/0x10 [ 1316.012641][ T7327] really_probe+0x241/0xa60 [ 1316.012693][ T7327] __driver_probe_device+0x210/0x460 [ 1316.012743][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.012795][ T7327] driver_probe_device+0x4a/0x140 [ 1316.012846][ T7327] __device_attach_driver+0x1df/0x320 [ 1316.012898][ T7327] ? __pfx___device_attach_driver+0x10/0x10 [ 1316.012949][ T7327] bus_for_each_drv+0x159/0x1e0 [ 1316.012988][ T7327] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1316.013027][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.013075][ T7327] ? lockdep_hardirqs_on+0x7d/0x110 [ 1316.013132][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.013179][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1316.013235][ T7327] __device_attach+0x1e4/0x4d0 [ 1316.013285][ T7327] ? __pfx___device_attach+0x10/0x10 [ 1316.013336][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.013384][ T7327] ? do_raw_spin_unlock+0x145/0x1e0 [ 1316.013436][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.013489][ T7327] device_initial_probe+0xaf/0xd0 [ 1316.013542][ T7327] bus_probe_device+0x64/0x160 [ 1316.013584][ T7327] device_add+0x121d/0x1970 [ 1316.013637][ T7327] ? __pfx_device_add+0x10/0x10 [ 1316.013685][ T7327] ? usb_detect_static_quirks+0x335/0x3e0 [ 1316.013733][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.013781][ T7327] usb_new_device.part.0+0xcc2/0x1686 [ 1316.013835][ T7327] ? do_raw_spin_lock+0x128/0x260 [ 1316.013874][ T7327] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1316.013927][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.013975][ T7327] ? mark_held_locks+0x40/0x70 [ 1316.014037][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.014089][ T7327] hub_event.cold+0x1e3/0xe90 [ 1316.014165][ T7327] ? __pfx_hub_event+0x10/0x10 [ 1316.014220][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.014268][ T7327] ? mark_lock+0xe60/0x1020 [ 1316.014332][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.014379][ T7327] ? lock_acquire+0x1d1/0x380 [ 1316.014413][ T7327] ? process_one_work+0xa2c/0x1b10 [ 1316.014475][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.014523][ T7327] ? process_one_work+0x906/0x1b10 [ 1316.014578][ T7327] ? process_one_work+0x906/0x1b10 [ 1316.014634][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.014688][ T7327] process_one_work+0xac7/0x1b10 [ 1316.014741][ T7327] ? __pfx_process_one_work+0x10/0x10 [ 1316.014783][ T7327] ? lock_acquire+0x1d1/0x380 [ 1316.014814][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.014852][ T7327] worker_thread+0x5ef/0xe50 [ 1316.014900][ T7327] ? kthread+0x13a/0x450 [ 1316.014937][ T7327] ? __pfx_worker_thread+0x10/0x10 [ 1316.014977][ T7327] kthread+0x373/0x450 [ 1316.015013][ T7327] ? __pfx_kthread+0x10/0x10 [ 1316.015051][ T7327] ret_from_fork+0x730/0xd60 [ 1316.015080][ T7327] ? __pfx_ret_from_fork+0x10/0x10 [ 1316.015107][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.015142][ T7327] ? rcu_is_watching+0x13/0xc0 [ 1316.015177][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.015212][ T7327] ? __switch_to+0x800/0x10f0 [ 1316.015248][ T7327] ? __switch_to_asm+0x39/0x70 [ 1316.015275][ T7327] ? __pfx_kthread+0x10/0x10 [ 1316.015313][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1316.015348][ T7327] [ 1316.015359][ T7327] [ 1316.015365][ T7327] Allocated by task 14955: [ 1316.015379][ T7327] kasan_save_stack+0x30/0x50 [ 1316.015423][ T7327] kasan_save_track+0x14/0x30 [ 1316.015468][ T7327] __kasan_kmalloc+0xaa/0xb0 [ 1316.015513][ T7327] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 1316.015555][ T7327] kmalloc_reserve+0xe8/0x350 [ 1316.015598][ T7327] __alloc_skb+0x185/0x710 [ 1316.015628][ T7327] nsim_dev_trap_report_work+0x2af/0xd20 [ 1316.015683][ T7327] process_one_work+0xac7/0x1b10 [ 1316.015735][ T7327] worker_thread+0x5ef/0xe50 [ 1316.015786][ T7327] kthread+0x373/0x450 [ 1316.015822][ T7327] ret_from_fork+0x730/0xd60 [ 1316.015846][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1316.015870][ T7327] [ 1316.015876][ T7327] Freed by task 14955: [ 1316.015889][ T7327] kasan_save_stack+0x30/0x50 [ 1316.015930][ T7327] kasan_save_track+0x14/0x30 [ 1316.015970][ T7327] kasan_save_free_info+0x3b/0x70 [ 1316.016002][ T7327] __kasan_slab_free+0x5f/0x80 [ 1316.016044][ T7327] kfree+0x22b/0x6d0 [ 1316.016073][ T7327] skb_free_head+0xb9/0x160 [ 1316.016098][ T7327] skb_release_data+0x6c5/0x8e0 [ 1316.016131][ T7327] consume_skb+0xc4/0x110 [ 1316.016166][ T7327] nsim_dev_trap_report_work+0x8de/0xd20 [ 1316.016205][ T7327] process_one_work+0xac7/0x1b10 [ 1316.016243][ T7327] worker_thread+0x5ef/0xe50 [ 1316.016280][ T7327] kthread+0x373/0x450 [ 1316.016313][ T7327] ret_from_fork+0x730/0xd60 [ 1316.016337][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1316.016361][ T7327] [ 1316.016367][ T7327] The buggy address belongs to the object at ffff888037150000 [ 1316.016367][ T7327] which belongs to the cache kmalloc-4k of size 4096 [ 1316.016390][ T7327] The buggy address is located 1568 bytes inside of [ 1316.016390][ T7327] freed 4096-byte region [ffff888037150000, ffff888037151000) [ 1316.016418][ T7327] [ 1316.016428][ T7327] The buggy address belongs to the physical page: [ 1316.016440][ T7327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37150 [ 1316.016465][ T7327] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1316.016487][ T7327] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1316.016512][ T7327] page_type: f5(slab) [ 1316.016535][ T7327] raw: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1316.016561][ T7327] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1316.016587][ T7327] head: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1316.016613][ T7327] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1316.016639][ T7327] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1316.016664][ T7327] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1316.016681][ T7327] page dumped because: kasan: bad access detected [ 1316.016694][ T7327] page_owner tracks the page as allocated [ 1316.016703][ T7327] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6520, tgid 6520 (kworker/u8:19), ts 740646061328 [ 1316.016758][ T7327] post_alloc_hook+0xfd/0x120 [ 1316.016800][ T7327] get_page_from_freelist+0x110d/0x35d0 [ 1316.016848][ T7327] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1316.016896][ T7327] new_slab+0xa9/0x6e0 [ 1316.016929][ T7327] refill_objects+0xe3/0x410 [ 1316.016961][ T7327] __pcs_replace_empty_main+0x35e/0x650 [ 1316.016994][ T7327] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 1316.017036][ T7327] kmalloc_reserve+0xe8/0x350 [ 1316.017077][ T7327] __alloc_skb+0x185/0x710 [ 1316.017106][ T7327] nsim_dev_trap_report_work+0x2af/0xd20 [ 1316.017145][ T7327] process_one_work+0xac7/0x1b10 [ 1316.017183][ T7327] worker_thread+0x5ef/0xe50 [ 1316.017221][ T7327] kthread+0x373/0x450 [ 1316.017253][ T7327] ret_from_fork+0x730/0xd60 [ 1316.017277][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1316.017302][ T7327] page last free pid 11487 tgid 11487 ts 740194084880 stack trace: [ 1316.017321][ T7327] __free_frozen_pages+0x79f/0x10f0 [ 1316.017348][ T7327] qlist_free_all+0x47/0xf0 [ 1316.017384][ T7327] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1316.017427][ T7327] __kasan_slab_alloc+0x69/0x90 [ 1316.017470][ T7327] kmem_cache_alloc_noprof+0x269/0x6a0 [ 1316.017508][ T7327] ptlock_alloc+0x1f/0x70 [ 1316.017535][ T7327] pte_alloc_one+0x82/0x3d0 [ 1316.017576][ T7327] __do_fault+0x26c/0x440 [ 1316.017625][ T7327] do_fault+0x585/0x1830 [ 1316.017672][ T7327] __handle_mm_fault+0x150b/0x2f60 [ 1316.017700][ T7327] handle_mm_fault+0x363/0xa20 [ 1316.017728][ T7327] do_user_addr_fault+0x59c/0x12f0 [ 1316.017760][ T7327] exc_page_fault+0x6f/0xd0 [ 1316.017796][ T7327] asm_exc_page_fault+0x26/0x30 [ 1316.017824][ T7327] [ 1316.017833][ T7327] Memory state around the buggy address: [ 1316.017853][ T7327] ffff888037150500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1316.017882][ T7327] ffff888037150580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1316.017910][ T7327] >ffff888037150600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1316.017932][ T7327] ^ [ 1316.017954][ T7327] ffff888037150680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1316.017982][ T7327] ffff888037150700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1316.018002][ T7327] ================================================================== [ 1316.832772][ T7327] ================================================================== [ 1316.832796][ T7327] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0x94e/0xc60 [ 1316.832863][ T7327] Read of size 256 at addr ffff888037150580 by task kworker/0:16/7327 [ 1316.832900][ T7327] [ 1316.832921][ T7327] CPU: 0 UID: 0 PID: 7327 Comm: kworker/0:16 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1316.832982][ T7327] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1316.833000][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1316.833028][ T7327] Workqueue: usb_hub_wq hub_event [ 1316.833085][ T7327] Call Trace: [ 1316.833098][ T7327] [ 1316.833113][ T7327] dump_stack_lvl+0x100/0x190 [ 1316.833167][ T7327] print_report+0x13d/0x4b0 [ 1316.833228][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.833277][ T7327] ? __virt_addr_valid+0x239/0x430 [ 1316.833342][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1316.833400][ T7327] kasan_report+0xdf/0x1c0 [ 1316.833443][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1316.833508][ T7327] kasan_check_range+0x10f/0x1e0 [ 1316.833554][ T7327] __asan_memcpy+0x23/0x60 [ 1316.833604][ T7327] fbcon_prepare_logo+0x94e/0xc60 [ 1316.833672][ T7327] fbcon_init+0x1065/0x1830 [ 1316.833733][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.833783][ T7327] visual_init+0x320/0x620 [ 1316.833850][ T7327] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1316.833904][ T7327] do_take_over_console+0x501/0x5d0 [ 1316.833953][ T7327] do_fbcon_takeover+0xe9/0x210 [ 1316.834009][ T7327] fbcon_fb_registered+0x364/0x4b0 [ 1316.834074][ T7327] do_register_framebuffer+0x503/0x870 [ 1316.834133][ T7327] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1316.834197][ T7327] ? find_held_lock+0x2b/0x80 [ 1316.834254][ T7327] register_framebuffer+0x23/0x40 [ 1316.834311][ T7327] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1316.834386][ T7327] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1316.834457][ T7327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1316.834526][ T7327] drm_fb_helper_initial_config+0x44/0x60 [ 1316.834584][ T7327] drm_fbdev_client_hotplug+0x19e/0x220 [ 1316.834636][ T7327] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1316.834688][ T7327] drm_client_register+0x197/0x280 [ 1316.834748][ T7327] drm_fbdev_client_setup+0x155/0x480 [ 1316.834801][ T7327] drm_client_setup+0x160/0x1a0 [ 1316.834848][ T7327] gud_probe+0x186c/0x1c60 [ 1316.834909][ T7327] ? __pfx_gud_probe+0x10/0x10 [ 1316.834959][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.835009][ T7327] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1316.835065][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1316.835118][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.835167][ T7327] ? __pm_runtime_set_status+0x13c/0x970 [ 1316.835228][ T7327] usb_probe_interface+0x386/0x9b0 [ 1316.835299][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1316.835363][ T7327] ? kernfs_put+0x3f/0x60 [ 1316.835409][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.835461][ T7327] ? sysfs_create_link+0x68/0xc0 [ 1316.835502][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1316.835566][ T7327] really_probe+0x241/0xa60 [ 1316.835616][ T7327] __driver_probe_device+0x210/0x460 [ 1316.835664][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.835713][ T7327] driver_probe_device+0x4a/0x140 [ 1316.835763][ T7327] __device_attach_driver+0x1df/0x320 [ 1316.835814][ T7327] ? __pfx___device_attach_driver+0x10/0x10 [ 1316.835863][ T7327] bus_for_each_drv+0x159/0x1e0 [ 1316.835901][ T7327] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1316.835940][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.835987][ T7327] ? lockdep_hardirqs_on+0x7d/0x110 [ 1316.836042][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.836089][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1316.836145][ T7327] __device_attach+0x1e4/0x4d0 [ 1316.836194][ T7327] ? __pfx___device_attach+0x10/0x10 [ 1316.836243][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.836291][ T7327] ? do_raw_spin_unlock+0x145/0x1e0 [ 1316.836338][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.836389][ T7327] device_initial_probe+0xaf/0xd0 [ 1316.836444][ T7327] bus_probe_device+0x64/0x160 [ 1316.836488][ T7327] device_add+0x121d/0x1970 [ 1316.836545][ T7327] ? __pfx_device_add+0x10/0x10 [ 1316.836599][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.836646][ T7327] ? mark_held_locks+0x40/0x70 [ 1316.836709][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.836757][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.836810][ T7327] usb_set_configuration+0xd97/0x1c60 [ 1316.836882][ T7327] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1316.836931][ T7327] usb_generic_driver_probe+0xa1/0xe0 [ 1316.836980][ T7327] usb_probe_device+0xef/0x400 [ 1316.837037][ T7327] ? __pfx_usb_probe_device+0x10/0x10 [ 1316.837097][ T7327] really_probe+0x241/0xa60 [ 1316.837146][ T7327] __driver_probe_device+0x210/0x460 [ 1316.837194][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.837244][ T7327] driver_probe_device+0x4a/0x140 [ 1316.837293][ T7327] __device_attach_driver+0x1df/0x320 [ 1316.837344][ T7327] ? __pfx___device_attach_driver+0x10/0x10 [ 1316.837394][ T7327] bus_for_each_drv+0x159/0x1e0 [ 1316.837436][ T7327] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1316.837474][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.837521][ T7327] ? lockdep_hardirqs_on+0x7d/0x110 [ 1316.837576][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.837622][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1316.837677][ T7327] __device_attach+0x1e4/0x4d0 [ 1316.837726][ T7327] ? __pfx___device_attach+0x10/0x10 [ 1316.837775][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.837822][ T7327] ? do_raw_spin_unlock+0x145/0x1e0 [ 1316.837867][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.837918][ T7327] device_initial_probe+0xaf/0xd0 [ 1316.837970][ T7327] bus_probe_device+0x64/0x160 [ 1316.838013][ T7327] device_add+0x121d/0x1970 [ 1316.838070][ T7327] ? __pfx_device_add+0x10/0x10 [ 1316.838123][ T7327] ? usb_detect_static_quirks+0x335/0x3e0 [ 1316.838176][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.838229][ T7327] usb_new_device.part.0+0xcc2/0x1686 [ 1316.838287][ T7327] ? do_raw_spin_lock+0x128/0x260 [ 1316.838332][ T7327] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1316.838388][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.838438][ T7327] ? mark_held_locks+0x40/0x70 [ 1316.838499][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.838550][ T7327] hub_event.cold+0x1e3/0xe90 [ 1316.838624][ T7327] ? __pfx_hub_event+0x10/0x10 [ 1316.838679][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.838725][ T7327] ? mark_lock+0xe60/0x1020 [ 1316.838789][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.838836][ T7327] ? lock_acquire+0x1d1/0x380 [ 1316.838871][ T7327] ? process_one_work+0xa2c/0x1b10 [ 1316.838927][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.838975][ T7327] ? process_one_work+0x906/0x1b10 [ 1316.839029][ T7327] ? process_one_work+0x906/0x1b10 [ 1316.839083][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.839136][ T7327] process_one_work+0xac7/0x1b10 [ 1316.839201][ T7327] ? __pfx_process_one_work+0x10/0x10 [ 1316.839258][ T7327] ? lock_acquire+0x1d1/0x380 [ 1316.839300][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.839350][ T7327] worker_thread+0x5ef/0xe50 [ 1316.839415][ T7327] ? kthread+0x13a/0x450 [ 1316.839467][ T7327] ? __pfx_worker_thread+0x10/0x10 [ 1316.839521][ T7327] kthread+0x373/0x450 [ 1316.839569][ T7327] ? __pfx_kthread+0x10/0x10 [ 1316.839620][ T7327] ret_from_fork+0x730/0xd60 [ 1316.839660][ T7327] ? __pfx_ret_from_fork+0x10/0x10 [ 1316.839697][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.839744][ T7327] ? rcu_is_watching+0x13/0xc0 [ 1316.839791][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1316.839838][ T7327] ? __switch_to+0x800/0x10f0 [ 1316.839888][ T7327] ? __switch_to_asm+0x39/0x70 [ 1316.839927][ T7327] ? __pfx_kthread+0x10/0x10 [ 1316.839982][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1316.840031][ T7327] [ 1316.840046][ T7327] [ 1316.840055][ T7327] Allocated by task 14955: [ 1316.840074][ T7327] kasan_save_stack+0x30/0x50 [ 1316.840130][ T7327] kasan_save_track+0x14/0x30 [ 1316.840183][ T7327] __kasan_kmalloc+0xaa/0xb0 [ 1316.840236][ T7327] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 1316.840293][ T7327] kmalloc_reserve+0xe8/0x350 [ 1316.840350][ T7327] __alloc_skb+0x185/0x710 [ 1316.840390][ T7327] nsim_dev_trap_report_work+0x2af/0xd20 [ 1316.840448][ T7327] process_one_work+0xac7/0x1b10 [ 1316.840499][ T7327] worker_thread+0x5ef/0xe50 [ 1316.840549][ T7327] kthread+0x373/0x450 [ 1316.840594][ T7327] ret_from_fork+0x730/0xd60 [ 1316.840628][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1316.840661][ T7327] [ 1316.840670][ T7327] Freed by task 14955: [ 1316.840688][ T7327] kasan_save_stack+0x30/0x50 [ 1316.840741][ T7327] kasan_save_track+0x14/0x30 [ 1316.840795][ T7327] kasan_save_free_info+0x3b/0x70 [ 1316.840839][ T7327] __kasan_slab_free+0x5f/0x80 [ 1316.840895][ T7327] kfree+0x22b/0x6d0 [ 1316.840933][ T7327] skb_free_head+0xb9/0x160 [ 1316.840968][ T7327] skb_release_data+0x6c5/0x8e0 [ 1316.841012][ T7327] consume_skb+0xc4/0x110 [ 1316.841060][ T7327] nsim_dev_trap_report_work+0x8de/0xd20 [ 1316.841112][ T7327] process_one_work+0xac7/0x1b10 [ 1316.841164][ T7327] worker_thread+0x5ef/0xe50 [ 1316.841214][ T7327] kthread+0x373/0x450 [ 1316.841258][ T7327] ret_from_fork+0x730/0xd60 [ 1316.841291][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1316.841325][ T7327] [ 1316.841334][ T7327] The buggy address belongs to the object at ffff888037150000 [ 1316.841334][ T7327] which belongs to the cache kmalloc-4k of size 4096 [ 1316.841365][ T7327] The buggy address is located 1408 bytes inside of [ 1316.841365][ T7327] freed 4096-byte region [ffff888037150000, ffff888037151000) [ 1316.841404][ T7327] [ 1316.841414][ T7327] The buggy address belongs to the physical page: [ 1316.841435][ T7327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37150 [ 1316.841469][ T7327] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1316.841501][ T7327] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1316.841534][ T7327] page_type: f5(slab) [ 1316.841566][ T7327] raw: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1316.841602][ T7327] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1316.841639][ T7327] head: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1316.841675][ T7327] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1316.841711][ T7327] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1316.841746][ T7327] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1316.841769][ T7327] page dumped because: kasan: bad access detected [ 1316.841787][ T7327] page_owner tracks the page as allocated [ 1316.841801][ T7327] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6520, tgid 6520 (kworker/u8:19), ts 740646061328 [ 1316.841862][ T7327] post_alloc_hook+0xfd/0x120 [ 1316.841902][ T7327] get_page_from_freelist+0x110d/0x35d0 [ 1316.841949][ T7327] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1316.841998][ T7327] new_slab+0xa9/0x6e0 [ 1316.842039][ T7327] refill_objects+0xe3/0x410 [ 1316.842083][ T7327] __pcs_replace_empty_main+0x35e/0x650 [ 1316.842126][ T7327] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 1316.842182][ T7327] kmalloc_reserve+0xe8/0x350 [ 1316.842237][ T7327] __alloc_skb+0x185/0x710 [ 1316.842277][ T7327] nsim_dev_trap_report_work+0x2af/0xd20 [ 1316.842328][ T7327] process_one_work+0xac7/0x1b10 [ 1316.842379][ T7327] worker_thread+0x5ef/0xe50 [ 1316.842434][ T7327] kthread+0x373/0x450 [ 1316.842478][ T7327] ret_from_fork+0x730/0xd60 [ 1316.842511][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1316.842544][ T7327] page last free pid 11487 tgid 11487 ts 740194084880 stack trace: [ 1316.842570][ T7327] __free_frozen_pages+0x79f/0x10f0 [ 1316.842608][ T7327] qlist_free_all+0x47/0xf0 [ 1316.842656][ T7327] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1316.842709][ T7327] __kasan_slab_alloc+0x69/0x90 [ 1316.842765][ T7327] kmem_cache_alloc_noprof+0x269/0x6a0 [ 1316.842817][ T7327] ptlock_alloc+0x1f/0x70 [ 1316.842856][ T7327] pte_alloc_one+0x82/0x3d0 [ 1316.842904][ T7327] __do_fault+0x26c/0x440 [ 1316.842951][ T7327] do_fault+0x585/0x1830 [ 1316.843007][ T7327] __handle_mm_fault+0x150b/0x2f60 [ 1316.843046][ T7327] handle_mm_fault+0x363/0xa20 [ 1316.843084][ T7327] do_user_addr_fault+0x59c/0x12f0 [ 1316.843128][ T7327] exc_page_fault+0x6f/0xd0 [ 1316.843177][ T7327] asm_exc_page_fault+0x26/0x30 [ 1316.843213][ T7327] [ 1316.843222][ T7327] Memory state around the buggy address: [ 1316.843241][ T7327] ffff888037150480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1316.843268][ T7327] ffff888037150500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1316.843296][ T7327] >ffff888037150580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1316.843318][ T7327] ^ [ 1316.843338][ T7327] ffff888037150600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1316.843365][ T7327] ffff888037150680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1316.843387][ T7327] ================================================================== [ 1316.924399][T10541] Bluetooth: hci6: command 0x0406 tx timeout [ 1317.123890][ T7327] ================================================================== [ 1317.123911][ T7327] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0x94e/0xc60 [ 1317.123977][ T7327] Read of size 256 at addr ffff8880371504e0 by task kworker/0:16/7327 [ 1317.124009][ T7327] [ 1317.124030][ T7327] CPU: 0 UID: 0 PID: 7327 Comm: kworker/0:16 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1317.124089][ T7327] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1317.124107][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1317.124134][ T7327] Workqueue: usb_hub_wq hub_event [ 1317.124189][ T7327] Call Trace: [ 1317.124202][ T7327] [ 1317.124217][ T7327] dump_stack_lvl+0x100/0x190 [ 1317.124269][ T7327] print_report+0x13d/0x4b0 [ 1317.124328][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.124376][ T7327] ? __virt_addr_valid+0x239/0x430 [ 1317.124444][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1317.124500][ T7327] kasan_report+0xdf/0x1c0 [ 1317.124539][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1317.124605][ T7327] kasan_check_range+0x10f/0x1e0 [ 1317.124650][ T7327] __asan_memcpy+0x23/0x60 [ 1317.124700][ T7327] fbcon_prepare_logo+0x94e/0xc60 [ 1317.124767][ T7327] fbcon_init+0x1065/0x1830 [ 1317.124827][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.124877][ T7327] visual_init+0x320/0x620 [ 1317.124941][ T7327] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1317.124995][ T7327] do_take_over_console+0x501/0x5d0 [ 1317.125044][ T7327] do_fbcon_takeover+0xe9/0x210 [ 1317.125099][ T7327] fbcon_fb_registered+0x364/0x4b0 [ 1317.125168][ T7327] do_register_framebuffer+0x503/0x870 [ 1317.125229][ T7327] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1317.125294][ T7327] ? find_held_lock+0x2b/0x80 [ 1317.125350][ T7327] register_framebuffer+0x23/0x40 [ 1317.125406][ T7327] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1317.125486][ T7327] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1317.125551][ T7327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1317.125619][ T7327] drm_fb_helper_initial_config+0x44/0x60 [ 1317.125676][ T7327] drm_fbdev_client_hotplug+0x19e/0x220 [ 1317.125727][ T7327] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1317.125777][ T7327] drm_client_register+0x197/0x280 [ 1317.125836][ T7327] drm_fbdev_client_setup+0x155/0x480 [ 1317.125888][ T7327] drm_client_setup+0x160/0x1a0 [ 1317.125935][ T7327] gud_probe+0x186c/0x1c60 [ 1317.125995][ T7327] ? __pfx_gud_probe+0x10/0x10 [ 1317.126044][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.126093][ T7327] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1317.126147][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1317.126198][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.126245][ T7327] ? __pm_runtime_set_status+0x13c/0x970 [ 1317.126303][ T7327] usb_probe_interface+0x386/0x9b0 [ 1317.126372][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1317.126438][ T7327] ? kernfs_put+0x3f/0x60 [ 1317.126483][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.126530][ T7327] ? sysfs_create_link+0x68/0xc0 [ 1317.126570][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1317.126635][ T7327] really_probe+0x241/0xa60 [ 1317.126685][ T7327] __driver_probe_device+0x210/0x460 [ 1317.126732][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.126783][ T7327] driver_probe_device+0x4a/0x140 [ 1317.126832][ T7327] __device_attach_driver+0x1df/0x320 [ 1317.126882][ T7327] ? __pfx___device_attach_driver+0x10/0x10 [ 1317.126931][ T7327] bus_for_each_drv+0x159/0x1e0 [ 1317.126970][ T7327] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1317.127008][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.127054][ T7327] ? lockdep_hardirqs_on+0x7d/0x110 [ 1317.127109][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.127156][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1317.127211][ T7327] __device_attach+0x1e4/0x4d0 [ 1317.127259][ T7327] ? __pfx___device_attach+0x10/0x10 [ 1317.127309][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.127356][ T7327] ? do_raw_spin_unlock+0x145/0x1e0 [ 1317.127405][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.127458][ T7327] device_initial_probe+0xaf/0xd0 [ 1317.127509][ T7327] bus_probe_device+0x64/0x160 [ 1317.127555][ T7327] device_add+0x121d/0x1970 [ 1317.127612][ T7327] ? __pfx_device_add+0x10/0x10 [ 1317.127666][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.127713][ T7327] ? mark_held_locks+0x40/0x70 [ 1317.127774][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.127822][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.127875][ T7327] usb_set_configuration+0xd97/0x1c60 [ 1317.127946][ T7327] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1317.127994][ T7327] usb_generic_driver_probe+0xa1/0xe0 [ 1317.128044][ T7327] usb_probe_device+0xef/0x400 [ 1317.128101][ T7327] ? __pfx_usb_probe_device+0x10/0x10 [ 1317.128160][ T7327] really_probe+0x241/0xa60 [ 1317.128209][ T7327] __driver_probe_device+0x210/0x460 [ 1317.128256][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.128307][ T7327] driver_probe_device+0x4a/0x140 [ 1317.128355][ T7327] __device_attach_driver+0x1df/0x320 [ 1317.128405][ T7327] ? __pfx___device_attach_driver+0x10/0x10 [ 1317.128459][ T7327] bus_for_each_drv+0x159/0x1e0 [ 1317.128497][ T7327] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1317.128534][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.128581][ T7327] ? lockdep_hardirqs_on+0x7d/0x110 [ 1317.128635][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.128682][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1317.128737][ T7327] __device_attach+0x1e4/0x4d0 [ 1317.128785][ T7327] ? __pfx___device_attach+0x10/0x10 [ 1317.128834][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.128880][ T7327] ? do_raw_spin_unlock+0x145/0x1e0 [ 1317.128926][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.128976][ T7327] device_initial_probe+0xaf/0xd0 [ 1317.129027][ T7327] bus_probe_device+0x64/0x160 [ 1317.129070][ T7327] device_add+0x121d/0x1970 [ 1317.129126][ T7327] ? __pfx_device_add+0x10/0x10 [ 1317.129179][ T7327] ? usb_detect_static_quirks+0x335/0x3e0 [ 1317.129232][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.129284][ T7327] usb_new_device.part.0+0xcc2/0x1686 [ 1317.129343][ T7327] ? do_raw_spin_lock+0x128/0x260 [ 1317.129387][ T7327] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1317.129447][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.129494][ T7327] ? mark_held_locks+0x40/0x70 [ 1317.129554][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.129604][ T7327] hub_event.cold+0x1e3/0xe90 [ 1317.129678][ T7327] ? __pfx_hub_event+0x10/0x10 [ 1317.129732][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.129778][ T7327] ? mark_lock+0xe60/0x1020 [ 1317.129841][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.129887][ T7327] ? lock_acquire+0x1d1/0x380 [ 1317.129921][ T7327] ? process_one_work+0xa2c/0x1b10 [ 1317.129976][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.130024][ T7327] ? process_one_work+0x906/0x1b10 [ 1317.130078][ T7327] ? process_one_work+0x906/0x1b10 [ 1317.130131][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.130183][ T7327] process_one_work+0xac7/0x1b10 [ 1317.130247][ T7327] ? __pfx_process_one_work+0x10/0x10 [ 1317.130303][ T7327] ? lock_acquire+0x1d1/0x380 [ 1317.130345][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.130395][ T7327] worker_thread+0x5ef/0xe50 [ 1317.130463][ T7327] ? kthread+0x13a/0x450 [ 1317.130511][ T7327] ? __pfx_worker_thread+0x10/0x10 [ 1317.130564][ T7327] kthread+0x373/0x450 [ 1317.130612][ T7327] ? __pfx_kthread+0x10/0x10 [ 1317.130663][ T7327] ret_from_fork+0x730/0xd60 [ 1317.130703][ T7327] ? __pfx_ret_from_fork+0x10/0x10 [ 1317.130740][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.130786][ T7327] ? rcu_is_watching+0x13/0xc0 [ 1317.130833][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.130880][ T7327] ? __switch_to+0x800/0x10f0 [ 1317.130929][ T7327] ? __switch_to_asm+0x39/0x70 [ 1317.130965][ T7327] ? __pfx_kthread+0x10/0x10 [ 1317.131016][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1317.131064][ T7327] [ 1317.131079][ T7327] [ 1317.131088][ T7327] Allocated by task 14955: [ 1317.131106][ T7327] kasan_save_stack+0x30/0x50 [ 1317.131162][ T7327] kasan_save_track+0x14/0x30 [ 1317.131215][ T7327] __kasan_kmalloc+0xaa/0xb0 [ 1317.131267][ T7327] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 1317.131327][ T7327] kmalloc_reserve+0xe8/0x350 [ 1317.131386][ T7327] __alloc_skb+0x185/0x710 [ 1317.131431][ T7327] nsim_dev_trap_report_work+0x2af/0xd20 [ 1317.131484][ T7327] process_one_work+0xac7/0x1b10 [ 1317.131535][ T7327] worker_thread+0x5ef/0xe50 [ 1317.131586][ T7327] kthread+0x373/0x450 [ 1317.131631][ T7327] ret_from_fork+0x730/0xd60 [ 1317.131665][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1317.131698][ T7327] [ 1317.131708][ T7327] Freed by task 14955: [ 1317.131725][ T7327] kasan_save_stack+0x30/0x50 [ 1317.131778][ T7327] kasan_save_track+0x14/0x30 [ 1317.131832][ T7327] kasan_save_free_info+0x3b/0x70 [ 1317.131875][ T7327] __kasan_slab_free+0x5f/0x80 [ 1317.131930][ T7327] kfree+0x22b/0x6d0 [ 1317.131968][ T7327] skb_free_head+0xb9/0x160 [ 1317.132004][ T7327] skb_release_data+0x6c5/0x8e0 [ 1317.132047][ T7327] consume_skb+0xc4/0x110 [ 1317.132095][ T7327] nsim_dev_trap_report_work+0x8de/0xd20 [ 1317.132147][ T7327] process_one_work+0xac7/0x1b10 [ 1317.132198][ T7327] worker_thread+0x5ef/0xe50 [ 1317.132248][ T7327] kthread+0x373/0x450 [ 1317.132292][ T7327] ret_from_fork+0x730/0xd60 [ 1317.132325][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1317.132358][ T7327] [ 1317.132367][ T7327] The buggy address belongs to the object at ffff888037150000 [ 1317.132367][ T7327] which belongs to the cache kmalloc-4k of size 4096 [ 1317.132397][ T7327] The buggy address is located 1248 bytes inside of [ 1317.132397][ T7327] freed 4096-byte region [ffff888037150000, ffff888037151000) [ 1317.132440][ T7327] [ 1317.132449][ T7327] The buggy address belongs to the physical page: [ 1317.132465][ T7327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37150 [ 1317.132499][ T7327] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1317.132530][ T7327] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1317.132563][ T7327] page_type: f5(slab) [ 1317.132595][ T7327] raw: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1317.132631][ T7327] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1317.132667][ T7327] head: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1317.132703][ T7327] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1317.132739][ T7327] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1317.132775][ T7327] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1317.132798][ T7327] page dumped because: kasan: bad access detected [ 1317.132816][ T7327] page_owner tracks the page as allocated [ 1317.132829][ T7327] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6520, tgid 6520 (kworker/u8:19), ts 740646061328 [ 1317.132889][ T7327] post_alloc_hook+0xfd/0x120 [ 1317.132929][ T7327] get_page_from_freelist+0x110d/0x35d0 [ 1317.132976][ T7327] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1317.133025][ T7327] new_slab+0xa9/0x6e0 [ 1317.133066][ T7327] refill_objects+0xe3/0x410 [ 1317.133110][ T7327] __pcs_replace_empty_main+0x35e/0x650 [ 1317.133154][ T7327] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 1317.133210][ T7327] kmalloc_reserve+0xe8/0x350 [ 1317.133266][ T7327] __alloc_skb+0x185/0x710 [ 1317.133305][ T7327] nsim_dev_trap_report_work+0x2af/0xd20 [ 1317.133356][ T7327] process_one_work+0xac7/0x1b10 [ 1317.133407][ T7327] worker_thread+0x5ef/0xe50 [ 1317.133462][ T7327] kthread+0x373/0x450 [ 1317.133506][ T7327] ret_from_fork+0x730/0xd60 [ 1317.133539][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1317.133572][ T7327] page last free pid 11487 tgid 11487 ts 740194084880 stack trace: [ 1317.133597][ T7327] __free_frozen_pages+0x79f/0x10f0 [ 1317.133635][ T7327] qlist_free_all+0x47/0xf0 [ 1317.133683][ T7327] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1317.133736][ T7327] __kasan_slab_alloc+0x69/0x90 [ 1317.133793][ T7327] kmem_cache_alloc_noprof+0x269/0x6a0 [ 1317.133844][ T7327] ptlock_alloc+0x1f/0x70 [ 1317.133881][ T7327] pte_alloc_one+0x82/0x3d0 [ 1317.133929][ T7327] __do_fault+0x26c/0x440 [ 1317.133977][ T7327] do_fault+0x585/0x1830 [ 1317.134032][ T7327] __handle_mm_fault+0x150b/0x2f60 [ 1317.134071][ T7327] handle_mm_fault+0x363/0xa20 [ 1317.134109][ T7327] do_user_addr_fault+0x59c/0x12f0 [ 1317.134152][ T7327] exc_page_fault+0x6f/0xd0 [ 1317.134201][ T7327] asm_exc_page_fault+0x26/0x30 [ 1317.134237][ T7327] [ 1317.134246][ T7327] Memory state around the buggy address: [ 1317.134264][ T7327] ffff888037150380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.134291][ T7327] ffff888037150400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.134319][ T7327] >ffff888037150480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.134341][ T7327] ^ [ 1317.134363][ T7327] ffff888037150500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.134390][ T7327] ffff888037150580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.134412][ T7327] ================================================================== [ 1317.175646][ T7327] ================================================================== [ 1317.175668][ T7327] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0x94e/0xc60 [ 1317.175731][ T7327] Read of size 256 at addr ffff888037150440 by task kworker/0:16/7327 [ 1317.175762][ T7327] [ 1317.175782][ T7327] CPU: 0 UID: 0 PID: 7327 Comm: kworker/0:16 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1317.175841][ T7327] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1317.175858][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1317.175885][ T7327] Workqueue: usb_hub_wq hub_event [ 1317.175940][ T7327] Call Trace: [ 1317.175953][ T7327] [ 1317.175968][ T7327] dump_stack_lvl+0x100/0x190 [ 1317.176020][ T7327] print_report+0x13d/0x4b0 [ 1317.176079][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.176127][ T7327] ? __virt_addr_valid+0x239/0x430 [ 1317.176191][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1317.176248][ T7327] kasan_report+0xdf/0x1c0 [ 1317.176287][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1317.176350][ T7327] kasan_check_range+0x10f/0x1e0 [ 1317.176395][ T7327] __asan_memcpy+0x23/0x60 [ 1317.176450][ T7327] fbcon_prepare_logo+0x94e/0xc60 [ 1317.176517][ T7327] fbcon_init+0x1065/0x1830 [ 1317.176576][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.176627][ T7327] visual_init+0x320/0x620 [ 1317.176694][ T7327] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1317.176747][ T7327] do_take_over_console+0x501/0x5d0 [ 1317.176796][ T7327] do_fbcon_takeover+0xe9/0x210 [ 1317.176852][ T7327] fbcon_fb_registered+0x364/0x4b0 [ 1317.176915][ T7327] do_register_framebuffer+0x503/0x870 [ 1317.176974][ T7327] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1317.177037][ T7327] ? find_held_lock+0x2b/0x80 [ 1317.177094][ T7327] register_framebuffer+0x23/0x40 [ 1317.177149][ T7327] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1317.177224][ T7327] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1317.177289][ T7327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1317.177357][ T7327] drm_fb_helper_initial_config+0x44/0x60 [ 1317.177414][ T7327] drm_fbdev_client_hotplug+0x19e/0x220 [ 1317.177469][ T7327] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1317.177519][ T7327] drm_client_register+0x197/0x280 [ 1317.177579][ T7327] drm_fbdev_client_setup+0x155/0x480 [ 1317.177630][ T7327] drm_client_setup+0x160/0x1a0 [ 1317.177677][ T7327] gud_probe+0x186c/0x1c60 [ 1317.177738][ T7327] ? __pfx_gud_probe+0x10/0x10 [ 1317.177786][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.177835][ T7327] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1317.177889][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1317.177941][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.177988][ T7327] ? __pm_runtime_set_status+0x13c/0x970 [ 1317.178047][ T7327] usb_probe_interface+0x386/0x9b0 [ 1317.178115][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1317.178178][ T7327] ? kernfs_put+0x3f/0x60 [ 1317.178224][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.178271][ T7327] ? sysfs_create_link+0x68/0xc0 [ 1317.178312][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1317.178377][ T7327] really_probe+0x241/0xa60 [ 1317.178429][ T7327] __driver_probe_device+0x210/0x460 [ 1317.178477][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.178527][ T7327] driver_probe_device+0x4a/0x140 [ 1317.178576][ T7327] __device_attach_driver+0x1df/0x320 [ 1317.178627][ T7327] ? __pfx___device_attach_driver+0x10/0x10 [ 1317.178676][ T7327] bus_for_each_drv+0x159/0x1e0 [ 1317.178715][ T7327] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1317.178752][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.178800][ T7327] ? lockdep_hardirqs_on+0x7d/0x110 [ 1317.178855][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.178902][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1317.178957][ T7327] __device_attach+0x1e4/0x4d0 [ 1317.179005][ T7327] ? __pfx___device_attach+0x10/0x10 [ 1317.179054][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.179100][ T7327] ? do_raw_spin_unlock+0x145/0x1e0 [ 1317.179146][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.179197][ T7327] device_initial_probe+0xaf/0xd0 [ 1317.179248][ T7327] bus_probe_device+0x64/0x160 [ 1317.179291][ T7327] device_add+0x121d/0x1970 [ 1317.179348][ T7327] ? __pfx_device_add+0x10/0x10 [ 1317.179403][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.179456][ T7327] ? mark_held_locks+0x40/0x70 [ 1317.179519][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.179566][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.179618][ T7327] usb_set_configuration+0xd97/0x1c60 [ 1317.179689][ T7327] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1317.179736][ T7327] usb_generic_driver_probe+0xa1/0xe0 [ 1317.179785][ T7327] usb_probe_device+0xef/0x400 [ 1317.179842][ T7327] ? __pfx_usb_probe_device+0x10/0x10 [ 1317.179901][ T7327] really_probe+0x241/0xa60 [ 1317.179950][ T7327] __driver_probe_device+0x210/0x460 [ 1317.179997][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.180048][ T7327] driver_probe_device+0x4a/0x140 [ 1317.180096][ T7327] __device_attach_driver+0x1df/0x320 [ 1317.180147][ T7327] ? __pfx___device_attach_driver+0x10/0x10 [ 1317.180197][ T7327] bus_for_each_drv+0x159/0x1e0 [ 1317.180234][ T7327] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1317.180272][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.180318][ T7327] ? lockdep_hardirqs_on+0x7d/0x110 [ 1317.180373][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.180419][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1317.180478][ T7327] __device_attach+0x1e4/0x4d0 [ 1317.180526][ T7327] ? __pfx___device_attach+0x10/0x10 [ 1317.180576][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.180623][ T7327] ? do_raw_spin_unlock+0x145/0x1e0 [ 1317.180668][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.180719][ T7327] device_initial_probe+0xaf/0xd0 [ 1317.180769][ T7327] bus_probe_device+0x64/0x160 [ 1317.180813][ T7327] device_add+0x121d/0x1970 [ 1317.180869][ T7327] ? __pfx_device_add+0x10/0x10 [ 1317.180923][ T7327] ? usb_detect_static_quirks+0x335/0x3e0 [ 1317.180976][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.181028][ T7327] usb_new_device.part.0+0xcc2/0x1686 [ 1317.181087][ T7327] ? do_raw_spin_lock+0x128/0x260 [ 1317.181131][ T7327] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1317.181187][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.181235][ T7327] ? mark_held_locks+0x40/0x70 [ 1317.181295][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.181346][ T7327] hub_event.cold+0x1e3/0xe90 [ 1317.181421][ T7327] ? __pfx_hub_event+0x10/0x10 [ 1317.181478][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.181525][ T7327] ? mark_lock+0xe60/0x1020 [ 1317.181588][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.181635][ T7327] ? lock_acquire+0x1d1/0x380 [ 1317.181669][ T7327] ? process_one_work+0xa2c/0x1b10 [ 1317.181725][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.181773][ T7327] ? process_one_work+0x906/0x1b10 [ 1317.181827][ T7327] ? process_one_work+0x906/0x1b10 [ 1317.181881][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.181933][ T7327] process_one_work+0xac7/0x1b10 [ 1317.181998][ T7327] ? __pfx_process_one_work+0x10/0x10 [ 1317.182055][ T7327] ? lock_acquire+0x1d1/0x380 [ 1317.182096][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.182147][ T7327] worker_thread+0x5ef/0xe50 [ 1317.182211][ T7327] ? kthread+0x13a/0x450 [ 1317.182259][ T7327] ? __pfx_worker_thread+0x10/0x10 [ 1317.182314][ T7327] kthread+0x373/0x450 [ 1317.182362][ T7327] ? __pfx_kthread+0x10/0x10 [ 1317.182414][ T7327] ret_from_fork+0x730/0xd60 [ 1317.182457][ T7327] ? __pfx_ret_from_fork+0x10/0x10 [ 1317.182495][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.182542][ T7327] ? rcu_is_watching+0x13/0xc0 [ 1317.182589][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.182636][ T7327] ? __switch_to+0x800/0x10f0 [ 1317.182685][ T7327] ? __switch_to_asm+0x39/0x70 [ 1317.182722][ T7327] ? __pfx_kthread+0x10/0x10 [ 1317.182773][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1317.182821][ T7327] [ 1317.182836][ T7327] [ 1317.182845][ T7327] Allocated by task 14955: [ 1317.182863][ T7327] kasan_save_stack+0x30/0x50 [ 1317.182918][ T7327] kasan_save_track+0x14/0x30 [ 1317.182971][ T7327] __kasan_kmalloc+0xaa/0xb0 [ 1317.183024][ T7327] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 1317.183080][ T7327] kmalloc_reserve+0xe8/0x350 [ 1317.183138][ T7327] __alloc_skb+0x185/0x710 [ 1317.183178][ T7327] nsim_dev_trap_report_work+0x2af/0xd20 [ 1317.183231][ T7327] process_one_work+0xac7/0x1b10 [ 1317.183282][ T7327] worker_thread+0x5ef/0xe50 [ 1317.183332][ T7327] kthread+0x373/0x450 [ 1317.183377][ T7327] ret_from_fork+0x730/0xd60 [ 1317.183427][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1317.183459][ T7327] [ 1317.183468][ T7327] Freed by task 14955: [ 1317.183486][ T7327] kasan_save_stack+0x30/0x50 [ 1317.183539][ T7327] kasan_save_track+0x14/0x30 [ 1317.183592][ T7327] kasan_save_free_info+0x3b/0x70 [ 1317.183635][ T7327] __kasan_slab_free+0x5f/0x80 [ 1317.183691][ T7327] kfree+0x22b/0x6d0 [ 1317.183729][ T7327] skb_free_head+0xb9/0x160 [ 1317.183764][ T7327] skb_release_data+0x6c5/0x8e0 [ 1317.183808][ T7327] consume_skb+0xc4/0x110 [ 1317.183856][ T7327] nsim_dev_trap_report_work+0x8de/0xd20 [ 1317.183907][ T7327] process_one_work+0xac7/0x1b10 [ 1317.183959][ T7327] worker_thread+0x5ef/0xe50 [ 1317.184011][ T7327] kthread+0x373/0x450 [ 1317.184058][ T7327] ret_from_fork+0x730/0xd60 [ 1317.184092][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1317.184127][ T7327] [ 1317.184136][ T7327] The buggy address belongs to the object at ffff888037150000 [ 1317.184136][ T7327] which belongs to the cache kmalloc-4k of size 4096 [ 1317.184167][ T7327] The buggy address is located 1088 bytes inside of [ 1317.184167][ T7327] freed 4096-byte region [ffff888037150000, ffff888037151000) [ 1317.184205][ T7327] [ 1317.184215][ T7327] The buggy address belongs to the physical page: [ 1317.184231][ T7327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37150 [ 1317.184264][ T7327] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1317.184295][ T7327] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1317.184328][ T7327] page_type: f5(slab) [ 1317.184359][ T7327] raw: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1317.184396][ T7327] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1317.184437][ T7327] head: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1317.184472][ T7327] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1317.184508][ T7327] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1317.184543][ T7327] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1317.184566][ T7327] page dumped because: kasan: bad access detected [ 1317.184583][ T7327] page_owner tracks the page as allocated [ 1317.184596][ T7327] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6520, tgid 6520 (kworker/u8:19), ts 740646061328 [ 1317.184657][ T7327] post_alloc_hook+0xfd/0x120 [ 1317.184697][ T7327] get_page_from_freelist+0x110d/0x35d0 [ 1317.184743][ T7327] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1317.184792][ T7327] new_slab+0xa9/0x6e0 [ 1317.184832][ T7327] refill_objects+0xe3/0x410 [ 1317.184876][ T7327] __pcs_replace_empty_main+0x35e/0x650 [ 1317.184920][ T7327] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 1317.184976][ T7327] kmalloc_reserve+0xe8/0x350 [ 1317.185032][ T7327] __alloc_skb+0x185/0x710 [ 1317.185072][ T7327] nsim_dev_trap_report_work+0x2af/0xd20 [ 1317.185124][ T7327] process_one_work+0xac7/0x1b10 [ 1317.185176][ T7327] worker_thread+0x5ef/0xe50 [ 1317.185226][ T7327] kthread+0x373/0x450 [ 1317.185270][ T7327] ret_from_fork+0x730/0xd60 [ 1317.185303][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1317.185336][ T7327] page last free pid 11487 tgid 11487 ts 740194084880 stack trace: [ 1317.185362][ T7327] __free_frozen_pages+0x79f/0x10f0 [ 1317.185399][ T7327] qlist_free_all+0x47/0xf0 [ 1317.185452][ T7327] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1317.185505][ T7327] __kasan_slab_alloc+0x69/0x90 [ 1317.185563][ T7327] kmem_cache_alloc_noprof+0x269/0x6a0 [ 1317.185614][ T7327] ptlock_alloc+0x1f/0x70 [ 1317.185652][ T7327] pte_alloc_one+0x82/0x3d0 [ 1317.185700][ T7327] __do_fault+0x26c/0x440 [ 1317.185748][ T7327] do_fault+0x585/0x1830 [ 1317.185804][ T7327] __handle_mm_fault+0x150b/0x2f60 [ 1317.185843][ T7327] handle_mm_fault+0x363/0xa20 [ 1317.185881][ T7327] do_user_addr_fault+0x59c/0x12f0 [ 1317.185924][ T7327] exc_page_fault+0x6f/0xd0 [ 1317.185973][ T7327] asm_exc_page_fault+0x26/0x30 [ 1317.186009][ T7327] [ 1317.186018][ T7327] Memory state around the buggy address: [ 1317.186037][ T7327] ffff888037150300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.186065][ T7327] ffff888037150380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.186093][ T7327] >ffff888037150400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.186114][ T7327] ^ [ 1317.186135][ T7327] ffff888037150480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.186163][ T7327] ffff888037150500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.186185][ T7327] ================================================================== [ 1317.734653][ T7327] ================================================================== [ 1317.734677][ T7327] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0x94e/0xc60 [ 1317.734744][ T7327] Read of size 256 at addr ffff8880371503a0 by task kworker/0:16/7327 [ 1317.734777][ T7327] [ 1317.734798][ T7327] CPU: 0 UID: 0 PID: 7327 Comm: kworker/0:16 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1317.734859][ T7327] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1317.734877][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1317.734905][ T7327] Workqueue: usb_hub_wq hub_event [ 1317.734963][ T7327] Call Trace: [ 1317.734976][ T7327] [ 1317.734991][ T7327] dump_stack_lvl+0x100/0x190 [ 1317.735045][ T7327] print_report+0x13d/0x4b0 [ 1317.735107][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.735158][ T7327] ? __virt_addr_valid+0x239/0x430 [ 1317.735224][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1317.735283][ T7327] kasan_report+0xdf/0x1c0 [ 1317.735323][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1317.735388][ T7327] kasan_check_range+0x10f/0x1e0 [ 1317.735438][ T7327] __asan_memcpy+0x23/0x60 [ 1317.735490][ T7327] fbcon_prepare_logo+0x94e/0xc60 [ 1317.735557][ T7327] fbcon_init+0x1065/0x1830 [ 1317.735617][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.735669][ T7327] visual_init+0x320/0x620 [ 1317.735735][ T7327] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1317.735790][ T7327] do_take_over_console+0x501/0x5d0 [ 1317.735840][ T7327] do_fbcon_takeover+0xe9/0x210 [ 1317.735894][ T7327] fbcon_fb_registered+0x364/0x4b0 [ 1317.735962][ T7327] do_register_framebuffer+0x503/0x870 [ 1317.736020][ T7327] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1317.736085][ T7327] ? find_held_lock+0x2b/0x80 [ 1317.736143][ T7327] register_framebuffer+0x23/0x40 [ 1317.736200][ T7327] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1317.736279][ T7327] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1317.736345][ T7327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1317.736413][ T7327] drm_fb_helper_initial_config+0x44/0x60 [ 1317.736476][ T7327] drm_fbdev_client_hotplug+0x19e/0x220 [ 1317.736528][ T7327] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1317.736578][ T7327] drm_client_register+0x197/0x280 [ 1317.736640][ T7327] drm_fbdev_client_setup+0x155/0x480 [ 1317.736694][ T7327] drm_client_setup+0x160/0x1a0 [ 1317.736742][ T7327] gud_probe+0x186c/0x1c60 [ 1317.736803][ T7327] ? __pfx_gud_probe+0x10/0x10 [ 1317.736853][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.736903][ T7327] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1317.736958][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1317.737011][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.737061][ T7327] ? __pm_runtime_set_status+0x13c/0x970 [ 1317.737123][ T7327] usb_probe_interface+0x386/0x9b0 [ 1317.737195][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1317.737258][ T7327] ? kernfs_put+0x3f/0x60 [ 1317.737306][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.737357][ T7327] ? sysfs_create_link+0x68/0xc0 [ 1317.737399][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1317.737473][ T7327] really_probe+0x241/0xa60 [ 1317.737523][ T7327] __driver_probe_device+0x210/0x460 [ 1317.737573][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.737625][ T7327] driver_probe_device+0x4a/0x140 [ 1317.737676][ T7327] __device_attach_driver+0x1df/0x320 [ 1317.737728][ T7327] ? __pfx___device_attach_driver+0x10/0x10 [ 1317.737779][ T7327] bus_for_each_drv+0x159/0x1e0 [ 1317.737819][ T7327] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1317.737858][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.737906][ T7327] ? lockdep_hardirqs_on+0x7d/0x110 [ 1317.737964][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.738012][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1317.738069][ T7327] __device_attach+0x1e4/0x4d0 [ 1317.738120][ T7327] ? __pfx___device_attach+0x10/0x10 [ 1317.738171][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.738220][ T7327] ? do_raw_spin_unlock+0x145/0x1e0 [ 1317.738268][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.738320][ T7327] device_initial_probe+0xaf/0xd0 [ 1317.738374][ T7327] bus_probe_device+0x64/0x160 [ 1317.738419][ T7327] device_add+0x121d/0x1970 [ 1317.738484][ T7327] ? __pfx_device_add+0x10/0x10 [ 1317.738539][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.738588][ T7327] ? mark_held_locks+0x40/0x70 [ 1317.738652][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.738701][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.738756][ T7327] usb_set_configuration+0xd97/0x1c60 [ 1317.738829][ T7327] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1317.738879][ T7327] usb_generic_driver_probe+0xa1/0xe0 [ 1317.738929][ T7327] usb_probe_device+0xef/0x400 [ 1317.738988][ T7327] ? __pfx_usb_probe_device+0x10/0x10 [ 1317.739050][ T7327] really_probe+0x241/0xa60 [ 1317.739100][ T7327] __driver_probe_device+0x210/0x460 [ 1317.739149][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.739200][ T7327] driver_probe_device+0x4a/0x140 [ 1317.739255][ T7327] __device_attach_driver+0x1df/0x320 [ 1317.739306][ T7327] ? __pfx___device_attach_driver+0x10/0x10 [ 1317.739357][ T7327] bus_for_each_drv+0x159/0x1e0 [ 1317.739396][ T7327] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1317.739443][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.739492][ T7327] ? lockdep_hardirqs_on+0x7d/0x110 [ 1317.739549][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.739597][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1317.739653][ T7327] __device_attach+0x1e4/0x4d0 [ 1317.739703][ T7327] ? __pfx___device_attach+0x10/0x10 [ 1317.739754][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.739802][ T7327] ? do_raw_spin_unlock+0x145/0x1e0 [ 1317.739848][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.739900][ T7327] device_initial_probe+0xaf/0xd0 [ 1317.739951][ T7327] bus_probe_device+0x64/0x160 [ 1317.739996][ T7327] device_add+0x121d/0x1970 [ 1317.740055][ T7327] ? __pfx_device_add+0x10/0x10 [ 1317.740109][ T7327] ? usb_detect_static_quirks+0x335/0x3e0 [ 1317.740162][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.740215][ T7327] usb_new_device.part.0+0xcc2/0x1686 [ 1317.740275][ T7327] ? do_raw_spin_lock+0x128/0x260 [ 1317.740320][ T7327] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 1317.740377][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.740429][ T7327] ? mark_held_locks+0x40/0x70 [ 1317.740493][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.740546][ T7327] hub_event.cold+0x1e3/0xe90 [ 1317.740623][ T7327] ? __pfx_hub_event+0x10/0x10 [ 1317.740677][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.740725][ T7327] ? mark_lock+0xe60/0x1020 [ 1317.740789][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.740837][ T7327] ? lock_acquire+0x1d1/0x380 [ 1317.740871][ T7327] ? process_one_work+0xa2c/0x1b10 [ 1317.740929][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.740978][ T7327] ? process_one_work+0x906/0x1b10 [ 1317.741034][ T7327] ? process_one_work+0x906/0x1b10 [ 1317.741089][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.741143][ T7327] process_one_work+0xac7/0x1b10 [ 1317.741209][ T7327] ? __pfx_process_one_work+0x10/0x10 [ 1317.741268][ T7327] ? lock_acquire+0x1d1/0x380 [ 1317.741310][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.741361][ T7327] worker_thread+0x5ef/0xe50 [ 1317.741432][ T7327] ? kthread+0x13a/0x450 [ 1317.741481][ T7327] ? __pfx_worker_thread+0x10/0x10 [ 1317.741537][ T7327] kthread+0x373/0x450 [ 1317.741587][ T7327] ? __pfx_kthread+0x10/0x10 [ 1317.741640][ T7327] ret_from_fork+0x730/0xd60 [ 1317.741680][ T7327] ? __pfx_ret_from_fork+0x10/0x10 [ 1317.741718][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.741765][ T7327] ? rcu_is_watching+0x13/0xc0 [ 1317.741814][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1317.741862][ T7327] ? __switch_to+0x800/0x10f0 [ 1317.741912][ T7327] ? __switch_to_asm+0x39/0x70 [ 1317.741948][ T7327] ? __pfx_kthread+0x10/0x10 [ 1317.742000][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1317.742048][ T7327] [ 1317.742062][ T7327] [ 1317.742071][ T7327] Allocated by task 14955: [ 1317.742090][ T7327] kasan_save_stack+0x30/0x50 [ 1317.742147][ T7327] kasan_save_track+0x14/0x30 [ 1317.742202][ T7327] __kasan_kmalloc+0xaa/0xb0 [ 1317.742255][ T7327] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 1317.742313][ T7327] kmalloc_reserve+0xe8/0x350 [ 1317.742372][ T7327] __alloc_skb+0x185/0x710 [ 1317.742413][ T7327] nsim_dev_trap_report_work+0x2af/0xd20 [ 1317.742474][ T7327] process_one_work+0xac7/0x1b10 [ 1317.742526][ T7327] worker_thread+0x5ef/0xe50 [ 1317.742579][ T7327] kthread+0x373/0x450 [ 1317.742625][ T7327] ret_from_fork+0x730/0xd60 [ 1317.742658][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1317.742693][ T7327] [ 1317.742702][ T7327] Freed by task 14955: [ 1317.742719][ T7327] kasan_save_stack+0x30/0x50 [ 1317.742775][ T7327] kasan_save_track+0x14/0x30 [ 1317.742830][ T7327] kasan_save_free_info+0x3b/0x70 [ 1317.742874][ T7327] __kasan_slab_free+0x5f/0x80 [ 1317.742932][ T7327] kfree+0x22b/0x6d0 [ 1317.742971][ T7327] skb_free_head+0xb9/0x160 [ 1317.743006][ T7327] skb_release_data+0x6c5/0x8e0 [ 1317.743051][ T7327] consume_skb+0xc4/0x110 [ 1317.743099][ T7327] nsim_dev_trap_report_work+0x8de/0xd20 [ 1317.743153][ T7327] process_one_work+0xac7/0x1b10 [ 1317.743205][ T7327] worker_thread+0x5ef/0xe50 [ 1317.743256][ T7327] kthread+0x373/0x450 [ 1317.743301][ T7327] ret_from_fork+0x730/0xd60 [ 1317.743335][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1317.743368][ T7327] [ 1317.743377][ T7327] The buggy address belongs to the object at ffff888037150000 [ 1317.743377][ T7327] which belongs to the cache kmalloc-4k of size 4096 [ 1317.743408][ T7327] The buggy address is located 928 bytes inside of [ 1317.743408][ T7327] freed 4096-byte region [ffff888037150000, ffff888037151000) [ 1317.743467][ T7327] [ 1317.743477][ T7327] The buggy address belongs to the physical page: [ 1317.743492][ T7327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37150 [ 1317.743527][ T7327] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1317.743559][ T7327] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1317.743592][ T7327] page_type: f5(slab) [ 1317.743625][ T7327] raw: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1317.743661][ T7327] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1317.743699][ T7327] head: 00fff00000000040 ffff88801c02e140 dead000000000100 dead000000000122 [ 1317.743735][ T7327] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1317.743772][ T7327] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1317.743809][ T7327] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1317.743832][ T7327] page dumped because: kasan: bad access detected [ 1317.743850][ T7327] page_owner tracks the page as allocated [ 1317.743864][ T7327] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6520, tgid 6520 (kworker/u8:19), ts 740646061328 [ 1317.743926][ T7327] post_alloc_hook+0xfd/0x120 [ 1317.743968][ T7327] get_page_from_freelist+0x110d/0x35d0 [ 1317.744016][ T7327] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1317.744064][ T7327] new_slab+0xa9/0x6e0 [ 1317.744106][ T7327] refill_objects+0xe3/0x410 [ 1317.744152][ T7327] __pcs_replace_empty_main+0x35e/0x650 [ 1317.744197][ T7327] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 1317.744254][ T7327] kmalloc_reserve+0xe8/0x350 [ 1317.744311][ T7327] __alloc_skb+0x185/0x710 [ 1317.744352][ T7327] nsim_dev_trap_report_work+0x2af/0xd20 [ 1317.744405][ T7327] process_one_work+0xac7/0x1b10 [ 1317.744460][ T7327] worker_thread+0x5ef/0xe50 [ 1317.744512][ T7327] kthread+0x373/0x450 [ 1317.744557][ T7327] ret_from_fork+0x730/0xd60 [ 1317.744591][ T7327] ret_from_fork_asm+0x1a/0x30 [ 1317.744624][ T7327] page last free pid 11487 tgid 11487 ts 740194084880 stack trace: [ 1317.744650][ T7327] __free_frozen_pages+0x79f/0x10f0 [ 1317.744688][ T7327] qlist_free_all+0x47/0xf0 [ 1317.744737][ T7327] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1317.744791][ T7327] __kasan_slab_alloc+0x69/0x90 [ 1317.744850][ T7327] kmem_cache_alloc_noprof+0x269/0x6a0 [ 1317.744902][ T7327] ptlock_alloc+0x1f/0x70 [ 1317.744941][ T7327] pte_alloc_one+0x82/0x3d0 [ 1317.744990][ T7327] __do_fault+0x26c/0x440 [ 1317.745039][ T7327] do_fault+0x585/0x1830 [ 1317.745096][ T7327] __handle_mm_fault+0x150b/0x2f60 [ 1317.745136][ T7327] handle_mm_fault+0x363/0xa20 [ 1317.745174][ T7327] do_user_addr_fault+0x59c/0x12f0 [ 1317.745218][ T7327] exc_page_fault+0x6f/0xd0 [ 1317.745266][ T7327] asm_exc_page_fault+0x26/0x30 [ 1317.745303][ T7327] [ 1317.745312][ T7327] Memory state around the buggy address: [ 1317.745331][ T7327] ffff888037150280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.745359][ T7327] ffff888037150300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.745387][ T7327] >ffff888037150380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.745409][ T7327] ^ [ 1317.745434][ T7327] ffff888037150400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.745462][ T7327] ffff888037150480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1317.745484][ T7327] ================================================================== [ 1318.755728][ T7327] ================================================================== [ 1318.755753][ T7327] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0x94e/0xc60 [ 1318.755825][ T7327] Read of size 256 at addr ffff888037150300 by task kworker/0:16/7327 [ 1318.755858][ T7327] [ 1318.755879][ T7327] CPU: 0 UID: 0 PID: 7327 Comm: kworker/0:16 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1318.755938][ T7327] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1318.755956][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1318.755984][ T7327] Workqueue: usb_hub_wq hub_event [ 1318.756042][ T7327] Call Trace: [ 1318.756055][ T7327] [ 1318.756071][ T7327] dump_stack_lvl+0x100/0x190 [ 1318.756124][ T7327] print_report+0x13d/0x4b0 [ 1318.756185][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.756233][ T7327] ? __virt_addr_valid+0x239/0x430 [ 1318.756299][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1318.756357][ T7327] kasan_report+0xdf/0x1c0 [ 1318.756398][ T7327] ? fbcon_prepare_logo+0x94e/0xc60 [ 1318.756468][ T7327] kasan_check_range+0x10f/0x1e0 [ 1318.756514][ T7327] __asan_memcpy+0x23/0x60 [ 1318.756567][ T7327] fbcon_prepare_logo+0x94e/0xc60 [ 1318.756636][ T7327] fbcon_init+0x1065/0x1830 [ 1318.756697][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.756748][ T7327] visual_init+0x320/0x620 [ 1318.756815][ T7327] do_bind_con_driver.isra.0+0x636/0x9c0 [ 1318.756869][ T7327] do_take_over_console+0x501/0x5d0 [ 1318.756920][ T7327] do_fbcon_takeover+0xe9/0x210 [ 1318.756975][ T7327] fbcon_fb_registered+0x364/0x4b0 [ 1318.757036][ T7327] do_register_framebuffer+0x503/0x870 [ 1318.757095][ T7327] ? __pfx_do_register_framebuffer+0x10/0x10 [ 1318.757158][ T7327] ? find_held_lock+0x2b/0x80 [ 1318.757214][ T7327] register_framebuffer+0x23/0x40 [ 1318.757271][ T7327] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 1318.757347][ T7327] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 1318.757415][ T7327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1318.757491][ T7327] drm_fb_helper_initial_config+0x44/0x60 [ 1318.757550][ T7327] drm_fbdev_client_hotplug+0x19e/0x220 [ 1318.757604][ T7327] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 1318.757657][ T7327] drm_client_register+0x197/0x280 [ 1318.757718][ T7327] drm_fbdev_client_setup+0x155/0x480 [ 1318.757773][ T7327] drm_client_setup+0x160/0x1a0 [ 1318.757821][ T7327] gud_probe+0x186c/0x1c60 [ 1318.757883][ T7327] ? __pfx_gud_probe+0x10/0x10 [ 1318.757934][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.757984][ T7327] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1318.758039][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1318.758093][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.758142][ T7327] ? __pm_runtime_set_status+0x13c/0x970 [ 1318.758202][ T7327] usb_probe_interface+0x386/0x9b0 [ 1318.758273][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1318.758339][ T7327] ? kernfs_put+0x3f/0x60 [ 1318.758386][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.758440][ T7327] ? sysfs_create_link+0x68/0xc0 [ 1318.758481][ T7327] ? __pfx_usb_probe_interface+0x10/0x10 [ 1318.758550][ T7327] really_probe+0x241/0xa60 [ 1318.758601][ T7327] __driver_probe_device+0x210/0x460 [ 1318.758651][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.758703][ T7327] driver_probe_device+0x4a/0x140 [ 1318.758756][ T7327] __device_attach_driver+0x1df/0x320 [ 1318.758808][ T7327] ? __pfx___device_attach_driver+0x10/0x10 [ 1318.758859][ T7327] bus_for_each_drv+0x159/0x1e0 [ 1318.758899][ T7327] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1318.758937][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.758987][ T7327] ? lockdep_hardirqs_on+0x7d/0x110 [ 1318.759044][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.759092][ T7327] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1318.759150][ T7327] __device_attach+0x1e4/0x4d0 [ 1318.759201][ T7327] ? __pfx___device_attach+0x10/0x10 [ 1318.759252][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.759300][ T7327] ? do_raw_spin_unlock+0x145/0x1e0 [ 1318.759347][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.759400][ T7327] device_initial_probe+0xaf/0xd0 [ 1318.759458][ T7327] bus_probe_device+0x64/0x160 [ 1318.759502][ T7327] device_add+0x121d/0x1970 [ 1318.759562][ T7327] ? __pfx_device_add+0x10/0x10 [ 1318.759618][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.759667][ T7327] ? mark_held_locks+0x40/0x70 [ 1318.759731][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.759782][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.759838][ T7327] usb_set_configuration+0xd97/0x1c60 [ 1318.759912][ T7327] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1318.759962][ T7327] usb_generic_driver_probe+0xa1/0xe0 [ 1318.760013][ T7327] usb_probe_device+0xef/0x400 [ 1318.760073][ T7327] ? __pfx_usb_probe_device+0x10/0x10 [ 1318.760134][ T7327] really_probe+0x241/0xa60 [ 1318.760185][ T7327] __driver_probe_device+0x210/0x460 [ 1318.760234][ T7327] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1318.760287][ T7327] driver_probe_device+0x4a/0x140 [ 1318.760339][ T7327] __device_attach_driver+0x1df/0x320 [ 1318.760392][ T7327] ? __pfx___device_attach_driver+0x10/0x10