Extracting prog: 33m20.825974519s Minimizing prog: 27m1.821568821s Simplifying prog options: 9m33.347633255s Extracting C: 1m38.121305468s Simplifying C: 21m3.515527524s 47 programs, 3 VMs, timeouts [15s 1m40s 6m0s] extracting reproducer from 47 programs single: executing 4 programs separately with timeout 15s testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndseq-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}}, 0x0) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bcachefs-truncate detailed listing: executing program 0: syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x800090, &(0x7f0000005f80)=ANY=[@ANYRESDEC, @ANYBLOB="7ab40d920812b31712aebf5d8db36327ff98becda5e07962faff8215a30ec62916b4074a1c15b53809722b4dcb2f0c724259112bb70e9bad005ab1742f042ae13d0ae29e68cdbd7982672640d6d7dc1d6203b0f5b5274363136c7676a31b14808229ff6d8f5c399c914ad00c1439e8fcfad24246037d39f9ed8b", @ANYRES64], 0x1, 0x5bd7, &(0x7f000000bc00)="$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") truncate(&(0x7f0000000340)='./file2\x00', 0x0) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-syz_open_dev$usbfs-socket$rds-socket$packet-setsockopt$packet_fanout-prlimit64-sched_setscheduler-getpid-sched_setscheduler-prlimit64-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-io_setup-openat$qrtrtun-io_submit-sendmsg$rds-setsockopt$RDS_CANCEL_SENT_TO-socket$inet_smc-mount detailed listing: executing program 0: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{0x14}, {}]}) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x143281) r0 = socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='smb3\x00', 0x0, &(0x7f0000000400)) program did not crash single: failed to extract reproducer bisect: bisecting 47 programs with base timeout 15s testing program (duration=26s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 24, 18, 8, 2, 15, 6, 4, 7, 24, 7, 29, 9, 8, 4, 6, 4, 1, 7, 7, 17, 8, 7, 9, 24, 8, 3, 8, 14, 6, 8, 7, 5, 8, 5, 3, 8, 4, 24, 9, 7, 2, 6, 7, 2, 6, 3] detailed listing: executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000300)=""/80, 0x50}], 0x2}}], 0x1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="060100001701c7003199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa91", 0xe9}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f00000001c0)='\x06\x00\x00\x00s\x00') executing program 0: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000180)={0x0, 0x80}}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x94}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000880)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000940)={0x1, 0xb32, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{}, 0xfc, 0x0, 0x0, 0x0, "4210220097b2bb36662d7dd23a59126b470b759d7b9beb929157fbabb8971fdf7268450b731d6d110917f27e538256a669fea5023441247712804650cc7d8236"}}, 0x80}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x20, 0x29, 0x10f}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010003b15000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000020014001280090001007665746800000000040002800800040060000000"], 0x3c}}, 0x0) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000240)=0x8) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, &(0x7f0000000040)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000000)={0x17c04}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) executing program 3: connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) inotify_init1(0x0) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7GJAkEYBeB3x3FcdiXsdmAJIoaWYGpiZmS8VmELNmAvNqO/7K6sHSjC9wWPNzxmYMJbff32Wf/jqarqOXXrsfxMMWlW113Spv1O/oabtzonmT/2Tbpjsq+q5fBUkllfTpftIkmXJodXfA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPsI9AAD//yg1FLI=") executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) executing program 2: r0 = socket(0x0, 0x2, 0x0) write(r0, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_submit(0x0, 0x1, &(0x7f0000000580)=[0x0]) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0xc, 0x0, &(0x7f0000000080)) executing program 1: close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000340)=@gcm_128={{}, "ded3230b29450259", "0e37553bdd6b7cb1f70cf33b43f7ad9b", "ce826994", "1d29e04b07602d61"}, 0x28) executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) executing program 2: mkdir(&(0x7f0000000080)='./bus\x00', 0x0) openat$bsg(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dma_heap(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() lseek(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) executing program 1: syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000000080)=""/120, 0x78}, {&(0x7f0000000100)=""/8, 0x8}, {0x0}], 0x4, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x7}, 0x700) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$KDENABIO(r1, 0x4b36) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) sendmsg$IEEE802154_START_REQ(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r5, 0x4b36) sched_getscheduler(0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x0, 0x0, 0x3, [0x2], [0x80ffff]}) bind$alg(0xffffffffffffffff, 0x0, 0x0) executing program 1: writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000340)="926c242c391961a74a4626bed1b678801a4f54a272558f396d554863d5a949304f37326d148810e5a7512673db03638176e60294570d475dde", 0x39}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000800)=ANY=[@ANYBLOB="000202"], 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @remote}, {0x0, @broadcast}, 0x1c, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 'bond_slave_0\x00'}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$tun(r1, &(0x7f0000000780)=ANY=[], 0x9) executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, 0x0, &(0x7f0000000080)) executing program 1: r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000200)=""/59, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) executing program 0: ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') executing program 2: syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000700)=""/201, 0xc9}], 0x1, 0x7cd3b3b8, 0x0) executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, 0x0, 0x0) executing program 0: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000004200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mkdirat$cgroup(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) executing program 2: syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 0: writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000340)="926c242c391961a74a4626bed1b678801a4f54a272558f396d554863d5a949304f37326d148810e5a7512673db03638176e60294570d475dde", 0x39}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000800)=ANY=[@ANYBLOB="000202"], 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @remote}, {0x0, @broadcast}, 0x1c, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 'bond_slave_0\x00'}) executing program 1: mkdir(&(0x7f0000000080)='./bus\x00', 0x0) openat$bsg(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dma_heap(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() lseek(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = accept$inet6(r0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0) executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES16], 0x5c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000280)=""/169, 0xa9}], 0x1, 0x0, 0x0) executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x44) executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$tun(r1, &(0x7f0000000780)=ANY=[], 0x9) executing program 2: syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000700)=""/201, 0xc9}], 0x1, 0x7cd3b3b8, 0x0) executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000004200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mkdirat$cgroup(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002000d0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x60}}, 0x0) executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}}, 0x0) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = accept$inet6(r0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0) executing program 3: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000180)='./file2\x00', 0x14018, &(0x7f0000000400)=ANY=[@ANYBLOB="63726561746f723d7b19c20300702172743d30309b00603034ad689a04f6913349003b68d80bbeb87a736e2c6e6f646537e4484e63fdc5ac636f6d706f730d63e45479e4a4caa35f04000000c381fd1f840ba90acd0f3b37a1047c38c3d72d0a71267f00c84e40ee3e5cb300000000000000", @ANYRESHEX, @ANYRES16=0x0], 0x9, 0x6d0, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) executing program 1: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{0x14}, {}]}) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x143281) r0 = socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='smb3\x00', 0x0, &(0x7f0000000400)) executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59520000000000000000a000000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff000000000800080000010000"], 0x34}}, 0x0) executing program 2: syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 3: syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x800090, &(0x7f0000005f80)=ANY=[@ANYRESDEC, @ANYBLOB="7ab40d920812b31712aebf5d8db36327ff98becda5e07962faff8215a30ec62916b4074a1c15b53809722b4dcb2f0c724259112bb70e9bad005ab1742f042ae13d0ae29e68cdbd7982672640d6d7dc1d6203b0f5b5274363136c7676a31b14808229ff6d8f5c399c914ad00c1439e8fcfad24246037d39f9ed8b", @ANYRES64], 0x1, 0x5bd7, &(0x7f000000bc00)="$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") truncate(&(0x7f0000000340)='./file2\x00', 0x0) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000240)="4a17a250f12fba83c589b270c85f9b1f", 0x10}], 0x1}], 0x1, 0x0) read$alg(r1, &(0x7f0000000180)=""/191, 0xbf) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81044e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffff", 0x42}], 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f00000002c0)="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", 0x1ca}], 0x1}}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, 0x0, &(0x7f0000000080)) executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}}, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 4 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndseq-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}}, 0x0) failed to boot instance (try 1): failed to create VM: can't ssh into the instance failed to run ["ssh" "-p" "15422" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "root@localhost" "pwd"]: exit status 255 Connection timed out during banner exchange Connection to 127.0.0.1 port 15422 timed out ftruncate: Invalid argument qemu-system-x86_64: warning: hub 0 is not connected to host network [ 0.000000][ T0] Linux version 6.10.0-rc4-syzkaller-00164-g66cc544fd75c (syzkaller@syzkaller) (gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) #0 SMP PREEMPT_DYNAMIC now [ 0.000000][ T0] Command line: root=/dev/sda console=ttyS0 root=/dev/sda1 [ 0.000000][ T0] KERNEL supported cpus: [ 0.000000][ T0] Intel GenuineIntel [ 0.000000][ T0] AMD AuthenticAMD [ 0.000000][ T0] BIOS-provided physical RAM map: [ 0.000000][ T0] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000][ T0] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x0000000000100000-0x000000007ffdcfff] usable [ 0.000000][ T0] BIOS-e820: [mem 0x000000007ffdd000-0x000000007fffffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x0000000100000000-0x000000017fffffff] usable [ 0.000000][ T0] printk: legacy bootconsole [earlyser0] enabled [ 0.000000][ T0] ERROR: earlyprintk= earlyser already used [ 0.000000][ T0] ERROR: earlyprintk= earlyser already used [ 0.000000][ T0] ********************************************************** [ 0.000000][ T0] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 0.000000][ T0] ** ** [ 0.000000][ T0] ** This system shows unhashed kernel memory addresses ** [ 0.000000][ T0] ** via the console, logs, and other interfaces. This ** [ 0.000000][ T0] ** might reduce the security of your system. ** [ 0.000000][ T0] ** ** [ 0.000000][ T0] ** If you see this message and you are not debugging ** [ 0.000000][ T0] ** the kernel, report this immediately to your system ** [ 0.000000][ T0] ** administrator! ** [ 0.000000][ T0] ** ** [ 0.000000][ T0] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 0.000000][ T0] ********************************************************** [ 0.000000][ T0] Malformed early option 'vsyscall' [ 0.000000][ T0] nopcid: PCID feature disabled [ 0.000000][ T0] NX (Execute Disable) protection: active [ 0.000000][ T0] APIC: Static calls initialized [ 0.000000][ T0] SMBIOS 3.0.0 present. [ 0.000000][ T0] DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 0.000000][ T0] DMI: Memory slots populated: 1/1 [ 0.000000][ T0] Hypervisor detected: KVM [ 0.000000][ T0] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000009][ T0] kvm-clock: using sched offset of 4343372209 cycles [ 0.005881][ T0] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.040535][ T0] tsc: Detected 2600.028 MHz processor [ 0.061826][ T0] last_pfn = 0x180000 max_arch_pfn = 0x400000000 [ 0.070565][ T0] MTRR map: 4 entries (3 fixed + 1 variable; max 19), built from 8 variable MTRRs [ 0.084164][ T0] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT [ 0.094985][ T0] last_pfn = 0x7ffdd max_arch_pfn = 0x400000000 [ 0.110959][ T0] found SMP MP-table at [mem 0x000f5b40-0x000f5b4f] [ 0.121123][ T0] Using GB pages for direct mapping [ 0.131476][ T0] ACPI: Early table checksum verification disabled [ 0.150606][ T0] ACPI: RSDP 0x00000000000F5910 000014 (v00 BOCHS ) [ 0.156991][ T0] ACPI: RSDT 0x000000007FFE2925 000048 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.183329][ T0] ACPI: FACP 0x000000007FFE1B2C 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) [ 0.192877][ T0] ACPI: DSDT 0x000000007FFDF040 002AEC (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.218483][ T0] ACPI: FACS 0x000000007FFDF000 000040 [ 0.225163][ T0] ACPI: APIC 0x000000007FFE1C20 0000B0 (v03 BOCHS BXPC 00000001 BXPC 00000001) [ 0.236166][ T0] ACPI: HPET 0x000000007FFE1CD0 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.250028][ T0] ACPI: SRAT 0x000000007FFE1D08 000178 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.259652][ T0] ACPI: MCFG 0x000000007FFE1E80 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.301559][ T0] ACPI: DMAR 0x000000007FFE1EBC 0000C0 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.334596][ T0] ACPI: SSDT 0x000000007FFE1F7C 0008A1 (v01 BOCHS NVDIMM 00000001 BXPC 00000001) [ 0.349002][ T0] ACPI: NFIT 0x000000007FFE281D 0000E0 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.372710][ T0] ACPI: WAET 0x000000007FFE28FD 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.398277][ T0] ACPI: Reserving FACP table memory at [mem 0x7ffe1b2c-0x7ffe1c1f] [ 0.416926][ T0] ACPI: Reserving DSDT table memory at [mem 0x7ffdf040-0x7ffe1b2b] [ 0.440940][ T0] ACPI: Reserving FACS table memory at [mem 0x7ffdf000-0x7ffdf03f] [ 0.454119][ T0] ACPI: Reserving APIC table memory at [mem 0x7ffe1c20-0x7ffe1ccf] [ 0.474502][ T0] ACPI: Reserving HPET table memory at [mem 0x7ffe1cd0-0x7ffe1d07] [ 0.482646][ T0] ACPI: Reserving SRAT table memory at [mem 0x7ffe1d08-0x7ffe1e7f] [ 0.508618][ T0] ACPI: Reserving MCFG table memory at [mem 0x7ffe1e80-0x7ffe1ebb] [ 0.531684][ T0] ACPI: Reserving DMAR table memory at [mem 0x7ffe1ebc-0x7ffe1f7b] [ 0.540689][ T0] ACPI: Reserving SSDT table memory at [mem 0x7ffe1f7c-0x7ffe281c] [ 0.553927][ T0] ACPI: Reserving NFIT table memory at [mem 0x7ffe281d-0x7ffe28fc] [ 0.584146][ T0] ACPI: Reserving WAET table memory at [mem 0x7ffe28fd-0x7ffe2924] [ 0.596721][ T0] SRAT: PXM 0 -> APIC 0x00 -> Node 0 [ 0.619717][ T0] SRAT: PXM 0 -> APIC 0x01 -> Node 0 [ 0.627233][ T0] SRAT: PXM 0 -> APIC 0x02 -> Node 0 [ 0.635287][ T0] SRAT: PXM 0 -> APIC 0x03 -> Node 0 [ 0.653450][ T0] SRAT: PXM 0 -> APIC 0x04 -> Node 0 [ 0.658641][ T0] SRAT: PXM 0 -> APIC 0x05 -> Node 0 [ 0.679046][ T0] SRAT: PXM 0 -> APIC 0x06 -> Node 0 [ 0.684092][ T0] SRAT: PXM 0 -> APIC 0x07 -> Node 0 [ 0.689032][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] [ 0.712328][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0x7fffffff] [ 0.719142][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x17fffffff] [ 0.731751][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x180000000-0x183ffffff] non-volatile [ 0.740741][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x180000000-0x57fffffff] hotplug [ 0.764562][ T0] NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0x7fffffff] -> [mem 0x00000000-0x7fffffff] [ 0.791173][ T0] NUMA: Node 0 [mem 0x00000000-0x7fffffff] + [mem 0x100000000-0x17fffffff] -> [mem 0x00000000-0x17fffffff] [ 0.802784][ T0] Faking node 0 at [mem 0x0000000000000000-0x00000000ffffffff] (4096MB) [ 0.827672][ T0] Faking node 1 at [mem 0x0000000100000000-0x000000017fffffff] (2048MB) [ 0.852480][ T0] NODE_DATA(0) allocated [mem 0x7ffd7000-0x7ffdcfff] [ 0.858652][ T0] NODE_DATA(1) allocated [mem 0x17fff7000-0x17fffcfff] [ 0.919203][ T0] Zone ranges: [ 0.922593][ T0] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.946104][ T0] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.952918][ T0] Normal [mem 0x0000000100000000-0x000000017fffffff] [ 0.976044][ T0] Device empty [ 0.979850][ T0] Movable zone start for each node [ 0.985706][ T0] Early memory node ranges [ 1.007068][ T0] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 1.014057][ T0] node 0: [mem 0x0000000000100000-0x000000007ffdcfff] [ 1.021321][ T0] node 1: [mem 0x0000000100000000-0x000000017fffffff] [ 1.044309][ T0] Initmem setup node 0 [mem 0x0000000000001000-0x000000007ffdcfff] [ 1.066730][ T0] Initmem setup node 1 [mem 0x0000000100000000-0x000000017fffffff] [ 1.075789][ T0] On node 0, zone DMA: 1 pages in unavailable ranges [ 1.097581][ T0] On node 0, zone DMA: 97 pages in unavailable ranges [ 1.187232][ T0] On node 1, zone Normal: 35 pages in unavailable ranges [ 1.478513][ T0] kasan: KernelAddressSanitizer initialized [ 1.508843][ T0] ACPI: PM-Timer IO Port: 0x608 [ 1.516357][ T0] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 1.529011][ T0] IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 [ 1.540945][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) [ 1.550461][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 1.562175][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 1.583293][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 1.606057][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 1.613598][ T0] ACPI: Using ACPI (MADT) for SMP configuration information [ 1.629339][ T0] ACPI: HPET id: 0x8086a201 base: 0xfed00000 [ 1.638882][ T0] TSC deadline timer available [ 1.645781][ T0] CPU topo: Max. logical packages: 2 [ 1.654018][ T0] CPU topo: Max. logical dies: 2 [ 1.661951][ T0] CPU topo: Max. dies per package: 1 [ 1.674429][ T0] CPU topo: Max. threads per core: 2 [ 1.683706][ T0] CPU topo: Num. cores per package: 2 [ 1.696686][ T0] CPU topo: Num. threads per package: 4 [ 1.707394][ T0] CPU topo: Allowing 4 present CPUs plus 4 hotplug CPUs [ 1.719426][ T0] kvm-guest: APIC: eoi() replaced with kvm_guest_apic_eoi_write() [ 1.730851][ T0] kvm-guest: KVM setup pv remote TLB flush [ 1.739734][ T0] kvm-guest: setup PV sched yield [ 1.749630][ T0] PM: hibernation: Registered nosave memory: [mem 0x00000000-0x00000fff] [ 1.764579][ T0] PM: hibernation: Registered nosave memory: [mem 0x0009f000-0x0009ffff] [ 1.775681][ T0] PM: hibernation: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 1.787547][ T0] PM: hibernation: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 1.799316][ T0] PM: hibernation: Registered nosave memory: [mem 0x7ffdd000-0x7fffffff] [ 1.810497][ T0] PM: hibernation: Registered nosave memory: [mem 0x80000000-0xafffffff] [ 1.822022][ T0] PM: hibernation: Registered nosave memory: [mem 0xb0000000-0xbfffffff] [ 1.834021][ T0] PM: hibernation: Registered nosave memory: [mem 0xc0000000-0xfed1bfff] [ 1.843375][ T0] PM: hibernation: Registered nosave memory: [mem 0xfed1c000-0xfed1ffff] [ 1.854563][ T0] PM: hibernation: Registered nosave memory: [mem 0xfed20000-0xfeffbfff] [ 1.866521][ T0] PM: hibernation: Registered nosave memory: [mem 0xfeffc000-0xfeffffff] [ 1.878190][ T0] PM: hibernation: Registered nosave memory: [mem 0xff000000-0xfffbffff] [ 1.889865][ T0] PM: hibernation: Registered nosave memory: [mem 0xfffc0000-0xffffffff] [ 1.900710][ T0] [mem 0xc0000000-0xfed1bfff] available for PCI devices [ 1.910506][ T0] Booting paravirtualized kernel on KVM [ 1.917401][ T0] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 2.274063][ T0] setup_percpu: NR_CPUS:8 nr_cpumask_bits:8 nr_cpu_ids:8 nr_node_ids:2 [ 2.289510][ T0] percpu: Embedded 74 pages/cpu s264712 r8192 d30200 u1048576 [ 2.301102][ T0] kvm-guest: PV spinlocks enabled [ 2.322342][ T0] PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) [ 2.333927][ T0] Kernel command line: earlyprintk=serial net.ifnames=0 sysctl.kernel.hung_task_all_cpu_backtrace=1 ima_policy=tcb nf-conntrack-ftp.ports=20000 nf-conntrack-tftp.ports=20000 nf-conntrack-sip.ports=20000 nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 binder.debug_mask=0 rcupdate.rcu_expedited=1 rcupdate.rcu_cpu_stall_cputime=1 no_hash_pointers page_owner=on sysctl.vm.nr_hugepages=4 sysctl.vm.nr_overcommit_hugepages=4 secretmem.enable=1 sysctl.max_rcu_stall_to_panic=1 msr.allow_writes=off coredump_filter=0xffff root=/dev/sda console=ttyS0 vsyscall=native numa=fake=2 kvm-intel.nested=1 spec_store_bypass_disable=prctl nopcid vivid.n_devs=16 vivid.multiplanar=1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2 netrom.nr_ndevs=16 rose.rose_ndevs=16 smp.csd_lock_timeout=100000 watchdog_thresh=55 workqueue.watchdog_thresh=140 sysctl.net.core.netdev_unregister_timeout_secs=140 dummy_hcd.num=8 panic_on_warn=1 root=/dev/sda console=ttyS0 root=/dev/sda1 [ 2.504604][ T0] Unknown kernel command line parameters "spec_store_bypass_disable=prctl", will be passed to user space. [ 2.519947][ T0] random: crng init done [ 2.527930][ T0] Fallback order for Node 0: 0 1 [ 2.528020][ T0] Fallback order for Node 1: 1 0 [ 2.528090][ T0] Built 2 zonelists, mobility grouping on. Total pages: 1048443 [ 2.549595][ T0] Policy zone: Normal [ 2.554699][ T0] mem auto-init: stack:all(zero), heap alloc:on, heap free:off [ 2.567305][ T0] stackdepot: allocating hash table via alloc_large_system_hash [ 2.574269][ T0] stackdepot hash table entries: 1048576 (order: 12, 16777216 bytes, linear) [ 2.588117][ T0] software IO TLB: area num 8. [ 3.685700][ T0] Memory: 3146484K/4193772K available (165888K kernel code, 39333K rwdata, 37260K rodata, 26024K init, 34336K bss, 1047032K reserved, 0K cma-reserved) [ 3.707661][ T0] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=8, Nodes=2 [ 3.805691][ T0] allocated 83886080 bytes of page_ext [ 3.811436][ T0] Node 0, zone DMA: page owner found early allocated 0 pages [ 3.840815][ T0] Node 0, zone DMA32: page owner found early allocated 10355 pages [ 3.891525][ T0] Node 1, zone Normal: page owner found early allocated 10243 pages [ 3.918467][ T0] Dynamic Preempt: full [ 3.926885][ T0] Running RCU self tests [ 3.936709][ T0] Running RCU synchronous self tests [ 3.945227][ T0] rcu: Preemptible hierarchical RCU implementation. [ 3.955753][ T0] rcu: RCU lockdep checking is enabled. [ 3.963051][ T0] rcu: RCU callback double-/use-after-free debug is enabled. [ 3.972109][ T0] rcu: RCU debug extended QS entry/exit. [ 3.981424][ T0] All grace periods are expedited (rcu_expedited). [ 3.990471][ T0] Trampoline variant of Tasks RCU enabled. [ 3.997318][ T0] Tracing variant of Tasks RCU enabled. [ 4.006017][ T0] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 4.018155][ T0] Running RCU synchronous self tests [ 4.025874][ T0] RCU Tasks: Setting shift to 3 and lim to 1 rcu_task_cb_adjust=1. [ 4.037088][ T0] RCU Tasks Trace: Setting shift to 3 and lim to 1 rcu_task_cb_adjust=1. [ 4.392013][ T0] NR_IRQS: 4352, nr_irqs: 488, preallocated irqs: 16 [ 4.401227][ T0] rcu: srcu_init: Setting srcu_struct sizes based on contention. [ 4.412982][ T0] kfence: initialized - using 2097152 bytes for 255 objects at 0xffff88816da00000-0xffff88816dc00000 [ 4.468875][ T0] Console: colour VGA+ 80x25 [ 4.491394][ T0] printk: legacy console [ttyS0] enabled [ 4.491394][ T0] printk: legacy console [ttyS0] enabled [ 4.500818][ T0] printk: legacy bootconsole [earlyser0] disabled [ 4.500818][ T0] printk: legacy bootconsole [earlyser0] disabled [ 4.519242][ T0] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 4.531501][ T0] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 4.536478][ T0] ... MAX_LOCK_DEPTH: 48 [ 4.543257][ T0] ... MAX_LOCKDEP_KEYS: 8192 [ 4.547922][ T0] ... CLASSHASH_SIZE: 4096 [ 4.554654][ T0] ... MAX_LOCKDEP_ENTRIES: 131072 [ 4.561852][ T0] ... MAX_LOCKDEP_CHAINS: 262144 [ 4.568331][ T0] ... CHAINHASH_SIZE: 131072 [ 4.572887][ T0] memory used by lock dependency info: 20721 kB [ 4.580553][ T0] memory used for stack traces: 8320 kB [ 4.587523][ T0] per task-struct memory footprint: 1920 bytes [ 4.592744][ T0] mempolicy: Enabling automatic NUMA balancing. Configure with numa_balancing= or the kernel.numa_balancing sysctl [ 4.605003][ T0] ACPI: Core revision 20240322 [ 4.612521][ T0] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns [ 4.625979][ T0] APIC: Switch to symmetric I/O mode setup [ 4.635014][ T0] DMAR: Host address width 39 [ 4.644591][ T0] DMAR: DRHD base: 0x000000fed90000 flags: 0x0 [ 4.655971][ T0] DMAR: dmar0: reg_base_addr fed90000 ver 1:0 cap d2008c22260206 ecap f00f5e [ 4.670959][ T0] DMAR: ATSR flags: 0x1 [ 4.676966][ T0] DMAR-IR: IOAPIC id 0 under DRHD base 0xfed90000 IOMMU 0 [ 4.687818][ T0] DMAR-IR: Queued invalidation will be enabled to support x2apic and Intr-remapping. [ 4.714586][ T0] DMAR-IR: Enabled IRQ remapping in x2apic mode [ 4.725760][ T0] x2apic enabled [ 4.731304][ T0] APIC: Switched APIC routing to: cluster x2apic [ 4.738676][ T0] kvm-guest: APIC: send_IPI_mask() replaced with kvm_send_ipi_mask() [ 4.753669][ T0] kvm-guest: APIC: send_IPI_mask_allbutself() replaced with kvm_send_ipi_mask_allbutself() [ 4.765526][ T0] kvm-guest: setup PV IPIs [ 4.794914][ T0] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 [ 4.801173][ T0] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x257a5699b94, max_idle_ns: 440795293402 ns [ 4.811315][ T0] Calibrating delay loop (skipped) preset value.. 5200.05 BogoMIPS (lpj=26000280) [ 4.822804][ T0] x86/cpu: User Mode Instruction Prevention (UMIP) activated [ 4.832325][ T0] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 [ 4.838180][ T0] Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 [ 4.841295][ T0] Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization [ 4.841392][ T0] Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! [ 4.851329][ T0] Spectre V2 : Spectre BHI mitigation: SW BHB clearing on vm exit [ 4.861310][ T0] Spectre V2 : Spectre BHI mitigation: SW BHB clearing on syscall [ 4.871316][ T0] Spectre V2 : Mitigation: Enhanced / Automatic IBRS [ 4.877375][ T0] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch [ 4.881320][ T0] Spectre V2 : Spectre v2 / PBRSB-eIBRS: Retire a single CALL on VMEXIT [ 4.891388][ T0] Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier [ 4.901420][ T0] Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl [ 4.911397][ T0] MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode [ 4.921317][ T0] GDS: Unknown: Dependent on hypervisor status [ 4.931559][ T0] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' [ 4.941356][ T0] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' [ 4.951356][ T0] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' [ 4.961316][ T0] x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' [ 4.971318][ T0] x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' [ 4.981316][ T0] x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' [ 4.991363][ T0] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 5.001317][ T0] x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 [ 5.011318][ T0] x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 [ 5.021319][ T0] x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 [ 5.031318][ T0] x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. [ 5.545385][ T0] Freeing SMP alternatives memory: 120K [ 5.550596][ T0] pid_max: default: 32768 minimum: 301 [ 5.552185][ T0] LSM: initializing lsm=lockdown,capability,landlock,yama,safesetid,tomoyo,selinux,ima,evm [ 5.561545][ T0] landlock: Up and running. [ 5.571321][ T0] Yama: becoming mindful. [ 5.584601][ T0] TOMOYO Linux initialized [ 5.591441][ T0] SELinux: Initializing. [ 5.614510][ T0] Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, vmalloc hugepage) [ 5.643577][ T0] Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, vmalloc) [ 5.651811][ T0] Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, vmalloc) [ 5.661761][ T0] Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, vmalloc) [ 5.685685][ T0] Running RCU synchronous self tests [ 5.690792][ T0] Running RCU synchronous self tests [ 5.693087][ T1] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.60GHz (family: 0x6, model: 0x6a, stepping: 0x6) [ 5.724266][ T1] Running RCU Tasks wait API self tests [ 5.729768][ T1] Running RCU Tasks Trace wait API self tests [ 5.731616][ T1] Performance Events: unsupported p6 CPU model 106 no PMU driver, software events only. [ 5.741580][ T1] signal: max sigframe size: 3632 [ 5.752831][ T15] Callback from call_rcu_tasks_trace() invoked. [ 5.761897][ T1] rcu: Hierarchical SRCU implementation. [ 5.768780][ T1] rcu: Max phase no-delay instances is 1000. [ 5.799564][ T1] NMI watchdog: Perf NMI watchdog permanently disabled [ 5.811579][ T1] smp: Bringing up secondary CPUs ... [ 5.832408][ T1] smpboot: x86: Booting SMP configuration: [ 5.837112][ T1] .... node #0, CPUs: #2 [ 5.864002][ T1] #1 #3 [ 5.882062][ T1] MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. [ 5.927156][ T1] smp: Brought up 2 nodes, 4 CPUs [ 5.931393][ T1] smpboot: Total of 4 processors activated (20800.22 BogoMIPS) [ 5.956679][ T14] Callback from call_rcu_tasks() invoked. [ 5.963636][ T1] devtmpfs: initialized [ 5.969533][ T1] x86/mm: Memory block size: 128MB [ 6.026168][ T1] Running RCU synchronous self tests [ 6.041382][ T1] Running RCU synchronous self tests [ 6.047559][ T1] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 6.082609][ T1] futex hash table entries: 2048 (order: 6, 262144 bytes, vmalloc) [ 6.143730][ T1] PM: RTC time: 04:16:23, date: 2024-06-22 [ 6.162970][ T1] NET: Registered PF_NETLINK/PF_ROUTE protocol family [ 6.181978][ T1] audit: initializing netlink subsys (disabled) [ 6.209097][ T1] thermal_sys: Registered thermal governor 'step_wise' [ 6.209117][ T1] thermal_sys: Registered thermal governor 'user_space' [ 6.211295][ T39] audit: type=2000 audit(1719029783.487:1): state=initialized audit_enabled=0 res=1 [ 6.222196][ T1] cpuidle: using governor menu [ 6.226854][ T1] NET: Registered PF_QIPCRTR protocol family [ 6.265158][ T1] dca service started, version 1.12.1 [ 6.271707][ T1] PCI: ECAM [mem 0xb0000000-0xbfffffff] (base 0xb0000000) for domain 0000 [bus 00-ff] [ 6.282074][ T1] PCI: ECAM [mem 0xb0000000-0xbfffffff] reserved as E820 entry [ 6.473152][ T1] PCI: Using configuration type 1 for base access [ 6.601630][ T1] HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages [ 6.608068][ T1] HugeTLB: 16380 KiB vmemmap can be freed for a 1.00 GiB page [ 6.611979][ T1] HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages [ 6.618191][ T1] HugeTLB: 28 KiB vmemmap can be freed for a 2.00 MiB page [ 6.626112][ T1] Demotion targets for Node 0: null [ 6.631340][ T1] Demotion targets for Node 1: null [ 6.661840][ T1] cryptd: max_cpu_qlen set to 1000 [ 6.676283][ T1] raid6: skipped pq benchmark and selected avx512x4 [ 6.681295][ T1] raid6: using avx512x2 recovery algorithm [ 6.683812][ T1] ACPI: Added _OSI(Module Device) [ 6.691295][ T1] ACPI: Added _OSI(Processor Device) [ 6.691295][ T1] ACPI: Added _OSI(3.0 _SCP Extensions) [ 6.701379][ T1] ACPI: Added _OSI(Processor Aggregator Device) [ 7.097285][ T1] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 7.203141][ T1] ACPI: _OSC evaluation for CPUs failed, trying _PDC [ 7.252043][ T1] ACPI: Interpreter enabled [ 7.257089][ T1] ACPI: PM: (supports S0 S3 S4 S5) [ 7.261415][ T1] ACPI: Using IOAPIC for interrupt routing [ 7.272620][ T1] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 7.281330][ T1] PCI: Using E820 reservations for host bridge windows [ 7.307343][ T1] ACPI: Enabled 4 GPEs in block 00 to 3F [ 7.896054][ T1] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 7.901458][ T1] acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] [ 7.920255][ T1] acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] [ 7.940239][ T1] acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] [ 7.946359][ T1] PCI host bridge to bus 0000:00 [ 7.971362][ T1] pci_bus 0000:00: Unknown NUMA node; performance will be reduced [ 7.991385][ T1] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 7.998945][ T1] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 8.021443][ T1] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 8.027721][ T1] pci_bus 0000:00: root bus resource [mem 0x80000000-0xafffffff window] [ 8.031379][ T1] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] [ 8.041375][ T1] pci_bus 0000:00: root bus resource [mem 0x580000000-0xd7fffffff window] [ 8.051545][ T1] pci_bus 0000:00: root bus resource [bus 00-ff] [ 8.058653][ T1] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 8.070953][ T1] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 8.076984][ T1] pci 0000:00:01.0: BAR 0 [mem 0xfd800000-0xfdffffff pref] [ 8.101480][ T1] pci 0000:00:01.0: BAR 2 [mem 0xfe200000-0xfe203fff 64bit pref] [ 8.123540][ T1] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 8.146047][ T1] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 8.152613][ T1] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 8.176827][ T1] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 8.187453][ T1] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 8.194934][ T1] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 8.204231][ T1] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 8.214151][ T1] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 8.241336][ T1] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 8.263123][ T1] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 8.278177][ T1] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 8.284557][ T1] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff] [ 8.313122][ T1] pci 0000:00:03.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 8.321295][ T1] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 8.339985][ T1] pci 0000:00:04.0: PCI bridge to [bus 01] [ 8.351656][ T1] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 8.362027][ T1] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 8.382205][ T1] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 8.394455][ T1] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 8.403345][ T1] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff] [ 8.430945][ T1] pci 0000:00:05.0: BAR 4 [mem 0xfe208000-0xfe20bfff 64bit pref] [ 8.475895][ T1] pci 0000:00:06.0: [8086:100e] type 00 class 0x020000 conventional PCI endpoint [ 8.494651][ T1] pci 0000:00:06.0: BAR 0 [mem 0xfeac0000-0xfeadffff] [ 8.523898][ T1] pci 0000:00:06.0: BAR 1 [io 0xc000-0xc03f] [ 8.571333][ T1] pci 0000:00:06.0: ROM [mem 0xfea40000-0xfea7ffff pref] [ 8.604265][ T1] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 8.635432][ T1] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 8.653463][ T1] pci 0000:00:1d.1: [8086:2935] type 00 class 0x0c0300 conventional PCI endpoint [ 8.680259][ T1] pci 0000:00:1d.1: BAR 4 [io 0xc100-0xc11f] [ 8.723309][ T1] pci 0000:00:1d.2: [8086:2936] type 00 class 0x0c0300 conventional PCI endpoint [ 8.731295][ T1] pci 0000:00:1d.2: BAR 4 [io 0xc120-0xc13f] [ 8.781343][ T1] pci 0000:00:1d.7: [8086:293a] type 00 class 0x0c0320 conventional PCI endpoint [ 8.803265][ T1] pci 0000:00:1d.7: BAR 0 [mem 0xfeaf7000-0xfeaf7fff] [ 8.831295][ T1] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint [ 8.835399][ T1] pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO [ 8.848750][ T1] pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 conventional PCI endpoint [ 8.881329][ T1] pci 0000:00:1f.2: BAR 4 [io 0xc140-0xc15f] [ 8.892246][ T1] pci 0000:00:1f.2: BAR 5 [mem 0xfeaf8000-0xfeaf8fff] [ 8.943497][ T1] pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 conventional PCI endpoint [ 8.969558][ T1] pci 0000:00:1f.3: BAR 4 [io 0x0700-0x073f] [ 8.988532][ T1] pci 0000:00:04.0: PCI bridge to [bus 01] [ 9.012913][ T1] ACPI: PCI: Interrupt link LNKA configured for IRQ 10 [ 9.025073][ T1] ACPI: PCI: Interrupt link LNKB configured for IRQ 10 [ 9.038566][ T1] ACPI: PCI: Interrupt link LNKC configured for IRQ 11 [ 9.054619][ T1] ACPI: PCI: Interrupt link LNKD configured for IRQ 11 [ 9.066881][ T1] ACPI: PCI: Interrupt link LNKE configured for IRQ 10 [ 9.080875][ T1] ACPI: PCI: Interrupt link LNKF configured for IRQ 10 [ 9.081295][ T1] ACPI: PCI: Interrupt link LNKG configured for IRQ 11 [ 9.112095][ T1] ACPI: PCI: Interrupt link LNKH configured for IRQ 11 [ 9.133249][ T1] ACPI: PCI: Interrupt link GSIA configured for IRQ 16 [ 9.152328][ T1] ACPI: PCI: Interrupt link GSIB configured for IRQ 17 [ 9.164434][ T1] ACPI: PCI: Interrupt link GSIC configured for IRQ 18 [ 9.192385][ T1] ACPI: PCI: Interrupt link GSID configured for IRQ 19 [ 9.199342][ T1] ACPI: PCI: Interrupt link GSIE configured for IRQ 20 [ 9.202369][ T1] ACPI: PCI: Interrupt link GSIF configured for IRQ 21 [ 9.232359][ T1] ACPI: PCI: Interrupt link GSIG configured for IRQ 22 [ 9.238683][ T1] ACPI: PCI: Interrupt link GSIH configured for IRQ 23 [ 9.411470][ T1] iommu: Default domain type: Translated [ 9.421970][ T1] iommu: DMA domain TLB invalidation policy: lazy mode [ 9.434794][ T1] SCSI subsystem initialized [ 9.454608][ T1] ACPI: bus type USB registered [ 9.459468][ T1] usbcore: registered new interface driver usbfs [ 9.461733][ T1] usbcore: registered new interface driver hub [ 9.491966][ T1] usbcore: registered new device driver usb [ 9.499375][ T1] mc: Linux media interface: v0.10 [ 9.501665][ T1] videodev: Linux video capture interface: v2.00 [ 9.507731][ T1] pps_core: LinuxPPS API ver. 1 registered [ 9.511295][ T1] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti [ 9.521734][ T1] PTP clock support registered [ 9.532928][ T1] EDAC MC: Ver: 3.0.0 [ 9.545583][ T1] Advanced Linux Sound Architecture Driver Initialized. [ 9.561295][ T1] Bluetooth: Core ver 2.22 [ 9.561639][ T1] NET: Registered PF_BLUETOOTH protocol family [ 9.570893][ T1] Bluetooth: HCI device and connection manager initialized [ 9.571295][ T1] Bluetooth: HCI socket layer initialized [ 9.591376][ T1] Bluetooth: L2CAP socket layer initialized [ 9.600608][ T1] Bluetooth: SCO socket layer initialized [ 9.621673][ T1] NET: Registered PF_ATMPVC protocol family [ 9.626557][ T1] NET: Registered PF_ATMSVC protocol family [ 9.631295][ T1] NetLabel: Initializing [ 9.641425][ T1] NetLabel: domain hash size = 128 [ 9.646106][ T1] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO [ 9.662086][ T1] NetLabel: unlabeled traffic allowed by default [ 9.666488][ T1] nfc: nfc_init: NFC Core ver 0.1 [ 9.668855][ T1] NET: Registered PF_NFC protocol family [ 9.681622][ T1] PCI: Using ACPI for IRQ routing [ 10.260944][ T1] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 10.261295][ T1] pci 0000:00:01.0: vgaarb: bridge control possible [ 10.261295][ T1] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 10.261384][ T1] vgaarb: loaded [ 10.274558][ T1] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 [ 10.280603][ T1] hpet0: 3 comparators, 64-bit 100.000000 MHz counter [ 10.301295][ T1] clocksource: Switched to clocksource kvm-clock [ 10.307099][ T1] VFS: Disk quotas dquot_6.6.0 [ 10.329204][ T1] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 10.395957][ T1] netfs: FS-Cache loaded [ 10.413150][ T1] CacheFiles: Loaded [ 10.417159][ T1] TOMOYO: 2.6.0 [ 10.420622][ T1] Mandatory Access Control activated. [ 10.426468][ T1] pnp: PnP ACPI init [ 10.453719][ T1] system 00:06: [mem 0xb0000000-0xbfffffff window] has been reserved [ 10.504675][ T1] pnp: PnP ACPI: found 7 devices [ 10.679852][ T1] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 10.711742][ T1] NET: Registered PF_INET protocol family [ 10.719774][ T1] IP idents hash table entries: 65536 (order: 7, 524288 bytes, vmalloc) [ 10.760698][ T1] tcp_listen_portaddr_hash hash table entries: 2048 (order: 5, 147456 bytes, vmalloc) [ 10.771266][ T1] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, vmalloc) [ 10.793901][ T1] TCP established hash table entries: 32768 (order: 6, 262144 bytes, vmalloc) [ 10.811934][ T1] TCP bind hash table entries: 32768 (order: 10, 4718592 bytes, vmalloc hugepage) [ 10.840297][ T1] TCP: Hash tables configured (established 32768 bind 32768) [ 10.881248][ T1] MPTCP token hash table entries: 4096 (order: 6, 360448 bytes, vmalloc) [ 10.892726][ T1] UDP hash table entries: 2048 (order: 6, 327680 bytes, vmalloc) [ 10.916055][ T1] UDP-Lite hash table entries: 2048 (order: 6, 327680 bytes, vmalloc) [ 10.924904][ T1] NET: Registered PF_UNIX/PF_LOCAL protocol family [ 10.939482][ T1] RPC: Registered named UNIX socket transport module. [ 10.945338][ T1] RPC: Registered udp transport module. [ 10.949421][ T1] RPC: Registered tcp transport module. [ 10.966697][ T1] RPC: Registered tcp-with-tls transport module. [ 10.971754][ T1] RPC: Registered tcp NFSv4.1 backchannel transport module. [ 10.988678][ T1] NET: Registered PF_XDP protocol family [ 10.993600][ T1] pci 0000:00:04.0: bridge window [io 0x1000-0x0fff] to [bus 01] add_size 1000 [ 11.000963][ T1] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 11.022496][ T1] pci 0000:00:04.0: PCI bridge to [bus 01] [ 11.028417][ T1] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 11.055121][ T1] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 11.065862][ T1] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 11.077707][ T1] pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] [ 11.084338][ T1] pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] [ 11.092016][ T1] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] [ 11.099897][ T1] pci_bus 0000:00: resource 7 [mem 0x80000000-0xafffffff window] [ 11.106481][ T1] pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] [ 11.122422][ T1] pci_bus 0000:00: resource 9 [mem 0x580000000-0xd7fffffff window] [ 11.139578][ T1] pci_bus 0000:01: resource 0 [io 0x1000-0x1fff] [ 11.145538][ T1] pci_bus 0000:01: resource 1 [mem 0xfe800000-0xfe9fffff] [ 11.170160][ T1] pci_bus 0000:01: resource 2 [mem 0xfe000000-0xfe1fffff 64bit pref] [ 11.277067][ T1] ACPI: \_SB_.GSIA: Enabled at IRQ 16 [ 11.408416][ T1] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1440 took 217940 usecs [ 11.535248][ T1] ACPI: \_SB_.GSIB: Enabled at IRQ 17 [ 11.604780][ T1] pci 0000:00:1d.1: quirk_usb_early_handoff+0x0/0x1440 took 185014 usecs [ 11.721877][ T1] ACPI: \_SB_.GSIC: Enabled at IRQ 18 [ 11.828718][ T1] pci 0000:00:1d.2: quirk_usb_early_handoff+0x0/0x1440 took 211839 usecs [ 11.987119][ T1] ACPI: \_SB_.GSID: Enabled at IRQ 19 [ 12.128438][ T1] pci 0000:00:1d.7: quirk_usb_early_handoff+0x0/0x1440 took 286164 usecs [ 12.137389][ T1] PCI: CLS 0 bytes, default 64 [ 12.152020][ T1] DMAR: No RMRR found [ 12.175310][ T1] DMAR: No SATC found [ 12.178653][ T1] DMAR: dmar0: Using Queued invalidation [ 12.196250][ T75] kworker/u32:4 (75) used greatest stack depth: 27984 bytes left [ 12.204111][ T1] pci 0000:00:00.0: Adding to iommu group 0 [ 12.217638][ T1] pci 0000:00:01.0: Adding to iommu group 1 [ 12.224027][ T1] pci 0000:00:02.0: Adding to iommu group 2 [ 12.236936][ T1] pci 0000:00:03.0: Adding to iommu group 3 [ 12.259649][ T1] pci 0000:00:04.0: Adding to iommu group 4 [ 12.265016][ T1] pci 0000:00:05.0: Adding to iommu group 5 [ 12.291586][ T1] pci 0000:00:06.0: Adding to iommu group 6 [ 12.297352][ T1] pci 0000:00:1d.0: Adding to iommu group 7 [ 12.320716][ T1] pci 0000:00:1d.1: Adding to iommu group 7 [ 12.325804][ T1] pci 0000:00:1d.2: Adding to iommu group 7 [ 12.351531][ T1] pci 0000:00:1d.7: Adding to iommu group 7 [ 12.369658][ T1] pci 0000:00:1f.0: Adding to iommu group 8 [ 12.374762][ T1] pci 0000:00:1f.2: Adding to iommu group 8 [ 12.415416][ T1] pci 0000:00:1f.3: Adding to iommu group 8 [ 12.671791][ T1] DMAR: Intel(R) Virtualization Technology for Directed I/O [ 12.677358][ T1] PCI-DMA: Using software bounce buffering for IO (SWIOTLB) [ 12.690020][ T1] software IO TLB: mapped [mem 0x0000000067000000-0x000000006b000000] (64MB) [ 12.705276][ T1] ACPI: bus type thunderbolt registered [ 12.712946][ T78] kworker/u32:4 (78) used greatest stack depth: 25392 bytes left [ 12.779391][ T1] RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer [ 15.170625][ T1] kvm_amd: CPU 0 isn't AMD or Hygon [ 15.174995][ T1] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x257a5699b94, max_idle_ns: 440795293402 ns [ 15.304400][ T1] clocksource: Switched to clocksource tsc [ 15.554958][ T1] Initialise system trusted keyrings [ 15.585304][ T1] workingset: timestamp_bits=40 max_order=20 bucket_order=0 [ 15.639927][ T1] DLM installed [ 15.650127][ T1] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 15.716963][ T1] NFS: Registering the id_resolver key type [ 15.722366][ T1] Key type id_resolver registered [ 15.727710][ T1] Key type id_legacy registered [ 15.732082][ T1] nfs4filelayout_init: NFSv4 File Layout Driver Registering... [ 15.746660][ T1] nfs4flexfilelayout_init: NFSv4 Flexfile Layout Driver Registering... [ 15.775246][ T1] Key type cifs.spnego registered [ 15.781453][ T1] Key type cifs.idmap registered [ 15.785302][ T1] ntfs3: Enabled Linux POSIX ACLs support [ 15.788884][ T1] ntfs3: Read-only LZX/Xpress compression included [ 15.797417][ T1] efs: 1.0a - http://aeschi.ch.eu.org/efs/ [ 15.815684][ T1] jffs2: version 2.2. (NAND) (SUMMARY) © 2001-2006 Red Hat, Inc. [ 15.834896][ T1] romfs: ROMFS MTD (C) 2007 Red Hat, Inc. [ 15.852485][ T1] QNX4 filesystem 0.2.3 registered. [ 15.857214][ T1] qnx6: QNX6 filesystem 1.0.0 registered. [ 15.866290][ T1] fuse: init (API version 7.40) [ 15.873059][ T1] orangefs_debugfs_init: called with debug mask: :none: :0: [ 15.907933][ T1] orangefs_init: module version upstream loaded [ 15.914290][ T1] JFS: nTxBlock = 8192, nTxLock = 65536 [ 16.042732][ T1] SGI XFS with ACLs, security attributes, realtime, quota, no debug enabled [ 16.073239][ T1] 9p: Installing v9fs 9p2000 file system support [ 16.078416][ T1] NILFS version 2 loaded [ 16.099450][ T1] befs: version: 0.9.3 [ 16.103322][ T1] ocfs2: Registered cluster interface o2cb [ 16.110579][ T1] ocfs2: Registered cluster interface user [ 16.116154][ T1] OCFS2 User DLM kernel interface loaded [ 16.184839][ T1] gfs2: GFS2 installed [ 16.256597][ T1] ceph: loaded (mds proto 32) [ 16.451778][ T1] NET: Registered PF_ALG protocol family [ 16.464344][ T1] xor: automatically using best checksumming function avx [ 16.483972][ T1] async_tx: api initialized (async) [ 16.489048][ T1] Key type asymmetric registered [ 16.494502][ T1] Asymmetric key parser 'x509' registered [ 16.501017][ T1] Asymmetric key parser 'pkcs8' registered [ 16.507548][ T1] Key type pkcs7_test registered [ 16.514924][ T1] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 239) [ 16.526333][ T1] io scheduler mq-deadline registered [ 16.530561][ T1] io scheduler kyber registered [ 16.536374][ T1] io scheduler bfq registered [ 16.662129][ T1] ACPI: \_SB_.GSIE: Enabled at IRQ 20 [ 16.708984][ T1] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 16.720823][ T1] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 16.746938][ T1] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 16.824769][ T1] ACPI: button: Power Button [PWRF] [ 17.758756][ T1] ioatdma: Intel(R) QuickData Technology Driver 5.00 [ 17.948760][ T1] ACPI: \_SB_.GSIF: Enabled at IRQ 21 [ 18.217670][ T1] ACPI: \_SB_.GSIH: Enabled at IRQ 23 [ 19.298032][ T1] N_HDLC line discipline registered with maxframe=4096 [ 19.305334][ T1] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 19.321410][ T1] 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 19.423320][ T1] Non-volatile memory driver v1.3 [ 19.443976][ T1] Linux agpgart interface v0.103 [ 19.472969][ T1] ACPI: bus type drm_connector registered [ 19.515289][ T1] [drm] Initialized vgem 1.0.0 20120112 for vgem on minor 0 [ 19.539264][ T1] [drm] Initialized vkms 1.0.0 20180514 for vkms on minor 1 [ 19.757602][ T1] Console: switching to colour frame buffer device 128x48 [ 19.814967][ T1] platform vkms: [drm] fb0: vkmsdrmfb frame buffer device [ 19.837068][ T1] usbcore: registered new interface driver udl [ 19.844655][ T1] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 19.849395][ T1] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 19.857276][ T1] [drm] features: -virgl +edid -resource_blob -host_visible [ 19.857298][ T1] [drm] features: -context_init [ 19.871323][ C0] vkms_vblank_simulate: vblank timer overrun [ 19.906006][ T1] [drm] number of scanouts: 1 [ 19.906053][ T1] [drm] number of cap sets: 0 [ 19.983420][ C0] vkms_vblank_simulate: vblank timer overrun [ 19.998395][ T1] [drm] Initialized virtio_gpu 0.1.0 0 for 0000:00:01.0 on minor 2 [ 20.023138][ C0] vkms_vblank_simulate: vblank timer overrun [ 20.054484][ C0] vkms_vblank_simulate: vblank timer overrun [ 20.132400][ T1] fbcon: virtio_gpudrmfb (fb1) is primary device [ 20.132431][ T1] fbcon: Remapping primary device, fb1, to tty 1-63 [ 21.127196][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.430172][ T40] INFO: task swapper/0:1 blocked for more than 143 seconds. [ 294.430202][ T40] Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 294.430212][ T40] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.430219][ T40] task:swapper/0 state:D stack:22000 pid:1 tgid:1 ppid:0 flags:0x00004000 [ 294.430250][ T40] Call Trace: [ 294.430257][ T40] [ 294.430265][ T40] __schedule+0xf15/0x5d00 [ 294.430351][ T40] ? __pfx___lock_acquire+0x10/0x10 [ 294.430379][ T40] ? __pfx___schedule+0x10/0x10 [ 294.430403][ T40] ? schedule+0x298/0x350 [ 294.430425][ T40] ? __pfx_lock_release+0x10/0x10 [ 294.430448][ T40] ? mark_held_locks+0x9f/0xe0 [ 294.430470][ T40] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 294.430494][ T40] ? prepare_to_wait_event+0x94/0x690 [ 294.430518][ T40] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.430536][ T40] schedule+0xe7/0x350 [ 294.430558][ T40] virtio_gpu_queue_fenced_ctrl_buffer+0x497/0xff0 [ 294.430585][ T40] ? __pfx_virtio_gpu_queue_fenced_ctrl_buffer+0x10/0x10 [ 294.430610][ T40] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 294.430639][ T40] ? __pfx_autoremove_wake_function+0x10/0x10 [ 294.430663][ T40] ? __asan_memset+0x23/0x50 [ 294.430684][ T40] ? virtio_gpu_cmd_resource_flush+0x85/0x220 [ 294.430706][ T40] virtio_gpu_primary_plane_update+0x105d/0x1590 [ 294.430734][ T40] ? __pfx_virtio_gpu_primary_plane_update+0x10/0x10 [ 294.430760][ T40] ? drm_crtc_next_vblank_start+0x25d/0x300 [ 294.430784][ T40] drm_atomic_helper_commit_planes+0x93a/0x1000 [ 294.430811][ T40] drm_atomic_helper_commit_tail+0x69/0xf0 [ 294.430837][ T40] commit_tail+0x356/0x410 [ 294.430864][ T40] drm_atomic_helper_commit+0x2fd/0x380 [ 294.430892][ T40] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 294.430919][ T40] drm_atomic_commit+0x227/0x300 [ 294.430944][ T40] ? __pfx_drm_atomic_commit+0x10/0x10 [ 294.430967][ T40] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 294.430989][ T40] ? __pfx___drm_printfn_info+0x10/0x10 [ 294.431018][ T40] ? drm_client_rotation+0x4d9/0x6a0 [ 294.431038][ T40] drm_client_modeset_commit_atomic+0x6c6/0x810 [ 294.431062][ T40] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 294.431087][ T40] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.431109][ T40] drm_client_modeset_commit_locked+0x14d/0x580 [ 294.431131][ T40] drm_fb_helper_pan_display+0x2a5/0x990 [ 294.431162][ T40] fb_pan_display+0x477/0x7d0 [ 294.431181][ T40] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 294.431209][ T40] bit_update_start+0x49/0x1f0 [ 294.431229][ T40] fbcon_switch+0xbbf/0x12f0 [ 294.431257][ T40] ? __pfx_fbcon_switch+0x10/0x10 [ 294.431286][ T40] ? __pfx_bit_cursor+0x10/0x10 [ 294.431302][ T40] ? fbcon_cursor+0x3bf/0x520 [ 294.431328][ T40] ? is_console_locked+0x9/0x20 [ 294.431354][ T40] ? con_is_visible+0x65/0x150 [ 294.431376][ T40] redraw_screen+0x2bf/0x760 [ 294.431400][ T40] ? fbcon_prepare_logo+0x8e5/0xc70 [ 294.431424][ T40] ? __pfx_redraw_screen+0x10/0x10 [ 294.431447][ T40] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 294.431464][ T40] set_con2fb_map+0x796/0x1060 [ 294.431490][ T40] fbcon_fb_registered+0x21d/0x6a0 [ 294.431515][ T40] ? fb_var_to_videomode+0x4c9/0x690 [ 294.431535][ T40] register_framebuffer+0x485/0x840 [ 294.431554][ T40] ? __pfx_register_framebuffer+0x10/0x10 [ 294.431575][ T40] ? drm_fbdev_generic_helper_fb_probe+0x49e/0x680 [ 294.431601][ T40] __drm_fb_helper_initial_config_and_unlock+0xd82/0x1650 [ 294.431637][ T40] ? __pfx___mutex_lock+0x10/0x10 [ 294.431655][ T40] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 294.431685][ T40] drm_fb_helper_initial_config+0x44/0x60 [ 294.431712][ T40] drm_fbdev_generic_client_hotplug+0x1a6/0x280 [ 294.431738][ T40] ? __pfx_drm_fbdev_generic_client_hotplug+0x10/0x10 [ 294.431763][ T40] drm_client_register+0x195/0x280 [ 294.431784][ T40] drm_fbdev_generic_setup+0x184/0x340 [ 294.431812][ T40] virtio_gpu_probe+0x29d/0x4e0 [ 294.431833][ T40] virtio_dev_probe+0x5ff/0x9b0 [ 294.431862][ T40] ? __pfx_virtio_dev_probe+0x10/0x10 [ 294.431889][ T40] really_probe+0x23e/0xa90 [ 294.431913][ T40] __driver_probe_device+0x1de/0x440 [ 294.431936][ T40] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 294.431965][ T40] driver_probe_device+0x4c/0x1b0 [ 294.431986][ T40] __driver_attach+0x283/0x580 [ 294.432007][ T40] ? __pfx___driver_attach+0x10/0x10 [ 294.432027][ T40] bus_for_each_dev+0x13c/0x1d0 [ 294.432053][ T40] ? __pfx_bus_for_each_dev+0x10/0x10 [ 294.432082][ T40] bus_add_driver+0x2e9/0x690 [ 294.432103][ T40] driver_register+0x15c/0x4b0 [ 294.432157][ T40] ? __register_virtio_driver+0x56/0x100 [ 294.432185][ T40] ? __pfx_virtio_gpu_driver_init+0x10/0x10 [ 294.432209][ T40] do_one_initcall+0x128/0x700 [ 294.432237][ T40] ? __pfx_do_one_initcall+0x10/0x10 [ 294.432265][ T40] ? trace_kmalloc+0x2d/0xe0 [ 294.432291][ T40] ? __kmalloc_noprof+0x20b/0x410 [ 294.432310][ T40] kernel_init_freeable+0x69d/0xca0 [ 294.432338][ T40] ? __pfx_kernel_init+0x10/0x10 [ 294.432364][ T40] kernel_init+0x1c/0x2b0 [ 294.432387][ T40] ? __pfx_kernel_init+0x10/0x10 [ 294.432412][ T40] ret_from_fork+0x45/0x80 [ 294.432439][ T40] ? __pfx_kernel_init+0x10/0x10 [ 294.432464][ T40] ret_from_fork_asm+0x1a/0x30 [ 294.432494][ T40] [ 294.432521][ T40] INFO: task kworker/1:1:55 blocked for more than 143 seconds. [ 294.432535][ T40] Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 294.432547][ T40] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.432555][ T40] task:kworker/1:1 state:D stack:27664 pid:55 tgid:55 ppid:2 flags:0x00004000 [ 294.432593][ T40] Workqueue: events drm_fb_helper_damage_work [ 294.432622][ T40] Call Trace: [ 294.432636][ T40] [ 294.432644][ T40] __schedule+0xf15/0x5d00 [ 294.432670][ T40] ? __pfx_mark_lock+0x10/0x10 [ 294.432697][ T40] ? __pfx___schedule+0x10/0x10 [ 294.432722][ T40] ? schedule+0x298/0x350 [ 294.432743][ T40] ? __pfx_lock_release+0x10/0x10 [ 294.432767][ T40] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.432791][ T40] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.432811][ T40] schedule+0xe7/0x350 [ 294.432836][ T40] schedule_preempt_disabled+0x13/0x30 [ 294.432863][ T40] __mutex_lock+0x5b8/0x9c0 [ 294.432883][ T40] ? drm_fbdev_generic_helper_fb_dirty+0x248/0xbd0 [ 294.432909][ T40] ? __pfx___mutex_lock+0x10/0x10 [ 294.432927][ T40] ? hlock_class+0x4e/0x130 [ 294.432947][ T40] ? mark_lock+0xb5/0xc60 [ 294.432972][ T40] ? __pfx_mark_lock+0x10/0x10 [ 294.432998][ T40] ? drm_fbdev_generic_helper_fb_dirty+0x248/0xbd0 [ 294.433023][ T40] drm_fbdev_generic_helper_fb_dirty+0x248/0xbd0 [ 294.433050][ T40] ? drm_fb_helper_damage_work+0x234/0x5e0 [ 294.433075][ T40] ? __pfx_lock_release+0x10/0x10 [ 294.433101][ T40] ? __pfx_drm_fbdev_generic_helper_fb_dirty+0x10/0x10 [ 294.433127][ T40] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 294.433154][ T40] drm_fb_helper_damage_work+0x285/0x5e0 [ 294.433180][ T40] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 294.433207][ T40] process_one_work+0x9fb/0x1b60 [ 294.433228][ T40] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 294.433253][ T40] ? __pfx_process_one_work+0x10/0x10 [ 294.433272][ T40] ? assign_work+0x1a0/0x250 [ 294.433298][ T40] worker_thread+0x6c8/0xf70 [ 294.433318][ T40] ? __kthread_parkme+0x148/0x220 [ 294.433340][ T40] ? __pfx_worker_thread+0x10/0x10 [ 294.433357][ T40] kthread+0x2c1/0x3a0 [ 294.433378][ T40] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.433402][ T40] ? __pfx_kthread+0x10/0x10 [ 294.433423][ T40] ret_from_fork+0x45/0x80 [ 294.433447][ T40] ? __pfx_kthread+0x10/0x10 [ 294.433468][ T40] ret_from_fork_asm+0x1a/0x30 [ 294.433494][ T40] [ 294.433519][ T40] INFO: task kworker/0:2:820 blocked for more than 143 seconds. [ 294.433531][ T40] Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 294.433541][ T40] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.433548][ T40] task:kworker/0:2 state:D stack:28816 pid:820 tgid:820 ppid:2 flags:0x00004000 [ 294.433579][ T40] Workqueue: events virtio_gpu_dequeue_ctrl_func [ 294.433603][ T40] Call Trace: [ 294.433609][ T40] [ 294.433617][ T40] __schedule+0xf15/0x5d00 [ 294.433647][ T40] ? __pfx___schedule+0x10/0x10 [ 294.433672][ T40] ? __pfx_mark_lock+0x10/0x10 [ 294.433698][ T40] ? __pfx___schedule+0x10/0x10 [ 294.433723][ T40] ? schedule+0x298/0x350 [ 294.433747][ T40] ? __pfx_lock_release+0x10/0x10 [ 294.433775][ T40] schedule+0xe7/0x350 [ 294.433799][ T40] schedule_preempt_disabled+0x13/0x30 [ 294.433826][ T40] __mutex_lock+0x5b8/0x9c0 [ 294.433843][ T40] ? call_usermodehelper_setup+0x252/0x340 [ 294.433863][ T40] ? kobject_uevent_env+0x2db/0x1810 [ 294.433885][ T40] ? drm_client_dev_hotplug+0x169/0x3c0 [ 294.433903][ T40] ? __pfx___mutex_lock+0x10/0x10 [ 294.433923][ T40] ? drm_client_dev_hotplug+0x169/0x3c0 [ 294.433941][ T40] drm_client_dev_hotplug+0x169/0x3c0 [ 294.433960][ T40] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 294.433987][ T40] virtio_gpu_cmd_get_display_info_cb+0x3e1/0x550 [ 294.434010][ T40] ? __pfx_virtio_gpu_cmd_get_display_info_cb+0x10/0x10 [ 294.434033][ T40] virtio_gpu_dequeue_ctrl_func+0x209/0x7d0 [ 294.434057][ T40] ? __pfx_virtio_gpu_dequeue_ctrl_func+0x10/0x10 [ 294.434082][ T40] process_one_work+0x9fb/0x1b60 [ 294.434101][ T40] ? __pfx_lock_acquire+0x10/0x10 [ 294.434126][ T40] ? __pfx_process_one_work+0x10/0x10 [ 294.434145][ T40] ? assign_work+0x1a0/0x250 [ 294.434171][ T40] worker_thread+0x6c8/0xf70 [ 294.434190][ T40] ? __kthread_parkme+0x148/0x220 [ 294.434211][ T40] ? __pfx_worker_thread+0x10/0x10 [ 294.434229][ T40] kthread+0x2c1/0x3a0 [ 294.434249][ T40] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.434275][ T40] ? __pfx_kthread+0x10/0x10 [ 294.434296][ T40] ret_from_fork+0x45/0x80 [ 294.434320][ T40] ? __pfx_kthread+0x10/0x10 [ 294.434341][ T40] ret_from_fork_asm+0x1a/0x30 [ 294.434367][ T40] [ 294.434375][ T40] [ 294.434375][ T40] Showing all locks held in the system: [ 294.434382][ T40] 10 locks held by swapper/0/1: [ 294.434393][ T40] #0: ffff88801d306170 (&dev->mutex){....}-{3:3}, at: __driver_attach+0x278/0x580 [ 294.434445][ T40] #1: ffff88801f8a82f8 (&dev->clientlist_mutex){+.+.}-{3:3}, at: drm_client_register+0x54/0x280 [ 294.434492][ T40] #2: ffffffff8e6e56c8 (registration_lock){+.+.}-{3:3}, at: register_framebuffer+0x7a/0x840 [ 294.434540][ T40] #3: ffffffff8db9f320 (console_lock){+.+.}-{0:0}, at: fbcon_fb_registered+0x3c/0x6a0 [ 294.434594][ T40] #4: ffff88801cc33a80 (&helper->lock){+.+.}-{3:3}, at: drm_fb_helper_pan_display+0xd5/0x990 [ 294.434654][ T40] #5: ffff88801f8a81b0 (&dev->master_mutex){+.+.}-{3:3}, at: drm_master_internal_acquire+0x21/0x80 [ 294.434707][ T40] #6: ffff88801cc33898 (&client->modeset_mutex){+.+.}-{3:3}, at: drm_client_modeset_commit_locked+0x4c/0x580 [ 294.434756][ T40] #7: ffffc90000047318 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_client_modeset_commit_atomic+0xd0/0x810 [ 294.434806][ T40] #8: ffff88801f8d80b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: modeset_lock+0x488/0x6c0 [ 294.434853][ T40] #9: ffffffff8e821cb0 (drm_unplug_srcu){.+.+}-{0:0}, at: drm_dev_enter+0x49/0x160 [ 294.434907][ T40] 1 lock held by khungtaskd/40: [ 294.434919][ T40] #0: ffffffff8dbb1920 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 294.434976][ T40] 3 locks held by kworker/1:1/55: [ 294.434987][ T40] #0: ffff888015488948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 294.435035][ T40] #1: ffffc90000a77d80 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 294.435082][ T40] #2: ffff88801cc33a80 (&helper->lock){+.+.}-{3:3}, at: drm_fbdev_generic_helper_fb_dirty+0x248/0xbd0 [ 294.435138][ T40] 2 locks held by kworker/u32:5/76: [ 294.435150][ T40] #0: ffff888015491148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 294.435197][ T40] #1: ffffc9000160fd80 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 294.435248][ T40] 3 locks held by kworker/0:2/820: [ 294.435259][ T40] #0: ffff888015488948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 294.435305][ T40] #1: ffffc900044cfd80 ((work_completion)(&vgvq->dequeue_work)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 294.435355][ T40] #2: ffff88801f8a82f8 (&dev->clientlist_mutex){+.+.}-{3:3}, at: drm_client_dev_hotplug+0x169/0x3c0 [ 294.435403][ T40] [ 294.435407][ T40] ============================================= [ 294.435407][ T40] [ 294.435415][ T40] Kernel panic - not syncing: hung_task: blocked tasks [ 294.435424][ T40] CPU: 1 PID: 40 Comm: khungtaskd Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 294.435443][ T40] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 294.435453][ T40] Call Trace: [ 294.435460][ T40] [ 294.435466][ T40] dump_stack_lvl+0x3d/0x1f0 [ 294.435493][ T40] panic+0x6f5/0x7a0 [ 294.435518][ T40] ? __pfx_panic+0x10/0x10 [ 294.435543][ T40] ? watchdog+0xd3d/0x1240 [ 294.435561][ T40] ? watchdog+0xd30/0x1240 [ 294.435579][ T40] watchdog+0xd4e/0x1240 [ 294.435597][ T40] ? __pfx_watchdog+0x10/0x10 [ 294.435615][ T40] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.435637][ T40] ? __kthread_parkme+0x148/0x220 [ 294.435658][ T40] ? __pfx_watchdog+0x10/0x10 [ 294.435675][ T40] kthread+0x2c1/0x3a0 [ 294.435695][ T40] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.435719][ T40] ? __pfx_kthread+0x10/0x10 [ 294.435739][ T40] ret_from_fork+0x45/0x80 [ 294.435761][ T40] ? __pfx_kthread+0x10/0x10 [ 294.435782][ T40] ret_from_fork_asm+0x1a/0x30 [ 294.435808][ T40] [ 294.436427][ T40] Kernel Offset: disabled program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) failed to boot instance (try 1): failed to create VM: can't ssh into the instance failed to run ["ssh" "-p" "2130" "-F" "/dev/null" "-o" "UserKnownHostsFile=/dev/null" "-o" "IdentitiesOnly=yes" "-o" "BatchMode=yes" "-o" "StrictHostKeyChecking=no" "-o" "ConnectTimeout=10" "root@localhost" "pwd"]: exit status 255 Connection timed out during banner exchange Connection to 127.0.0.1 port 2130 timed out ftruncate: Invalid argument qemu-system-x86_64: warning: hub 0 is not connected to host network [ 0.000000][ T0] Linux version 6.10.0-rc4-syzkaller-00164-g66cc544fd75c (syzkaller@syzkaller) (gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) #0 SMP PREEMPT_DYNAMIC now [ 0.000000][ T0] Command line: root=/dev/sda console=ttyS0 root=/dev/sda1 [ 0.000000][ T0] KERNEL supported cpus: [ 0.000000][ T0] Intel GenuineIntel [ 0.000000][ T0] AMD AuthenticAMD [ 0.000000][ T0] BIOS-provided physical RAM map: [ 0.000000][ T0] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000][ T0] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x0000000000100000-0x000000007ffdcfff] usable [ 0.000000][ T0] BIOS-e820: [mem 0x000000007ffdd000-0x000000007fffffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x0000000100000000-0x000000017fffffff] usable [ 0.000000][ T0] printk: legacy bootconsole [earlyser0] enabled [ 0.000000][ T0] ERROR: earlyprintk= earlyser already used [ 0.000000][ T0] ERROR: earlyprintk= earlyser already used [ 0.000000][ T0] ********************************************************** [ 0.000000][ T0] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 0.000000][ T0] ** ** [ 0.000000][ T0] ** This system shows unhashed kernel memory addresses ** [ 0.000000][ T0] ** via the console, logs, and other interfaces. This ** [ 0.000000][ T0] ** might reduce the security of your system. ** [ 0.000000][ T0] ** ** [ 0.000000][ T0] ** If you see this message and you are not debugging ** [ 0.000000][ T0] ** the kernel, report this immediately to your system ** [ 0.000000][ T0] ** administrator! ** [ 0.000000][ T0] ** ** [ 0.000000][ T0] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 0.000000][ T0] ********************************************************** [ 0.000000][ T0] Malformed early option 'vsyscall' [ 0.000000][ T0] nopcid: PCID feature disabled [ 0.000000][ T0] NX (Execute Disable) protection: active [ 0.000000][ T0] APIC: Static calls initialized [ 0.000000][ T0] SMBIOS 3.0.0 present. [ 0.000000][ T0] DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 0.000000][ T0] DMI: Memory slots populated: 1/1 [ 0.000000][ T0] Hypervisor detected: KVM [ 0.000000][ T0] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000009][ T0] kvm-clock: using sched offset of 3482009334 cycles [ 0.006183][ T0] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.030699][ T0] tsc: Detected 2600.028 MHz processor [ 0.052526][ T0] last_pfn = 0x180000 max_arch_pfn = 0x400000000 [ 0.061028][ T0] MTRR map: 4 entries (3 fixed + 1 variable; max 19), built from 8 variable MTRRs [ 0.071589][ T0] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT [ 0.083529][ T0] last_pfn = 0x7ffdd max_arch_pfn = 0x400000000 [ 0.105306][ T0] found SMP MP-table at [mem 0x000f5b40-0x000f5b4f] [ 0.112910][ T0] Using GB pages for direct mapping [ 0.123768][ T0] ACPI: Early table checksum verification disabled [ 0.135748][ T0] ACPI: RSDP 0x00000000000F5910 000014 (v00 BOCHS ) [ 0.146796][ T0] ACPI: RSDT 0x000000007FFE2925 000048 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.160724][ T0] ACPI: FACP 0x000000007FFE1B2C 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) [ 0.175241][ T0] ACPI: DSDT 0x000000007FFDF040 002AEC (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.190575][ T0] ACPI: FACS 0x000000007FFDF000 000040 [ 0.198334][ T0] ACPI: APIC 0x000000007FFE1C20 0000B0 (v03 BOCHS BXPC 00000001 BXPC 00000001) [ 0.213727][ T0] ACPI: HPET 0x000000007FFE1CD0 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.227734][ T0] ACPI: SRAT 0x000000007FFE1D08 000178 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.240653][ T0] ACPI: MCFG 0x000000007FFE1E80 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.255863][ T0] ACPI: DMAR 0x000000007FFE1EBC 0000C0 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.266490][ T0] ACPI: SSDT 0x000000007FFE1F7C 0008A1 (v01 BOCHS NVDIMM 00000001 BXPC 00000001) [ 0.278239][ T0] ACPI: NFIT 0x000000007FFE281D 0000E0 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.292769][ T0] ACPI: WAET 0x000000007FFE28FD 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) [ 0.305249][ T0] ACPI: Reserving FACP table memory at [mem 0x7ffe1b2c-0x7ffe1c1f] [ 0.316281][ T0] ACPI: Reserving DSDT table memory at [mem 0x7ffdf040-0x7ffe1b2b] [ 0.326256][ T0] ACPI: Reserving FACS table memory at [mem 0x7ffdf000-0x7ffdf03f] [ 0.337588][ T0] ACPI: Reserving APIC table memory at [mem 0x7ffe1c20-0x7ffe1ccf] [ 0.346925][ T0] ACPI: Reserving HPET table memory at [mem 0x7ffe1cd0-0x7ffe1d07] [ 0.356005][ T0] ACPI: Reserving SRAT table memory at [mem 0x7ffe1d08-0x7ffe1e7f] [ 0.367149][ T0] ACPI: Reserving MCFG table memory at [mem 0x7ffe1e80-0x7ffe1ebb] [ 0.378713][ T0] ACPI: Reserving DMAR table memory at [mem 0x7ffe1ebc-0x7ffe1f7b] [ 0.390081][ T0] ACPI: Reserving SSDT table memory at [mem 0x7ffe1f7c-0x7ffe281c] [ 0.401773][ T0] ACPI: Reserving NFIT table memory at [mem 0x7ffe281d-0x7ffe28fc] [ 0.413333][ T0] ACPI: Reserving WAET table memory at [mem 0x7ffe28fd-0x7ffe2924] [ 0.423630][ T0] SRAT: PXM 0 -> APIC 0x00 -> Node 0 [ 0.428485][ T0] SRAT: PXM 0 -> APIC 0x01 -> Node 0 [ 0.433683][ T0] SRAT: PXM 0 -> APIC 0x02 -> Node 0 [ 0.440119][ T0] SRAT: PXM 0 -> APIC 0x03 -> Node 0 [ 0.445129][ T0] SRAT: PXM 0 -> APIC 0x04 -> Node 0 [ 0.450468][ T0] SRAT: PXM 0 -> APIC 0x05 -> Node 0 [ 0.455708][ T0] SRAT: PXM 0 -> APIC 0x06 -> Node 0 [ 0.460080][ T0] SRAT: PXM 0 -> APIC 0x07 -> Node 0 [ 0.465569][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] [ 0.473053][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0x7fffffff] [ 0.479855][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x100000000-0x17fffffff] [ 0.486083][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x180000000-0x183ffffff] non-volatile [ 0.494938][ T0] ACPI: SRAT: Node 0 PXM 0 [mem 0x180000000-0x57fffffff] hotplug [ 0.501987][ T0] NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0x7fffffff] -> [mem 0x00000000-0x7fffffff] [ 0.515552][ T0] NUMA: Node 0 [mem 0x00000000-0x7fffffff] + [mem 0x100000000-0x17fffffff] -> [mem 0x00000000-0x17fffffff] [ 0.530761][ T0] Faking node 0 at [mem 0x0000000000000000-0x00000000ffffffff] (4096MB) [ 0.540579][ T0] Faking node 1 at [mem 0x0000000100000000-0x000000017fffffff] (2048MB) [ 0.551173][ T0] NODE_DATA(0) allocated [mem 0x7ffd7000-0x7ffdcfff] [ 0.558600][ T0] NODE_DATA(1) allocated [mem 0x17fff7000-0x17fffcfff] [ 0.589988][ T0] Zone ranges: [ 0.593159][ T0] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.599111][ T0] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.606647][ T0] Normal [mem 0x0000000100000000-0x000000017fffffff] [ 0.613108][ T0] Device empty [ 0.617120][ T0] Movable zone start for each node [ 0.621978][ T0] Early memory node ranges [ 0.625804][ T0] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.632073][ T0] node 0: [mem 0x0000000000100000-0x000000007ffdcfff] [ 0.638287][ T0] node 1: [mem 0x0000000100000000-0x000000017fffffff] [ 0.644963][ T0] Initmem setup node 0 [mem 0x0000000000001000-0x000000007ffdcfff] [ 0.652697][ T0] Initmem setup node 1 [mem 0x0000000100000000-0x000000017fffffff] [ 0.660353][ T0] On node 0, zone DMA: 1 pages in unavailable ranges [ 0.666785][ T0] On node 0, zone DMA: 97 pages in unavailable ranges [ 0.768390][ T0] On node 1, zone Normal: 35 pages in unavailable ranges [ 1.043966][ T0] kasan: KernelAddressSanitizer initialized [ 1.061754][ T0] ACPI: PM-Timer IO Port: 0x608 [ 1.070303][ T0] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 1.080613][ T0] IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 [ 1.093390][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) [ 1.104116][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 1.115068][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 1.125645][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 1.139743][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 1.150734][ T0] ACPI: Using ACPI (MADT) for SMP configuration information [ 1.163767][ T0] ACPI: HPET id: 0x8086a201 base: 0xfed00000 [ 1.172031][ T0] TSC deadline timer available [ 1.178166][ T0] CPU topo: Max. logical packages: 2 [ 1.185969][ T0] CPU topo: Max. logical dies: 2 [ 1.194406][ T0] CPU topo: Max. dies per package: 1 [ 1.208673][ T0] CPU topo: Max. threads per core: 2 [ 1.217452][ T0] CPU topo: Num. cores per package: 2 [ 1.224607][ T0] CPU topo: Num. threads per package: 4 [ 1.230103][ T0] CPU topo: Allowing 4 present CPUs plus 4 hotplug CPUs [ 1.243226][ T0] kvm-guest: APIC: eoi() replaced with kvm_guest_apic_eoi_write() [ 1.251153][ T0] kvm-guest: KVM setup pv remote TLB flush [ 1.256934][ T0] kvm-guest: setup PV sched yield [ 1.262001][ T0] PM: hibernation: Registered nosave memory: [mem 0x00000000-0x00000fff] [ 1.273443][ T0] PM: hibernation: Registered nosave memory: [mem 0x0009f000-0x0009ffff] [ 1.283937][ T0] PM: hibernation: Registered nosave memory: [mem 0x000a0000-0x000effff] [ 1.300692][ T0] PM: hibernation: Registered nosave memory: [mem 0x000f0000-0x000fffff] [ 1.311558][ T0] PM: hibernation: Registered nosave memory: [mem 0x7ffdd000-0x7fffffff] [ 1.320624][ T0] PM: hibernation: Registered nosave memory: [mem 0x80000000-0xafffffff] [ 1.338662][ T0] PM: hibernation: Registered nosave memory: [mem 0xb0000000-0xbfffffff] [ 1.350961][ T0] PM: hibernation: Registered nosave memory: [mem 0xc0000000-0xfed1bfff] [ 1.365287][ T0] PM: hibernation: Registered nosave memory: [mem 0xfed1c000-0xfed1ffff] [ 1.376604][ T0] PM: hibernation: Registered nosave memory: [mem 0xfed20000-0xfeffbfff] [ 1.389041][ T0] PM: hibernation: Registered nosave memory: [mem 0xfeffc000-0xfeffffff] [ 1.402262][ T0] PM: hibernation: Registered nosave memory: [mem 0xff000000-0xfffbffff] [ 1.414526][ T0] PM: hibernation: Registered nosave memory: [mem 0xfffc0000-0xffffffff] [ 1.425685][ T0] [mem 0xc0000000-0xfed1bfff] available for PCI devices [ 1.435705][ T0] Booting paravirtualized kernel on KVM [ 1.446941][ T0] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 1.784527][ T0] setup_percpu: NR_CPUS:8 nr_cpumask_bits:8 nr_cpu_ids:8 nr_node_ids:2 [ 1.799816][ T0] percpu: Embedded 74 pages/cpu s264712 r8192 d30200 u1048576 [ 1.810353][ T0] kvm-guest: PV spinlocks enabled [ 1.820409][ T0] PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) [ 1.837172][ T0] Kernel command line: earlyprintk=serial net.ifnames=0 sysctl.kernel.hung_task_all_cpu_backtrace=1 ima_policy=tcb nf-conntrack-ftp.ports=20000 nf-conntrack-tftp.ports=20000 nf-conntrack-sip.ports=20000 nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 binder.debug_mask=0 rcupdate.rcu_expedited=1 rcupdate.rcu_cpu_stall_cputime=1 no_hash_pointers page_owner=on sysctl.vm.nr_hugepages=4 sysctl.vm.nr_overcommit_hugepages=4 secretmem.enable=1 sysctl.max_rcu_stall_to_panic=1 msr.allow_writes=off coredump_filter=0xffff root=/dev/sda console=ttyS0 vsyscall=native numa=fake=2 kvm-intel.nested=1 spec_store_bypass_disable=prctl nopcid vivid.n_devs=16 vivid.multiplanar=1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2 netrom.nr_ndevs=16 rose.rose_ndevs=16 smp.csd_lock_timeout=100000 watchdog_thresh=55 workqueue.watchdog_thresh=140 sysctl.net.core.netdev_unregister_timeout_secs=140 dummy_hcd.num=8 panic_on_warn=1 root=/dev/sda console=ttyS0 root=/dev/sda1 [ 1.960702][ T0] Unknown kernel command line parameters "spec_store_bypass_disable=prctl", will be passed to user space. [ 1.977768][ T0] random: crng init done [ 1.986577][ T0] Fallback order for Node 0: 0 1 [ 1.986609][ T0] Fallback order for Node 1: 1 0 [ 1.986631][ T0] Built 2 zonelists, mobility grouping on. Total pages: 1048443 [ 2.007493][ T0] Policy zone: Normal [ 2.013830][ T0] mem auto-init: stack:all(zero), heap alloc:on, heap free:off [ 2.022509][ T0] stackdepot: allocating hash table via alloc_large_system_hash [ 2.030039][ T0] stackdepot hash table entries: 1048576 (order: 12, 16777216 bytes, linear) [ 2.044681][ T0] software IO TLB: area num 8. [ 3.093640][ T0] Memory: 3146484K/4193772K available (165888K kernel code, 39333K rwdata, 37260K rodata, 26024K init, 34336K bss, 1047032K reserved, 0K cma-reserved) [ 3.127763][ T0] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=8, Nodes=2 [ 3.223025][ T0] allocated 83886080 bytes of page_ext [ 3.230351][ T0] Node 0, zone DMA: page owner found early allocated 0 pages [ 3.261641][ T0] Node 0, zone DMA32: page owner found early allocated 10355 pages [ 3.294844][ T0] Node 1, zone Normal: page owner found early allocated 10243 pages [ 3.307185][ T0] Dynamic Preempt: full [ 3.314143][ T0] Running RCU self tests [ 3.319930][ T0] Running RCU synchronous self tests [ 3.335963][ T0] rcu: Preemptible hierarchical RCU implementation. [ 3.342092][ T0] rcu: RCU lockdep checking is enabled. [ 3.358745][ T0] rcu: RCU callback double-/use-after-free debug is enabled. [ 3.368684][ T0] rcu: RCU debug extended QS entry/exit. [ 3.374013][ T0] All grace periods are expedited (rcu_expedited). [ 3.392837][ T0] Trampoline variant of Tasks RCU enabled. [ 3.412331][ T0] Tracing variant of Tasks RCU enabled. [ 3.438219][ T0] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 3.457361][ T0] Running RCU synchronous self tests [ 3.464580][ T0] RCU Tasks: Setting shift to 3 and lim to 1 rcu_task_cb_adjust=1. [ 3.474374][ T0] RCU Tasks Trace: Setting shift to 3 and lim to 1 rcu_task_cb_adjust=1. [ 3.888762][ T0] NR_IRQS: 4352, nr_irqs: 488, preallocated irqs: 16 [ 3.896999][ T0] rcu: srcu_init: Setting srcu_struct sizes based on contention. [ 3.904589][ T0] kfence: initialized - using 2097152 bytes for 255 objects at 0xffff88816da00000-0xffff88816dc00000 [ 3.954788][ T0] Console: colour VGA+ 80x25 [ 3.967209][ T0] printk: legacy console [ttyS0] enabled [ 3.967209][ T0] printk: legacy console [ttyS0] enabled [ 3.999317][ T0] printk: legacy bootconsole [earlyser0] disabled [ 3.999317][ T0] printk: legacy bootconsole [earlyser0] disabled [ 4.026023][ T0] Lock dependency validator: Copyright (c) 2006 Red Hat, Inc., Ingo Molnar [ 4.042287][ T0] ... MAX_LOCKDEP_SUBCLASSES: 8 [ 4.047660][ T0] ... MAX_LOCK_DEPTH: 48 [ 4.051693][ T0] ... MAX_LOCKDEP_KEYS: 8192 [ 4.077770][ T0] ... CLASSHASH_SIZE: 4096 [ 4.082897][ T0] ... MAX_LOCKDEP_ENTRIES: 131072 [ 4.112706][ T0] ... MAX_LOCKDEP_CHAINS: 262144 [ 4.124309][ T0] ... CHAINHASH_SIZE: 131072 [ 4.128594][ T0] memory used by lock dependency info: 20721 kB [ 4.153942][ T0] memory used for stack traces: 8320 kB [ 4.159139][ T0] per task-struct memory footprint: 1920 bytes [ 4.178033][ T0] mempolicy: Enabling automatic NUMA balancing. Configure with numa_balancing= or the kernel.numa_balancing sysctl [ 4.201589][ T0] ACPI: Core revision 20240322 [ 4.210905][ T0] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns [ 4.251944][ T0] APIC: Switch to symmetric I/O mode setup [ 4.258875][ T0] DMAR: Host address width 39 [ 4.270901][ T0] DMAR: DRHD base: 0x000000fed90000 flags: 0x0 [ 4.277035][ T0] DMAR: dmar0: reg_base_addr fed90000 ver 1:0 cap d2008c22260206 ecap f00f5e [ 4.299526][ T0] DMAR: ATSR flags: 0x1 [ 4.308744][ T0] DMAR-IR: IOAPIC id 0 under DRHD base 0xfed90000 IOMMU 0 [ 4.325602][ T0] DMAR-IR: Queued invalidation will be enabled to support x2apic and Intr-remapping. [ 4.370038][ T0] DMAR-IR: Enabled IRQ remapping in x2apic mode [ 4.374843][ T0] x2apic enabled [ 4.379426][ T0] APIC: Switched APIC routing to: cluster x2apic [ 4.386338][ T0] kvm-guest: APIC: send_IPI_mask() replaced with kvm_send_ipi_mask() [ 4.413649][ T0] kvm-guest: APIC: send_IPI_mask_allbutself() replaced with kvm_send_ipi_mask_allbutself() [ 4.432545][ T0] kvm-guest: setup PV IPIs [ 4.482375][ T0] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 [ 4.490608][ T0] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x257a5699b94, max_idle_ns: 440795293402 ns [ 4.508425][ T0] Calibrating delay loop (skipped) preset value.. 5200.05 BogoMIPS (lpj=26000280) [ 4.519726][ T0] x86/cpu: User Mode Instruction Prevention (UMIP) activated [ 4.529656][ T0] Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 [ 4.538426][ T0] Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 [ 4.546333][ T0] Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization [ 4.548519][ T0] Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! [ 4.558446][ T0] Spectre V2 : Spectre BHI mitigation: SW BHB clearing on vm exit [ 4.568427][ T0] Spectre V2 : Spectre BHI mitigation: SW BHB clearing on syscall [ 4.574557][ T0] Spectre V2 : Mitigation: Enhanced / Automatic IBRS [ 4.578425][ T0] Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch [ 4.588425][ T0] Spectre V2 : Spectre v2 / PBRSB-eIBRS: Retire a single CALL on VMEXIT [ 4.595558][ T0] Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier [ 4.598526][ T0] Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl [ 4.608494][ T0] MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode [ 4.618425][ T0] GDS: Unknown: Dependent on hypervisor status [ 4.624324][ T0] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' [ 4.628424][ T0] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' [ 4.638433][ T0] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' [ 4.646629][ T0] x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' [ 4.648429][ T0] x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' [ 4.658429][ T0] x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' [ 4.668428][ T0] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 4.678423][ T0] x86/fpu: xstate_offset[5]: 832, xstate_sizes[5]: 64 [ 4.688425][ T0] x86/fpu: xstate_offset[6]: 896, xstate_sizes[6]: 512 [ 4.694880][ T0] x86/fpu: xstate_offset[7]: 1408, xstate_sizes[7]: 1024 [ 4.698424][ T0] x86/fpu: Enabled xstate features 0xe7, context size is 2432 bytes, using 'compacted' format. [ 5.113694][ T0] Freeing SMP alternatives memory: 120K [ 5.117918][ T0] pid_max: default: 32768 minimum: 301 [ 5.119352][ T0] LSM: initializing lsm=lockdown,capability,landlock,yama,safesetid,tomoyo,selinux,ima,evm [ 5.128596][ T0] landlock: Up and running. [ 5.131943][ T0] Yama: becoming mindful. [ 5.135398][ T0] TOMOYO Linux initialized [ 5.138518][ T0] SELinux: Initializing. [ 5.151430][ T0] Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, vmalloc hugepage) [ 5.173399][ T0] Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, vmalloc) [ 5.179076][ T0] Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, vmalloc) [ 5.188839][ T0] Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, vmalloc) [ 5.213351][ T0] Running RCU synchronous self tests [ 5.218432][ T0] Running RCU synchronous self tests [ 5.226099][ T1] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.60GHz (family: 0x6, model: 0x6a, stepping: 0x6) [ 5.252705][ T1] Running RCU Tasks wait API self tests [ 5.369941][ T1] Running RCU Tasks Trace wait API self tests [ 5.374910][ T1] Performance Events: unsupported p6 CPU model 106 no PMU driver, software events only. [ 5.378666][ T1] signal: max sigframe size: 3632 [ 5.388504][ T15] Callback from call_rcu_tasks_trace() invoked. [ 5.408567][ T1] rcu: Hierarchical SRCU implementation. [ 5.412812][ T1] rcu: Max phase no-delay instances is 1000. [ 5.439527][ T1] NMI watchdog: Perf NMI watchdog permanently disabled [ 5.458519][ T1] smp: Bringing up secondary CPUs ... [ 5.500196][ T1] smpboot: x86: Booting SMP configuration: [ 5.504862][ T1] .... node #0, CPUs: #2 [ 5.523057][ T1] #1 #3 [ 5.588518][ T14] Callback from call_rcu_tasks() invoked. [ 5.620211][ T1] MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. [ 5.639464][ T1] smp: Brought up 2 nodes, 4 CPUs [ 5.652725][ T1] smpboot: Total of 4 processors activated (20800.22 BogoMIPS) [ 5.694649][ T1] devtmpfs: initialized [ 5.698403][ T1] x86/mm: Memory block size: 128MB [ 5.825902][ T1] Running RCU synchronous self tests [ 5.838477][ T1] Running RCU synchronous self tests [ 5.848442][ T1] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 5.869773][ T1] futex hash table entries: 2048 (order: 6, 262144 bytes, vmalloc) [ 5.908466][ T1] PM: RTC time: 04:18:55, date: 2024-06-22 [ 5.938403][ T1] NET: Registered PF_NETLINK/PF_ROUTE protocol family [ 5.970883][ T1] audit: initializing netlink subsys (disabled) [ 5.988712][ T40] audit: type=2000 audit(1719029935.251:1): state=initialized audit_enabled=0 res=1 [ 6.000106][ T1] thermal_sys: Registered thermal governor 'step_wise' [ 6.000615][ T1] thermal_sys: Registered thermal governor 'user_space' [ 6.007253][ T1] cpuidle: using governor menu [ 6.029072][ T1] NET: Registered PF_QIPCRTR protocol family [ 6.048860][ T1] dca service started, version 1.12.1 [ 6.069205][ T1] PCI: ECAM [mem 0xb0000000-0xbfffffff] (base 0xb0000000) for domain 0000 [bus 00-ff] [ 6.088459][ T1] PCI: ECAM [mem 0xb0000000-0xbfffffff] reserved as E820 entry [ 6.262873][ T1] PCI: Using configuration type 1 for base access [ 6.408462][ T1] HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages [ 6.414979][ T1] HugeTLB: 16380 KiB vmemmap can be freed for a 1.00 GiB page [ 6.448461][ T1] HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages [ 6.459087][ T1] HugeTLB: 28 KiB vmemmap can be freed for a 2.00 MiB page [ 6.488518][ T1] Demotion targets for Node 0: null [ 6.492644][ T1] Demotion targets for Node 1: null [ 6.518502][ T1] cryptd: max_cpu_qlen set to 1000 [ 6.531102][ T1] raid6: skipped pq benchmark and selected avx512x4 [ 6.538445][ T1] raid6: using avx512x2 recovery algorithm [ 6.542355][ T1] ACPI: Added _OSI(Module Device) [ 6.548452][ T1] ACPI: Added _OSI(Processor Device) [ 6.552533][ T1] ACPI: Added _OSI(3.0 _SCP Extensions) [ 6.568454][ T1] ACPI: Added _OSI(Processor Aggregator Device) [ 7.070725][ T1] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 7.200102][ T1] ACPI: _OSC evaluation for CPUs failed, trying _PDC [ 7.239756][ T1] ACPI: Interpreter enabled [ 7.261605][ T1] ACPI: PM: (supports S0 S3 S4 S5) [ 7.268512][ T1] ACPI: Using IOAPIC for interrupt routing [ 7.279617][ T1] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 7.298454][ T1] PCI: Using E820 reservations for host bridge windows [ 7.324065][ T1] ACPI: Enabled 4 GPEs in block 00 to 3F [ 7.938532][ T1] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 7.948603][ T1] acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] [ 7.976771][ T1] acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] [ 8.020695][ T1] acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] [ 8.033204][ T1] PCI host bridge to bus 0000:00 [ 8.038474][ T1] pci_bus 0000:00: Unknown NUMA node; performance will be reduced [ 8.048479][ T1] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 8.054603][ T1] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 8.054809][ T1] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 8.058403][ T1] pci_bus 0000:00: root bus resource [mem 0x80000000-0xafffffff window] [ 8.088491][ T1] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] [ 8.118480][ T1] pci_bus 0000:00: root bus resource [mem 0x580000000-0xd7fffffff window] [ 8.124898][ T1] pci_bus 0000:00: root bus resource [bus 00-ff] [ 8.129995][ T1] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 8.148403][ T1] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 8.190876][ T1] pci 0000:00:01.0: BAR 0 [mem 0xfd800000-0xfdffffff pref] [ 8.218815][ T1] pci 0000:00:01.0: BAR 2 [mem 0xfe200000-0xfe203fff 64bit pref] [ 8.238579][ T1] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 8.260078][ T1] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 8.266944][ T1] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 8.285484][ T1] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 8.301920][ T1] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 8.308403][ T1] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 8.342732][ T1] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 8.351625][ T1] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 8.399939][ T1] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 8.430935][ T1] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 8.442122][ T1] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 8.482076][ T1] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff] [ 8.518499][ T1] pci 0000:00:03.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 8.536967][ T1] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 8.574318][ T1] pci 0000:00:04.0: PCI bridge to [bus 01] [ 8.588787][ T1] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 8.596376][ T1] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 8.638403][ T1] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 8.652426][ T1] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 8.661963][ T1] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff] [ 8.687473][ T1] pci 0000:00:05.0: BAR 4 [mem 0xfe208000-0xfe20bfff 64bit pref] [ 8.718403][ T1] pci 0000:00:06.0: [8086:100e] type 00 class 0x020000 conventional PCI endpoint [ 8.751494][ T1] pci 0000:00:06.0: BAR 0 [mem 0xfeac0000-0xfeadffff] [ 8.756586][ T1] pci 0000:00:06.0: BAR 1 [io 0xc000-0xc03f] [ 8.781767][ T1] pci 0000:00:06.0: ROM [mem 0xfea40000-0xfea7ffff pref] [ 8.810439][ T1] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 8.826075][ T1] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 8.856421][ T1] pci 0000:00:1d.1: [8086:2935] type 00 class 0x0c0300 conventional PCI endpoint [ 8.886309][ T1] pci 0000:00:1d.1: BAR 4 [io 0xc100-0xc11f] [ 8.927785][ T1] pci 0000:00:1d.2: [8086:2936] type 00 class 0x0c0300 conventional PCI endpoint [ 8.935926][ T1] pci 0000:00:1d.2: BAR 4 [io 0xc120-0xc13f] [ 8.948665][ T1] pci 0000:00:1d.7: [8086:293a] type 00 class 0x0c0320 conventional PCI endpoint [ 8.963913][ T1] pci 0000:00:1d.7: BAR 0 [mem 0xfeaf7000-0xfeaf7fff] [ 8.978403][ T1] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint [ 9.020734][ T1] pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO [ 9.038915][ T1] pci 0000:00:1f.0: quirk_ich7_lpc+0x0/0x70 took 19531 usecs [ 9.058403][ T1] pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 conventional PCI endpoint [ 9.117809][ T1] pci 0000:00:1f.2: BAR 4 [io 0xc140-0xc15f] [ 9.117809][ T1] pci 0000:00:1f.2: BAR 5 [mem 0xfeaf8000-0xfeaf8fff] [ 9.135362][ T1] pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 conventional PCI endpoint [ 9.176566][ T1] pci 0000:00:1f.3: BAR 4 [io 0x0700-0x073f] [ 9.194493][ T1] pci 0000:00:04.0: PCI bridge to [bus 01] [ 9.228403][ T1] ACPI: PCI: Interrupt link LNKA configured for IRQ 10 [ 9.248403][ T1] ACPI: PCI: Interrupt link LNKB configured for IRQ 10 [ 9.265279][ T1] ACPI: PCI: Interrupt link LNKC configured for IRQ 11 [ 9.296304][ T1] ACPI: PCI: Interrupt link LNKD configured for IRQ 11 [ 9.335945][ T1] ACPI: PCI: Interrupt link LNKE configured for IRQ 10 [ 9.338403][ T1] ACPI: PCI: Interrupt link LNKF configured for IRQ 10 [ 9.366146][ T1] ACPI: PCI: Interrupt link LNKG configured for IRQ 11 [ 9.386035][ T1] ACPI: PCI: Interrupt link LNKH configured for IRQ 11 [ 9.400426][ T1] ACPI: PCI: Interrupt link GSIA configured for IRQ 16 [ 9.419705][ T1] ACPI: PCI: Interrupt link GSIB configured for IRQ 17 [ 9.427315][ T1] ACPI: PCI: Interrupt link GSIC configured for IRQ 18 [ 9.440106][ T1] ACPI: PCI: Interrupt link GSID configured for IRQ 19 [ 9.445509][ T1] ACPI: PCI: Interrupt link GSIE configured for IRQ 20 [ 9.446904][ T1] ACPI: PCI: Interrupt link GSIF configured for IRQ 21 [ 9.448403][ T1] ACPI: PCI: Interrupt link GSIG configured for IRQ 22 [ 9.459506][ T1] ACPI: PCI: Interrupt link GSIH configured for IRQ 23 [ 9.534528][ T1] iommu: Default domain type: Translated [ 9.539198][ T1] iommu: DMA domain TLB invalidation policy: lazy mode [ 9.545839][ T1] SCSI subsystem initialized [ 9.548403][ T1] ACPI: bus type USB registered [ 9.548403][ T1] usbcore: registered new interface driver usbfs [ 9.559676][ T1] usbcore: registered new interface driver hub [ 9.565669][ T1] usbcore: registered new device driver usb [ 9.571468][ T1] mc: Linux media interface: v0.10 [ 9.578936][ T1] videodev: Linux video capture interface: v2.00 [ 9.589794][ T1] pps_core: LinuxPPS API ver. 1 registered [ 9.594507][ T1] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti [ 9.608659][ T1] PTP clock support registered [ 9.619976][ T1] EDAC MC: Ver: 3.0.0 [ 9.623905][ T1] Advanced Linux Sound Architecture Driver Initialized. [ 9.715703][ T1] Bluetooth: Core ver 2.22 [ 9.718759][ T1] NET: Registered PF_BLUETOOTH protocol family [ 9.729160][ T1] Bluetooth: HCI device and connection manager initialized [ 9.733785][ T1] Bluetooth: HCI socket layer initialized [ 9.738164][ T1] Bluetooth: L2CAP socket layer initialized [ 9.738403][ T1] Bluetooth: SCO socket layer initialized [ 9.738688][ T1] NET: Registered PF_ATMPVC protocol family [ 9.748403][ T1] NET: Registered PF_ATMSVC protocol family [ 9.759040][ T1] NetLabel: Initializing [ 9.778479][ T1] NetLabel: domain hash size = 128 [ 9.783876][ T1] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO [ 9.788403][ T1] NetLabel: unlabeled traffic allowed by default [ 9.788403][ T1] nfc: nfc_init: NFC Core ver 0.1 [ 9.799188][ T1] NET: Registered PF_NFC protocol family [ 9.808622][ T1] PCI: Using ACPI for IRQ routing [ 10.841920][ T1] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 10.848403][ T1] pci 0000:00:01.0: vgaarb: bridge control possible [ 10.848403][ T1] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 10.888518][ T1] vgaarb: loaded [ 10.900885][ T1] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 [ 10.905583][ T1] hpet0: 3 comparators, 64-bit 100.000000 MHz counter [ 10.908403][ T1] clocksource: Switched to clocksource kvm-clock [ 10.963883][ T1] VFS: Disk quotas dquot_6.6.0 [ 10.977105][ T1] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 11.069625][ T1] netfs: FS-Cache loaded [ 11.074968][ T1] CacheFiles: Loaded [ 11.088124][ T1] TOMOYO: 2.6.0 [ 11.103190][ T1] Mandatory Access Control activated. [ 11.115517][ T1] pnp: PnP ACPI init [ 11.157281][ T1] system 00:06: [mem 0xb0000000-0xbfffffff window] has been reserved [ 11.251380][ T1] pnp: PnP ACPI: found 7 devices [ 11.402702][ T1] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 11.415584][ T1] NET: Registered PF_INET protocol family [ 11.425523][ T1] IP idents hash table entries: 65536 (order: 7, 524288 bytes, vmalloc) [ 11.437488][ T1] tcp_listen_portaddr_hash hash table entries: 2048 (order: 5, 147456 bytes, vmalloc) [ 11.460053][ T1] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, vmalloc) [ 11.469075][ T1] TCP established hash table entries: 32768 (order: 6, 262144 bytes, vmalloc) [ 11.483743][ T1] TCP bind hash table entries: 32768 (order: 10, 4718592 bytes, vmalloc hugepage) [ 11.495393][ T1] TCP: Hash tables configured (established 32768 bind 32768) [ 11.506395][ T1] MPTCP token hash table entries: 4096 (order: 6, 360448 bytes, vmalloc) [ 11.515638][ T1] UDP hash table entries: 2048 (order: 6, 327680 bytes, vmalloc) [ 11.524315][ T1] UDP-Lite hash table entries: 2048 (order: 6, 327680 bytes, vmalloc) [ 11.533408][ T1] NET: Registered PF_UNIX/PF_LOCAL protocol family [ 11.544244][ T1] RPC: Registered named UNIX socket transport module. [ 11.549980][ T1] RPC: Registered udp transport module. [ 11.555004][ T1] RPC: Registered tcp transport module. [ 11.560160][ T1] RPC: Registered tcp-with-tls transport module. [ 11.566337][ T1] RPC: Registered tcp NFSv4.1 backchannel transport module. [ 11.577270][ T1] NET: Registered PF_XDP protocol family [ 11.582443][ T1] pci 0000:00:04.0: bridge window [io 0x1000-0x0fff] to [bus 01] add_size 1000 [ 11.591890][ T1] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 11.600374][ T1] pci 0000:00:04.0: PCI bridge to [bus 01] [ 11.607417][ T1] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 11.616804][ T1] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 11.631709][ T1] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 11.649055][ T1] pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] [ 11.657002][ T1] pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] [ 11.664127][ T1] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] [ 11.674310][ T1] pci_bus 0000:00: resource 7 [mem 0x80000000-0xafffffff window] [ 11.716964][ T1] pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] [ 11.740049][ T1] pci_bus 0000:00: resource 9 [mem 0x580000000-0xd7fffffff window] [ 11.760349][ T1] pci_bus 0000:01: resource 0 [io 0x1000-0x1fff] [ 11.788781][ T1] pci_bus 0000:01: resource 1 [mem 0xfe800000-0xfe9fffff] [ 11.797272][ T1] pci_bus 0000:01: resource 2 [mem 0xfe000000-0xfe1fffff 64bit pref] [ 11.950795][ T1] ACPI: \_SB_.GSIA: Enabled at IRQ 16 [ 12.027643][ T1] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1440 took 181573 usecs [ 12.143200][ T1] ACPI: \_SB_.GSIB: Enabled at IRQ 17 [ 12.236617][ T1] pci 0000:00:1d.1: quirk_usb_early_handoff+0x0/0x1440 took 174706 usecs [ 12.329671][ T1] ACPI: \_SB_.GSIC: Enabled at IRQ 18 [ 12.393765][ T1] pci 0000:00:1d.2: quirk_usb_early_handoff+0x0/0x1440 took 139228 usecs [ 12.459894][ T1] ACPI: \_SB_.GSID: Enabled at IRQ 19 [ 12.560988][ T1] pci 0000:00:1d.7: quirk_usb_early_handoff+0x0/0x1440 took 150647 usecs [ 12.580441][ T1] PCI: CLS 0 bytes, default 64 [ 12.596608][ T1] DMAR: No RMRR found [ 12.600279][ T1] DMAR: No SATC found [ 12.603671][ T1] DMAR: dmar0: Using Queued invalidation [ 12.624456][ T74] kworker/u32:3 (74) used greatest stack depth: 27984 bytes left [ 12.641808][ T1] pci 0000:00:00.0: Adding to iommu group 0 [ 12.658016][ T1] pci 0000:00:01.0: Adding to iommu group 1 [ 12.665863][ T1] pci 0000:00:02.0: Adding to iommu group 2 [ 12.695563][ T1] pci 0000:00:03.0: Adding to iommu group 3 [ 12.701185][ T1] pci 0000:00:04.0: Adding to iommu group 4 [ 12.707180][ T1] pci 0000:00:05.0: Adding to iommu group 5 [ 12.726693][ T1] pci 0000:00:06.0: Adding to iommu group 6 [ 12.747213][ T1] pci 0000:00:1d.0: Adding to iommu group 7 [ 12.752999][ T1] pci 0000:00:1d.1: Adding to iommu group 7 [ 12.765311][ T1] pci 0000:00:1d.2: Adding to iommu group 7 [ 12.773285][ T1] pci 0000:00:1d.7: Adding to iommu group 7 [ 12.782736][ T1] pci 0000:00:1f.0: Adding to iommu group 8 [ 12.787612][ T1] pci 0000:00:1f.2: Adding to iommu group 8 [ 12.795914][ T1] pci 0000:00:1f.3: Adding to iommu group 8 [ 12.882359][ T1] DMAR: Intel(R) Virtualization Technology for Directed I/O [ 12.891219][ T1] PCI-DMA: Using software bounce buffering for IO (SWIOTLB) [ 12.902575][ T1] software IO TLB: mapped [mem 0x0000000067000000-0x000000006b000000] (64MB) [ 12.932458][ T1] ACPI: bus type thunderbolt registered [ 12.974923][ T1] RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer [ 13.554012][ T1] kvm_amd: CPU 2 isn't AMD or Hygon [ 13.559276][ T1] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x257a5699b94, max_idle_ns: 440795293402 ns [ 13.668331][ T1] clocksource: Switched to clocksource tsc [ 13.713162][ T80] kworker/u32:2 (80) used greatest stack depth: 27952 bytes left [ 13.730904][ T85] kworker/u32:4 (85) used greatest stack depth: 26752 bytes left [ 13.942961][ T1] Initialise system trusted keyrings [ 13.967881][ T1] workingset: timestamp_bits=40 max_order=20 bucket_order=0 [ 13.990135][ T1] DLM installed [ 14.000230][ T1] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 14.021680][ T1] NFS: Registering the id_resolver key type [ 14.027839][ T1] Key type id_resolver registered [ 14.032996][ T1] Key type id_legacy registered [ 14.038336][ T1] nfs4filelayout_init: NFSv4 File Layout Driver Registering... [ 14.069065][ T1] nfs4flexfilelayout_init: NFSv4 Flexfile Layout Driver Registering... [ 14.116962][ T1] Key type cifs.spnego registered [ 14.121206][ T1] Key type cifs.idmap registered [ 14.127191][ T1] ntfs3: Enabled Linux POSIX ACLs support [ 14.145849][ T1] ntfs3: Read-only LZX/Xpress compression included [ 14.162044][ T1] efs: 1.0a - http://aeschi.ch.eu.org/efs/ [ 14.177725][ T1] jffs2: version 2.2. (NAND) (SUMMARY) © 2001-2006 Red Hat, Inc. [ 14.188237][ T1] romfs: ROMFS MTD (C) 2007 Red Hat, Inc. [ 14.197534][ T1] QNX4 filesystem 0.2.3 registered. [ 14.205814][ T1] qnx6: QNX6 filesystem 1.0.0 registered. [ 14.220824][ T1] fuse: init (API version 7.40) [ 14.239952][ T1] orangefs_debugfs_init: called with debug mask: :none: :0: [ 14.247300][ T1] orangefs_init: module version upstream loaded [ 14.263898][ T1] JFS: nTxBlock = 8192, nTxLock = 65536 [ 14.368890][ T1] SGI XFS with ACLs, security attributes, realtime, quota, no debug enabled [ 14.390378][ T1] 9p: Installing v9fs 9p2000 file system support [ 14.406579][ T1] NILFS version 2 loaded [ 14.409813][ T1] befs: version: 0.9.3 [ 14.415637][ T1] ocfs2: Registered cluster interface o2cb [ 14.421143][ T1] ocfs2: Registered cluster interface user [ 14.428357][ T1] OCFS2 User DLM kernel interface loaded [ 14.460454][ T1] gfs2: GFS2 installed [ 14.486226][ T1] ceph: loaded (mds proto 32) [ 14.594500][ T1] NET: Registered PF_ALG protocol family [ 14.602944][ T1] xor: automatically using best checksumming function avx [ 14.614224][ T1] async_tx: api initialized (async) [ 14.621143][ T1] Key type asymmetric registered [ 14.625002][ T1] Asymmetric key parser 'x509' registered [ 14.628854][ T1] Asymmetric key parser 'pkcs8' registered [ 14.634258][ T1] Key type pkcs7_test registered [ 14.640588][ T1] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 239) [ 14.667845][ T1] io scheduler mq-deadline registered [ 14.673210][ T1] io scheduler kyber registered [ 14.695314][ T1] io scheduler bfq registered [ 14.851437][ T1] ACPI: \_SB_.GSIE: Enabled at IRQ 20 [ 14.896976][ T1] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 14.929650][ T1] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 14.943381][ T1] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 14.967249][ T1] ACPI: button: Power Button [PWRF] [ 15.906258][ T1] ioatdma: Intel(R) QuickData Technology Driver 5.00 [ 16.003002][ T1] ACPI: \_SB_.GSIF: Enabled at IRQ 21 [ 16.111499][ T1] ACPI: \_SB_.GSIH: Enabled at IRQ 23 [ 17.513999][ T1] N_HDLC line discipline registered with maxframe=4096 [ 17.526569][ T1] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled [ 17.546695][ T1] 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 17.699131][ T1] Non-volatile memory driver v1.3 [ 17.729851][ T1] Linux agpgart interface v0.103 [ 17.779571][ T1] ACPI: bus type drm_connector registered [ 17.814394][ T1] [drm] Initialized vgem 1.0.0 20120112 for vgem on minor 0 [ 17.845851][ T1] [drm] Initialized vkms 1.0.0 20180514 for vkms on minor 1 [ 18.069531][ T1] Console: switching to colour frame buffer device 128x48 [ 18.097743][ T1] platform vkms: [drm] fb0: vkmsdrmfb frame buffer device [ 18.107546][ T1] usbcore: registered new interface driver udl [ 18.115429][ T1] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 18.121340][ T1] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 18.132613][ T1] [drm] features: -virgl +edid -resource_blob -host_visible [ 18.132632][ T1] [drm] features: -context_init [ 18.188069][ T1] [drm] number of scanouts: 1 [ 18.200991][ T1] [drm] number of cap sets: 0 [ 18.216283][ T1] [drm] Initialized virtio_gpu 0.1.0 0 for 0000:00:01.0 on minor 2 [ 18.302619][ T1] fbcon: virtio_gpudrmfb (fb1) is primary device [ 18.302731][ T1] fbcon: Remapping primary device, fb1, to tty 1-63 [ 294.137383][ T41] INFO: task swapper/0:1 blocked for more than 143 seconds. [ 294.137412][ T41] Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 294.137423][ T41] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.137430][ T41] task:swapper/0 state:D stack:22224 pid:1 tgid:1 ppid:0 flags:0x00004000 [ 294.137461][ T41] Call Trace: [ 294.137469][ T41] [ 294.137477][ T41] __schedule+0xf15/0x5d00 [ 294.137558][ T41] ? __pfx___lock_acquire+0x10/0x10 [ 294.137583][ T41] ? __pfx___lock_acquire+0x10/0x10 [ 294.137612][ T41] ? __pfx___schedule+0x10/0x10 [ 294.137636][ T41] ? schedule+0x298/0x350 [ 294.137663][ T41] ? __pfx_lock_release+0x10/0x10 [ 294.137684][ T41] ? __ww_mutex_lock.constprop.0+0xf50/0x2650 [ 294.137702][ T41] ? __mutex_trylock_common+0x78/0x250 [ 294.137729][ T41] schedule+0xe7/0x350 [ 294.137751][ T41] schedule_preempt_disabled+0x13/0x30 [ 294.137777][ T41] __ww_mutex_lock.constprop.0+0xf55/0x2650 [ 294.137796][ T41] ? do_one_initcall+0x128/0x700 [ 294.137819][ T41] ? kernel_init_freeable+0x69d/0xca0 [ 294.137840][ T41] ? kernel_init+0x1c/0x2b0 [ 294.137861][ T41] ? modeset_lock+0x488/0x6c0 [ 294.137879][ T41] ? __pfx___ww_mutex_lock.constprop.0+0x10/0x10 [ 294.137900][ T41] ? __pfx___might_resched+0x10/0x10 [ 294.137920][ T41] ? ww_mutex_lock+0x37/0x140 [ 294.137937][ T41] ww_mutex_lock+0x37/0x140 [ 294.137955][ T41] modeset_lock+0x488/0x6c0 [ 294.137971][ T41] drm_modeset_lock+0x59/0x90 [ 294.137989][ T41] drm_atomic_get_plane_state+0x19d/0x590 [ 294.138011][ T41] drm_client_modeset_commit_atomic+0x246/0x810 [ 294.138032][ T41] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 294.138051][ T41] ? __mutex_lock+0x1a6/0x9c0 [ 294.138068][ T41] ? __mutex_lock+0x1a6/0x9c0 [ 294.138085][ T41] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.138105][ T41] drm_client_modeset_commit_locked+0x14d/0x580 [ 294.138125][ T41] drm_fb_helper_pan_display+0x2a5/0x990 [ 294.138153][ T41] fb_pan_display+0x477/0x7d0 [ 294.138171][ T41] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 294.138197][ T41] bit_update_start+0x49/0x1f0 [ 294.138213][ T41] fbcon_switch+0xbbf/0x12f0 [ 294.138238][ T41] ? __pfx_fbcon_switch+0x10/0x10 [ 294.138264][ T41] ? __pfx_bit_cursor+0x10/0x10 [ 294.138278][ T41] ? fbcon_cursor+0x3bf/0x520 [ 294.138301][ T41] ? fb_var_to_videomode+0x4c9/0x690 [ 294.138320][ T41] ? is_console_locked+0x9/0x20 [ 294.138343][ T41] ? con_is_visible+0x65/0x150 [ 294.138363][ T41] redraw_screen+0x2bf/0x760 [ 294.138387][ T41] ? __pfx_redraw_screen+0x10/0x10 [ 294.138409][ T41] fbcon_prepare_logo+0xa9e/0xc70 [ 294.138436][ T41] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 294.138452][ T41] set_con2fb_map+0xcf4/0x1060 [ 294.138478][ T41] fbcon_fb_registered+0x21d/0x6a0 [ 294.138503][ T41] ? fb_var_to_videomode+0x4c9/0x690 [ 294.138521][ T41] register_framebuffer+0x485/0x840 [ 294.138539][ T41] ? __pfx_register_framebuffer+0x10/0x10 [ 294.138559][ T41] ? drm_fbdev_generic_helper_fb_probe+0x49e/0x680 [ 294.138583][ T41] __drm_fb_helper_initial_config_and_unlock+0xd82/0x1650 [ 294.138619][ T41] ? __pfx___mutex_lock+0x10/0x10 [ 294.138636][ T41] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 294.138664][ T41] drm_fb_helper_initial_config+0x44/0x60 [ 294.138690][ T41] drm_fbdev_generic_client_hotplug+0x1a6/0x280 [ 294.138714][ T41] ? __pfx_drm_fbdev_generic_client_hotplug+0x10/0x10 [ 294.138738][ T41] drm_client_register+0x195/0x280 [ 294.138756][ T41] drm_fbdev_generic_setup+0x184/0x340 [ 294.138779][ T41] virtio_gpu_probe+0x29d/0x4e0 [ 294.138797][ T41] virtio_dev_probe+0x5ff/0x9b0 [ 294.138821][ T41] ? __pfx_virtio_dev_probe+0x10/0x10 [ 294.138844][ T41] really_probe+0x23e/0xa90 [ 294.138865][ T41] __driver_probe_device+0x1de/0x440 [ 294.138884][ T41] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 294.138909][ T41] driver_probe_device+0x4c/0x1b0 [ 294.138929][ T41] __driver_attach+0x283/0x580 [ 294.138947][ T41] ? __pfx___driver_attach+0x10/0x10 [ 294.138967][ T41] bus_for_each_dev+0x13c/0x1d0 [ 294.138993][ T41] ? __pfx_bus_for_each_dev+0x10/0x10 [ 294.139018][ T41] bus_add_driver+0x2e9/0x690 [ 294.139036][ T41] driver_register+0x15c/0x4b0 [ 294.139058][ T41] ? __register_virtio_driver+0x56/0x100 [ 294.139081][ T41] ? __pfx_virtio_gpu_driver_init+0x10/0x10 [ 294.139102][ T41] do_one_initcall+0x128/0x700 [ 294.139129][ T41] ? __pfx_do_one_initcall+0x10/0x10 [ 294.139154][ T41] ? trace_kmalloc+0x2d/0xe0 [ 294.139175][ T41] ? __kmalloc_noprof+0x20b/0x410 [ 294.139193][ T41] kernel_init_freeable+0x69d/0xca0 [ 294.139218][ T41] ? __pfx_kernel_init+0x10/0x10 [ 294.139239][ T41] kernel_init+0x1c/0x2b0 [ 294.139261][ T41] ? __pfx_kernel_init+0x10/0x10 [ 294.139282][ T41] ret_from_fork+0x45/0x80 [ 294.139305][ T41] ? __pfx_kernel_init+0x10/0x10 [ 294.139327][ T41] ret_from_fork_asm+0x1a/0x30 [ 294.139352][ T41] [ 294.139374][ T41] INFO: task kworker/3:1:47 blocked for more than 143 seconds. [ 294.139386][ T41] Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 294.139397][ T41] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.139404][ T41] task:kworker/3:1 state:D stack:26760 pid:47 tgid:47 ppid:2 flags:0x00004000 [ 294.139441][ T41] Workqueue: events drm_fb_helper_damage_work [ 294.139466][ T41] Call Trace: [ 294.139473][ T41] [ 294.139480][ T41] __schedule+0xf15/0x5d00 [ 294.139506][ T41] ? __pfx___schedule+0x10/0x10 [ 294.139530][ T41] ? __pfx___schedule+0x10/0x10 [ 294.139555][ T41] ? schedule+0x298/0x350 [ 294.139578][ T41] ? __pfx_lock_release+0x10/0x10 [ 294.139604][ T41] schedule+0xe7/0x350 [ 294.139635][ T41] virtio_gpu_queue_fenced_ctrl_buffer+0x497/0xff0 [ 294.139661][ T41] ? __pfx_virtio_gpu_queue_fenced_ctrl_buffer+0x10/0x10 [ 294.139687][ T41] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 294.139708][ T41] ? kmem_cache_alloc_noprof+0x174/0x2f0 [ 294.139728][ T41] ? __pfx_autoremove_wake_function+0x10/0x10 [ 294.139755][ T41] ? __asan_memset+0x23/0x50 [ 294.139776][ T41] ? virtio_gpu_cmd_resource_flush+0x85/0x220 [ 294.139800][ T41] virtio_gpu_primary_plane_update+0x105d/0x1590 [ 294.139830][ T41] ? __pfx_virtio_gpu_primary_plane_update+0x10/0x10 [ 294.139857][ T41] ? drm_crtc_next_vblank_start+0x25d/0x300 [ 294.139882][ T41] drm_atomic_helper_commit_planes+0x93a/0x1000 [ 294.139910][ T41] drm_atomic_helper_commit_tail+0x69/0xf0 [ 294.139936][ T41] commit_tail+0x356/0x410 [ 294.139960][ T41] drm_atomic_helper_commit+0x2fd/0x380 [ 294.139986][ T41] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 294.140011][ T41] drm_atomic_commit+0x227/0x300 [ 294.140034][ T41] ? __pfx_drm_atomic_commit+0x10/0x10 [ 294.140054][ T41] ? __pfx___drm_printfn_info+0x10/0x10 [ 294.140078][ T41] ? modeset_lock+0x10e/0x6c0 [ 294.140094][ T41] drm_atomic_helper_dirtyfb+0x615/0x7b0 [ 294.140116][ T41] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 294.140136][ T41] ? wake_up_q+0x9e/0x140 [ 294.140155][ T41] ? do_raw_spin_unlock+0x172/0x230 [ 294.140177][ T41] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 294.140198][ T41] drm_fbdev_generic_helper_fb_dirty+0x7ad/0xbd0 [ 294.140225][ T41] ? __pfx_drm_fbdev_generic_helper_fb_dirty+0x10/0x10 [ 294.140252][ T41] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 294.140276][ T41] drm_fb_helper_damage_work+0x285/0x5e0 [ 294.140302][ T41] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 294.140328][ T41] process_one_work+0x9fb/0x1b60 [ 294.140348][ T41] ? __pfx_lock_acquire+0x10/0x10 [ 294.140372][ T41] ? __pfx_process_one_work+0x10/0x10 [ 294.140391][ T41] ? assign_work+0x1a0/0x250 [ 294.140415][ T41] worker_thread+0x6c8/0xf70 [ 294.140434][ T41] ? __kthread_parkme+0x148/0x220 [ 294.140455][ T41] ? __pfx_worker_thread+0x10/0x10 [ 294.140472][ T41] kthread+0x2c1/0x3a0 [ 294.140491][ T41] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.140515][ T41] ? __pfx_kthread+0x10/0x10 [ 294.140535][ T41] ret_from_fork+0x45/0x80 [ 294.140559][ T41] ? __pfx_kthread+0x10/0x10 [ 294.140580][ T41] ret_from_fork_asm+0x1a/0x30 [ 294.140612][ T41] [ 294.140637][ T41] INFO: task kworker/0:2:339 blocked for more than 143 seconds. [ 294.140649][ T41] Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 294.140659][ T41] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.140665][ T41] task:kworker/0:2 state:D stack:25808 pid:339 tgid:339 ppid:2 flags:0x00004000 [ 294.140699][ T41] Workqueue: events virtio_gpu_dequeue_ctrl_func [ 294.140723][ T41] Call Trace: [ 294.140729][ T41] [ 294.140736][ T41] __schedule+0xf15/0x5d00 [ 294.140761][ T41] ? __pfx___lock_acquire+0x10/0x10 [ 294.140785][ T41] ? __pfx___lock_acquire+0x10/0x10 [ 294.140812][ T41] ? __pfx___schedule+0x10/0x10 [ 294.140837][ T41] ? schedule+0x298/0x350 [ 294.140860][ T41] ? __pfx_lock_release+0x10/0x10 [ 294.140884][ T41] ? __mutex_lock+0x5b3/0x9c0 [ 294.140901][ T41] ? __mutex_trylock_common+0x78/0x250 [ 294.140929][ T41] schedule+0xe7/0x350 [ 294.140953][ T41] schedule_preempt_disabled+0x13/0x30 [ 294.140980][ T41] __mutex_lock+0x5b8/0x9c0 [ 294.140997][ T41] ? call_usermodehelper_setup+0x252/0x340 [ 294.141016][ T41] ? kobject_uevent_env+0x2db/0x1810 [ 294.141037][ T41] ? drm_client_dev_hotplug+0x169/0x3c0 [ 294.141055][ T41] ? __pfx___mutex_lock+0x10/0x10 [ 294.141074][ T41] ? preempt_schedule_thunk+0x1a/0x30 [ 294.141094][ T41] ? drm_client_dev_hotplug+0x169/0x3c0 [ 294.141111][ T41] drm_client_dev_hotplug+0x169/0x3c0 [ 294.149744][ T41] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 294.149788][ T41] virtio_gpu_cmd_get_display_info_cb+0x3e1/0x550 [ 294.149816][ T41] ? __pfx_virtio_gpu_cmd_get_display_info_cb+0x10/0x10 [ 294.149840][ T41] virtio_gpu_dequeue_ctrl_func+0x209/0x7d0 [ 294.149866][ T41] ? __pfx_virtio_gpu_dequeue_ctrl_func+0x10/0x10 [ 294.149891][ T41] process_one_work+0x9fb/0x1b60 [ 294.149915][ T41] ? __pfx_lock_acquire+0x10/0x10 [ 294.149943][ T41] ? __pfx_process_one_work+0x10/0x10 [ 294.149963][ T41] ? assign_work+0x1a0/0x250 [ 294.149991][ T41] worker_thread+0x6c8/0xf70 [ 294.150011][ T41] ? __kthread_parkme+0x148/0x220 [ 294.150036][ T41] ? __pfx_worker_thread+0x10/0x10 [ 294.150054][ T41] kthread+0x2c1/0x3a0 [ 294.150076][ T41] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.150101][ T41] ? __pfx_kthread+0x10/0x10 [ 294.150122][ T41] ret_from_fork+0x45/0x80 [ 294.150149][ T41] ? __pfx_kthread+0x10/0x10 [ 294.150171][ T41] ret_from_fork_asm+0x1a/0x30 [ 294.150201][ T41] [ 294.150218][ T41] [ 294.150218][ T41] Showing all locks held in the system: [ 294.150227][ T41] 9 locks held by swapper/0/1: [ 294.150239][ T41] #0: ffff88801dd54170 (&dev->mutex){....}-{3:3}, at: __driver_attach+0x278/0x580 [ 294.150297][ T41] #1: ffff88801fbd02f8 (&dev->clientlist_mutex){+.+.}-{3:3}, at: drm_client_register+0x54/0x280 [ 294.150347][ T41] #2: ffffffff8e6e56c8 (registration_lock){+.+.}-{3:3}, at: register_framebuffer+0x7a/0x840 [ 294.150397][ T41] #3: ffffffff8db9f320 (console_lock){+.+.}-{0:0}, at: fbcon_fb_registered+0x3c/0x6a0 [ 294.150452][ T41] #4: ffff88801fb01280 (&helper->lock){+.+.}-{3:3}, at: drm_fb_helper_pan_display+0xd5/0x990 [ 294.150510][ T41] #5: ffff88801fbd01b0 (&dev->master_mutex){+.+.}-{3:3}, at: drm_master_internal_acquire+0x21/0x80 [ 294.150569][ T41] #6: ffff88801fb01098 (&client->modeset_mutex){+.+.}-{3:3}, at: drm_client_modeset_commit_locked+0x4c/0x580 [ 294.150620][ T41] #7: ffffc90000047270 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_client_modeset_commit_atomic+0xd0/0x810 [ 294.150668][ T41] #8: ffff88801f7bc0b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: modeset_lock+0x488/0x6c0 [ 294.150725][ T41] 1 lock held by khungtaskd/41: [ 294.150737][ T41] #0: ffffffff8dbb1920 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 294.150792][ T41] 5 locks held by kworker/3:1/47: [ 294.150803][ T41] #0: ffff888015488948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 294.150850][ T41] #1: ffffc900009f7d80 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 294.150898][ T41] #2: ffffc900009f7a10 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_atomic_helper_dirtyfb+0xb5/0x7b0 [ 294.150949][ T41] #3: ffff88801f7bc0b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: modeset_lock+0x488/0x6c0 [ 294.150994][ T41] #4: ffffffff8e821cb0 (drm_unplug_srcu){.+.+}-{0:0}, at: drm_dev_enter+0x49/0x160 [ 294.151049][ T41] 2 locks held by kworker/u32:4/71: [ 294.151060][ T41] #0: ffff888015491148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 294.151107][ T41] #1: ffffc90000f9fd80 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 294.151161][ T41] 3 locks held by kworker/0:2/339: [ 294.151172][ T41] #0: ffff888015488948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 294.151218][ T41] #1: ffffc9000364fd80 ((work_completion)(&vgvq->dequeue_work)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 294.151265][ T41] #2: ffff88801fbd02f8 (&dev->clientlist_mutex){+.+.}-{3:3}, at: drm_client_dev_hotplug+0x169/0x3c0 [ 294.151312][ T41] [ 294.151318][ T41] ============================================= [ 294.151318][ T41] [ 294.151327][ T41] Kernel panic - not syncing: hung_task: blocked tasks [ 294.151337][ T41] CPU: 1 PID: 41 Comm: khungtaskd Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 294.151357][ T41] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 294.151368][ T41] Call Trace: [ 294.151378][ T41] [ 294.151384][ T41] dump_stack_lvl+0x3d/0x1f0 [ 294.151414][ T41] panic+0x6f5/0x7a0 [ 294.151439][ T41] ? __pfx_panic+0x10/0x10 [ 294.151465][ T41] ? watchdog+0xd3d/0x1240 [ 294.151483][ T41] ? watchdog+0xd30/0x1240 [ 294.151501][ T41] watchdog+0xd4e/0x1240 [ 294.151521][ T41] ? __pfx_watchdog+0x10/0x10 [ 294.151543][ T41] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.151563][ T41] ? __kthread_parkme+0x148/0x220 [ 294.151584][ T41] ? __pfx_watchdog+0x10/0x10 [ 294.151602][ T41] kthread+0x2c1/0x3a0 [ 294.151622][ T41] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.151646][ T41] ? __pfx_kthread+0x10/0x10 [ 294.151666][ T41] ret_from_fork+0x45/0x80 [ 294.151690][ T41] ? __pfx_kthread+0x10/0x10 [ 294.151710][ T41] ret_from_fork_asm+0x1a/0x30 [ 294.151736][ T41] [ 294.152474][ T41] Kernel Offset: disabled program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bcachefs-truncate detailed listing: executing program 0: syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x800090, &(0x7f0000005f80)=ANY=[@ANYRESDEC, @ANYBLOB="7ab40d920812b31712aebf5d8db36327ff98becda5e07962faff8215a30ec62916b4074a1c15b53809722b4dcb2f0c724259112bb70e9bad005ab1742f042ae13d0ae29e68cdbd7982672640d6d7dc1d6203b0f5b5274363136c7676a31b14808229ff6d8f5c399c914ad00c1439e8fcfad24246037d39f9ed8b", @ANYRES64], 0x1, 0x5bd7, &(0x7f000000bc00)="$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") truncate(&(0x7f0000000340)='./file2\x00', 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-syz_open_dev$usbfs-socket$rds-socket$packet-setsockopt$packet_fanout-prlimit64-sched_setscheduler-getpid-sched_setscheduler-prlimit64-mmap-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-sched_setscheduler-io_setup-openat$qrtrtun-io_submit-sendmsg$rds-setsockopt$RDS_CANCEL_SENT_TO-socket$inet_smc-mount detailed listing: executing program 0: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{0x14}, {}]}) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x143281) r0 = socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='smb3\x00', 0x0, &(0x7f0000000400)) program did not crash single: failed to extract reproducer bisect: bisecting 47 programs with base timeout 1m40s testing program (duration=1m51s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 24, 18, 8, 2, 15, 6, 4, 7, 24, 7, 29, 9, 8, 4, 6, 4, 1, 7, 7, 17, 8, 7, 9, 24, 8, 3, 8, 14, 6, 8, 7, 5, 8, 5, 3, 8, 4, 24, 9, 7, 2, 6, 7, 2, 6, 3] detailed listing: executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000300)=""/80, 0x50}], 0x2}}], 0x1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="060100001701c7003199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa91", 0xe9}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f00000001c0)='\x06\x00\x00\x00s\x00') executing program 0: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000180)={0x0, 0x80}}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x94}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000880)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000940)={0x1, 0xb32, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @canfd={{}, 0xfc, 0x0, 0x0, 0x0, "4210220097b2bb36662d7dd23a59126b470b759d7b9beb929157fbabb8971fdf7268450b731d6d110917f27e538256a669fea5023441247712804650cc7d8236"}}, 0x80}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x20, 0x29, 0x10f}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010003b15000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000020014001280090001007665746800000000040002800800040060000000"], 0x3c}}, 0x0) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000240)=0x8) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, &(0x7f0000000040)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000000)={0x17c04}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) executing program 3: connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) inotify_init1(0x0) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7GJAkEYBeB3x3FcdiXsdmAJIoaWYGpiZmS8VmELNmAvNqO/7K6sHSjC9wWPNzxmYMJbff32Wf/jqarqOXXrsfxMMWlW113Spv1O/oabtzonmT/2Tbpjsq+q5fBUkllfTpftIkmXJodXfA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPsI9AAD//yg1FLI=") executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) executing program 2: r0 = socket(0x0, 0x2, 0x0) write(r0, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_submit(0x0, 0x1, &(0x7f0000000580)=[0x0]) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0xc, 0x0, &(0x7f0000000080)) executing program 1: close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000340)=@gcm_128={{}, "ded3230b29450259", "0e37553bdd6b7cb1f70cf33b43f7ad9b", "ce826994", "1d29e04b07602d61"}, 0x28) executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) executing program 2: mkdir(&(0x7f0000000080)='./bus\x00', 0x0) openat$bsg(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dma_heap(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() lseek(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) executing program 1: syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000000080)=""/120, 0x78}, {&(0x7f0000000100)=""/8, 0x8}, {0x0}], 0x4, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x7}, 0x700) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$KDENABIO(r1, 0x4b36) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) sendmsg$IEEE802154_START_REQ(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r5, 0x4b36) sched_getscheduler(0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x0, 0x0, 0x3, [0x2], [0x80ffff]}) bind$alg(0xffffffffffffffff, 0x0, 0x0) executing program 1: writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000340)="926c242c391961a74a4626bed1b678801a4f54a272558f396d554863d5a949304f37326d148810e5a7512673db03638176e60294570d475dde", 0x39}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000800)=ANY=[@ANYBLOB="000202"], 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @remote}, {0x0, @broadcast}, 0x1c, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 'bond_slave_0\x00'}) executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$tun(r1, &(0x7f0000000780)=ANY=[], 0x9) executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, 0x0, &(0x7f0000000080)) executing program 1: r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000200)=""/59, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) executing program 0: ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') executing program 2: syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS+hTa2qUtpvTH57OEe8+59+TyfQL/a/HwU7PZjIUQmom/f/r7s/xEsXdqbHomhFiYDyHkv/n610os6vjt1otoXYrWxUSmdnA7/nrWcdf3UE0dxaP6ZTyEH0IIS0/HyX/7Nr5857nr5MbmSmFrLbf4WFh/Hl4YyPds55d3Rw6z5dnu7Fz0YV3GWzM/VRs9uW+WXvbaB9uqtUbmJupLxz5nPv+tP+e/31WpVxqT/aerQ+nO+lV5J8r9Tf4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAnO89dJzc2Vwpba7nFx8L68/DCQL5nO7+8O3KYLc92Z+fi732X8dbMT9VGT+6bpZe99sG2aq2RuYn60rEPR7/78XP+Ei30bfhj/vtdlXqlMdl/ujqU7qxflXei3N8+5g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8JfyE8XeqbHpmRBiYT6EMB7vOP5lv5l4r8eivovotxTtFxOZ2sHt+OtZx13fQzV1NJUIIfG7e5eejpNftfIh/CM/BwAA//8514ZQ") r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000700)=""/201, 0xc9}], 0x1, 0x7cd3b3b8, 0x0) executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, 0x0, 0x0) executing program 0: socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r4, r5, 0x0, 0x7ffff000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000004200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mkdirat$cgroup(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) executing program 2: syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 0: writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000340)="926c242c391961a74a4626bed1b678801a4f54a272558f396d554863d5a949304f37326d148810e5a7512673db03638176e60294570d475dde", 0x39}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000800)=ANY=[@ANYBLOB="000202"], 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @remote}, {0x0, @broadcast}, 0x1c, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 'bond_slave_0\x00'}) executing program 1: mkdir(&(0x7f0000000080)='./bus\x00', 0x0) openat$bsg(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dma_heap(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() lseek(0xffffffffffffffff, 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendfile(r5, r6, 0x0, 0x7ffff000) executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = accept$inet6(r0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0) executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000001c0), 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES16], 0x5c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000280)=""/169, 0xa9}], 0x1, 0x0, 0x0) executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x44) executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$tun(r1, &(0x7f0000000780)=ANY=[], 0x9) executing program 2: syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000700)=""/201, 0xc9}], 0x1, 0x7cd3b3b8, 0x0) executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000004200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mkdirat$cgroup(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002000d0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x60}}, 0x0) executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}}, 0x0) executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = accept$inet6(r0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0) executing program 3: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000180)='./file2\x00', 0x14018, &(0x7f0000000400)=ANY=[@ANYBLOB="63726561746f723d7b19c20300702172743d30309b00603034ad689a04f6913349003b68d80bbeb87a736e2c6e6f646537e4484e63fdc5ac636f6d706f730d63e45479e4a4caa35f04000000c381fd1f840ba90acd0f3b37a1047c38c3d72d0a71267f00c84e40ee3e5cb300000000000000", @ANYRESHEX, @ANYRES16=0x0], 0x9, 0x6d0, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) executing program 1: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{0x14}, {}]}) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x143281) r0 = socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_setup(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='smb3\x00', 0x0, &(0x7f0000000400)) executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59520000000000000000a000000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffff000000000800080000010000"], 0x34}}, 0x0) executing program 2: syz_io_uring_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 3: syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x800090, &(0x7f0000005f80)=ANY=[@ANYRESDEC, @ANYBLOB="7ab40d920812b31712aebf5d8db36327ff98becda5e07962faff8215a30ec62916b4074a1c15b53809722b4dcb2f0c724259112bb70e9bad005ab1742f042ae13d0ae29e68cdbd7982672640d6d7dc1d6203b0f5b5274363136c7676a31b14808229ff6d8f5c399c914ad00c1439e8fcfad24246037d39f9ed8b", @ANYRES64], 0x1, 0x5bd7, &(0x7f000000bc00)="$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") truncate(&(0x7f0000000340)='./file2\x00', 0x0) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000240)="4a17a250f12fba83c589b270c85f9b1f", 0x10}], 0x1}], 0x1, 0x0) read$alg(r1, &(0x7f0000000180)=""/191, 0xbf) executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81044e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffff", 0x42}], 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f00000002c0)="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", 0x1ca}], 0x1}}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, 0x0, &(0x7f0000000080)) executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}}, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 4 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndseq-socket$nl_route-sendmsg$nl_route detailed listing: executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-openat$sequencer2 detailed listing: executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bcachefs-truncate detailed listing: executing program 0: syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x800090, &(0x7f0000005f80)=ANY=[@ANYRESDEC, @ANYBLOB="7ab40d920812b31712aebf5d8db36327ff98becda5e07962faff8215a30ec62916b4074a1c15b53809722b4dcb2f0c724259112bb70e9bad005ab1742f042ae13d0ae29e68cdbd7982672640d6d7dc1d6203b0f5b5274363136c7676a31b14808229ff6d8f5c399c914ad00c1439e8fcfad24246037d39f9ed8b", @ANYRES64], 0x1, 0x5bd7, &(0x7f000000bc00)="$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") truncate(&(0x7f0000000340)='./file2\x00', 0x0) program crashed: KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu single: successfully extracted reproducer found reproducer with 2 syscalls minimizing guilty program testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bcachefs detailed listing: executing program 0: syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x800090, &(0x7f0000005f80)=ANY=[@ANYRESDEC, @ANYBLOB="7ab40d920812b31712aebf5d8db36327ff98becda5e07962faff8215a30ec62916b4074a1c15b53809722b4dcb2f0c724259112bb70e9bad005ab1742f042ae13d0ae29e68cdbd7982672640d6d7dc1d6203b0f5b5274363136c7676a31b14808229ff6d8f5c399c914ad00c1439e8fcfad24246037d39f9ed8b", @ANYRES64], 0x1, 0x5bd7, &(0x7f000000bc00)="$eJzs3Q+MXXW9IPBz7p1p73TaMkWBWv50gNItrMCU4gINhoGNgKtFBC0qSFvptAz2D3RaC1XsQCIaZN0ma5Q10RCiCRtCdJes6581xSxiVtbYjcsrvvd8GNA8eS9Yg6B9lNiXmXvOnblnzu+eO/feKS18Pknnzjnzu9/f9/u7vzlzzu/e3hsBAADwlvDU50b+fM2i9/zs3qFXd1/9g833RL3l8f2VtEFfcnvnG5UhR9LsroXjt9l5sWdw1lOXPfD+Z7/+8W89/8KCZcu/eduVh+6Yu+r++wd/edGhn//17qK46Xw6e2I7fimOolN/sewr9/3k6ZPG9sVRFJXjvtEoWhCXfrwgzoQYeC2KovW1POt/+PirKzaM3Y5+cXbd/uMyQcz3t7ZKMs8+/6Otp/z+vCuf3furK14dqLy2bXSiSVyZNJ+iaP7ayffvjqKoJ/k3Jp1tC9M7J7fXRlE0Z9L9Li7I64wm8z83sL0ouZ2V3PYWxEl/fnpmu7vJPLoyt5Um79eq0gzHT6WP39wZ7j97cMv2syC5/W5ye/Y045fTf3FUiqOuWneb4ok5Ek163OIoHn/sJ7ZLdXMhzsyNOIrizHYps13uztQ13m8y0cpxXL8/bZfZ35/s70r2n14w164P7H9HWm/yi3owU382aO+Ub2p1jUvz+k2DXI6E0qRjUN7+NN9K8mD0Jvt64+On3OdwjvRXfPULX/r287u+saQvkEf8nTiJH083/rhnNl+yf+muXx9YGIq/tpTEL7UUf+S8lx978bqfnhSMvyeNX24p/nMXLv3qD3fvPBgcnz+m49PVUvzyynMOLb93YHUw/4fS+JWW4j98xaNfm/+uJx8L5j+Qjk9Pa+MzvOP1Gx854UAwfpTGn9NS/MtfOfGslVsf3RiM/0Q6Pr0txX96ZHjVfbcu3tkfir8vjT+vpfhn/PamG/fuH3oumP9gOj59LcV/95LLr111YMsDoWNnPHqk/sICvDm9LTnH+kKy3ep1ZrsmXS882BdXz/nmJv/mlTvZU72xfubPXHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3qIe7ls/9Nfvn/Z6V7I9O/nmtHL1Nt0/K4riniiKRrav27Z9eMvG/tu27ti2Zd2m/nXb+4e2bN92V/+F7+zfNnT7pnV3jf104NwV1fsdH8XV2/jUKX0fPnz4cKmvfl/a3ycv+s+P95+2/2+jaOCEX57WFcz/A3cv+vcLcr5mxIOHN/2ns25+ce7/2VHd0Zfk1RfIKwrkdekjL638/Q96/mMUDZzYKK9/XHbVT+oSGt8xESdRmh2Vxr+ZHc/JzaOWdZJPOl5dG4Y3DQ0Uj285UMfvDv73D+8cuWW0Or6VYB1Njm/P4OG/bPneE7dcuuva6o6j9XEvGu+0ijS/dPwqyXjPT+qaH6irK1DXfWed/g9/8182vzQaDXT9afHUvovq6k4mQHf8jqb6TXuYE9ePSSVpnz7i6f3O37759vNH7tp17vDmdRvHfvdXrFhx8YUrLrjogn93/njp1a8dqz/t/980Wf+RmU9bLxocTr82N5+K8ioaj7G8isdjckah37+3f+iqv7vnf+y5rrqjaJ6nrWvHk+R2ztjDvDyaNN+mjlVeXUXj0B0Yh43X9/7XV/q3/kvRcWjyIzP5a0Y8ePhPw//3srl7z7y5uuOIHOcnJ9Ticb6WdZJP9+TjzvKjd3xnR+Wkrt7cvM689+WP/P/vx/21/GbNiu5ct337tuXVr0eorrdf/5nO1nXx0n++Y9faexZMqeuC6te5SaZz45Nz88ruTetaPDr2tRwlw5LeRJVSfn3dUTW/7N+F9H7ZUe1NftYbH59bV1b6s9UvfOnbz+/6xpLQSMffqfbYE82r3sanBFpuytyxXEs4r/+i+RFF0drJ+9JxfOJ7X+7f+7MFmwvnR3VmTPmaLW/w8Gcvmfu7kRv2raruODLHlUkJtXhcqWU9kc/4eI0fVy44eupo4XEeuxzpwONc94sVDx7ee8o7N674X9uTX/ui8a21zhvfFVFUdBxYnNnuqtvfueNAtp+J9vnx+jPbvVG5pePGcxcu/eoPd+88GDxu/LHZ48Zn6rbKbR434sBxY/9n/9tfPr3/mfd27rjx3qXlj/394hXJgB4tv2+VZF5XAvO6lnWSTzx5Xp93y9ZN66v7j97z3+S24Pon/fs9cteuT67btGlo20hzdTV7XpL2kx3lVs9L0t++4wvqSh+vibpm7ptmxqvZ37c0//XZ8Wrx9w3y9EZxS3/Pntl8yf6lu359oC8QN15bSuKXWoo/ct7Lj7143U9PCsbfk8bvail+eeU5h5bfO7A6GP+hOIlfaSn+w1c8+rX573rysWD8gTT/ntbOJ4Z3vH7jIyeExz9K4/e2FP/pkeFV9926eGcw/r446Wfs3C6KHn91xYbqdhx1J8fhNI/uuryi7Hac2S5ltsuTt0vVNfhaB+U4rt+ftkv2nz4plzw3RFG0b/bU/enZY2Vh9fZguh1lv2m8/2hTmnROkLe/6PwaAN5M0uf/03ON9Pn/xckfxEnP/1dv41l191+YnE8tnNg1fp13T3/1D+nEdeFjT2f7PpyzrpfmkV3XS+MvO7M+RqvrekXrcmdkttO8FiejkubT4LxhbtTEutzUfhqvy2XKL1436/9CZkfX+Npe6HHrTlYq8p5nzuQ7dyxCu+fZC/Ozrp1nh+Zddr0jfZ4+njLvmntdRPr4Zl8XkcZflFlAa/V1Ee3Ou3RZo8G8G6+seD116ryIGozrxLzIj5adF9OYR33VeTSzz0sd+9f7M7H+/uXa+vsxt56QPi8y3fWEaLR+fJpcTzjar/fT/enxoavJdYDVgf2dWgdIDxdpXr9pkMuRYB0AACau/9NzirHr/7G/1f2Z8/yi65bsVUYaL/g6lnJ+PkXXv1NfzzanpfPKy1858ayVWx/dGLxueKLZ16XcXrc1p+B1KUXjuCSzXTiOgZeCFK07LM20743mtTSOZ/z2phv37h96LjiOg9UTqeJx3FO3Na/NcVyW2S4cx+78rIrGMdtP0fw9O7Pdm7wiaLrj/u4ll1+76sCWB4LjPtrsuD9Ut9VXMO6u0wPxZ/Q6PTp2r9PT+MfI8/5F65Fv2DpAsm49U+sA1wf2T3cdoHfKN7W6xh1z6wCBvwsAcCxLr/9rr5dPrv//d6Zdu9eHwfO2wc68njV43lY7r23vvDyYf+28vL3romD82nVRe9ctwfGpXbe0d90VjF+77mpvnSY4Pk+k4zP1vH93E/HT8/7QfxdIz/uP/euimV1n6PR1UeS66A3huggA4M0tvf5PT1fT1/8/mWxnz41n/jp3pq9DZ/o6eqbXGWZ6neRYv8498usMzcRvfp1hmutsyetUm19n69A6wOH6F/DM1DqA50ffGNYBAADeHN6T3N7cZPuuqPpGm5+45dYL1qwf+tSaDduGhkZuX3fL0JrhLcPba+26x6+8pr5OOtRf0euk89rPadB+TTB+fT5XBtqHtFt/qL+i+vPaN6p/bTB+fT5XBdqHtFt/qL+i+ie3v6yJ+tcF49fnc3WgfUi79Yf6K6o/r32j+j8RjF+fz3sD7UParT/UX1H9ee0b1X9LMH59Pv8h0D6kYf25+TXXX1H9ee0b1Z99v8xQ/e8LtA9p9/EP9VdUf177RvUPBePX5/P+QPuQdusP9VdUf177RvVvCMavz2dVoH1Iu/WH+iuqP699o/o3BuPX53NNoH1Iu/WH+iuqP699o/pvDcavz+cDgfYh7dYf6q+o/rz2jeofDsavz+faQPs6kxaO260/1F9R/XntG9V/WzB+fT4fDLSv11P7rt36Q/0V1Z/XvlH9nwzGr8/nukD7kHbrD/VXVH9e+0b1bwrGr8/n+kD7kHbrD/VXVH9e+0b1bw7Gr8/nQ4H2Ie3WH+qvqP689o3q3xKMX5/PhwPtQ9qtP9RfUf157RvVvzUYvz6f1YH2Ie3WH+qvqP689o3qvz0Yvz6fGwLtQ9qtP9RfUf157RvVf0cwfn0+H5naPh7NDzmu3fpz+svk13w9jerfFoxfn89HA+1D2q0/1F9R/XntG9U/Eoxfn8/HAu1D2q0/1F9R/XntG9W/PRi/Pp8bA+1D2q0/1F9R/XntG9W/Ixi/Pp+bAu1D2q0/1F9R/XntG9X/qWD8+nw+Hmgf0m79of6K6s9r36j+ncH49fncHGgf0m79of6K6s9r36j+O4Px6/NZE2gfUqt/+7ahoTU7bl+/bvtQd7R1/dDImp3bhrdvH0pO1Np9XWLw/5clr0vsjroa1r8os31c8v5AxwXeHyjbPg178vg3U98fKNttV8H75BQ9Xtn+i95nKK993nwLPb5Fx4Nm50NW3e9HdZIMbxkZ2jb1+N3TcDwmz4lo/GVzPdn38G7YPtsy0E2h5uupNKwnu3t28kLA2fEJTbWPAp8HN13N1xMH68nLY7qfY5eGndbn2GW+TJEzPerq3TAyfpAeXrdpeNfQ1PznHAX5NzOOox3PozQlj6LHP86Mx4IkkwWhz3sLjN/O7/7Tw3/4w/98XxQNnFA+pa3xiwcPrz144id+cens88fyLzXMv9Yy/Vzlgs8/zLZP6+natHVk+7/dsHXHlvxn0NLXO5dq2zP0euekznKTr18Ovd5juq9fjqd8c3Rq9vXLAAAAbxXp//9Pr1cXJv8HdUFmiSBvHXjNlrx14Pb+f3RwHXhfc+vA2dWI46Ku/xc1WAfOtk/LbnYduHf2xA9aWQfO9h9apy01aN/oeZdm14E/Fmg/Xc3Pk/beByA4T5KRKpon2f+HX/R8Qbb9dOdJT5vPF2T7L5onee0bPT/d7Dy5IdA+pPn50ML7TvRPvO9EcD4MNDcfsp+rWTQfsu2nOx8qbc6HbP9F8yGvfaPX6zQ7Hz4UaN+s6Rwvqlp7X5jg/Fjb3PzIfl5K0fzItp/u/IjbnB/Z/hvNjzjQvtHrGZudHx8MtE81//i39749wcd/T3OPf/ZzW4oe/2z76T7+pTYf/2z/RceHvPaNXs/d7ON/TaB9qv7xH3vgxx/3oTU7t26b/Bromf7clpDm85vZz61pVfP5z+z7Ps18/jP7vlIzn397103B/Pe190xX8/nP7OcSteqIPR+b/J+hovefKnqe9qOB/dN9nnbWlG+OTp6nBQAAgJmXPv+fvpt3+v7wX0xuAx/T37Jj//O9q+tccf1/yyiMf8x+/na6ANPq529Xmsu/2XVM63kNOjsKWM8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojNldC8dvn/rcyJ+vWfSen9079Oruq3+w+Z49g7OeuuyB9z/79Y9/6/kXFixb/s3brjx0x9xV998/+MuLDv38r3cXBu6r3pydbFaiKH4pjqJTf7HsK/f95OmTxvbFURSV477RKFoQl34cZyMMvBZF0fpanvU/fPzVFRvGbke/OLtu/3GZINm6ot5ymk9dntGdhRVxDKok8+zzP9p6yu/Pu/LZvb+64tWBymvbRieaxJVJ8ymK5q+dfP/uKIp6kn9j0tm2ML1zcnttFEVzJt3v4oK8zmgy/3MD24uS21nJbW9BnPTnp2e2u5vMoytzW2nyfq0qzXD8VPr4zZ3h/qcc3TL9LEhuv5vcnj3N+OX0XxyV4qir1t2meGKORJMetziKxx/7ie1S3VyIM3MjjqI4s13KbJe7M3WN95tMtHIc1+9P22X29yf7u5L9pxfMtesD+9+R1pv8oh7M1J8N2jvlm1pd49K8ftMglyOhNOkYlLc/zbeSPBi9yb7e+Pgp9zmcI/3Z6he+9O3nd31jSV+gv/g7cRI/bin+M5sv2b90168PLKyPOvHd2lISv9RS/JHzXn7sxet+etLCnNzH4+9J45dbiv/chUu/+sPdOw/2heL/MR2frpbil1eec2j5vQOrg/k/lMavtBT/4Sse/dr8dz35WDD/gXR8elobn+Edr9/4yAkHgvGjNP6cluJf/sqJZ63c+ujGYPwn0vHpbSn+0yPDq+67dfHO/lD8fWn8eS3FP+O3N924d//Qc8H8B9Px6Wsp/ruXXH7tqgNbHggdO+PRI/UXFuDN6W3JOdYXku1WrzPbNel64cG+uHomNTf5N6+THWWM9TN/BuMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmNHTVg7uv2rfm6q44iuJAm8M50p+VZw0O9rfQb3nlOYeW3zuwevK+hS3EAQAAAIqVV8ZxFA2sLtX2VKKF0c64Jzo5t326RnByuhXX78+uIfRMtOxInFKH4pQ7FKerQ3G6OxRnVofizO5QnEpBnErd/sXBOD0N45SazmdOh+L0NohTydkfijO3Q/nM61Cc+dk4ldbiHNehfPoaxml+Hi7oUJzjpxcnO/1rcd7WoXze3qE4J3QozokdinNSh+Jk15SnOw/nJS0XheKMf1MujNMVl2s/yFtPT/s5NXO/0jT76W2yn+ya/XT76WmynzPb7KfSZD9L2+wnbrKfs9vsp1TQTzpv78zml/aTbjU5/+/qUJxdHYrz6Q7F+UyH4tzdoTif7VCc3W3GaSx7dgi8laXPw08cGfqi2V2XRnOSI052FSC93l1cvfeU41Ele4GeSOOdktk/qyhe9kI9E29xh/M7I7M/uS4fXZxET8+bGsTrmxxvSeaHhfVmFxQy+S2bbrzswgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzKChqx7c/a/s2l2MXGX5APD37MzODNvCf/oP1IEUOlJaMSItXZSP1HDQi1liUAL4EdDuljLUTbe7yLYprMhaL4gXKiSauHphDFcYQowaBJWkXGgMSsImik0EJVGJogESIGlNTMbszjnzxczOMiBb8PcLOR/v+zzvc84safK8M5XF8bEQhaX/uqp1kc5lcnFcHqDuJ//y9R/8ee6757WO5bMDLAQAAAD0lfbhw42RQshnt4dclGuLKyT7AIXkPlOsn6Py0PJ5JNqwYnw2id9+8MCt22fvmHv/5IE9+6r7qtOjo6OXXjy685KdH9x+y+RUdUf9GPJ91htO1pu9Y27/nqmp6m2z9fvO5y4leaXm0MTS4Ujy3P/fp06UxDfr/Pcu+v+1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgbVUrC/OVxfGxkSiEqEdMrYt0LpOL4/IAda98dePWy2ce2Nc6ls8OsBAAAADQV9qHDzdGCiGfzYRMOHP57txmaDGEZt8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD876lWFuYri+Nj66IQoh4xtS7SuUwujssD1P3N7OTVd39u8+HWsdIA6wAAAAD9pX34UGOkEEphSxiOzmyLS/cGzurI74xL1zl7lXGdewe94rasEBeFqBG3bZXrvbdP3MeS8+3101NXBAAAAHj7Svv/bGOkGPLZU3v2/z36+oc74zZ3xGWS8yC/FQAAAADemLT/zzVGSiGfLTX69X7f46f9/rkdcWn+St/bt+b3+94+jTu/R53O7/MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJNXtbIwX1kcH8tEIUQ9YmpdpHOZXByXB6j77MXbvvXz+cMnWsfy2QEWAgAAAPpK+/Bm610I+exIGA7rlvv+S7f98/NzE0c2DBeT6Vwu3L7n4MHbdtaPadyWL7/86d/9NCq/Ju6i+nFNXg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhTVSsL85XF8bFTohCiHjG1LtK5TC6OywPUfXby0L9vvP+Ml1rHSgOsAwAAAHQ31HKd9uHN3r8QSiEXcmHj8l1rr9+Zu6TXngEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwzjF7x9z+PVNT1dveyEX5jaW72L9nanqVwcfX/lFdvCUXh09b08dY63+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk0W1sjBfWRwfK0QhRD1ial2kc5lcHJcHqHvfhx/4zmkf+MWDrWOllRI+mxugCgAAABBa+vBm718IpTAchsMZy3fd9gSW+//iW/iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASaFaWZivLI6PnRqFEPWIqXWRzmVycVweoO65f/3MjUePVZ9tHctnB1gIAAAA6Cvtw3ONkULIZy8K+bApuZ9qT4gyybn7vkAz79a2tJFV593ZlpdZdd5XOt4sm7xNPa+Qrlesnxt55dfmlUMIpSSv1JyYaMsL97Zlnbrq5/xeW16xT14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk1C1sjBfWRwfi6IQoh4xtS7SuUwujssD1H3qwGXHts398aXWsdIA6wAAAAD9pX14s/cvhFI4O5wWzl7u+0NxebCWT2bTuF33v3D53392ytdC2LHxt+dke67/t/Mrv+w8hDDUHjQUwv8l9aJi+1Ra7/BP/nHfiy8+/NEQdpyR2fR667UvGdcmTmy86cld+e39Ph0AAAB4Z0j7/+HGSDHks9Od/X9D2nm/rv5/5vTr7tyQHJOOvCNjqJjUG+pRb/8l3/hx+Zxjf1jq/1eq9/EvnvWRDWHmkngyPdZHOkRxbeqerbufX//4ofSt6/UzHfXTz+W5Ez/6xOHZvV+q1y+EQjJ+VrZb/dceO5wS145PP/LY3l1z17TXz/Z4/7u3vvtPv//2gReW6r+yeaRR/z0rvP/K9U+/vvL0kYfuvba9/nCP+vuuW/f9V8sz/+p8/5GOhZNPvv4Hb/krdIji2iuTT1yx/uiW3e31QwgTrYHp5//YI98sH/31hgNp/fS3Iudv6ajf8r9a67FjzymKa0c3XbBv9NGD69rrRx310/c/dtcPj3/h2FNXdb7/zZ3v37N+5/tftS1zwzObRwf58QwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNtAtbIwX1kcHwuZEKIeMbUu0rlMLo7LA9T90HlXXnP1S9NfbR3LZwdYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjTVCsL85XF8bGhKISoR0yti3Quk4vj8gB1Zy98+cHnr/3Vu1rHSgOsAwAAAPSX9uHN3r8QSiEXcmFkue+fOLHxpid35beHYn02Ss7ZqZnZg++7ZebQ9M1r9OQAAADAaqX9f7YxUgz57HlhOOn/j266YN/oowfXpf1/CGFi6VC4ZXKqOhoa+wRXbcvc8Mzm0XJjn6A17sK9M1PJNkG67l2XrX9u9lOLV3ddd2cz7pXJJ65Yf3TL7jRuODkvx13UjJu6Z+vu59c/fiiNG0r3KZbidjTjjk8/8tjeXXPXpPOZ1vVa4k6/vvL0kYfuvbaxTnIeSeoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwH3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwX0chUlVxHIDPmZnV0dFttigXKVIx0SBZqaiEaBWSHtqQAl8s8CErI5NawhBiNyELk/CpIigiCgKRgqCHIiwogyQKIrSHMLSHeoiNaEPcqJjZe2dnrt5muzUJy/fBcPaeO/d3/ufcMzN7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6s+ZXBZnv0qdHf7hgLn+3dPjl223s7nzw4PO/oLQduP/HyPW+cOj2wet3rD26aemTRyP79w1/dMPX5H090DX58ulmTHFZDiD/FEK74YvXz+z45tqTRF0MI5VgfD2Eglj4aiJmEobMhhHtbdXaefGfy2vsa7fiz8zv6L8qENOe19NbWvEKtnNYzrd5ZL3NLNdlnT3+w6/If1m46ceSbjZND1bOPjs+8JVbb9lMI/dvar+8LISxIXg3pbhtML07azSGEhW3X3dilrhWzrP+anOOlSTsvaWtdctLzyzPHfbOso9Jqpz851VleV1Spx/mp9P4t6vH42S+37DgDSftu0q75h/nl9BVDKYZKa7iH4sweCW33LYbYvPczx6WOvRAzeyOGEPvaJhJDKGXOl/sy82qOm2y0coyd/en7Mv3Lkv5K0r+8y1676+8WpXFt8kE9k5l/NrR2zh+teTWldX3XZbxeK7V9B52vP623mtyMWtJXixefc82f55Ge23L6ubdO7XllZT2njvh2TPJjofyvd950fNWebycG8/K3lZL8UqH80bW/HP7xzk+X5OYfTPPLhfJPXrfqhffHdp/JXZ+f0/WpFMovr796at3eoS259b+a5lcL5b+28dBL/dd/fDi3/qF0fRYUW58dj/2+9c1LJ3LzQ5q/sFD+hl8vu2r9rkP35+Z/mK5PrVD+sdEdI/seuHL3srz8L2Pzg1ULiwvlr/j+7q1Hjm8/mVv/cLo+9UL5N6/csHlk4uEDed+dcfz/+oUFmJsuSf7HeiY5Lvqc+W+1PS+8WJ/+aWo+0zRei//LgTIa4/T3MB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4C924IAEAAAAQND/1+0IFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICnAgAA///KRVpu") program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): truncate detailed listing: executing program 0: truncate(&(0x7f0000000340)='./file2\x00', 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bcachefs-truncate detailed listing: executing program 0: syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x800090, &(0x7f0000005f80)=ANY=[@ANYRESDEC, @ANYBLOB="7ab40d920812b31712aebf5d8db36327ff98becda5e07962faff8215a30ec62916b4074a1c15b53809722b4dcb2f0c724259112bb70e9bad005ab1742f042ae13d0ae29e68cdbd7982672640d6d7dc1d6203b0f5b5274363136c7676a31b14808229ff6d8f5c399c914ad00c1439e8fcfad24246037d39f9ed8b", @ANYRES64], 0x1, 0x5bd7, &(0x7f000000bc00)="$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") truncate(0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bcachefs-truncate program did not crash simplifying guilty program options testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bcachefs-truncate detailed listing: executing program 0: syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x800090, &(0x7f0000005f80)=ANY=[@ANYRESDEC, @ANYBLOB="7ab40d920812b31712aebf5d8db36327ff98becda5e07962faff8215a30ec62916b4074a1c15b53809722b4dcb2f0c724259112bb70e9bad005ab1742f042ae13d0ae29e68cdbd7982672640d6d7dc1d6203b0f5b5274363136c7676a31b14808229ff6d8f5c399c914ad00c1439e8fcfad24246037d39f9ed8b", @ANYRES64], 0x1, 0x5bd7, &(0x7f000000bc00)="$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") truncate(&(0x7f0000000340)='./file2\x00', 0x0) program crashed: KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu extracting C reproducer testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bcachefs-truncate program crashed: KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu simplifying C reproducer testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bcachefs-truncate program crashed: KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bcachefs-truncate program crashed: KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bcachefs-truncate program did not crash testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bcachefs-truncate program did not crash testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bcachefs-truncate program crashed: KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$bcachefs-truncate program crashed: KASAN: slab-use-after-free Read in bch2_sb_errors_from_cpu reproducing took 1h40m2.973345863s repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in bch2_sb_errors_from_cpu+0x255/0x280 fs/bcachefs/sb-errors.c:122 Read of size 8 at addr ffff88801ac73100 by task kworker/u32:2/45 CPU: 3 PID: 45 Comm: kworker/u32:2 Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Workqueue: btree_update btree_interior_update_work Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0xc3/0x620 mm/kasan/report.c:488 kasan_report+0xd9/0x110 mm/kasan/report.c:601 bch2_sb_errors_from_cpu+0x255/0x280 fs/bcachefs/sb-errors.c:122 bch2_write_super+0x12b2/0x37a0 fs/bcachefs/super-io.c:969 btree_update_new_nodes_mark_sb fs/bcachefs/btree_update_interior.c:626 [inline] btree_update_nodes_written fs/bcachefs/btree_update_interior.c:688 [inline] btree_interior_update_work+0x46e/0x2cb0 fs/bcachefs/btree_update_interior.c:859 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Allocated by task 5596: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:370 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:387 kasan_kmalloc include/linux/kasan.h:211 [inline] __do_kmalloc_node mm/slub.c:4122 [inline] __kmalloc_node_noprof+0x215/0x440 mm/slub.c:4129 kmalloc_node_noprof include/linux/slab.h:681 [inline] kvmalloc_node_noprof+0x9d/0x1a0 mm/util.c:634 kvmalloc_array_node_noprof include/linux/slab.h:800 [inline] __bch2_darray_resize+0xd8/0x250 fs/bcachefs/darray.c:12 __darray_resize fs/bcachefs/darray.h:31 [inline] __darray_make_room fs/bcachefs/darray.h:43 [inline] bch2_sb_error_count+0x34f/0x4e0 fs/bcachefs/sb-errors.c:102 __bch2_inode_invalid+0x2c6/0x4d0 fs/bcachefs/inode.c:441 bch2_inode_v3_invalid+0x1f1/0x2e0 fs/bcachefs/inode.c:529 bch2_bkey_val_invalid+0x222/0x2f0 fs/bcachefs/bkey_methods.c:143 bch2_btree_node_read_done+0x3294/0x4fe0 fs/bcachefs/btree_io.c:1232 btree_node_read_work+0x567/0x1060 fs/bcachefs/btree_io.c:1345 bch2_btree_node_read+0x8b3/0xe40 fs/bcachefs/btree_io.c:1730 __bch2_btree_root_read fs/bcachefs/btree_io.c:1769 [inline] bch2_btree_root_read+0x2ca/0x690 fs/bcachefs/btree_io.c:1793 read_btree_roots fs/bcachefs/recovery.c:475 [inline] bch2_fs_recovery+0x1ba8/0x3db0 fs/bcachefs/recovery.c:803 bch2_fs_start+0x2e9/0x600 fs/bcachefs/super.c:1035 bch2_fs_open+0xfa0/0x1110 fs/bcachefs/super.c:2127 bch2_mount+0xe2c/0x1230 fs/bcachefs/fs.c:1919 legacy_get_tree+0x109/0x220 fs/fs_context.c:662 vfs_get_tree+0x8f/0x380 fs/super.c:1780 do_new_mount fs/namespace.c:3352 [inline] path_mount+0x14e6/0x1f20 fs/namespace.c:3679 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount fs/namespace.c:3875 [inline] __x64_sys_mount+0x297/0x320 fs/namespace.c:3875 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 5596: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:579 poison_slab_object+0xf7/0x160 mm/kasan/common.c:240 __kasan_slab_free+0x32/0x50 mm/kasan/common.c:256 kasan_slab_free include/linux/kasan.h:184 [inline] slab_free_hook mm/slub.c:2196 [inline] slab_free mm/slub.c:4437 [inline] kfree+0x12a/0x3b0 mm/slub.c:4558 kvfree+0x47/0x50 mm/util.c:680 __bch2_darray_resize+0x185/0x250 fs/bcachefs/darray.c:18 __darray_resize fs/bcachefs/darray.h:31 [inline] __darray_make_room fs/bcachefs/darray.h:43 [inline] bch2_sb_error_count+0x34f/0x4e0 fs/bcachefs/sb-errors.c:102 bch2_fsck_err+0x180/0x1730 fs/bcachefs/error.c:210 bch2_bucket_ref_update+0xcd3/0xf80 fs/bcachefs/buckets.c:834 __mark_pointer+0x10c/0x410 fs/bcachefs/buckets.c:1000 bch2_trigger_pointer.constprop.0+0xce4/0x25c0 fs/bcachefs/buckets.c:1037 __trigger_extent+0x414/0xc00 fs/bcachefs/buckets.c:1176 bch2_trigger_extent+0x4ee/0x5d0 fs/bcachefs/buckets.c:1261 bch2_key_trigger fs/bcachefs/bkey_methods.h:88 [inline] bch2_key_trigger_new fs/bcachefs/bkey_methods.h:116 [inline] run_one_trans_trigger fs/bcachefs/btree_trans_commit.c:517 [inline] run_btree_triggers+0x6f1/0xd10 fs/bcachefs/btree_trans_commit.c:544 bch2_trans_commit_run_triggers fs/bcachefs/btree_trans_commit.c:576 [inline] __bch2_trans_commit+0x366/0x7ad0 fs/bcachefs/btree_trans_commit.c:1022 bch2_trans_commit fs/bcachefs/btree_update.h:170 [inline] bch2_extent_update+0x494/0xa40 fs/bcachefs/io_write.c:326 bch2_fpunch_at+0x7e6/0xbc0 fs/bcachefs/io_misc.c:184 __bch2_resume_logged_op_truncate+0x4ce/0x7a0 fs/bcachefs/io_misc.c:260 bch2_truncate+0x1e1/0x220 fs/bcachefs/io_misc.c:291 bchfs_truncate+0x90c/0xd70 fs/bcachefs/fs-io.c:476 bch2_setattr+0x1ab/0x250 fs/bcachefs/fs.c:918 notify_change+0x742/0x11f0 fs/attr.c:497 do_truncate+0x15c/0x220 fs/open.c:65 vfs_truncate+0x3ef/0x4e0 fs/open.c:111 do_sys_truncate fs/open.c:134 [inline] __do_sys_truncate fs/open.c:146 [inline] __se_sys_truncate fs/open.c:144 [inline] __x64_sys_truncate+0x177/0x1f0 fs/open.c:144 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f The buggy address belongs to the object at ffff88801ac73100 which belongs to the cache kmalloc-16 of size 16 The buggy address is located 0 bytes inside of freed 16-byte region [ffff88801ac73100, ffff88801ac73110) The buggy address belongs to the physical page: page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ac73 flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) page_type: 0xffffefff(slab) raw: 00fff00000000000 ffff888015442640 ffffea0000675400 dead000000000002 raw: 0000000000000000 0000000000800080 00000001ffffefff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (init), ts 23767929677, free_ts 22379130869 create_dummy_stack mm/page_owner.c:94 [inline] register_dummy_stack+0x8a/0xd0 mm/page_owner.c:100 init_page_owner+0x48/0xbf0 mm/page_owner.c:118 invoke_init_callbacks mm/page_ext.c:148 [inline] page_ext_init+0x6af/0xaa0 mm/page_ext.c:493 mm_core_init+0x68d/0x740 mm/mm_init.c:2725 page last free pid 8 tgid 8 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1088 [inline] free_unref_page+0x64a/0xe40 mm/page_alloc.c:2583 vfree+0x181/0x7a0 mm/vmalloc.c:3346 delayed_vfree_work+0x56/0x70 mm/vmalloc.c:3267 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Memory state around the buggy address: ffff88801ac73000: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc ffff88801ac73080: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc >ffff88801ac73100: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc ^ ffff88801ac73180: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc ffff88801ac73200: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc ================================================================== final repro crashed as (corrupted=false): ================================================================== BUG: KASAN: slab-use-after-free in bch2_sb_errors_from_cpu+0x255/0x280 fs/bcachefs/sb-errors.c:122 Read of size 8 at addr ffff88801ac73100 by task kworker/u32:2/45 CPU: 3 PID: 45 Comm: kworker/u32:2 Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Workqueue: btree_update btree_interior_update_work Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114 print_address_description mm/kasan/report.c:377 [inline] print_report+0xc3/0x620 mm/kasan/report.c:488 kasan_report+0xd9/0x110 mm/kasan/report.c:601 bch2_sb_errors_from_cpu+0x255/0x280 fs/bcachefs/sb-errors.c:122 bch2_write_super+0x12b2/0x37a0 fs/bcachefs/super-io.c:969 btree_update_new_nodes_mark_sb fs/bcachefs/btree_update_interior.c:626 [inline] btree_update_nodes_written fs/bcachefs/btree_update_interior.c:688 [inline] btree_interior_update_work+0x46e/0x2cb0 fs/bcachefs/btree_update_interior.c:859 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Allocated by task 5596: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:370 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:387 kasan_kmalloc include/linux/kasan.h:211 [inline] __do_kmalloc_node mm/slub.c:4122 [inline] __kmalloc_node_noprof+0x215/0x440 mm/slub.c:4129 kmalloc_node_noprof include/linux/slab.h:681 [inline] kvmalloc_node_noprof+0x9d/0x1a0 mm/util.c:634 kvmalloc_array_node_noprof include/linux/slab.h:800 [inline] __bch2_darray_resize+0xd8/0x250 fs/bcachefs/darray.c:12 __darray_resize fs/bcachefs/darray.h:31 [inline] __darray_make_room fs/bcachefs/darray.h:43 [inline] bch2_sb_error_count+0x34f/0x4e0 fs/bcachefs/sb-errors.c:102 __bch2_inode_invalid+0x2c6/0x4d0 fs/bcachefs/inode.c:441 bch2_inode_v3_invalid+0x1f1/0x2e0 fs/bcachefs/inode.c:529 bch2_bkey_val_invalid+0x222/0x2f0 fs/bcachefs/bkey_methods.c:143 bch2_btree_node_read_done+0x3294/0x4fe0 fs/bcachefs/btree_io.c:1232 btree_node_read_work+0x567/0x1060 fs/bcachefs/btree_io.c:1345 bch2_btree_node_read+0x8b3/0xe40 fs/bcachefs/btree_io.c:1730 __bch2_btree_root_read fs/bcachefs/btree_io.c:1769 [inline] bch2_btree_root_read+0x2ca/0x690 fs/bcachefs/btree_io.c:1793 read_btree_roots fs/bcachefs/recovery.c:475 [inline] bch2_fs_recovery+0x1ba8/0x3db0 fs/bcachefs/recovery.c:803 bch2_fs_start+0x2e9/0x600 fs/bcachefs/super.c:1035 bch2_fs_open+0xfa0/0x1110 fs/bcachefs/super.c:2127 bch2_mount+0xe2c/0x1230 fs/bcachefs/fs.c:1919 legacy_get_tree+0x109/0x220 fs/fs_context.c:662 vfs_get_tree+0x8f/0x380 fs/super.c:1780 do_new_mount fs/namespace.c:3352 [inline] path_mount+0x14e6/0x1f20 fs/namespace.c:3679 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount fs/namespace.c:3875 [inline] __x64_sys_mount+0x297/0x320 fs/namespace.c:3875 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 5596: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:579 poison_slab_object+0xf7/0x160 mm/kasan/common.c:240 __kasan_slab_free+0x32/0x50 mm/kasan/common.c:256 kasan_slab_free include/linux/kasan.h:184 [inline] slab_free_hook mm/slub.c:2196 [inline] slab_free mm/slub.c:4437 [inline] kfree+0x12a/0x3b0 mm/slub.c:4558 kvfree+0x47/0x50 mm/util.c:680 __bch2_darray_resize+0x185/0x250 fs/bcachefs/darray.c:18 __darray_resize fs/bcachefs/darray.h:31 [inline] __darray_make_room fs/bcachefs/darray.h:43 [inline] bch2_sb_error_count+0x34f/0x4e0 fs/bcachefs/sb-errors.c:102 bch2_fsck_err+0x180/0x1730 fs/bcachefs/error.c:210 bch2_bucket_ref_update+0xcd3/0xf80 fs/bcachefs/buckets.c:834 __mark_pointer+0x10c/0x410 fs/bcachefs/buckets.c:1000 bch2_trigger_pointer.constprop.0+0xce4/0x25c0 fs/bcachefs/buckets.c:1037 __trigger_extent+0x414/0xc00 fs/bcachefs/buckets.c:1176 bch2_trigger_extent+0x4ee/0x5d0 fs/bcachefs/buckets.c:1261 bch2_key_trigger fs/bcachefs/bkey_methods.h:88 [inline] bch2_key_trigger_new fs/bcachefs/bkey_methods.h:116 [inline] run_one_trans_trigger fs/bcachefs/btree_trans_commit.c:517 [inline] run_btree_triggers+0x6f1/0xd10 fs/bcachefs/btree_trans_commit.c:544 bch2_trans_commit_run_triggers fs/bcachefs/btree_trans_commit.c:576 [inline] __bch2_trans_commit+0x366/0x7ad0 fs/bcachefs/btree_trans_commit.c:1022 bch2_trans_commit fs/bcachefs/btree_update.h:170 [inline] bch2_extent_update+0x494/0xa40 fs/bcachefs/io_write.c:326 bch2_fpunch_at+0x7e6/0xbc0 fs/bcachefs/io_misc.c:184 __bch2_resume_logged_op_truncate+0x4ce/0x7a0 fs/bcachefs/io_misc.c:260 bch2_truncate+0x1e1/0x220 fs/bcachefs/io_misc.c:291 bchfs_truncate+0x90c/0xd70 fs/bcachefs/fs-io.c:476 bch2_setattr+0x1ab/0x250 fs/bcachefs/fs.c:918 notify_change+0x742/0x11f0 fs/attr.c:497 do_truncate+0x15c/0x220 fs/open.c:65 vfs_truncate+0x3ef/0x4e0 fs/open.c:111 do_sys_truncate fs/open.c:134 [inline] __do_sys_truncate fs/open.c:146 [inline] __se_sys_truncate fs/open.c:144 [inline] __x64_sys_truncate+0x177/0x1f0 fs/open.c:144 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f The buggy address belongs to the object at ffff88801ac73100 which belongs to the cache kmalloc-16 of size 16 The buggy address is located 0 bytes inside of freed 16-byte region [ffff88801ac73100, ffff88801ac73110) The buggy address belongs to the physical page: page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ac73 flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) page_type: 0xffffefff(slab) raw: 00fff00000000000 ffff888015442640 ffffea0000675400 dead000000000002 raw: 0000000000000000 0000000000800080 00000001ffffefff 0000000000000000 page dumped because: kasan: bad access detected page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (init), ts 23767929677, free_ts 22379130869 create_dummy_stack mm/page_owner.c:94 [inline] register_dummy_stack+0x8a/0xd0 mm/page_owner.c:100 init_page_owner+0x48/0xbf0 mm/page_owner.c:118 invoke_init_callbacks mm/page_ext.c:148 [inline] page_ext_init+0x6af/0xaa0 mm/page_ext.c:493 mm_core_init+0x68d/0x740 mm/mm_init.c:2725 page last free pid 8 tgid 8 stack trace: reset_page_owner include/linux/page_owner.h:25 [inline] free_pages_prepare mm/page_alloc.c:1088 [inline] free_unref_page+0x64a/0xe40 mm/page_alloc.c:2583 vfree+0x181/0x7a0 mm/vmalloc.c:3346 delayed_vfree_work+0x56/0x70 mm/vmalloc.c:3267 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Memory state around the buggy address: ffff88801ac73000: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc ffff88801ac73080: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc >ffff88801ac73100: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc ^ ffff88801ac73180: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc ffff88801ac73200: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc ==================================================================