last executing test programs: 14.556364763s ago: executing program 3 (id=239): r0 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x3b42, 0x2, 0xfffffffe, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0xe38, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 13.834526559s ago: executing program 0 (id=242): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x100, 0xde, 0x0, 0x7fef0000}]}) close_range(r0, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x240000, 0x110) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x221, 0x4800003e, r1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x14, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c001f3f3600009eaf3333823d4e1ad27df4a048a624ea0114000200fc02000000000000000247ef9de587b49a8bd66cfaba97c81a28ec25eeb16fa5e587eeaa740342020a426170f8e2d14809b202b613cb69c21f277a2b24bc85209beca6a18ae6987c69888399e1406aecac8653d14a92165a9c60deddd22626f3acc7b334231376a783b456c25e1063c6877d4444f37286ec8c61b70983d363dcd9a9358aee1021abbddcbd659951ad490d45aa46ddaad58f115cfe0f24fc5c0cce3aef985a02525faccb354bf3e23523c6a2b482397a0da1a8dc76c8"], 0x5c}}, 0x0) r6 = epoll_create1(0x80000) futex(&(0x7f000000cffc), 0x80000000000b, 0x2, 0x0, &(0x7f0000048000)=0x2800100, 0x2) r7 = epoll_create1(0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x20000002}) r8 = socket$nl_route(0x10, 0x3, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = dup3(r4, r8, 0x80000) ioctl$TIOCSLCKTRMIOS(r9, 0x5457, &(0x7f0000000140)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f0000000280)="8a0652c6857bb25c349a6971459ae5ded4ec77eb59d719ea8a91e4f101fafc314589684272eb10f8a53b", &(0x7f0000000300)=""/47, &(0x7f0000000540)="af4b0ef47e16841db734b8fb0dbb184faad61d4d4e994056feb4b520c59af81525a00bb3cf3288cf24f77de5bea960e0155455b1b68716aa26daabcb91f7ba4e1f1e4845330e49e5cf2d8702042d1c9b3f899cb8f31c47853e6b5138e1b361e4d8d5831fe69de184ccfd89b1885bdc3f1d107b5f9b71cd17ddecc7aa8371a09ee7ac9548639b05cca88190f6ce257bf1622cd940c778201a80c3345a63f649f05d57c75f9d57797a4320bddba56c34aa607ca89b155e29f58989dae6b61ed701e74d3ce5f2ef4efcec0c429cffa9b44bb7b29091793c58abdc497b95241d1fbeffde31961251894955ef39e92dd2454f", &(0x7f0000000640)="8d931df3a9fd9a9af1caa00e1e4696bcd38aa41290da7ae0a93f80a7d7fb4038a99dc236c3548ab957aa41effdc30304dc64d4c1ccb5156ac61237fde5955d3657ca5ed5b3f787c639da5ff20704ff97a8364a036f7a46ad292ff02e4b5e196c23a5e4", 0x1, r9, 0x4}, 0x38) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r10, 0xc058534f, &(0x7f00000001c0)={{0xf, 0x1}, 0x1, 0x8001, 0x402, {0x40, 0xb}, 0x7, 0xa}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000040)={0x4}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r9, &(0x7f00000002c0)) read$eventfd(r3, &(0x7f0000000080), 0x8) 13.052644584s ago: executing program 3 (id=244): move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @void}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[], 0x0) (fail_nth: 1) 13.022971217s ago: executing program 5 (id=245): syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000001940)="$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") writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @private1, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x2, {0x9, 0x6, "c76b72", 0x5, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}}}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 12.76208322s ago: executing program 4 (id=246): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x4}, 0x38) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020a264202"], 0x10}}, 0x24000000) acct(&(0x7f00000001c0)='./file0\x00') read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2062) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000140)) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, 0x0, &(0x7f0000000300)) umount2(&(0x7f0000000380)='./file0\x00', 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000240)={0x80000011}) 12.733967496s ago: executing program 3 (id=248): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0xfd, 0x0, 0x0, 0x0) (fail_nth: 1) 12.57136966s ago: executing program 0 (id=250): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c12, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x2) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffffffa}]}}]}, 0x40}}, 0xc840) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 10.595235023s ago: executing program 3 (id=253): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0x0, 0x34324142, 0x500, 0x2d0, 0x3, @stepwise={{0x9, 0x80000000}, {0x10001, 0x101}, {0x4, 0x805}}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000000780)=""/102400, 0x19000) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400d00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000200)) r4 = epoll_create1(0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a00"/75], 0xa0}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000c40)) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x18) setns(0xffffffffffffffff, 0x10000000) socket$netlink(0x10, 0x3, 0xc) 10.554091714s ago: executing program 5 (id=254): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x4, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x3c, 0x4}, @typedef={0x7e, 0x0, 0x0, 0x8, 0x2}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x7, 0x7}, {0xe, 0x9}]}, @union={0x3, 0x4, 0x0, 0x5, 0x0, 0xffff, [{0xb, 0x1, 0x3}, {0xa, 0x1, 0x5}, {0xa, 0x4, 0x48}, {0x3, 0x5, 0x4}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x2}, @float={0xb, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000300)=""/223, 0xa8, 0xdf, 0x1, 0x3a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x0, 0x9, 0x9, 0x706, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0x46, 0x800, 0x0, 0x0) 10.376104185s ago: executing program 4 (id=255): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x97be, 0x7e06, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sigaltstack(0x0, 0x0) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000ae0000006a0a00ff000000007100c00e00000000950000000000000018100000", @ANYRESOCT, @ANYBLOB="00000000000000000500a801000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x35) getdents(r1, &(0x7f0000001ac0)=""/182, 0xb6) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000280)=0x9) 8.861369812s ago: executing program 5 (id=257): r0 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x3b42, 0x2, 0xfffffffe, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0xe38, 0x9, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 8.83638682s ago: executing program 3 (id=258): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x132, 0x40001002, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) 8.705683267s ago: executing program 0 (id=259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000280)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d90491c3248040000", 0x25}, {&(0x7f0000000080)="b00c7037e000000000af3c3c39e275", 0xf}, {&(0x7f0000000f40)="dbcaa1ec3a9348f4235d899c505d56", 0xf}, {&(0x7f0000000000)="6a152c28", 0x4}], 0x4) 8.637909991s ago: executing program 1 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 8.080864794s ago: executing program 3 (id=261): syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109022400010000000009040000022ec25d000905ff"], 0x0) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.079458373s ago: executing program 5 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) io_uring_enter(r2, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 7.578581017s ago: executing program 1 (id=263): setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x76) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20004000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a}, 0x28) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x200000, &(0x7f0000000340)={[{@block_validity}, {}, {@usrjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r5 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84342, 0xce) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000200)={0x10, 0x0, "f7e46828e5457db22be0e7cbd993e03d"}) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) 7.499743066s ago: executing program 0 (id=264): socketpair(0x1, 0x1, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x81, 0xffffffff}) r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f00000002c0), &(0x7f0000000580)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x80007, 0x20002f7}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000440)=0x7f) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x40, 0x20, 0x3, 0xc, {{0x15, 0x4, 0x0, 0x3, 0x54, 0x64, 0x0, 0xea, 0x29, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x23, 0xf7, [@dev={0xac, 0x14, 0x14, 0x1b}, @empty, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, @multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast2]}, @cipso={0x86, 0xe, 0x3, [{0x1, 0x8, "995e485c0545"}]}, @generic={0x94, 0xc, "e9f62d1ff041a7ca164c"}]}}}}}) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f00000002c0)="f570eb8ab9ad394bff70eb796b62e2c24458c0dfff528d9e3c947a6054d020ed7444c9d9b70b5b1b59a1faf7de3ab33d69142c961983a9c0a724e8f24a4790678a3a92c46c2822e87337fcd9b521e9f6fec3fdf3fd8ba21e91e5f5ccf6c7c451072b2be4d6a292821795e4a65f3d483a32572e841e432464bbca1c5d0918888abaccc7a86d834bc8ef7e2fec94f843338d7d503218f0d99dbf02ab57573caeddf19a04e734d1814f8b4d4293dac604729bb13cb4e49fa80e18c92e341f7a2afadcb7a5eb4fe06ab77703e5aee4645986ec882cb13663b61548d19fa0e6595ba708f28b1e6d2bd2c1", 0xe8) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) 6.631991262s ago: executing program 2 (id=265): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e0"], 0x64}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xe000, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) 6.285826456s ago: executing program 4 (id=266): syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000001940)="$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") writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @private1, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x2, {0x9, 0x6, "c76b72", 0x5, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}}}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 6.28340458s ago: executing program 1 (id=267): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c12, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x2) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffffffa}]}}]}, 0x40}}, 0xc840) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 5.88643287s ago: executing program 2 (id=268): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)='v', 0x1}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x1b) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) ioctl$TCXONC(r3, 0x540a, 0x2) sendto$inet6(r1, 0x0, 0xffffffb4, 0x890, 0x0, 0x0) 5.885634934s ago: executing program 0 (id=269): syz_emit_ethernet(0x3ba, 0x0, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000002680)=ANY=[@ANYBLOB="6561733d6e6f2c63686b0800006865636b3d6e6f6e652c00f510918bff7ffd9a1c4b040ea784943331d1c99ca800"/66], 0x1, 0x9e16, &(0x7f000000a040)="$eJwUk1Mc34UDRZdbdss2T7Zt27Z90ur3tbFs2221bNt2LRuL/8//4b7eh3PPvXOAIwc4aoB3DfDuAY4e4D0DvHeA9w3w/gE+MMAHB/jQAB8e4CMDfHSAjw3w8QE+McAnB/jUAJ8e4DMDfHaAzw3w+QG+MMAXB/jSAF8e4CsDfHWArw3w9QG+McA3B/jWAN8e4DsDfHeA7w3w/QF+MMAPB/jRAD8e4CcD/HSAnw3w8wF+McAxA/xygF8N8OsBfjPAbwf43QC/H+APA/xxgD8N8OcB/jLAXwf42wB/H+AfAxw7wD8H+NcA/x7gPwP8d4D/DXBIgOMEOG6A4wU4foATBDhhgBMFOHGAQwOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZAxwW4EwBzhzgLAHOGuBsAc4e4BwBzhngXAHOHeA8Ac4b4HwBzh/gAgEuGOBCAS4c4CIBLhrgYgEuHuASAS4ZIAEuFeDSAS4T4LIBLhfg8gGuEOCKAa4U4MoBrhLgqgGuFuDqAa4R4JoBrhXg2gGuE+C6Aa4X4PoBbhDghgFuFODGAW4S4KYBbhbg5gFuEeCWAW4V4NYBbhPgtgFuF+D2Ae4Q4I4B7hTgzgHuEuCuAe4W4O4B7hHgngHuFeDeAe4T4L4B7hfg/gEeEOCBAR4U4MEBHhLgoQEeFuDhAR4R4JEBHhXg0QEeE+CxAR4X4PEBnhDgiQGeFKABnhzgKQGeGuBpAZ4e4PAAzwjwzAAHAQYBhgFGAcYBJgGmAWYB5gEWAZYBVgHWATYBtgF2AfYBjgjwrADPDvCcAM8N8LwAzw/wggAvDPCiAC8O8JIALw3wsgAvD/CKAK8M8KoArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDHBkgKMCvCvAuwMcHeA9Ad4b4H0B3h/gAwE+GOBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBjgnwywC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AP8IcGyAfwb4V4B/B/hPgP8G+F+AQ0IcJ8RxQxwvxPFDnCDECUOcKMSJQxwa4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjisBBnCnHmEGcJcdYQZwtx9hDnCHHOEOcKce4Q5wlx3hDnC3H+EBcIccEQFwpx4RAXCXHREBcLcfEQlwhxyRAJcakQlw5xmRCXDXG5EJcPcYUQVwxxpRBXDnGVEFcNcbUQVw9xjRDXDHGtENcOcZ0Q1w1xvRDXD3GDEDcMcaMQNw5xkxA3DXGzEDcPcYsQtwxxqxC3DnGbELcNcbsQtw9xhxB3DHGnEHcOcZcQdw1xtxB3D3GPEPcMca8Q9w5xnxD3DXG/EPcP8YAQDwzxoBAPDvGQEA8N8bAQDw/xiBCPDPGoEI8O8ZgQjw3xuBCPD/GEEE8M8aQQDfHkEE8J8dQQTwvx9BCHh3hGiGeGOAgxCDEMMQoxDjEJMQ0xCzEPsQixDLEKsQ6xCbENsQuxD3FEiGeFeHaI54R4bojnhXh+iBeEeGGIF4V4cYiXhHhpiJeFeHmIV4R4ZYhXhXh1iNeEeG2I14V4fYg3hHhjiDeFeHOIt4R4a4i3hXh7iHeEeGeII0McFeJdId4d4ugQ7wnx3hDvC/H+EB8I8cEQHwrx4RAfCfHREB8L8fEQnwjxyRCfCvHpEJ8J8dkQnwvx+RBfCPHFEF8K8eUQXwnx1RBfC/H1EN8I8c0Q3wrx7RDfCfHdEN8L8f0QPwjxwxA/CvHjED8J8dMQPwvx8xC/CHFMiF+G+FWIX4f4TYjfhvhdiN+H+EOIP4b4U4g/h/hLiL+G+FuIv4f4R4hjQ/wzxL9C/DvEf0L8N8T/QhwS4TgRjhvheBGOH+EEEU4Y4UQRThzh0AgniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCIdFOFOEM0c4S4SzRjhbhLNHOEeEc0Y4V4RzRzhPhPNGOF+E80e4QIQLRrhQhAtHuEiEi0a4WISLR7hEhEtGSIRLRbh0hMtEuGyEy0W4fIQrRLhihCtFuHKEq0S4aoSrRbh6hGtEuGaEa0W4doTrRLhuhOtFuH6EG0S4YYQbRbhxhJtEuGmEm0W4eYRbRLhlhFtFuHWE20S4bYTbRbh9hDtEuGOEO0W4c4S7RLhrhLtFuHuEe0S4Z4R7Rbh3hPtEuG+E+0W4f4QHRHhghAdFeHCEh0R4aISHRXh4hEdEeGSER0V4dITHRHhshMdFeHyEJ0R4YoQnRWiEJ0d4SoSnRnhahKdHODzCMyI8M8JBhEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2EIyI8K8KzIzwnwnMjPC/C8yO8IMILI7wowosjvCTCSyO8LMLLI7wiwisjvCrCqyO8JsJrI7wuwusjvCHCGyO8KcKbI7wlwlsjvC3C2yO8I8I7IxwZ4agI74rw7ghHR3hPhPdGeF+E90f4QIQPRvhQhA9H+EiEj0b4WISPR/hEhE9G+FSET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+FGEH0f4SYSfRvhZhJ9H+EWEYyL8MsKvIvw6wm8i/DbC7yL8PsIfIvwxwp8i/DnCXyL8NcLfIvw9wj8iHBvhnxH+FeHfEf4T4b8R/hfhkBjHiXHcGMeLcfwYJ4hxwhgninHiGIfGOEmMk8Y4WYyTxzhFjFPGOFWMU8c4TYzTxjhdjNPHOEOMM8Y4LMaZYpw5xllinDXG2WKcPcY5YpwzxrlinDvGeWKcN8b5Ypw/xgViXDDGhWJcOMZFYlw0xsViXDzGJWJcMkZiXCrGpWNcJsZlY1wuxuVjXCHGFWNcKcaVY1wlxlVjXC3G1WNcI8Y1Y1wrxrVjXCfGdWNcL8b1Y9wgxg1j3CjGjWPcJMZNY9wsxs1j3CLGLWPcKsatY9wmxm1j3C7G7ccfMuT/fHeMcacYd45xlxh3jXG3GHePcY8Y94xxrxj3jnGfGPeNcb8Y94/xgBgPjPGgGA+O8ZAYD43xsBgPj/GIGI+M8agYj47xmBiPjfG4GI+P8YQYT4zxpBiN8eQYT4nx1BhPi/H0GIfHeEaMZ8Y4iDGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GPcUSMZ8V4doznxHhujOfFeH6MF8R4YYwXxXhxjJfEeGmMl8V4eYxXxHhljFfFeHWM18R4bYzXxXh9jDfEeGOMN8V4c4y3xHhrjLfFeHuMd8R4Z4wjYxwV410x3h3j6BjvifHeGO+L8f4YH4jxwRgfivHhGB+J8dEYH4vx8RifiPHJGJ+K8ekYn4nx2Rifi/H5GF+I8cUYX4rx5RhfifHVGF+L8fUY34jxzRjfivHtGN+J8d0Y34vx/Rg/iPHDGD+K8eMYP4nx0xg/i/HzGL+IcUyMX8b4VYxfx/hNjN/G+F2M38f4Q4w/xvhTjD/H+EuMv8b4W4y/x/hHjGNj/DPGv2L8O8Z/Yvw3xv9iHJLgOAmOm+B4CY6f4AQJTpjgRAlOnODQBCdJcNIEJ0tw8gSnSHDKBKdKcOoEp0lw2gSnS3D6BGdIcMYEhyU4U4IzJzhLgrMmOFuCsyc4R4JzJjhXgnMnOE+C8yY4X4LzJ7hAggsmuFCCCye4SIKLJrhYgosnuESCSyZIgksluHSCyyS4bILLJbh8giskuGKCKyW4coKrJLhqgqsluHqCayS4ZoJrJbh2guskuG6C6yW4foIbJLhhghsluHGCmyS4aYKbJbh5glskuGWCWyW4dYLbJLhtgtsluH2COyS4Y4I7JbhzgrskuGuCuyW4e4J7JLhngnsluHeC+yS4b4L7Jbh/ggckeGCCByV4cIKHJHhogocleHiCRyR4ZIJHJXh0gsckeGyCxyV4fIInJHhigiclaIInJ3hKgqcmeFqCpyc4PMEzEjwzwUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYIjEjwrwbMTPCfBcxM8L8HzE7wgwQsTvCjBixO8JMFLE7wswcsTvCLBKxO8KsGrE7wmwWsTvC7B6xO8IcEbE7wpwZsTvCXBWxO8LcHbE7wjwTsTHJngqATvSvDuBEcneE+C9yZ4X4L3J/hAgg8m+FCCDyf4SIKPJvhYgo8n+ESCTyb4VIJPJ/hMgs8m+FyCzyf4QoIvJvhSgi8n+EqCryb4WoKvJ/hGgm8m+FaCbyf4ToLvJvhegu8n+EGCHyb4UYIfJ/hJgp8m+FmCnyf4RYJjEvwywa8S/DrBbxL8NsHvEvw+wR8S/DHBnxL8OcFfEvw1wd8S/D3BPxIcm+CfCf6V4N8J/pPgvwn+l+CQFMdJcdwUx0tx/BQnSHHCFCdKceIUh6Y4SYqTpjhZipOnOEWKU6Y4VYpTpzhNitOmOF2K06c4Q4ozpjgsxZlSnDnFWVKcNcXZUpw9xTlSnDPFuVKcO8V5Upw3xflSnD/FBVJcMMWFUlw4xUVSXDTFxVJcPMUlUlwyRVJcKsWlU1wmxWVTXC7F5VNcIcUVU1wpxZVTXCXFVVNcLcXVU1wjxTVTXCvFtVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCrFo1M8JsVjUzwuxeNTPCHFE1M8KUVTPDnFU1I8NcXTUjw9xeEpnpHimSkOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTHJHiWSmeneI5KZ6b4nkpnp/iBSlemOJFKV6c4iUpXpriZSlenuIVKV6Z4lUpXp3iNSlem+J1KV6f4g0p3pjiTSnenOItKd6a4m0p3p7iHSnemeLIFEeleFeKd6c4OsV7Urw3xftSvD/FB1J8MMWHUnw4xUdSfDTFx1J8PMUnUnwyxadSfDrFZ1KSZ1N8LsXnU3whxRdTfCnFl1N8JcVXU3wtxddTfCPFN1N8K8W3U3wnxXdTfC/F91P8IMUPU/woxY9T/CTFT1P8LMXPU/wixTEpfpniVyl+neI3KX6b4ncpfp/iDyn+mOJPKf6c4i8p/pribyn+nuIfKY5N8c8U/0rx7xT/SfHfFP9LcUiG42Q4bobjZTh+hhNkOGGGE2U4cYZDM5wkw0kznCzDyTOcIsMpM5wqw6kznCbDaTOcLsPpM5whwxkzHJbhTBnOnOEsGc6a4WwZzp7hHBnOmeFcGc6d4TwZzpvhfBnOn+ECGS6Y4UIZLpzhIhkumuFiGS6e4RIZLpkhGS6V4dIZLpPhshkul+HyGa6Q4YoZrpThyhmukuGqGa6W4eoZrpHhmhmuleHaGa6T4boZrpfh+hlukOGGGW6U4cYZbpLhphluluHmGW6R4ZYZbpXh1hluk+G2GW6X4fYZ7pDhjhnulOHOGe6S4a4Z7pbh7hnukeGeGe6V4d4Z7pPhvhnul+H+GR6Q4YEZHpThwRkekuGhGR6W4eEZHpHhkRkeleHRGR6T4bEZHpfh8RmekOGJGZ6UoRmenOEpGZ6a4WkZnp7h8AzPyPDMDAcZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ9hmOyPCsDM/O8JwMz83wvAzPz/CCDC/M8KIML87wkgwvzfCyDC/P8IoMr8zwqgyvzvCaDK/N8LoMr8/whgxvzPCmDG/O8JYMb83wtgxvz/CODO/McGSGozK8K8O7Mxyd4T0Z3pvhfRnen+EDGT6Y4UMZPpzhIxk+muFjGT6e4RMZPpnhUxk+neEzGT6b4XMZPp/hC8PxxQxfyvDlDF/J8NUMX8vw9QzfyPDNDN/K8O0M38nw3Qzfy/D9DD/I8MMMP8rw4ww/yfDTDD/L8PMMv8hwTIZfZvhVhl9n+E2G32b4XYbfZ/hDhj9m+FOGP2f4S4a/Zvhbhr9n+EeGYzP8M8O/Mvw7w38y/DfD/zIckuM4OY6b43g5jp/jBDlOmONEOU6c49AcJ8lx0hwny3HyHKfIccocp8px6hynyXHaHKfLcfocZ8hxxhyH5ThTjjPnOEuOs+Y4W46z5zhHjnPmOFeOc+c4T47z5jhfjvPnuECOC+a4UI4L57hIjovmuFiOi+e4RI5L5kiOS+W4dI7L5LhsjsvluHyOK+S4Yo4r5bhyjqvkuGqOq+W4eo5r5LhmjmtNPGTI/1msk+O6Oa6X4/o5bpDjhjlulOPGOW6S46Y5bpbj5jlukeOWOW6V49Y5bpPjtjlul+P2Oe6Q44457pTjzjnukuOuOe6W4+457pHjnjnulePeOe6T47457pfj/jkekOOBOR6U48E5HpLjoTkeluPhOR6R45E5HpXj0Tkek+OxOR6X4/E5npDjiTmelKM5npzjKTmemuNpOZ6e4/Acz8jxzBwHOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY5jsjxrBzPzvGcHM/N8bwcz8/xghwvzPGiHC/O8ZIcL83xshwvz/GKHK/M8aocr87xmhyvzfG6HK/P8YYcb8zxphxvzvGWHG/N8bYcb8/xjv/vNWbE2JE5jvq/y0OGDPl/Ruc4ZMiQIffmeF+O9+f4QI4P/t/9IUOGPJzjIzk+muNjOT6e4xM5PpnjUzk+neMzOT6b43M5Pp/jCzm+mONLOb6c4ys5vprjazm+nuMbOb6Z41s5vp3jOzm+m+N7Ob6f4wc5fpjjRzl+nOMnOX6a42c5fp7jFzmOyfHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8hxbI5/5vhXjn/n+E+O/+b43/+ZFDhOgeMWOF6B4xc4QYETFjhRgRMXOLTASQqctMDJCpy8wCkKnLLAqQqcusBpCpy2wOkKnL7AGQqcscBhBc5U4MwFzlLgrAXOVuDsBc5R4JwFzlXg3AXOU+C8Bc5X4PwFLlDgggUuVODCBS5S4KIFLlbg4gUuUeCSBVLgUgUuXeAyBW44rBm7XIHLF7hCgSsWuFKBKxe4SoGrFrhagasXuEaBaxa4VoFrF7hOgesWuF6B6xe4wf/7CtyowI0L3KTATQvcrMDNC9yiwC0L3KrArQvcpsBtC9yuwO0L3KHAHQvcqcCdC9ylwF0L3K3A3Qvco8A9C9yrwL0L3KfAfQvcr8D9CzygwAMLPKjAgws8pMBDCzyswMMLPKLAIws8qsCjCzymwGMLPK7A4ws8ocATCzypQAs8ucBTCjy1wNMKPL3A4QWeUeCZBQ4KDAoMC4wKjAtMCkwLzArMCywKLAusCqwLbApsC+wK7AscUeBZBZ5d4DkFnlvgeQWeX+AFBV5Y4EUFXlzgJQVeWuBlBV5e4BUFXlngVQVeXeA1BV5b4HUFXl/gDQXeWOBNBd5c4C0F3lrgbQXeXuAdBd5Z4MgCRxV4V4F3Fzi6wHsKvLfA+wq8v8AHCnywwIcKfLjARwp8tMDHCny8wCcKfLLApwp8usBnCny2wOcKfL7AFwp8scCXCny5wFcKfLXA1wp8vcA3CnyzwLcKfLvAdwp8t8D3Cny/wA8K/LDAjwr8uMBPCvy0wM8K/LzALwocU+CXBX5V4NcFflPgtwV+V+D3Bf5Q4I8F/lTgzwX+UuCvBf5W4O8F/lHg2AL/LPCvAv8u8J8C/y3wvwKHlDhOieOWOF6J45c4QYkTljhRiROXOLTESUqctMTJSpy8xClKnLLEqUqcusRpSpy2xOlKnL7EGUqcscRhJc5U4swlzlLirCXOVuLsJc5R4pwlzlXi3CXOU+K8Jc5X4vwlLlDigiUuVOLCJS5S4qIlLlbi4iUuUeKSJVLiUiUuXeIyJS5b4nIlLl/iCiWuWOJKJa5c4iolrlriaiWuXuIaJa5Z4lolrl3iOiWuW+J6Ja5f4gYlbljiRiVuXOImJW5a4mYlbl7iFiVuWeJWJW5d4jYlblvidiVuX+IOJe5Y4k4l7lziLiXuWuJuJe5e4h4l7lniXiXuXeI+Je5b4n4l7l/iASUeWOJBJR5c4iElHlriYSUeXuIRJR5Z4lElHl3iMSUeW+JxJR5f4gklnljiSSVa4sklnlLiqSWeVuLpJQ4v8YwSzyxxUGJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2Jf4ogSzyrx7BLPKfHcEs8r8fwSLyjxwhIvKvHiEi8p8dISLyvx8hKvKPHKEq8q8eoSrynx2hKvK/H6Em8o8cYSbyrx5hJvKfHWEm8r8fYS7yjxzhJHljiqxLtKvLvE0SXeU+K9Jd5X4v0lPlDigyU+VOLDJT5S4qMlPlbi4yU+UeKTJT5V4tMlPlPisyU+V+LzJb5Q4oslvlTiyyW+UuKrJb5W4uslvlHimyW+VeLbJb5T4rslvlfi+yV+UOKHJX5U4sclflLipyV+VuLnJX5R4pgSvyzxqxK/LvGbEr8t8bsSvy/xhxJ/LPGnEn8u8ZcSfy3xtxJ/L/GPEseW+GeJf5X4d4n/lPhvif+VOKTCcSoct8LxKhy/wgkqnLDCiSqcuMKhFU5S4aQVTlbh5BVOUeGUFU5V4dQVTlPhtBVOV+H0Fc5Q4YwVDqtwpgpnrnCWCmetcLYKZ69wjgrnrHCuCueucJ4K561wvgrnr3CBChescKEKF65wkQoXrXCxChevcIkKl6yQCpeqcOkKl6lw2QqXq3D5CleocMUKV6pw5QpXqXDVClercPUK16hwzQrXqnDtCtepcN0K16tw/Qo3qHDDCjeqcOMKN6lw0wo3q3DzCreocMsKt6pw6wq3qXDbCrercPsKd6hwxwp3qnDnCnepcNcKd6tw9wr3qHDPCveqcO8K96lw3wr3q3D/Cg+o8MAKD6rw4AoPqfDQCg+r8PAKj6jwyAqPqvDoCo+p8NgKj6vw+ApPqPDECk+q0ApPrvCUCk+t8LQKT69weIVnVHhmhYMKgwrDCqMK4wqTCtMKswrzCosKywqrCusKmwrbCrsK+wpHVHhWhWdXeE6F51Z4XoXnV3hBhRdWeFGFF1d4SYWXVnhZhZdXeEWFV1Z4VYVXV3hNhddWeF2F11d4Q4U3VnhThTdXeEuFt1Z4W4W3V3hHhXdWOLLCURXeVeHdFY6u8J4K763wvgrvr/CBCh+s8KEKH67wkQofrfCxCh+v8IkKn6zwqQqfrvCZCp+t8LkKn6/whQpfrPClCl+u8JUKX63wtQpfr/CNCt+s8K0K367wnQrfrfC9Ct+v8IMKP6zwowo/rvCTCj+t8LMKP6/wiwrHVPhlhV9V+HWF31T4bYXfVfh9hT9U+GOFP1X4c4W/VPhrhb9V+HuFf1Q4tsI/K/yrwr8r/KfCfyv8r8IhNY5T47g1jlfj+DVOUOOENU5U48Q1Dq1xkhonrXGyGievcYoap6xxqhqnrnGaGqetcboap69xhhpnrHFYjTPVOHONs9Q4a42z1Th7jXPUOGeNc9U4d43z1DhvjfPVOH+NC9S4YI0L1bhwjYvUuGiNi9W4eI1L1LhkjdS4VI1L17hMjcvWuFyNy9e4Qo0r1rhSjSvXuEqNq9a4Wo2r17hGjWvWuFaNa9e4To3r1rhejevXuEGNG9a4UY0b17hJjZvWuFmNm9e4RY1b1rhVjVvXuE2N29a4XY3b17hDjTvWuFONO9e4S4271rhbjbvXuEeNe9a4V41717hPjfvWuF+N+9d4QI0H1nhQjQfXeEiNh9Z4WI2H13hEjUfWeFSNR9d4TI3H1nhcjcfXeEKNJ9Z4Uo3WeHKNp9R4ao2n1Xh6jcNrPKPGM2sc1BjUGNYY1RjXmNSY1pjVmNdY1FjWWNVY19jU2NbY1djXOKLGs2o8u8Zzajy3xvNqPL/GC2q8sMaLary4xktqvLTGy2q8vMYraryyxqtqvLrGa2q8tsbrary+xhtqvLHGm2q8ucZbary1xttqvL3GO2q8s8aRNY6q8a4a765xdI331HhvjffVeH+ND9T4YI0P1fhwjY/U+GiNj9X4eI1P1PhkjU/V+HSNz9T4bI3P1fh8jS/U+GKNL9X4co2v1Phqja/V+HqNb9T4Zo1v1fh2je/U+G6N79X4fo0f1PhhjR/V+HGNn9T4aY2f1fh5jV/UOKbGL2v8qsava/ymxm9r/K7G72v8ocYfa/ypxp9r/KXGX2v8rcbfa/yjxrE1/lnjXzX+XeM/Nf5b4381DmlwnAbHbXC8BsdvcIIGJ2xwogYnbnBog5M0OGmDkzU4eYNTNDhlg1M1OHWD0zQ4bYPTNTh9gzM0OGODwxqcqcGZG5ylwVkbnK3B2Ruco8E5G5yrwbkbnKfBeRucr8H5G1ygwQUbXKjBhRtcpMFFG1yswcUbXKLBJRukwaUaXLrBZRpctsHlGly+wRUaXLHBlRpcucFVGly1wdUaXL3BNRpcs8G1Gly7wXUaXLfB9Rpcv8ENGtywwY0a3LjBTRrctMHNGty8wS0a3LLBrRrcusFtGty2we0a3L7BHRrcscGdGty5wV0a3LXB3RrcvcE9Gtyzwb0a3LvBfRrct8H9Gty/wQMaPLDBgxo8uMFDGjy0wcMaPLzBIxo8ssGjGjy6wWMaPLbB4xo8vsETGjyxwZMatMGTGzylwVMbPK3B0xsc3uAZDZ7Z4KDBoMGwwajBuMGkwbTBrMG8waLBssGqwbrBpsG2wa7BvsERDZ7V4NkNntPguQ2e1+D5DV7Q4IUNXtTgxQ1e0uClDV7W4OUNXtHglQ1e1eDVDV7T4LUNXtfg9Q3e0OCNDd7U4M0N3tLgrQ3e1uDtDd7R4J0NjmxwVIN3NXh3g6MbvKfBexu8r8H7G3ygwQcbfKjBhxt8pMFHG3yswccbfKLBJxt8qsGnG3ymwWcbfK7B5xt8ocEXG3ypwZcbfKXBVxt8rcHXG3yjwTcbfKvBtxt8p8F3G3yvwfcb/KDBDxv8qMGPG/ykwU8b/KzBzxv8osExDX7Z4FcNft3gNw1+2+B3DX7f4A8N/tjgTw3+3OAvDf7a4G8N/t7gHw2ObfDPBv9q8O8G/2nw3wb/a3BIi+O0OG6L47U4fosTtDhhixO1OHGLQ1ucpMVJW5ysxclbnKLFKVucqsWpW5ymxWlbnK7F6VucocUZWxzW4kwtztziLC3O2uJsLc7e4hwtztniXC3O3eI8Lc7b4nwtzt/iAi0u2OJCLS7c4iItLtriYi0u3uISLS7ZIi0u1eLSLS7T4rItLtfi8i2u0OKKLa7U4sotrtLiqi2u1uLqLa7R4potrtXi2i2u0+K6La7X4votbtDihi1u1OLGLW7S4qYtbtbi5i1u0eKWLW7V4tYtbtPiti1u1+L2Le7Q4o4t7tTizi3u0uKuLe7W4u4t7tHini3u1eLeLe7T4r4t7tfi/i0e0OKBLR7U4sEtHtLioS0e1uLhLR7R4pEtHtXi0S0e0+KxLR7X4vEtntDiiS2e1KItntziKS2e2uJpLZ7e4vAWz2jxzBYHLQYthi1GLcYtJi2mLWYt5i0WLZYtVi3WLTYtti12LfYtjmjxrBbPbvGcFs9t8bwWz2/xghYvbPGiFi9u8ZIWL23xshYvb/GKFq9s8aoWr27xmhavbfG6Fq9v8YYWb2zxphZvbvGWFm9t8bYWb2/xjhbvbHFki6NavKvFu1sc3eI9Ld7b4n0t3t/iAy0+2OJDLT7c4iMtPtriYy0+3uITLT7Z4lMtPt3iMy0+2+JzLUP//5sXWnyxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWhzT4pctftXi1y1+0+K3LX7X4vct/tDijy3+1OLPLf7S4q8t/tbi7y3+0eLYFv9s8a8W/27xnxb/bfG/Fod0OE6H43Y4XofjdzhBhxN2OFGHE3c4tMNJOpy0w8k6nLzDKTqcssOpOpy6w2k6nLbD6TqcvsMZOpyxw2EdztThzB3O0uGsHc7W4ewdztHhnB3O1eHcHc7T4bwdztfh/B0u0OGCHS7U4cIdLtLhoh0u1uHiHS7R4ZId0uFSHS7d4TIdLtvhch0u3+EKHUOHDBniSh2u3OEqHa7a4Wodrt7hGh2u2eFaHa7d4Todrtvheh2u3+EGHW7Y4UYdbtzhJh1u2uFmHW7e4RYdbtnhVh1u3eE2HW7b4XYdbt/hDh3u2OFOHe7c4S4d7trhbh3u3uEeHe7Z4V4d7t3hPh3u2+F+He7f4QEdHtjhQR0e3OEhHR7a4WEdHt7hER0e2eFRHR7d4TEdHtvhcR0e3+EJHZ7Y4Ukd2uHJHZ7S4akdntbh6R0O7/CMDs/scNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+GIDs/q8OwOz+nw3A7P6/D8Di/o8MIOL+rw4g4v6fDSDi/r8PIOr+jwyg6v6vDqDq/p8NoOr+vw+g5v6PDGDm/q8OYOb+nw1g5v6/D2Du/o8M4OR3Y4qsO7Ory7w9Ed3tPhvR3e1+H9HT7Q4YMdPtThwx0+0uGjHT7W4eMdPtHhkx0+1eHTHT7T4bMdPtfh8x2+0OGLHb7U4csdvtLhqx2+1uHrHb7R4ZsdvtXh2x2+0+G7Hb7X4fsdftDhhx1+1OHHHX7S4acdftbh5x1+0eGYDr/s8KsOv+7wmw6/7fC7Dr/v8IcOf+zwpw5/7vCXDn/t8LcOf+/wjw7Hdvhnh391+HeH/3T4b4f/dTikx3F6HLfH8Xocv8cJepywx4l6nLjHoT1O0uOkPU7W4+Q9TtHjlD1O1ePUPU7T47Q9Ttfj9D3O0OOMPQ7rcaYeZ+5xlh5n7XG2HmfvcY4e5+xxrh7n7nGeHuftcb4e5+9xgR4X7HGhHhfucZEeF+1xsR4X73GJHpfskR6X6nHpHpfpcdkel+tx+R5X6HHFHlfqceUeV+lx1R5X63H1Htfocc0e1+px7R7X6XHdHtfrcf0eN+hxwx436nHjHjfpcdMeN+tx8x636HHLHrfqceset+lx2x6363H7Hnfoccced+px5x536XHXHnfrcfce9+hxzx736nHvHvfpcd8e9+tx/x4P6PHAHg/q8eAeD+nx0B4P6/HwHo/o8cgej+rx6B6P6fHYHo/r8fgeT+jxxB5P6tEeT+7xlB5P7fG0Hk/vcXiPZ/R4Zo+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67HvseR/R4Vo9n93hOj+f2eF6P5/d4QY8X9nhRjxf3eEmPl/Z4WY+X93hFj1f2eFWPV/d4TY/X9nhdj9f3eEOPN/Z4U48393hLj7f2eFuPt/d4R4939jiyx1E93tXj3T2O7vGenv+xSA9MeB4MAkVTt6lt2721bdu27Vsjtd/HRm0rqW3bth3t7Mz3F84chw9wxAAfGuDDA3xkgI8O8LEBPj7AJwb45ACfGuDTA3xmgM8O8LkBPj/AFwb44gBfGuDLA3xlgK8O8LUBvj7ANwb45gDfGuDbA3xngO8O8L0Bvj/ADwb44QA/GuDHA/xkgJ8O8LMBfj7ALwb45QC/GuDXA/xmgN8O8LsBfj/AHwb44wB/GuDPA/xlgL8O8LcB/j7APwb45wD/GuDfA/xngP8O8L8BjhzgqAGOHuCYAY4d4JAAxwlw3ADHC3D8ACcIcMIAJwpw4gAnCXBogJMGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WICLB7hEgEsGuFSABLh0gMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyAJwR4YoAnBXhygAZ4SoCnBnhagKcHeEaAZwZ4VoBnB3hOgOcGOCzA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwIcBBgEGAYYBRgHmASYBpgFmAdYBFgGWAVYB9gE2AbYBdgHeHWA1wR4bYDXBXh9gDcEeGOANwV4c4C3BHhrgLcFeHuAdwR4Z4B3BXh3gPcEeG+A9wV4f4APBPhggMMDHBHgQwE+HOAjAT4a4GMBPh7gEwE+GeBTAT4d4DMBPhvgcwE+H+ALAb4Y4EsBvhzgKwG+GuBrAb4e4BsBvhngWwG+HeA7Ab4b4HsBvh/gBwF+GOBHAX4c4CcBfhrgZwF+HuAXAX4Z4FcBfh3gNwF+G+B3AX4f4A8B/hjgTwH+HOAvAf4a4G8B/h7gHwH+GeBfAf4d4D8B/hvgfwGODHBUgKMDHBPg2ACHhDhOiOOGOF6I44c4QYgThjhRiBOHOEmIQ0OcNMTJQpw8xClCnDLEqUKcOsRpQpw2xOlCnD7EGUKcMcSZQpw5xFlCnDXE2UKcPcQ5QpwzxLlCnDvEeUKcN8T5Qpw/xAVCXDDEhUJcOMRFQlw0xMVCXDzEJUJcMsSlQiTEpUNcJsRlQ1wuxOVDXCHEFUNcKcSVQ1wlxFVDXC3E1UNcI8Q1Q1wrxLVDXCfEdUNcL8T1Q9wgxA1D3CjEjUPcJMRNQ9wsxM1D3CLELUPcKsStQ9wmxG1D3C7E7UPcIcQdQ9wpxJ1D3CXEXUPcLcTdQ9wjxD1D3CvEvUPcJ8R9Q9wvxP1DPCDEA0M8KMSDQzwkxENDPCzEw0M8IsQjQzwqxKNDPCbEY0M8LsTjQzwhxBNDPCnEk0M0xFNCPDXE00I8PcQzQjwzxLNCPDvEc0I8N8RhIZ4X4vkhXhDihSFeFOLFIV4S4qUhXhbi5SFeEeKVIV4V4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsSrQ7wmxGtDvC7E60O8IcQbQ7wpxJtDvCXEW0O8LcTbQ7wjxDtDvCvEu0O8J8R7Q7wvxPtDfCDEB0McHuKIEB8K8eEQHwnx0RAfC/HxEJ8I8ckQnwrx6RCfCfHZEJ8L8fkQXwjxxRBfCvHlEF8J8dUQXwvx9RDfCPHNEN8K8e0Q3wnx3RDfC/H9ED8I8cMQPwrx4xA/CfHTED8L8fMQvwjxyxC/CvHrEL8J8dsQvwvx+xB/CPHHEH8K8ecQfwnx1xB/C/H3EP8I8c8Q/wrx7xD/CfHfEP8LcWSIo0IcHeKYEMeGOCTCcSIcN8LxIhw/wgkinDDCiSKcOMJJIhwa4aQRThbh5BFOEeGUEU4V4dQRThPhtBFOF+H0Ec4Q4YwRzhThzBHOEuGsEc4W4ewRzhHhnBHOFeHcEc4T4bwRzhfh/BEuEOGCES4U4cIRLhLhohEuFuHiES4R4ZIRLhUhES4d4TIRLhvhchEuH+EKEa4Y4UoRrhzhKhGuGuFqEa4e4RoRrhnhWhGuHeE6Ea4b4XoRrh/hBhFuGOFGEW4c4SYRbhrhZhFuHuEWEW4Z4VYRbh3hNhFuG+F2EW4f4Q4R7hjhThHuHOEuEe4a4W4R7h7hHhHuGeFeEe4d4T4R7hvhfhHuH+EBER4Y4UERHhzhIREeGuFhER4e4RERHhnhUREeHeExER4b4XERHh/hCRGeGOFJEZ4coRGeEuGpEZ4W4ekRnhHhmRGeFeHZEZ4T4bkRDovwvAjPj/CCCC+M8KIIL47wkggvjfCyCC+P8IoIr4zwqggHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYRXh3hNRFeG+F1EV4f4Q0R3hjhTRHeHOEtEd4a4W0R3h7hHRHeGeFdEd4d4T0R3hvhfRHeH+EDET4Y4fAIR0T4UIQPR/hIhI9G+FiEj0f4RIRPRvhUhE9H+EyEz0b4XITPR/hChC9G+FKEL0f4SoSvRvhahK9H+EaEb0b4VoRvR/hOhO9G+F6E70f4QYQfRvhRhB9H+EmEn0b4WYSfR/hFhF9G+FWEX0f4TYTfRvhdhN9H+EOEP0b4U4Q/R/hLhL9G+FuEv0f4R4R/RvhXhH9H+E+E/0b4X4QjIxwV4egIx0Q4NsIhMY4T47gxjhfj+DFOEOOEMU4U48QxThLj0BgnjXGyGCePcYoYp4xxqhinjnGaGKeNcboYp49xhhhnjHGmGGeOcZYYZ41xthhnj3GOGOeMca4Y545xnhjnjXG+GOePcYEYF4xxoRgXjnGRGBeNcbEYF49xiRiXjHGpGIlx6RiXiXHZGJeLcfkYV4hxxRhXinHlGFeJcdUYV4tx9RjXiHHNGNeKce0Y14lx3RjXi3H9GDeIccMYN4px4xg3iXHTGDeLcfMYt4hxyxi3inHrGLeJcdsYt4tx+xh3iHHHGHeKcecYd4lx1xh3i3H3GPeIcc8Y94px7xj3iXHfGPeLcf8YD4jxwBgPivHgGA+J8dAYD4vx8BiPiPHIGI+K8egYj4nx2BiPi/H4GE+I8cQYT4rx5BiN8ZQYT43xtBhPj/GMGM+M8awYz47xnBjPjXFYjOfFeH6MF8R4YYwXxXhxjJfEeGmMl8V4eYxXxHhljFfFOIgxiDGMMYoxjjGJMY0xizGPsYixjLGKsY6xibGNsYuxj/HqGK+J8doYr4vx+hhviPHGGG+K8eYYb4nx1hhvi/H2GO+I8c4Y74rx7hjvifHeGO+L8f4YH4jxwRiHxzgixodifDjGR2J8NMbHYnw8xidifDLGp2J8OsZnYnw2xudifD7GF2J8McaXYnw5xldifDXG12J8PcY3YnwzxrdifDvGd2J8N8b3Ynw/xg9i/DDGj2L8OMZPYvw0xs9i/DzGL2L8MsavYvw6xm9i/DbG72L8PsYfYvwxxp9i/DnGX2L8NcbfYvw9xj9i/DPGv2L8O8Z/Yvw3xv9iHBnjqBhHxzgmxrExDklwnATHTXC8BMdPcIIEJ0xwogQnTnCSBIcmOGmCkyU4eYJTJDhlglMlOHWC0yQ4bYLTJTh9gjMkOGOCMyU4c4KzJDhrgrMlOHuCcyQ4Z4JzJTh3gvMkOG+C8yU4f4ILJLhgggsluHCCiyS4aIKLJbh4gkskuGSCSyVIgksnuEyCyya4XILLJ7hCgismuFKCKye4SoKrJrhagqsnuEaCaya4VoJrJ7hOgusmuF6C6ye4QYIbJrhRghsnuEmCmya4WYKbJ7hFglsmuFWCWye4TYLbJrhdgtsnuEOCOya4U4I7J7hLgrsmuFuCuye4R4J7JrhXgnsnuE+C+ya4X4L7J3hAggcmeFCCByd4SIKHJnhYgocneESCRyZ4VIJHJ3hMgscmeFyCxyd4QoInJnhSgicnaIKnJHhqgqcleHqCZyR4ZoJnJXh2guckeG6CwxI8L8HzE7wgwQsTvCjBixO8JMFLE7wswcsTvCLBKxO8KsFBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn2CVyd4TYLXJnhdgtcneEOCNyZ4U4I3J3hLgrcmeFuCtyd4R4J3JnhXgncneE+C9yZ4X4L3J/hAgg8mODzBEQk+lODDCT6S4KMJPpbg4wk+keCTCT6V4NMJPpPgswk+l+DzCb6Q4IsJvpTgywm+kuCrCb6W4OsJvpHgmwm+leDbCb6T4LsJvpfg+wl+kOCHCX6U4McJfpLgpwl+luDnCX6R4JcJfpXg1wl+k+C3CX6X4PcJ/pDgjwn+lODPCf6S4K8J/pbg7wn+keCfCf6V4N8J/pPgvwn+l+DIBEclODrBMQmOTXBIiuOkOG6K46U4fooTpDhhihOlOHGKk6Q4NMVJU5wsxclTnCLFKVOcKsWpU5wmxWlTnC7F6VOcIcUZU5wpxZlTnCXFWVOcLcXZU5wjxTlTnCvFuVOcJ8V5U5wvxflTXCDFBVNcKMWFU1wkxUVTXCzFxVNcIsUlU1wqRVJcOsVlUlw2xeVSXD7FFVJcMcWVUlw5xVVSXDXF1VJcPcU1UlwzxbVSXDvFdVJcN8X1Ulw/xQ1S3DDFjVLcOMVNUtw0xc1S3DzFLVLcMsWtUtw6xW1S3DbF7VLcPsUdUtwxxZ1S3DnFXVLcNcXdUtw9xT1S3DPFvVLcO8V9Utw3xf1S3D/FA1I8MMWDUjw4xUNSPDTFw1I8PMUjUjwyxaNSPDrFY1I8NsXjUjw+xRNSPDHFk1I8OUVTPCXFU1M8LcXTUzwjxTNTPCvFs1M8J8VzUxyW4nkpnp/iBSlemOJFKV6c4iUpXpriZSlenuIVKV6Z4lUpDlIMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsU7w6xWtSvDbF61K8PsUbUrwxxZtSvDnFW1K8NcXbUrw9xTtSvDPFu1K8O8V7Urw3xftSvD/FB1J8MMXhKY5I8aEUH07xkRQfTfGxFB9P8YkUn0zxqRSfTvGZFJ9N8bkUn0/xhRRfTPGlFF9O8ZUUX03xtRRfT/GNFN9M8a0U307xnRTfTfG9FN9P8YMUP0zxoxQ/TvGTFD9N8bMUP0/xixS/TPGrFL9O8ZsUv03xuxS/T/GHFH9M8acUf07xlxR/TfG3FH9P8Y8U/0zxrxT/TvGfFP9N8b8UR6Y4KsXRKY5JcWyKQzIcJ8NxMxwvw/EznCDDCTOcKMOJM5wkw6EZTprhZBlOnuEUGU6Z4VQZTp3hNBlOm+F0GU6f4QwZzpjhTBnOnOEsGc6a4WwZzp7hHBnOmeFcGc6d4TwZzpvhfBnOn+ECGS6Y4UIZLpzh+xkumuFiGS6e4RIZLpnhUhmS4dIZLpPhshkul+HyGa6Q4YoZrpThyhmukuGqGa6W4eoZrpHhmhmuleHaGa6T4boZrpfh+hlukOGGGW6U4cYZbpLhphluluHmGW6R4ZYZbpXh1hluk+G2GW6X4fYZ7pDhjhnulOHOGe6S4a4Z7pbh7hnukeGeGe6V4d4Z7pPhvhnul+H+GR6Q4YEZHpThwRkekuGhGR6W4eEZHpHhkRkeleHRGR6T4bEZHpfh8RmekOGJGZ6U4ckZmuEpGZ6a4WkZnp7hGRmemeFZGZ6d4TkZnpvhsAzPy/D8DC/I8MIML8rw4gwvyfDSDC/L8PIMr8jwygyvynCQYZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ/h1Rlek+G1GV6X4fUZ3pDhjRnelOHNGd6S4a0Z3pbh7RnekeGdGd6V4d0Z3pPhvRnel+H9GT6Q4YMZDs9wRIYPZfhwho9k+GiGj2X4eIZPZPhkhk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G7/3v8AcZfpjhRxl+nOEnGX6a4WcZfp7hFxl+meFXGX6d4TcZfpvhdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/Gf6b4X8ZjsxwVIajMxyT4dgMh+Q4To7j5jhejuPnOEGOE+Y4UY4T5zhJjkNznDTHyXKcPMcpcpwyx6lynDrHaXKcNsfpcpw+xxlynDHHmXKcOcdZcpw1x9lynD3HOXKcM8e5cpw7x3lynDfH+XKcP8cFclwwx4VyXDjHRXJcNMfFclw8xyVyXDLHpXIkx6VzXCbHZXNcLsflc1whxxVzXCnHlXNcJcdVc1wtx9VzXCPHNXNcK8e1c1wnx3VzXC/H9XPcIMcNc9wox41z3CTHTXPcLMfNc9wixy1z3CrHrXPcJsdtc9wux+1z3CHHHXPcKcedc9wlx11z3C3H3XPcI8c9c9wrx71z3CfHfXPcL8f9czwgxwNzPCjHg3M8JMdDczwsx8NzPCLHI3M8Ksejczwmx2NzPC7H43M8IccTczwpx5NzNMdTcjw1x9NyPD3HM3I8M8ezcjw7x3NyPDfHYTmel+P5OV6Q44U5XpTjxTlekuOlOV6W4+U5XpHjlTleleMgxyDHMMcoxzjHJMc0xyzHPMcixzLHKsc6xybHNscuxz7Hq3O8Jsdrc7wux+tzvCHHG3O8Kcebc7wlx1tzvC3H23O8I8c7c7wrx7tzvCfHe3O8L8f7c3wgxwdzHJ7jiBwfyvHhHB/J8dEcH8vx8RyfyPHJHJ/K8ekcn8nx2Ryfy/H5HF/I8cUcX8rx5RxfyfHVHF/L8fUc38jxzRzfyvHtHN/J8d0c38vx/Rw/yPHDHD/K8eMcP8nx0xw/y/HzHL/I8cscv8rx6xy/yfHbHL/L8fscf8jxxxx/yvHnHH/J8dccf8vx9xz/yPHPHP/K8e8c/8nx3xz/y3FkjqNyHJ3jmBzH5jikwHEKHLfA8Qocv8AJCpywwIkKnLjASQocWuCkBU5W4OQFTlHglAVOVeDUBU5T4LQFTlfg9AXOUOCMBc5U4MwFzlLgrAXOVuDsBc5R4JwFzlXg3AXOU+C8Bc5X4PwFLlDgggUuVODCBS5S4KIFLlbg4gUuUeCSBS5VIAUuXeAyBS5b4HIFLl/gCgWuWOBKBa5c4CoFrlrgagWuXuAaBa5Z4FoFrl3gOgWuW+B6Ba5f4AYFbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeA+Be5b4H4F7l/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFHl3gMQUeW+BxBR5f4AkFnljgSQWeXKAFnlLgqQWeVuDpBZ5R4JkFnlXg2QWeU+C5BQ4r8LwCzy/wggIvLPCiAi8u8JICLy3wsgIvL/CKAq8s8KoCBwUGBYYFRgXGBSYFpgVmBeYFFgWWBVYF1gU2BbYFdgX2BV5d4DUFXlvgdQVeX+ANBd5Y4E0F3lzgLQXeWuBtBd5e4B0F3lngXQXeXeA9Bd5b4H0F3l/gAwU+WODwAkcU+FCBDxf4SIGPFvhYgY8X+ESBTxb4VIFPF/hMgc8W+FyBzxf4QoEvFvhSgS8X+EqBrxb4WoGvF/hGgW8W+FaBbxf4ToHvFvhege8X+EGBHxb4UYEfF/hJgZ8W+FmBnxf4RYFfFvhVgV8X+E2B3xb4XYHfF/hDgT8W+FOBPxf4S4G/Fvhbgb8X+Mf/+wzFvwr8u8B/Cvy3wP8KHFngqAJHFzimwLEFDilxnBLHLXG8EscvcYISJyxxohInLnGSEoeWOGmJk5U4eYlTlDhliVOVOHWJ05Q4bYnTlTh9iTOUOGOJM5U4c4mzlDhribOVOHuJc5Q4Z4lzlTh3ifOUOG+J85U4f4kLlLhgiQuVuHCJi5S4aImLlbh4iUuUuGSJS5VIiUuXuEyJy5a4XInLl7hCiSuWuFKJK5e4SomrlrhaiauXuEaJa5a4Volrl7hOieuWuF6J65e4QYkblrhRiRuXuEmJm5a4WYmbl7hFiVuWuFWJW5e4TYnblrhdiduXuEOJO5a4U4k7l7hLibuWuFuJu5e4R4l7lrhXiXuXuE+J+5a4X4n7l3hAiQeWeFCJB5d4SImHlnhYiYeXeESJR5Z4VIlHl3hMiceWeFyJx5d4QoknlnhSiSeXaImnlHhqiaeVeHqJZ5R4ZolnlXh2ieeUeG6Jw0o8r8TzS7ygxAtLvKjEi0u8pMRLS7ysxMtLvKLEK0u8qsRBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2JV5d4TYnXlnhdideXeEOJN5Z4U4k3l3hLibeWeFuJt5d4R4l3lnhXiXeXeE+J95Z4X4n3l/hAiQ+WOLzEESU+VOLDJT5S4qMlPlbi4yU+UeKTJT5V4tMlPlPisyU+V+LzJb5Q4oslvlTiyyW+UuKrJb5W4uslvlHimyW+VeLbJb5T4rslvlfi+yV+UOKHJX5U4sclflLipyV+VuLnJX5R4pclflXi1yV+U+K3JX5X4vcl/lDijyX+VOLPJf5S4q8l/lbi7yX+UeKfJf5V4t8l/lPivyX+V+LIEkeVOLrEMSWOLXFIheNUOG6F41U4foUTVDhhhRNVOHGFk1Q4tMJJK5yswskrnKLCKSucqsKpK5ymwmkrnK7C6SucocIZK5ypwpkrnKXCWSucrcLZK5yjwjkrnKvCuSucp8J5K5yvwvkrXKDCBStcqMKFK1ykwkUrXKzCxStcosIlK1yqQipcusJlKly2wuUqXL7CFSpcscKVKly5wlUqXLXC1SpcvcI1KlyzwrUqXLvCdSpct8L1Kly/wg0q3LDCjSrcuMJNKty0ws0q3LzCLSrcssKtKty6wm0q3LbC7SrcvsIdKtyxwp0q3LnCXSrctcLdKty9wj0q3LPCvSrcu8J9Kty3wv0q3L/CAyo8sMKDKjy4wkMqPLTCwyo8vMIjKjyywqMqPLrCYyo8tsLjKjy+whMqPLHCkyo8uUIrPKXCUys8rcLTKzyjwjMrPKvCsys8p8JzKxxW4XkVnl/hBRVeWOFFFV5c4SUVXlrhZRVeXuEVFV5Z4VUVDioMKgwrjCqMK0wqTCvMKswrLCosK6wqrCtsKmwr7CrsK7y6wmsqvLbC6yq8vsIbKryxwpsqvLnCWyq8tcLbKry9wjsqvLPCuyq8u8J7Kry3wvsqvL/CByp8sMLhFY6o8KEKH67wkQofrfCxCh+v8IkKn6zwqQqfrvCZCp+t8LkKn6/whQpfrPClCl+u8JUKX63wtQpfr/CNCt+s8K0K367wnQrfrfC9Ct+v8IMKP6zwowo/rvCTCj+t8LMKP6/wiwq/rPCrCr+u8JsKv63wuwq/r/CHCn+s8KcKf67wlwp/rfC3Cn+v8I8K/6zwrwr/rvCfCv+t8L8KR1Y4qsLRFY6pcGyFQ2ocp8ZxaxyvxvFrnKDGCWucqMaJa5ykxqE1TlrjZDVOXuMUNU5Z41Q1Tl3jNDVOW+N0NU5f4ww1zljjTDXOXOMsNc5a42w1zl7jHDXOWeNcNc5d4zw1zlvjfDXOX+MCNS5Y40I1LlzjIjUuWuNiNS5e4xI1LlnjUjVS49I1LlPjsjUuV+PyNa5Q44o1rlTjyjWuUuOqNa5W4+o1rlHjmjWuVePaNa5T47o1rlfj+jVuUOOGNW5U48Y1blLjpjVuVuPmNW5R45Y1blXj1jVuU+O2NW5X4/Y17lDjjjXuVOPONe5S46417lbj7jXuUeOeNe5V49417lPjvjXuV+P+NR5Q44E1HlTjwTUeUuOhNR5W4+E1HlHjkTUeVePRNR5T47E1Hlfj8TWeUOOJNZ5U48k1WuMpNZ5a42k1nl7jGTWeWeNZNZ5d4zk1nlvjsBrPq/H8Gi+o8cIaL6rx4hovqfHSGi+r8fIar6jxyhqvqnFQY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/j1TVeU+O1NV5X4/U13lDjjTXeVOPNNd5S46013lbj7TXeUeOdNd5V49013lPjvTXeV+P9NT5Q44M1Dq9xRI0P1fhwjY/U+GiNj9X4eI1P1PhkjU/V+HSNz9T4bI3P1fh8jS/U+GKNL9X4co2v1Phqja/V+HqNb9T4Zo1v1fh2je/U+G6N79X4fo0f1PhhjR/V+HGNn9T4aY2f1fh5jV/U+GWNX9X4dY3f1Phtjd/V+H2NP9T4Y40/1fhzjb/U+GuNv9X4e41/1PhnjX/V+HeN/9T4b43/1TiyxlE1jq5xTI1jaxzS4DgNjtvgeA2O3+AEDU7Y4EQNTtzgJA0ObXDSBidrcPIGp2hwygananDqBqdpcNoGp2tw+gZnaHDGBmdqcOYGZ2lw1gZna3D2BudocM4G52pw7gbnaXDeBudrcP4GF2hwwQYXanDhBhdpcNEGF2tw8QaXaHDJBpdqkAaXbnCZBpdtcLkGl29whQZXbHClBlducJUGV21wtQZXb3CNBtdscK0G125wnQbXbXC9BtdvcIMGN2xwowY3bnCTBjdtcLMGN29wiwa3bHCrBrducJsGt21wuwa3b3CHBndscKcGd25wlwZ3bXC3BndvcI8G92xwrwb3bnCfBvdtcL8G92/wgAYPbPCgBg9u8JAGD23wsAYPb/CIBo9s8KgGj27wmAaPbfC4Bo9v8IQGT2zwpAZPbtAGT2nw1AZPa/D0Bs9o8MwGz2rw7AbPafDcBoc1eF6D5zd4QYMXNnhRgxc3eEmDlzZ4WYOXN3hFg1c2eFWDgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7Bq9u8JoGr23wugavb/CGBm9s8KYGb27wlgZvbfC2Bm9v8I4G72zwrgbvbvCeBu9t8L4G72/wgQYfbHB4gyMafKjBhxt8pMFHG3yswccbfKLBJxt8qsGnG3ymwWcbfK7B5xt8ocEXG3ypwZcbfKXBVxt8rcHXG3yjwTcbfKvBtxt8p8F3G3yvwfcb/KDBDxv8qMGPG/ykwU8b/KzBzxv8osEvG/yqwa8b/KbBbxv8rsHvG/yhwR8b/KnBnxv8pcFfG/ytwd8b/KPBPxv8q8G/G/ynwX8b/K/BkQ2OanB0g2MaHNvgkBbHaXHcFsdrcfwWJ2hxwhYnanHiFidpcWiLk7Y4WYuTtzhFi1O2OFWLU7c4TYvTtjhdi9O3OEOLM7Y4U4sztzhLi7O2OFuLs7c4R4tztjhXi3O3OE+L87Y4X4vzt7hAiwu2uFCLC7e4SIuLtrhYi4u3uESLS7a4VIu0uHSLy7S4bIvLtbh8iyu0uGKLK7W4courtLhqi6u1uHqLa7S4Zotrtbh2i+u0uG6L67W4fosbtLhhixu1uHGLm7S4aYubtbh5i1u0uGWLW7W4dYvbtLhti9u1uH2LO7S4Y4s7tbhzi7u0uGuLu7W4e4t7tLhni3u1uHeL+7S4b4v7tbh/iwe0eGCLB7V4cIuHtHhoi4e1eHiLR7R4ZItHtXh0i8e0eGyLx7V4fIsntHhiiye1eHKLtnhKi6e2eFqLp7d4RotntnhWi2e3eE6L57Y4rMXzWjy/xQtavLDFi1q8uMVLWry0xctavLzFK1q8ssWrWhy0GLQYthi1GLeYtJi2mLWYt1i0WLZYtVi32LTYtti12Ld4dYvXtHhti9e1eH2LN7R4Y4s3tXhzi7e0eGuLt7V4e4t3tHhni3e1eHeL97R4b4v3tXh/iw+0+GCLw1sc0eJDLT7c4iMtPtriYy0+3uITLT7Z4lMtPt3iMy0+2+JzLT7f4gstvtjiSy2+3OIrLb7a4mstvt7iGy2+2eJbLb7d4jstvtviey2+3+IHLX7Y4kctftziJy1+2uJnLX7e4hctftniVy1+3eI3LX7b4nctft/iDy3+2OJPLf7c4i8t/triby3+3uIfLf7Z4l8t/t3iPy3+2+J/LY5scVSLo1sc0+LYFod0OE6H43Y4XofjdzhBhxN2OFGHE3c4SYdDO5y0w8k6nLzDKTqcssOpOpy6w2k6nLbD6TqcvsMZOpyxw5k6nLnDWTqctcPZOpy9wzk6nLPDuTqcu8N5Opy3w/k6nL/DBTpcsMOFOly4w0U6XLTDxTpcvMMlOlyyw6U6pMOlO1ymw2U7XK7D5TtcocMVO1ypw5U7XKXDVTtcrcPVO1yjwzU7XKvDtTtcp8N1O1yvw/U73KDDDTvcqMONO9ykw0073KzDzTvcosMtO9yqw6073KbDbTvcrsPtO9yhwx073KnDnTvcpcNdO9ytw9073KPDPTvcq8O9O9ynw3073K/D/Ts8oMMDOzyow4M7PKTDQzs8rMPDOzyiwyM7PKrDozs8psNjOzyuw+M7PKHDEzs8qcOTO7TDUzo8tcPTOjy9wzM6PLPDszo8u8NzOjy3w2Edntfh+R1e0OGFHV7U4cUdXtLhpR1e1uHlHV7R4ZUdXtXhoMOgw7DDqMO4w6TDtMOsw7zDosOyw6rDusOmw7bDrsO+w6s7vKbDazu8rsPrO7yhwxs7vKnDmzu8pcNbO7ytw9s7vKPDOzu8q8O7O7ynw3s7vK/D+zt8oMMHOxze4YgOH+rw4Q4f6fDRDh/r8PEOn+jwyQ6f6vDpDp/p8NkOn+vw+Q5f6PDFDl/q8OUOX+nw1Q5f6/D1Dt/o8M0O3+rw7Q7f6fDdDt/r8P0OP+jwww4/6vDjDj/p8NMOP+vw8w6/6PDLDr/q8OsOv+nw2w6/6/D7Dn/o8McOf+rw5w5/6fDXDn/r8PcO/+jwzw7/GjbEvzv8p8N/O/yvw5EdjupwdIdjOhzb4ZAex+lx3B7H63H8HifoccIeJ+px4h4n6XFoj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj0v2uFSP9Lh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo8n9Xhyj/Z4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOj+f2OKzH83o8v8cLerywx4t6vLjHS3q8tMfLery8xyt6vLLHq3oc9Bj0GPYY9Rj3mPSY9pj1mPdY9Fj2WPVY99j02PbY9dj3eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9Phgj8N7HNHj/5Fcjk18H4wWTJkmtW27W9u2bdveWqlt4/+zUbdRbdu27TvP3PMNzs7six05wFEDHD3AMQMcO8CHBvjwAB8Z4KMDfGyAjw/wiQE+OcCnBvj0AJ8Z4LMDfG6Azw/whQG+OMCXBvjyAF8Z4KsDfG2Arw/wjQG+OcC3Bvj2AN8Z4LsDfG+A7w/wgwF+OMCPBvjxAD8Z4KcD/GyAnw/wiwF+OcCvBvj1AL8Z4LcD/G6A3w/whwH+OMCfBvjzAH8Z4K8D/G2Avw/wjwH+OcC/Bvj3AP8Z4L8D/G+AQwIcJ8BxAxwvwPEDnCDACQMcGuBEAQ4LcHiAEwc4SYCTBjhZgJMHOEWAUwY4VYBTBzhNgNMGOF2A0wc4Q4AzBjhTgDMHOEuAswY4W4CzBzhHgHMGOFeAcwc4T4DzBjhfgPMHuECACwa4UIALB7hIgIsGuFiAiwe4RIAEuGSASwW4dIDLBLhsgMsFuHyAKwS4YoArBbhygKsEuGqAqwW4eoBrBLhmgGsFuHaA6wS4boDrBbh+gBsEuGGAGwW4cYCbBLhpgJsFuHmAWwS4ZYBbBbh1gNsEuG2A2wW4fYA7BLhjgDsFuHOAuwS4a4C7Bbh7gHsEuGeAewW4d4D7BLhvgPsFuH+ABwR4YIAHBXhwgIcEeGiAhwV4eIBHBHhkgEcFeHSAxwR4bIDHBXh8gCcEeGKABnhSgCcHeEqApwZ4WoCnB3hGgGcGeFaAZwd4ToAjAjw3wPMCPD/ACwK8MMCLArw4wEsCvDTAywK8PMArArwywKsCvDrAawK8NsDrArw+wBsCvDHAmwK8OcBbArw1wNsCvD3AOwIcBBgEGAYYBRgHmASYBpgFmAdYBFgGWAVYB9gE2AbYBdgHeGeAdwV4d4D3BHhvgPcFeH+ADwT4YIAjAxwV4OgAxwQ4NsCHAnw4wEcCfDTAxwJ8PMAnAnwywKcCfDrAZwJ8NsDnAnw+wBcCfDHAlwJ8OcBXAnw1wNcCfD3ANwJ8M8C3Anw7wHcCfDfA9wJ8P8APAvwwwI8C/DjATwL8NMDPAvw8wC8C/DLArwL8OsBvAvw2wO8C/D7AHwL8McCfAvw5wF8C/DXA3wL8PcA/AvwzwL8C/DvAfwL8N8D/gvEcEuI4IY4b4nghjh/iBCFOGOLQECcKcViIw0OcOMRJQpw0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQiTEJUNcKsSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M0xJNCPDnEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQhwR4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+K1IV4X4vUh3hDijSHeFOLNId4S4q0h3hbi7SHeEeIgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7EO0O8K8S7Q7wnxHtDvC/E+0N8IMQHQxwZ4qgQR4c4JsSxIT4U4sMhPhLioyE+FuLjIT4R4pMhPhXi0yE+E+KzIT4X4vMhvhDiiyG+FOLLIb4S4qshvhbi6yG+EeKbIb4V4tshvhPiuyG+F+L7IX4Q4ochfhTixyF+EuKnIX4W4uchfhHilyF+FeLXIX4T4rchfhfi9yH+EOKPIf4U4s8h/hLiryH+FuLvIf4R4p8h/hXi3yH+E+K/If4X4pAIx4lw3AjHi3D8CCeIcMIIh0Y4UYTDIhwe4cQRThLhpBFOFuHkEU4R4ZQRThXh1BFOE+G0EU4X4fQRzhDhjBHOFOHMEc4S4awRzhbh7BHOEeGcEc4V4dwRzhPhvBHOF+H8ES4Q4YIRLhThwhEuEuGiES4W4eIRLhEhES4Z4VIRLh3hMhEuG+FyES4f4QoRrhjhShGuHOEqEa4a4WoRrh7hGhGuGeFaEa4d4ToRrhvhehGuH+EGEW4Y4UYRbhzhJhFuGuFmEW4e4RYRbhnhVhFuHeE2EW4b4XYRbh/hDhHuGOFOEe4c4S4R7hrhbhHuHuEeEe4Z4V4R7h3hPhHuG+F+Ee4f4QERHhjhQREeHOEhER4a4WERHh7hEREeGeFRER4d4TERHhvhcREeH+EJEZ4YoRGeFOHJEZ4S4akRnhbh6RGeEeGZEZ4V4dkRnhPhiAjPjfC8CM+P8IIIL4zwoggvjvCSCC+N8LIIL4/wigivjPCqCK+O8JoIr43wugivj/CGCG+M8KYIb47wlghvjfC2CG+P8I4IBxEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2Ed4Z4V0R3h3hPRHeG+F9Ed4f4QMRPhjhyAhHRTg6wjERjo3woQgfjvCRCB+N8LEIH4/wiQifjPCpCJ+O8JkIn43wuQifj/CFCF+M8KUIX47wlQhfjfC1CF+P8I0I34zwrQjfjvCdCN+N8L0I34/wgwg/jPCjCD+O8JMIP43wswg/j/CLCL+M8KsIv47wmwi/jfC7CL+P8IcIf4zwpwh/jvCXCH+N8LcIf4/wjwj/jPCvCP+O8J8I/43wvwiHxDhOjOPGOF6M48c4QYwTxjg0xoliHBbj8BgnjnGSGCeNcbIYJ49xihinjHGqGKeOcZoYp41xuhinj3GGGGeMcaYYZ45xlhhnjXG2GGePcY4Y54xxrhjnjnGeGOeNcb4Y549xgRgXjHGhGBeOcZEYF41xsRgXj3GJGIlxyRiXinHpGJeJcdkYl4tx+RhXiHHFGFeKceUYV4lx1RhXi3H1GNeIcc0Y14px7RjXiXHdGNeLcf0YN4hxwxg3inHjGDcZd8iQ/3HbLMbNY9wixi1j3CrGrWPcJsZtY9wuxu1j3CHGHWPcKcadY9wlxl1j3C3G3WPcI8Y9Y9wrxr1j3CfGfWPcL8b9YzwgxgNjPCjGg2M8JMZDYzwsxsNjPCLGI2M8KsajYzwmxmNjPC7G42M8IcYTYzTGk2I8OcZTYjw1xtNiPD3GM2I8M8azYjw7xnNiHBHjuTGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTFeFePVMV4T47UxXhfj9THeEOONMd4U480x3hLjrTHeFuPtMd4R4yDGIMYwxijGOMYkxjTGLMY8xiLGMsYqxjrGJsY2xi7GPsY7Y7wrxrtjvCfGe2O8L8b7Y3wgxgdjHBnjqBhHxzgmxrExPhTjwzE+EuOjMT4W4+MxPhHjkzE+FePTMT4T47MxPhfj8zG+EOOLMb4U48sxvhLjqzG+FuPrMb4R45sxvhXj2zG+E+O7Mb4X4/sxfhDjhzF+FOPHMX4S46cxfhbj5zF+EeOXMX4V49cxfhPjtzF+F+P3Mf4Q448x/hTjzzH+EuOvMf4W4+8x/hHjnzH+FePfMf4T478x/hfjkATHSXDcBMdLcPwEJ0hwwgSHJjhRgsMSHJ7gxAlOkuCkCU6W4OQJTpHglAlOleDUCU6T4LQJTpfg9AnOkOCMCc6U4MwJzpLgrAnOluDsCc6R4JwJzpXg3AnOk+C8Cc6X4PwJLpDgggkulODCCS6S4KIJLpbg4gkukSAJLpngUgkuneAyCS6b4HIJLp/gCgmumOBKCa6c4CoJrprgagmunuAaCa6Z4FoJrp3gOgmum+B6Ca6f4AYJbpjgRglunOAmCW6a4GYJbp7gFglumeBWCW6d4DYJbpvgdglun+AOCe6Y4E4J7pzgLgnumuBuCe6e4B4J7pngXgnuneA+Ce6b4H4J7p/gAQkemOBBCR6c4CEJHprgYQkenuARCR6Z4FEJHp3gMQkem+BxCR6f4AkJnpigCZ6U4MkjhntKgqcmeFqCpyd4RoJnJnhWgmcneE6CIxI8N8HzEjw/wQsSvDDBixK8OMFLErw0wcsSvDzBKxK8MsGrErw6wWsSvDbB6xK8PsEbErwxwZsSvDnBWxK8NcHbErw9wTsSHCQYJBgmGCUYJ5gkmCaYJZgnWCRYJlglWCfYJNgm2CXYJ3hngncleHeC9yR4b4L3JXh/gg8k+GCCIxMcleDoBMckODbBhxJ8OMFHEnw0wccSfDzBJxJ8MsGnEnw6wWcSfDbB5xJ8PsEXEnwxwZcSfDnBVxJ8NcHXEnw9wTcSfDPBtxJ8O8F3Enw3wfcSfD/BDxL8MMGPEvw4wU8S/DTBzxL8PMEvEvwywa8S/DrBbxL8NsHvEvw+wR8S/DHBnxL8OcFfEvw1wd8S/D3BPxL8M8G/Evw7wX8S/DfB/xIckuI4KY6b4ngpjp/iBClOmOLQFCdKcViKw1OcOMVJUpw0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNcXZUpw9xTlSnDPFuVKcO8V5Upw3xflSnD/FBVJcMMWFUlw4xUVSXDTFxVJcPMUlUiTFJVNcKsWlU1wmxWVTXC7F5VNcIcUVU1wpxZVTXCXFVVNcLcXVU1wjxTVTXCvFtVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCrFo1M8JsVjUzwuxeNTPCHFE1M0xZNSPDnFU1I8NcXTUjw9xTNSPDPFs1I8O8VzUhyR4rkpnpfi+SlekOKFKV6U4sUpXpLipSleluLlKV6R4pUpXpXi1Slek+K1KV6X4vUp3pDijSnelOLNKd6S4q0p3pbi7SnekeIgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FO1O8K8W7U7wnxXtTvC/F+1N8IMUHUxyZ4qgUR6c4JsWxKT6U4sMpPpLioyk+luLjKT6R4pMpPpXi0yk+k+KzKT6X4vMpvpDiiym+lOLLKb6S4qspvpbi6ym+keKbKb6V4tspvpPiuym+l+L7KX6Q4ocpfpTixyl+kuKnKX6W4ucpfpHilyl+leLXKX6T4rcpfpfi9yn+kOKPKf6U4s8p/pLiryn+luLvKf6R4p8p/pXi3yn+k+K/Kf6X4pAMx8lw3AzHy3D8DCfIcMIMh2Y4UYbDMhye4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDhjBnOlOHMGc6S4awZzpbh7BnOkeGcGc6V4dwZzpPhvBnOl+H8GS6Q4YIZLpThwhkukuGiGS6W4eIZLpEhGS6Z4VIZLp3hMhkum+FyGS6f4QoZrpjhShmunOEqGa6a4WoZrp7hGhmumeFaGa6d4ToZrpvhehmun+EGGW6Y4UYZbpzhJhlumuFmGW6e4RYZbpnhVhluneE2GW6b4XYZbp/hDhnumOFOGe6c4S4Z7prhbhnunuEeGe6Z4V4Z7p3hPtn/AgP3y3D/DA/I8MAMD8rw4AwPyfDQDA/L8PAMj8jwyAyPyvDoDI/J8NgMj8vw+AxPyPDEDM3wpAxPzvCUDE/N8LQMT8/wjAzPzPCsDM/O8JwMR2R4bobnZXh+hhdkeGGGF2V4cYaXZHhphpdleHmGV2R4ZYZXZXh1htdkeG2G12V4fYY3ZHhjhjdleHOGt2R4a4a3ZXh7hndkOMgwyDDMMMowzjDJMM0wyzDPsMiwzLDKsM6wybDNsMuwz/DODO/K8O4M78nw3gzvy/D+DB/I8MEMR2Y4KsPRGY7JcGyGD2X4cIaPZPhoho9l+HiGT2T4ZIZPZfh0hs9k+GyGz2X4fIYvZPhihi9l+HKGr2T4aoavZfh6hm9k+GaGb2X4dobvZPhuhu9l+H6GH2T4YYYfZfhxhp9k+GmGn2X4eYZfZPhlhl9l+HWG32T4bYbfZfh9hj9k+GOGP2X4c4a/ZPhrhr9l+HuGf2T4Z4Z/Zfh3hv9k+G+G/2U4JMdxchw3x/FyHD/HCXKcMMehOU6U47Ach+c4cY6T5DhpjpPlOHmOU+Q4ZY5T5Th1jtPkOG2O0+U4fY4z5DhjjjPlOHOOs+Q4a46z5Th7jnPkOGeOc+U4d47z5DhvjvPlOH+OC+S4YI4L5bhwjovkuGiOi+W4eI5L5EiOS+a4VI5L57hMjsvmuFyOy+e4Qo4r5rhSjivnuEqOq+a4Wo6r57hGjmvmuFaOa+e4To7r5rhejuvnuEGOG+a4UY4b57hJjpvmuFmOm+e4RY5b5rhVjlvnuE2O2+a4XY7b57hDjjvmuFOOO+e4S4675rhbjrvnuEeOe+a4V45757hPjvvmuF+O++d4QI4H5nhQjgfneEiOh+Z4WI6H53hEjkfmeFSOR+d4TI7H5nhcjsfneEKOJ+ZojifleHKOp+R4ao6n5Xh6jmfkeGaOZ+V4do7n5Dgix3NzPC/H83O8IMcLc7wox4tzvCTHS3O8LMfLc7wixytzvCrHq3O8Jsdrc7wux+tzvCHHG3O8Kcebc7wlx1tzvC3H23O8I8dBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn2Od+Z4V45353hPjvfmeF+O9+f4QI4P5jgyx1E5js5xTI5jc3wox4dzfCTHR3N8LMfHc3wixydzfCrHp3N8Jsdnc3wux+dzfCHHF3N8KceXc3wlx1dzfC3H13N8I8c3c3wrx7dzfCfHd3N8L8f3c/wgxw9z/CjHj3P8JMdPc/wsx89z/CLHL3P8Ksevc/wmx29z/C7H73P8Iccfc/wpx59z/CXHX3P8Lcffc/wjxz9z/CvHv3P8J8d/c/wvxyEFjlPguAWOV+D4BU5Q4IQFDi1wogKHFTi8wIkLnKTASQucrMDJC5yiwCkLnKrAqQucpsBpC5yuwOkLnKHAGQucqcCZC5ylwFkLnK3A2Quco8A5C5yrwLkLnKfAeQucr8D5C1ygwAULXKjAhQtcpMBFC1yswMULXKJAClyywKUKXLrAZQpctsDlCly+wBUKXLHAlQpcucBVCly1wNUKXL3ANQpcs8C1Cly7wHUKXLfA9Qpcv8ANCtywwI0K3LjATQrctMDNCty8wC0K3LLArQrcusBtCty2wO0K3L7AHQrcscCdCty5wF0K3LXA3QrcvcA9CtyzwL0K3LvAfQrct8D9Cty/wAMKPLDAgwo8uMBDCjy0wMMKPLzAIwo8ssCjCjy6wGMKPLbA4wo8vsATCjyxQAs8qcCTCzylwFMLPK3A0ws8o8AzCzyrwLMLPKfAEQWeW+B5BZ5f4AUFXljgRQVeXOAlBV5a4GUFXl7gFQVeWeBVBV5d4DUFXlvgdQVeX+ANBd5Y4E0F3lzgLQXeWuBtBd5e4B0FDgoMCgwLjAqMC0wKTAvMCswLLAosC4YOGTLEusCmwLbArsC+wDsLvKvAuwu8p8B7C7yvwPsLfKDABwscWeCoAkcXOKbAsQU+VODDBT5S4KMFPlbg4wU+UeCTBT5V4NMFPlPgswU+V+DzBb5Q4IsFvlTgywW+UuCrBb5W4OsFvlHgmwW+VeDbBb5T4LsFvlfg+wV+UOCHBX5U4McFflLgpwV+VuDnBX5R4JcFflXg1wV+U+C3BX5X4PcF/lDgjwX+VODPBf5S4K8F/lbg7wX+UeCfBf5V4N8F/lPgvwX+V+CQEscpcdwSxytx/BInKHHCEoeWOFGJw0ocXuLEJU5S4qQlTlbi5CVOUeKUJU5V4tQlTlPitCVOV+L0Jc5Q4owlzlTizCXOUuKsJc5W4uwlzlHinCXOVeLcJc5T4rwlzlfi/CUuUOKCJS5U4sIlLlLioiUuVuLiJS5RIiUuWeJSJS5d4jIlLlviciUuX+IKJa5Y4kolrlziKiWuWuJqJa5e4holrlniWiWuXeI6Ja5b4nolrl/iBiVuWOJGJW5c4iYlblriZiVuXuIWJW5Z4lYlbl3iNiVuW+J2JW5f4g4l7ljiTiXuXOIuJe5a4m4l7l7iHiXuWeJeJe5d4j4l7lvifiXuX+IBJR5Y4kElHlziISUeWuJhJR5e4hElHlniUSUeXeIxJR5b4nElHl/iCSWeWKIlnlTiySWeUuKpJZ5W4uklnlHimSWeVeLZJZ5T4ogSzy3xvBLPL/GCEi8s8aISLy7xkhIvLfGyEi8v8YoSryzxqhKvLvGaEq8t8boSry/xhhJvLPGmEm8u8ZYSby3xthJvL/GOEgclBiWGJUYlxiUmJaYlZiXmJRYlliVWJdYlNiW2JXYl9iXeWeJdJd5d4j0l3lvifSXeX+IDJT5Y4sgSR5U4usQxJY4t8aESHy7xkRIfLfGxEh8v8YkSnyzxqRKfLvGZEp8t8bkSny/xhRJfLPGlEl8u8ZUSXy3xtRJfHzbk/1fiWyW+XeI7Jb5b4nslvl/iByV+WOJHJX5c4iclflriZyV+XuIXJX5Z4lclfl3iNyV+W+J3JX5f4g8l/ljiTyX+XOIvJf5a4m8l/l7iHyX+WeJfJf5d4j8l/lvifyUOqXCcCsetcLwKx69wggonrHBohRNVOKzC4RVOXOEkFU5a4WQVTl7hFBVOWeFUFU5d4TQVTlvhdBVOX+EMFc5Y4UwVzlzhLBXOWuFsFc5e4RwVzlnhXBXOXeE8Fc5b4XwVzl/hAhUuWOFCFS5c4SIVLlrhYhUuXuESFVLhkhUuVeHSFS5T4bIVLlfh8hWuUOGKFa5U4coVrlLhqhWuVuHqFa5R4ZoVrlXh2hWuU+G6Fa5X4foVblDhhhVuVOHGFW5S4aYVblbh5hVuUeGWFW5V4dYVblPhthVuV+H2Fe5Q4Y4V7lThzhXuUuGuFe5W4e4V7lHhnhXuVeHeFe5T4b4V7lfh/hUeUOGBFR5U4cEVHlLhoRUeVuHhFR5R4ZEVHlXh0RUeU+GxFR5X4fEVnlDhiRVa4UkVnlzhKRWeWuFpFZ5e4RkVnlnhWRWeXeE5FY6o8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqHBQYVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV/hnRXeVeHdFd5T4b0V3lfh/RU+UOGDFY6scFSFoyscU+HYCh+q8OEKH6nw0Qofq/DxCp+o8MkKn6rw6QqfqfDZCp+r8PkKX6jwxQpfqvDlCl+p8NUKX6vw9QrfqPDNCt+q8O0K36nw3Qrfq/D9Cj+o8MMKP6rw4wo/qfDTCj+r8PMKv6jwywq/qvDrCr+p8NsKv6vw+wp/qPDHCn+q8OcKf6nw1wp/q/D3Cv+o8M8K/6rw7wr/qfDfCv+rcEiN49Q4bo3j1Th+jRPUOGGNQ2ucqMZhNQ6vceIaJ6lx0honq3HyGqeoccoap6px6hqnqXHaGqercfoaZ6hxxhpnqnHmGmepcdYaZ6tx9hrnqHHOGueqce4a56lx3hrnq3H+GheoccEaF6px4RoXqXHRGhercfEal6iRGpescakal65xmRqXrXG5GpevcYUaV6xxpRpXrnGVGletcbUaV69xjRrXrHGtGteucZ0a161xvRrXr3GDGjescaMaN65xkxo3rXGzGjevcYsat6xxqxq3rnGbGretcbsat69xhxp3rHGnGneucZcad61xtxp3r3GPGvesca8a965xnxr3rXG/Gvev8YAaD6zxoBoPrvGQGg+t8bAaD6/xiBqPrPGoGo+u8Zgaj63xuBqPr/GEGk+s0RpPqvHkGk+p8dQaT6vx9BrPqPHMGs+q8ewaz6lxRI3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1nhVjVfXeE2N19Z4XY3X13hDjTfWeFONN9d4S4231nhbjbfXeEeNgxqDGsMaoxrjGpMa0xqzGvMaixrLGqsa6xqbGtsauxr7Gu+s8a4a767xnhrvrfG+Gu+v8YEaH6xxZI2jahxd45gax9b4UI0P1/hIjY/W+FiNj9f4RI1P1vhUjU/X+EyNz9b4XI3P1/hCjS/W+FKNL9f4So2v1vhaja/X+EaNb9b4Vo1v1/hOje/W+F6N79f4QY0f1vhRjR/X+EmNn9b4WY2f1/hFjV/W+FWNX9f4TY3f1vhdjd/X+EONP9b4U40/1/hLjb/W+FuNv9f4R41/1vhXjX/X+E+N/9b4X41DGhynwXEbHK/B8RucoMEJGxza4EQNDmtweIMTNzhJg5M2OFmDkzc4RYNTNjhVg1M3OE2D0zY4XYPTNzhDgzM2OFODMzc4S4OzNjhbg7M3OEeDczY4V4NzNzhPg/M2OF+D8ze4QIMLNrhQgws3uEiDiza4WIOLN7hEgzS4ZINLNbh0g8s0uGyDyzW4fIMrNLhigys1uHKDqzS4aoOrNbh6g2s0uGaDazW4doPrNLhug+s1uH6DGzS4YYMbNbhxg5s0uGmDmzW4eYNbNLhlg1s1uHWD2zS4bYPbNbh9gzs0uGODOzW4c4O7NLhrg7s1uHuDezS4Z4N7Nbh3g/s0uG+D+zW4f4MHNHhggwc1eHCDhzR4aIOHNXh4g0c0eGSDRzV4dIPHNHhsg8c1eHyDJzR4YoM2eFKDJzd4SoOnNnhag6c3eEaDZzZ4VoNnN3hOgyMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxq8usFrGry2wesavL7BGxq8scGbGry5wVsavLXB2xq8vcE7Ghw0GDQYNhg1GDeYNJg2mDWYN1g0WDZYNVg32DTYNtg12Dd4Z4N3NXh3g/c0eG+D9zV4f4MPNPhggyMbHNXg6AbHNDi2wYcafLjBRxp8tMHHGny8wScafLLBpxp8usFnGny2wecafL7BFxp8scGXGny5wVcafLXB1xp8vcE3GnyzwbcafLvBdxp8t8H3Gny/wQ8a/LDBjxr8uMFPGvy0wc8a/LzBLxr8ssGvGvy6wW8a/LbB7xr8vsEfGvyxwZ8a/LnBXxr8tcHfGvy9wT8a/LPBvxr8u8F/Gvy3wf8aHNLiOC2O2+J4LY7f4gQtTtji0BYnanFYi8NbnLjFSVqctMXJWpy8xSlanLLFqVqcusVpWpy2xelanL7FGVqcscWZWpy5xVlanLXF2VqcvcU5WpyzxblanLvFeVqct8X5Wpy/xQVaXLDFhVpcuMVFWly0xcVaXLzFJVqkxSVbXKrFpVtcpsVlW1yuxeVbXKHFFVtcqcWVW1ylxVVbXK3F1Vtco8U1W1yrxbVbXKfFdVtcr8X1W9ygxQ1b3KjFjVvcpMVNW9ysxc1b3KLFLVvcqsWtW9ymxW1b3K7F7VvcocUdW9ypxZ1b3KXFXVvcrcXdW9yjxT1b3KvFvVvcp8V9W9yvxf1bPKDFA1s8qMWDWzykxUNbPKzFw1s8osUjWzyqxaNbPKbFY1s8rsXjWzyhxRNbtMWTWjy5xVNaPLXF01o8vcUzWjyzxbNaPLvFc1oc0eK5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7V4tUtXtPitS1e1+L1Ld7Q4o0t3tTizS3e0uKtLd7W4u0t3tHioMWgxbDFqMW4xaTFtMWsxbzFosWyxarFusWmxbbFrsW+xTtbvKvFu1u8p8V7W7yvxftbfKDFB1sc2eKoFke3OKbFsS0+1OLDLT7S4qMtPtbi4y0+0eKTLT7V/r8vz7T4bIvPtfh8iy+0+GKLL7X4couvtPhqi6+1+HqLb7T4Zotvtfh2i++0+G6L77X4fosftPhhix+1+HGLn7T4aYuftfh5i1+0+GWLX7X4dYvftPhti9+1+H2LP7T4Y4s/tfhzi7+0+GuLv7X4e4t/tPhni3+1+HeL/7T4b4v//e9Ph+N0OG6H43U4focTdDhhh0M7nKjDYR0O73DiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pw5g5n6XDWDmfrcPYO5+hwzg7n6nDuDufpcN4O5+tw/g4X6HDBDhfqcOEOF+lw0Q4X63DxDpfokA6X7HCpDpfucJkOl+1wuQ6X73CFDlfscKUOV+5wlQ5X7XC1DlfvcI0O1+xwrQ7X7nCdDtftcL0O1+9wgw437HCjDjfucJMON+1wsw4373CLDrfscKsOt+5wmw637XC7DrfvcIcOd+xwpw537nCXDnftcLcOd+9wjw737HCvDvfucJ8O9+1wvw737/CADg/s8KAOD+7wkA4P7fCwDg/v8IgOj+zwqA6P7vCYDo/t8LgOj+/whA5P7NAOT+rw5A5P6fDUDk/r8PQOz+jwzA7P6vDsDs/pcESH53Z4Xofnd3hBhxd2eFGHF3d4SYeXdnhZh5d3eEWHV3Z4VYdXd3hNh9d2eF2H13d4Q4c3dnhThzd3eEuHt3Z4W4e3d3hHh4MOgw7DDqMO4w6TDtMOsw7zDosOyw6rDusOmw7bDrsO+w7v7PCuDu/u8J4O7+3wvg7v7/CBDh/scGSHozoc3eGYDsd2+FCHD3f4SIePdvhYh493+ESHT3b4VIdPd/hMh892+FyHz3f4QocvdvhShy93+EqHr3b4Woevd/hGh292+FaHb3f4Tofvdvheh+93+EGHH3b4UYcfd/hJh592+FmHn3f4RYdfdvhVh193+E2H33b4XYffd/hDhz92+FOHP3f4S4e/dvhbh793+EeHf3b4V4d/d/hPh/92+F+HQ3ocp8dxexyvx/F7nKDHCXsc2uNEPQ7rcXiPE/c4SY+T9jhZj5P3OEWPU/Y4VY9T9zhNj9P2OF2P0/c4Q48z9jhTjzP3OEuPs/Y4W4+z9zhHj3P2OFePc/c4T4/z9jhfj/P3uECPC/a4UI8L97hIj4v2uFiPi/e4RI/0uGSPS/W4dI/L9Lhsj8v1uHyPK/S4Yo8r9bhyj6v0uGqPq/W4eo9r9Lhmj2v1uHaP6/S4bo/r9bh+jxv0uGGPG/W4cY+b9Lhpj5v1uHmPW/S4ZY9b9bh1j9v0uG2P2/W4fY879Lhjjzv1uHOPu/S4a4+79bh7j3v0uGePe/W4d4/79Lhvj/v1uH+PB/R4YI8H9Xhwj4f0eGiPh/V4eI9H9Hhkj0f1eHSPx/R4bI/H9Xh8jyf0eGKP9nhSjyf3eEqPp/Z4Wo+n93hGj2f2eFaPZ/d4To8jejy3x/N6PL/HC3q8sMeLery4x0t6vLTHy3q8vMcreryyx6t6vLrHa3q8tsfrery+xxt6vLHHm3q8ucdbery1x9t6vL3HO3oc9Bj0GPYY9Rj3mPSY9pj1mPdY9Fj2WPVY99j02PbY9dj3eGePd/V4d4/39Hhvj/f1eH+PD/T4YI8jexzV4+gex/Q4tuf/WLTnNr4LQIHiW7Vq2bZdJ9u2bds+2bZte7+vjWwbyzZWre0+97n3vIfz38dugP0AnxzgUwN8eoDPDPDZAT43wOcH+MIAXxzgSwN8eYCvDPDVAb42wNcH+MYA3xzgWwN8e4DvDPDdAb43wPcH+MEAPxzgRwP8eICfDHDkAD8d4GcD/HyAXwzwywF+NcCvB/jNAL8d4HcD/H6APwzwxwH+NMCfB/jLAH8d4G8D/H2AfwzwzwH+NcBRA/x7gP8M8N8Bjh7gfwMcM8CxAxwS4NAAxwlw3ADHC3BYgOMHOEGAEwY4PMCJApw4wEkCnDTAyQKcPMApApwywKkCnDrAaQKcNsDpApw+wBkCnDHAmQKcOcBZApw1wNkCnD3AOQKcM8C5Apw7wHkCnDfA+QKcP8AFAlwwwIUCXDjARQJcNMDFAlw8wCUCJMAlA1wqwKUDXCbAZQNcLsDlA1whwBUDXCnAlQNcJcBVA1wtwNUDXCPANQNcK8C1A1wnwHUDXC/A9QPcIMANA9wowI0D3CTATQPcLMDNA9wiwC0D3CrArQPcJsBtA9wuwO0D3CHAHQPcKcCdA9wlwF0D3C3A3QPcI8A9A9wrwL0D3CfAfQPcL8D9AzwgwAMDPCjAgwM8JMBDAzwswMMDPCLAIwM8KsCjAzwmwGMDPC7A4wM8IcATAzTAkwI8OcBTAjw1wNMCPD3AMwI8M8CzAjw7wHMCPDfA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7ArwzwLsCvDvAewK8N8D7Arw/wAcCfDDAhwJ8OMBHAnw0wMcCfDzAJwIcEeAgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AJwN8KsCnA3wmwGcDfC7A5wN8IcAXA3wpwJcDfCXAVwN8LcDXA3wjwDcDfCvAtwN8J8B3A3wvwPcD/CDADwP8KMCPA/wkwJEBfhrgZwF+HuAXAX4Z4FcBfh3gNwF+G+B3AX4f4A8B/hjgTwH+HOAvAf4a4G8B/h7gHwH+GeBfAY4K8O8A/wnw3wBHB/hfgGMCHBvgkBCHhjhOiOOGOF6Iw0IcP8QJQpwwxOEhThTixCFOEuKkIU4W4uQhThHilCFOFeLUIU4T4rQhThfi9CHOEOKMIc4U4swhzhLirCHOFuLsIc4R4pwhzhXi3CHOE+K8Ic4X4vwhLhDigiEuFOLCIS4S4qIhLhbi4iEuESIhLhniUiEuHeIyIS4b4nIhLh/iCiGuGOJKIa4c4iohrhriaiGuHuIaIa4Z4lohrh3iOiGuG+J6Ia4f4gYhbhjiRiFuHOImIW4a4mYhbh7iFiFuGeJWIW4d4jYhbhvidiFuH+IOIe4Y4k4h7hziLiHuGuJuIe4e4h4h7hniXiHuHeI+Ie4b4n4h7h/iASEeGOJBIR4c4iEhHhriYSEeHuIRIR4Z4lEhHh3iMSEeG+JxIR4f4gkhnhiiIZ4U4skhnhLiqSGeFuLpIZ4R4pkhnhXi2SGeE+K5IZ4X4vkhXhDihSFeFOLFIV4S4qUhXhbi5SFeEeKVIV4V4tUhXhPitSFeF+L1Id4Q4o0h3hTizSHeEuKtId4W4u0h3hHinSHeFeLdId4T4r0h3hfi/SE+EOKDIT4U4sMhPhLioyE+FuLjIT4R4ogQByEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2IT4Z4lMhPh3iMyE+G+JzIT4f4gshvhjiSyG+HOIrIb4a4mshvh7iGyG+GeJbIb4d4jshvhvieyG+H+IHIX4Y4kchfhziJyGODPHTED8L8fMQvwjxyxC/CvHrEL8J8dsQvwvx+xB/CPHHEH8K8ecQfwnx1xB/C/H3EP8I8c8Q/wpxVIh/h/hPiP+GODrE/0IcE+LYEIdEODTCcSIcN8LxIhwW4fgRThDhhBEOj3CiCCeOcJIIJ41wsggnj3CKCKeMcKoIp45wmginjXC6CKePcIYIZ4xwpghnjnCWCGeNcLYIZ49wjgjnjHCuCOeOcJ4I541wvgjnj3CBCBeMcKEIF45wkQgXjXCxCBePcIkIiXDJCJeKcOkIl4lw2QiXi3D5CFeIcMUIV4pw5QhXiXDVCFeLcPUI14hwzQjXinDtCNcZ9v9mI8L1I9wgwg0j3CjCjSPcJMJNI9wsws0j3CLCLSPcKsKtI9wmwm0j3C7C7SPcIcIdI9wpwp0j3CXCXSPcLcLdI9wjwj0j3CvCvSPcJ8J9I9wvwv0jPCDCAyM8KMKDIzwkwkMjPCzCwyM8IsIjIzwqwqMjPCbCYyM8LsLjIzwhwhMjNMKTIjw5wlMiPDXC0yI8PcIzIjwzwrMiPDvCcyI8N8LzIjw/wgsivDDCiyK8OMJLIrw0wssivDzCKyK8MsKrIrw6wmsivDbC6yK8PsIbIrwxwpsivDnCWyK8NcLbIrw9wjsivDPCuyK8O8J7Irw3wvsivD/CByJ8MMKHInw4wkcifDTCxyJ8PMInIhwR4SDCIMIwwijCOMIkwjTCLMI8wiLCMsIqwjrCJsI2wi7CPsInI3wqwqcjfCbCZyN8LsLnI3whwhcjfCnClyN8JcJXI3wtwtcjfCPCNyN8K8K3I3wnwncjfC/C9yP8IMIPI/wowo8j/CTCkRF+GuFnEX4e4RcRfhnhVxF+HeE3EX4b4XcRfh/hDxH+GOFPEf4c4S8R/hrhbxH+HuEfEf4Z4V8Rjorw7wj/ifDfCEdH+F+EYyIcG+GQGIfGOE6M48Y4XozDYhw/ZtTY/8vhMU4U48QxThLjpDFOFuPkMU4R45QxThXj1DFOE+O0MU4X4/QxzhDjjDHOFOPMMc4S46wxzhbj7DHOEeOcMc4V49wxzhPjvDHOF+P8MS4Q44IxLhTjwjEuEuOiMS4W4+IxLhEjMS4Z41IxLh3jMjEuG+NyMS4f4woxrhjjSjGuHOMqMa4a42oxrh7jGjGuGeNaMa4d4zoxrhvjejGuH+MGMW4Y40YxbhzjJjFuGuNmMW4e4xYxbhnjVjFuHeM2MW4b43Yxbh/jDjHuGONOMe4c4y4x7hrjbjHuHuMeMe4Z414x7h3jPjHuG+N+Me4f4wExHhjjQTEeHOMhMR4a42ExHh7jETEeGeNRMR4d4zExHhvjcTEeH+MJMZ4YozGeFOPJMZ4S46kxnhbj6TGeEeOZMZ4V49kxnhPjuTGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTFeFePVMV4T47UxXhfj9THeEOONMd4U480x3hLjrTHeFuPtMd4R450x3hXj3THeE+O9Md4X4/0xPhDjgzE+FOPDMT4S46MxPhbj4zE+EeOIGAcxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jE+GeNTMT4d4zMxPhvjczE+H+MLMb4Y40sxvhzjKzG+GuNrMb4e4xsxvhnjWzG+HeM7Mb4b43sxvh/jBzF+GONHMX4c4ycxjozx0xg/i/HzGL+I8csYv4rx6xi/ifHbGL+L8fsYf4jxxxh/ivHnGH+J8dcYf4vx9xj/iPHPGP+KcVSMf8f4T4z/xjg6xv9iHBPj2BiHJDg0wXESHDfB8RIcluD4CU6Q4IQJDk9wogQnTnCSBCdNcLIEJ09wigSnTHCqBKdOcJoEp01wugSnT3CGBGdMcKYEZ05wlgRnTXC2BGdPcI4E50xwrgTnTnCeBOdNcL4E509wgQQXTHChBBdOcJEEF01wsQQXT3CJBElwyQSXSnDpBJdJcNkEl0tw+QRXSHDFBFdKcOUEV0lw1QRXS3D1BNdIcM0E10pw7QTXSXDdBNdLcP0EN0hwwwQ3SnDjBDdJcNMEN0tw8wS3SHDLBLdKcOsEt0lw2wS3S3D7BHdIcMcEd0pw5wR3SXDXBHdLcPcE90hwzwT3SnDvBPdJcN8E90tw/wQPSPDABA9K8OAED0nw0AQPS/DwBI9I8MgEj0rw6ASPSfDYBI9L8PgET0jwxARN8KQET07wlARPTfC0BE9P8IwEz0zwrATPTvCcBM9N8LwEz0/wggQvTPCiBC9O8JIEL03wsgQvT/CKBK9M8KoEr07wmgSvTfC6BK9P8IYEb0zwpgRvTvCWBG9N8LYEb0/wjgTvTPCuBO9O8J4E703wvgTvT/CBBB9M8KEEH07wkQQfTfCxBB9P8IkERyQ4SDBIMEwwSjBOMEkwTTBLME+wSLBMsEqwTrBJsE2wS7BP8MkEn0rw6QSfSfDZBJ9L8PkEX0jwxQRfSvDlBF9J8NUEX0vw9QTfSPDNBN9K8O0E30nw3QTfS/D9BD9I8MMEP0rw4wQ/SXBkgp8m+FmCnyf4RYJfJvhVgl8n+E2C3yb4XYLfJ/hDgj8m+FOCPyf4S4K/Jvhbgr8n+EeCfyb4V4KjEvw7wX8S/DfB0Qn+l+CYBMcmOCTFoSmOk+K4KY6X4rAUx09xghQnTHF4ihOlOHGKk6Q4aYqTpTh5ilOkOGWKU6U4dYrTpDhtitOlOH2KM6Q4Y4ozpThzirOkOGuKs6U4e4pzpDhninOlOHeK86Q4b4rzpTh/igukuGCKC6W4cIqLpLhoiouluHiKS6RIikumuFSKS6e4TIrLprhcisunuEKKK6a4Uoorp7hKiqumuFqKq6e4RoprprhWimunuE6K66a4Xorrp7hBihumuFGKG6e4SYqbprhZipunuEWKW6a4VYpbp7hNitumuF2K26e4Q4o7prhTijunuEuKu6a4W4q7p7hHinumuFeKe6e4T4r7prhfivuneECKB6Z4UIoHp3hIioemeFiKh6d4RIpHpnhUikeneEyKx6Z4XIrHp3hCiiemaIonpXhyiqekeGqKp6V4eopnpHhmimeleHaK56R4bornpXh+ihekeGGKF6V4cYqXpHhpipeleHmKV6R4ZYpXpXh1itekeG2K16V4fYo3pHhjijeleHOKt6R4a4q3pXh7inekeGeKd6V4d4r3pHhviveleH+KD6T4YIoPpfhwio+k+GiKj6X4eIpPpDgixUGKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYpPpvhUik+n+EyKz6b4XIrPp/hCii+m+FKKL6f4Soqvpvhaiq+n+EaKb6b4Vopvp/hOiu+m+F6K76f4QYofpvhRih+n+EmKI1P8NMXPUvw8xS9S/DLFr1L8OsVvUvw2xe9S/D7FH1L8McWfUvw5xV9S/DXF31L8PcU/Uvwzxb9SHJXi3yn+k+K/KY5O8b8Ux6Q4NsUhGQ7NcJwMx81wvAyHZTh+hhNkOGGGwzOcKMOJM5wkw0kznCzDyTOcIsMpM5wqw6kznCbDaTOcLsPpM5whwxkznCnDmTOcJcNZM5wtw9kznCPDOTOcK8O5M5wnw3kznC/D+TNcIMMFM1wow4UzXCTDRTNcLMPFM1wiQzJcMsOlMlw6w2UyXDbD5TJcPsMVMlwxw5UyXDnDVTJcNcPVMlw9wzUyXDPDtTJcO8N1Mlw3w/UyXD/DDTLcMMONMtw4w00y3DTDzTLcPMMtMtwyw60y3DrDbTLcNsPtMtw+wx0y3DHDnTLcOcNdMtw1w90y3D3DPTLcM8O9Mtw7w30y3DfD/TLcP8MDMjwww4MyPDjDQzI8NMPDMjw8wyMyPDLDozI8OsNjMjw2w+MyPD7DEzI8MUMzPCnDkzM8JcNTMzwtw9MzPCPDMzM8K8OzMzwnw3MzPC/D8zO8IMMLM7wow4szvCTDSzO8LMPLM7wiwyszvCrDqzO8JsNrM7wuw+szvCHDGzO8KcObM7wlw1szvC3D2zO8I8M7M7wrw7szvCfDezO8L8P7M3wgwwczfCjDhzN8JMNHM3wsw8czfCLDERkOMgwyDDOMMowzTDJMM8wyzDMsMiwzrDKsM2wybDPsMuwzfDLDpzJ8OsNnMnw2w+cyfD7DFzJ8McOXMnw5w1cyfDXD1zJ8PcM3Mnwzw7cyfDvDdzJ8N8P3Mnw/ww8y/DDDjzL8OMNPMhyZ4acZfpbh5xl+keGXGX6V4dcZfpPhtxl+l+H3Gf6Q4Y8Z/pThzxn+kuGvGf6W4e8Z/pHhnxn+leGoDP/O8J8M/81wdIb/ZTgmw7EZDslxaI7j5DhujuPlOCzH8XOcIMcJcxye40Q5TpzjJDlOmuNkOU6e4xQ5TpnjVDlOneM0OU6b43Q5Tp/jDDnOmONMOc6c4yw5zprjbDnOnuMcOc6Z41w5zp3jPDnOm+N8Oc6f4wI5LpjjQjkunOMiOS6a42I5Lp7jEjmS45I5LpXj0jkuk+OyOS6X4/I5rpDjijmulOPKOa6S46o5rpbj6jmukeOaOa6V49o5rpPjujmul+P6OW6Q44Y5bpTjxjlukuOmOW6W4+Y5bpHjljlulePWOW6T47Y5bpfj9jnukOOOOe6U48457pLjrjnuluPuOe6R45457pXj3jnuk+O+Oe6X4/45HpDjgTkelOPBOR6S46E5Hpbj4TkekeOROR6V49E5HpPjsTkel+PxOZ6Q44k5muNJOZ6c4yk5nprjaTmenuMZOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzk+mONDOT6c4yM5PprjYzk+nuMTOY7IcZBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djP3zIkP994qkcn87xmRyfzfG5HJ/P8YUcX8zxpRxfzvGVHF/N8bUcX8/xjRzfzPGtHN/O8Z0c383xvRzfz/GDHD/M8aMcP87xkxxH5vhpjp/l+HmOX+T4ZY5f5fh1jt/k+G2O3+X4fY4/5Phjjj/l+HOOv+T4a46/5fh7jn/k+GeOf+U4Kse/c/wnx39zHJ3jfzmOyXFsjkMKHFrgOAWOW+B4BQ4rcPwCJyhwwgKHFzhRgRMXOEmBkxY4WYGTFzhFgVMWOFWBUxc4TYHTFjhdgdMXOEOBMxY4U4EzFzhLgbMWOFuBsxc4R4FzFjhXgXMXOE+B8xY4X4HzF7hAgQsWuFCBCxe4SIGLFrhYgYsXuESBFLhkgUsVuHSByxS4bIHLFbh8gSsUuGKBKxW4coGrFLhqgasVuHqBaxS4ZoFrFbh2gesUuG6B6xW4foEbFLhhgRsVuHGBmxS4aYGbFbh5gVsUuGWBWxW4dYHbFLhtgdsVuH2BOxS4Y4E7FbhzgbsUuGuBuxW4e4F7FLhngXsVuHeB+xS4b4H7Fbh/gQcUeGCBBxV4cIGHFHhogYcVeHiBRxR4ZIFHFXh0gccUeGyBxxV4fIEnFHhigRZ4UoEnF3hKgacWeFqBpxd4RoFnFnhWgWcXeE6B5xZ4XoHnF3hBgRcWeFGBFxd4SYGXFnhZgZcXeEWBVxZ4VYFXF3hNgdcWeF2B1xd4Q4E3FnhTgTcXeEuBtxZ4W4G3F3hHgXcWeFeBdxd4T4H3FnhfgfcX+ECBDxb4UIEPF/hIgY8W+FiBjxf4RIEjChwUGBQYFhgVGBeYFJgWmBWYF1gUWBZYFVgX2BTYFtgV2Bf4ZIFPFfh0gc8U+GyBzxX4fIEvFPhigS8V+HKBrxT4aoGvFfh6gW8U+GaBbxX4doHvFPhuge8V+H6BHxT4YYEfFfhxgZ8UOLLATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8L/K3A3wv8o8A/C/yrwFEF/l3gPwX+W+DoAv8rcEyBYwscUuLQEscpcdwSxytxWInjlzhBiROWOLzEiUqcuMRJSpy0xMlKnLzEKUqcssSpSpy6xGlKnLbE6UqcvsQZSpyxxJlKnLnEWUqctcTZSpy9xDlKnLPEuUqcu8R5Spy3xPlKnL/EBUpcsMSFSly4xEVKXLTExUpcvMQlSqTEJUtcqsSlS1ymxGVLXK7E5UtcocQVS1ypxJVLXKXEVUtcrcTVS1yjxDVLXKvEtUtcp8R1S1yvxPVL3KDEDUvcqMSNS9ykxE1L3KzEzUvcosQtS9yqxK1L3KbEbUvcrsTtS9yhxB1L3KnEnUvcpcRdS9ytxN1L3KPEPUvcq8S9S9ynxH1L3K/E/Us8oMQDSzyoxINLPKTEQ0s8rMTDSzyixCNLPKrEo0s8psRjSzyuxONLPKHEE0u0xJNKPLnEU0o8tcTTSjy9xDNKPLPEs0o8u8RzSjy3xPNKPL/EC0q8sMSLSry4xEtKvLTEy0q8vMQrSryyxKtKvLrEa0q8tsTrSry+xBtKvLHEm0q8ucRbSry1xNtKvL3EO0q8s8S7Sry7xHtKvLfE+0q8v8QHSnywxIdKfLjER0p8tMTHSny8xCdKHFHioMSgxLDEqMS4xKTEtMSsxLzEosSyxKrEusSmxLbErsS+xCdLfKrEp0t8psRnS3yuxOdLfKHEF0t8qcSXS3ylxFdLfK3E10t8o8Q3S3yrxLdLfKfEd0t8r8T3S/ygxA9L/KjEj0v8pMSRJX5a4mclfl7iFyV+WeJXJX5d4jclflvidyV+X+IPJf5Y4k8l/lziLyX+WuJvJf5e4h8l/lniXyWOKvHvEv8p8d8SR5f4X4ljShxb4pAKh1Y4ToXjVjhehcMqHL/CCSqcsMLhFU5U4cQVTlLhpBVOVuHkFU5R4ZQVTlXh1BVOU+G0FU5X4fQVzlDhjBXOVOHMFc5S4awVzlbh7BXOUeGcFc5V4dwVzlPhvBXOV+H8FS5Q4YIVLlThwhUuUuGiFS5W4eIVLlEhFS5Z4VIVLl3hMhUuW+FyFS5f4QoVrljhShWuXOEqFa5a4WoVrl7hGhWuWeFaFa5d4ToVrlvhehWuX+EGFW5Y4UYVblzhJhVuWuFmFW5e4RYVblnhVhVuXeE2FW5b4XYVbl/hDhXuWOFOFe5c4S4V7lrhbhXuXuEeFe5Z4V4V7l3hPhXuW+F+Fe5f4QEVHljhQRUeXOEhFR5a4WEVHl7hERUeWeFRFSNHDBniMRUeW+FxFR5f4QkVnlihFZ5U4ckVnlLhqRWeVuHpFZ5R4ZkVnlXh2RWeU+G5FZ5X4fkVXlDhhRVeVOHFFV5S4aUVXlbh5RVeUeGVFV5V4dUVXlPhtRVeV+H1Fd5Q4Y0V3lThzRXeUuGtFd5W4e0V3lHhnRXeVeHdFd5T4b0V3lfh/RU+UOGDFT5U4cMVPlLhoxU+VuHjFT5R4YgKBxUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2FT5Z4VMVPl3hMxU+W+FzFT5f4QsVvljhSxW+XOErFb5a4WsVvl7hGxW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxWOrPDTCj+r8PMKv6jwywq/qvDrCr+p8NsKv6vw+wp/qPDHCn+q8OcKf6nw1wp/q/D3Cv+o8M8K/6pwVIV/V/hPhf9WOLrC/yocU+HYCofUOLTGcWoct8bxahxW4/g1TlDjhDUOr3GiGieucZIaJ61xshonr3GKGqescaoap65xmhqnrXG6GqevcYYaZ6xxphpnrnGWGmetcbYaZ69xjhrnrHGuGueucZ4a561xvhrnr3GBGhescaEaF65xkRoXrXGxGhevcYkaqXHJGpeqcekal6lx2RqXq3H5GleoccUaV6px5RpXqXHVGlercfUa16hxzRrXqnHtGtepcd0a16tx/Ro3qHHDGjeqceMaN6lx0xo3q3HzGreoccsat6px6xq3qXHbGrercfsad6hxxxp3qnHnGnepcdcad6tx9xr3qHHPGveqce8a96lx3xr3q3H/Gg+o8cAaD6rx4BoPqfHQGg+r8fAaj6jxyBqPqvHoGo+p8dgaj6vx+BpPqPHEGq3xpBpPrvGUGk+t8bQaT6/xjBrPrPGsGs+u8Zwaz63xvBrPr/GCGi+s8aIaL67xkhovrfGyGi+v8Yoar6zxqhqvrvGaGq+t8boar6/xhhpvrPGmGm+u8ZYab63xthpvr/GOGu+s8a4a767xnhrvrfG+Gu+v8YEaH6zxoRofrvGRGh+t8bEaH6/xiRpH1DioMagxrDGqMa4xqTGtMasxr7GosayxqrGusamxrbGrsa/xyRqfqvHpGp+p8dkan6vx+RpfqPHFGl+q8eUaX6nx1Rpfq/H1Gt+o8c0a36rx7RrfqfHdGt+r8f0aP6jxwxo/qvHjGj+pcWSNn9b4WY2f1/hFjV/W+FWNX9f4TY3f1vhdjd/X+EONP9b4U40/1/hLjb/W+FuNv9f4R41/1vhXjaNq/LvGf2r8t8bRNf5X45gax9Y4pMGhDY7T4LgNjtfgsAbHb3CCBidscHiDEzU4cYOTNDhpg5M1OHmDUzQ4ZYNTNTh1g9M0OG2D0zU4fYMzNDhjgzM1OHODszQ4a4OzNTh7g3M0OGeDczU4d4PzNDhvg/M1OH+DCzS4YIMLNbhwg4s0uGiDizW4eINLNEiDSza4VINLN7hMg8s2uFyDyze4QoMrNrhSgys3uEqDqza4WoOrN7hGg2s2uFaDaze4ToPrNrheg+s3uEGDGza4UYMbN7hJg5s2uFmDmze4RYNbNrhVg1s3uE2D2za4XYPbN7hDgzs2uFODOze4S4O7Nrhbg7s3uEeDeza4V4N7N7hPg/s2uF+D+zd4QIMHNnhQgwc3eEiDhzZ4WIOHN3hEg0c2eFSDRzd4TIPHNnhcg8c3eEKDJzZogyc1eHKDpzR4aoOnNXh6g2c0eGaDZzV4doPnNHhug+c1eH6DFzR4YYMXNXhxg5c0eGmDlzV4eYNXNHhlg1c1eHWD1zR4bYPXNXh9gzc0eGODNzV4c4O3NHhrg7c1eHuDdzR4Z4N3NXh3g/c0eG+D9zV4f4MPNPhggw81+HCDjzT4aIOPNfh4g080OKLBQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN9g082+FSDTzf4TIPPNvhcg883+EKDLzb4UoMvN/hKg682+FqDrzf4RoNvNvhWg283+E6D7zb4XoPvN/hBgx82+FGDHzf4SYMjG/y0wc8a/LzBLxr8ssGvGvy6wW8a/LbB7xr8vsEfGvyxwZ8a/LnBXxr8tcHfGvy9wT8a/LPBvxoc1eDfDf7T4L8Njm7wvwbHNDi2wSEtDm1xnBbHbXG8Foe1OH6LE7Q4YYvDW5yoxYlbnKTFSVucrMXJW5yixSlbnKrFqVucpsVpW5yuxelbnKHFGVucqcWZW5ylxVlbnK3F2Vuco8U5W5yrxblbnKfFeVucr8X5W1ygxQVbXKjFhVtcpMVFW1ysxcVbXKJFWlyyxaVGD3XpFpdpcdkWl2tx+RZXaHHFFldqceUWV2lx1RZXa3H1Ftdocc0W12px7RbXaXHdFtdrcf0WN2hxwxY3anHjFjdpcdMWN2tx8xa3aHHLFrdqcesWt2lx2xa3a3H7FndocccWd2px5xZ3aXHXFndrcfcW92hxzxb3anHvFvdpcd8W92tx/xYPaPHAFg9q8eAWD2nx0BYPa/HwFo9o8cgWj2rx6BaPafHYFo9r8fgWT2jxxBZt8aQWT27xlBZPbfG0Fk9v8YwWz2zxrBbPbvGcFs9t8bwWz2/xghYvbPGiFi9u8ZIWL23xshYvb/GKFq9s8aoWr27xmhavbfG6Fq9v8YYWb2zxphZvbvGWFm9t8bYWb2/xjhbvbPGuFu9u8Z4W723xvhbvb/GBFh9s8aEWH27xkRYfbfGxFh9v8YkWR7Q4aDFoMWwxajFuMWkxbTFrMW+xaLFssWqxbrFpsW2xa7Fv8ckWn2rx6RafafHZFp9r8fkWX2jxxRZfavHlFl9p8dUWX2vx9RbfaPHNFt9q8e0W32nx3Rbfa/H9Fj9o8cMWP2rx4xY/aXFki5+2+FmLn7f4RYtftvhVi1+3+E2L37b4XYvft/hDiz+2+FOLP7f4S4u/tvhbi7+3+EeLf7b4V4ujWvy7xX9a/LfF0S3+1+KYFse2OKTDoR2O0+G4HY7X4bAOx+9wgg4n7HB4hxN1OHGHk3Q4aYeTdTh5h1N0OGWHU3U4dYfTdDhth9N1OH2HM3Q4Y4czdThzh7N0OGuHs3U4e4dzdDhnh3N1OHeH83Q4b4fzdTh/hwt0uGCHC3W4cIeLdLhoh4t1uHiHS3RIh0t2uFSHS3e4TIfLdrhch8t3uEKHK3a4Uocrd7hKh6t2uFqHq3e4RodrdrhWh2t3uE6H63a4Xofrd7hBhxt2uFGHG3e4SYebdrhZh5t3uEWHW3a4VYdbd7hNh9t2uF2H23e4Q4c7drhThzt3uEuHu3a4W4e7d7hHh3t2uFeHe3e4T4f7drhfh/t3eECHB3Z4UIcHd3hIh4d2eFiHh3d4RIdHdnhUh0d3eEyHx3Z4XIfHd3hChyd2aIcndXhyh6d0eGqHp3V4eodndHhmh2d1eHaH53R4bofndXh+hxd0eGGHF3V4cYeXdHhph5d1eHmHV3R4ZYdXdXh1h9d0eG2H13V4fYc3dHhjhzd1eHOHt3R4a4e3dXh7h3d0eGeHd3V4d4f3dHhvh/d1eH+HD3T4YIcPdfhwh490+GiHj3X4eIdPdDiiw0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12HfYdPdvhUh093+EyHz3b4XIfPd/hChy92+FKHL3f4Soevdvhah693+EaHb3b4Vodvd/hOh+92+F6H73f4QYcfdvhRhx93+EmHIzv8tMPPOvy8wy86/LLDrzr8usNvOvy2w+86/L7DHzr8scOfOvy5w186/LXD3zr8vcM/Ovyzw786HNXh3x3+0+G/HY7u8L8Ox3Q4tsMhPQ7tcZwex+1xvB6H9Th+jxP0OGGPw3ucqMeJe5ykx0l7nKzHyXucoscpe5yqx6l7nKbHaXucrsfpe5yhxxl7nKnHmXucpcdZe5ytx9l7nKPHOXucq8e5e5ynx3l7nK/H+XtcoMcFe1yox4V7XKTHRXtcrMfFe1yiR3pcsselely6x2V6XLbH5XpcvscVelyxx5V6XLnHVXpctcfVely9xzV6XLPHtXpcu8d1ely3x/V6XL/HDXrcsMeNety4x0163LTHzXrcvMctetyyx6163LrHbXrctsftety+xx163LHHnXrcucddety1x9163L3HPXrcs8e9ety7x3163LfH/Xrcv8cDejywx4N6PLjHQ3o8tMfDejy8xyN6PLLHo3o8usdjejy2x+N6PL7HE3o8sUd7PKnHk3s8pcdTezytx9N7PKPHM3s8q8ezezynx3N7PK/H83u8oMcLe7yox4t7vKTHS3u8rMfLe7yixyt7vKrHq3u8psdre7yux+t7vKHHG3u8qcebe7ylx1t7vK3H23u8o8c7e7yrx7t7vKfHe3u8r8f7e3ygxwd7fKjHh3t8pMdHe3ysx8d7fKLHET0OevyfAAAA///fjNvY") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000180)=ANY=[@ANYRES16], 0xfe, 0x4b1, &(0x7f00000021c0)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) r1 = syz_usb_connect(0x6, 0x24, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x24, &(0x7f00000000c0)={0x0, 0x13, 0x6, "fc19d02303f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xee8f}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000400)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xfa, 0x0, @val=0x80}}}}}}}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_usb_control_io(r1, &(0x7f00000008c0)={0x2c, &(0x7f0000000200)={0x0, 0x8, 0x31, {0x31, 0x23, "a8624dcbc227e9f2cc59ddc1e6b92ad2d0ade9c3c33588c9f76ea5c3f13daa262f7d9bee60eb457aa4c30922c81cec"}}, &(0x7f0000000680)={0x0, 0x3, 0x9e, @string={0x9e, 0x3, "1f75864e8b6ed12c607b115bae6fb7ac6145ab7f9fdf5ffc5e471773472569c846a1e57eed6de3a523570282ec993d9d04e3cc92fed3e270cb596eebe8c6bb971dabab3eb4a8f1398fe7a78e06be967267df37b1d29402d59f0cbac047f1a9ee2dbbc8ab9d54e2b9816cb79bea68411f7f8f899af1797a40bbc1ee86a9ff5feb82b3754204eeb2c7f7320b9c2516de22a3ec5367ec5d585f25a1132d"}}, &(0x7f0000000740)={0x0, 0xf, 0xc4, {0x5, 0xf, 0xc4, 0x3, [@generic={0xa0, 0x10, 0x2, "0d59d8f67bc2db4d1f7e615d19f970c7a1f96a209721217ff63555567bc3376d1cd984440fc0f745010c2ace1256ed4e4140f9137f1101cd633c4681ee372b3e20d86ae634b87abc5149f7e15a0d60573951d6d38238a71b3a7979bbcf0ac4bef1096dacc743e739d5d0f928588a22797df16856bc7554e7b72d6768923f06761d92e8b2aa66ef75d7b2f80fa461b323a49a59e81e693f18c6feb787d4"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x6, 0xfa, 0xffff, 0x60}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "e310d803826a2f248431190a1baffff8"}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0xe, 0x5, "de3ec889", "1ad86aa7"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x4, 0xd, 0x0, 0x6, 0xfffa}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000900)={0x0, 0x14, 0xca, "329b673bc1324672a64fe16cc767a123ea15db677e5745b84fed8dc5c6e76b5340da9216ed9feff824a2c13f5e3987c852ef9031765e4a99a3286f125e85737c6651a6a7f77685ab4c181827c2804586393d64d7a2b27a54515a5e99e438034b13847b13d8389ae781d99bd058e795d7040e4ee6da0727eafd01790016b12b6c5033d09e47ee06d38f3c555c47277d151bbd918f80f99861886c204b8c0cdd7acafad4c0d41262e88f7487078b893330060456c9612136fdd7aeaed2db126f18acd75ca8296edcf21791"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xaf}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000002180)=ANY=[@ANYBLOB="20e3c412e2eb0008000000080020000ff00000"], &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x5ec}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0xfb}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "9017"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2}, &(0x7f0000000c00)={0x40, 0x13, 0x6, @random}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "a4a8"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x5}}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0xffffffffffffffff) write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[], 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x3a08811, &(0x7f00000004c0)={[{@compress_algo={'compress', 0x3d, 'lzo'}}, {@nodatasum}, {@nossd}, {@clear_cache}, {@discard_async}, {@rescue={'rescue', 0x3d, 'imetacsums'}}, {@compress_force_algo={'compress-force', 0x3d, 'no'}}, {@nossd}, {@compress_force}, {@subvol={'subvol', 0x3d, '{\xed}\xbf|\xc6\xcd\x9a\x1f\f4d\\\x89ln\xa6E\xd8\x17\xacq\xb3\xb8E\xac\x91Wk\x86u6)rgKd\x0f\xbc\xe1O\xaf\xdeV\xfd[t\xfb9}\x8b\x1b\x15)\xf8\xdc\xa4\xa3\xa3\"\xe2Q\x13\xe0\xb6 }\x86\x00\xb3\x90t\xa2|U\xda\x1f\xbc@\xb40s\xfe\xee\xa6\xeb\xe1&2\x99\x02\r\x9aG@\xcf\x9c\xdaZ=\xd4\xe1\x95U#\xf5?\xa4\xa3*\x15n\xee\x1c\x8e\xbb\xb0lCE\x06\xdb\x11\xbc\x18\xa9w\xa7\x90LB\xf6\x1f\xe4o\xd6\xe6\xdaSc\xdc8&\xa3>v5T\xcfz1a\fxQ\xf1\xd3\xc4\x86njv?\xc8\f\x19\xe6F^D\x86u\x91\x89\xce\x1ait-\x00\x98\xd5\x98\x86+\xd0f8\r\xf3U\xad\xc0\x8d\'n\n\x87X8-I\x91\x98\xb9\xa5L\xa66\x96\xb9\t\xc0#?qv\xe0\xca\xa4\x10\t\x01\xb6-\x8a]\xc3]\x93\xf6\xea\xaf\x04\xc6\"'}}, {@nossd}]}, 0xfb, 0x5187, &(0x7f0000005140)="$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") sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c085}, 0x24000080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000cc0)='notify_on_release\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRESOCT=r6], 0x31) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0305000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa000008000300010000000800010010"], 0x50}}, 0x0) 5.66516456s ago: executing program 4 (id=270): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0x0, 0x34324142, 0x500, 0x2d0, 0x3, @stepwise={{0x9, 0x80000000}, {0x10001, 0x101}, {0x4, 0x805}}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000000780)=""/102400, 0x19000) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400d00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000200)) r4 = epoll_create1(0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a00"/75], 0xa0}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000c40)) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x18) setns(0xffffffffffffffff, 0x10000000) socket$netlink(0x10, 0x3, 0xc) 5.51731677s ago: executing program 2 (id=271): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c12, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x2) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfffffffffffffffa}]}}]}, 0x40}}, 0xc840) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 4.528444771s ago: executing program 4 (id=272): socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000004380)=""/4124, 0xcde) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) r4 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, 0x0, 0x0) 4.471132895s ago: executing program 1 (id=273): syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (fail_nth: 5) 3.781200664s ago: executing program 2 (id=274): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800010026bd7000000000000200000000000009000000000600150005000000280016802400090000000000000000000000040000000000fe8000000000000000000000000000bb"], 0x4c}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x105000, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) (async) r3 = accept$alg(r0, 0x0, 0x0) (async) set_mempolicy(0x1, 0x0, 0x100) syz_clone(0x65225400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40040) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.77591212s ago: executing program 5 (id=275): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000600)="776b0addcfbe1fbb66eceb7a83bf94a93426e2a3caa7b9675c86faf86707d054abbebc8a5d59dd834c54520f68e5d8606712057af9b64f834473342a628056f5745fd1ecc98513c00dd25f2e8e4c92e6b3c219e060e780b158c37f98e5324eb58800a2d16cc4f084ec144e92dc7e41e6bbad570ca77ab8ffffffffffffffff0fb3b641cdf655f3e25a3b6fb022913d8a00000000e19e40c1bb7b8dac9a4de7dc29946367ff0be7903aec976fbc49070e", 0xb0}], 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}]}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="853dce82fa84122801b2c7a210603244fe4ec5e6274ad8d5e96d9417f7c5661cd2e1d04e714f7f139e6cc04673e2acb6850022a85599d5deede4615fcb9f0c9bfa10bf5429"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810) close(r1) socket(0x27, 0x80805, 0x0) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) ptrace$ARCH_GET_FS(0x1e, r0, 0x0, 0x1003) creat(&(0x7f0000000040)='./bus\x00', 0x5) unshare(0x22020600) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000380)={0x0}) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bb0000019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000017f00000100186371ae9b1c0300"/70], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x2d, 0x0, @void}, 0x10) 3.66229902s ago: executing program 1 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x62040, 0x20) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) dup2(r5, r5) close_range(r5, 0xffffffffffffffff, 0x2) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="530003"], 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000088ab00000000000003000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x80000001, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x25, r0}, 0x94) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[], [{@obj_type}]}) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x29f) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='acl', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000000200)=""/50, 0x32}], 0x1, 0x1, 0x51fb) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) 3.057476658s ago: executing program 2 (id=277): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x3f, 0x590043, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x35) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1.240126932s ago: executing program 2 (id=278): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x6}}]}, 0x38}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0x8000000000000001, 0x40) write$UHID_INPUT(r1, &(0x7f0000000100)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001140)={'ip6gretap0\x00', {0x2, 0x4e23, @broadcast}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r4, 0x1, 0x1, 0x25dfdc01, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001240)={{{@in6=@private2, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000001340)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001380)={{{@in6=@local, @in=@rand_addr=0x64010102, 0x4e22, 0x3, 0x4e22, 0x0, 0x2, 0xb0, 0x20, 0x3b, r5, r6}, {0x1, 0x1, 0x4, 0x4, 0x2, 0x1, 0xc, 0x69}, {0xf1, 0x8, 0x3, 0x2}, 0x6, 0x6e6bb4, 0x7, 0x0, 0x1}, {{@in6=@remote, 0x4d2, 0x33}, 0x2, @in6=@mcast1, 0x3503, 0x0, 0x1, 0x1, 0xfffffffb, 0x6, 0x7}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8030002d80"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 210.694291ms ago: executing program 0 (id=279): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r3, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) syz_emit_ethernet(0x11dc0, &(0x7f00000030c0)=ANY=[], 0x0) 158.963639ms ago: executing program 1 (id=280): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}}, 0x24040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 53.636878ms ago: executing program 5 (id=281): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180201000e000001000000000000000807010000080700ffe500fcff0000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xfa, &(0x7f00000001c0)=""/250}, 0x94) 0s ago: executing program 4 (id=282): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x6000000, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x90, [0x0, 0x20000080, 0x200000b0, 0x200000e0], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) kernel console output (not intermixed with test programs): Product=6030, bcdDevice= 0.00 [ 94.826603][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.831967][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.851824][ T5998] loop4: detected capacity change from 0 to 256 [ 94.876205][ T30] usb 1-1: config 0 descriptor?? [ 94.923344][ T5998] ======================================================= [ 94.923344][ T5998] WARNING: The mand mount option has been deprecated and [ 94.923344][ T5998] and is ignored by this kernel. Remove the mand [ 94.923344][ T5998] option from the mount to silence this warning. [ 94.923344][ T5998] ======================================================= [ 95.363346][ T5998] FAT-fs (loop4): Directory bread(block 64) failed [ 95.419905][ T5998] FAT-fs (loop4): Directory bread(block 65) failed [ 95.507694][ T30] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 95.515225][ T5998] FAT-fs (loop4): Directory bread(block 66) failed [ 95.515257][ T5998] FAT-fs (loop4): Directory bread(block 67) failed [ 95.515345][ T5998] FAT-fs (loop4): Directory bread(block 68) failed [ 95.515372][ T5998] FAT-fs (loop4): Directory bread(block 69) failed [ 95.515457][ T5998] FAT-fs (loop4): Directory bread(block 70) failed [ 95.515484][ T5998] FAT-fs (loop4): Directory bread(block 71) failed [ 95.515567][ T5998] FAT-fs (loop4): Directory bread(block 72) failed [ 95.515594][ T5998] FAT-fs (loop4): Directory bread(block 73) failed [ 95.623969][ T6004] overlayfs: missing 'lowerdir' [ 95.764269][ T5644] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.055136][ T30] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 96.133881][ T30] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 96.156787][ T30] ft260 0003:0403:6030.0001: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 96.168974][ T5782] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 96.201999][ T5857] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.217867][ T5782] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 96.237218][ T5782] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 96.250035][ T5782] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 96.257501][ T5782] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 96.267965][ T5782] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 96.276222][ T5782] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 96.286671][ T5782] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 96.326703][ T5782] hid-generic 0103:0004:0000.0002: hidraw0: HID v0.05 Device [syz0] on syz1 [ 96.359769][ T5857] usb 2-1: Using ep0 maxpacket: 32 [ 96.366562][ T30] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 96.377395][ T5857] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 96.427047][ T5857] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 96.477140][ T5857] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.537058][ T5857] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 96.635055][ T5857] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 96.688484][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.731691][ T5857] usb 2-1: Product: syz [ 96.743190][ T6000] loop3: detected capacity change from 0 to 32768 [ 96.754761][ T1594] usb 1-1: USB disconnect, device number 2 [ 96.768281][ T5857] usb 2-1: Manufacturer: syz [ 96.796857][ T5857] usb 2-1: SerialNumber: syz [ 96.812424][ T6016] fido_id[6016]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.887513][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 96.919801][ T6000] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 96.948049][ T5857] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input5 [ 96.984017][ T6000] JBD2: Ignoring recovery information on journal [ 97.099804][ T5857] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 97.126402][ T5857] (id 0x00) [ 97.134054][ T6000] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 97.146810][ T6027] loop2: detected capacity change from 0 to 128 [ 97.182493][ T6027] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 97.235361][ T6027] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 97.290182][ T6027] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 97.350692][ T5857] rc_core: IR keymap rc-imon-pad not found [ 97.371839][ T6027] UDF-fs: Scanning with blocksize 512 failed [ 97.386622][ T5857] Registered IR keymap rc-empty [ 97.404142][ T5857] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 97.417954][ T6027] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 97.438062][ T5857] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 97.462802][ T6027] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 97.488021][ T6027] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 97.529341][ T6027] UDF-fs: Scanning with blocksize 1024 failed [ 97.557369][ T5857] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 97.567449][ T6000] syz.3.30 (6000) used greatest stack depth: 18944 bytes left [ 97.596443][ T6027] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 97.635751][ T5857] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input6 [ 97.668398][ T6027] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 97.732759][ T6027] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 97.741921][ T5857] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:2> initialized [ 97.757548][ T5631] ocfs2: Unmounting device (7,3) on (node local) [ 97.769284][ T6027] UDF-fs: Scanning with blocksize 2048 failed [ 97.802185][ T5857] usb 2-1: USB disconnect, device number 2 [ 97.808145][ T6027] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 98.273221][ T5781] net_ratelimit: 4 callbacks suppressed [ 98.273240][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.300606][ T6027] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 98.346047][ T6027] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 98.353797][ T6027] UDF-fs: Scanning with blocksize 4096 failed [ 98.359946][ T6027] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 98.532917][ T6027] netlink: 68 bytes leftover after parsing attributes in process `syz.2.32'. [ 98.581289][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.739939][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.755377][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.859365][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.895185][ T6034] loop0: detected capacity change from 0 to 32768 [ 98.906287][ T5781] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 98.979028][ T6034] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 99.024890][ T6034] XFS (loop0): Ending clean mount [ 99.039393][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 99.050930][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 253 [ 99.090093][ T5857] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.099681][ T5781] usb 6-1: Using ep0 maxpacket: 16 [ 99.104926][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 99.119741][ T30] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 99.123883][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.137492][ T9] usb 5-1: Product: syz [ 99.143057][ T5781] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 253 [ 99.154946][ T9] usb 5-1: Manufacturer: syz [ 99.179754][ T5781] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 99.189588][ T5781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.197608][ T9] usb 5-1: SerialNumber: syz [ 99.205438][ T5781] usb 6-1: Product: syz [ 99.211780][ T9] usb 5-1: config 0 descriptor?? [ 99.216907][ T5781] usb 6-1: Manufacturer: syz [ 99.222256][ T6041] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 99.228328][ T5647] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 99.229684][ T5781] usb 6-1: SerialNumber: syz [ 99.259692][ T5857] usb 2-1: Using ep0 maxpacket: 8 [ 99.271949][ T5857] usb 2-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 99.272483][ T5781] usb 6-1: config 0 descriptor?? [ 99.283708][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.296314][ T30] usb 3-1: unable to get BOS descriptor or descriptor too short [ 99.310350][ T30] usb 3-1: not running at top speed; connect to a high speed hub [ 99.317015][ T9] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 99.318403][ T5857] usb 2-1: Product: syz [ 99.327483][ T6044] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 99.334242][ T5857] usb 2-1: Manufacturer: syz [ 99.345217][ T30] usb 3-1: config 9 has too many interfaces: 138, using maximum allowed: 32 [ 99.355353][ T30] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 99.371009][ T5857] usb 2-1: SerialNumber: syz [ 99.375782][ T30] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 138 [ 99.421066][ T30] usb 3-1: config 9 has no interface number 0 [ 99.431402][ T30] usb 3-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 99.432539][ T5781] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 99.440679][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.440707][ T30] usb 3-1: Product: syz [ 99.440725][ T30] usb 3-1: Manufacturer: syz [ 99.440743][ T30] usb 3-1: SerialNumber: syz [ 99.561517][ T6041] loop4: detected capacity change from 0 to 1764 [ 99.614607][ T6050] loop1: detected capacity change from 0 to 128 [ 99.623542][ T1594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.680618][ T6041] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 99.691573][ T6050] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.700602][ T6041] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 99.726305][ T6050] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.756085][ T30] cdc_phonet 3-1:9.102: skipping garbage [ 99.767774][ T5857] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 99.780703][ T30] cdc_phonet 3-1:9.102: probe with driver cdc_phonet failed with error -22 [ 99.792238][ T6064] loop5: detected capacity change from 0 to 1764 [ 99.808877][ T30] usb 3-1: USB disconnect, device number 2 [ 99.871264][ T6068] fuse: Unknown parameter '0x0000000000000005' [ 99.918595][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 99.924734][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 99.932040][ T9] usb 5-1: USB disconnect, device number 2 [ 99.941959][ T9] mcba_usb 5-1:0.0 can0: device disconnected [ 100.113570][ T6044] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 100.174701][ T6064] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 100.321603][ C0] mcba_usb 6-1:0.0 can1: Tx URB aborted (-71) [ 100.327776][ C0] mcba_usb 6-1:0.0 can1: Tx URB aborted (-71) [ 100.335534][ T5795] usb 6-1: USB disconnect, device number 2 [ 100.370670][ T5795] mcba_usb 6-1:0.0 can1: device disconnected [ 101.234921][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.300664][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.546623][ T6071] Process accounting resumed [ 101.573193][ T6083] loop2: detected capacity change from 0 to 164 [ 101.670412][ T6093] fuse: Bad value for 'fd' [ 101.686734][ T6083] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 101.705113][ T6092] XFS (nullb0): Invalid superblock magic number [ 101.782243][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.819145][ T6085] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 101.834568][ T6104] netlink: 332 bytes leftover after parsing attributes in process `syz.4.51'. [ 101.867318][ T5857] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 101.875775][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'. [ 101.954849][ T5630] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.978762][ T6104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.51'. [ 102.264987][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.332047][ T5857] usb 2-1: USB disconnect, device number 3 [ 102.579734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.727144][ T6024] udevd[6024]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.813317][ T6124] loop2: detected capacity change from 0 to 512 [ 102.855763][ T6124] EXT4-fs: Ignoring removed i_version option [ 102.904301][ T6124] EXT4-fs: Ignoring removed oldalloc option [ 103.031840][ T6124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.206285][ T6124] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 1702065510 > max in inode 13 [ 103.291242][ T6137] loop4: detected capacity change from 0 to 1024 [ 103.304061][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.467206][ T6144] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 103.484217][ T6140] loop0: detected capacity change from 0 to 4096 [ 103.514310][ T5761] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.535635][ T6140] NILFS (loop0): invalid segment: Checksum error in segment payload [ 103.579647][ T6140] NILFS (loop0): trying rollback from an earlier position [ 103.647806][ T6140] NILFS (loop0): recovery complete [ 103.670414][ T5761] usb 3-1: device descriptor read/64, error -71 [ 103.685452][ T6148] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.730410][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 103.755370][ T5760] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.848735][ T6149] /dev/loop0: Can't open blockdev [ 103.967131][ T6149] comedi comedi4: comedi_config --init_data is deprecated [ 104.203094][ T5761] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.356020][ T5760] usb 5-1: unable to get BOS descriptor or descriptor too short [ 104.403992][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.436770][ T5760] usb 5-1: config 3 has an invalid interface number: 6 but max is 0 [ 104.456823][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.475038][ T5760] usb 5-1: config 3 has no interface number 0 [ 104.484055][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.497430][ T5760] usb 5-1: config 3 interface 6 has no altsetting 0 [ 104.520746][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.559680][ T5760] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice= b.6d [ 104.569544][ T5761] usb 3-1: device descriptor read/64, error -71 [ 104.591787][ T9] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 104.609074][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.637516][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.652869][ T5760] usb 5-1: Product: syz [ 104.675993][ T5760] usb 5-1: Manufacturer: syz [ 104.698915][ T5760] usb 5-1: SerialNumber: syz [ 104.717443][ T9] usb 2-1: config 0 descriptor?? [ 104.726359][ T5761] usb usb3-port1: attempt power cycle [ 104.820259][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.965438][ T6133] loop3: detected capacity change from 0 to 32768 [ 104.998504][ T6133] btrfs: Deprecated parameter 'usebackuproot' [ 105.030309][ T6133] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 105.073669][ T6133] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.58 (6133) [ 105.119351][ T5761] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.193212][ T5761] usb 3-1: device descriptor read/8, error -71 [ 105.224796][ T9] hid_parser_main: 16 callbacks suppressed [ 105.224816][ T9] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 105.270990][ T6133] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.272224][ T9] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 105.292311][ T6164] loop0: detected capacity change from 0 to 128 [ 105.321046][ T6133] BTRFS info (device loop3): using crc32c checksum algorithm [ 105.342799][ T9] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 105.382597][ T9] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 105.426854][ T9] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 105.446655][ T1033] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 105.463970][ T9] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 105.501857][ T5761] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 105.526494][ T9] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 105.550387][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.560858][ T5761] usb 3-1: device descriptor read/8, error -71 [ 105.572492][ T9] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 105.581148][ T6133] BTRFS error (device loop3): failed to load root extent [ 105.593307][ T6133] BTRFS warning (device loop3): try to load backup roots slot 1 [ 105.616780][ T1159] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 105.641787][ T9] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 105.678627][ T9] hid-multitouch 0003:0457:07DA.0003: unknown main item tag 0x0 [ 105.697794][ T6133] BTRFS warning (device loop3): couldn't read tree root [ 105.724460][ T6133] BTRFS warning (device loop3): try to load backup roots slot 2 [ 105.749641][ T5761] usb usb3-port1: unable to enumerate USB device [ 105.776635][ T59] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 105.801551][ T9] hid-multitouch 0003:0457:07DA.0003: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 105.834371][ T6133] BTRFS warning (device loop3): couldn't read tree root [ 105.860707][ T6133] BTRFS warning (device loop3): try to load backup roots slot 3 [ 105.905455][ T5644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.908686][ T9] usb 2-1: USB disconnect, device number 4 [ 105.958487][ T6133] BTRFS info (device loop3): rebuilding free space tree [ 105.959519][ T6185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.975620][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.998619][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.009301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.107600][ T6185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.133535][ T6184] fido_id[6184]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 106.157707][ T6185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.168925][ T6133] BTRFS info (device loop3): checking UUID tree [ 106.183275][ T6133] BTRFS error (device loop3): failed to check the UUID tree: -4 [ 106.245461][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 106.245480][ T31] audit: type=1326 audit(1780749776.603:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.1.68" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42039ce59 code=0x7ffc0000 [ 106.309704][ T31] audit: type=1326 audit(1780749776.603:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.1.68" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42039ce59 code=0x7ffc0000 [ 106.372337][ T6133] BTRFS error (device loop3): open_ctree failed: -4 [ 106.457070][ T31] audit: type=1326 audit(1780749776.803:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.1.68" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff42039ce59 code=0x7ffc0000 [ 106.569299][ T31] audit: type=1326 audit(1780749776.803:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.1.68" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42039ce59 code=0x7ffc0000 [ 106.618914][ T6155] loop5: detected capacity change from 0 to 32768 [ 106.637846][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 106.652859][ T31] audit: type=1326 audit(1780749776.803:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.1.68" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42039ce59 code=0x7ffc0000 [ 106.671332][ T5760] usb_ehset_test 5-1:3.6: probe with driver usb_ehset_test failed with error -32 [ 106.749338][ T6155] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 106.765445][ T6205] netlink: 'syz.0.69': attribute type 1 has an invalid length. [ 106.776192][ T5760] usb 5-1: USB disconnect, device number 3 [ 106.800453][ T31] audit: type=1326 audit(1780749776.803:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.1.68" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff42039ce59 code=0x7ffc0000 [ 106.848894][ T31] audit: type=1326 audit(1780749776.813:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.1.68" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42039ce59 code=0x7ffc0000 [ 106.905722][ T9] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 106.925743][ T31] audit: type=1326 audit(1780749776.813:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.1.68" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff42039ce59 code=0x7ffc0000 [ 106.954275][ T31] audit: type=1326 audit(1780749776.813:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.1.68" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42039ce59 code=0x7ffc0000 [ 106.957071][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.978993][ T31] audit: type=1326 audit(1780749776.813:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.1.68" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42039ce59 code=0x7ffc0000 [ 107.007154][ T6155] XFS (loop5): Ending clean mount [ 107.120100][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.172524][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.227519][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.281930][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.338913][ T9] usb 3-1: config 0 descriptor?? [ 107.415014][ T6216] loop1: detected capacity change from 0 to 512 [ 107.560100][ T6216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.564396][ T6192] 9p: Bad value for 'rfdno' [ 107.657878][ T6216] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.968090][ T9] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 108.070038][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 108.197012][ T6192] loop2: detected capacity change from 0 to 1024 [ 108.253409][ T6192] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.67: Failed to acquire dquot type 0 [ 108.266335][ T6192] loop2: lost filesystem error report for type 5 error -5 [ 108.270284][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 108.284240][ C0] EXT4-fs (loop2): initial error at time 1780749778: ext4_acquire_dquot:7034 [ 108.293012][ C0] EXT4-fs (loop2): last error at time 1780749778: ext4_acquire_dquot:7034 [ 108.349027][ T6192] EXT4-fs (loop2): 1 truncate cleaned up [ 108.366432][ T6229] loop3: detected capacity change from 0 to 4096 [ 108.661894][ T5857] net_ratelimit: 6 callbacks suppressed [ 108.661913][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.668824][ T6192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.039744][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.048418][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.064608][ T6229] NILFS (loop3): invalid segment: Checksum error in segment payload [ 109.092663][ T6229] NILFS (loop3): trying rollback from an earlier position [ 109.124756][ T6227] capability: warning: `syz.1.73' uses deprecated v2 capabilities in a way that may be insecure [ 109.140212][ T6237] FAULT_INJECTION: forcing a failure. [ 109.140212][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 109.214975][ T6229] NILFS (loop3): recovery complete [ 109.222123][ T5642] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 109.228165][ T6237] CPU: 1 UID: 0 PID: 6237 Comm: syz.0.78 Not tainted syzkaller #0 PREEMPT(full) [ 109.228193][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.228208][ T6237] Call Trace: [ 109.228218][ T6237] [ 109.228228][ T6237] dump_stack_lvl+0xe8/0x150 [ 109.228261][ T6237] should_fail_ex+0x412/0x560 [ 109.228295][ T6237] should_failslab+0xa8/0x100 [ 109.228323][ T6237] __kmalloc_noprof+0xe8/0x760 [ 109.228358][ T6237] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.228390][ T6237] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 109.228423][ T6237] tomoyo_realpath_from_path+0xe3/0x5d0 [ 109.228450][ T6237] ? tomoyo_domain+0xd7/0x130 [ 109.228482][ T6237] ? tomoyo_path_number_perm+0x219/0x630 [ 109.228517][ T6237] tomoyo_path_number_perm+0x246/0x630 [ 109.228555][ T6237] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 109.228591][ T6237] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.228621][ T6237] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.228650][ T6237] ? sb_end_write+0xe9/0x1c0 [ 109.228680][ T6237] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.228708][ T6237] ? vfs_write+0x9bc/0xb90 [ 109.228784][ T6237] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.228818][ T6237] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.228847][ T6237] ? ksys_write+0x1fc/0x270 [ 109.228893][ T6237] security_file_ioctl+0xc3/0x2a0 [ 109.228928][ T6237] __se_sys_ioctl+0x47/0x170 [ 109.228968][ T6237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.228995][ T6237] do_syscall_64+0x174/0x580 [ 109.229031][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.229056][ T6237] RIP: 0033:0x7fe2c3b9ce59 [ 109.229078][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.229097][ T6237] RSP: 002b:00007fe2c497a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.229122][ T6237] RAX: ffffffffffffffda RBX: 00007fe2c3e15fa0 RCX: 00007fe2c3b9ce59 [ 109.229140][ T6237] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 109.229160][ T6237] RBP: 00007fe2c497a090 R08: 0000000000000000 R09: 0000000000000000 [ 109.229175][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.229189][ T6237] R13: 00007fe2c3e16038 R14: 00007fe2c3e15fa0 R15: 00007fff8baefc88 [ 109.229228][ T6237] [ 109.234669][ T6237] ERROR: Out of memory at tomoyo_realpath_from_path. [ 109.569809][ T6239] loop4: detected capacity change from 0 to 32768 [ 109.590155][ T6239] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.79 (6239) [ 109.689455][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.690714][ T5857] usb 3-1: USB disconnect, device number 7 [ 109.710226][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.738114][ T6239] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.749247][ T6239] BTRFS info (device loop4): using crc32c checksum algorithm [ 109.768201][ T6240] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.875820][ T6247] /dev/loop3: Can't open blockdev [ 109.897701][ T6247] comedi comedi4: comedi_config --init_data is deprecated [ 110.416261][ T6239] BTRFS info (device loop4): enabling ssd optimizations [ 110.424823][ T6239] BTRFS info (device loop4): turning on async discard [ 110.431621][ T6239] BTRFS info (device loop4): enabling free space tree [ 110.567561][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.747011][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.645417][ T6267] loop1: detected capacity change from 0 to 8 [ 111.709716][ T6267] squashfs image failed sanity check [ 111.737550][ T5639] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.789574][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.816764][ T5644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.850645][ T6270] 9p: Bad value for 'rfdno' [ 111.909752][ T6271] 9p: Bad value for 'rfdno' [ 112.100423][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.304033][ T6281] fuse: Unknown parameter '0x0000000000000006' [ 112.641422][ T6286] loop4: detected capacity change from 0 to 4096 [ 112.757818][ T6293] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.770902][ T6292] syz.1.89 uses obsolete (PF_INET,SOCK_PACKET) [ 112.821937][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.622817][ T6278] Process accounting resumed [ 113.630610][ T6265] loop3: detected capacity change from 0 to 32768 [ 113.673955][ T6265] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.81 (6265) [ 113.772575][ T6265] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.821369][ T6265] BTRFS info (device loop3): using sha256 checksum algorithm [ 113.860677][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.870441][ T6310] loop5: detected capacity change from 0 to 128 [ 114.073230][ T6309] loop2: detected capacity change from 0 to 4096 [ 114.102900][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.130902][ T6309] NILFS (loop2): invalid segment: Checksum error in segment payload [ 114.139126][ T6265] BTRFS info (device loop3): enabling ssd optimizations [ 114.177227][ T6309] NILFS (loop2): trying rollback from an earlier position [ 114.188268][ T6265] BTRFS info (device loop3): turning on async discard [ 114.234143][ T6265] BTRFS info (device loop3): enabling free space tree [ 114.340830][ T6309] NILFS (loop2): recovery complete [ 114.539321][ T6330] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.860796][ T6334] /dev/loop2: Can't open blockdev [ 114.897375][ T6334] comedi comedi4: comedi_config --init_data is deprecated [ 114.899436][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.161715][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.463144][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.750492][ T5631] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.939396][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.470561][ T5781] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 116.542115][ T6358] nfs4: Unknown parameter '\' [ 116.619140][ T6360] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 116.669958][ T5781] usb 6-1: Using ep0 maxpacket: 16 [ 116.681487][ T5781] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 253 [ 116.740126][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.748667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.755234][ T5781] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 116.757361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.774540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.826450][ T5781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.881489][ T5781] usb 6-1: Product: syz [ 116.901801][ T5781] usb 6-1: Manufacturer: syz [ 116.922088][ T6359] loop2: detected capacity change from 0 to 32768 [ 116.927039][ T5781] usb 6-1: SerialNumber: syz [ 116.935840][ T6359] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.105 (6359) [ 116.960770][ T6359] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.976088][ T6359] BTRFS info (device loop2): using crc32c checksum algorithm [ 117.014606][ T5781] usb 6-1: config 0 descriptor?? [ 117.059056][ T6349] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 117.168232][ T6359] BTRFS info (device loop2): enabling ssd optimizations [ 117.175256][ T6359] BTRFS info (device loop2): turning on async discard [ 117.183147][ T6359] BTRFS info (device loop2): enabling free space tree [ 117.247834][ T5781] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 117.720125][ T6349] loop5: detected capacity change from 0 to 1764 [ 117.738146][ T6380] syzkaller0: entered promiscuous mode [ 117.775727][ T6380] syzkaller0: entered allmulticast mode [ 117.850741][ T6349] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 117.896346][ T6349] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 117.950843][ T6387] loop0: detected capacity change from 0 to 8 [ 117.988578][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 117.989033][ T5857] usb 6-1: USB disconnect, device number 3 [ 117.994748][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 118.089702][ T5857] mcba_usb 6-1:0.0 can0: device disconnected [ 118.440271][ T5644] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.118216][ T6396] netlink: 68 bytes leftover after parsing attributes in process `syz.2.110'. [ 119.220909][ T5857] net_ratelimit: 165 callbacks suppressed [ 119.220928][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.420674][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 119.420695][ T31] audit: type=1400 audit(1780749789.773:68): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB5 pid=6406 comm="syz.1.115" [ 119.629243][ T5795] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.791785][ T6418] binder: 6415:6418 ioctl c0306201 2000000003c0 returned -14 [ 119.821081][ T5795] usb 1-1: Using ep0 maxpacket: 8 [ 119.828073][ T6420] loop3: detected capacity change from 0 to 256 [ 119.844247][ T6420] exfat: Unknown parameter '00000000000000000003' [ 119.858667][ T5795] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 119.884448][ T5795] usb 1-1: config 0 has no interface number 0 [ 119.889727][ T6418] netlink: 128 bytes leftover after parsing attributes in process `syz.1.118'. [ 119.902662][ T6425] FAULT_INJECTION: forcing a failure. [ 119.902662][ T6425] name failslab, interval 1, probability 0, space 0, times 0 [ 119.956764][ T5795] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 119.960056][ T6425] CPU: 1 UID: 0 PID: 6425 Comm: syz.4.114 Not tainted syzkaller #0 PREEMPT(full) [ 119.960084][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 119.960099][ T6425] Call Trace: [ 119.960108][ T6425] [ 119.960118][ T6425] dump_stack_lvl+0xe8/0x150 [ 119.960150][ T6425] should_fail_ex+0x412/0x560 [ 119.960184][ T6425] should_failslab+0xa8/0x100 [ 119.960215][ T6425] __kmalloc_cache_noprof+0x88/0x660 [ 119.960254][ T6425] ? binder_transaction+0x6ee/0x7070 [ 119.960298][ T6425] ? do_raw_spin_unlock+0xf5/0x210 [ 119.960341][ T6425] binder_transaction+0x6ee/0x7070 [ 119.960379][ T6425] ? arch_stack_walk+0xfb/0x150 [ 119.960415][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.960456][ T6425] ? __lock_acquire+0x6b5/0x2cf0 [ 119.960488][ T6425] ? ima_match_policy+0x112/0x21e0 [ 119.960525][ T6425] ? ima_match_policy+0x2146/0x21e0 [ 119.960566][ T6425] ? __pfx_binder_transaction+0x10/0x10 [ 119.960623][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.960652][ T6425] ? __lock_acquire+0x6b5/0x2cf0 [ 119.960691][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.960720][ T6425] ? __lock_acquire+0x6b5/0x2cf0 [ 119.960749][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.960780][ T6425] ? __lock_acquire+0x6b5/0x2cf0 [ 119.960812][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.960845][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.960885][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.960929][ T6425] binder_ioctl_write_read+0xb45/0xa590 [ 119.960988][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.961020][ T6425] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 119.961058][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.961106][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.961135][ T6425] ? stack_trace_save+0xa9/0x100 [ 119.961172][ T6425] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 119.961210][ T6425] ? kasan_save_free_info+0x46/0x50 [ 119.961243][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.961272][ T6425] ? stack_depot_save_flags+0x33/0x810 [ 119.961316][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.961344][ T6425] ? __lock_acquire+0x6b5/0x2cf0 [ 119.961400][ T6425] ? __pfx_binder_debug+0x10/0x10 [ 119.961434][ T6425] ? do_raw_spin_lock+0x12b/0x2f0 [ 119.961472][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.961504][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.961544][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.961572][ T6425] ? _raw_spin_unlock+0x28/0x50 [ 119.961610][ T6425] ? binder_get_thread+0x177/0x6d0 [ 119.961652][ T6425] binder_ioctl+0x423/0x1b10 [ 119.961689][ T6425] ? tomoyo_path_number_perm+0x219/0x630 [ 119.961725][ T6425] ? tomoyo_path_number_perm+0x219/0x630 [ 119.961759][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.961793][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.961822][ T6425] ? do_vfs_ioctl+0x1166/0x1530 [ 119.961862][ T6425] ? __pfx_binder_ioctl+0x10/0x10 [ 119.961899][ T6425] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 119.961941][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.961981][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.962010][ T6425] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 119.962061][ T6425] ? __fget_files+0x2a/0x420 [ 119.962096][ T6425] ? __fget_files+0x2a/0x420 [ 119.962126][ T6425] ? __fget_files+0x3a0/0x420 [ 119.962156][ T6425] ? __fget_files+0x2a/0x420 [ 119.962190][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.962222][ T6425] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.962252][ T6425] ? __pfx_binder_ioctl+0x10/0x10 [ 119.962295][ T6425] __se_sys_ioctl+0xfc/0x170 [ 119.962333][ T6425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.962361][ T6425] do_syscall_64+0x174/0x580 [ 119.962386][ T6425] ? trace_irq_disable+0x3b/0x140 [ 119.962431][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.962457][ T6425] RIP: 0033:0x7fa8dfb9ce59 [ 119.962479][ T6425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.962498][ T6425] RSP: 002b:00007fa8e0b10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.962522][ T6425] RAX: ffffffffffffffda RBX: 00007fa8dfe15fa0 RCX: 00007fa8dfb9ce59 [ 119.962540][ T6425] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 119.962557][ T6425] RBP: 00007fa8e0b10090 R08: 0000000000000000 R09: 0000000000000000 [ 119.962572][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.962586][ T6425] R13: 00007fa8dfe16038 R14: 00007fa8dfe15fa0 R15: 00007fff30ba67f8 [ 119.962624][ T6425] [ 119.966916][ T6423] 9pnet_fd: p9_fd_create_tcp (6423): problem connecting socket to 127.0.0.1 [ 120.427832][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.731270][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.472942][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.081615][ T5795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.089692][ T5795] usb 1-1: Product: syz [ 122.098013][ T5795] usb 1-1: Manufacturer: syz [ 122.110572][ T5795] usb 1-1: SerialNumber: syz [ 122.120220][ T5795] usb 1-1: config 0 descriptor?? [ 122.161671][ T6418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.267924][ T6442] loop5: detected capacity change from 0 to 512 [ 122.276660][ T6440] loop3: detected capacity change from 0 to 2048 [ 122.301025][ T6442] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 122.337115][ T6440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.349320][ T6442] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.386193][ T6442] EXT4-fs (loop5): 1 truncate cleaned up [ 122.459147][ T6442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.499925][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.586330][ T5795] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 122.610233][ T5857] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.652576][ T5795] usb 1-1: USB disconnect, device number 3 [ 122.794283][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 123.699732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.976625][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.987252][ T5857] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 253 [ 124.000400][ T5857] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 124.000612][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.009646][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.026355][ T5857] usb 5-1: Product: syz [ 124.140335][ T5857] usb 5-1: Manufacturer: syz [ 124.144038][ T6461] netlink: 'syz.1.126': attribute type 10 has an invalid length. [ 124.159200][ T5857] usb 5-1: SerialNumber: syz [ 124.202628][ T5857] usb 5-1: config 0 descriptor?? [ 124.210254][ T6437] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 124.251353][ T5857] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 124.294586][ T6461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.340133][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.367923][ T6461] team0: Port device bond0 added [ 124.678021][ T5642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.681693][ T6437] loop4: detected capacity change from 0 to 1764 [ 124.766904][ T6437] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 124.807463][ T6437] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 124.892359][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 124.898525][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 124.907911][ T5857] usb 5-1: USB disconnect, device number 4 [ 124.943939][ T5857] mcba_usb 5-1:0.0 can0: device disconnected [ 124.985475][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.069998][ T6483] loop1: detected capacity change from 0 to 128 [ 125.331801][ T6489] loop3: detected capacity change from 0 to 2048 [ 125.447757][ T6498] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.498588][ T6484] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=0, rec_len=16, name_len=8 [ 125.547319][ T6484] Remounting filesystem read-only [ 125.601842][ T6489] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=0, rec_len=16, name_len=8 [ 125.624827][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.680557][ T6484] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=0, rec_len=16, name_len=8 [ 125.746118][ T6502] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=0, rec_len=16, name_len=8 [ 125.807721][ T6489] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=0, rec_len=16, name_len=8 [ 125.941339][ T6508] FAULT_INJECTION: forcing a failure. [ 125.941339][ T6508] name failslab, interval 1, probability 0, space 0, times 0 [ 125.954044][ T6508] CPU: 1 UID: 0 PID: 6508 Comm: syz.4.137 Not tainted syzkaller #0 PREEMPT(full) [ 125.954073][ T6508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.954087][ T6508] Call Trace: [ 125.954097][ T6508] [ 125.954107][ T6508] dump_stack_lvl+0xe8/0x150 [ 125.954141][ T6508] should_fail_ex+0x412/0x560 [ 125.954175][ T6508] should_failslab+0xa8/0x100 [ 125.954201][ T6508] ? skb_clone+0x212/0x3a0 [ 125.954228][ T6508] kmem_cache_alloc_noprof+0x87/0x650 [ 125.954266][ T6508] ? __netlink_lookup+0xc6/0x8b0 [ 125.954297][ T6508] skb_clone+0x212/0x3a0 [ 125.954328][ T6508] __netlink_deliver_tap+0x404/0x850 [ 125.954384][ T6508] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.954428][ T6508] netlink_deliver_tap+0x19c/0x1b0 [ 125.954466][ T6508] netlink_unicast+0x730/0x8e0 [ 125.954510][ T6508] netlink_sendmsg+0x813/0xb40 [ 125.954541][ T6508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.954580][ T6508] ? lockdep_hardirqs_on+0x7a/0x110 [ 125.954602][ T6508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.954628][ T6508] ? aa_sock_msg_perm+0xf1/0x1b0 [ 125.954665][ T6508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.954691][ T6508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.954723][ T6508] ____sys_sendmsg+0x972/0x9f0 [ 125.954745][ T6508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.954785][ T6508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.954817][ T6508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.954843][ T6508] ? import_iovec+0x73/0xa0 [ 125.954876][ T6508] ___sys_sendmsg+0x2a5/0x360 [ 125.954897][ T6508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 125.954923][ T6508] ? lockdep_hardirqs_on+0x7a/0x110 [ 125.954949][ T6508] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.954976][ T6508] ? __schedule+0x1837/0x5740 [ 125.955045][ T6508] ? __pfx___schedule+0x10/0x10 [ 125.955091][ T6508] __x64_sys_sendmsg+0x1bd/0x2a0 [ 125.955117][ T6508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.955151][ T6508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.955184][ T6508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.955208][ T6508] do_syscall_64+0x174/0x580 [ 125.955238][ T6508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.955261][ T6508] RIP: 0033:0x7fa8dfb9ce59 [ 125.955281][ T6508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.955298][ T6508] RSP: 002b:00007fa8e0ace028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.955320][ T6508] RAX: ffffffffffffffda RBX: 00007fa8dfe16180 RCX: 00007fa8dfb9ce59 [ 125.955336][ T6508] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 125.955349][ T6508] RBP: 00007fa8e0ace090 R08: 0000000000000000 R09: 0000000000000000 [ 125.955363][ T6508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.955376][ T6508] R13: 00007fa8dfe16218 R14: 00007fa8dfe16180 R15: 00007fff30ba67f8 [ 125.955410][ T6508] [ 126.247274][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.754090][ T6506] : entered promiscuous mode [ 127.059583][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.095273][ T6510] loop4: detected capacity change from 0 to 2048 [ 127.157930][ T6510] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.329565][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.344918][ T6512] loop3: detected capacity change from 0 to 32768 [ 127.353858][ T6512] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.139 (6512) [ 127.383370][ T6512] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 127.393564][ T6512] BTRFS info (device loop3): using sha256 checksum algorithm [ 127.481501][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.540183][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.583350][ T6512] BTRFS info (device loop3): rebuilding free space tree [ 127.602391][ T6512] BTRFS info (device loop3): disabling free space tree [ 127.609411][ T6512] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.619266][ T6512] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.645981][ T6512] BTRFS info (device loop3): setting nodatasum [ 127.652338][ T6512] BTRFS info (device loop3): setting nodatacow [ 127.658596][ T6512] BTRFS info (device loop3): turning off barriers [ 127.665204][ T6512] BTRFS info (device loop3): turning on sync discard [ 127.671926][ T6512] BTRFS info (device loop3): force clearing of disk cache [ 127.854456][ T6513] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 127.958763][ T6532] loop4: detected capacity change from 0 to 32768 [ 127.966189][ T6532] btrfs: Deprecated parameter 'usebackuproot' [ 127.972305][ T6532] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 127.989051][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.996869][ T6532] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.142 (6532) [ 128.015020][ T6532] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.025158][ T6532] BTRFS info (device loop4): using crc32c checksum algorithm [ 128.039760][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.046253][ T6539] FAULT_INJECTION: forcing a failure. [ 128.046253][ T6539] name failslab, interval 1, probability 0, space 0, times 0 [ 128.050073][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 128.095906][ T6539] CPU: 0 UID: 0 PID: 6539 Comm: syz.2.144 Not tainted syzkaller #0 PREEMPT(full) [ 128.095936][ T6539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.095951][ T6539] Call Trace: [ 128.095960][ T6539] [ 128.095970][ T6539] dump_stack_lvl+0xe8/0x150 [ 128.096003][ T6539] should_fail_ex+0x412/0x560 [ 128.096038][ T6539] should_failslab+0xa8/0x100 [ 128.096066][ T6539] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 128.096104][ T6539] ? __alloc_skb+0x186/0x7d0 [ 128.096142][ T6539] ? __alloc_skb+0x1d0/0x7d0 [ 128.096177][ T6539] ? __local_bh_enable_ip+0xd0/0x130 [ 128.096210][ T6539] __alloc_skb+0x1d0/0x7d0 [ 128.096254][ T6539] netlink_sendmsg+0x5d4/0xb40 [ 128.096289][ T6539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.096332][ T6539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.096363][ T6539] ? aa_sock_msg_perm+0xf1/0x1b0 [ 128.096404][ T6539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.096434][ T6539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.096469][ T6539] ____sys_sendmsg+0x972/0x9f0 [ 128.096495][ T6539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.096535][ T6539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.096570][ T6539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.096600][ T6539] ? import_iovec+0x73/0xa0 [ 128.096637][ T6539] ___sys_sendmsg+0x2a5/0x360 [ 128.096660][ T6539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.096690][ T6539] ? __lock_acquire+0x6b5/0x2cf0 [ 128.096723][ T6539] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.096800][ T6539] ? __fget_files+0x2a/0x420 [ 128.096833][ T6539] ? srso_alias_return_thunk+0x5/0xfbef5 [ 128.096863][ T6539] ? __fget_files+0x3a0/0x420 [ 128.096908][ T6539] __x64_sys_sendmsg+0x1bd/0x2a0 [ 128.096941][ T6539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.096979][ T6539] ? __pfx_ksys_write+0x10/0x10 [ 128.097028][ T6539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.097056][ T6539] do_syscall_64+0x174/0x580 [ 128.097083][ T6539] ? trace_irq_disable+0x3b/0x140 [ 128.097130][ T6539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.097157][ T6539] RIP: 0033:0x7f63af79ce59 [ 128.097180][ T6539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.097200][ T6539] RSP: 002b:00007f63b06bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.097224][ T6539] RAX: ffffffffffffffda RBX: 00007f63afa16090 RCX: 00007f63af79ce59 [ 128.097243][ T6539] RDX: 0000000002000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 128.097259][ T6539] RBP: 00007f63b06bf090 R08: 0000000000000000 R09: 0000000000000000 [ 128.097275][ T6539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.097290][ T6539] R13: 00007f63afa16128 R14: 00007f63afa16090 R15: 00007fffde522fb8 [ 128.097328][ T6539] [ 128.383310][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.489040][ T9] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 128.500039][ T9] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 128.514023][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 128.528679][ T9] usb 2-1: config 1 interface 1 has no altsetting 0 [ 128.538760][ T9] usb 2-1: string descriptor 0 read error: -22 [ 128.547215][ T9] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 128.556304][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.753948][ T12] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 128.768999][ T6532] BTRFS error (device loop4): failed to load root extent [ 128.778139][ T6532] BTRFS warning (device loop4): try to load backup roots slot 1 [ 128.787323][ T1033] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 128.908988][ T6532] BTRFS warning (device loop4): couldn't read tree root [ 128.916034][ T6532] BTRFS warning (device loop4): try to load backup roots slot 2 [ 128.925387][ T12] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 128.950480][ T6532] BTRFS warning (device loop4): couldn't read tree root [ 128.959628][ T6532] BTRFS warning (device loop4): try to load backup roots slot 3 [ 128.980772][ T6532] BTRFS info (device loop4): rebuilding free space tree [ 129.002395][ T6532] BTRFS info (device loop4): checking UUID tree [ 129.002998][ T6562] Cannot find add_set index 4 as target [ 129.016319][ T6532] BTRFS info (device loop4): enabling ssd optimizations [ 129.023324][ T6532] BTRFS info (device loop4): turning on async discard [ 129.030795][ T6532] BTRFS info (device loop4): enabling free space tree [ 129.037570][ T6532] BTRFS info (device loop4): force clearing of disk cache [ 129.044764][ T6532] BTRFS info (device loop4): enabling auto defrag [ 129.051206][ T6532] BTRFS info (device loop4): trying to use backup root at mount time [ 129.061705][ T6532] BTRFS info (device loop4): use zstd compression, level 3 [ 129.461544][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.174985][ T5631] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.518467][ T5639] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.554353][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.585460][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.598604][ T6588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.808114][ T31] audit: type=1326 audit(1780749801.153:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.2.155" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af79ce59 code=0x7ffc0000 [ 130.919228][ T6592] loop5: detected capacity change from 0 to 2048 [ 130.938292][ T6593] loop0: detected capacity change from 0 to 32768 [ 130.945773][ T6593] btrfs: Deprecated parameter 'usebackuproot' [ 130.947562][ T9] usb 2-1: USB disconnect, device number 5 [ 130.951906][ T6593] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 130.977451][ T31] audit: type=1326 audit(1780749801.153:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.2.155" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af79ce59 code=0x7ffc0000 [ 130.997987][ T6592] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.004429][ T6593] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 00733e39-019d-4b24-aa09-50f385751110 [ 131.023979][ T6593] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.151 (6593) [ 131.045691][ T31] audit: type=1326 audit(1780749801.153:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.2.155" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f63af79ce59 code=0x7ffc0000 [ 131.070797][ T31] audit: type=1326 audit(1780749801.153:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.2.155" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af79ce59 code=0x7ffc0000 [ 131.110515][ T6593] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.121174][ T6593] BTRFS info (device loop0): using crc32c checksum algorithm [ 131.131164][ T31] audit: type=1326 audit(1780749801.153:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.2.155" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af79ce59 code=0x7ffc0000 [ 131.238677][ T31] audit: type=1326 audit(1780749801.153:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.2.155" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f63af79ce59 code=0x7ffc0000 [ 131.271392][ T31] audit: type=1326 audit(1780749801.153:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.2.155" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af79ce59 code=0x7ffc0000 [ 131.294940][ T6606] loop3: detected capacity change from 0 to 164 [ 131.297663][ T31] audit: type=1326 audit(1780749801.153:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.2.155" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af79ce59 code=0x7ffc0000 [ 131.361345][ T31] audit: type=1326 audit(1780749801.153:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.2.155" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f63af79ce59 code=0x7ffc0000 [ 131.386439][ T6606] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 131.387146][ T12] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 131.396870][ T31] audit: type=1326 audit(1780749801.153:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6594 comm="syz.2.155" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63af79ce59 code=0x7ffc0000 [ 131.477349][ T6606] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 131.509211][ T6606] rock: directory entry would overflow storage [ 131.548709][ T6593] BTRFS error (device loop0): failed to load root extent [ 131.555843][ T6593] BTRFS warning (device loop0): try to load backup roots slot 1 [ 131.563895][ T13] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 131.568145][ T6606] rock: sig=0x4f50, size=4, remaining=3 [ 131.619693][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.638884][ T6593] BTRFS warning (device loop0): couldn't read tree root [ 131.649228][ T6593] BTRFS warning (device loop0): try to load backup roots slot 2 [ 131.660431][ T59] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 131.674626][ T6606] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 131.746373][ T6593] BTRFS warning (device loop0): couldn't read tree root [ 131.753476][ T6593] BTRFS warning (device loop0): try to load backup roots slot 3 [ 131.770625][ T6617] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 131.815749][ T6593] BTRFS info (device loop0): rebuilding free space tree [ 131.841302][ T6593] BTRFS info (device loop0): checking UUID tree [ 131.849861][ T6593] BTRFS info (device loop0): enabling ssd optimizations [ 131.856848][ T6593] BTRFS info (device loop0): turning on async discard [ 131.863817][ T6593] BTRFS info (device loop0): enabling free space tree [ 131.870640][ T6593] BTRFS info (device loop0): force clearing of disk cache [ 131.877776][ T6593] BTRFS info (device loop0): enabling auto defrag [ 131.885988][ T6593] BTRFS info (device loop0): trying to use backup root at mount time [ 131.894166][ T6593] BTRFS info (device loop0): use zstd compression, level 3 [ 131.897295][ T6617] rock: directory entry would overflow storage [ 131.932216][ T6618] loop1: detected capacity change from 0 to 1024 [ 132.000818][ T6618] EXT4-fs: Ignoring removed bh option [ 132.010654][ T6617] rock: sig=0x4f50, size=4, remaining=3 [ 132.030716][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.042464][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.059682][ T6618] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 132.062235][ T6617] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 132.151121][ T6630] netlink: 'syz.5.158': attribute type 1 has an invalid length. [ 132.238814][ T6630] netlink: 96 bytes leftover after parsing attributes in process `syz.5.158'. [ 132.329556][ T6630] netlink: 1 bytes leftover after parsing attributes in process `syz.5.158'. [ 132.332184][ T6618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.344237][ T6630] netlink: 658 bytes leftover after parsing attributes in process `syz.5.158'. [ 132.356537][ T5760] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.661431][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.123122][ T5760] usb 5-1: Using ep0 maxpacket: 32 [ 133.373422][ T5760] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.380572][ T6644] FAULT_INJECTION: forcing a failure. [ 133.380572][ T6644] name failslab, interval 1, probability 0, space 0, times 0 [ 133.431550][ T6646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.157'. [ 133.436363][ T5647] BTRFS info (device loop0): last unmount of filesystem 00733e39-019d-4b24-aa09-50f385751110 [ 133.513911][ T5760] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 74, changing to 7 [ 133.622211][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.625310][ T6645] loop2: detected capacity change from 0 to 1024 [ 133.638917][ T6644] CPU: 0 UID: 0 PID: 6644 Comm: syz.3.160 Not tainted syzkaller #0 PREEMPT(full) [ 133.638948][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.638966][ T6644] Call Trace: [ 133.638975][ T6644] [ 133.638985][ T6644] dump_stack_lvl+0xe8/0x150 [ 133.639018][ T6644] should_fail_ex+0x412/0x560 [ 133.639052][ T6644] should_failslab+0xa8/0x100 [ 133.639078][ T6644] ? skb_clone+0x212/0x3a0 [ 133.639104][ T6644] kmem_cache_alloc_noprof+0x87/0x650 [ 133.639142][ T6644] ? __netlink_lookup+0xc6/0x8b0 [ 133.639176][ T6644] skb_clone+0x212/0x3a0 [ 133.639207][ T6644] __netlink_deliver_tap+0x404/0x850 [ 133.639261][ T6644] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.639309][ T6644] netlink_deliver_tap+0x19c/0x1b0 [ 133.639350][ T6644] netlink_unicast+0x730/0x8e0 [ 133.639399][ T6644] netlink_sendmsg+0x813/0xb40 [ 133.639433][ T6644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.639477][ T6644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.639506][ T6644] ? aa_sock_msg_perm+0xf1/0x1b0 [ 133.639546][ T6644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.639576][ T6644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.639610][ T6644] ____sys_sendmsg+0x972/0x9f0 [ 133.639635][ T6644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.639674][ T6644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.639708][ T6644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.639737][ T6644] ? import_iovec+0x73/0xa0 [ 133.639774][ T6644] ___sys_sendmsg+0x2a5/0x360 [ 133.639797][ T6644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.639826][ T6644] ? __lock_acquire+0x6b5/0x2cf0 [ 133.639859][ T6644] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.639925][ T6644] ? __fget_files+0x2a/0x420 [ 133.639955][ T6644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.639984][ T6644] ? __fget_files+0x3a0/0x420 [ 133.640028][ T6644] __x64_sys_sendmsg+0x1bd/0x2a0 [ 133.640057][ T6644] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.640094][ T6644] ? __pfx_ksys_write+0x10/0x10 [ 133.640143][ T6644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.640170][ T6644] do_syscall_64+0x174/0x580 [ 133.640198][ T6644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 133.640233][ T6644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.640258][ T6644] RIP: 0033:0x7f215759ce59 [ 133.640288][ T6644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.640308][ T6644] RSP: 002b:00007f215851d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.640332][ T6644] RAX: ffffffffffffffda RBX: 00007f2157816090 RCX: 00007f215759ce59 [ 133.640351][ T6644] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 133.640367][ T6644] RBP: 00007f215851d090 R08: 0000000000000000 R09: 0000000000000000 [ 133.640383][ T6644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.640397][ T6644] R13: 00007f2157816128 R14: 00007f2157816090 R15: 00007ffd784b9a68 [ 133.640436][ T6644] [ 133.942630][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.109184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 134.165329][ T5760] usb 5-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 134.174468][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.183294][ T5760] usb 5-1: Product: syz [ 134.187433][ T5760] usb 5-1: Manufacturer: syz [ 134.192562][ T5760] usb 5-1: SerialNumber: syz [ 134.435581][ T6649] loop3: detected capacity change from 0 to 1024 [ 134.472830][ T6649] EXT4-fs: Ignoring removed bh option [ 134.486690][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.563861][ T6649] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 134.622506][ T6624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.673661][ T6649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.701797][ T6624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.707372][ T5760] usb 5-1: BAAD GENERIC IO: no channels? [ 134.715701][ T6624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.980174][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.034884][ T6659] loop1: detected capacity change from 0 to 4096 [ 135.211848][ T6667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.164'. [ 135.223154][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.238970][ T6659] NILFS (loop1): invalid segment: Checksum error in segment payload [ 135.694550][ T6659] NILFS (loop1): trying rollback from an earlier position [ 135.706336][ T5760] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 136.344178][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.353285][ T5760] usb 5-1: USB disconnect, device number 5 [ 136.375848][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 136.375865][ T31] audit: type=1800 audit(1780749806.733:103): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.164" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 136.602374][ T6659] NILFS (loop1): recovery complete [ 136.660517][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.685349][ T6673] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.939542][ T6675] /dev/loop1: Can't open blockdev [ 136.949231][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.980451][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.056005][ T6677] loop4: detected capacity change from 0 to 512 [ 137.193551][ T6674] comedi comedi4: comedi_config --init_data is deprecated [ 137.327585][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.378570][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.379845][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.427068][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 137.468745][ T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 137.548633][ T9] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 137.554889][ T6677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.593515][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 137.637796][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 137.656512][ T9] usb 3-1: string descriptor 0 read error: -22 [ 137.664758][ T9] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 137.690967][ T6677] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.703136][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.788058][ T6681] loop0: detected capacity change from 0 to 2048 [ 137.810960][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.831417][ T6681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.872715][ T6681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.898335][ T6681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.019196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 138.089186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 138.097774][ T6681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.127898][ T6681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.183339][ T6681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.217754][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.5.172'. [ 139.733536][ T6698] loop5: detected capacity change from 0 to 32768 [ 139.758696][ T6698] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.175 (6698) [ 139.775864][ T6698] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.786085][ T6698] BTRFS info (device loop5): using sha256 checksum algorithm [ 139.847234][ T6698] BTRFS info (device loop5): enabling ssd optimizations [ 139.854351][ T6698] BTRFS info (device loop5): turning on async discard [ 139.861288][ T6698] BTRFS info (device loop5): enabling free space tree [ 140.127287][ T9] usb 3-1: USB disconnect, device number 8 [ 140.252735][ T5750] udevd[5750]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.835772][ T5782] net_ratelimit: 63 callbacks suppressed [ 140.835793][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.382359][ T6725] loop2: detected capacity change from 0 to 32768 [ 141.391148][ T6725] BTRFS info: device /dev/loop2 (7:2) using temp-fsid bcdf212c-3ca1-445d-8faa-f371a1ed70e6 [ 141.401249][ T6725] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.179 (6725) [ 141.456978][ T5795] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 141.469034][ T6725] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.479376][ T6725] BTRFS info (device loop2): using sha256 checksum algorithm [ 141.525816][ T5795] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 141.563194][ T6725] BTRFS info (device loop2): enabling ssd optimizations [ 141.570245][ T6725] BTRFS info (device loop2): turning on async discard [ 141.576990][ T6725] BTRFS info (device loop2): enabling free space tree [ 141.726945][ T1033] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 142.092553][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.262951][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.382484][ T1169] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 142.433423][ T5642] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.495854][ T5639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.525639][ T59] wlan1: authentication with 08:02:11:00:00:00 timed out [ 142.726695][ T5644] BTRFS info (device loop2): last unmount of filesystem bcdf212c-3ca1-445d-8faa-f371a1ed70e6 [ 142.820338][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.831518][ T6756] loop4: detected capacity change from 0 to 128 [ 142.914726][ T6756] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 142.964107][ T6756] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 143.014482][ T6756] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 143.067757][ T6756] UDF-fs: Scanning with blocksize 512 failed [ 144.461124][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.493695][ T6756] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 144.521916][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.554857][ T6756] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 144.637393][ T6756] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 144.655450][ T6759] loop5: detected capacity change from 0 to 4096 [ 144.689219][ T6756] UDF-fs: Scanning with blocksize 1024 failed [ 144.729442][ T6759] NILFS (loop5): invalid segment: Checksum error in segment payload [ 144.740540][ T6756] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 144.770484][ T6759] NILFS (loop5): trying rollback from an earlier position [ 144.818715][ T6756] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 144.848629][ T6759] NILFS (loop5): recovery complete [ 144.856472][ T6756] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 144.875245][ T6767] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.888053][ T6756] UDF-fs: Scanning with blocksize 2048 failed [ 144.903028][ T6756] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 144.956335][ T6756] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 144.978586][ T6756] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 145.005200][ T6759] /dev/loop5: Can't open blockdev [ 145.051759][ T6756] UDF-fs: Scanning with blocksize 4096 failed [ 145.132232][ T6756] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 145.174354][ T6759] comedi comedi4: comedi_config --init_data is deprecated [ 145.297713][ T6771] loop3: detected capacity change from 0 to 1024 [ 145.596650][ T6773] veth1_macvtap: left promiscuous mode [ 145.602248][ T6773] macsec0: entered promiscuous mode [ 145.646118][ T6773] veth1_macvtap: entered promiscuous mode [ 145.653356][ T6773] macsec0: left promiscuous mode [ 146.123319][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.267349][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.301622][ T6775] netlink: 68 bytes leftover after parsing attributes in process `syz.4.181'. [ 146.422648][ T6771] EXT4-fs: Ignoring removed bh option [ 146.610137][ T6771] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 146.689642][ T6771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.329474][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.473028][ T6784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.189'. [ 147.678100][ T6791] loop4: detected capacity change from 0 to 32768 [ 147.702710][ T6791] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.193 (6791) [ 147.733222][ T6791] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.743355][ T6791] BTRFS info (device loop4): using sha256 checksum algorithm [ 147.763930][ T31] audit: type=1800 audit(1780749818.123:104): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.189" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 147.791825][ T6782] loop2: detected capacity change from 0 to 4096 [ 147.847679][ T6791] BTRFS info (device loop4): enabling ssd optimizations [ 147.854681][ T6791] BTRFS info (device loop4): turning on async discard [ 147.861485][ T6791] BTRFS info (device loop4): enabling free space tree [ 147.870015][ T5760] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 148.039905][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'. [ 148.058833][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.367721][ T5760] usb 1-1: config 34 has an invalid interface number: 116 but max is 0 [ 148.447663][ T5760] usb 1-1: config 34 has no interface number 0 [ 148.911687][ T5760] usb 1-1: config 34 interface 116 has no altsetting 0 [ 148.931442][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.932066][ T6782] NILFS (loop2): invalid segment: Checksum error in segment payload [ 148.972684][ T5760] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 148.983330][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.007659][ T5760] usb 1-1: Product: syz [ 149.017479][ T6808] bridge_slave_1 (unregistering): left allmulticast mode [ 149.027312][ T5760] usb 1-1: Manufacturer: syz [ 149.039225][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.056557][ T6808] bridge_slave_1 (unregistering): left promiscuous mode [ 149.076431][ T6782] NILFS (loop2): trying rollback from an earlier position [ 149.086352][ T5760] usb 1-1: SerialNumber: syz [ 149.098093][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.139915][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.206849][ T6782] NILFS (loop2): recovery complete [ 149.242935][ T6814] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.373143][ T6815] /dev/loop2: Can't open blockdev [ 149.416325][ T6815] comedi comedi4: comedi_config --init_data is deprecated [ 149.961928][ T5760] comedi comedi5: could not set alternate setting 3 in high speed [ 149.980339][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.988627][ T5760] usbdux 1-1:34.116: driver 'usbdux' failed to auto-configure device. [ 150.089837][ T5760] usbdux 1-1:34.116: probe with driver usbdux failed with error -71 [ 150.146768][ T5760] usb 1-1: USB disconnect, device number 4 [ 150.168642][ T5639] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.335067][ T6826] tipc: Started in network mode [ 150.351216][ T6826] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 150.381227][ T6826] tipc: Enabled bearer , priority 10 [ 150.426975][ T6829] loop2: detected capacity change from 0 to 2048 [ 150.463612][ T6829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.564062][ T6833] loop0: detected capacity change from 0 to 256 [ 150.571776][ T6824] loop5: detected capacity change from 0 to 32768 [ 150.581312][ T6824] btrfs: Deprecated parameter 'usebackuproot' [ 150.587387][ T6824] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 150.598383][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.606692][ T6824] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.200 (6824) [ 150.609608][ T6833] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf53, utbl_chksum : 0xe619d30d) [ 150.635012][ T6824] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.645125][ T6824] BTRFS info (device loop5): using crc32c checksum algorithm [ 151.789507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 152.199326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 152.289983][ T5782] tipc: Node number set to 10136234 [ 153.918434][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.926943][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.953511][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.973629][ T6824] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 153.973978][ T6824] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 153.984039][ T6824] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 153.994014][ T6824] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 154.003014][ T6824] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 154.012045][ T6824] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 154.021569][ T6824] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 154.030417][ T6824] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 154.040210][ T6824] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 154.052120][ T6824] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 154.217023][ T6824] BTRFS error (device loop5): open_ctree failed: -12 [ 154.510252][ T5636] Bluetooth: Unexpected continuation frame (len 377) [ 154.770077][ T5760] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 154.812105][ T5761] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.985858][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.139250][ T5761] usb 3-1: Using ep0 maxpacket: 8 [ 155.461264][ T5761] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 155.501041][ T5760] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 155.512039][ T5761] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.530297][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.548148][ T5761] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.564368][ T5760] usb 5-1: Product: syz [ 155.580518][ T5760] usb 5-1: Manufacturer: syz [ 155.591448][ T5761] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.606292][ T5760] usb 5-1: SerialNumber: syz [ 155.611363][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.640133][ T5761] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.694950][ T5761] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.737137][ T5761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.776258][ T6865] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 155.884773][ T5636] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 155.896580][ T5636] Bluetooth: Wrong link type (-22) [ 156.008986][ T5761] usb 3-1: GET_CAPABILITIES returned 0 [ 156.021939][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.027452][ T5760] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 156.237991][ T6870] loop5: detected capacity change from 0 to 32768 [ 156.250673][ T6870] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.210 (6870) [ 156.266104][ T6870] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.276219][ T6870] BTRFS info (device loop5): using sha256 checksum algorithm [ 156.293657][ T5761] usbtmc 3-1:16.0: can't read capabilities [ 156.321817][ T6860] netlink: 96 bytes leftover after parsing attributes in process `syz.2.207'. [ 156.332607][ T5760] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 156.421933][ T5760] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 156.427481][ T6870] BTRFS info (device loop5): enabling ssd optimizations [ 156.440976][ T6870] BTRFS info (device loop5): turning on async discard [ 156.447722][ T6870] BTRFS info (device loop5): enabling free space tree [ 156.489733][ T6887] mmap: syz.4.211 (6887) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 156.510105][ T5760] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 156.519892][ T6887] FAULT_INJECTION: forcing a failure. [ 156.519892][ T6887] name failslab, interval 1, probability 0, space 0, times 0 [ 156.533528][ T6887] CPU: 0 UID: 0 PID: 6887 Comm: syz.4.211 Not tainted syzkaller #0 PREEMPT(full) [ 156.533550][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.533562][ T6887] Call Trace: [ 156.533570][ T6887] [ 156.533578][ T6887] dump_stack_lvl+0xe8/0x150 [ 156.533603][ T6887] should_fail_ex+0x412/0x560 [ 156.533629][ T6887] should_failslab+0xa8/0x100 [ 156.533650][ T6887] __kmalloc_noprof+0xe8/0x760 [ 156.533678][ T6887] ? metadata_dst_alloc+0x2c/0x3f0 [ 156.533707][ T6887] metadata_dst_alloc+0x2c/0x3f0 [ 156.533733][ T6887] ip_tun_rx_dst+0xf9/0x4d0 [ 156.533758][ T6887] __ipgre_rcv+0x3b6/0x5d0 [ 156.533787][ T6887] gre_rcv+0x9de/0x1080 [ 156.533813][ T6887] ? raw_local_deliver+0xe3f/0xf40 [ 156.533834][ T6887] ? __pfx_gre_rcv+0x10/0x10 [ 156.533853][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.533875][ T6887] ? lock_acquire+0x106/0x350 [ 156.533895][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.533922][ T6887] ? raw_local_deliver+0x30a/0xf40 [ 156.533941][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.533966][ T6887] ? gre_rcv+0xf8/0x4b0 [ 156.533992][ T6887] gre_rcv+0x214/0x4b0 [ 156.534018][ T6887] ? __pfx_gre_rcv+0x10/0x10 [ 156.534046][ T6887] ip_protocol_deliver_rcu+0x2e0/0x440 [ 156.534076][ T6887] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 156.534105][ T6887] ip_local_deliver_finish+0x3bb/0x6f0 [ 156.534140][ T6887] NF_HOOK+0x336/0x3c0 [ 156.534167][ T6887] ? __pfx_ipt_do_table+0x10/0x10 [ 156.534191][ T6887] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 156.534219][ T6887] ? NF_HOOK+0x9e/0x3c0 [ 156.534245][ T6887] ? __pfx_NF_HOOK+0x10/0x10 [ 156.534270][ T6887] ? ip_rcv_finish_core+0xc6e/0x1c00 [ 156.534301][ T6887] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 156.534333][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.534354][ T6887] ? ip_local_deliver+0x12a/0x1b0 [ 156.534385][ T6887] NF_HOOK+0x336/0x3c0 [ 156.534410][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.534431][ T6887] ? sock_wfree+0x2aa/0x740 [ 156.534450][ T6887] ? __pfx_ip_rcv_finish+0x10/0x10 [ 156.534477][ T6887] ? NF_HOOK+0x9e/0x3c0 [ 156.534503][ T6887] ? __pfx_NF_HOOK+0x10/0x10 [ 156.534528][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.534553][ T6887] ? __pfx_ip_rcv_finish+0x10/0x10 [ 156.534587][ T6887] ? netif_receive_skb+0x102/0xbf0 [ 156.534609][ T6887] ? __pfx_ip_rcv+0x10/0x10 [ 156.534636][ T6887] netif_receive_skb+0x45b/0xbf0 [ 156.534661][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.534685][ T6887] ? __pfx_netif_receive_skb+0x10/0x10 [ 156.534713][ T6887] ? tun_rx_batched+0x185/0x790 [ 156.534735][ T6887] tun_rx_batched+0x1de/0x790 [ 156.534752][ T6887] ? __build_skb+0x62/0x440 [ 156.534784][ T6887] ? __pfx_tun_rx_batched+0x10/0x10 [ 156.534806][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.534830][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.534854][ T6887] ? tun_get_user+0x2394/0x43e0 [ 156.534872][ T6887] ? tun_get_user+0x2394/0x43e0 [ 156.534890][ T6887] ? __local_bh_enable_ip+0xd0/0x130 [ 156.534914][ T6887] tun_get_user+0x2bbc/0x43e0 [ 156.534935][ T6887] ? tun_get_user+0x2787/0x43e0 [ 156.534966][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.534988][ T6887] ? aa_file_perm+0x50e/0x15e0 [ 156.535006][ T6887] ? __pfx_tun_get_user+0x10/0x10 [ 156.535026][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.535056][ T6887] ? __lock_acquire+0x6b5/0x2cf0 [ 156.535101][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.535132][ T6887] ? ref_tracker_alloc+0x35c/0x4c0 [ 156.535157][ T6887] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 156.535180][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.535204][ T6887] ? tun_get+0x1c/0x2f0 [ 156.535223][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.535247][ T6887] ? tun_get+0x1c/0x2f0 [ 156.535264][ T6887] ? tun_get+0x1c/0x2f0 [ 156.535281][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.535309][ T6887] tun_chr_write_iter+0x113/0x200 [ 156.535341][ T6887] vfs_write+0x61d/0xb90 [ 156.535376][ T6887] ? __pfx_vfs_write+0x10/0x10 [ 156.535414][ T6887] ? __fget_files+0x2a/0x420 [ 156.535440][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 156.535466][ T6887] ksys_write+0x150/0x270 [ 156.535496][ T6887] ? __pfx_ksys_write+0x10/0x10 [ 156.535531][ T6887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.535552][ T6887] do_syscall_64+0x174/0x580 [ 156.535571][ T6887] ? trace_irq_disable+0x3b/0x140 [ 156.535605][ T6887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.535624][ T6887] RIP: 0033:0x7fa8dfb5d68e [ 156.535640][ T6887] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.535656][ T6887] RSP: 002b:00007fa8e0b0ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 156.535674][ T6887] RAX: ffffffffffffffda RBX: 00007fa8e0b106c0 RCX: 00007fa8dfb5d68e [ 156.535688][ T6887] RDX: 000000000000003e RSI: 00002000000002c0 RDI: 00000000000000c8 [ 156.535699][ T6887] RBP: 00007fa8e0b10090 R08: 0000000000000000 R09: 0000000000000000 [ 156.535711][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.535722][ T6887] R13: 00007fa8dfe16038 R14: 00007fa8dfe15fa0 R15: 00007fff30ba67f8 [ 156.535751][ T6887] [ 156.538449][ T5760] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 156.564915][ T6868] loop0: detected capacity change from 0 to 4096 [ 157.063060][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.084041][ T6868] NILFS (loop0): invalid segment: Checksum error in segment payload [ 157.092137][ T6868] NILFS (loop0): trying rollback from an earlier position [ 157.178875][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.335866][ T5760] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 157.735294][ T6868] NILFS (loop0): recovery complete [ 157.752076][ T6892] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.770244][ T5760] usb 5-1: USB disconnect, device number 6 [ 157.880276][ T6893] /dev/loop0: Can't open blockdev [ 157.915357][ T6893] comedi comedi4: comedi_config --init_data is deprecated [ 158.560872][ T5642] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.933203][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.213'. [ 158.936725][ T5774] usb 3-1: USB disconnect, device number 9 [ 159.355148][ T6914] 9pnet_fd: Insufficient options for proto=fd [ 159.380273][ T5774] net_ratelimit: 2 callbacks suppressed [ 159.380298][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.549595][ T5857] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 159.739413][ T5857] usb 4-1: Using ep0 maxpacket: 8 [ 159.822465][ T5857] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 159.880894][ T5857] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.943043][ T5636] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 159.954472][ T5636] Bluetooth: hci2: Injecting HCI hardware error event [ 159.970751][ T5636] Bluetooth: hci2: hardware error 0x00 [ 159.989864][ T5857] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.054197][ T5857] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.079219][ T5857] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.093863][ T5857] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.103399][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.189900][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.419534][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.466067][ T5857] usb 4-1: GET_CAPABILITIES returned 0 [ 160.471812][ T5857] usbtmc 4-1:16.0: can't read capabilities [ 160.696981][ T5857] usb 4-1: USB disconnect, device number 2 [ 160.819534][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.828567][ T5782] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 161.009766][ T5782] usb 1-1: Using ep0 maxpacket: 16 [ 161.048358][ T5782] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 253 [ 161.063855][ T5782] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 161.078355][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.087498][ T5782] usb 1-1: Product: syz [ 161.091969][ T5782] usb 1-1: Manufacturer: syz [ 161.096621][ T5782] usb 1-1: SerialNumber: syz [ 161.104820][ T5782] usb 1-1: config 0 descriptor?? [ 161.112240][ T6926] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 161.132142][ T6898] loop5: detected capacity change from 0 to 32768 [ 161.152298][ T5782] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 161.228630][ T6898] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.403547][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 161.452395][ T6898] XFS (loop5): Ending clean mount [ 161.484410][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.504172][ T6926] loop0: detected capacity change from 0 to 1764 [ 161.538497][ T6898] XFS (loop5): Quotacheck needed: Please wait. [ 161.556918][ T6926] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 161.594098][ T6926] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 161.645316][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 161.645794][ T5795] usb 1-1: USB disconnect, device number 5 [ 161.651476][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 161.762710][ T5795] mcba_usb 1-1:0.0 can0: device disconnected [ 161.795846][ T6898] XFS (loop5): Quotacheck: Done. [ 162.096693][ T5642] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 162.448073][ T5636] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 162.549919][ T6966] FAULT_INJECTION: forcing a failure. [ 162.549919][ T6966] name failslab, interval 1, probability 0, space 0, times 0 [ 162.562579][ T6966] CPU: 1 UID: 0 PID: 6966 Comm: syz.4.231 Not tainted syzkaller #0 PREEMPT(full) [ 162.562607][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.562622][ T6966] Call Trace: [ 162.562632][ T6966] [ 162.562642][ T6966] dump_stack_lvl+0xe8/0x150 [ 162.562675][ T6966] should_fail_ex+0x412/0x560 [ 162.562704][ T6966] ? __d_alloc+0x37/0x6f0 [ 162.562740][ T6966] should_failslab+0xa8/0x100 [ 162.562768][ T6966] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 162.562804][ T6966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.562835][ T6966] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 162.562873][ T6966] __d_alloc+0x37/0x6f0 [ 162.562915][ T6966] d_alloc_pseudo+0x21/0xc0 [ 162.562953][ T6966] alloc_file_pseudo+0xdd/0x240 [ 162.562989][ T6966] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 162.563021][ T6966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.563050][ T6966] ? rcu_is_watching+0x15/0xb0 [ 162.563081][ T6966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.563111][ T6966] ? hugetlbfs_get_inode+0x432/0x650 [ 162.563141][ T6966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 162.563176][ T6966] hugetlb_file_setup+0x3ee/0x630 [ 162.563206][ T6966] ksys_mmap_pgoff+0x22e/0x760 [ 162.563244][ T6966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.563271][ T6966] do_syscall_64+0x174/0x580 [ 162.563302][ T6966] ? trace_irq_disable+0x3b/0x140 [ 162.563348][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.563374][ T6966] RIP: 0033:0x7fa8dfb9ce59 [ 162.563395][ T6966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.563416][ T6966] RSP: 002b:00007fa8e0ace028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 162.563442][ T6966] RAX: ffffffffffffffda RBX: 00007fa8dfe16180 RCX: 00007fa8dfb9ce59 [ 162.563461][ T6966] RDX: 0000000006000003 RSI: 0000000000800000 RDI: 0000200000800000 [ 162.563478][ T6966] RBP: 00007fa8e0ace090 R08: ffffffffffffffff R09: 0000000000000000 [ 162.563496][ T6966] R10: 0000000000042031 R11: 0000000000000246 R12: 0000000000000001 [ 162.563512][ T6966] R13: 00007fa8dfe16218 R14: 00007fa8dfe16180 R15: 00007fff30ba67f8 [ 162.563550][ T6966] [ 162.893544][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.043583][ T6967] Invalid argument reading file caps for ./file0 [ 163.904991][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.939773][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.715805][ T5795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.801530][ T6982] loop2: detected capacity change from 0 to 512 [ 164.818742][ T6979] loop0: detected capacity change from 0 to 4096 [ 164.899409][ T6982] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 164.921993][ T6979] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 164.964158][ T6983] FAULT_INJECTION: forcing a failure. [ 164.964158][ T6983] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 164.980347][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.023455][ T6982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.041824][ T6982] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.186880][ T6983] CPU: 1 UID: 0 PID: 6983 Comm: syz.1.230 Not tainted syzkaller #0 PREEMPT(full) [ 165.186917][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.186933][ T6983] Call Trace: [ 165.186943][ T6983] [ 165.186953][ T6983] dump_stack_lvl+0xe8/0x150 [ 165.186988][ T6983] should_fail_ex+0x412/0x560 [ 165.187024][ T6983] _copy_from_user+0x2d/0xb0 [ 165.187059][ T6983] kstrtouint_from_user+0xd6/0x180 [ 165.187096][ T6983] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 165.187143][ T6983] proc_fail_nth_write+0x8e/0x210 [ 165.187179][ T6983] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 165.187218][ T6983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.187249][ T6983] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 165.187286][ T6983] vfs_write+0x29a/0xb90 [ 165.187335][ T6983] ? __pfx_vfs_write+0x10/0x10 [ 165.187376][ T6983] ? __fget_files+0x2a/0x420 [ 165.187414][ T6983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.187444][ T6983] ? __fget_files+0x3a0/0x420 [ 165.187474][ T6983] ? __fget_files+0x2a/0x420 [ 165.187511][ T6983] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.187546][ T6983] ksys_write+0x150/0x270 [ 165.187588][ T6983] ? __pfx_ksys_write+0x10/0x10 [ 165.187636][ T6983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.187664][ T6983] do_syscall_64+0x174/0x580 [ 165.187691][ T6983] ? trace_irq_disable+0x3b/0x140 [ 165.187736][ T6983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.187762][ T6983] RIP: 0033:0x7ff42035d68e [ 165.187785][ T6983] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 165.187813][ T6983] RSP: 002b:00007ff4212f3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.187839][ T6983] RAX: ffffffffffffffda RBX: 00007ff4212f46c0 RCX: 00007ff42035d68e [ 165.187858][ T6983] RDX: 0000000000000001 RSI: 00007ff4212f40a0 RDI: 0000000000000004 [ 165.187875][ T6983] RBP: 00007ff4212f4090 R08: 0000000000000000 R09: 0000000000000000 [ 165.187891][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.187907][ T6983] R13: 00007ff420616128 R14: 00007ff420616090 R15: 00007ffdfd98b978 [ 165.187947][ T6983] [ 166.073562][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.155471][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.184477][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.216927][ T6979] ntfs3(loop0): Failed to read $AttrDef (-4). [ 167.366457][ T6982] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.236: iget: bad i_size value: 2533274857506816 [ 168.268130][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.321425][ T5644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.494689][ T7018] Illegal XDP return value 4294967274 on prog (id 21) dev syz_tun, expect packet loss! [ 168.505983][ T7015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.242'. [ 168.738965][ T7021] loop5: detected capacity change from 0 to 2048 [ 168.813580][ T7021] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.824756][ T7027] FAULT_INJECTION: forcing a failure. [ 168.824756][ T7027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.913281][ T7031] fuse: Unknown parameter '0x0000000000000006' [ 169.783930][ T7027] CPU: 0 UID: 0 PID: 7027 Comm: syz.3.248 Not tainted syzkaller #0 PREEMPT(full) [ 169.783967][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 169.783983][ T7027] Call Trace: [ 169.783993][ T7027] [ 169.784004][ T7027] dump_stack_lvl+0xe8/0x150 [ 169.784038][ T7027] should_fail_ex+0x412/0x560 [ 169.784074][ T7027] _copy_to_user+0x31/0xb0 [ 169.784110][ T7027] simple_read_from_buffer+0xe1/0x170 [ 169.784151][ T7027] proc_fail_nth_read+0x1bb/0x230 [ 169.784185][ T7027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.784221][ T7027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.784264][ T7027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.784301][ T7027] ? rw_verify_area+0x2a6/0x4d0 [ 169.784339][ T7027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.784377][ T7027] vfs_read+0x20c/0xa70 [ 169.784421][ T7027] ? __pfx___mutex_lock+0x10/0x10 [ 169.784452][ T7027] ? __pfx_vfs_read+0x10/0x10 [ 169.784492][ T7027] ? __fget_files+0x2a/0x420 [ 169.784530][ T7027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.784560][ T7027] ? __fget_files+0x3a0/0x420 [ 169.784592][ T7027] ? __fget_files+0x2a/0x420 [ 169.784629][ T7027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 169.784665][ T7027] ksys_read+0x150/0x270 [ 169.784707][ T7027] ? __pfx_ksys_read+0x10/0x10 [ 169.784756][ T7027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.784784][ T7027] do_syscall_64+0x174/0x580 [ 169.784811][ T7027] ? trace_irq_disable+0x3b/0x140 [ 169.784859][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.784885][ T7027] RIP: 0033:0x7f215755d68e [ 169.784908][ T7027] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.784930][ T7027] RSP: 002b:00007f215853dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.784957][ T7027] RAX: ffffffffffffffda RBX: 00007f215853e6c0 RCX: 00007f215755d68e [ 169.784976][ T7027] RDX: 000000000000000f RSI: 00007f215853e0a0 RDI: 0000000000000004 [ 169.784993][ T7027] RBP: 00007f215853e090 R08: 0000000000000000 R09: 0000000000000000 [ 169.785010][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.785026][ T7027] R13: 00007f2157816038 R14: 00007f2157815fa0 R15: 00007ffd784b9a68 [ 169.785065][ T7027] [ 170.010534][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.134409][ T7040] loop0: detected capacity change from 0 to 164 [ 170.269802][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.497103][ T7040] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 170.707707][ T7040] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 170.770063][ T7040] rock: directory entry would overflow storage [ 170.804503][ T7040] rock: sig=0x4f50, size=4, remaining=3 [ 170.807173][ T7031] Process accounting resumed [ 170.847584][ T7040] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 170.912586][ T7051] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 171.059852][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.895412][ T7051] rock: directory entry would overflow storage [ 172.198075][ T7051] rock: sig=0x4f50, size=4, remaining=3 [ 172.200175][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.262505][ T7051] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 172.348592][ T7040] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 172.356880][ T7040] rock: directory entry would overflow storage [ 172.399251][ T7040] rock: sig=0x4f50, size=4, remaining=3 [ 172.459197][ T7040] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 172.520861][ T7070] loop2: detected capacity change from 0 to 1024 [ 172.565084][ T7070] EXT4-fs: Ignoring removed bh option [ 172.595615][ T7070] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 172.731974][ T7070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.069456][ T7085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.256'. [ 173.224098][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.299424][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.302253][ T7088] tipc: Started in network mode [ 173.346918][ T7088] tipc: Node identity ac14140f, cluster identity 4711 [ 173.455980][ T31] audit: type=1800 audit(1780749843.813:105): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.256" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 173.597767][ T7088] tipc: New replicast peer: 172.30.0.2 [ 173.658677][ T7088] tipc: Enabled bearer , priority 10 [ 174.081119][ T5782] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 174.304610][ T7105] loop1: detected capacity change from 0 to 1024 [ 174.320188][ T7105] EXT4-fs: Ignoring removed orlov option [ 174.335868][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.753999][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.781347][ T7105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.832613][ T31] audit: type=1800 audit(1780749845.193:106): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.263" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=11 res=0 errno=0 [ 174.885803][ T55] tipc: Node number set to 2886997007 [ 174.913783][ T5782] usb 4-1: Using ep0 maxpacket: 32 [ 174.931085][ T5644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.954245][ T5782] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.981536][ T5782] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.069419][ T7113] capability: warning: `syz.0.264' uses 32-bit capabilities (legacy support in use) [ 175.130208][ T5782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 175.146732][ T5782] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.166491][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.182278][ T5782] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 175.211871][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.236299][ T5782] usb 4-1: Product: syz [ 175.246290][ T5782] usb 4-1: Manufacturer: syz [ 175.252687][ T5782] usb 4-1: SerialNumber: syz [ 175.307806][ T5782] usb 4-1: config 0 descriptor?? [ 175.364386][ T5782] usb 4-1: no audio or video endpoints found [ 175.431172][ T7118] loop4: detected capacity change from 0 to 2048 [ 175.463772][ T7121] loop1: detected capacity change from 0 to 164 [ 175.511013][ T7118] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.514563][ T7121] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 175.732006][ T7128] loop0: detected capacity change from 0 to 128 [ 175.748420][ T7121] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 175.778756][ T7128] hpfs: Unknown parameter 'chk' [ 175.785193][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.808202][ T7121] rock: directory entry would overflow storage [ 175.831537][ T7121] rock: sig=0x4f50, size=4, remaining=3 [ 175.873570][ T7121] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 175.921534][ T7130] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 175.949402][ T7130] rock: directory entry would overflow storage [ 175.999865][ T7130] rock: sig=0x4f50, size=4, remaining=3 [ 176.033190][ T7130] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 176.055754][ T7134] loop2: detected capacity change from 0 to 164 [ 176.247010][ T7134] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 176.593103][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.621680][ T7129] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 176.638665][ T7134] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 176.659879][ T7129] rock: directory entry would overflow storage [ 176.670426][ T7134] rock: directory entry would overflow storage [ 176.696798][ T7134] rock: sig=0x4f50, size=4, remaining=3 [ 176.706478][ T7129] rock: sig=0x4f50, size=4, remaining=3 [ 176.724482][ T7134] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 176.736519][ T7129] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 176.767285][ T7134] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 176.821198][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.843758][ T7134] rock: directory entry would overflow storage [ 176.882356][ T7134] rock: sig=0x4f50, size=4, remaining=3 [ 176.908643][ T7134] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 176.943112][ T7140] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 176.978650][ T7140] rock: directory entry would overflow storage [ 176.991705][ T7140] rock: sig=0x4f50, size=4, remaining=3 [ 177.035751][ T7140] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 177.070476][ T7143] FAULT_INJECTION: forcing a failure. [ 177.070476][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 177.239658][ T7143] CPU: 0 UID: 0 PID: 7143 Comm: syz.1.273 Not tainted syzkaller #0 PREEMPT(full) [ 177.239692][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.239708][ T7143] Call Trace: [ 177.239718][ T7143] [ 177.239728][ T7143] dump_stack_lvl+0xe8/0x150 [ 177.239763][ T7143] should_fail_ex+0x412/0x560 [ 177.239805][ T7143] should_failslab+0xa8/0x100 [ 177.239830][ T7143] ? do_getname+0x2e/0x250 [ 177.239859][ T7143] kmem_cache_alloc_noprof+0x87/0x650 [ 177.239906][ T7143] do_getname+0x2e/0x250 [ 177.239932][ T7143] ? user_path_at+0x1e/0x160 [ 177.239971][ T7143] user_path_at+0x2a/0x160 [ 177.240011][ T7143] __se_sys_mount+0x2dc/0x420 [ 177.240055][ T7143] ? __pfx___se_sys_mount+0x10/0x10 [ 177.240094][ T7143] ? srso_alias_return_thunk+0x5/0xfbef5 [ 177.240125][ T7143] ? __x64_sys_mount+0x20/0xc0 [ 177.240157][ T7143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.240185][ T7143] do_syscall_64+0x174/0x580 [ 177.240212][ T7143] ? trace_irq_disable+0x3b/0x140 [ 177.240259][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.240286][ T7143] RIP: 0033:0x7ff42039ce59 [ 177.240307][ T7143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.240329][ T7143] RSP: 002b:00007ff421315028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 177.240356][ T7143] RAX: ffffffffffffffda RBX: 00007ff420615fa0 RCX: 00007ff42039ce59 [ 177.240375][ T7143] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 177.240393][ T7143] RBP: 00007ff421315090 R08: 0000200000000300 R09: 0000000000000000 [ 177.240410][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.240426][ T7143] R13: 00007ff420616038 R14: 00007ff420615fa0 R15: 00007ffdfd98b978 [ 177.240465][ T7143] [ 177.429671][ T7145] loop4: detected capacity change from 0 to 32768 [ 177.437085][ T7145] btrfs: Deprecated parameter 'usebackuproot' [ 177.443202][ T7145] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 177.510438][ T7128] loop0: detected capacity change from 0 to 32768 [ 177.541400][ T7145] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.272 (7145) [ 177.557852][ T7145] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.569335][ T7145] BTRFS info (device loop4): using crc32c checksum algorithm [ 177.606174][ T7128] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 3e230fff-47de-498d-8c65-16de84437daa [ 177.641726][ T7128] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.269 (7128) [ 177.691640][ T7128] BTRFS info (device loop0 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.705081][ T7128] BTRFS info (device loop0 state S): using crc32c checksum algorithm [ 177.705391][ T49] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 177.781168][ T7145] BTRFS error (device loop4): failed to load root extent [ 177.788257][ T7145] BTRFS warning (device loop4): try to load backup roots slot 1 [ 177.802056][ T49] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 177.854667][ T1159] BTRFS warning (device loop0 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xc94f3716 level 0, ignored [ 177.859946][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.907118][ T7145] BTRFS warning (device loop4): couldn't read tree root [ 177.918622][ T7145] BTRFS warning (device loop4): try to load backup roots slot 2 [ 177.928536][ T6774] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 178.216337][ T7176] loop1: detected capacity change from 0 to 32768 [ 178.224172][ T7176] btrfs: Deprecated parameter 'usebackuproot' [ 178.230283][ T7176] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 178.272463][ T7176] BTRFS info: device /dev/loop1 (7:1) using temp-fsid c2f6befe-f76e-401c-81d3-7935e351ccbb [ 178.283405][ T7176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.276 (7176) [ 178.299637][ T7176] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.309755][ T7176] BTRFS info (device loop1): using crc32c checksum algorithm [ 178.328070][ T7145] BTRFS warning (device loop4): couldn't read tree root [ 178.336254][ T7128] BTRFS error (device loop0 state ES): failed to find fsid 00fe44da-de57-406a-8241-57ec7d4412cf when attempting to open seed devices [ 178.336316][ T7128] BTRFS error (device loop0 state ES): failed to read chunk tree: -2 [ 178.359545][ T7145] BTRFS warning (device loop4): try to load backup roots slot 3 [ 178.595593][ T7145] BTRFS info (device loop4): rebuilding free space tree [ 178.615207][ T49] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 178.816092][ T7145] BTRFS info (device loop4): checking UUID tree [ 178.848528][ T7145] BTRFS info (device loop4): enabling ssd optimizations [ 178.855594][ T7145] BTRFS info (device loop4): turning on async discard [ 178.862479][ T7145] BTRFS info (device loop4): enabling free space tree [ 178.869331][ T7145] BTRFS info (device loop4): force clearing of disk cache [ 178.876540][ T7145] BTRFS info (device loop4): enabling auto defrag [ 178.882103][ T7128] BTRFS error (device loop0 state ES): open_ctree failed: -2 [ 178.883289][ T7145] BTRFS info (device loop4): trying to use backup root at mount time [ 178.883319][ T7145] BTRFS info (device loop4): use zstd compression, level 3 [ 178.907204][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.979613][ T7176] BTRFS error (device loop1): failed to load root extent [ 178.986678][ T7176] BTRFS warning (device loop1): try to load backup roots slot 1 [ 179.015485][ T49] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 179.245378][ T7176] BTRFS warning (device loop1): couldn't read tree root [ 179.252476][ T7176] BTRFS warning (device loop1): try to load backup roots slot 2 [ 179.260539][ T59] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 179.271003][ T7176] BTRFS warning (device loop1): couldn't read tree root [ 179.277963][ T7176] BTRFS warning (device loop1): try to load backup roots slot 3 [ 179.309079][ T7176] BTRFS info (device loop1): rebuilding free space tree [ 179.341962][ T7176] BTRFS info (device loop1): checking UUID tree [ 179.946019][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.050749][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.060389][ T7176] BTRFS info (device loop1): enabling ssd optimizations [ 180.067412][ T7176] BTRFS info (device loop1): turning on async discard [ 180.074269][ T7176] BTRFS info (device loop1): enabling free space tree [ 180.081133][ T7176] BTRFS info (device loop1): force clearing of disk cache [ 180.088380][ T7176] BTRFS info (device loop1): enabling auto defrag [ 180.094927][ T7176] BTRFS info (device loop1): trying to use backup root at mount time [ 180.103112][ T7176] BTRFS info (device loop1): use zstd compression, level 3 [ 181.155406][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.367683][ T7212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.380619][ T5630] BTRFS info (device loop1): last unmount of filesystem c2f6befe-f76e-401c-81d3-7935e351ccbb [ 181.475666][ T5639] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.502498][ T5760] usb 4-1: USB disconnect, device number 3 [ 181.519686][ T7218] BUG: Bad page state in process syz.0.279 pfn:7738f [ 181.526512][ T7218] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7738f [ 181.536620][ T7218] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 181.543782][ T7218] raw: 00fff00000000000 dead000000000040 ffff88801af3b000 0000000000000000 [ 181.552423][ T7218] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 181.561037][ T7218] page dumped because: page_pool leak [ 181.566400][ T7218] page_owner tracks the page as allocated [ 181.572595][ T7218] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7218, tgid 7214 (syz.0.279), ts 181519554489, free_ts 181191011435 [ 181.589568][ T7218] post_alloc_hook+0x22d/0x280 [ 181.594350][ T7218] get_page_from_freelist+0x2593/0x2610 [ 181.599958][ T7218] __alloc_frozen_pages_noprof+0x18d/0x380 [ 181.605784][ T7218] __alloc_pages_noprof+0x10/0x100 [ 181.610947][ T7218] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 181.616425][ T7218] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 181.622536][ T7218] skb_pp_cow_data+0xc91/0x19b0 [ 181.627404][ T7218] do_xdp_generic+0x76b/0x12e0 [ 181.632209][ T7218] tun_get_user+0x24ca/0x43e0 [ 181.636892][ T7218] tun_chr_write_iter+0x113/0x200 [ 181.641970][ T7218] vfs_write+0x61d/0xb90 [ 181.646235][ T7218] ksys_write+0x150/0x270 [ 181.650631][ T7218] do_syscall_64+0x174/0x580 [ 181.655229][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.661163][ T7218] page last free pid 23 tgid 23 stack trace: [ 181.667137][ T7218] __free_frozen_pages+0xc1c/0xd30 [ 181.672301][ T7218] tlb_remove_table_rcu+0x85/0x100 [ 181.677446][ T7218] rcu_core+0x7cd/0x1070 [ 181.681767][ T7218] handle_softirqs+0x22a/0x840 [ 181.686544][ T7218] run_ksoftirqd+0x36/0x60 [ 181.691020][ T7218] smpboot_thread_fn+0x541/0xa50 [ 181.695971][ T7218] kthread+0x389/0x470 [ 181.700101][ T7218] ret_from_fork+0x514/0xb70 [ 181.704699][ T7218] ret_from_fork_asm+0x1a/0x30 [ 181.709530][ T7218] Modules linked in: [ 181.713438][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.279 Not tainted syzkaller #0 PREEMPT(full) [ 181.713468][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 181.713484][ T7218] Call Trace: [ 181.713494][ T7218] [ 181.713503][ T7218] dump_stack_lvl+0xe8/0x150 [ 181.713534][ T7218] bad_page+0x17f/0x1c0 [ 181.713568][ T7218] __free_frozen_pages+0xcd9/0xd30 [ 181.713612][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.713649][ T7218] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 181.713705][ T7218] bpf_xdp_adjust_tail+0x1d6/0x220 [ 181.713754][ T7218] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 181.713780][ T7218] bpf_prog_run_generic_xdp+0x603/0x1490 [ 181.713844][ T7218] do_xdp_generic+0xac5/0x12e0 [ 181.713882][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.713912][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 181.713952][ T7218] ? __pfx_do_xdp_generic+0x10/0x10 [ 181.713996][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.714043][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.714076][ T7218] ? tun_get_user+0x2394/0x43e0 [ 181.714103][ T7218] tun_get_user+0x24ca/0x43e0 [ 181.714143][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.714177][ T7218] ? aa_file_perm+0x192/0x15e0 [ 181.714207][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.714237][ T7218] ? aa_file_perm+0x50e/0x15e0 [ 181.714262][ T7218] ? __pfx_tun_get_user+0x10/0x10 [ 181.714290][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 181.714323][ T7218] ? __pfx_file_ioctl+0x10/0x10 [ 181.714372][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.714403][ T7218] ? ref_tracker_alloc+0x35c/0x4c0 [ 181.714437][ T7218] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 181.714470][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.714504][ T7218] ? tun_get+0x1c/0x2f0 [ 181.714530][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.714564][ T7218] ? tun_get+0x1c/0x2f0 [ 181.714588][ T7218] ? tun_get+0x1c/0x2f0 [ 181.714612][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.714647][ T7218] tun_chr_write_iter+0x113/0x200 [ 181.714695][ T7218] vfs_write+0x61d/0xb90 [ 181.714744][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 181.714796][ T7218] ? __fget_files+0x2a/0x420 [ 181.714834][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.714877][ T7218] ksys_write+0x150/0x270 [ 181.714920][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 181.714958][ T7218] ? __pfx_kcov_ioctl+0x10/0x10 [ 181.715004][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.715032][ T7218] do_syscall_64+0x174/0x580 [ 181.715059][ T7218] ? trace_irq_disable+0x3b/0x140 [ 181.715105][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.715131][ T7218] RIP: 0033:0x7fe2c3b5d68e [ 181.715153][ T7218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 181.715175][ T7218] RSP: 002b:00007fe2c1df5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 181.715200][ T7218] RAX: ffffffffffffffda RBX: 00007fe2c1df66c0 RCX: 00007fe2c3b5d68e [ 181.715220][ T7218] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 181.715237][ T7218] RBP: 00007fe2c3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 181.715253][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.715268][ T7218] R13: 00007fe2c3e16128 R14: 00007fe2c3e16090 R15: 00007fff8baefc88 [ 181.715308][ T7218] [ 181.715317][ T7218] Disabling lock debugging due to kernel taint [ 182.045929][ T7218] BUG: Bad page state in process syz.0.279 pfn:2819a [ 182.052731][ T7218] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802819a140 pfn:0x2819a [ 182.062824][ T7218] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 182.069971][ T7218] raw: 00fff00000000000 dead000000000040 ffff88801af3b000 0000000000000000 [ 182.078553][ T7218] raw: ffff88802819a140 0000000000000001 00000000ffffffff 0000000000000000 [ 182.087161][ T7218] page dumped because: page_pool leak [ 182.092545][ T7218] page_owner tracks the page as allocated [ 182.098251][ T7218] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7218, tgid 7214 (syz.0.279), ts 181519536809, free_ts 181191043085 [ 182.115215][ T7218] post_alloc_hook+0x22d/0x280 [ 182.120019][ T7218] get_page_from_freelist+0x2593/0x2610 [ 182.125581][ T7218] __alloc_frozen_pages_noprof+0x18d/0x380 [ 182.131432][ T7218] __alloc_pages_noprof+0x10/0x100 [ 182.136560][ T7218] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 182.142060][ T7218] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 182.148134][ T7218] skb_pp_cow_data+0xc91/0x19b0 [ 182.153031][ T7218] do_xdp_generic+0x76b/0x12e0 [ 182.157804][ T7218] tun_get_user+0x24ca/0x43e0 [ 182.162523][ T7218] tun_chr_write_iter+0x113/0x200 [ 182.167568][ T7218] vfs_write+0x61d/0xb90 [ 182.171864][ T7218] ksys_write+0x150/0x270 [ 182.176212][ T7218] do_syscall_64+0x174/0x580 [ 182.180844][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.186739][ T7218] page last free pid 23 tgid 23 stack trace: [ 182.192743][ T7218] __free_frozen_pages+0xc1c/0xd30 [ 182.197874][ T7218] tlb_remove_table_rcu+0x85/0x100 [ 182.203044][ T7218] rcu_core+0x7cd/0x1070 [ 182.207300][ T7218] handle_softirqs+0x22a/0x840 [ 182.212111][ T7218] run_ksoftirqd+0x36/0x60 [ 182.216535][ T7218] smpboot_thread_fn+0x541/0xa50 [ 182.221514][ T7218] kthread+0x389/0x470 [ 182.225592][ T7218] ret_from_fork+0x514/0xb70 [ 182.230222][ T7218] ret_from_fork_asm+0x1a/0x30 [ 182.234991][ T7218] Modules linked in: [ 182.238887][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.279 Tainted: G B syzkaller #0 PREEMPT(full) [ 182.238922][ T7218] Tainted: [B]=BAD_PAGE [ 182.238931][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 182.238946][ T7218] Call Trace: [ 182.238954][ T7218] [ 182.238964][ T7218] dump_stack_lvl+0xe8/0x150 [ 182.238992][ T7218] bad_page+0x17f/0x1c0 [ 182.239023][ T7218] __free_frozen_pages+0xcd9/0xd30 [ 182.239062][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.239096][ T7218] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 182.239147][ T7218] bpf_xdp_adjust_tail+0x1d6/0x220 [ 182.239192][ T7218] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 182.239215][ T7218] bpf_prog_run_generic_xdp+0x603/0x1490 [ 182.239263][ T7218] do_xdp_generic+0xac5/0x12e0 [ 182.239292][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.239328][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 182.239361][ T7218] ? __pfx_do_xdp_generic+0x10/0x10 [ 182.239398][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.239437][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.239468][ T7218] ? tun_get_user+0x2394/0x43e0 [ 182.239493][ T7218] tun_get_user+0x24ca/0x43e0 [ 182.239526][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.239558][ T7218] ? aa_file_perm+0x192/0x15e0 [ 182.239585][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.239615][ T7218] ? aa_file_perm+0x50e/0x15e0 [ 182.239638][ T7218] ? __pfx_tun_get_user+0x10/0x10 [ 182.239664][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 182.239694][ T7218] ? __pfx_file_ioctl+0x10/0x10 [ 182.239739][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.239770][ T7218] ? ref_tracker_alloc+0x35c/0x4c0 [ 182.239803][ T7218] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 182.239835][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.239868][ T7218] ? tun_get+0x1c/0x2f0 [ 182.239892][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.239925][ T7218] ? tun_get+0x1c/0x2f0 [ 182.239947][ T7218] ? tun_get+0x1c/0x2f0 [ 182.239969][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.240001][ T7218] tun_chr_write_iter+0x113/0x200 [ 182.240045][ T7218] vfs_write+0x61d/0xb90 [ 182.240087][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 182.240131][ T7218] ? __fget_files+0x2a/0x420 [ 182.240164][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.240197][ T7218] ksys_write+0x150/0x270 [ 182.240236][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 182.240273][ T7218] ? __pfx_kcov_ioctl+0x10/0x10 [ 182.240321][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.240348][ T7218] do_syscall_64+0x174/0x580 [ 182.240374][ T7218] ? trace_irq_disable+0x3b/0x140 [ 182.240416][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.240442][ T7218] RIP: 0033:0x7fe2c3b5d68e [ 182.240462][ T7218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.240484][ T7218] RSP: 002b:00007fe2c1df5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.240509][ T7218] RAX: ffffffffffffffda RBX: 00007fe2c1df66c0 RCX: 00007fe2c3b5d68e [ 182.240528][ T7218] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 182.240545][ T7218] RBP: 00007fe2c3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 182.240562][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.240577][ T7218] R13: 00007fe2c3e16128 R14: 00007fe2c3e16090 R15: 00007fff8baefc88 [ 182.240607][ T7218] [ 182.568727][ T7218] BUG: Bad page state in process syz.0.279 pfn:49ce1 [ 182.575506][ T7218] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffff00000000 pfn:0x49ce1 [ 182.585594][ T7218] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 182.592733][ T7218] raw: 00fff00000000000 dead000000000040 ffff88801af3b000 0000000000000000 [ 182.601357][ T7218] raw: ffffffff00000000 0000000000000001 00000000ffffffff 0000000000000000 [ 182.609971][ T7218] page dumped because: page_pool leak [ 182.615348][ T7218] page_owner tracks the page as allocated [ 182.621084][ T7218] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7218, tgid 7214 (syz.0.279), ts 181519520108, free_ts 181191063585 [ 182.638050][ T7218] post_alloc_hook+0x22d/0x280 [ 182.642849][ T7218] get_page_from_freelist+0x2593/0x2610 [ 182.648408][ T7218] __alloc_frozen_pages_noprof+0x18d/0x380 [ 182.654242][ T7218] __alloc_pages_noprof+0x10/0x100 [ 182.659410][ T7218] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 182.664865][ T7218] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 182.670954][ T7218] skb_pp_cow_data+0xc91/0x19b0 [ 182.675817][ T7218] do_xdp_generic+0x76b/0x12e0 [ 182.680601][ T7218] tun_get_user+0x24ca/0x43e0 [ 182.685275][ T7218] tun_chr_write_iter+0x113/0x200 [ 182.690360][ T7218] vfs_write+0x61d/0xb90 [ 182.694624][ T7218] ksys_write+0x150/0x270 [ 182.698948][ T7218] do_syscall_64+0x174/0x580 [ 182.703565][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.709479][ T7218] page last free pid 23 tgid 23 stack trace: [ 182.715436][ T7218] __free_frozen_pages+0xc1c/0xd30 [ 182.720586][ T7218] tlb_remove_table_rcu+0x85/0x100 [ 182.725711][ T7218] rcu_core+0x7cd/0x1070 [ 182.729968][ T7218] handle_softirqs+0x22a/0x840 [ 182.734742][ T7218] run_ksoftirqd+0x36/0x60 [ 182.739176][ T7218] smpboot_thread_fn+0x541/0xa50 [ 182.744116][ T7218] kthread+0x389/0x470 [ 182.748186][ T7218] ret_from_fork+0x514/0xb70 [ 182.752787][ T7218] ret_from_fork_asm+0x1a/0x30 [ 182.757559][ T7218] Modules linked in: [ 182.761483][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.279 Tainted: G B syzkaller #0 PREEMPT(full) [ 182.761520][ T7218] Tainted: [B]=BAD_PAGE [ 182.761530][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 182.761545][ T7218] Call Trace: [ 182.761557][ T7218] [ 182.761566][ T7218] dump_stack_lvl+0xe8/0x150 [ 182.761592][ T7218] bad_page+0x17f/0x1c0 [ 182.761619][ T7218] __free_frozen_pages+0xcd9/0xd30 [ 182.761654][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.761685][ T7218] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 182.761723][ T7218] bpf_xdp_adjust_tail+0x1d6/0x220 [ 182.761763][ T7218] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 182.761783][ T7218] bpf_prog_run_generic_xdp+0x603/0x1490 [ 182.761831][ T7218] do_xdp_generic+0xac5/0x12e0 [ 182.761857][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.761884][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 182.761913][ T7218] ? __pfx_do_xdp_generic+0x10/0x10 [ 182.761946][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.761980][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.762009][ T7218] ? tun_get_user+0x2394/0x43e0 [ 182.762030][ T7218] tun_get_user+0x24ca/0x43e0 [ 182.762058][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.762086][ T7218] ? aa_file_perm+0x192/0x15e0 [ 182.762110][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.762137][ T7218] ? aa_file_perm+0x50e/0x15e0 [ 182.762158][ T7218] ? __pfx_tun_get_user+0x10/0x10 [ 182.762181][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 182.762206][ T7218] ? __pfx_file_ioctl+0x10/0x10 [ 182.762246][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.762273][ T7218] ? ref_tracker_alloc+0x35c/0x4c0 [ 182.762302][ T7218] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 182.762329][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.762358][ T7218] ? tun_get+0x1c/0x2f0 [ 182.762379][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.762407][ T7218] ? tun_get+0x1c/0x2f0 [ 182.762427][ T7218] ? tun_get+0x1c/0x2f0 [ 182.762446][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.762476][ T7218] tun_chr_write_iter+0x113/0x200 [ 182.762515][ T7218] vfs_write+0x61d/0xb90 [ 182.762555][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 182.762595][ T7218] ? __fget_files+0x2a/0x420 [ 182.762626][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 182.762655][ T7218] ksys_write+0x150/0x270 [ 182.762690][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 182.762723][ T7218] ? __pfx_kcov_ioctl+0x10/0x10 [ 182.762760][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.762784][ T7218] do_syscall_64+0x174/0x580 [ 182.762812][ T7218] ? trace_irq_disable+0x3b/0x140 [ 182.762850][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.762873][ T7218] RIP: 0033:0x7fe2c3b5d68e [ 182.762892][ T7218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.762911][ T7218] RSP: 002b:00007fe2c1df5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.762933][ T7218] RAX: ffffffffffffffda RBX: 00007fe2c1df66c0 RCX: 00007fe2c3b5d68e [ 182.762953][ T7218] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 182.762968][ T7218] RBP: 00007fe2c3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 182.762982][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.762996][ T7218] R13: 00007fe2c3e16128 R14: 00007fe2c3e16090 R15: 00007fff8baefc88 [ 182.763022][ T7218] [ 182.763038][ T7218] BUG: Bad page state in process syz.0.279 pfn:2a072 [ 182.989421][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.990451][ T7218] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a072 [ 183.115523][ T7218] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 183.122666][ T7218] raw: 00fff00000000000 dead000000000040 ffff88801af3b000 0000000000000000 [ 183.131286][ T7218] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 183.139879][ T7218] page dumped because: page_pool leak [ 183.145232][ T7218] page_owner tracks the page as allocated [ 183.150958][ T7218] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7218, tgid 7214 (syz.0.279), ts 181519502379, free_ts 181191083795 [ 183.167913][ T7218] post_alloc_hook+0x22d/0x280 [ 183.172700][ T7218] get_page_from_freelist+0x2593/0x2610 [ 183.178262][ T7218] __alloc_frozen_pages_noprof+0x18d/0x380 [ 183.184095][ T7218] __alloc_pages_noprof+0x10/0x100 [ 183.189240][ T7218] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 183.194691][ T7218] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 183.200774][ T7218] skb_pp_cow_data+0xc91/0x19b0 [ 183.205643][ T7218] do_xdp_generic+0x76b/0x12e0 [ 183.210420][ T7218] tun_get_user+0x24ca/0x43e0 [ 183.215092][ T7218] tun_chr_write_iter+0x113/0x200 [ 183.220144][ T7218] vfs_write+0x61d/0xb90 [ 183.224396][ T7218] ksys_write+0x150/0x270 [ 183.228731][ T7218] do_syscall_64+0x174/0x580 [ 183.233339][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.239261][ T7218] page last free pid 23 tgid 23 stack trace: [ 183.245225][ T7218] __free_frozen_pages+0xc1c/0xd30 [ 183.250367][ T7218] tlb_remove_table_rcu+0x85/0x100 [ 183.255499][ T7218] rcu_core+0x7cd/0x1070 [ 183.259780][ T7218] handle_softirqs+0x22a/0x840 [ 183.264563][ T7218] run_ksoftirqd+0x36/0x60 [ 183.268993][ T7218] smpboot_thread_fn+0x541/0xa50 [ 183.273976][ T7218] kthread+0x389/0x470 [ 183.278057][ T7218] ret_from_fork+0x514/0xb70 [ 183.282681][ T7218] ret_from_fork_asm+0x1a/0x30 [ 183.287462][ T7218] Modules linked in: [ 183.291376][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.279 Tainted: G B syzkaller #0 PREEMPT(full) [ 183.291412][ T7218] Tainted: [B]=BAD_PAGE [ 183.291423][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.291438][ T7218] Call Trace: [ 183.291447][ T7218] [ 183.291458][ T7218] dump_stack_lvl+0xe8/0x150 [ 183.291487][ T7218] bad_page+0x17f/0x1c0 [ 183.291520][ T7218] __free_frozen_pages+0xcd9/0xd30 [ 183.291561][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.291595][ T7218] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 183.291639][ T7218] bpf_xdp_adjust_tail+0x1d6/0x220 [ 183.291684][ T7218] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 183.291708][ T7218] bpf_prog_run_generic_xdp+0x603/0x1490 [ 183.291757][ T7218] do_xdp_generic+0xac5/0x12e0 [ 183.291787][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.291826][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 183.291861][ T7218] ? __pfx_do_xdp_generic+0x10/0x10 [ 183.291898][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.291937][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.291970][ T7218] ? tun_get_user+0x2394/0x43e0 [ 183.291995][ T7218] tun_get_user+0x24ca/0x43e0 [ 183.292028][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.292062][ T7218] ? aa_file_perm+0x192/0x15e0 [ 183.292089][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.292120][ T7218] ? aa_file_perm+0x50e/0x15e0 [ 183.292144][ T7218] ? __pfx_tun_get_user+0x10/0x10 [ 183.292171][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 183.292201][ T7218] ? __pfx_file_ioctl+0x10/0x10 [ 183.292247][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.292278][ T7218] ? ref_tracker_alloc+0x35c/0x4c0 [ 183.292311][ T7218] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 183.292342][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.292375][ T7218] ? tun_get+0x1c/0x2f0 [ 183.292399][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.292432][ T7218] ? tun_get+0x1c/0x2f0 [ 183.292454][ T7218] ? tun_get+0x1c/0x2f0 [ 183.292475][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.292508][ T7218] tun_chr_write_iter+0x113/0x200 [ 183.292552][ T7218] vfs_write+0x61d/0xb90 [ 183.292596][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 183.292642][ T7218] ? __fget_files+0x2a/0x420 [ 183.292677][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.292712][ T7218] ksys_write+0x150/0x270 [ 183.292752][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 183.292791][ T7218] ? __pfx_kcov_ioctl+0x10/0x10 [ 183.292842][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.292869][ T7218] do_syscall_64+0x174/0x580 [ 183.292896][ T7218] ? trace_irq_disable+0x3b/0x140 [ 183.292940][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.292967][ T7218] RIP: 0033:0x7fe2c3b5d68e [ 183.292988][ T7218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 183.293011][ T7218] RSP: 002b:00007fe2c1df5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.293037][ T7218] RAX: ffffffffffffffda RBX: 00007fe2c1df66c0 RCX: 00007fe2c3b5d68e [ 183.293057][ T7218] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 183.293075][ T7218] RBP: 00007fe2c3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 183.293092][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.293121][ T7218] R13: 00007fe2c3e16128 R14: 00007fe2c3e16090 R15: 00007fff8baefc88 [ 183.293152][ T7218] [ 183.293164][ T7218] BUG: Bad page state in process syz.0.279 pfn:49789 [ 183.628891][ T7218] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888049789000 pfn:0x49789 [ 183.638967][ T7218] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 183.646100][ T7218] raw: 00fff00000000000 dead000000000040 ffff88801af3b000 0000000000000000 [ 183.654886][ T7218] raw: ffff888049789000 0000000000000001 00000000ffffffff 0000000000000000 [ 183.663480][ T7218] page dumped because: page_pool leak [ 183.668826][ T7218] page_owner tracks the page as allocated [ 183.674544][ T7218] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7218, tgid 7214 (syz.0.279), ts 181519484449, free_ts 181191104125 [ 183.691515][ T7218] post_alloc_hook+0x22d/0x280 [ 183.696279][ T7218] get_page_from_freelist+0x2593/0x2610 [ 183.701867][ T7218] __alloc_frozen_pages_noprof+0x18d/0x380 [ 183.707702][ T7218] __alloc_pages_noprof+0x10/0x100 [ 183.712876][ T7218] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 183.718364][ T7218] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 183.724454][ T7218] skb_pp_cow_data+0xc91/0x19b0 [ 183.729348][ T7218] do_xdp_generic+0x76b/0x12e0 [ 183.734098][ T7218] tun_get_user+0x24ca/0x43e0 [ 183.738764][ T7218] tun_chr_write_iter+0x113/0x200 [ 183.743834][ T7218] vfs_write+0x61d/0xb90 [ 183.748087][ T7218] ksys_write+0x150/0x270 [ 183.752439][ T7218] do_syscall_64+0x174/0x580 [ 183.757036][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.762941][ T7218] page last free pid 23 tgid 23 stack trace: [ 183.768907][ T7218] __free_frozen_pages+0xc1c/0xd30 [ 183.774043][ T7218] tlb_remove_table_rcu+0x85/0x100 [ 183.779198][ T7218] rcu_core+0x7cd/0x1070 [ 183.783424][ T7218] handle_softirqs+0x22a/0x840 [ 183.788179][ T7218] run_ksoftirqd+0x36/0x60 [ 183.792608][ T7218] smpboot_thread_fn+0x541/0xa50 [ 183.797545][ T7218] kthread+0x389/0x470 [ 183.801633][ T7218] ret_from_fork+0x514/0xb70 [ 183.806222][ T7218] ret_from_fork_asm+0x1a/0x30 [ 183.811013][ T7218] Modules linked in: [ 183.814908][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.279 Tainted: G B syzkaller #0 PREEMPT(full) [ 183.814934][ T7218] Tainted: [B]=BAD_PAGE [ 183.814941][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.814952][ T7218] Call Trace: [ 183.814959][ T7218] [ 183.814967][ T7218] dump_stack_lvl+0xe8/0x150 [ 183.814989][ T7218] bad_page+0x17f/0x1c0 [ 183.815011][ T7218] __free_frozen_pages+0xcd9/0xd30 [ 183.815041][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.815065][ T7218] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 183.815097][ T7218] bpf_xdp_adjust_tail+0x1d6/0x220 [ 183.815129][ T7218] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 183.815147][ T7218] bpf_prog_run_generic_xdp+0x603/0x1490 [ 183.815182][ T7218] do_xdp_generic+0xac5/0x12e0 [ 183.815203][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.815225][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 183.815249][ T7218] ? __pfx_do_xdp_generic+0x10/0x10 [ 183.815276][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.815307][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.815331][ T7218] ? tun_get_user+0x2394/0x43e0 [ 183.815349][ T7218] tun_get_user+0x24ca/0x43e0 [ 183.815372][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.815396][ T7218] ? aa_file_perm+0x192/0x15e0 [ 183.815415][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.815436][ T7218] ? aa_file_perm+0x50e/0x15e0 [ 183.815453][ T7218] ? __pfx_tun_get_user+0x10/0x10 [ 183.815472][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 183.815493][ T7218] ? __pfx_file_ioctl+0x10/0x10 [ 183.815526][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.815548][ T7218] ? ref_tracker_alloc+0x35c/0x4c0 [ 183.815571][ T7218] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 183.815593][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.815617][ T7218] ? tun_get+0x1c/0x2f0 [ 183.815634][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.815657][ T7218] ? tun_get+0x1c/0x2f0 [ 183.815674][ T7218] ? tun_get+0x1c/0x2f0 [ 183.815690][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.815714][ T7218] tun_chr_write_iter+0x113/0x200 [ 183.815745][ T7218] vfs_write+0x61d/0xb90 [ 183.815776][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 183.815809][ T7218] ? __fget_files+0x2a/0x420 [ 183.815834][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 183.815859][ T7218] ksys_write+0x150/0x270 [ 183.815899][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 183.815938][ T7218] ? __pfx_kcov_ioctl+0x10/0x10 [ 183.815970][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.815989][ T7218] do_syscall_64+0x174/0x580 [ 183.816009][ T7218] ? trace_irq_disable+0x3b/0x140 [ 183.816040][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.816059][ T7218] RIP: 0033:0x7fe2c3b5d68e [ 183.816076][ T7218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 183.816091][ T7218] RSP: 002b:00007fe2c1df5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.816110][ T7218] RAX: ffffffffffffffda RBX: 00007fe2c1df66c0 RCX: 00007fe2c3b5d68e [ 183.816125][ T7218] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 183.816137][ T7218] RBP: 00007fe2c3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 183.816149][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.816160][ T7218] R13: 00007fe2c3e16128 R14: 00007fe2c3e16090 R15: 00007fff8baefc88 [ 183.816182][ T7218] [ 183.816191][ T7218] BUG: Bad page state in process syz.0.279 pfn:333e6 [ 184.151971][ T7218] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880333e6c80 pfn:0x333e6 [ 184.162072][ T7218] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 184.169217][ T7218] raw: 00fff00000000000 dead000000000040 ffff88801af3b000 0000000000000000 [ 184.177808][ T7218] raw: ffff8880333e6c80 0000000000000001 00000000ffffffff 0000000000000000 [ 184.186420][ T7218] page dumped because: page_pool leak [ 184.191811][ T7218] page_owner tracks the page as allocated [ 184.197517][ T7218] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7218, tgid 7214 (syz.0.279), ts 181519467039, free_ts 181191124945 [ 184.214497][ T7218] post_alloc_hook+0x22d/0x280 [ 184.219305][ T7218] get_page_from_freelist+0x2593/0x2610 [ 184.224845][ T7218] __alloc_frozen_pages_noprof+0x18d/0x380 [ 184.230677][ T7218] __alloc_pages_noprof+0x10/0x100 [ 184.235805][ T7218] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 184.241288][ T7218] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 184.247374][ T7218] skb_pp_cow_data+0xc91/0x19b0 [ 184.252248][ T7218] do_xdp_generic+0x76b/0x12e0 [ 184.257017][ T7218] tun_get_user+0x24ca/0x43e0 [ 184.261708][ T7218] tun_chr_write_iter+0x113/0x200 [ 184.266747][ T7218] vfs_write+0x61d/0xb90 [ 184.271045][ T7218] ksys_write+0x150/0x270 [ 184.275385][ T7218] do_syscall_64+0x174/0x580 [ 184.279990][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.285881][ T7218] page last free pid 23 tgid 23 stack trace: [ 184.291866][ T7218] __free_frozen_pages+0xc1c/0xd30 [ 184.296989][ T7218] tlb_remove_table_rcu+0x85/0x100 [ 184.302128][ T7218] rcu_core+0x7cd/0x1070 [ 184.306373][ T7218] handle_softirqs+0x22a/0x840 [ 184.311161][ T7218] run_ksoftirqd+0x36/0x60 [ 184.315589][ T7218] smpboot_thread_fn+0x541/0xa50 [ 184.320564][ T7218] kthread+0x389/0x470 [ 184.324647][ T7218] ret_from_fork+0x514/0xb70 [ 184.329296][ T7218] ret_from_fork_asm+0x1a/0x30 [ 184.334079][ T7218] Modules linked in: [ 184.337973][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.279 Tainted: G B syzkaller #0 PREEMPT(full) [ 184.337999][ T7218] Tainted: [B]=BAD_PAGE [ 184.338005][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.338017][ T7218] Call Trace: [ 184.338025][ T7218] [ 184.338032][ T7218] dump_stack_lvl+0xe8/0x150 [ 184.338054][ T7218] bad_page+0x17f/0x1c0 [ 184.338076][ T7218] __free_frozen_pages+0xcd9/0xd30 [ 184.338105][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.338130][ T7218] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 184.338162][ T7218] bpf_xdp_adjust_tail+0x1d6/0x220 [ 184.338195][ T7218] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 184.338212][ T7218] bpf_prog_run_generic_xdp+0x603/0x1490 [ 184.338247][ T7218] do_xdp_generic+0xac5/0x12e0 [ 184.338268][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.338290][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 184.338319][ T7218] ? __pfx_do_xdp_generic+0x10/0x10 [ 184.338346][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.338374][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.338398][ T7218] ? tun_get_user+0x2394/0x43e0 [ 184.338416][ T7218] tun_get_user+0x24ca/0x43e0 [ 184.338439][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.338470][ T7218] ? aa_file_perm+0x192/0x15e0 [ 184.338498][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.338527][ T7218] ? aa_file_perm+0x50e/0x15e0 [ 184.338544][ T7218] ? __pfx_tun_get_user+0x10/0x10 [ 184.338563][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 184.338584][ T7218] ? __pfx_file_ioctl+0x10/0x10 [ 184.338617][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.338638][ T7218] ? ref_tracker_alloc+0x35c/0x4c0 [ 184.338662][ T7218] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 184.338684][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.338707][ T7218] ? tun_get+0x1c/0x2f0 [ 184.338725][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.338748][ T7218] ? tun_get+0x1c/0x2f0 [ 184.338764][ T7218] ? tun_get+0x1c/0x2f0 [ 184.338780][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.338805][ T7218] tun_chr_write_iter+0x113/0x200 [ 184.338838][ T7218] vfs_write+0x61d/0xb90 [ 184.338869][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 184.338901][ T7218] ? __fget_files+0x2a/0x420 [ 184.338926][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.338950][ T7218] ksys_write+0x150/0x270 [ 184.338979][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 184.339006][ T7218] ? __pfx_kcov_ioctl+0x10/0x10 [ 184.339036][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.339055][ T7218] do_syscall_64+0x174/0x580 [ 184.339075][ T7218] ? trace_irq_disable+0x3b/0x140 [ 184.339106][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.339131][ T7218] RIP: 0033:0x7fe2c3b5d68e [ 184.339153][ T7218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.339175][ T7218] RSP: 002b:00007fe2c1df5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.339194][ T7218] RAX: ffffffffffffffda RBX: 00007fe2c1df66c0 RCX: 00007fe2c3b5d68e [ 184.339208][ T7218] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 184.339220][ T7218] RBP: 00007fe2c3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 184.339232][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.339243][ T7218] R13: 00007fe2c3e16128 R14: 00007fe2c3e16090 R15: 00007fff8baefc88 [ 184.339265][ T7218] [ 184.667332][ T7218] BUG: Bad page state in process syz.0.279 pfn:1b36f [ 184.674125][ T7218] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x510 pfn:0x1b36f [ 184.683090][ T7218] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 184.690240][ T7218] raw: 00fff00000000000 dead000000000040 ffff88801af3b000 0000000000000000 [ 184.698827][ T7218] raw: 0000000000000510 0000000000000001 00000000ffffffff 0000000000000000 [ 184.707437][ T7218] page dumped because: page_pool leak [ 184.712820][ T7218] page_owner tracks the page as allocated [ 184.718529][ T7218] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7218, tgid 7214 (syz.0.279), ts 181519449289, free_ts 181191145185 [ 184.735490][ T7218] post_alloc_hook+0x22d/0x280 [ 184.740288][ T7218] get_page_from_freelist+0x2593/0x2610 [ 184.745834][ T7218] __alloc_frozen_pages_noprof+0x18d/0x380 [ 184.751663][ T7218] __alloc_pages_noprof+0x10/0x100 [ 184.756788][ T7218] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 184.762275][ T7218] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 184.768354][ T7218] skb_pp_cow_data+0xc91/0x19b0 [ 184.773225][ T7218] do_xdp_generic+0x76b/0x12e0 [ 184.777995][ T7218] tun_get_user+0x24ca/0x43e0 [ 184.782701][ T7218] tun_chr_write_iter+0x113/0x200 [ 184.787740][ T7218] vfs_write+0x61d/0xb90 [ 184.792002][ T7218] ksys_write+0x150/0x270 [ 184.796343][ T7218] do_syscall_64+0x174/0x580 [ 184.800962][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.806868][ T7218] page last free pid 23 tgid 23 stack trace: [ 184.812855][ T7218] __free_frozen_pages+0xc1c/0xd30 [ 184.817977][ T7218] tlb_remove_table_rcu+0x85/0x100 [ 184.823114][ T7218] rcu_core+0x7cd/0x1070 [ 184.827359][ T7218] handle_softirqs+0x22a/0x840 [ 184.832151][ T7218] run_ksoftirqd+0x36/0x60 [ 184.836577][ T7218] smpboot_thread_fn+0x541/0xa50 [ 184.841545][ T7218] kthread+0x389/0x470 [ 184.845626][ T7218] ret_from_fork+0x514/0xb70 [ 184.850246][ T7218] ret_from_fork_asm+0x1a/0x30 [ 184.855038][ T7218] Modules linked in: [ 184.858931][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.279 Tainted: G B syzkaller #0 PREEMPT(full) [ 184.858956][ T7218] Tainted: [B]=BAD_PAGE [ 184.858963][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.858975][ T7218] Call Trace: [ 184.858982][ T7218] [ 184.858989][ T7218] dump_stack_lvl+0xe8/0x150 [ 184.859010][ T7218] bad_page+0x17f/0x1c0 [ 184.859032][ T7218] __free_frozen_pages+0xcd9/0xd30 [ 184.859061][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.859086][ T7218] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 184.859119][ T7218] bpf_xdp_adjust_tail+0x1d6/0x220 [ 184.859168][ T7218] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 184.859187][ T7218] bpf_prog_run_generic_xdp+0x603/0x1490 [ 184.859223][ T7218] do_xdp_generic+0xac5/0x12e0 [ 184.859244][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.859266][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 184.859290][ T7218] ? __pfx_do_xdp_generic+0x10/0x10 [ 184.859316][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.859349][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.859372][ T7218] ? tun_get_user+0x2394/0x43e0 [ 184.859390][ T7218] tun_get_user+0x24ca/0x43e0 [ 184.859420][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.859454][ T7218] ? aa_file_perm+0x192/0x15e0 [ 184.859478][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.859500][ T7218] ? aa_file_perm+0x50e/0x15e0 [ 184.859517][ T7218] ? __pfx_tun_get_user+0x10/0x10 [ 184.859535][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 184.859557][ T7218] ? __pfx_file_ioctl+0x10/0x10 [ 184.859589][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.859611][ T7218] ? ref_tracker_alloc+0x35c/0x4c0 [ 184.859635][ T7218] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 184.859657][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.859680][ T7218] ? tun_get+0x1c/0x2f0 [ 184.859697][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.859720][ T7218] ? tun_get+0x1c/0x2f0 [ 184.859737][ T7218] ? tun_get+0x1c/0x2f0 [ 184.859753][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.859777][ T7218] tun_chr_write_iter+0x113/0x200 [ 184.859808][ T7218] vfs_write+0x61d/0xb90 [ 184.859841][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 184.859873][ T7218] ? __fget_files+0x2a/0x420 [ 184.859898][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 184.859922][ T7218] ksys_write+0x150/0x270 [ 184.859951][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 184.859978][ T7218] ? __pfx_kcov_ioctl+0x10/0x10 [ 184.860009][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.860028][ T7218] do_syscall_64+0x174/0x580 [ 184.860047][ T7218] ? trace_irq_disable+0x3b/0x140 [ 184.860078][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.860097][ T7218] RIP: 0033:0x7fe2c3b5d68e [ 184.860113][ T7218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.860128][ T7218] RSP: 002b:00007fe2c1df5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.860147][ T7218] RAX: ffffffffffffffda RBX: 00007fe2c1df66c0 RCX: 00007fe2c3b5d68e [ 184.860161][ T7218] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 184.860173][ T7218] RBP: 00007fe2c3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 184.860185][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.860196][ T7218] R13: 00007fe2c3e16128 R14: 00007fe2c3e16090 R15: 00007fff8baefc88 [ 184.860218][ T7218] [ 185.188294][ T7218] BUG: Bad page state in process syz.0.279 pfn:49793 [ 185.195083][ T7218] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888049793000 pfn:0x49793 [ 185.205177][ T7218] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 185.212340][ T7218] raw: 00fff00000000000 dead000000000040 ffff88801af3b000 0000000000000000 [ 185.220951][ T7218] raw: ffff888049793000 0000000000000001 00000000ffffffff 0000000000000000 [ 185.229546][ T7218] page dumped because: page_pool leak [ 185.234907][ T7218] page_owner tracks the page as allocated [ 185.240626][ T7218] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7218, tgid 7214 (syz.0.279), ts 181519431308, free_ts 181191165685 [ 185.257563][ T7218] post_alloc_hook+0x22d/0x280 [ 185.262361][ T7218] get_page_from_freelist+0x2593/0x2610 [ 185.267902][ T7218] __alloc_frozen_pages_noprof+0x18d/0x380 [ 185.273740][ T7218] __alloc_pages_noprof+0x10/0x100 [ 185.278863][ T7218] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 185.284350][ T7218] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 185.290446][ T7218] skb_pp_cow_data+0xc91/0x19b0 [ 185.295290][ T7218] do_xdp_generic+0x76b/0x12e0 [ 185.300080][ T7218] tun_get_user+0x24ca/0x43e0 [ 185.304752][ T7218] tun_chr_write_iter+0x113/0x200 [ 185.309821][ T7218] vfs_write+0x61d/0xb90 [ 185.314074][ T7218] ksys_write+0x150/0x270 [ 185.318396][ T7218] do_syscall_64+0x174/0x580 [ 185.322996][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.328889][ T7218] page last free pid 23 tgid 23 stack trace: [ 185.334873][ T7218] __free_frozen_pages+0xc1c/0xd30 [ 185.340015][ T7218] tlb_remove_table_rcu+0x85/0x100 [ 185.345119][ T7218] rcu_core+0x7cd/0x1070 [ 185.349391][ T7218] handle_softirqs+0x22a/0x840 [ 185.354166][ T7218] run_ksoftirqd+0x36/0x60 [ 185.358594][ T7218] smpboot_thread_fn+0x541/0xa50 [ 185.363574][ T7218] kthread+0x389/0x470 [ 185.367649][ T7218] ret_from_fork+0x514/0xb70 [ 185.372250][ T7218] ret_from_fork_asm+0x1a/0x30 [ 185.377026][ T7218] Modules linked in: [ 185.380949][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.279 Tainted: G B syzkaller #0 PREEMPT(full) [ 185.380986][ T7218] Tainted: [B]=BAD_PAGE [ 185.380995][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 185.381012][ T7218] Call Trace: [ 185.381021][ T7218] [ 185.381031][ T7218] dump_stack_lvl+0xe8/0x150 [ 185.381060][ T7218] bad_page+0x17f/0x1c0 [ 185.381091][ T7218] __free_frozen_pages+0xcd9/0xd30 [ 185.381132][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.381166][ T7218] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 185.381209][ T7218] bpf_xdp_adjust_tail+0x1d6/0x220 [ 185.381255][ T7218] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 185.381280][ T7218] bpf_prog_run_generic_xdp+0x603/0x1490 [ 185.381335][ T7218] do_xdp_generic+0xac5/0x12e0 [ 185.381364][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.381395][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 185.381429][ T7218] ? __pfx_do_xdp_generic+0x10/0x10 [ 185.381465][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.381505][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.381537][ T7218] ? tun_get_user+0x2394/0x43e0 [ 185.381562][ T7218] tun_get_user+0x24ca/0x43e0 [ 185.381594][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.381627][ T7218] ? aa_file_perm+0x192/0x15e0 [ 185.381655][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.381686][ T7218] ? aa_file_perm+0x50e/0x15e0 [ 185.381710][ T7218] ? __pfx_tun_get_user+0x10/0x10 [ 185.381737][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 185.381766][ T7218] ? __pfx_file_ioctl+0x10/0x10 [ 185.381811][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.381842][ T7218] ? ref_tracker_alloc+0x35c/0x4c0 [ 185.381874][ T7218] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 185.381905][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.381936][ T7218] ? tun_get+0x1c/0x2f0 [ 185.381959][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.381991][ T7218] ? tun_get+0x1c/0x2f0 [ 185.382013][ T7218] ? tun_get+0x1c/0x2f0 [ 185.382034][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.382067][ T7218] tun_chr_write_iter+0x113/0x200 [ 185.382111][ T7218] vfs_write+0x61d/0xb90 [ 185.382155][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 185.382200][ T7218] ? __fget_files+0x2a/0x420 [ 185.382236][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.382270][ T7218] ksys_write+0x150/0x270 [ 185.382317][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 185.382356][ T7218] ? __pfx_kcov_ioctl+0x10/0x10 [ 185.382398][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.382426][ T7218] do_syscall_64+0x174/0x580 [ 185.382453][ T7218] ? trace_irq_disable+0x3b/0x140 [ 185.382497][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.382523][ T7218] RIP: 0033:0x7fe2c3b5d68e [ 185.382545][ T7218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.382568][ T7218] RSP: 002b:00007fe2c1df5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.382593][ T7218] RAX: ffffffffffffffda RBX: 00007fe2c1df66c0 RCX: 00007fe2c3b5d68e [ 185.382613][ T7218] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 185.382631][ T7218] RBP: 00007fe2c3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 185.382647][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.382663][ T7218] R13: 00007fe2c3e16128 R14: 00007fe2c3e16090 R15: 00007fff8baefc88 [ 185.382694][ T7218] [ 185.382706][ T7218] BUG: Bad page state in process syz.0.279 pfn:2a6ab [ 185.718331][ T7218] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x2a6ab [ 185.727210][ T7218] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 185.734359][ T7218] raw: 00fff00000000000 dead000000000040 ffff88801af3b000 0000000000000000 [ 185.742981][ T7218] raw: 000000000000001c 0000000000000001 00000000ffffffff 0000000000000000 [ 185.751584][ T7218] page dumped because: page_pool leak [ 185.756938][ T7218] page_owner tracks the page as allocated [ 185.762688][ T7218] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7218, tgid 7214 (syz.0.279), ts 181519413548, free_ts 181191185915 [ 185.779637][ T7218] post_alloc_hook+0x22d/0x280 [ 185.784398][ T7218] get_page_from_freelist+0x2593/0x2610 [ 185.789988][ T7218] __alloc_frozen_pages_noprof+0x18d/0x380 [ 185.795807][ T7218] __alloc_pages_noprof+0x10/0x100 [ 185.800966][ T7218] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 185.806437][ T7218] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 185.812542][ T7218] skb_pp_cow_data+0xc91/0x19b0 [ 185.817405][ T7218] do_xdp_generic+0x76b/0x12e0 [ 185.822219][ T7218] tun_get_user+0x24ca/0x43e0 [ 185.826894][ T7218] tun_chr_write_iter+0x113/0x200 [ 185.831950][ T7218] vfs_write+0x61d/0xb90 [ 185.836229][ T7218] ksys_write+0x150/0x270 [ 185.840643][ T7218] do_syscall_64+0x174/0x580 [ 185.845239][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.851180][ T7218] page last free pid 23 tgid 23 stack trace: [ 185.857157][ T7218] __free_frozen_pages+0xc1c/0xd30 [ 185.862320][ T7218] tlb_remove_table_rcu+0x85/0x100 [ 185.867466][ T7218] rcu_core+0x7cd/0x1070 [ 185.871727][ T7218] handle_softirqs+0x22a/0x840 [ 185.876493][ T7218] run_ksoftirqd+0x36/0x60 [ 185.880929][ T7218] smpboot_thread_fn+0x541/0xa50 [ 185.885870][ T7218] kthread+0x389/0x470 [ 185.889969][ T7218] ret_from_fork+0x514/0xb70 [ 185.894563][ T7218] ret_from_fork_asm+0x1a/0x30 [ 185.899375][ T7218] Modules linked in: [ 185.903275][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.279 Tainted: G B syzkaller #0 PREEMPT(full) [ 185.903312][ T7218] Tainted: [B]=BAD_PAGE [ 185.903322][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 185.903339][ T7218] Call Trace: [ 185.903352][ T7218] [ 185.903359][ T7218] dump_stack_lvl+0xe8/0x150 [ 185.903382][ T7218] bad_page+0x17f/0x1c0 [ 185.903405][ T7218] __free_frozen_pages+0xcd9/0xd30 [ 185.903434][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.903459][ T7218] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 185.903492][ T7218] bpf_xdp_adjust_tail+0x1d6/0x220 [ 185.903524][ T7218] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 185.903541][ T7218] bpf_prog_run_generic_xdp+0x603/0x1490 [ 185.903577][ T7218] do_xdp_generic+0xac5/0x12e0 [ 185.903597][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.903619][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 185.903644][ T7218] ? __pfx_do_xdp_generic+0x10/0x10 [ 185.903670][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.903699][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.903722][ T7218] ? tun_get_user+0x2394/0x43e0 [ 185.903740][ T7218] tun_get_user+0x24ca/0x43e0 [ 185.903763][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.903787][ T7218] ? aa_file_perm+0x192/0x15e0 [ 185.903807][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.903828][ T7218] ? aa_file_perm+0x50e/0x15e0 [ 185.903846][ T7218] ? __pfx_tun_get_user+0x10/0x10 [ 185.903866][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 185.903887][ T7218] ? __pfx_file_ioctl+0x10/0x10 [ 185.903920][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.903941][ T7218] ? ref_tracker_alloc+0x35c/0x4c0 [ 185.903965][ T7218] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 185.903987][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.904011][ T7218] ? tun_get+0x1c/0x2f0 [ 185.904028][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.904051][ T7218] ? tun_get+0x1c/0x2f0 [ 185.904067][ T7218] ? tun_get+0x1c/0x2f0 [ 185.904083][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.904107][ T7218] tun_chr_write_iter+0x113/0x200 [ 185.904139][ T7218] vfs_write+0x61d/0xb90 [ 185.904170][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 185.904202][ T7218] ? __fget_files+0x2a/0x420 [ 185.904227][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 185.904251][ T7218] ksys_write+0x150/0x270 [ 185.904279][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 185.904307][ T7218] ? __pfx_kcov_ioctl+0x10/0x10 [ 185.904337][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.904362][ T7218] do_syscall_64+0x174/0x580 [ 185.904387][ T7218] ? trace_irq_disable+0x3b/0x140 [ 185.904432][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.904454][ T7218] RIP: 0033:0x7fe2c3b5d68e [ 185.904470][ T7218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.904485][ T7218] RSP: 002b:00007fe2c1df5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.904504][ T7218] RAX: ffffffffffffffda RBX: 00007fe2c1df66c0 RCX: 00007fe2c3b5d68e [ 185.904518][ T7218] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 185.904531][ T7218] RBP: 00007fe2c3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 185.904542][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.904554][ T7218] R13: 00007fe2c3e16128 R14: 00007fe2c3e16090 R15: 00007fff8baefc88 [ 185.904575][ T7218] [ 185.904585][ T7218] BUG: Bad page state in process syz.0.279 pfn:2c84a [ 186.240196][ T7218] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x519 pfn:0x2c84a [ 186.249160][ T7218] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.256283][ T7218] raw: 00fff00000000000 dead000000000040 ffff88801af3b000 0000000000000000 [ 186.264910][ T7218] raw: 0000000000000519 0000000000000001 00000000ffffffff 0000000000000000 [ 186.273529][ T7218] page dumped because: page_pool leak [ 186.278895][ T7218] page_owner tracks the page as allocated [ 186.284638][ T7218] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7218, tgid 7214 (syz.0.279), ts 181519395759, free_ts 181191206085 [ 186.301600][ T7218] post_alloc_hook+0x22d/0x280 [ 186.306358][ T7218] get_page_from_freelist+0x2593/0x2610 [ 186.311931][ T7218] __alloc_frozen_pages_noprof+0x18d/0x380 [ 186.317753][ T7218] __alloc_pages_noprof+0x10/0x100 [ 186.322894][ T7218] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 186.328368][ T7218] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 186.334456][ T7218] skb_pp_cow_data+0xc91/0x19b0 [ 186.339370][ T7218] do_xdp_generic+0x76b/0x12e0 [ 186.344121][ T7218] tun_get_user+0x24ca/0x43e0 [ 186.348779][ T7218] tun_chr_write_iter+0x113/0x200 [ 186.353871][ T7218] vfs_write+0x61d/0xb90 [ 186.358122][ T7218] ksys_write+0x150/0x270 [ 186.362475][ T7218] do_syscall_64+0x174/0x580 [ 186.367074][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.373004][ T7218] page last free pid 23 tgid 23 stack trace: [ 186.378971][ T7218] __free_frozen_pages+0xc1c/0xd30 [ 186.384106][ T7218] tlb_remove_table_rcu+0x85/0x100 [ 186.389276][ T7218] rcu_core+0x7cd/0x1070 [ 186.393504][ T7218] handle_softirqs+0x22a/0x840 [ 186.398251][ T7218] run_ksoftirqd+0x36/0x60 [ 186.402724][ T7218] smpboot_thread_fn+0x541/0xa50 [ 186.407673][ T7218] kthread+0x389/0x470 [ 186.411795][ T7218] ret_from_fork+0x514/0xb70 [ 186.416393][ T7218] ret_from_fork_asm+0x1a/0x30 [ 186.421195][ T7218] Modules linked in: [ 186.425101][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.279 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.425137][ T7218] Tainted: [B]=BAD_PAGE [ 186.425147][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.425161][ T7218] Call Trace: [ 186.425168][ T7218] [ 186.425175][ T7218] dump_stack_lvl+0xe8/0x150 [ 186.425197][ T7218] bad_page+0x17f/0x1c0 [ 186.425220][ T7218] __free_frozen_pages+0xcd9/0xd30 [ 186.425249][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.425274][ T7218] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 186.425307][ T7218] bpf_xdp_adjust_tail+0x1d6/0x220 [ 186.425345][ T7218] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.425362][ T7218] bpf_prog_run_generic_xdp+0x603/0x1490 [ 186.425398][ T7218] do_xdp_generic+0xac5/0x12e0 [ 186.425418][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.425440][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 186.425465][ T7218] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.425491][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.425519][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.425542][ T7218] ? tun_get_user+0x2394/0x43e0 [ 186.425561][ T7218] tun_get_user+0x24ca/0x43e0 [ 186.425584][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.425608][ T7218] ? aa_file_perm+0x192/0x15e0 [ 186.425627][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.425654][ T7218] ? aa_file_perm+0x50e/0x15e0 [ 186.425673][ T7218] ? __pfx_tun_get_user+0x10/0x10 [ 186.425692][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 186.425713][ T7218] ? __pfx_file_ioctl+0x10/0x10 [ 186.425747][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.425769][ T7218] ? ref_tracker_alloc+0x35c/0x4c0 [ 186.425791][ T7218] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.425814][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.425837][ T7218] ? tun_get+0x1c/0x2f0 [ 186.425856][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.425880][ T7218] ? tun_get+0x1c/0x2f0 [ 186.425896][ T7218] ? tun_get+0x1c/0x2f0 [ 186.425912][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.425936][ T7218] tun_chr_write_iter+0x113/0x200 [ 186.425967][ T7218] vfs_write+0x61d/0xb90 [ 186.425998][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 186.426030][ T7218] ? __fget_files+0x2a/0x420 [ 186.426056][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.426079][ T7218] ksys_write+0x150/0x270 [ 186.426108][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 186.426135][ T7218] ? __pfx_kcov_ioctl+0x10/0x10 [ 186.426167][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.426194][ T7218] do_syscall_64+0x174/0x580 [ 186.426222][ T7218] ? trace_irq_disable+0x3b/0x140 [ 186.426259][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.426278][ T7218] RIP: 0033:0x7fe2c3b5d68e [ 186.426294][ T7218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.426309][ T7218] RSP: 002b:00007fe2c1df5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.426328][ T7218] RAX: ffffffffffffffda RBX: 00007fe2c1df66c0 RCX: 00007fe2c3b5d68e [ 186.426347][ T7218] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 186.426359][ T7218] RBP: 00007fe2c3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 186.426371][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.426383][ T7218] R13: 00007fe2c3e16128 R14: 00007fe2c3e16090 R15: 00007fff8baefc88 [ 186.426405][ T7218] [ 186.426413][ T7218] BUG: Bad page state in process syz.0.279 pfn:2a97a [ 186.762229][ T7218] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a97a [ 186.771010][ T7218] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.778141][ T7218] raw: 00fff00000000000 dead000000000040 ffff88801af3b000 0000000000000000 [ 186.786742][ T7218] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 186.795335][ T7218] page dumped because: page_pool leak [ 186.800713][ T7218] page_owner tracks the page as allocated [ 186.806414][ T7218] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 7218, tgid 7214 (syz.0.279), ts 181519378249, free_ts 181191226335 [ 186.823356][ T7218] post_alloc_hook+0x22d/0x280 [ 186.828135][ T7218] get_page_from_freelist+0x2593/0x2610 [ 186.833705][ T7218] __alloc_frozen_pages_noprof+0x18d/0x380 [ 186.839569][ T7218] __alloc_pages_noprof+0x10/0x100 [ 186.844697][ T7218] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 186.850177][ T7218] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 186.856258][ T7218] skb_pp_cow_data+0xc91/0x19b0 [ 186.861345][ T7218] do_xdp_generic+0x76b/0x12e0 [ 186.866119][ T7218] tun_get_user+0x24ca/0x43e0 [ 186.870821][ T7218] tun_chr_write_iter+0x113/0x200 [ 186.875862][ T7218] vfs_write+0x61d/0xb90 [ 186.880130][ T7218] ksys_write+0x150/0x270 [ 186.884485][ T7218] do_syscall_64+0x174/0x580 [ 186.889059][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.894967][ T7218] page last free pid 23 tgid 23 stack trace: [ 186.900959][ T7218] __free_frozen_pages+0xc1c/0xd30 [ 186.906075][ T7218] tlb_remove_table_rcu+0x85/0x100 [ 186.911211][ T7218] rcu_core+0x7cd/0x1070 [ 186.915452][ T7218] handle_softirqs+0x22a/0x840 [ 186.920229][ T7218] run_ksoftirqd+0x36/0x60 [ 186.924654][ T7218] smpboot_thread_fn+0x541/0xa50 [ 186.929608][ T7218] kthread+0x389/0x470 [ 186.933683][ T7218] ret_from_fork+0x514/0xb70 [ 186.938257][ T7218] ret_from_fork_asm+0x1a/0x30 [ 186.943039][ T7218] Modules linked in: [ 186.946934][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.0.279 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.946959][ T7218] Tainted: [B]=BAD_PAGE [ 186.946966][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.946978][ T7218] Call Trace: [ 186.946985][ T7218] [ 186.946992][ T7218] dump_stack_lvl+0xe8/0x150 [ 186.947013][ T7218] bad_page+0x17f/0x1c0 [ 186.947035][ T7218] __free_frozen_pages+0xcd9/0xd30 [ 186.947065][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.947090][ T7218] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 186.947122][ T7218] bpf_xdp_adjust_tail+0x1d6/0x220 [ 186.947155][ T7218] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.947172][ T7218] bpf_prog_run_generic_xdp+0x603/0x1490 [ 186.947207][ T7218] do_xdp_generic+0xac5/0x12e0 [ 186.947228][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.947250][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 186.947274][ T7218] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.947305][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.947333][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.947357][ T7218] ? tun_get_user+0x2394/0x43e0 [ 186.947374][ T7218] tun_get_user+0x24ca/0x43e0 [ 186.947398][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.947421][ T7218] ? aa_file_perm+0x192/0x15e0 [ 186.947441][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.947463][ T7218] ? aa_file_perm+0x50e/0x15e0 [ 186.947480][ T7218] ? __pfx_tun_get_user+0x10/0x10 [ 186.947499][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 186.947520][ T7218] ? __pfx_file_ioctl+0x10/0x10 [ 186.947553][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.947581][ T7218] ? ref_tracker_alloc+0x35c/0x4c0 [ 186.947614][ T7218] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.947642][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.947666][ T7218] ? tun_get+0x1c/0x2f0 [ 186.947683][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.947707][ T7218] ? tun_get+0x1c/0x2f0 [ 186.947722][ T7218] ? tun_get+0x1c/0x2f0 [ 186.947739][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.947763][ T7218] tun_chr_write_iter+0x113/0x200 [ 186.947795][ T7218] vfs_write+0x61d/0xb90 [ 186.947828][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 186.947860][ T7218] ? __fget_files+0x2a/0x420 [ 186.947885][ T7218] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.947909][ T7218] ksys_write+0x150/0x270 [ 186.947937][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 186.947964][ T7218] ? __pfx_kcov_ioctl+0x10/0x10 [ 186.947994][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.948014][ T7218] do_syscall_64+0x174/0x580 [ 186.948033][ T7218] ? trace_irq_disable+0x3b/0x140 [ 186.948064][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.948083][ T7218] RIP: 0033:0x7fe2c3b5d68e [ 186.948099][ T7218] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.948115][ T7218] RSP: 002b:00007fe2c1df5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.948134][ T7218] RAX: ffffffffffffffda RBX: 00007fe2c1df66c0 RCX: 00007fe2c3b5d68e [ 186.948147][ T7218] RDX: 0000000000011dc0 RSI: 00002000000030c0 RDI: 00000000000000c8 [ 186.948160][ T7218] RBP: 00007fe2c3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 186.948172][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.948183][ T7218] R13: 00007fe2c3e16128 R14: 00007fe2c3e16090 R15: 00007fff8baefc88 [ 186.948205][ T7218] [ 186.949346][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.285696][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.293791][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.616138][ T7229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'. [ 187.625310][ T7229] netlink: 'syz.1.280': attribute type 7 has an invalid length. [ 187.634844][ T7229] netlink: 'syz.1.280': attribute type 8 has an invalid length. [ 187.642652][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 187.654891][ T7229] erspan0: entered promiscuous mode [ 187.661826][ T7229] erspan0: left promiscuous mode [ 188.019734][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.059638][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.020298][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.110315][ T5774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.140234][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog