last executing test programs: 13m24.044800231s ago: executing program 32 (id=286): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x200}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 13m15.216683488s ago: executing program 33 (id=338): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="18000000246837f73199aee6fdb9291b120000002d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115ad", 0xeb}], 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 11m53.527504618s ago: executing program 34 (id=830): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)="5c00000012006bab9a3ff36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb00"/74, 0x4a}, {&(0x7f0000000380)="1ed68483068e7e7b115365cde0c05b774875", 0x12}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10m40.225313812s ago: executing program 35 (id=1158): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000001c0)={0x40, 0x7, 0x43, "5a4a2855f7840e5fdc76dfd464771082eb6e47f73b5e71b977026c413a7979a816fdd28b70dd3dd7d3a79a05d111c6bac2e798a7156c486b37ecf32ba2c5801af0ffa7"}, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x3}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 9m47.633940923s ago: executing program 36 (id=1411): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x128}, {r0, 0x288}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40186e8d, &(0x7f0000000080)={@desc={0x200000, 0x0, @desc1}}) 8m47.30867716s ago: executing program 8 (id=1647): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_usb_connect(0x0, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902"], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8m41.423094231s ago: executing program 8 (id=1663): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) 8m40.230213454s ago: executing program 8 (id=1666): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = syz_io_uring_setup(0x3eb1, &(0x7f00000034c0)={0x0, 0x764a, 0x0, 0x3, 0x70}, &(0x7f0000003540), &(0x7f0000003580), &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001dc0)=[{0x0, 0x0, 0x0}], 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 8m38.836376347s ago: executing program 8 (id=1672): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x204) 8m38.264505737s ago: executing program 8 (id=1675): socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 8m37.403110677s ago: executing program 8 (id=1679): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x22, 0x8, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 8m35.884705566s ago: executing program 37 (id=1679): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x22, 0x8, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 6m0.881960019s ago: executing program 0 (id=2164): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='m', 0xffffff4c}]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) io_destroy(r1) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 5m58.639366773s ago: executing program 0 (id=2181): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5m56.721647381s ago: executing program 0 (id=2175): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x10}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r1, 0x9dff7ffc}}, 0x4d) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 5m55.507539852s ago: executing program 0 (id=2178): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 5m54.702157953s ago: executing program 0 (id=2182): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'sh\x00', 0x1, 0x80002, 0x64}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x4, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5m51.112888594s ago: executing program 0 (id=2195): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f0000000180), &(0x7f0000000440)=0x8) 5m49.776755801s ago: executing program 38 (id=2195): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f0000000180), &(0x7f0000000440)=0x8) 4m24.095380443s ago: executing program 3 (id=2468): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) read$eventfd(r1, &(0x7f0000000140), 0x8) 4m22.750972293s ago: executing program 3 (id=2475): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="a6", 0x1, 0x20000000, &(0x7f0000000140)={0xa, 0x2, 0xbe14e07, @loopback, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) shutdown(r0, 0x1) 4m22.142217436s ago: executing program 3 (id=2478): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x3) 4m20.619685472s ago: executing program 3 (id=2485): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0\x00') 4m19.929502604s ago: executing program 3 (id=2488): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x12, &(0x7f0000000a80)={@local, @empty, @val={@void, {0x8100, 0x3}}, {@generic={0x88f7}}}, 0x0) 4m18.677002979s ago: executing program 3 (id=2495): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mprotect(&(0x7f000059a000/0x1000)=nil, 0x1000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00002f4000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00006d5000/0x1000)=nil) 4m17.319791381s ago: executing program 39 (id=2495): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mprotect(&(0x7f000059a000/0x1000)=nil, 0x1000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00002f4000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00006d5000/0x1000)=nil) 1m2.739566066s ago: executing program 5 (id=3151): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) unshare(0x0) socket$rds(0x15, 0x5, 0x0) 1m1.361256602s ago: executing program 5 (id=3156): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0x302000, 0x1000, 0x5, 0x3}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_clone(0x2048000, 0x0, 0x0, 0x0, 0x0, 0x0) 59.965181782s ago: executing program 5 (id=3162): r0 = socket$rxrpc(0x21, 0x2, 0x2) socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) 58.401892737s ago: executing program 5 (id=3176): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/vhci\x00', 0x8802, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 57.148285482s ago: executing program 5 (id=3167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000047300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef) 55.455941229s ago: executing program 5 (id=3174): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000002480)) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsmount(0xffffffffffffffff, 0x1, 0x80) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000007, 0x204031, 0xffffffffffffffff, 0x77543000) 53.705778543s ago: executing program 40 (id=3174): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000002480)) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsmount(0xffffffffffffffff, 0x1, 0x80) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000007, 0x204031, 0xffffffffffffffff, 0x77543000) 20.865580686s ago: executing program 7 (id=3269): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e0001"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a08"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 20.235330009s ago: executing program 6 (id=3270): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000013c0)={0x1c, &(0x7f0000000300)={0x40, 0x16}, 0x0, 0x0}) 19.426308323s ago: executing program 7 (id=3273): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x20101) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 16.208360377s ago: executing program 6 (id=3280): r0 = socket$packet(0x11, 0xa, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 15.785080244s ago: executing program 7 (id=3281): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:\x00\x0089:/\x00', 0x0) r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 14.172868696s ago: executing program 1 (id=3283): unshare(0x26020400) r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2b, 'io'}]}, 0x4) 13.377471545s ago: executing program 7 (id=3285): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x0, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13.253463233s ago: executing program 6 (id=3288): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$eJzsVUtrU0EU/s7NJLfRLAru3BpsN9rmFsS1G7vXH2BIr7WY+OhENKFgdNONgvgnCv4JXQi6dyEiuNGFgi4qrioSOTNnJpMH9ra+NvPB5XznPY87M1f0TZ0C+LG71cI8DAg1vCWCArBA1rZXsfKryKHgo7J6Q+xPRH4QqXv9Vw8s7V9tttv5pu79mqQgYJ+YcTJtOvf04bHi+RPk5f1xC6FIFqnD9Po90i3ZlZ12PRqzpLNiJBeTlRsX/vEsDk+qU4N35FsNCC2f/mD3Mq9mGTNjiA70r88gXMAQwLu+16a3aZK8eWw7z4wpSXoV48uyL+FT/L93mQnfRYYkB0rXkP3Q5+8l+EJAGa93t1psvSS3GLvX7OeOhMli5XkQc1wBA4BKGJqiXEdJ7AKApW7nxpLu9U9tdJrr+Xp+LctWziy/OCpHdHgX2Gjny2SGYdMTJgoefE6rgZ//tHcj/wABKBgaeF4jsy/pLufFE0FIFUiC3KCGFHjm+6diu6U7uIiTmANwe8DuTBaoDq6mcJmntgpCSZSGCgeEPSSYM47TrevttW0QyKXtQPkajfcoeyUThRvlK2f99LdF1kWuitwZ9TNwb5d7k5Sp8Fm0xQFQwZ1mt7tpHi/L2FbxFYwtm/edE+nqXkPXrJ6iII4UDYyIiIiIiIiI+Ev4GQAA//8sQT03") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) 12.141212193s ago: executing program 7 (id=3291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$gfs2(&(0x7f00000124c0), &(0x7f0000012500)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xff, 0x125c7, &(0x7f0000024b40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x121000, 0x0) fcntl$notify(r0, 0x402, 0x91ea6c1af182532) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11.893468198s ago: executing program 1 (id=3292): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f0000006600), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000cc0)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc042, 0x0) unlink(&(0x7f0000000280)='./file1\x00') 10.870120113s ago: executing program 2 (id=3294): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 10.672514513s ago: executing program 6 (id=3295): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000400)={[{@filestreams}, {@usrquota}, {@nolazytime}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@noquota}, {@noattr2}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f00000000c0)={@id={0x2, 0x0, @b}}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 10.027831573s ago: executing program 9 (id=3177): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046) 9.78600343s ago: executing program 7 (id=3297): syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x100000, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x60) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xb) 8.95757605s ago: executing program 9 (id=3298): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x210}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000010000f80700000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) 8.957457495s ago: executing program 2 (id=3299): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 8.381609564s ago: executing program 2 (id=3301): mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 6.818167142s ago: executing program 2 (id=3304): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)="82f0bb6bad9d02", 0x7}], 0x1}}], 0x1, 0x4404c884) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 6.51711771s ago: executing program 1 (id=3305): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x2001, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) 5.860632662s ago: executing program 6 (id=3306): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x200c801, &(0x7f0000000440)={[{@minixdf}]}, 0x1, 0x633, &(0x7f0000000bc0)="$eJzs3c9rVNceAPDvnUx+mLz3EuXx3vMtaqAUhdbERC1SCtW9iP2xazepiWKNRkxKGxGMYDeF7roQuuqi9s+o4NZ/oItC6aoUpLQuapE65d7MnVwnMzG/ZiZOPh+45px7M/ecG/PNOffMOXcC2LVGI2IsIvZHxNUkYrhwrJz9W8q+Kf2+R7/dOJduSVQq7/6axI2byVLxXEn161D1xX8NL+/a17O63PnF65emZmdnrlXz4wuXr47PL14/fPHy1IWZCzNXJl+fPHH82PETE0e2dH17C+nTtz/6ZPjzM+9/89WTZOLbH84kcTK9ukx6XfWv7d9SyenPbDQqyx4X96c/1xNbPPdO8cdw/nuyIqnfwY6WxkBvRPw3hqOn8L85HJ+93dGKAS1VSSJvo4BdJ9lU/A9sf0WANsv7Afm9faP74AYa3NEDL5qHp5YHpJZjvzci8vgvZ2N+EQPZ2MDgo+SZcZ4kIrY2MrcsLePB/TO30y2ajMMBrbF0Kx/lrm//kyw2R2Igyw0+Kj0T/6XClu5/ZyOF9q0kR+sOiX9on6VbEfG/avvfFxuJ/3IU4v/DTZYv/gEAAAAAAGD73DsVEa81mv9Xqs3/6Wsw/2coIk5uQ/nPf/+vlC/RS7ahOKDg4amINxvO/83DLkZ6qrl/ZvMBepPzF2dnjkTEvyLiUPT2p/mJuvOWCunDX+y706z84vy/dEvLf3C/OL249Eu5biHu9NTClL8GsHUPb0X8P5v/e6C659n5P2n7nzRo/9P4vrrOMva9cvdsMV+pVG7m6cbxvzwXGGitytcRBxu2/ysNbLL28znGs/7AeN4rWO2lJ4WFRnXEP3RO2v4PNo//Ws+79rye+Y2dvy8iji6Wm4X/OuK/cf+/L3mvJwpLCT6dWli4NhHRl5xevX9yY3WGbpXHQx4vafwfennt8b9a/78Qh3siYmmdZf7n6dBPzY5p/6Fz0vifXrv/P5JU2//I2v9aR2Ddicm7I99lZ2rwXLiz62r/j2Vt+qHqnmz8D6gqrdqz3gDtSHUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4AVXioh/RFIaq6VLpbGxiKGI+HcMlmbn5hdePT/38ZXp9Fj2+f+l/JN+h5fzSf75/yOF/GRd/mhE7I2IL3v2ZPmxc3Oz052+eAAAAAAAAAAAAAAAAAAAANghhrI1/5X++vX/qZ97Ol07oOXK1a/PifeBdtQFaK/ypl9Z6d/WigBtt/n4B15064//3pbWA2i/5vH/+Eklk+eTpHj09xbXC2g9/X/YvTYZ/94ehC7QIP5HO1EPoN3WHNO7U0t59x+6kvt/AAAAAADoKnsP3Ps+iYilN/ZkW6qvesxkf+hupU5XAOgYc3hh9yrPdboGQKe4xwdW1vX/WWl0vPns/6Q1FQIAAAAAAAAAAAAAVjm43/p/2K3WXv9vbj90szXW/zcKfo8LgC7S/KM/tP3Q7dzjA89r7a3/BwAAAAAAAAAAAIAdYOD6panZ2Zlr84tbTETEj5UkYqvnaZL4oMGht1pUVksTS1M7ohrbmnjamjP3RsTOuMB2J/JHcHSwGh3+uwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANT8HQAA//9EIykl") r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') 5.585345121s ago: executing program 4 (id=3307): mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 5.468807961s ago: executing program 1 (id=3308): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)="27cbd380375cebfd334ec2bea4ae772c4081bd1068a9b10d39bf59c6a6bff207b34584b21a688938e01d7ba75b2e441cddb3e00eb01a016dcf2e48a4aa17bc01569160e53bb24681434d9d7818fb7a39b5f8b8fd96b6d972eac2", 0x5a}], 0x1) 5.388406104s ago: executing program 9 (id=3309): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$eJzs3TtoJHUcB/Df7CMPEyRqI4gPEBENhFgIgo02CoEQgoigQkTEShIhJthlrWwstFZJZRPEztyVxzXhmoNrc3cpcs0VF664cMVdscfs7OY2yYbsZV8h8/nAZua/+38t7Pc/m5CZCSC3JiLio4goRsRkRJQjImmu8Eb2mKgX10e3FiKq1c/uJ7V6WTnTaDcWEZWI+CCi1HhtdfOr3Yfbn77920r5rX82vxzt1/trtre7M7v/99yv/8+8t1qoPzde3za/j25KWjxXSiJe7MVg50RSGvQMaMf8z//dTHP/UkS8Wct/OQr1yP6+PHS1HO/+dVLbP+7deKWfcwW6r1otp8fAShXInULtO3BSmIqIbL9QmJrKvsPfKibxw9LyT5PfL60sfjfolQroSNNv3eMRO59cHr40diT/d4tZ/tvyfq8mCpzJcHvV0vx/Pr9xO93fL/Z4TsD58Gq2SfM/+c3aOyH/kDvyD/l1kP9Z+Ye8cfyHC+CM2ZV/uKhO//da+Yf8kn+4wMqNnUrLl+Uf8kv+Ib+e5n8kzX/jDwZDA54W0AfNx38AIF+qw4M+AxkYlEGvPwAAAAAAAAAAAAAAAAAAwHHro1sLjUe/xrz2Z8TexxFROjx+dgvTYu1+xBEjtZ/PPUjSageSrFlHvn69ww469G+Xz76ea/Perw3P3+nu+M/q+mu96feXw8UTL4a/thhRSStPl0rHP/9J/fN3qhP7f+GUhuVv2xugW5Ij5Q+/6O/4Rz3eGOz4M9sRV9L1Z7rV+leIl2vb1uvPePMlls/ox0cddgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDfPAkAAP//Z9RrGg==") r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c460502028d04969d000000006903000600044000007f020000380000005e020000ff0300060000200001000020fc03fe010000000051e574640000"], 0x58) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4.928662785s ago: executing program 4 (id=3310): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000400), &(0x7f0000000400)=@tcp=r3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 4.418540182s ago: executing program 9 (id=3311): r0 = syz_usb_connect(0x3, 0x5c, &(0x7f0000000800)=ANY=[@ANYBLOB="12010002ffffff40c505020000010102030109024a0001010080fa0904000008ffffff0007058102000200070501020002000705820200020007050202000200070583020002000705030200020007058402000200070504020002"], 0x0) syz_usb_ep_read(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x81, 0x0, 0x0) 4.167791178s ago: executing program 4 (id=3312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_128={{0x304}, "ae619710c70056b9", "23c37f2f85cb5a0ec81334d653ef0bfd", "f4c06a33", "ba3400"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000001c0)=@ccm_128={{0x304}, "36bcf7c53f573ae7", "b97145d28cc0035d21ab6239c27c9830", "fbff0300", "3895054488adf4c2"}, 0x28) 3.440787289s ago: executing program 1 (id=3313): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipmr_delroute={0x1c, 0x19, 0x20, 0x70bd27, 0x25dfdbfe, {0x80, 0x14, 0x0, 0x0, 0xff, 0x3, 0xfd, 0x8, 0x2900}}, 0x1c}}, 0x4000000) 3.062192951s ago: executing program 4 (id=3314): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000240)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @mcast2, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "4fe846155ed9"}}}}}}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 2.695469149s ago: executing program 2 (id=3315): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x3ff]}, 0x8) unshare(0x2020600) r1 = epoll_create1(0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x2000001b}) signalfd4(r0, &(0x7f00000003c0)={[0x4]}, 0x8, 0x80000) 2.068200458s ago: executing program 4 (id=3316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./bus\x00') write$cgroup_pid(r0, &(0x7f0000000480), 0x12) 1.527626641s ago: executing program 9 (id=3317): sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='6', 0x32) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) 1.527358971s ago: executing program 2 (id=3318): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) 837.322511ms ago: executing program 1 (id=3319): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 193.548969ms ago: executing program 4 (id=3320): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002"], 0x58) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x8001021, r1, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 15.808118ms ago: executing program 9 (id=3321): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341278560001000000010902200001010080fa090400000208055000070501020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 6 (id=3322): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): fbef5 [ 808.218131][T16214] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 808.218184][T16214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.218220][T16214] ? policy_nodemask+0xed/0x4f0 [ 808.218249][T16214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.218285][T16214] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 808.218341][T16214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.218377][T16214] ? policy_nodemask+0xed/0x4f0 [ 808.218410][T16214] alloc_pages_mpol+0x201/0x550 [ 808.218443][T16214] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 808.218476][T16214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.218511][T16214] ? alloc_pages_noprof+0xf9/0x160 [ 808.218552][T16214] alloc_pages_noprof+0x1a/0x160 [ 808.218589][T16214] kimage_alloc_pages+0x72/0x380 [ 808.218635][T16214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.218677][T16214] kimage_alloc_page+0x232/0x910 [ 808.218735][T16214] kimage_load_segment+0x507/0xde0 [ 808.218776][T16214] do_kexec_load+0x58d/0x810 [ 808.218811][T16214] ? __pfx_do_kexec_load+0x10/0x10 [ 808.218846][T16214] ? srso_alias_return_thunk+0x5/0xfbef5 [ 808.218882][T16214] ? _copy_from_user+0x59/0xd0 [ 808.218923][T16214] __x64_sys_kexec_load+0x1bf/0x230 [ 808.218959][T16214] do_syscall_64+0x123/0x790 [ 808.219009][T16214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.219040][T16214] RIP: 0033:0x7fa3bc99e159 [ 808.219064][T16214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.219094][T16214] RSP: 002b:00007fa3bd7bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 808.219124][T16214] RAX: ffffffffffffffda RBX: 00007fa3bcc25fa0 RCX: 00007fa3bc99e159 [ 808.219145][T16214] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 808.219164][T16214] RBP: 00007fa3bca3503b R08: 0000000000000000 R09: 0000000000000000 [ 808.219183][T16214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.219202][T16214] R13: 00007fa3bcc26038 R14: 00007fa3bcc25fa0 R15: 00007ffd71d0c4a8 [ 808.219241][T16214] [ 809.068860][T16225] loop2: detected capacity change from 0 to 1764 [ 809.119349][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.204218][T16225] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 809.503131][ T5736] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 809.633532][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.675339][ T5736] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 809.711022][ T5736] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.711057][ T5736] usb 8-1: Product: syz [ 809.711078][ T5736] usb 8-1: Manufacturer: syz [ 809.711100][ T5736] usb 8-1: SerialNumber: syz [ 809.755934][ T5736] usb 8-1: config 0 descriptor?? [ 809.959118][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.960958][T10617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.977622][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.998942][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.218840][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.868022][T16247] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 810.944339][ T5736] usb 8-1: unexpected transceiver, part 0x00 version 0x48 [ 811.169129][ T5736] usb 8-1: Firmware version (0.0) predates our first public release. [ 811.169161][ T5736] usb 8-1: Please update to version 0.2 or newer [ 811.171087][ T5736] usb 8-1: atusb_probe: initialization failed, error = -19 [ 811.231317][ T5736] usb 8-1: USB disconnect, device number 31 [ 811.549962][T16255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2907'. [ 812.379897][T16261] loop6: detected capacity change from 0 to 32768 [ 812.440730][ T5736] net_ratelimit: 1 callbacks suppressed [ 812.440754][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.538803][T16261] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 812.628953][ T31] audit: type=1800 audit(1789071598.949:114): pid=16261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2910" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 812.675918][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.025212][T16272] loop1: detected capacity change from 0 to 512 [ 813.222030][ T980] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 813.383926][ T980] usb 8-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 813.384922][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 813.386416][ T980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.456081][ T980] usb 8-1: config 0 descriptor?? [ 813.470457][T16273] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 813.544858][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.549675][T16272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.549775][T16272] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 813.810519][T16273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.838185][T16273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.173725][ T980] uclogic 0003:5543:0064.002B: unknown main item tag 0x0 [ 814.173761][ T980] uclogic 0003:5543:0064.002B: unknown main item tag 0x0 [ 814.173788][ T980] uclogic 0003:5543:0064.002B: unknown main item tag 0x0 [ 814.173814][ T980] uclogic 0003:5543:0064.002B: unknown main item tag 0x0 [ 814.173840][ T980] uclogic 0003:5543:0064.002B: unknown main item tag 0x0 [ 814.173865][ T980] uclogic 0003:5543:0064.002B: unknown main item tag 0x0 [ 814.173891][ T980] uclogic 0003:5543:0064.002B: unknown main item tag 0x0 [ 814.173917][ T980] uclogic 0003:5543:0064.002B: unknown main item tag 0x0 [ 814.173944][ T980] uclogic 0003:5543:0064.002B: unknown main item tag 0x0 [ 814.173969][ T980] uclogic 0003:5543:0064.002B: unknown main item tag 0x0 [ 814.378071][ T980] uclogic 0003:5543:0064.002B: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.7-1/input0 [ 814.437504][ T980] usb 8-1: USB disconnect, device number 32 [ 814.669193][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.686845][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.845164][ T7943] ocfs2: Unmounting device (7,6) on (node local) [ 815.096366][T16286] fido_id[16286]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 815.239965][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 815.716801][T10615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.756657][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.756769][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.757567][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.761475][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.883643][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.908743][T16313] netlink: 'syz.7.2928': attribute type 10 has an invalid length. [ 817.055937][T16324] input: syz0 as /devices/virtual/input/input51 [ 818.181894][T16327] loop5: detected capacity change from 0 to 32768 [ 818.225030][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.251085][T16327] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 818.349474][ T31] audit: type=1800 audit(1789071604.669:115): pid=16327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2932" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 818.875635][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.340240][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.289944][T10719] ocfs2: Unmounting device (7,5) on (node local) [ 820.412380][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.435442][T16351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.637203][T16351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.930573][T16331] loop4: detected capacity change from 0 to 32768 [ 821.095874][T16331] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 821.395023][ T31] audit: type=1800 audit(1789071607.719:116): pid=16331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2934" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 821.426944][ T5626] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 821.551016][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.591948][ T5626] usb 8-1: Using ep0 maxpacket: 16 [ 821.595096][ T5626] usb 8-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 821.597647][ T5626] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.597685][ T5626] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.597716][ T5626] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 821.597765][ T5626] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.746458][ T5626] usb 8-1: config 0 descriptor?? [ 821.985768][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.340348][ T5626] hid_parser_main: 438 callbacks suppressed [ 822.340381][ T5626] hid-multitouch 0003:045E:9994.002C: unknown main item tag 0x2 [ 822.340497][ T5626] hid-multitouch 0003:045E:9994.002C: unknown main item tag 0x0 [ 822.340524][ T5626] hid-multitouch 0003:045E:9994.002C: unknown main item tag 0x0 [ 822.340551][ T5626] hid-multitouch 0003:045E:9994.002C: unknown main item tag 0x0 [ 822.340577][ T5626] hid-multitouch 0003:045E:9994.002C: unknown main item tag 0x0 [ 822.340604][ T5626] hid-multitouch 0003:045E:9994.002C: unknown main item tag 0x0 [ 822.340630][ T5626] hid-multitouch 0003:045E:9994.002C: unknown main item tag 0x0 [ 822.340657][ T5626] hid-multitouch 0003:045E:9994.002C: unknown main item tag 0x0 [ 822.340683][ T5626] hid-multitouch 0003:045E:9994.002C: unknown main item tag 0x0 [ 822.340709][ T5626] hid-multitouch 0003:045E:9994.002C: unknown main item tag 0x0 [ 822.490078][ T5626] hid-multitouch 0003:045E:9994.002C: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.7-1/input0 [ 822.605884][T16331] workqueue: Failed to create a rescuer kthread for wq "dio/loop4": -EINTR [ 822.663775][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.666646][ T5751] usb 8-1: USB disconnect, device number 33 [ 822.916869][T16331] (syz.4.2934,16331,0):ocfs2_dio_end_io:2419 ERROR: Direct IO failed, bytes = -12 [ 823.369695][T16377] fido_id[16377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 823.499820][T13880] ocfs2: Unmounting device (7,4) on (node local) [ 823.720723][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.852071][ T5751] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 824.989104][T16390] loop6: detected capacity change from 0 to 131072 [ 824.996954][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.012724][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.015838][ T5751] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 825.038281][ T5751] usb 2-1: config 65 has an invalid interface number: 3 but max is 0 [ 825.038319][ T5751] usb 2-1: config 65 has no interface number 0 [ 825.082058][ T5751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.082091][ T5751] usb 2-1: Product: syz [ 825.082113][ T5751] usb 2-1: Manufacturer: syz [ 825.082134][ T5751] usb 2-1: SerialNumber: syz [ 825.087999][T16390] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 825.088025][T16390] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 825.112490][T16390] F2FS-fs (loop6): invalid crc value [ 825.219649][T16390] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 825.240904][T16390] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 825.240935][T16390] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 825.306616][ T5751] usb 2-1: 3:0 : does not exist [ 825.306645][ T5751] usb 2-1: 3:0 : does not exist [ 825.614373][T16389] loop7: detected capacity change from 0 to 32768 [ 825.665856][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.694812][T16389] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 825.769590][ T31] audit: type=1800 audit(1789071612.089:117): pid=16390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2955" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 825.769652][ T31] audit: type=1800 audit(1789071612.089:118): pid=16389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2954" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 826.143914][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.344701][ T5751] usb 2-1: USB disconnect, device number 23 [ 826.998054][ T5600] udevd[5600]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:65.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 827.093726][ T980] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 827.222772][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.115815][T16408] loop1: detected capacity change from 0 to 131072 [ 828.129226][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.186517][T16408] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 828.186553][T16408] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 828.214786][T16408] F2FS-fs (loop1): invalid crc value [ 828.316703][T16408] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 828.364933][T16408] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 828.364985][T16408] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 828.421081][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.730309][T16408] CacheFiles: Lookup cache failed with error -117 [ 828.730389][T16408] CacheFiles: Failed to register: -117 [ 829.280453][T16419] loop2: detected capacity change from 0 to 1024 [ 829.301016][T16419] EXT4-fs: Ignoring removed bh option [ 829.330648][T16419] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 829.425847][T16419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 829.467079][ T6774] ocfs2: Unmounting device (7,7) on (node local) [ 829.536882][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.788437][T16426] EXT4-fs error (device loop2): ext4_read_inline_dir:1511: inode #12: block 7: comm syz.2.2961: path /51/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 829.940444][T16426] EXT4-fs (loop2): Remounting filesystem read-only [ 830.215712][T16419] overlayfs: cleanup of 'work/#44' failed (-30) [ 830.216050][T16419] overlayfs: cleanup of 'work/#45' failed (-30) [ 830.216088][T16419] overlayfs: failed to set xattr on upper [ 830.216099][T16419] overlayfs: ...falling back to redirect_dir=nofollow. [ 830.216110][T16419] overlayfs: ...falling back to index=off. [ 830.216121][T16419] overlayfs: ...falling back to uuid=null. [ 830.620171][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.131180][T14980] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.156784][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.180588][T16432] loop4: detected capacity change from 0 to 1024 [ 831.265265][T16432] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 831.339467][T16432] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #3: block 1: comm syz.4.2966: lblock 1 mapped to illegal pblock 1 (length 1) [ 831.339517][T16432] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 831.341842][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 831.341868][ C0] EXT4-fs (loop4): initial error at time 1789071617: ext4_map_blocks:832: inode 3: block 1 [ 831.341916][ C0] EXT4-fs (loop4): last error at time 1789071617: ext4_map_blocks:832: inode 3: block 1 [ 831.385590][ T980] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 831.416023][T16432] EXT4-fs (loop4): Remounting filesystem read-only [ 831.416049][T16432] Quota error (device loop4): write_blk: dquota write failed [ 831.416088][T16432] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 831.416188][T16432] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 831.416293][T16432] EXT4-fs (loop4): 1 orphan inode deleted [ 831.470598][T16432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.542755][ T980] usb 8-1: Using ep0 maxpacket: 32 [ 831.549715][ T980] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 831.563390][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.563430][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.563475][ T980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.609065][ T980] usb 8-1: config 0 descriptor?? [ 831.645546][ T980] hub 8-1:0.0: USB hub found [ 831.688454][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.902254][ T980] hub 8-1:0.0: 1 port detected [ 831.976048][T16432] EXT4-fs (loop4): shut down requested (2) [ 832.348528][T13880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.594147][ T980] hub 8-1:0.0: activate --> -90 [ 832.784720][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.035158][ T5751] usb 8-1: USB disconnect, device number 34 [ 833.392614][ T980] usb 8-1-port1: config error [ 833.831437][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.193775][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.412749][ T980] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 834.567099][ T980] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 834.586199][ T980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.586249][ T980] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 834.586284][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 834.586320][ T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 834.586358][ T980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 834.664118][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 834.664154][ T980] usb 6-1: Product: syz [ 834.664175][ T980] usb 6-1: Manufacturer: syz [ 834.664197][ T980] usb 6-1: SerialNumber: syz [ 834.719251][ T980] usb 6-1: config 0 descriptor?? [ 834.804210][T16462] netlink: 'syz.4.2977': attribute type 11 has an invalid length. [ 834.891073][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.915484][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.036589][ T980] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 835.036623][ T980] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 835.253718][ T980] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 835.253750][ T980] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 835.253779][ T980] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 835.460483][ T980] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 835.814503][T16475] loop1: detected capacity change from 0 to 4096 [ 835.890559][T16475] EXT4-fs (loop1): Test dummy encryption mode enabled [ 835.958515][T16475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.032890][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.162436][ T980] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 836.163646][ T980] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 836.240559][ T980] usb 6-1: USB disconnect, device number 21 [ 836.626240][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.672286][T16490] loop6: detected capacity change from 0 to 131072 [ 837.718551][T16490] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 837.718580][T16490] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 837.720906][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.721050][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.755334][T16490] F2FS-fs (loop6): invalid crc value [ 837.861942][T16490] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 837.894034][T16490] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 837.894067][T16490] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 838.806076][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.315084][T16508] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿ [ 839.912930][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.982301][ T5341] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 840.135026][ T5341] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 840.142144][ T5341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.142190][ T5341] usb 6-1: Product: syz [ 840.142211][ T5341] usb 6-1: Manufacturer: syz [ 840.142232][ T5341] usb 6-1: SerialNumber: syz [ 840.178800][ T5341] usb 6-1: config 0 descriptor?? [ 840.752746][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.051034][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.450144][T16529] loop4: detected capacity change from 0 to 32768 [ 841.530180][T16529] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 841.611334][ T31] audit: type=1800 audit(1789071627.929:119): pid=16529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2998" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 841.670167][ T5341] usb 6-1: unexpected transceiver, part 0x00 version 0x48 [ 841.871082][ T5341] usb 6-1: Firmware version (0.0) predates our first public release. [ 841.871115][ T5341] usb 6-1: Please update to version 0.2 or newer [ 841.890526][ T5341] usb 6-1: atusb_probe: initialization failed, error = -19 [ 841.909408][T16536] LUN: removable file: (no medium) [ 841.965270][ T5341] usb 6-1: USB disconnect, device number 22 [ 842.140704][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.708214][T16539] Invalid ELF header len 18 [ 843.251161][T16541] loop7: detected capacity change from 0 to 32768 [ 843.289044][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.337908][T16541] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 843.535415][T16541] XFS (loop7): Ending clean mount [ 843.545307][T16541] XFS (loop7): Quotacheck needed: Please wait. [ 843.705444][T13880] ocfs2: Unmounting device (7,4) on (node local) [ 843.801496][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.882006][ T5751] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 844.020933][T16541] XFS (loop7): Quotacheck: Done. [ 844.047843][ T5751] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 844.062780][ T5751] usb 3-1: config 65 has an invalid interface number: 3 but max is 0 [ 844.062813][ T5751] usb 3-1: config 65 has no interface number 0 [ 844.082918][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.082952][ T5751] usb 3-1: Product: syz [ 844.082997][ T5751] usb 3-1: Manufacturer: syz [ 844.083018][ T5751] usb 3-1: SerialNumber: syz [ 844.154608][ T5751] usb 3-1: 3:0 : does not exist [ 844.154639][ T5751] usb 3-1: 3:0 : does not exist [ 844.414345][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.512754][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.795385][ T5751] usb 3-1: USB disconnect, device number 18 [ 845.066109][ T6774] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 845.220860][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:65.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 845.523881][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.243252][ T5341] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 846.282178][ T5751] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 846.414333][ T5341] usb 7-1: New USB device found, idVendor=0499, idProduct=1020, bcdDevice= 0.40 [ 846.429605][ T5341] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 846.446690][ T5751] usb 3-1: Using ep0 maxpacket: 16 [ 846.453156][ T5751] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 846.456840][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.456880][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.500127][ T5751] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 846.500161][ T5751] usb 3-1: Manufacturer: syz [ 846.516132][ T5341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.516164][ T5341] usb 7-1: Product: syz [ 846.516185][ T5341] usb 7-1: Manufacturer: syz [ 846.516207][ T5341] usb 7-1: SerialNumber: syz [ 846.546078][ T5751] usb 3-1: config 0 descriptor?? [ 846.557617][T16568] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 846.647063][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.833316][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.053806][ T5341] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 847.094322][ T5751] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.002E/input/input52 [ 847.225444][ T5751] creative-sb0540 0003:041E:3100.002E: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 847.273005][ T5751] usb 3-1: USB disconnect, device number 19 [ 847.760548][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.806888][T16585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.834196][ T5341] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 847.876418][ T5341] usb 7-1: USB disconnect, device number 25 [ 848.571085][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 848.841955][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.919986][T16594] fido_id[16594]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 849.433052][T16605] FAULT_INJECTION: forcing a failure. [ 849.433052][T16605] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 849.433098][T16605] CPU: 0 UID: 0 PID: 16605 Comm: syz.2.3022 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.433140][T16605] Tainted: [L]=SOFTLOCKUP [ 849.433152][T16605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 849.433170][T16605] Call Trace: [ 849.433181][T16605] [ 849.433193][T16605] dump_stack_lvl+0x100/0x190 [ 849.433240][T16605] should_fail_ex.cold+0x5/0xa [ 849.433274][T16605] ? prepare_alloc_pages+0x16d/0x5b0 [ 849.433328][T16605] should_fail_alloc_page+0xeb/0x140 [ 849.433396][T16605] prepare_alloc_pages+0x1f0/0x5b0 [ 849.433456][T16605] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 849.433504][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.433541][T16605] ? lock_acquire+0x1d1/0x380 [ 849.433569][T16605] ? folio_lock_anon_vma_read+0x348/0xe30 [ 849.433613][T16605] ? folio_lock_anon_vma_read+0x348/0xe30 [ 849.433653][T16605] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 849.433697][T16605] ? rcu_is_watching+0x13/0xc0 [ 849.433734][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.433770][T16605] ? __up_read+0x333/0x980 [ 849.433805][T16605] ? __pfx___up_read+0x10/0x10 [ 849.433837][T16605] ? rmap_walk_anon+0x6f6/0x9a0 [ 849.433866][T16605] ? rmap_walk_anon+0x6f6/0x9a0 [ 849.433893][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.433952][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.433990][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.434035][T16605] __folio_alloc_noprof+0x16/0x260 [ 849.434077][T16605] alloc_migration_target+0x1d7/0x6d0 [ 849.434113][T16605] migrate_pages_batch+0x5c4/0x4680 [ 849.434151][T16605] ? __pfx_alloc_migration_target+0x10/0x10 [ 849.434195][T16605] ? walk_pgd_range+0x11d1/0x1e00 [ 849.434236][T16605] ? __pfx_migrate_pages_batch+0x10/0x10 [ 849.434298][T16605] migrate_pages_sync+0x12c/0x880 [ 849.434334][T16605] ? __pfx_alloc_migration_target+0x10/0x10 [ 849.434375][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.434411][T16605] ? vma_migratable+0x380/0x450 [ 849.434444][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.434482][T16605] ? __pfx_migrate_pages_sync+0x10/0x10 [ 849.434514][T16605] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 849.434550][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.434591][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.434627][T16605] ? walk_page_range_mm_unsafe+0x32c/0xa10 [ 849.434676][T16605] migrate_pages+0x1a83/0x2850 [ 849.434716][T16605] ? __pfx_alloc_migration_target+0x10/0x10 [ 849.434756][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.434793][T16605] ? __pfx_migrate_pages+0x10/0x10 [ 849.434828][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.434864][T16605] ? queue_pages_range+0x11e/0x180 [ 849.434911][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.434947][T16605] ? rcu_is_watching+0x13/0xc0 [ 849.434984][T16605] ? __up_read+0x333/0x980 [ 849.435019][T16605] ? __pfx___up_read+0x10/0x10 [ 849.435051][T16605] ? do_migrate_pages+0x451/0x740 [ 849.435082][T16605] ? do_migrate_pages+0x451/0x740 [ 849.435112][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.435156][T16605] do_migrate_pages+0x488/0x740 [ 849.435198][T16605] ? __pfx_do_migrate_pages+0x10/0x10 [ 849.435231][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.435267][T16605] ? lock_acquire+0x1d1/0x380 [ 849.435297][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.435332][T16605] ? rcu_is_watching+0x13/0xc0 [ 849.435373][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.435409][T16605] ? cap_capable+0x107/0x430 [ 849.435444][T16605] ? get_task_mm+0xc2/0xf0 [ 849.435492][T16605] ? srso_alias_return_thunk+0x5/0xfbef5 [ 849.435528][T16605] ? security_capable+0xbd/0x260 [ 849.435569][T16605] kernel_migrate_pages+0x560/0x700 [ 849.435602][T16605] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 849.435648][T16605] __x64_sys_migrate_pages+0x96/0x100 [ 849.435680][T16605] ? do_syscall_64+0xb4/0x790 [ 849.435729][T16605] do_syscall_64+0x123/0x790 [ 849.435779][T16605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.435811][T16605] RIP: 0033:0x7f85c099e159 [ 849.435836][T16605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.435866][T16605] RSP: 002b:00007f85c178a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 849.435896][T16605] RAX: ffffffffffffffda RBX: 00007f85c0c25fa0 RCX: 00007f85c099e159 [ 849.435917][T16605] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000 [ 849.435937][T16605] RBP: 00007f85c0a3503b R08: 0000000000000000 R09: 0000000000000000 [ 849.435956][T16605] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 849.435975][T16605] R13: 00007f85c0c26038 R14: 00007f85c0c25fa0 R15: 00007fff1ca17458 [ 849.436015][T16605] [ 850.047914][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.048034][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.576333][ T31] audit: type=1326 audit(1789071636.899:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16609 comm="syz.6.3024" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c5f19e159 code=0x0 [ 850.711118][T16615] bond0: invalid NS target :: specified for addition [ 850.711156][T16615] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 850.803038][ T980] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 850.958044][ T980] usb 8-1: not running at top speed; connect to a high speed hub [ 850.958082][ T980] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 850.959427][ T980] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.015168][ T980] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.015204][ T980] usb 8-1: Product: syz [ 851.015224][ T980] usb 8-1: Manufacturer: syz [ 851.015245][ T980] usb 8-1: SerialNumber: syz [ 851.111263][ T980] keyspan 8-1:1.0: Keyspan 4 port adapter converter detected [ 851.111526][ T980] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 851.111597][ T980] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 851.155102][ T980] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 851.221205][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.232765][ T980] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 851.258466][ T980] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 851.284363][ T980] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 851.309051][ T980] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 4 [ 851.329712][ T980] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 851.360233][ T980] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 851.392892][ T980] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 851.819648][T10617] IPVS: starting estimator thread 0... [ 851.915029][T16629] IPVS: using max 29 ests per chain, 69600 per kthread [ 852.521608][T16631] loop6: detected capacity change from 0 to 32768 [ 852.588105][T16631] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 852.588131][T16631] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 852.620850][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.727230][T16631] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 852.732146][ T5626] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 852.732165][ T5626] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 853.258940][T16636] loop5: detected capacity change from 0 to 32768 [ 853.333755][T16636] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 853.333787][T16636] CPU: 0 UID: 0 PID: 16636 Comm: syz.5.3033 Tainted: G L syzkaller #0 PREEMPT(full) [ 853.333831][T16636] Tainted: [L]=SOFTLOCKUP [ 853.333843][T16636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 853.333862][T16636] Call Trace: [ 853.333873][T16636] [ 853.333885][T16636] dump_stack_lvl+0x100/0x190 [ 853.333932][T16636] sysfs_warn_dup.cold+0x1c/0x28 [ 853.333979][T16636] sysfs_create_dir_ns+0x24b/0x2b0 [ 853.334011][T16636] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 853.334041][T16636] ? find_held_lock+0x2b/0x80 [ 853.334080][T16636] ? kobject_add_internal+0x25f/0x930 [ 853.334116][T16636] ? kobject_add_internal+0x25f/0x930 [ 853.334154][T16636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 853.334190][T16636] ? do_raw_spin_unlock+0x145/0x1e0 [ 853.334229][T16636] kobject_add_internal+0x2c8/0x930 [ 853.334270][T16636] kobject_init_and_add+0x121/0x180 [ 853.334308][T16636] ? __pfx_kobject_init_and_add+0x10/0x10 [ 853.334357][T16636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 853.334393][T16636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 853.334429][T16636] ? lockdep_init_map_type+0x5c/0x250 [ 853.334461][T16636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 853.334496][T16636] ? lockdep_init_map_type+0x5c/0x250 [ 853.334534][T16636] gfs2_sys_fs_add+0x209/0x410 [ 853.334583][T16636] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 853.334630][T16636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 853.334670][T16636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 853.334706][T16636] ? alloc_workqueue_noprof+0xe1/0x130 [ 853.334753][T16636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 853.334799][T16636] gfs2_fill_super+0x1452/0x2d00 [ 853.334833][T16636] ? __pfx_vsnprintf+0x10/0x10 [ 853.334890][T16636] ? __pfx_gfs2_fill_super+0x10/0x10 [ 853.334924][T16636] ? __pfx_snprintf+0x10/0x10 [ 853.334971][T16636] ? find_held_lock+0x2b/0x80 [ 853.335010][T16636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 853.335046][T16636] ? set_blocksize+0x1cf/0x460 [ 853.335077][T16636] ? setup_bdev_super+0x4b6/0x770 [ 853.335120][T16636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 853.335157][T16636] ? sb_set_blocksize+0x1f6/0x290 [ 853.335197][T16636] ? get_tree_bdev_flags+0x38c/0x620 [ 853.335238][T16636] get_tree_bdev_flags+0x38c/0x620 [ 853.335279][T16636] ? __pfx_gfs2_fill_super+0x10/0x10 [ 853.335315][T16636] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 853.335366][T16636] ? rcu_is_watching+0x13/0xc0 [ 853.335403][T16636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 853.335439][T16636] ? apparmor_capable+0x1d7/0x4d0 [ 853.335484][T16636] gfs2_get_tree+0x4e/0x280 [ 853.335521][T16636] vfs_get_tree+0x92/0x320 [ 853.335553][T16636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 853.335592][T16636] path_mount+0x7d0/0x24c0 [ 853.335634][T16636] ? __pfx_path_mount+0x10/0x10 [ 853.335667][T16636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 853.335703][T16636] ? lockdep_hardirqs_on+0x7d/0x110 [ 853.335753][T16636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 853.335789][T16636] ? kmem_cache_free+0x127/0x6c0 [ 853.335825][T16636] ? kfree+0x22b/0x6d0 [ 853.335870][T16636] ? __x64_sys_mount+0x293/0x310 [ 853.335904][T16636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 853.335940][T16636] __x64_sys_mount+0x293/0x310 [ 853.335977][T16636] ? __pfx___x64_sys_mount+0x10/0x10 [ 853.336017][T16636] ? srso_alias_return_thunk+0x5/0xfbef5 [ 853.336060][T16636] do_syscall_64+0x123/0x790 [ 853.336109][T16636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.336141][T16636] RIP: 0033:0x7fa3bc99f3ca [ 853.336166][T16636] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.336195][T16636] RSP: 002b:00007fa3bd7bce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 853.336225][T16636] RAX: ffffffffffffffda RBX: 00007fa3bd7bcee0 RCX: 00007fa3bc99f3ca [ 853.336246][T16636] RDX: 0000200000037f40 RSI: 00002000000008c0 RDI: 00007fa3bd7bcea0 [ 853.336266][T16636] RBP: 0000200000037f40 R08: 00007fa3bd7bcee0 R09: 0000000001010084 [ 853.336286][T16636] R10: 0000000001010084 R11: 0000000000000246 R12: 00002000000008c0 [ 853.336306][T16636] R13: 00007fa3bd7bcea0 R14: 0000000000037f58 R15: 0000200000000480 [ 853.336351][T16636] [ 853.336433][T16636] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 853.336456][T16636] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 854.271115][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.271239][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.299149][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.529773][ T980] usb 8-1: USB disconnect, device number 35 [ 854.576251][ T980] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 854.620832][ T980] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 854.784926][ T980] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 854.856589][ T5626] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 2124ms [ 854.856766][ T5626] gfs2: fsid=syz:syz.0: jid=0: Done [ 854.856802][T16631] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 854.935411][ T980] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 854.970744][ T980] keyspan 8-1:1.0: device disconnected [ 855.326826][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.361319][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.171701][T16671] netlink: 51 bytes leftover after parsing attributes in process `syz.5.3048'. [ 857.365048][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.392894][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.467124][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.055150][T16696] input: syz0 as /devices/virtual/input/input53 [ 859.524995][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.812001][ T5751] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 859.963795][ T5751] usb 6-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 859.969033][ T5751] usb 6-1: config 0 has no interfaces? [ 859.969071][ T5751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.023266][ T5751] usb 6-1: config 0 descriptor?? [ 860.319820][ T5751] usb 6-1: USB disconnect, device number 23 [ 860.437238][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.636487][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.501011][T16727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3068'. [ 861.728605][T16730] loop5: detected capacity change from 0 to 16 [ 861.756060][T16730] erofs (device loop5): mounted with root inode @ nid 36. [ 861.775881][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.871942][T13057] Bluetooth: hci3: command 0x0406 tx timeout [ 861.880887][ T980] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 861.880912][ T980] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 862.158314][T16738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.397833][T16727] syz.2.3068 (16727) used greatest stack depth: 19256 bytes left [ 862.736869][ T5341] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 862.901207][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.919259][ T5341] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 862.945038][ T5341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.493916][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.715664][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.735928][ T5341] cxacru 5-1:1.0: wrong cm 0xa0 in response to cm 0x91 [ 863.735986][ T5341] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 863.736005][ T5341] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 863.785721][ T5341] cxacru 5-1:1.0: probe with driver cxacru failed with error -5 [ 863.842190][ T5341] usb 5-1: USB disconnect, device number 15 [ 863.892710][T13588] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 863.994360][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.047333][T13588] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 864.062301][T13588] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 864.062342][T13588] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 864.104745][T13588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 864.104780][T13588] usb 3-1: Product: syz [ 864.104802][T13588] usb 3-1: Manufacturer: syz [ 864.177149][T13588] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 864.562002][ T5751] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 864.720529][ T5751] usb 6-1: New USB device found, idVendor=0499, idProduct=1020, bcdDevice= 0.40 [ 864.752164][ T5751] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 864.772478][ T5751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.772512][ T5751] usb 6-1: Product: syz [ 864.772533][ T5751] usb 6-1: Manufacturer: syz [ 864.772577][ T5751] usb 6-1: SerialNumber: syz [ 864.843306][T16757] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 865.118802][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.334910][ T5751] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 865.360438][T16763] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 865.481140][T16763] Bluetooth: hci5: command 0x0406 tx timeout [ 865.501715][ T980] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 865.501762][ T980] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 865.580854][T13588] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 865.617404][T13588] usb 3-1: USB disconnect, device number 20 [ 865.737052][T13588] mos7840 3-1:1.0: device disconnected [ 865.835487][ T5751] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 865.867345][ T5751] usb 6-1: USB disconnect, device number 24 [ 866.116804][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 866.239438][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.513563][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.747098][T16772] capability: warning: `syz.2.3084' uses 32-bit capabilities (legacy support in use) [ 867.361492][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.987548][T16784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 868.113580][T13057] Bluetooth: hci0: command 0x0406 tx timeout [ 868.120761][ T980] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 868.120786][ T980] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 868.458063][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.490646][T16790] loop4: detected capacity change from 0 to 128 [ 868.600410][T16790] FAULT_INJECTION: forcing a failure. [ 868.600410][T16790] name failslab, interval 1, probability 0, space 0, times 0 [ 868.600458][T16790] CPU: 0 UID: 0 PID: 16790 Comm: syz.4.3092 Tainted: G L syzkaller #0 PREEMPT(full) [ 868.600500][T16790] Tainted: [L]=SOFTLOCKUP [ 868.600512][T16790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 868.600531][T16790] Call Trace: [ 868.600542][T16790] [ 868.600554][T16790] dump_stack_lvl+0x100/0x190 [ 868.600601][T16790] should_fail_ex.cold+0x5/0xa [ 868.600635][T16790] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.600677][T16790] should_failslab+0xc2/0x120 [ 868.600708][T16790] kmem_cache_alloc_noprof+0x92/0x6a0 [ 868.600751][T16790] ? __pfx_map_id_range_down+0x10/0x10 [ 868.600781][T16790] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.600818][T16790] ? security_inode_alloc+0x3b/0x2c0 [ 868.600866][T16790] security_inode_alloc+0x3b/0x2c0 [ 868.600909][T16790] inode_init_always_gfp+0xc6f/0xfb0 [ 868.600946][T16790] alloc_inode+0x8e/0x250 [ 868.600990][T16790] new_inode+0x22/0x1c0 [ 868.601033][T16790] fat_build_inode+0x14e/0x2d0 [ 868.601072][T16790] vfat_lookup+0x364/0x5b0 [ 868.601116][T16790] ? __pfx_vfat_lookup+0x10/0x10 [ 868.601153][T16790] ? d_alloc+0x176/0x1e0 [ 868.601190][T16790] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.601231][T16790] ? do_raw_spin_unlock+0x145/0x1e0 [ 868.601268][T16790] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.601305][T16790] ? _raw_spin_unlock+0x28/0x50 [ 868.601344][T16790] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.601391][T16790] lookup_one_qstr_excl+0x1cd/0x250 [ 868.601429][T16790] ? mnt_want_write+0x164/0x420 [ 868.601477][T16790] filename_create+0x1cf/0x400 [ 868.601522][T16790] ? __pfx_filename_create+0x10/0x10 [ 868.601571][T16790] ? __might_fault+0xc5/0x140 [ 868.601607][T16790] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.601649][T16790] filename_mknodat+0x190/0x7f0 [ 868.601686][T16790] ? __pfx_filename_mknodat+0x10/0x10 [ 868.601716][T16790] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.601753][T16790] ? strncpy_from_user+0x19d/0x2d0 [ 868.601797][T16790] ? srso_alias_return_thunk+0x5/0xfbef5 [ 868.601833][T16790] ? do_getname+0x191/0x390 [ 868.601873][T16790] __x64_sys_mknodat+0xb5/0xf0 [ 868.601905][T16790] do_syscall_64+0x123/0x790 [ 868.601956][T16790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.601988][T16790] RIP: 0033:0x7fd9e5d9e159 [ 868.602013][T16790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.602043][T16790] RSP: 002b:00007fd9e6c30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 868.602072][T16790] RAX: ffffffffffffffda RBX: 00007fd9e6025fa0 RCX: 00007fd9e5d9e159 [ 868.602093][T16790] RDX: 0000000000001000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 868.602113][T16790] RBP: 00007fd9e5e3503b R08: 0000000000000000 R09: 0000000000000000 [ 868.602133][T16790] R10: 0000000000000709 R11: 0000000000000246 R12: 0000000000000000 [ 868.602152][T16790] R13: 00007fd9e6026038 R14: 00007fd9e6025fa0 R15: 00007ffca85eea78 [ 868.602193][T16790] [ 869.308761][T16796] loop5: detected capacity change from 0 to 7 [ 869.329128][T16796] Dev loop5: unable to read RDB block 7 [ 869.329163][T16796] loop5: unable to read partition table [ 869.329340][T16796] loop5: partition table beyond EOD, truncated [ 869.329361][T16796] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 869.482373][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.482442][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.549488][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.564030][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.284657][T16802] loop2: detected capacity change from 0 to 32768 [ 870.344254][T16802] JBD2: Ignoring recovery information on journal [ 870.413785][T16802] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 870.619417][T16802] overlayfs: upper fs does not support tmpfile. [ 870.626450][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.726077][T16802] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 870.735251][T16802] overlayfs: upper fs missing required features. [ 871.167730][T16814] netlink: 'syz.1.3102': attribute type 1 has an invalid length. [ 871.280284][T14980] ocfs2: Unmounting device (7,2) on (node local) [ 871.641452][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.871753][T16825] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3107'. [ 872.100055][T16820] pi3usb30532 0-0005: Error reading config register -5 [ 872.100222][T16820] pi3usb30532 0-0005: probe with driver pi3usb30532 failed with error -5 [ 872.100426][T16820] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 872.167661][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3108'. [ 872.593599][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.683137][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.810324][T16829] hsr_slave_1 (unregistering): left promiscuous mode [ 872.894837][T16836] bridge0: entered promiscuous mode [ 872.894867][T16836] bridge0: entered allmulticast mode [ 873.312912][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.746575][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.944649][T16852] overlayfs: overlapping lowerdir path [ 874.441261][T16860] loop4: detected capacity change from 0 to 32768 [ 874.472328][T16860] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 874.472354][T16860] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 874.556709][T16860] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 874.561179][ T5341] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 874.561199][ T5341] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 874.952965][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.259584][T16869] loop1: detected capacity change from 0 to 256 [ 875.425861][ T5341] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 864ms [ 875.426063][ T5341] gfs2: fsid=syz:syz.0: jid=0: Done [ 875.426104][T16860] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 875.634724][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.081374][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.231290][T16881] device-mapper: ioctl: device name cannot contain '/' [ 876.305760][T16884] loop5: detected capacity change from 0 to 1024 [ 876.325058][T16884] EXT4-fs: Ignoring removed bh option [ 876.342349][T16883] netlink: 'syz.2.3129': attribute type 3 has an invalid length. [ 876.342385][T16883] netlink: 'syz.2.3129': attribute type 3 has an invalid length. [ 876.395349][T16884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 876.465306][ T31] audit: type=1800 audit(1789071662.789:121): pid=16884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3128" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 876.670499][T16890] EXT4-fs (loop5): shut down requested (1) [ 877.117224][T10719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.189275][T16894] FAULT_INJECTION: forcing a failure. [ 877.189275][T16894] name failslab, interval 1, probability 0, space 0, times 0 [ 877.189321][T16894] CPU: 0 UID: 0 PID: 16894 Comm: syz.2.3133 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.189364][T16894] Tainted: [L]=SOFTLOCKUP [ 877.189383][T16894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 877.189402][T16894] Call Trace: [ 877.189412][T16894] [ 877.189424][T16894] dump_stack_lvl+0x100/0x190 [ 877.189471][T16894] should_fail_ex.cold+0x5/0xa [ 877.189505][T16894] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.189547][T16894] should_failslab+0xc2/0x120 [ 877.189577][T16894] kmem_cache_alloc_noprof+0x92/0x6a0 [ 877.189622][T16894] ? copy_utsname+0x1a8/0x690 [ 877.189676][T16894] copy_utsname+0x1a8/0x690 [ 877.189725][T16894] create_new_namespaces+0x16a/0xac0 [ 877.189758][T16894] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.189793][T16894] ? security_capable+0x80/0x260 [ 877.189834][T16894] unshare_nsproxy_namespaces+0xf2/0x220 [ 877.189870][T16894] ksys_unshare+0x4a2/0xa70 [ 877.189904][T16894] ? __pfx_ksys_unshare+0x10/0x10 [ 877.189935][T16894] ? srso_alias_return_thunk+0x5/0xfbef5 [ 877.189989][T16894] __x64_sys_unshare+0x31/0x40 [ 877.190021][T16894] do_syscall_64+0x123/0x790 [ 877.190072][T16894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.190104][T16894] RIP: 0033:0x7f85c099e159 [ 877.190128][T16894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.190157][T16894] RSP: 002b:00007f85c178a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 877.190186][T16894] RAX: ffffffffffffffda RBX: 00007f85c0c25fa0 RCX: 00007f85c099e159 [ 877.190207][T16894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080 [ 877.190226][T16894] RBP: 00007f85c0a3503b R08: 0000000000000000 R09: 0000000000000000 [ 877.190246][T16894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.190265][T16894] R13: 00007f85c0c26038 R14: 00007f85c0c25fa0 R15: 00007fff1ca17458 [ 877.190304][T16894] [ 877.191134][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.519039][ T5626] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 877.683764][ T5626] usb 7-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 877.685471][ T5626] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 877.685521][ T5626] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 877.685555][ T5626] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 877.685589][ T5626] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 877.685622][ T5626] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 877.777675][ T5626] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.777711][ T5626] usb 7-1: Product: syz [ 877.777732][ T5626] usb 7-1: Manufacturer: syz [ 877.777754][ T5626] usb 7-1: SerialNumber: syz [ 877.817911][T16893] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 877.818062][T16893] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 877.818196][T16893] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 877.869925][ T5626] keyspan 7-1:1.0: Keyspan 1 port adapter converter detected [ 877.870415][ T5626] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 877.911304][ T5626] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 82 [ 877.911414][ T5626] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 877.911596][ T5626] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 3 [ 877.988818][ T5626] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 878.233791][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.258335][T16901] batadv_slave_1: entered promiscuous mode [ 878.598511][T16900] batadv_slave_1: left promiscuous mode [ 878.641907][ T5626] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 878.672998][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.803458][ T5626] usb 2-1: not running at top speed; connect to a high speed hub [ 878.803496][ T5626] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 878.809081][ T5626] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.852937][ T5626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.852993][ T5626] usb 2-1: Product: syz [ 878.853015][ T5626] usb 2-1: Manufacturer: syz [ 878.853036][ T5626] usb 2-1: SerialNumber: syz [ 878.859798][T16905] loop4: detected capacity change from 0 to 128 [ 878.963426][T16905] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 878.995265][T16905] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 879.100148][ T5626] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 879.100399][ T5626] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 879.100465][ T5626] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 879.142758][ T5626] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 879.223940][ T5341] usb 7-1: USB disconnect, device number 26 [ 879.268208][ T5626] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 879.300129][ T5626] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 879.345425][ T5626] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 879.366386][ T5626] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 4 [ 879.398451][ T5626] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 879.421977][ T5626] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 879.431557][ T5626] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 879.461643][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.786920][T13880] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 880.513035][ T980] usb 2-1: USB disconnect, device number 24 [ 880.605915][ T5341] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 880.631846][ T5341] keyspan 7-1:1.0: device disconnected [ 880.657537][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.730860][ T980] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 880.772565][ T980] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 880.818420][ T980] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 880.858547][ T980] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 880.859294][ T980] keyspan 2-1:1.0: device disconnected [ 881.762329][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.762434][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.736237][T16931] loop7: detected capacity change from 0 to 32768 [ 882.794401][T16931] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 882.794426][T16931] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 882.855282][T16931] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 882.898160][ T980] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 882.898368][ T980] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 883.068693][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.086581][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.188671][T16936] tipc: Started in network mode [ 883.188695][T16936] tipc: Node identity 200802, cluster identity 4711 [ 883.188712][T16936] tipc: Node number set to 2099202 [ 883.693480][ T980] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 795ms [ 883.693663][ T980] gfs2: fsid=syz:syz.0: jid=0: Done [ 883.693705][T16931] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 884.025884][T16938] loop2: detected capacity change from 0 to 4096 [ 884.158783][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.301474][T16944] FAULT_INJECTION: forcing a failure. [ 884.301474][T16944] name failslab, interval 1, probability 0, space 0, times 0 [ 884.301521][T16944] CPU: 0 UID: 0 PID: 16944 Comm: syz.5.3151 Tainted: G L syzkaller #0 PREEMPT(full) [ 884.301563][T16944] Tainted: [L]=SOFTLOCKUP [ 884.301575][T16944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 884.301594][T16944] Call Trace: [ 884.301605][T16944] [ 884.301617][T16944] dump_stack_lvl+0x100/0x190 [ 884.301663][T16944] should_fail_ex.cold+0x5/0xa [ 884.301696][T16944] ? srso_alias_return_thunk+0x5/0xfbef5 [ 884.301738][T16944] should_failslab+0xc2/0x120 [ 884.301772][T16944] kmem_cache_alloc_noprof+0x92/0x6a0 [ 884.301817][T16944] ? sk_prot_alloc+0x60/0x2a0 [ 884.301871][T16944] sk_prot_alloc+0x60/0x2a0 [ 884.301921][T16944] sk_alloc+0x36/0xe80 [ 884.301961][T16944] rds_create+0x9e/0x5e0 [ 884.302004][T16944] __sock_create+0x339/0x860 [ 884.302040][T16944] __sys_socket+0x14d/0x260 [ 884.302072][T16944] ? __pfx___sys_socket+0x10/0x10 [ 884.302114][T16944] __x64_sys_socket+0x72/0xb0 [ 884.302144][T16944] ? lockdep_hardirqs_on+0x7d/0x110 [ 884.302190][T16944] do_syscall_64+0x123/0x790 [ 884.302240][T16944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.302272][T16944] RIP: 0033:0x7fa3bc99e159 [ 884.302296][T16944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.302326][T16944] RSP: 002b:00007fa3bd7bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 884.302361][T16944] RAX: ffffffffffffffda RBX: 00007fa3bcc25fa0 RCX: 00007fa3bc99e159 [ 884.302381][T16944] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 884.302400][T16944] RBP: 00007fa3bca3503b R08: 0000000000000000 R09: 0000000000000000 [ 884.302419][T16944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.302438][T16944] R13: 00007fa3bcc26038 R14: 00007fa3bcc25fa0 R15: 00007ffd71d0c4a8 [ 884.302478][T16944] [ 884.847372][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.076310][T16948] netlink: 'syz.1.3154': attribute type 21 has an invalid length. [ 885.076337][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3154'. [ 885.076557][T16948] netlink: 'syz.1.3154': attribute type 21 has an invalid length. [ 885.076577][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3154'. [ 885.233177][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.414969][T16955] loop6: detected capacity change from 0 to 512 [ 885.416190][T16955] EXT4-fs: Ignoring removed mblk_io_submit option [ 885.505982][T16955] EXT4-fs error (device loop6): ext4_iget_extra_inode:5209: inode #15: comm syz.6.3155: corrupted in-inode xattr: e_value size too large [ 885.506028][T16955] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 885.507895][T16955] EXT4-fs (loop6): Remounting filesystem read-only [ 885.561128][T16955] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 886.097532][ T7943] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.272886][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.381974][ T980] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 886.537241][ T980] usb 5-1: not running at top speed; connect to a high speed hub [ 886.537280][ T980] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 886.539834][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.582663][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.582697][ T980] usb 5-1: Product: syz [ 886.582717][ T980] usb 5-1: Manufacturer: syz [ 886.582739][ T980] usb 5-1: SerialNumber: syz [ 886.643206][ T980] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 886.643464][ T980] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 886.643530][ T980] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 886.757504][ T980] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 886.807122][ T980] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 886.829288][ T980] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 886.857369][ T980] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 886.878578][ T980] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 886.906147][ T980] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 886.939730][ T980] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 886.966866][ T980] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 887.357742][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.567873][T16973] overlay: filesystem on ./file0 not supported [ 887.872754][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.315315][ T980] usb 5-1: USB disconnect, device number 16 [ 888.569368][ T980] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 888.615289][ T980] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 888.646741][ T980] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 888.677500][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.696731][ T980] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 888.717210][ T980] keyspan 5-1:1.0: device disconnected [ 888.970591][T16981] loop2: detected capacity change from 0 to 32768 [ 889.029342][T16981] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 889.123038][ T31] audit: type=1800 audit(1789071675.449:122): pid=16981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3164" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 889.907782][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.844649][T14980] ocfs2: Unmounting device (7,2) on (node local) [ 890.917061][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.917156][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.312671][T17005] loop6: detected capacity change from 0 to 32768 [ 891.364144][T17005] JBD2: Ignoring recovery information on journal [ 891.461104][T17005] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 891.672703][T17005] overlayfs: upper fs does not support tmpfile. [ 891.739928][T17005] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 891.750372][T17005] overlayfs: upper fs missing required features. [ 891.992005][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.514042][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.951519][ T7943] ocfs2: Unmounting device (7,6) on (node local) [ 892.988416][T17017] loop4: detected capacity change from 0 to 512 [ 893.074142][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.126971][T17017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 893.127072][T17017] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 893.252232][T17017] EXT4-fs (loop4): shut down requested (1) [ 893.565779][T13880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.647302][ T5736] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 893.805829][ T5736] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 893.829374][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.829412][ T5736] usb 2-1: Product: syz [ 893.829434][ T5736] usb 2-1: Manufacturer: syz [ 893.829455][ T5736] usb 2-1: SerialNumber: syz [ 893.831629][T16763] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 893.870532][T16763] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 893.871751][T16763] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 893.893969][T16763] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 893.896638][T16763] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 893.937409][ T5736] usb 2-1: config 0 descriptor?? [ 894.011089][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.116157][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.173767][T13057] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 894.231319][T13057] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 894.233621][T13057] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 894.257649][T13057] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 894.258333][T13057] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 894.261702][ T5736] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 894.931554][ T5736] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 894.973997][ T5736] usb 2-1: USB disconnect, device number 25 [ 895.152592][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.266257][T17049] loop2: detected capacity change from 0 to 1024 [ 896.304214][ T31] audit: type=1326 audit(1789071682.629:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17048 comm="syz.4.3197" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9e5d9e159 code=0x0 [ 896.307322][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.352044][T16763] Bluetooth: hci3: command tx timeout [ 896.733919][T17058] loop1: detected capacity change from 0 to 32768 [ 896.793742][T17058] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 896.852874][ T31] audit: type=1800 audit(1789071683.179:124): pid=17058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3186" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 897.073241][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.353329][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.506111][T17049] hfsplus: xattr search failed [ 897.833030][ T5341] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 897.983475][ T5341] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 897.989621][ T5341] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.989671][ T5341] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 897.989706][ T5341] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 897.989739][ T5341] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 897.989772][ T5341] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 898.070112][ T5341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.070148][ T5341] usb 5-1: Product: syz [ 898.070168][ T5341] usb 5-1: Manufacturer: syz [ 898.070190][ T5341] usb 5-1: SerialNumber: syz [ 898.115797][T17071] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 898.115942][T17071] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 898.116085][T17071] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 898.155296][ T5341] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 898.176653][ T5341] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 898.204295][ T5341] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 898.204403][ T5341] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 898.204499][ T5341] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 898.246964][ T5341] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 898.317298][T17073] loop7: detected capacity change from 0 to 4096 [ 898.432583][T16763] Bluetooth: hci3: command tx timeout [ 898.490882][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.557867][T17073] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 898.557895][T17073] UDF-fs: Scanning with blocksize 512 failed [ 898.728860][T17073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 898.758841][ T5615] ocfs2: Unmounting device (7,1) on (node local) [ 899.519000][T17073] UDF-fs: error (device loop7): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 899.567083][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.061172][ T5341] usb 5-1: USB disconnect, device number 17 [ 900.139090][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.153438][ T5341] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 900.179669][ T5341] keyspan 5-1:1.0: device disconnected [ 900.512366][T16763] Bluetooth: hci3: command tx timeout [ 900.627407][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.818963][T17028] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.819061][T17028] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.819213][T17028] bridge_slave_0: entered allmulticast mode [ 900.855578][T17028] bridge_slave_0: entered promiscuous mode [ 900.889162][T17028] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.891503][T17028] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.891660][T17028] bridge_slave_1: entered allmulticast mode [ 900.941161][T17028] bridge_slave_1: entered promiscuous mode [ 901.318712][T17028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.373982][T17028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.414699][T17079] loop2: detected capacity change from 0 to 32768 [ 901.612239][T17028] team0: Port device team_slave_0 added [ 901.648222][T17028] team0: Port device team_slave_1 added [ 901.671415][ T31] audit: type=1800 audit(1789071687.989:125): pid=17079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3193" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 901.699787][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.928697][ T980] libceph: mon0 (1)[c::]:6789 socket error on write [ 901.991057][ T980] libceph: mon0 (1)[c::]:6789 socket error on write [ 902.063928][ T980] libceph: mon0 (1)[c::]:6789 socket error on write [ 902.084715][T17028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.084734][T17028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.084771][T17028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.144262][T17028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.144281][T17028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.144318][T17028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.246066][ T980] libceph: mon0 (1)[c::]:6789 socket error on write [ 902.246315][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.275980][T17100] ceph: No mds server is up or the cluster is laggy [ 902.300188][T17102] ceph: No mds server is up or the cluster is laggy [ 902.592054][T16763] Bluetooth: hci3: command tx timeout [ 902.811810][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.816344][T17028] hsr_slave_0: entered promiscuous mode [ 902.851474][T17028] hsr_slave_1: entered promiscuous mode [ 902.852238][T17028] debugfs: 'hsr0' already exists in 'hsr' [ 902.852263][T17028] Cannot create hsr debugfs directory [ 903.153489][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.877589][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.029314][ T31] audit: type=1326 audit(1789071690.349:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17117 comm="syz.6.3204" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c5f19e159 code=0x0 [ 904.032547][ T980] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 904.214036][ T980] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 904.214802][ T980] usb 2-1: config 0 has no interfaces? [ 904.214865][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.257315][ T980] usb 2-1: config 0 descriptor?? [ 904.433555][T17122] gadgetfs: bound to dummy_udc driver [ 904.540386][T17116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.540823][T17116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.599797][ T5341] usb 2-1: USB disconnect, device number 26 [ 904.974632][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.996846][ T6123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.013005][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.016702][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.192184][ T5341] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 905.353451][ T5341] usb 2-1: Using ep0 maxpacket: 32 [ 905.370542][ T5341] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 905.411722][ T5341] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.413396][ T5341] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 905.448935][ T5341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.448989][ T5341] usb 2-1: Product: syz [ 905.449010][ T5341] usb 2-1: Manufacturer: syz [ 905.449031][ T5341] usb 2-1: SerialNumber: syz [ 905.495213][ T5341] usb 2-1: config 0 descriptor?? [ 905.525826][ T31] audit: type=1326 audit(1789071691.849:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17128 comm="syz.4.3206" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd9e5d97ed7 code=0x0 [ 905.631955][ T5341] viperboard 2-1:0.0: version 0.00 found at bus 002 address 027 [ 905.776738][ T5341] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 905.776780][ T5341] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 906.110631][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.204757][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.111586][ T5751] usb 2-1: USB disconnect, device number 27 [ 907.291095][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.595296][T17152] loop7: detected capacity change from 0 to 256 [ 907.619440][T17152] exfat: Deprecated parameter 'utf8' [ 907.619575][T17152] exfat: Deprecated parameter 'namecase' [ 907.619612][T17152] exfat: Deprecated parameter 'namecase' [ 907.704610][T17152] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 908.396824][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.671732][T17165] loop1: detected capacity change from 0 to 32768 [ 908.749407][T17165] JBD2: Ignoring recovery information on journal [ 908.803770][ T5751] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 908.893414][T17165] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 908.955425][ T5751] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 908.981041][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.981083][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.981127][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.031396][ T5751] usb 3-1: config 0 descriptor?? [ 909.146706][T17165] overlayfs: upper fs does not support tmpfile. [ 909.148096][T17165] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 909.154919][T17165] overlayfs: upper fs missing required features. [ 909.232585][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.527504][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.598785][ T5751] hid_parser_main: 2 callbacks suppressed [ 909.598813][ T5751] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 909.598844][ T5751] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 909.598870][ T5751] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 909.598895][ T5751] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 909.598920][ T5751] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 909.598971][ T5751] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 909.598996][ T5751] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 909.599021][ T5751] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 909.599046][ T5751] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 909.599072][ T5751] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 909.720326][ T5751] savu 0003:1E7D:2D5A.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 909.969600][ T5615] ocfs2: Unmounting device (7,1) on (node local) [ 910.121061][T17175] input: syz1 as /devices/virtual/input/input54 [ 910.369508][ T5751] usb 3-1: USB disconnect, device number 21 [ 910.479598][T17173] fido_id[17173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 910.644594][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.526418][T17186] FAULT_INJECTION: forcing a failure. [ 911.526418][T17186] name failslab, interval 1, probability 0, space 0, times 0 [ 911.526463][T17186] CPU: 0 UID: 0 PID: 17186 Comm: syz.2.3222 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.526504][T17186] Tainted: [L]=SOFTLOCKUP [ 911.526516][T17186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 911.526534][T17186] Call Trace: [ 911.526544][T17186] [ 911.526556][T17186] dump_stack_lvl+0x100/0x190 [ 911.526602][T17186] should_fail_ex.cold+0x5/0xa [ 911.526636][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.526678][T17186] should_failslab+0xc2/0x120 [ 911.526707][T17186] __kmalloc_noprof+0xfc/0x840 [ 911.526749][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.526785][T17186] ? trace_kmalloc+0xeb/0x110 [ 911.526812][T17186] ? lsm_blob_alloc+0x68/0x90 [ 911.526851][T17186] lsm_blob_alloc+0x68/0x90 [ 911.526883][T17186] security_sk_alloc+0x2d/0x290 [ 911.526924][T17186] sk_prot_alloc+0x12a/0x2a0 [ 911.526979][T17186] sk_alloc+0x36/0xe80 [ 911.527019][T17186] bpf_prog_test_run_skb+0x4d2/0x3530 [ 911.527054][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.527095][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.527130][T17186] ? lock_acquire+0x1d1/0x380 [ 911.527159][T17186] ? __fget_files+0x34/0x3d0 [ 911.527186][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.527222][T17186] ? find_held_lock+0x2b/0x80 [ 911.527262][T17186] ? __fget_files+0x1e1/0x3d0 [ 911.527299][T17186] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 911.527336][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.527374][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.527414][T17186] ? fput+0x7c/0x100 [ 911.527442][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.527481][T17186] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 911.527518][T17186] __sys_bpf+0x2265/0x4a30 [ 911.527569][T17186] ? __pfx___sys_bpf+0x10/0x10 [ 911.527608][T17186] ? find_held_lock+0x2b/0x80 [ 911.527646][T17186] ? futex_wake+0x4ea/0x5e0 [ 911.527690][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.527729][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.527787][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.527822][T17186] ? rcu_read_lock_any_held+0x6a/0x90 [ 911.527862][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.527898][T17186] ? find_held_lock+0x2b/0x80 [ 911.527937][T17186] ? ksys_write+0x190/0x250 [ 911.527977][T17186] ? ksys_write+0x190/0x250 [ 911.528021][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.528075][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.528111][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.528147][T17186] ? __x64_sys_futex+0x358/0x4d0 [ 911.528186][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.528223][T17186] ? srso_alias_return_thunk+0x5/0xfbef5 [ 911.528259][T17186] ? xfd_validate_state+0x129/0x190 [ 911.528315][T17186] ? __x64_sys_bpf+0xce/0x140 [ 911.528354][T17186] __x64_sys_bpf+0xce/0x140 [ 911.528401][T17186] ? do_syscall_64+0xae/0x790 [ 911.528450][T17186] do_syscall_64+0x123/0x790 [ 911.528499][T17186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.528530][T17186] RIP: 0033:0x7f85c099e159 [ 911.528554][T17186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.528583][T17186] RSP: 002b:00007f85c178a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 911.528613][T17186] RAX: ffffffffffffffda RBX: 00007f85c0c25fa0 RCX: 00007f85c099e159 [ 911.528634][T17186] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 911.528653][T17186] RBP: 00007f85c0a3503b R08: 0000000000000000 R09: 0000000000000000 [ 911.528673][T17186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.528691][T17186] R13: 00007f85c0c26038 R14: 00007f85c0c25fa0 R15: 00007fff1ca17458 [ 911.528732][T17186] [ 911.720346][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.720677][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.272707][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.803913][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.934486][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.310101][T17229] loop2: detected capacity change from 0 to 128 [ 914.367277][T17226] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 914.452237][T17229] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 914.457513][T17229] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 915.036191][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.236453][T14980] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 915.314806][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.320518][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.346260][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.346777][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.992005][ T5751] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 916.057339][T17252] loop7: detected capacity change from 0 to 16384 [ 916.102269][T17252] loop7: detected capacity change from 16384 to 16383 [ 916.155613][ T5751] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 916.158337][ T5751] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 916.158374][ T5751] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 916.232759][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 916.232795][ T5751] usb 3-1: Product: syz [ 916.232817][ T5751] usb 3-1: Manufacturer: syz [ 916.288531][T17249] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 916.288670][T17249] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 916.332362][ T5751] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 916.394261][ T5751] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 916.840258][T17258] FAULT_INJECTION: forcing a failure. [ 916.840258][T17258] name failslab, interval 1, probability 0, space 0, times 0 [ 916.840302][T17258] CPU: 0 UID: 0 PID: 17258 Comm: syz.1.3243 Tainted: G L syzkaller #0 PREEMPT(full) [ 916.840344][T17258] Tainted: [L]=SOFTLOCKUP [ 916.840356][T17258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 916.840374][T17258] Call Trace: [ 916.840393][T17258] [ 916.840405][T17258] dump_stack_lvl+0x100/0x190 [ 916.840452][T17258] should_fail_ex.cold+0x5/0xa [ 916.840485][T17258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 916.840527][T17258] should_failslab+0xc2/0x120 [ 916.840557][T17258] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 916.840606][T17258] ? key_alloc+0x423/0x1310 [ 916.840658][T17258] kmemdup_noprof+0x29/0x60 [ 916.840697][T17258] key_alloc+0x423/0x1310 [ 916.840751][T17258] ? __kasan_kmalloc+0xaa/0xb0 [ 916.840797][T17258] ? __pfx_key_alloc+0x10/0x10 [ 916.840841][T17258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 916.840888][T17258] keyring_alloc+0x44/0xc0 [ 916.840941][T17258] install_session_keyring_to_cred+0x190/0x230 [ 916.840988][T17258] join_session_keyring+0x1bc/0x350 [ 916.841032][T17258] lookup_user_key+0xbf9/0x1300 [ 916.841077][T17258] ? __pfx_lookup_user_key+0x10/0x10 [ 916.841120][T17258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 916.841156][T17258] ? lock_acquire+0x1d1/0x380 [ 916.841184][T17258] ? __might_fault+0xc5/0x140 [ 916.841224][T17258] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 916.841275][T17258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 916.841311][T17258] ? strncpy_from_user+0x19d/0x2d0 [ 916.841355][T17258] __do_sys_add_key+0x2a6/0x460 [ 916.841395][T17258] ? __pfx___do_sys_add_key+0x10/0x10 [ 916.841436][T17258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 916.841478][T17258] do_syscall_64+0x123/0x790 [ 916.841529][T17258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.841560][T17258] RIP: 0033:0x7f84ee59e159 [ 916.841585][T17258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.841614][T17258] RSP: 002b:00007f84ef40a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 916.841644][T17258] RAX: ffffffffffffffda RBX: 00007f84ee825fa0 RCX: 00007f84ee59e159 [ 916.841665][T17258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 916.841684][T17258] RBP: 00007f84ee63503b R08: fffffffffffffffd R09: 0000000000000000 [ 916.841704][T17258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.841723][T17258] R13: 00007f84ee826038 R14: 00007f84ee825fa0 R15: 00007ffcf02066f8 [ 916.841763][T17258] [ 917.270607][ T5751] net_ratelimit: 1 callbacks suppressed [ 917.270644][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.660925][T13588] usb 3-1: USB disconnect, device number 22 [ 917.726595][T13588] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 917.751525][T13588] garmin_gps 3-1:1.0: device disconnected [ 918.420794][T17271] loop7: detected capacity change from 0 to 32768 [ 918.461418][T17271] JBD2: Ignoring recovery information on journal [ 918.529678][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.529779][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.578760][T17271] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 918.661421][T17028] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 918.800792][T17271] overlayfs: upper fs does not support tmpfile. [ 918.845633][T17028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 918.853864][T17028] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 918.924500][T17271] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 918.931653][T17271] overlayfs: upper fs missing required features. [ 919.006310][T17028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 919.086902][T17028] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 919.181259][T17028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 919.205309][T17028] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 919.335025][T17028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 919.607032][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.735513][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3251'. [ 919.735592][ T5341] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 919.843992][ T6774] ocfs2: Unmounting device (7,7) on (node local) [ 919.914475][ T5341] usb 3-1: Using ep0 maxpacket: 8 [ 919.950500][ T5341] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 919.976830][ T5341] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 919.976869][ T5341] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 919.976903][ T5341] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 919.976959][ T5341] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 919.977010][ T5341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.311272][ T5341] usb 3-1: GET_CAPABILITIES returned 0 [ 920.311321][ T5341] usbtmc 3-1:16.0: can't read capabilities [ 920.436162][T10610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.436901][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.437461][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.561109][ T5341] usb 3-1: USB disconnect, device number 23 [ 920.570286][T17298] hsr_slave_1 (unregistering): left promiscuous mode [ 920.815424][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.031213][T17303] input: syz0 as /devices/virtual/input/input55 [ 921.318403][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.342676][T17028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.490710][T17028] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.556684][T10611] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.556804][T10611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.657569][T10534] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.657686][T10534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.948234][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.675550][T17328] loop4: detected capacity change from 0 to 512 [ 922.719569][T17328] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 922.810447][T17328] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.3259: bad orphan inode 131083 [ 922.810486][T17328] loop4: lost filesystem error report for type 5 error -117 [ 922.841460][T17328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.885967][T17330] device-mapper: ioctl: populate_table: next target spec (offset 3) overlaps 'struct dm_ioctl' [ 923.045904][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.466009][T13880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.496333][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.124790][T17348] team0: entered allmulticast mode [ 924.124818][T17348] team_slave_0: entered allmulticast mode [ 924.124840][T17348] team_slave_1: entered allmulticast mode [ 924.166556][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.582467][T17319] loop2: detected capacity change from 0 to 32768 [ 924.639206][T17319] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3256 (17319) [ 924.707330][T17319] BTRFS error (device loop2): open_ctree failed: -EINTR [ 925.289644][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.679819][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3267'. [ 925.708244][ T31] audit: type=1326 audit(1789071712.029:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17371 comm="syz.4.3268" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e5d9e159 code=0x7ffc0000 [ 925.708310][ T31] audit: type=1326 audit(1789071712.029:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17371 comm="syz.4.3268" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e5d9e159 code=0x7ffc0000 [ 925.810661][ T31] audit: type=1326 audit(1789071712.129:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17371 comm="syz.4.3268" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd9e5d9e159 code=0x7ffc0000 [ 925.810727][ T31] audit: type=1326 audit(1789071712.129:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17371 comm="syz.4.3268" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e5d9e159 code=0x7ffc0000 [ 925.810784][ T31] audit: type=1326 audit(1789071712.129:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17371 comm="syz.4.3268" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e5d9e159 code=0x7ffc0000 [ 925.907062][ T31] audit: type=1326 audit(1789071712.229:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17371 comm="syz.4.3268" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd9e5d9e159 code=0x7ffc0000 [ 925.907126][ T31] audit: type=1326 audit(1789071712.229:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17371 comm="syz.4.3268" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e5d9e159 code=0x7ffc0000 [ 925.907183][ T31] audit: type=1326 audit(1789071712.229:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17371 comm="syz.4.3268" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e5d9e159 code=0x7ffc0000 [ 926.019909][ T31] audit: type=1326 audit(1789071712.339:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17371 comm="syz.4.3268" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9e5d5e98e code=0x7ffc0000 [ 926.019996][ T31] audit: type=1326 audit(1789071712.339:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17371 comm="syz.4.3268" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9e5d5e98e code=0x7ffc0000 [ 926.149561][T17375] netlink: 'syz.7.3269': attribute type 1 has an invalid length. [ 926.149587][T17375] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3269'. [ 926.391740][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.398728][T17369] hsr_slave_1 (unregistering): left promiscuous mode [ 926.513712][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.172884][ T5341] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 927.321946][ T5341] usb 7-1: Using ep0 maxpacket: 16 [ 927.326480][ T5341] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 927.364223][ T5341] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 927.364264][ T5341] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 927.410161][ T5341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.410224][ T5341] usb 7-1: Product: syz [ 927.410245][ T5341] usb 7-1: Manufacturer: syz [ 927.410266][ T5341] usb 7-1: SerialNumber: syz [ 927.468990][ T5341] usb 7-1: config 0 descriptor?? [ 927.487475][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.514214][ T5341] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 927.514256][ T5341] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 927.589859][T17028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.167910][T17397] loop2: detected capacity change from 0 to 7 [ 928.183565][T17397] Dev loop2: unable to read RDB block 7 [ 928.183619][T17397] loop2: AHDI p1 p2 p3 [ 928.183641][T17397] loop2: partition table partially beyond EOD, truncated [ 928.183842][T17397] loop2: p1 start 1601398130 is beyond EOD, truncated [ 928.183867][T17397] loop2: p2 start 1702059890 is beyond EOD, truncated [ 928.341558][ T5341] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 928.566968][ T5341] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 928.586714][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.831635][ T5341] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 928.831663][ T5341] em28xx 7-1:0.0: No AC97 audio processor [ 928.894692][ T5341] usb 7-1: USB disconnect, device number 27 [ 928.922248][ T5341] em28xx 7-1:0.0: Disconnecting em28xx [ 929.099497][ T5341] em28xx: Freeing device [ 929.553215][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.688064][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.920828][T17416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3290'. [ 930.647848][T17424] loop1: detected capacity change from 0 to 512 [ 930.721425][T17424] EXT4-fs (loop1): orphan cleanup on readonly fs [ 930.803542][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.915168][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.915343][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.919500][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.398756][T17416] netlink: 'syz.4.3290': attribute type 1 has an invalid length. [ 931.398784][T17416] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3290'. [ 931.469790][T17424] EXT4-fs (loop1): 1 orphan inode deleted [ 931.523717][T17424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 931.575960][T17436] ceph: No mds server is up or the cluster is laggy [ 931.579189][T17430] ceph: No mds server is up or the cluster is laggy [ 931.929238][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.037410][T17444] loop4: detected capacity change from 0 to 512 [ 932.038427][T17444] EXT4-fs: Ignoring removed nobh option [ 932.175660][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.213712][T17444] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 932.214168][T17444] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 932.214264][T17444] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #13: comm syz.4.3282: inode has both inline data and extents flags [ 932.214298][T17444] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 932.223283][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 932.223310][ C0] EXT4-fs (loop4): initial error at time 1789071718: ext4_orphan_get:1403: inode 13 [ 932.223349][ C0] EXT4-fs (loop4): last error at time 1789071718: ext4_orphan_get:1403: inode 13 [ 932.244738][T17444] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.3282: couldn't read orphan inode 13 (err -117) [ 932.244778][T17444] loop4: lost filesystem error report for type 5 error -117 [ 932.329132][T17444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 932.394126][T17028] veth0_vlan: entered promiscuous mode [ 932.497342][T17444] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 932.502295][T17028] veth1_vlan: entered promiscuous mode [ 932.592979][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.906843][T17028] veth0_macvtap: entered promiscuous mode [ 932.979403][T17028] veth1_macvtap: entered promiscuous mode [ 933.043971][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.115338][T13880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.174121][T17028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.263613][T17028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.424258][T10617] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.425074][T10617] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.425270][T10610] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.425318][T10610] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.958723][T17461] loop6: detected capacity change from 0 to 8 [ 934.192781][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.242305][T17461] SQUASHFS error: Failed to read block 0x4de: -5 [ 934.242533][T17461] SQUASHFS error: Failed to read block 0x4de: -5 [ 934.315047][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 934.315072][ T31] audit: type=1800 audit(1789071720.639:146): pid=17461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3288" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 934.487079][T17466] loop2: detected capacity change from 0 to 16 [ 934.535299][T17466] erofs (device loop2): mounted with root inode @ nid 36. [ 934.627596][T10534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.627622][T10534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.661710][T17466] erofs (device loop2): invalid de[0].nameoff 0 @ nid 46 [ 935.076568][T17470] loop7: detected capacity change from 0 to 32768 [ 935.136553][T17470] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 935.136580][T17470] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 935.176695][T17470] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 935.181489][T13588] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 935.181508][T13588] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 935.395994][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.507716][T10614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.507742][T10614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.633998][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.653686][T13588] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 472ms [ 935.653865][T13588] gfs2: fsid=syz:syz.0: jid=0: Done [ 935.653905][T17470] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 935.798851][T17470] gfs2: fsid=syz:syz.0: found 1 quota changes [ 936.497742][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.659495][ T6774] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 936.659540][ T6774] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 936.659583][ T6774] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:6774 [syz-executor] gfs2_quota_sync+0x322/0x570 [ 936.659647][ T6774] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 936.659687][ T6774] CPU: 0 UID: 0 PID: 6774 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 936.659728][ T6774] Tainted: [L]=SOFTLOCKUP [ 936.659739][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 936.659758][ T6774] Call Trace: [ 936.659768][ T6774] [ 936.659780][ T6774] dump_stack_lvl+0x100/0x190 [ 936.659822][ T6774] gfs2_withdraw.cold+0xa/0xed [ 936.659861][ T6774] inode_go_instantiate+0xd63/0x1540 [ 936.659899][ T6774] ? __pfx_inode_go_instantiate+0x10/0x10 [ 936.659943][ T6774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.659987][ T6774] gfs2_instantiate+0x16c/0x250 [ 936.660032][ T6774] gfs2_glock_wait+0x214/0x330 [ 936.660077][ T6774] ? __pfx_gfs2_glock_wait+0x10/0x10 [ 936.660130][ T6774] gfs2_glock_nq+0xa03/0x14f0 [ 936.660163][ T6774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.660204][ T6774] do_sync+0x705/0xd60 [ 936.660245][ T6774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.660281][ T6774] ? do_raw_spin_unlock+0x145/0x1e0 [ 936.660328][ T6774] ? __pfx_do_sync+0x10/0x10 [ 936.660369][ T6774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.660408][ T6774] ? qd_grab_sync+0x41e/0x560 [ 936.660458][ T6774] ? gfs2_quota_sync+0x322/0x570 [ 936.660500][ T6774] ? gfs2_quota_sync+0x278/0x570 [ 936.660543][ T6774] ? gfs2_quota_sync+0x278/0x570 [ 936.660585][ T6774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.660631][ T6774] gfs2_quota_sync+0x322/0x570 [ 936.660686][ T6774] gfs2_sync_fs+0x44/0xb0 [ 936.660721][ T6774] ? __pfx_gfs2_sync_fs+0x10/0x10 [ 936.660756][ T6774] sync_filesystem+0x117/0x290 [ 936.660793][ T6774] generic_shutdown_super+0x86/0x360 [ 936.660833][ T6774] kill_block_super+0x3b/0xa0 [ 936.660872][ T6774] gfs2_kill_sb+0x4a9/0x590 [ 936.660917][ T6774] deactivate_locked_super+0xbd/0x140 [ 936.660959][ T6774] deactivate_super+0xea/0x110 [ 936.661000][ T6774] cleanup_mnt+0x21f/0x450 [ 936.661053][ T6774] task_work_run+0x150/0x240 [ 936.661097][ T6774] ? __pfx_task_work_run+0x10/0x10 [ 936.661142][ T6774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.661185][ T6774] exit_to_user_mode_loop+0x1d8/0x700 [ 936.661217][ T6774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.661252][ T6774] ? rcu_is_watching+0x13/0xc0 [ 936.661293][ T6774] do_syscall_64+0x661/0x790 [ 936.661343][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.661374][ T6774] RIP: 0033:0x7f0be319f397 [ 936.661398][ T6774] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 936.661427][ T6774] RSP: 002b:00007fffc3c64908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 936.661456][ T6774] RAX: 0000000000000000 RBX: 00007f0be323448b RCX: 00007f0be319f397 [ 936.661476][ T6774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc3c649c0 [ 936.661495][ T6774] RBP: 00007fffc3c649c0 R08: 00007fffc3c659c0 R09: 00000000ffffffff [ 936.661515][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc3c65a50 [ 936.661535][ T6774] R13: 00007f0be323448b R14: 00000000000e48dd R15: 00007fffc3c65a90 [ 936.661575][ T6774] [ 936.900796][ T6774] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 937.595791][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.475608][T17501] loop2: detected capacity change from 0 to 40427 [ 938.507488][T17501] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 938.507520][T17501] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 938.628700][T17501] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 938.651069][T17501] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 938.651100][T17501] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 938.723113][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.723240][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.937631][T17501] syz.2.3301: attempt to access beyond end of device [ 938.937631][T17501] loop2: rw=2049, sector=45096, nr_sectors = 1704 limit=40427 [ 939.840525][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.525475][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.549773][ T6123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.550693][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.551219][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.917504][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.238742][T17527] loop9: detected capacity change from 0 to 128 [ 941.342672][T17527] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 941.377472][T17527] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 941.610790][T17527] Invalid argument reading file caps for ./file0 [ 941.826832][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.949498][T17028] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 942.070467][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.199594][ T6774] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 566 [ 942.199640][ T6774] CPU: 0 UID: 0 PID: 6774 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 942.199682][ T6774] Tainted: [L]=SOFTLOCKUP [ 942.199694][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 942.199711][ T6774] Call Trace: [ 942.199722][ T6774] [ 942.199734][ T6774] dump_stack_lvl+0x100/0x190 [ 942.199780][ T6774] gfs2_assert_warn_i.cold+0x3a/0x118 [ 942.199823][ T6774] ? __pfx_gfs2_assert_warn_i+0x10/0x10 [ 942.199855][ T6774] ? mark_held_locks+0x40/0x70 [ 942.199883][ T6774] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 942.199928][ T6774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.199969][ T6774] gfs2_make_fs_ro+0x25e/0x370 [ 942.200009][ T6774] ? __pfx_gfs2_make_fs_ro+0x10/0x10 [ 942.200051][ T6774] ? __pfx_autoremove_wake_function+0x10/0x10 [ 942.200097][ T6774] ? __pfx___might_resched+0x10/0x10 [ 942.200142][ T6774] ? gfs2_put_super+0x149/0x670 [ 942.200180][ T6774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.200225][ T6774] gfs2_put_super+0x1a4/0x670 [ 942.200268][ T6774] ? __pfx_gfs2_put_super+0x10/0x10 [ 942.200309][ T6774] generic_shutdown_super+0x167/0x360 [ 942.200350][ T6774] kill_block_super+0x3b/0xa0 [ 942.200396][ T6774] gfs2_kill_sb+0x4a9/0x590 [ 942.200436][ T6774] deactivate_locked_super+0xbd/0x140 [ 942.200478][ T6774] deactivate_super+0xea/0x110 [ 942.200519][ T6774] cleanup_mnt+0x21f/0x450 [ 942.200569][ T6774] task_work_run+0x150/0x240 [ 942.200613][ T6774] ? __pfx_task_work_run+0x10/0x10 [ 942.200659][ T6774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.200702][ T6774] exit_to_user_mode_loop+0x1d8/0x700 [ 942.200733][ T6774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 942.200768][ T6774] ? rcu_is_watching+0x13/0xc0 [ 942.200809][ T6774] do_syscall_64+0x661/0x790 [ 942.200858][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.200889][ T6774] RIP: 0033:0x7f0be319f397 [ 942.200914][ T6774] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 942.200943][ T6774] RSP: 002b:00007fffc3c64908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 942.200973][ T6774] RAX: 0000000000000000 RBX: 00007f0be323448b RCX: 00007f0be319f397 [ 942.200993][ T6774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc3c649c0 [ 942.201012][ T6774] RBP: 00007fffc3c649c0 R08: 00007fffc3c659c0 R09: 00000000ffffffff [ 942.201032][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc3c65a50 [ 942.201052][ T6774] R13: 00007f0be323448b R14: 00000000000e48dd R15: 00007fffc3c65a90 [ 942.201091][ T6774] [ 942.800335][T17525] loop6: detected capacity change from 0 to 1024 [ 943.125658][T13588] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 943.160571][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.276495][T13588] usb 10-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00 [ 943.312290][T13588] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.312325][T13588] usb 10-1: Product: syz [ 943.312346][T13588] usb 10-1: Manufacturer: syz [ 943.312367][T13588] usb 10-1: SerialNumber: syz [ 943.397821][T13588] digi_acceleport 10-1:1.0: Digi 2 port USB adapter converter detected [ 943.461459][T13588] usb 10-1: Digi 2 port USB adapter converter now attached to ttyUSB0 [ 943.501131][T13588] usb 10-1: Digi 2 port USB adapter converter now attached to ttyUSB1 [ 943.551475][T13588] usb 10-1: Digi 2 port USB adapter converter now attached to ttyUSB2 [ 943.898650][T13588] usb 10-1: USB disconnect, device number 2 [ 944.039671][T13588] digi_2 ttyUSB0: Digi 2 port USB adapter converter now disconnected from ttyUSB0 [ 944.073613][T13588] digi_2 ttyUSB1: Digi 2 port USB adapter converter now disconnected from ttyUSB1 [ 944.124205][T13588] digi_2 ttyUSB2: Digi 2 port USB adapter converter now disconnected from ttyUSB2 [ 944.148185][T13588] digi_acceleport 10-1:1.0: device disconnected [ 944.206122][T17525] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 944.255615][T17525] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 944.255652][T17525] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 944.255754][T17525] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 944.346429][T17525] EXT4-fs error (device loop6): ext4_get_journal_inode:5927: inode #17: comm syz.6.3306: iget: bad i_size value: 4398046511204 [ 944.346474][T17525] loop6: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 944.351902][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 944.356366][ C0] EXT4-fs (loop6): initial error at time 1789071730: ext4_get_journal_inode:5927: inode 17 [ 944.356412][ C0] EXT4-fs (loop6): last error at time 1789071730: ext4_get_journal_inode:5927: inode 17 [ 944.436837][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.998163][T17558] loop4: detected capacity change from 0 to 40427 [ 945.028216][T17558] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 945.028248][T17558] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 945.125941][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.159090][T17558] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 945.209998][T17558] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 945.210030][T17558] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 945.478963][T17525] EXT4-fs (loop6): no journal found [ 945.528368][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.761105][T17568] FAULT_INJECTION: forcing a failure. [ 945.761105][T17568] name failslab, interval 1, probability 0, space 0, times 0 [ 945.761150][T17568] CPU: 0 UID: 0 PID: 17568 Comm: syz.9.3317 Tainted: G L syzkaller #0 PREEMPT(full) [ 945.761192][T17568] Tainted: [L]=SOFTLOCKUP [ 945.761204][T17568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 945.761222][T17568] Call Trace: [ 945.761233][T17568] [ 945.761245][T17568] dump_stack_lvl+0x100/0x190 [ 945.761291][T17568] should_fail_ex.cold+0x5/0xa [ 945.761324][T17568] ? srso_alias_return_thunk+0x5/0xfbef5 [ 945.761366][T17568] should_failslab+0xc2/0x120 [ 945.761403][T17568] __kmalloc_cache_noprof+0x91/0x6d0 [ 945.761440][T17568] ? srso_alias_return_thunk+0x5/0xfbef5 [ 945.761476][T17568] ? ramfs_init_fs_context+0x43/0x100 [ 945.761522][T17568] ramfs_init_fs_context+0x43/0x100 [ 945.761560][T17568] alloc_fs_context+0x60c/0xf40 [ 945.761605][T17568] __x64_sys_fsopen+0xed/0x220 [ 945.761648][T17568] do_syscall_64+0x123/0x790 [ 945.761698][T17568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.761729][T17568] RIP: 0033:0x7f88bb99e159 [ 945.761757][T17568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.761787][T17568] RSP: 002b:00007f88bc86a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 945.761816][T17568] RAX: ffffffffffffffda RBX: 00007f88bbc25fa0 RCX: 00007f88bb99e159 [ 945.761837][T17568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 945.761856][T17568] RBP: 00007f88bba3503b R08: 0000000000000000 R09: 0000000000000000 [ 945.761875][T17568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.761894][T17568] R13: 00007f88bbc26038 R14: 00007f88bbc25fa0 R15: 00007fff80e84968 [ 945.761934][T17568] [ 946.377415][T17567] gadgetfs: bound to dummy_udc driver [ 946.497363][T17570] ================================================================== [ 946.497382][T17570] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15c5/0x1bd0 [ 946.497442][T17570] Read of size 8 at addr ffff888057464c58 by task syz.2.3318/17570 [ 946.497466][T17570] [ 946.497483][T17570] CPU: 0 UID: 0 PID: 17570 Comm: syz.2.3318 Tainted: G L syzkaller #0 PREEMPT(full) [ 946.497524][T17570] Tainted: [L]=SOFTLOCKUP [ 946.497536][T17570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 946.497555][T17570] Call Trace: [ 946.497565][T17570] [ 946.497577][T17570] dump_stack_lvl+0x100/0x190 [ 946.497619][T17570] print_report+0x13d/0x4b0 [ 946.497663][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 946.497699][T17570] ? __virt_addr_valid+0x239/0x430 [ 946.497748][T17570] ? __mutex_lock+0x15c5/0x1bd0 [ 946.497793][T17570] kasan_report+0xdf/0x1c0 [ 946.497823][T17570] ? __mutex_lock+0x15c5/0x1bd0 [ 946.497874][T17570] __mutex_lock+0x15c5/0x1bd0 [ 946.497924][T17570] ? ep_open+0x4c/0x2c0 [ 946.497951][T17570] ? hook_file_open+0x248/0x8e0 [ 946.498001][T17570] ? __pfx___mutex_lock+0x10/0x10 [ 946.498056][T17570] ? __pfx_apparmor_file_open+0x10/0x10 [ 946.498107][T17570] ? ep_open+0x4c/0x2c0 [ 946.498134][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 946.498169][T17570] ep_open+0x4c/0x2c0 [ 946.498199][T17570] do_dentry_open+0x6ab/0x14d0 [ 946.498240][T17570] ? __pfx_ep_open+0x10/0x10 [ 946.498270][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 946.498308][T17570] vfs_open+0x82/0x3f0 [ 946.498336][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 946.498374][T17570] path_openat+0x19fa/0x2440 [ 946.498406][T17570] ? __pfx_path_openat+0x10/0x10 [ 946.498446][T17570] do_file_open+0x20e/0x430 [ 946.498475][T17570] ? __pfx_do_file_open+0x10/0x10 [ 946.498517][T17570] ? _raw_spin_unlock+0x28/0x50 [ 946.498555][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 946.498591][T17570] ? alloc_fd+0x471/0x7a0 [ 946.498624][T17570] do_sys_openat2+0x10f/0x1e0 [ 946.498656][T17570] ? __pfx_do_sys_openat2+0x10/0x10 [ 946.498688][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 946.498724][T17570] ? do_raw_spin_lock+0x128/0x260 [ 946.498760][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 946.498795][T17570] ? find_held_lock+0x2b/0x80 [ 946.498836][T17570] __x64_sys_openat+0x12d/0x210 [ 946.498869][T17570] ? __pfx___x64_sys_openat+0x10/0x10 [ 946.498903][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 946.498941][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 946.498981][T17570] do_syscall_64+0x123/0x790 [ 946.499028][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.499059][T17570] RIP: 0033:0x7f85c099e159 [ 946.499082][T17570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.499113][T17570] RSP: 002b:00007f85bebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 946.499142][T17570] RAX: ffffffffffffffda RBX: 00007f85c0c26090 RCX: 00007f85c099e159 [ 946.499163][T17570] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 946.499184][T17570] RBP: 00007f85c0a3503b R08: 0000000000000000 R09: 0000000000000000 [ 946.499203][T17570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.499222][T17570] R13: 00007f85c0c26128 R14: 00007f85c0c26090 R15: 00007fff1ca17458 [ 946.499253][T17570] [ 946.499265][T17570] [ 946.499272][T17570] Allocated by task 17567: [ 946.499287][T17570] kasan_save_stack+0x30/0x50 [ 946.499330][T17570] kasan_save_track+0x14/0x30 [ 946.499371][T17570] __kasan_kmalloc+0xaa/0xb0 [ 946.499415][T17570] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 946.499449][T17570] gadgetfs_bind+0x582/0x890 [ 946.499474][T17570] gadget_bind_driver+0x28c/0xbf0 [ 946.499507][T17570] really_probe+0x241/0xa60 [ 946.499542][T17570] __driver_probe_device+0x210/0x460 [ 946.499578][T17570] driver_probe_device+0x4a/0x140 [ 946.499613][T17570] __driver_attach+0x21f/0x5b0 [ 946.499648][T17570] bus_for_each_dev+0x13e/0x1d0 [ 946.499674][T17570] bus_add_driver+0x305/0x5b0 [ 946.499704][T17570] driver_register+0x1e2/0x360 [ 946.499742][T17570] usb_gadget_register_driver_owner+0x132/0x210 [ 946.499777][T17570] dev_config+0xdce/0x1610 [ 946.499801][T17570] vfs_write+0x2aa/0x1050 [ 946.499838][T17570] ksys_write+0x12a/0x250 [ 946.499874][T17570] do_syscall_64+0x123/0x790 [ 946.499916][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.499944][T17570] [ 946.499951][T17570] Freed by task 17567: [ 946.499966][T17570] kasan_save_stack+0x30/0x50 [ 946.500006][T17570] kasan_save_track+0x14/0x30 [ 946.500048][T17570] kasan_save_free_info+0x3b/0x70 [ 946.500080][T17570] __kasan_slab_free+0x5f/0x80 [ 946.500123][T17570] kfree+0x22b/0x6d0 [ 946.500153][T17570] put_ep+0x117/0x150 [ 946.500195][T17570] destroy_ep_files+0x163/0x420 [ 946.500219][T17570] gadgetfs_unbind+0x139/0x260 [ 946.500243][T17570] gadget_unbind_driver+0x20c/0x4f0 [ 946.500279][T17570] device_remove+0xcb/0x180 [ 946.500311][T17570] device_release_driver_internal+0x44e/0x620 [ 946.500351][T17570] driver_detach+0xd8/0x1b0 [ 946.500388][T17570] bus_remove_driver+0x13b/0x2e0 [ 946.500423][T17570] driver_unregister+0x76/0xb0 [ 946.500461][T17570] usb_gadget_unregister_driver+0x49/0x70 [ 946.500494][T17570] dev_release+0x132/0x1b0 [ 946.500517][T17570] __fput+0x3ff/0xb50 [ 946.500543][T17570] task_work_run+0x150/0x240 [ 946.500581][T17570] get_signal+0x1bd/0x21e0 [ 946.500606][T17570] arch_do_signal_or_restart+0x91/0x7e0 [ 946.500645][T17570] exit_to_user_mode_loop+0x139/0x700 [ 946.500675][T17570] do_syscall_64+0x661/0x790 [ 946.500716][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.500744][T17570] [ 946.500752][T17570] The buggy address belongs to the object at ffff888057464c00 [ 946.500752][T17570] which belongs to the cache kmalloc-512 of size 512 [ 946.500775][T17570] The buggy address is located 88 bytes inside of [ 946.500775][T17570] freed 512-byte region [ffff888057464c00, ffff888057464e00) [ 946.500804][T17570] [ 946.500812][T17570] The buggy address belongs to the physical page: [ 946.500824][T17570] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057467800 pfn:0x57464 [ 946.500851][T17570] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 946.500875][T17570] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 946.500901][T17570] page_type: f5(slab) [ 946.500925][T17570] raw: 00fff00000000240 ffff88801c02ec80 ffffea0001711f10 ffffea0000da7d10 [ 946.500953][T17570] raw: ffff888057467800 000000000010000f 00000000f5000000 0000000000000000 [ 946.500981][T17570] head: 00fff00000000240 ffff88801c02ec80 ffffea0001711f10 ffffea0000da7d10 [ 946.501008][T17570] head: ffff888057467800 000000000010000f 00000000f5000000 0000000000000000 [ 946.501035][T17570] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 946.501062][T17570] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 946.501079][T17570] page dumped because: kasan: bad access detected [ 946.501094][T17570] page_owner tracks the page as allocated [ 946.501104][T17570] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 99333561687 [ 946.501150][T17570] post_alloc_hook+0xfd/0x120 [ 946.501181][T17570] get_page_from_freelist+0x110d/0x35d0 [ 946.501217][T17570] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 946.501254][T17570] new_slab+0xa9/0x6e0 [ 946.501285][T17570] refill_objects+0xe3/0x410 [ 946.501319][T17570] __pcs_replace_empty_main+0x35e/0x650 [ 946.501352][T17570] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 946.501385][T17570] __ipv6_dev_mc_inc+0x2f1/0xc80 [ 946.501434][T17570] addrconf_dad_work+0x276/0x1360 [ 946.501470][T17570] process_one_work+0xac7/0x1b10 [ 946.501510][T17570] worker_thread+0x5ef/0xe50 [ 946.501548][T17570] kthread+0x373/0x450 [ 946.501583][T17570] ret_from_fork+0x730/0xd60 [ 946.501610][T17570] ret_from_fork_asm+0x1a/0x30 [ 946.501636][T17570] page last free pid 1 tgid 1 ts 23585691579 stack trace: [ 946.501654][T17570] free_pages_prepare+0x586/0xe00 [ 946.501686][T17570] __free_contig_range_common+0x14f/0x250 [ 946.501717][T17570] destroy_args+0xa8/0x7a0 [ 946.501760][T17570] debug_vm_pgtable+0x1d69/0x3490 [ 946.501802][T17570] do_one_initcall+0x11c/0x6f0 [ 946.501846][T17570] kernel_init_freeable+0x6ea/0x7b0 [ 946.501887][T17570] kernel_init+0x21/0x1e0 [ 946.501915][T17570] ret_from_fork+0x730/0xd60 [ 946.501941][T17570] ret_from_fork_asm+0x1a/0x30 [ 946.501966][T17570] [ 946.501973][T17570] Memory state around the buggy address: [ 946.501988][T17570] ffff888057464b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 946.502009][T17570] ffff888057464b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 946.502030][T17570] >ffff888057464c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 946.502047][T17570] ^ [ 946.502064][T17570] ffff888057464c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 946.502085][T17570] ffff888057464d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 946.502105][T17570] ================================================================== [ 946.794963][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.668519][T17570] Disabling lock debugging due to kernel taint [ 947.668537][T17570] ================================================================== [ 947.668550][T17570] BUG: KASAN: slab-use-after-free in __mutex_lock+0x1d1/0x1bd0 [ 947.668604][T17570] Read of size 8 at addr ffff888057464c00 by task syz.2.3318/17570 [ 947.668628][T17570] [ 947.668644][T17570] CPU: 0 UID: 0 PID: 17570 Comm: syz.2.3318 Tainted: G B L syzkaller #0 PREEMPT(full) [ 947.668688][T17570] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 947.668702][T17570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 947.668721][T17570] Call Trace: [ 947.668731][T17570] [ 947.668743][T17570] dump_stack_lvl+0x100/0x190 [ 947.668787][T17570] print_report+0x13d/0x4b0 [ 947.668832][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.668868][T17570] ? __virt_addr_valid+0x239/0x430 [ 947.668918][T17570] ? __mutex_lock+0x1d1/0x1bd0 [ 947.668962][T17570] kasan_report+0xdf/0x1c0 [ 947.668993][T17570] ? __mutex_lock+0x1d1/0x1bd0 [ 947.669043][T17570] kasan_check_range+0x10f/0x1e0 [ 947.669077][T17570] __mutex_lock+0x1d1/0x1bd0 [ 947.669122][T17570] ? ep_open+0x4c/0x2c0 [ 947.669150][T17570] ? ep_open+0x4c/0x2c0 [ 947.669176][T17570] ? hook_file_open+0x248/0x8e0 [ 947.669225][T17570] ? __pfx___mutex_lock+0x10/0x10 [ 947.669280][T17570] ? __pfx_apparmor_file_open+0x10/0x10 [ 947.669335][T17570] ? ep_open+0x4c/0x2c0 [ 947.669361][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.669404][T17570] ep_open+0x4c/0x2c0 [ 947.669433][T17570] do_dentry_open+0x6ab/0x14d0 [ 947.669474][T17570] ? __pfx_ep_open+0x10/0x10 [ 947.669504][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.669542][T17570] vfs_open+0x82/0x3f0 [ 947.669570][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.669609][T17570] path_openat+0x19fa/0x2440 [ 947.669640][T17570] ? __pfx_path_openat+0x10/0x10 [ 947.669673][T17570] do_file_open+0x20e/0x430 [ 947.669702][T17570] ? __pfx_do_file_open+0x10/0x10 [ 947.669744][T17570] ? _raw_spin_unlock+0x28/0x50 [ 947.669782][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.669818][T17570] ? alloc_fd+0x471/0x7a0 [ 947.669851][T17570] do_sys_openat2+0x10f/0x1e0 [ 947.669882][T17570] ? __pfx_do_sys_openat2+0x10/0x10 [ 947.669914][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.669950][T17570] ? do_raw_spin_lock+0x128/0x260 [ 947.669985][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.670021][T17570] ? find_held_lock+0x2b/0x80 [ 947.670062][T17570] __x64_sys_openat+0x12d/0x210 [ 947.670094][T17570] ? __pfx___x64_sys_openat+0x10/0x10 [ 947.670127][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.670165][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.670204][T17570] do_syscall_64+0x123/0x790 [ 947.670251][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.670282][T17570] RIP: 0033:0x7f85c099e159 [ 947.670306][T17570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.670335][T17570] RSP: 002b:00007f85bebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 947.670365][T17570] RAX: ffffffffffffffda RBX: 00007f85c0c26090 RCX: 00007f85c099e159 [ 947.670386][T17570] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 947.670411][T17570] RBP: 00007f85c0a3503b R08: 0000000000000000 R09: 0000000000000000 [ 947.670431][T17570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.670450][T17570] R13: 00007f85c0c26128 R14: 00007f85c0c26090 R15: 00007fff1ca17458 [ 947.670481][T17570] [ 947.670492][T17570] [ 947.670499][T17570] Allocated by task 17567: [ 947.670513][T17570] kasan_save_stack+0x30/0x50 [ 947.670555][T17570] kasan_save_track+0x14/0x30 [ 947.670596][T17570] __kasan_kmalloc+0xaa/0xb0 [ 947.670636][T17570] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 947.670669][T17570] gadgetfs_bind+0x582/0x890 [ 947.670695][T17570] gadget_bind_driver+0x28c/0xbf0 [ 947.670728][T17570] really_probe+0x241/0xa60 [ 947.670762][T17570] __driver_probe_device+0x210/0x460 [ 947.670798][T17570] driver_probe_device+0x4a/0x140 [ 947.670834][T17570] __driver_attach+0x21f/0x5b0 [ 947.670869][T17570] bus_for_each_dev+0x13e/0x1d0 [ 947.670895][T17570] bus_add_driver+0x305/0x5b0 [ 947.670924][T17570] driver_register+0x1e2/0x360 [ 947.670963][T17570] usb_gadget_register_driver_owner+0x132/0x210 [ 947.670998][T17570] dev_config+0xdce/0x1610 [ 947.671022][T17570] vfs_write+0x2aa/0x1050 [ 947.671058][T17570] ksys_write+0x12a/0x250 [ 947.671094][T17570] do_syscall_64+0x123/0x790 [ 947.671136][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.671164][T17570] [ 947.671171][T17570] Freed by task 17567: [ 947.671184][T17570] kasan_save_stack+0x30/0x50 [ 947.671225][T17570] kasan_save_track+0x14/0x30 [ 947.671266][T17570] kasan_save_free_info+0x3b/0x70 [ 947.671298][T17570] __kasan_slab_free+0x5f/0x80 [ 947.671342][T17570] kfree+0x22b/0x6d0 [ 947.671371][T17570] put_ep+0x117/0x150 [ 947.671419][T17570] destroy_ep_files+0x163/0x420 [ 947.671443][T17570] gadgetfs_unbind+0x139/0x260 [ 947.671468][T17570] gadget_unbind_driver+0x20c/0x4f0 [ 947.671503][T17570] device_remove+0xcb/0x180 [ 947.671535][T17570] device_release_driver_internal+0x44e/0x620 [ 947.671576][T17570] driver_detach+0xd8/0x1b0 [ 947.671612][T17570] bus_remove_driver+0x13b/0x2e0 [ 947.671642][T17570] driver_unregister+0x76/0xb0 [ 947.671681][T17570] usb_gadget_unregister_driver+0x49/0x70 [ 947.671714][T17570] dev_release+0x132/0x1b0 [ 947.671738][T17570] __fput+0x3ff/0xb50 [ 947.671763][T17570] task_work_run+0x150/0x240 [ 947.671802][T17570] get_signal+0x1bd/0x21e0 [ 947.671827][T17570] arch_do_signal_or_restart+0x91/0x7e0 [ 947.671867][T17570] exit_to_user_mode_loop+0x139/0x700 [ 947.671896][T17570] do_syscall_64+0x661/0x790 [ 947.671938][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.671966][T17570] [ 947.671973][T17570] The buggy address belongs to the object at ffff888057464c00 [ 947.671973][T17570] which belongs to the cache kmalloc-512 of size 512 [ 947.671997][T17570] The buggy address is located 0 bytes inside of [ 947.671997][T17570] freed 512-byte region [ffff888057464c00, ffff888057464e00) [ 947.672026][T17570] [ 947.672033][T17570] The buggy address belongs to the physical page: [ 947.672045][T17570] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057466c00 pfn:0x57464 [ 947.672072][T17570] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 947.672096][T17570] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 947.672122][T17570] page_type: f5(slab) [ 947.672146][T17570] raw: 00fff00000000240 ffff88801c02ec80 ffffea0001711f10 ffffea0000da7d10 [ 947.672174][T17570] raw: ffff888057466c00 000000000010000e 00000000f5000000 0000000000000000 [ 947.672201][T17570] head: 00fff00000000240 ffff88801c02ec80 ffffea0001711f10 ffffea0000da7d10 [ 947.672228][T17570] head: ffff888057466c00 000000000010000e 00000000f5000000 0000000000000000 [ 947.672256][T17570] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 947.672282][T17570] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 947.672299][T17570] page dumped because: kasan: bad access detected [ 947.672313][T17570] page_owner tracks the page as allocated [ 947.672323][T17570] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 99333561687 [ 947.672369][T17570] post_alloc_hook+0xfd/0x120 [ 947.672405][T17570] get_page_from_freelist+0x110d/0x35d0 [ 947.672440][T17570] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 947.672478][T17570] new_slab+0xa9/0x6e0 [ 947.672509][T17570] refill_objects+0xe3/0x410 [ 947.672542][T17570] __pcs_replace_empty_main+0x35e/0x650 [ 947.672576][T17570] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 947.672608][T17570] __ipv6_dev_mc_inc+0x2f1/0xc80 [ 947.672652][T17570] addrconf_dad_work+0x276/0x1360 [ 947.672687][T17570] process_one_work+0xac7/0x1b10 [ 947.672731][T17570] worker_thread+0x5ef/0xe50 [ 947.672771][T17570] kthread+0x373/0x450 [ 947.672806][T17570] ret_from_fork+0x730/0xd60 [ 947.672833][T17570] ret_from_fork_asm+0x1a/0x30 [ 947.672860][T17570] page last free pid 1 tgid 1 ts 23585691579 stack trace: [ 947.672879][T17570] free_pages_prepare+0x586/0xe00 [ 947.672909][T17570] __free_contig_range_common+0x14f/0x250 [ 947.672942][T17570] destroy_args+0xa8/0x7a0 [ 947.672984][T17570] debug_vm_pgtable+0x1d69/0x3490 [ 947.673026][T17570] do_one_initcall+0x11c/0x6f0 [ 947.673071][T17570] kernel_init_freeable+0x6ea/0x7b0 [ 947.673112][T17570] kernel_init+0x21/0x1e0 [ 947.673141][T17570] ret_from_fork+0x730/0xd60 [ 947.673166][T17570] ret_from_fork_asm+0x1a/0x30 [ 947.673192][T17570] [ 947.673199][T17570] Memory state around the buggy address: [ 947.673214][T17570] ffff888057464b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 947.673235][T17570] ffff888057464b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 947.673256][T17570] >ffff888057464c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 947.673273][T17570] ^ [ 947.673288][T17570] ffff888057464c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 947.673309][T17570] ffff888057464d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 947.673326][T17570] ================================================================== [ 947.673524][T17570] ================================================================== [ 947.673539][T17570] BUG: KASAN: slab-use-after-free in __mutex_lock+0x18f0/0x1bd0 [ 947.673587][T17570] Read of size 8 at addr ffff888057464c00 by task syz.2.3318/17570 [ 947.673611][T17570] [ 947.673626][T17570] CPU: 0 UID: 0 PID: 17570 Comm: syz.2.3318 Tainted: G B L syzkaller #0 PREEMPT(full) [ 947.673671][T17570] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 947.673684][T17570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 947.673703][T17570] Call Trace: [ 947.673712][T17570] [ 947.673724][T17570] dump_stack_lvl+0x100/0x190 [ 947.673764][T17570] print_report+0x13d/0x4b0 [ 947.673809][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.673845][T17570] ? __virt_addr_valid+0x239/0x430 [ 947.673894][T17570] ? __mutex_lock+0x18f0/0x1bd0 [ 947.673943][T17570] kasan_report+0xdf/0x1c0 [ 947.673972][T17570] ? __mutex_lock+0x18f0/0x1bd0 [ 947.674023][T17570] __mutex_lock+0x18f0/0x1bd0 [ 947.674069][T17570] ? ep_open+0x4c/0x2c0 [ 947.674096][T17570] ? hook_file_open+0x248/0x8e0 [ 947.674145][T17570] ? __pfx___mutex_lock+0x10/0x10 [ 947.674201][T17570] ? __pfx_apparmor_file_open+0x10/0x10 [ 947.674252][T17570] ? ep_open+0x4c/0x2c0 [ 947.674278][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.674314][T17570] ep_open+0x4c/0x2c0 [ 947.674343][T17570] do_dentry_open+0x6ab/0x14d0 [ 947.674385][T17570] ? __pfx_ep_open+0x10/0x10 [ 947.674420][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.674458][T17570] vfs_open+0x82/0x3f0 [ 947.674486][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.674525][T17570] path_openat+0x19fa/0x2440 [ 947.674556][T17570] ? __pfx_path_openat+0x10/0x10 [ 947.674589][T17570] do_file_open+0x20e/0x430 [ 947.674618][T17570] ? __pfx_do_file_open+0x10/0x10 [ 947.674659][T17570] ? _raw_spin_unlock+0x28/0x50 [ 947.674697][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.674733][T17570] ? alloc_fd+0x471/0x7a0 [ 947.674766][T17570] do_sys_openat2+0x10f/0x1e0 [ 947.674797][T17570] ? __pfx_do_sys_openat2+0x10/0x10 [ 947.674830][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.674866][T17570] ? do_raw_spin_lock+0x128/0x260 [ 947.674901][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.674937][T17570] ? find_held_lock+0x2b/0x80 [ 947.674978][T17570] __x64_sys_openat+0x12d/0x210 [ 947.675010][T17570] ? __pfx___x64_sys_openat+0x10/0x10 [ 947.675044][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.675082][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 947.675122][T17570] do_syscall_64+0x123/0x790 [ 947.675169][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.675200][T17570] RIP: 0033:0x7f85c099e159 [ 947.675221][T17570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.675251][T17570] RSP: 002b:00007f85bebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 947.675279][T17570] RAX: ffffffffffffffda RBX: 00007f85c0c26090 RCX: 00007f85c099e159 [ 947.675300][T17570] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 947.675321][T17570] RBP: 00007f85c0a3503b R08: 0000000000000000 R09: 0000000000000000 [ 947.675340][T17570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.675359][T17570] R13: 00007f85c0c26128 R14: 00007f85c0c26090 R15: 00007fff1ca17458 [ 947.675390][T17570] [ 947.675404][T17570] [ 947.675411][T17570] Allocated by task 17567: [ 947.675424][T17570] kasan_save_stack+0x30/0x50 [ 947.675467][T17570] kasan_save_track+0x14/0x30 [ 947.675509][T17570] __kasan_kmalloc+0xaa/0xb0 [ 947.675550][T17570] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 947.675583][T17570] gadgetfs_bind+0x582/0x890 [ 947.675608][T17570] gadget_bind_driver+0x28c/0xbf0 [ 947.675642][T17570] really_probe+0x241/0xa60 [ 947.675676][T17570] __driver_probe_device+0x210/0x460 [ 947.675712][T17570] driver_probe_device+0x4a/0x140 [ 947.675748][T17570] __driver_attach+0x21f/0x5b0 [ 947.675784][T17570] bus_for_each_dev+0x13e/0x1d0 [ 947.675810][T17570] bus_add_driver+0x305/0x5b0 [ 947.675840][T17570] driver_register+0x1e2/0x360 [ 947.675879][T17570] usb_gadget_register_driver_owner+0x132/0x210 [ 947.675914][T17570] dev_config+0xdce/0x1610 [ 947.675939][T17570] vfs_write+0x2aa/0x1050 [ 947.675975][T17570] ksys_write+0x12a/0x250 [ 947.676012][T17570] do_syscall_64+0x123/0x790 [ 947.676054][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.676083][T17570] [ 947.676090][T17570] Freed by task 17567: [ 947.676103][T17570] kasan_save_stack+0x30/0x50 [ 947.676145][T17570] kasan_save_track+0x14/0x30 [ 947.676186][T17570] kasan_save_free_info+0x3b/0x70 [ 947.676219][T17570] __kasan_slab_free+0x5f/0x80 [ 947.676263][T17570] kfree+0x22b/0x6d0 [ 947.676292][T17570] put_ep+0x117/0x150 [ 947.676335][T17570] destroy_ep_files+0x163/0x420 [ 947.676359][T17570] gadgetfs_unbind+0x139/0x260 [ 947.676384][T17570] gadget_unbind_driver+0x20c/0x4f0 [ 947.676422][T17570] device_remove+0xcb/0x180 [ 947.676455][T17570] device_release_driver_internal+0x44e/0x620 [ 947.676496][T17570] driver_detach+0xd8/0x1b0 [ 947.676533][T17570] bus_remove_driver+0x13b/0x2e0 [ 947.676564][T17570] driver_unregister+0x76/0xb0 [ 947.676603][T17570] usb_gadget_unregister_driver+0x49/0x70 [ 947.676637][T17570] dev_release+0x132/0x1b0 [ 947.676660][T17570] __fput+0x3ff/0xb50 [ 947.676685][T17570] task_work_run+0x150/0x240 [ 947.676724][T17570] get_signal+0x1bd/0x21e0 [ 947.676749][T17570] arch_do_signal_or_restart+0x91/0x7e0 [ 947.676788][T17570] exit_to_user_mode_loop+0x139/0x700 [ 947.676818][T17570] do_syscall_64+0x661/0x790 [ 947.676860][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.676889][T17570] [ 947.676896][T17570] The buggy address belongs to the object at ffff888057464c00 [ 947.676896][T17570] which belongs to the cache kmalloc-512 of size 512 [ 947.676920][T17570] The buggy address is located 0 bytes inside of [ 947.676920][T17570] freed 512-byte region [ffff888057464c00, ffff888057464e00) [ 947.676949][T17570] [ 947.676956][T17570] The buggy address belongs to the physical page: [ 947.676968][T17570] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057466c00 pfn:0x57464 [ 947.676995][T17570] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 947.677018][T17570] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 947.677044][T17570] page_type: f5(slab) [ 947.677068][T17570] raw: 00fff00000000240 ffff88801c02ec80 ffffea0001711f10 ffffea0000da7d10 [ 947.677096][T17570] raw: ffff888057466c00 000000000010000e 00000000f5000000 0000000000000000 [ 947.677124][T17570] head: 00fff00000000240 ffff88801c02ec80 ffffea0001711f10 ffffea0000da7d10 [ 947.677151][T17570] head: ffff888057466c00 000000000010000e 00000000f5000000 0000000000000000 [ 947.677179][T17570] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 947.677207][T17570] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 947.677224][T17570] page dumped because: kasan: bad access detected [ 947.677238][T17570] page_owner tracks the page as allocated [ 947.677248][T17570] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 99333561687 [ 947.677295][T17570] post_alloc_hook+0xfd/0x120 [ 947.677327][T17570] get_page_from_freelist+0x110d/0x35d0 [ 947.677363][T17570] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 947.677403][T17570] new_slab+0xa9/0x6e0 [ 947.677435][T17570] refill_objects+0xe3/0x410 [ 947.677469][T17570] __pcs_replace_empty_main+0x35e/0x650 [ 947.677503][T17570] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 947.677536][T17570] __ipv6_dev_mc_inc+0x2f1/0xc80 [ 947.677581][T17570] addrconf_dad_work+0x276/0x1360 [ 947.677617][T17570] process_one_work+0xac7/0x1b10 [ 947.677656][T17570] worker_thread+0x5ef/0xe50 [ 947.677696][T17570] kthread+0x373/0x450 [ 947.677730][T17570] ret_from_fork+0x730/0xd60 [ 947.677756][T17570] ret_from_fork_asm+0x1a/0x30 [ 947.677781][T17570] page last free pid 1 tgid 1 ts 23585691579 stack trace: [ 947.677800][T17570] free_pages_prepare+0x586/0xe00 [ 947.677831][T17570] __free_contig_range_common+0x14f/0x250 [ 947.677863][T17570] destroy_args+0xa8/0x7a0 [ 947.677906][T17570] debug_vm_pgtable+0x1d69/0x3490 [ 947.677949][T17570] do_one_initcall+0x11c/0x6f0 [ 947.677994][T17570] kernel_init_freeable+0x6ea/0x7b0 [ 947.678034][T17570] kernel_init+0x21/0x1e0 [ 947.678063][T17570] ret_from_fork+0x730/0xd60 [ 947.678088][T17570] ret_from_fork_asm+0x1a/0x30 [ 947.678113][T17570] [ 947.678120][T17570] Memory state around the buggy address: [ 947.678134][T17570] ffff888057464b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 947.678155][T17570] ffff888057464b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 947.678176][T17570] >ffff888057464c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 947.678193][T17570] ^ [ 947.678208][T17570] ffff888057464c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 947.678229][T17570] ffff888057464d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 947.678245][T17570] ================================================================== [ 947.945323][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.195449][T13588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.578051][T17570] ================================================================== [ 948.578068][T17570] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23a/0x260 [ 948.578110][T17570] Read of size 4 at addr ffff888057464c0c by task syz.2.3318/17570 [ 948.578134][T17570] [ 948.578150][T17570] CPU: 0 UID: 0 PID: 17570 Comm: syz.2.3318 Tainted: G B L syzkaller #0 PREEMPT(full) [ 948.578194][T17570] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 948.578208][T17570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 948.578226][T17570] Call Trace: [ 948.578236][T17570] [ 948.578248][T17570] dump_stack_lvl+0x100/0x190 [ 948.578288][T17570] print_report+0x13d/0x4b0 [ 948.578334][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.578370][T17570] ? __virt_addr_valid+0x239/0x430 [ 948.578419][T17570] ? do_raw_spin_lock+0x23a/0x260 [ 948.578452][T17570] kasan_report+0xdf/0x1c0 [ 948.578482][T17570] ? do_raw_spin_lock+0x23a/0x260 [ 948.578520][T17570] do_raw_spin_lock+0x23a/0x260 [ 948.578554][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.578591][T17570] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 948.578625][T17570] ? lock_acquire+0x31e/0x380 [ 948.578651][T17570] ? __mutex_lock+0x18f0/0x1bd0 [ 948.578698][T17570] ? _raw_spin_lock_irqsave+0x52/0x60 [ 948.578738][T17570] ? __mutex_lock+0x160b/0x1bd0 [ 948.578784][T17570] _raw_spin_lock_irqsave+0x42/0x60 [ 948.578826][T17570] ? __mutex_lock+0x31e/0x1bd0 [ 948.578872][T17570] __mutex_lock+0x31e/0x1bd0 [ 948.578918][T17570] ? ep_open+0x4c/0x2c0 [ 948.578946][T17570] ? hook_file_open+0x248/0x8e0 [ 948.578998][T17570] ? __pfx___mutex_lock+0x10/0x10 [ 948.579053][T17570] ? __pfx_apparmor_file_open+0x10/0x10 [ 948.579104][T17570] ? ep_open+0x4c/0x2c0 [ 948.579130][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.579166][T17570] ep_open+0x4c/0x2c0 [ 948.579195][T17570] do_dentry_open+0x6ab/0x14d0 [ 948.579237][T17570] ? __pfx_ep_open+0x10/0x10 [ 948.579267][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.579305][T17570] vfs_open+0x82/0x3f0 [ 948.579333][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.579372][T17570] path_openat+0x19fa/0x2440 [ 948.579403][T17570] ? __pfx_path_openat+0x10/0x10 [ 948.579436][T17570] do_file_open+0x20e/0x430 [ 948.579465][T17570] ? __pfx_do_file_open+0x10/0x10 [ 948.579506][T17570] ? _raw_spin_unlock+0x28/0x50 [ 948.579544][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.579580][T17570] ? alloc_fd+0x471/0x7a0 [ 948.579613][T17570] do_sys_openat2+0x10f/0x1e0 [ 948.579644][T17570] ? __pfx_do_sys_openat2+0x10/0x10 [ 948.579676][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.579712][T17570] ? do_raw_spin_lock+0x128/0x260 [ 948.579746][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.579782][T17570] ? find_held_lock+0x2b/0x80 [ 948.579824][T17570] __x64_sys_openat+0x12d/0x210 [ 948.579856][T17570] ? __pfx___x64_sys_openat+0x10/0x10 [ 948.579890][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.579928][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.579967][T17570] do_syscall_64+0x123/0x790 [ 948.580018][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.580048][T17570] RIP: 0033:0x7f85c099e159 [ 948.580071][T17570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.580101][T17570] RSP: 002b:00007f85bebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 948.580130][T17570] RAX: ffffffffffffffda RBX: 00007f85c0c26090 RCX: 00007f85c099e159 [ 948.580151][T17570] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 948.580171][T17570] RBP: 00007f85c0a3503b R08: 0000000000000000 R09: 0000000000000000 [ 948.580191][T17570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.580210][T17570] R13: 00007f85c0c26128 R14: 00007f85c0c26090 R15: 00007fff1ca17458 [ 948.580241][T17570] [ 948.580252][T17570] [ 948.580259][T17570] Allocated by task 17567: [ 948.580273][T17570] kasan_save_stack+0x30/0x50 [ 948.580315][T17570] kasan_save_track+0x14/0x30 [ 948.580356][T17570] __kasan_kmalloc+0xaa/0xb0 [ 948.580397][T17570] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 948.580431][T17570] gadgetfs_bind+0x582/0x890 [ 948.580455][T17570] gadget_bind_driver+0x28c/0xbf0 [ 948.580489][T17570] really_probe+0x241/0xa60 [ 948.580523][T17570] __driver_probe_device+0x210/0x460 [ 948.580560][T17570] driver_probe_device+0x4a/0x140 [ 948.580596][T17570] __driver_attach+0x21f/0x5b0 [ 948.580630][T17570] bus_for_each_dev+0x13e/0x1d0 [ 948.580657][T17570] bus_add_driver+0x305/0x5b0 [ 948.580686][T17570] driver_register+0x1e2/0x360 [ 948.580725][T17570] usb_gadget_register_driver_owner+0x132/0x210 [ 948.580760][T17570] dev_config+0xdce/0x1610 [ 948.580784][T17570] vfs_write+0x2aa/0x1050 [ 948.580821][T17570] ksys_write+0x12a/0x250 [ 948.580857][T17570] do_syscall_64+0x123/0x790 [ 948.580899][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.580928][T17570] [ 948.580935][T17570] Freed by task 17567: [ 948.580947][T17570] kasan_save_stack+0x30/0x50 [ 948.580993][T17570] kasan_save_track+0x14/0x30 [ 948.581035][T17570] kasan_save_free_info+0x3b/0x70 [ 948.581068][T17570] __kasan_slab_free+0x5f/0x80 [ 948.581112][T17570] kfree+0x22b/0x6d0 [ 948.581141][T17570] put_ep+0x117/0x150 [ 948.581184][T17570] destroy_ep_files+0x163/0x420 [ 948.581208][T17570] gadgetfs_unbind+0x139/0x260 [ 948.581233][T17570] gadget_unbind_driver+0x20c/0x4f0 [ 948.581268][T17570] device_remove+0xcb/0x180 [ 948.581300][T17570] device_release_driver_internal+0x44e/0x620 [ 948.581341][T17570] driver_detach+0xd8/0x1b0 [ 948.581378][T17570] bus_remove_driver+0x13b/0x2e0 [ 948.581409][T17570] driver_unregister+0x76/0xb0 [ 948.581448][T17570] usb_gadget_unregister_driver+0x49/0x70 [ 948.581482][T17570] dev_release+0x132/0x1b0 [ 948.581505][T17570] __fput+0x3ff/0xb50 [ 948.581530][T17570] task_work_run+0x150/0x240 [ 948.581569][T17570] get_signal+0x1bd/0x21e0 [ 948.581594][T17570] arch_do_signal_or_restart+0x91/0x7e0 [ 948.581634][T17570] exit_to_user_mode_loop+0x139/0x700 [ 948.581664][T17570] do_syscall_64+0x661/0x790 [ 948.581706][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.581734][T17570] [ 948.581742][T17570] The buggy address belongs to the object at ffff888057464c00 [ 948.581742][T17570] which belongs to the cache kmalloc-512 of size 512 [ 948.581764][T17570] The buggy address is located 12 bytes inside of [ 948.581764][T17570] freed 512-byte region [ffff888057464c00, ffff888057464e00) [ 948.581793][T17570] [ 948.581800][T17570] The buggy address belongs to the physical page: [ 948.581812][T17570] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057466c00 pfn:0x57464 [ 948.581839][T17570] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 948.581862][T17570] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 948.581888][T17570] page_type: f5(slab) [ 948.581913][T17570] raw: 00fff00000000240 ffff88801c02ec80 ffffea0001711f10 ffffea0000da7d10 [ 948.581940][T17570] raw: ffff888057466c00 000000000010000e 00000000f5000000 0000000000000000 [ 948.581968][T17570] head: 00fff00000000240 ffff88801c02ec80 ffffea0001711f10 ffffea0000da7d10 [ 948.581999][T17570] head: ffff888057466c00 000000000010000e 00000000f5000000 0000000000000000 [ 948.582026][T17570] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 948.582053][T17570] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 948.582070][T17570] page dumped because: kasan: bad access detected [ 948.582084][T17570] page_owner tracks the page as allocated [ 948.582094][T17570] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 99333561687 [ 948.582141][T17570] post_alloc_hook+0xfd/0x120 [ 948.582172][T17570] get_page_from_freelist+0x110d/0x35d0 [ 948.582208][T17570] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 948.582245][T17570] new_slab+0xa9/0x6e0 [ 948.582277][T17570] refill_objects+0xe3/0x410 [ 948.582311][T17570] __pcs_replace_empty_main+0x35e/0x650 [ 948.582344][T17570] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 948.582377][T17570] __ipv6_dev_mc_inc+0x2f1/0xc80 [ 948.582424][T17570] addrconf_dad_work+0x276/0x1360 [ 948.582460][T17570] process_one_work+0xac7/0x1b10 [ 948.582500][T17570] worker_thread+0x5ef/0xe50 [ 948.582538][T17570] kthread+0x373/0x450 [ 948.582573][T17570] ret_from_fork+0x730/0xd60 [ 948.582599][T17570] ret_from_fork_asm+0x1a/0x30 [ 948.582625][T17570] page last free pid 1 tgid 1 ts 23585691579 stack trace: [ 948.582643][T17570] free_pages_prepare+0x586/0xe00 [ 948.582674][T17570] __free_contig_range_common+0x14f/0x250 [ 948.582706][T17570] destroy_args+0xa8/0x7a0 [ 948.582749][T17570] debug_vm_pgtable+0x1d69/0x3490 [ 948.582791][T17570] do_one_initcall+0x11c/0x6f0 [ 948.582836][T17570] kernel_init_freeable+0x6ea/0x7b0 [ 948.582877][T17570] kernel_init+0x21/0x1e0 [ 948.582905][T17570] ret_from_fork+0x730/0xd60 [ 948.582931][T17570] ret_from_fork_asm+0x1a/0x30 [ 948.582956][T17570] [ 948.582963][T17570] Memory state around the buggy address: [ 948.582977][T17570] ffff888057464b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 948.583002][T17570] ffff888057464b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 948.583023][T17570] >ffff888057464c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 948.583040][T17570] ^ [ 948.583054][T17570] ffff888057464c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 948.583075][T17570] ffff888057464d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 948.583091][T17570] ================================================================== [ 948.583104][T17570] ================================================================== [ 948.583116][T17570] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x247/0x260 [ 948.583151][T17570] Read of size 8 at addr ffff888057464c18 by task syz.2.3318/17570 [ 948.583174][T17570] [ 948.583189][T17570] CPU: 0 UID: 0 PID: 17570 Comm: syz.2.3318 Tainted: G B L syzkaller #0 PREEMPT(full) [ 948.583232][T17570] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 948.583246][T17570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 948.583264][T17570] Call Trace: [ 948.583274][T17570] [ 948.583285][T17570] dump_stack_lvl+0x100/0x190 [ 948.583324][T17570] print_report+0x13d/0x4b0 [ 948.583369][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.583405][T17570] ? __virt_addr_valid+0x239/0x430 [ 948.583454][T17570] ? do_raw_spin_lock+0x247/0x260 [ 948.583487][T17570] kasan_report+0xdf/0x1c0 [ 948.583516][T17570] ? do_raw_spin_lock+0x247/0x260 [ 948.583555][T17570] do_raw_spin_lock+0x247/0x260 [ 948.583588][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.583625][T17570] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 948.583659][T17570] ? lock_acquire+0x31e/0x380 [ 948.583686][T17570] ? __mutex_lock+0x18f0/0x1bd0 [ 948.583732][T17570] ? _raw_spin_lock_irqsave+0x52/0x60 [ 948.583772][T17570] ? __mutex_lock+0x160b/0x1bd0 [ 948.583818][T17570] _raw_spin_lock_irqsave+0x42/0x60 [ 948.583856][T17570] ? __mutex_lock+0x31e/0x1bd0 [ 948.583904][T17570] __mutex_lock+0x31e/0x1bd0 [ 948.583950][T17570] ? ep_open+0x4c/0x2c0 [ 948.583976][T17570] ? hook_file_open+0x248/0x8e0 [ 948.584029][T17570] ? __pfx___mutex_lock+0x10/0x10 [ 948.584084][T17570] ? __pfx_apparmor_file_open+0x10/0x10 [ 948.584136][T17570] ? ep_open+0x4c/0x2c0 [ 948.584162][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.584198][T17570] ep_open+0x4c/0x2c0 [ 948.584226][T17570] do_dentry_open+0x6ab/0x14d0 [ 948.584268][T17570] ? __pfx_ep_open+0x10/0x10 [ 948.584297][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.584336][T17570] vfs_open+0x82/0x3f0 [ 948.584363][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.584402][T17570] path_openat+0x19fa/0x2440 [ 948.584433][T17570] ? __pfx_path_openat+0x10/0x10 [ 948.584466][T17570] do_file_open+0x20e/0x430 [ 948.584495][T17570] ? __pfx_do_file_open+0x10/0x10 [ 948.584537][T17570] ? _raw_spin_unlock+0x28/0x50 [ 948.584574][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.584610][T17570] ? alloc_fd+0x471/0x7a0 [ 948.584643][T17570] do_sys_openat2+0x10f/0x1e0 [ 948.584674][T17570] ? __pfx_do_sys_openat2+0x10/0x10 [ 948.584706][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.584742][T17570] ? do_raw_spin_lock+0x128/0x260 [ 948.584776][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.584812][T17570] ? find_held_lock+0x2b/0x80 [ 948.584853][T17570] __x64_sys_openat+0x12d/0x210 [ 948.584885][T17570] ? __pfx___x64_sys_openat+0x10/0x10 [ 948.584919][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.584957][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.584999][T17570] do_syscall_64+0x123/0x790 [ 948.585047][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.585077][T17570] RIP: 0033:0x7f85c099e159 [ 948.585099][T17570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.585130][T17570] RSP: 002b:00007f85bebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 948.585158][T17570] RAX: ffffffffffffffda RBX: 00007f85c0c26090 RCX: 00007f85c099e159 [ 948.585179][T17570] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 948.585200][T17570] RBP: 00007f85c0a3503b R08: 0000000000000000 R09: 0000000000000000 [ 948.585219][T17570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.585239][T17570] R13: 00007f85c0c26128 R14: 00007f85c0c26090 R15: 00007fff1ca17458 [ 948.585269][T17570] [ 948.585280][T17570] [ 948.585287][T17570] Allocated by task 17567: [ 948.585301][T17570] kasan_save_stack+0x30/0x50 [ 948.585342][T17570] kasan_save_track+0x14/0x30 [ 948.585384][T17570] __kasan_kmalloc+0xaa/0xb0 [ 948.585424][T17570] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 948.585457][T17570] gadgetfs_bind+0x582/0x890 [ 948.585482][T17570] gadget_bind_driver+0x28c/0xbf0 [ 948.585514][T17570] really_probe+0x241/0xa60 [ 948.585548][T17570] __driver_probe_device+0x210/0x460 [ 948.585584][T17570] driver_probe_device+0x4a/0x140 [ 948.585620][T17570] __driver_attach+0x21f/0x5b0 [ 948.585654][T17570] bus_for_each_dev+0x13e/0x1d0 [ 948.585680][T17570] bus_add_driver+0x305/0x5b0 [ 948.585710][T17570] driver_register+0x1e2/0x360 [ 948.585749][T17570] usb_gadget_register_driver_owner+0x132/0x210 [ 948.585784][T17570] dev_config+0xdce/0x1610 [ 948.585809][T17570] vfs_write+0x2aa/0x1050 [ 948.585845][T17570] ksys_write+0x12a/0x250 [ 948.585882][T17570] do_syscall_64+0x123/0x790 [ 948.585924][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.585952][T17570] [ 948.585959][T17570] Freed by task 17567: [ 948.585971][T17570] kasan_save_stack+0x30/0x50 [ 948.586017][T17570] kasan_save_track+0x14/0x30 [ 948.586058][T17570] kasan_save_free_info+0x3b/0x70 [ 948.586091][T17570] __kasan_slab_free+0x5f/0x80 [ 948.586135][T17570] kfree+0x22b/0x6d0 [ 948.586164][T17570] put_ep+0x117/0x150 [ 948.586206][T17570] destroy_ep_files+0x163/0x420 [ 948.586230][T17570] gadgetfs_unbind+0x139/0x260 [ 948.586255][T17570] gadget_unbind_driver+0x20c/0x4f0 [ 948.586290][T17570] device_remove+0xcb/0x180 [ 948.586322][T17570] device_release_driver_internal+0x44e/0x620 [ 948.586363][T17570] driver_detach+0xd8/0x1b0 [ 948.586399][T17570] bus_remove_driver+0x13b/0x2e0 [ 948.586430][T17570] driver_unregister+0x76/0xb0 [ 948.586469][T17570] usb_gadget_unregister_driver+0x49/0x70 [ 948.586503][T17570] dev_release+0x132/0x1b0 [ 948.586526][T17570] __fput+0x3ff/0xb50 [ 948.586551][T17570] task_work_run+0x150/0x240 [ 948.586590][T17570] get_signal+0x1bd/0x21e0 [ 948.586614][T17570] arch_do_signal_or_restart+0x91/0x7e0 [ 948.586653][T17570] exit_to_user_mode_loop+0x139/0x700 [ 948.586682][T17570] do_syscall_64+0x661/0x790 [ 948.586724][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.586752][T17570] [ 948.586759][T17570] The buggy address belongs to the object at ffff888057464c00 [ 948.586759][T17570] which belongs to the cache kmalloc-512 of size 512 [ 948.586782][T17570] The buggy address is located 24 bytes inside of [ 948.586782][T17570] freed 512-byte region [ffff888057464c00, ffff888057464e00) [ 948.586810][T17570] [ 948.586817][T17570] The buggy address belongs to the physical page: [ 948.586828][T17570] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057466c00 pfn:0x57464 [ 948.586854][T17570] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 948.586877][T17570] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 948.586902][T17570] page_type: f5(slab) [ 948.586926][T17570] raw: 00fff00000000240 ffff88801c02ec80 ffffea0001711f10 ffffea0000da7d10 [ 948.586953][T17570] raw: ffff888057466c00 000000000010000e 00000000f5000000 0000000000000000 [ 948.586984][T17570] head: 00fff00000000240 ffff88801c02ec80 ffffea0001711f10 ffffea0000da7d10 [ 948.587012][T17570] head: ffff888057466c00 000000000010000e 00000000f5000000 0000000000000000 [ 948.587039][T17570] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 948.587065][T17570] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 948.587083][T17570] page dumped because: kasan: bad access detected [ 948.587096][T17570] page_owner tracks the page as allocated [ 948.587106][T17570] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 99333561687 [ 948.587152][T17570] post_alloc_hook+0xfd/0x120 [ 948.587182][T17570] get_page_from_freelist+0x110d/0x35d0 [ 948.587218][T17570] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 948.587255][T17570] new_slab+0xa9/0x6e0 [ 948.587287][T17570] refill_objects+0xe3/0x410 [ 948.587321][T17570] __pcs_replace_empty_main+0x35e/0x650 [ 948.587354][T17570] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 948.587388][T17570] __ipv6_dev_mc_inc+0x2f1/0xc80 [ 948.587432][T17570] addrconf_dad_work+0x276/0x1360 [ 948.587467][T17570] process_one_work+0xac7/0x1b10 [ 948.587507][T17570] worker_thread+0x5ef/0xe50 [ 948.587546][T17570] kthread+0x373/0x450 [ 948.587580][T17570] ret_from_fork+0x730/0xd60 [ 948.587606][T17570] ret_from_fork_asm+0x1a/0x30 [ 948.587631][T17570] page last free pid 1 tgid 1 ts 23585691579 stack trace: [ 948.587649][T17570] free_pages_prepare+0x586/0xe00 [ 948.587680][T17570] __free_contig_range_common+0x14f/0x250 [ 948.587713][T17570] destroy_args+0xa8/0x7a0 [ 948.587755][T17570] debug_vm_pgtable+0x1d69/0x3490 [ 948.587797][T17570] do_one_initcall+0x11c/0x6f0 [ 948.587842][T17570] kernel_init_freeable+0x6ea/0x7b0 [ 948.587882][T17570] kernel_init+0x21/0x1e0 [ 948.587911][T17570] ret_from_fork+0x730/0xd60 [ 948.587936][T17570] ret_from_fork_asm+0x1a/0x30 [ 948.587961][T17570] [ 948.587968][T17570] Memory state around the buggy address: [ 948.587986][T17570] ffff888057464b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 948.588007][T17570] ffff888057464b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 948.588028][T17570] >ffff888057464c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 948.588045][T17570] ^ [ 948.588060][T17570] ffff888057464c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 948.588081][T17570] ffff888057464d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 948.588098][T17570] ================================================================== [ 948.588110][T17570] ================================================================== [ 948.588121][T17570] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x230/0x260 [ 948.588157][T17570] Read of size 4 at addr ffff888057464c10 by task syz.2.3318/17570 [ 948.588180][T17570] [ 948.588194][T17570] CPU: 0 UID: 0 PID: 17570 Comm: syz.2.3318 Tainted: G B L syzkaller #0 PREEMPT(full) [ 948.588237][T17570] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 948.588250][T17570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 948.588268][T17570] Call Trace: [ 948.588278][T17570] [ 948.588289][T17570] dump_stack_lvl+0x100/0x190 [ 948.588328][T17570] print_report+0x13d/0x4b0 [ 948.588372][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.588408][T17570] ? __virt_addr_valid+0x239/0x430 [ 948.588456][T17570] ? do_raw_spin_lock+0x230/0x260 [ 948.588489][T17570] kasan_report+0xdf/0x1c0 [ 948.588519][T17570] ? do_raw_spin_lock+0x230/0x260 [ 948.588557][T17570] do_raw_spin_lock+0x230/0x260 [ 948.588590][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.588627][T17570] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 948.588661][T17570] ? lock_acquire+0x31e/0x380 [ 948.588688][T17570] ? __mutex_lock+0x18f0/0x1bd0 [ 948.588734][T17570] ? _raw_spin_lock_irqsave+0x52/0x60 [ 948.588774][T17570] ? __mutex_lock+0x160b/0x1bd0 [ 948.588820][T17570] _raw_spin_lock_irqsave+0x42/0x60 [ 948.588859][T17570] ? __mutex_lock+0x31e/0x1bd0 [ 948.588905][T17570] __mutex_lock+0x31e/0x1bd0 [ 948.588950][T17570] ? ep_open+0x4c/0x2c0 [ 948.588977][T17570] ? hook_file_open+0x248/0x8e0 [ 948.589056][T17570] ? __pfx___mutex_lock+0x10/0x10 [ 948.589112][T17570] ? __pfx_apparmor_file_open+0x10/0x10 [ 948.589162][T17570] ? ep_open+0x4c/0x2c0 [ 948.589189][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.589225][T17570] ep_open+0x4c/0x2c0 [ 948.589254][T17570] do_dentry_open+0x6ab/0x14d0 [ 948.589295][T17570] ? __pfx_ep_open+0x10/0x10 [ 948.589324][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.589363][T17570] vfs_open+0x82/0x3f0 [ 948.589391][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.589430][T17570] path_openat+0x19fa/0x2440 [ 948.589460][T17570] ? __pfx_path_openat+0x10/0x10 [ 948.589494][T17570] do_file_open+0x20e/0x430 [ 948.589523][T17570] ? __pfx_do_file_open+0x10/0x10 [ 948.589564][T17570] ? _raw_spin_unlock+0x28/0x50 [ 948.589601][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.589637][T17570] ? alloc_fd+0x471/0x7a0 [ 948.589669][T17570] do_sys_openat2+0x10f/0x1e0 [ 948.589700][T17570] ? __pfx_do_sys_openat2+0x10/0x10 [ 948.589733][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.589769][T17570] ? do_raw_spin_lock+0x128/0x260 [ 948.589803][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.589839][T17570] ? find_held_lock+0x2b/0x80 [ 948.589880][T17570] __x64_sys_openat+0x12d/0x210 [ 948.589912][T17570] ? __pfx___x64_sys_openat+0x10/0x10 [ 948.589946][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.589987][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.590027][T17570] do_syscall_64+0x123/0x790 [ 948.590074][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.590105][T17570] RIP: 0033:0x7f85c099e159 [ 948.590127][T17570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.590156][T17570] RSP: 002b:00007f85bebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 948.590184][T17570] RAX: ffffffffffffffda RBX: 00007f85c0c26090 RCX: 00007f85c099e159 [ 948.590205][T17570] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 948.590225][T17570] RBP: 00007f85c0a3503b R08: 0000000000000000 R09: 0000000000000000 [ 948.590245][T17570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.590264][T17570] R13: 00007f85c0c26128 R14: 00007f85c0c26090 R15: 00007fff1ca17458 [ 948.590295][T17570] [ 948.590306][T17570] [ 948.590312][T17570] Allocated by task 17567: [ 948.590326][T17570] kasan_save_stack+0x30/0x50 [ 948.590367][T17570] kasan_save_track+0x14/0x30 [ 948.590409][T17570] __kasan_kmalloc+0xaa/0xb0 [ 948.590449][T17570] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 948.590482][T17570] gadgetfs_bind+0x582/0x890 [ 948.590506][T17570] gadget_bind_driver+0x28c/0xbf0 [ 948.590539][T17570] really_probe+0x241/0xa60 [ 948.590573][T17570] __driver_probe_device+0x210/0x460 [ 948.590609][T17570] driver_probe_device+0x4a/0x140 [ 948.590644][T17570] __driver_attach+0x21f/0x5b0 [ 948.590680][T17570] bus_for_each_dev+0x13e/0x1d0 [ 948.590706][T17570] bus_add_driver+0x305/0x5b0 [ 948.590735][T17570] driver_register+0x1e2/0x360 [ 948.590774][T17570] usb_gadget_register_driver_owner+0x132/0x210 [ 948.590809][T17570] dev_config+0xdce/0x1610 [ 948.590834][T17570] vfs_write+0x2aa/0x1050 [ 948.590870][T17570] ksys_write+0x12a/0x250 [ 948.590907][T17570] do_syscall_64+0x123/0x790 [ 948.590948][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.590977][T17570] [ 948.590988][T17570] Freed by task 17567: [ 948.591001][T17570] kasan_save_stack+0x30/0x50 [ 948.591042][T17570] kasan_save_track+0x14/0x30 [ 948.591083][T17570] kasan_save_free_info+0x3b/0x70 [ 948.591117][T17570] __kasan_slab_free+0x5f/0x80 [ 948.591161][T17570] kfree+0x22b/0x6d0 [ 948.591190][T17570] put_ep+0x117/0x150 [ 948.591232][T17570] destroy_ep_files+0x163/0x420 [ 948.591256][T17570] gadgetfs_unbind+0x139/0x260 [ 948.591281][T17570] gadget_unbind_driver+0x20c/0x4f0 [ 948.591315][T17570] device_remove+0xcb/0x180 [ 948.591348][T17570] device_release_driver_internal+0x44e/0x620 [ 948.591388][T17570] driver_detach+0xd8/0x1b0 [ 948.591425][T17570] bus_remove_driver+0x13b/0x2e0 [ 948.591456][T17570] driver_unregister+0x76/0xb0 [ 948.591495][T17570] usb_gadget_unregister_driver+0x49/0x70 [ 948.591529][T17570] dev_release+0x132/0x1b0 [ 948.591552][T17570] __fput+0x3ff/0xb50 [ 948.591577][T17570] task_work_run+0x150/0x240 [ 948.591615][T17570] get_signal+0x1bd/0x21e0 [ 948.591639][T17570] arch_do_signal_or_restart+0x91/0x7e0 [ 948.591678][T17570] exit_to_user_mode_loop+0x139/0x700 [ 948.591708][T17570] do_syscall_64+0x661/0x790 [ 948.591749][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.591777][T17570] [ 948.591784][T17570] The buggy address belongs to the object at ffff888057464c00 [ 948.591784][T17570] which belongs to the cache kmalloc-512 of size 512 [ 948.591807][T17570] The buggy address is located 16 bytes inside of [ 948.591807][T17570] freed 512-byte region [ffff888057464c00, ffff888057464e00) [ 948.591836][T17570] [ 948.591843][T17570] The buggy address belongs to the physical page: [ 948.591854][T17570] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057466c00 pfn:0x57464 [ 948.591881][T17570] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 948.591904][T17570] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 948.591928][T17570] page_type: f5(slab) [ 948.591952][T17570] raw: 00fff00000000240 ffff88801c02ec80 ffffea0001711f10 ffffea0000da7d10 [ 948.591983][T17570] raw: ffff888057466c00 000000000010000e 00000000f5000000 0000000000000000 [ 948.592010][T17570] head: 00fff00000000240 ffff88801c02ec80 ffffea0001711f10 ffffea0000da7d10 [ 948.592038][T17570] head: ffff888057466c00 000000000010000e 00000000f5000000 0000000000000000 [ 948.592064][T17570] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 948.592092][T17570] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 948.592109][T17570] page dumped because: kasan: bad access detected [ 948.592122][T17570] page_owner tracks the page as allocated [ 948.592131][T17570] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 99333561687 [ 948.592176][T17570] post_alloc_hook+0xfd/0x120 [ 948.592207][T17570] get_page_from_freelist+0x110d/0x35d0 [ 948.592243][T17570] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 948.592280][T17570] new_slab+0xa9/0x6e0 [ 948.592311][T17570] refill_objects+0xe3/0x410 [ 948.592345][T17570] __pcs_replace_empty_main+0x35e/0x650 [ 948.592379][T17570] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 948.592412][T17570] __ipv6_dev_mc_inc+0x2f1/0xc80 [ 948.592458][T17570] addrconf_dad_work+0x276/0x1360 [ 948.592493][T17570] process_one_work+0xac7/0x1b10 [ 948.592533][T17570] worker_thread+0x5ef/0xe50 [ 948.592572][T17570] kthread+0x373/0x450 [ 948.592606][T17570] ret_from_fork+0x730/0xd60 [ 948.592631][T17570] ret_from_fork_asm+0x1a/0x30 [ 948.592657][T17570] page last free pid 1 tgid 1 ts 23585691579 stack trace: [ 948.592675][T17570] free_pages_prepare+0x586/0xe00 [ 948.592705][T17570] __free_contig_range_common+0x14f/0x250 [ 948.592738][T17570] destroy_args+0xa8/0x7a0 [ 948.592779][T17570] debug_vm_pgtable+0x1d69/0x3490 [ 948.592821][T17570] do_one_initcall+0x11c/0x6f0 [ 948.592865][T17570] kernel_init_freeable+0x6ea/0x7b0 [ 948.592906][T17570] kernel_init+0x21/0x1e0 [ 948.592934][T17570] ret_from_fork+0x730/0xd60 [ 948.592959][T17570] ret_from_fork_asm+0x1a/0x30 [ 948.592988][T17570] [ 948.592995][T17570] Memory state around the buggy address: [ 948.593009][T17570] ffff888057464b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 948.593030][T17570] ffff888057464b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 948.593051][T17570] >ffff888057464c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 948.593067][T17570] ^ [ 948.593082][T17570] ffff888057464c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 948.593103][T17570] ffff888057464d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 948.593119][T17570] ================================================================== [ 948.593131][T17570] ================================================================== [ 948.593143][T17570] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x119/0x260 [ 948.593179][T17570] Write of size 4 at addr ffff888057464c08 by task syz.2.3318/17570 [ 948.593202][T17570] [ 948.593216][T17570] CPU: 0 UID: 0 PID: 17570 Comm: syz.2.3318 Tainted: G B L syzkaller #0 PREEMPT(full) [ 948.593259][T17570] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 948.593271][T17570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 948.593290][T17570] Call Trace: [ 948.593300][T17570] [ 948.593311][T17570] dump_stack_lvl+0x100/0x190 [ 948.593349][T17570] print_report+0x13d/0x4b0 [ 948.593405][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.593441][T17570] ? __virt_addr_valid+0x239/0x430 [ 948.593489][T17570] ? do_raw_spin_lock+0x119/0x260 [ 948.593522][T17570] kasan_report+0xdf/0x1c0 [ 948.593551][T17570] ? do_raw_spin_lock+0x119/0x260 [ 948.593590][T17570] kasan_check_range+0x10f/0x1e0 [ 948.593624][T17570] do_raw_spin_lock+0x119/0x260 [ 948.593657][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.593694][T17570] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 948.593728][T17570] ? lock_acquire+0x31e/0x380 [ 948.593755][T17570] ? __mutex_lock+0x18f0/0x1bd0 [ 948.593800][T17570] ? _raw_spin_lock_irqsave+0x52/0x60 [ 948.593840][T17570] ? __mutex_lock+0x160b/0x1bd0 [ 948.593885][T17570] _raw_spin_lock_irqsave+0x42/0x60 [ 948.593924][T17570] ? __mutex_lock+0x31e/0x1bd0 [ 948.593969][T17570] __mutex_lock+0x31e/0x1bd0 [ 948.594018][T17570] ? ep_open+0x4c/0x2c0 [ 948.594044][T17570] ? hook_file_open+0x248/0x8e0 [ 948.594092][T17570] ? __pfx___mutex_lock+0x10/0x10 [ 948.594147][T17570] ? __pfx_apparmor_file_open+0x10/0x10 [ 948.594197][T17570] ? ep_open+0x4c/0x2c0 [ 948.594223][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.594259][T17570] ep_open+0x4c/0x2c0 [ 948.594287][T17570] do_dentry_open+0x6ab/0x14d0 [ 948.594328][T17570] ? __pfx_ep_open+0x10/0x10 [ 948.594357][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.594396][T17570] vfs_open+0x82/0x3f0 [ 948.594423][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.594462][T17570] path_openat+0x19fa/0x2440 [ 948.594492][T17570] ? __pfx_path_openat+0x10/0x10 [ 948.594526][T17570] do_file_open+0x20e/0x430 [ 948.594554][T17570] ? __pfx_do_file_open+0x10/0x10 [ 948.594596][T17570] ? _raw_spin_unlock+0x28/0x50 [ 948.594634][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.594670][T17570] ? alloc_fd+0x471/0x7a0 [ 948.594702][T17570] do_sys_openat2+0x10f/0x1e0 [ 948.594737][T17570] ? __pfx_do_sys_openat2+0x10/0x10 [ 948.594770][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.594806][T17570] ? do_raw_spin_lock+0x128/0x260 [ 948.594840][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.594876][T17570] ? find_held_lock+0x2b/0x80 [ 948.594917][T17570] __x64_sys_openat+0x12d/0x210 [ 948.594949][T17570] ? __pfx___x64_sys_openat+0x10/0x10 [ 948.594986][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.595024][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 948.595064][T17570] do_syscall_64+0x123/0x790 [ 948.595111][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.595142][T17570] RIP: 0033:0x7f85c099e159 [ 948.595163][T17570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.595193][T17570] RSP: 002b:00007f85bebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 948.595220][T17570] RAX: ffffffffffffffda RBX: 00007f85c0c26090 RCX: 00007f85c099e159 [ 948.595241][T17570] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 948.595261][T17570] RBP: 00007f85c0a3503b R08: 0000000000000000 R09: 0000000000000000 [ 948.595280][T17570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.595299][T17570] R13: 00007f85c0c26128 R14: 00007f85c0c26090 R15: 00007fff1ca17458 [ 948.595330][T17570] [ 948.595340][T17570] [ 948.595348][T17570] Allocated by task 17567: [ 948.595361][T17570] kasan_save_stack+0x30/0x50 [ 948.595402][T17570] kasan_save_track+0x14/0x30 [ 948.595443][T17570] __kasan_kmalloc+0xaa/0xb0 [ 948.595483][T17570] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 948.595517][T17570] gadgetfs_bind+0x582/0x890 [ 948.595541][T17570] gadget_bind_driver+0x28c/0xbf0 [ 948.595574][T17570] really_probe+0x241/0xa60 [ 948.595607][T17570] __driver_probe_device+0x210/0x460 [ 948.595644][T17570] driver_probe_device+0x4a/0x140 [ 948.595679][T17570] __driver_attach+0x21f/0x5b0 [ 948.595714][T17570] bus_for_each_dev+0x13e/0x1d0 [ 948.595740][T17570] bus_add_driver+0x305/0x5b0 [ 948.595770][T17570] driver_register+0x1e2/0x360 [ 948.595809][T17570] usb_gadget_register_driver_owner+0x132/0x210 [ 948.595844][T17570] dev_config+0xdce/0x1610 [ 948.595869][T17570] vfs_write+0x2aa/0x1050 [ 948.595905][T17570] ksys_write+0x12a/0x250 [ 948.595942][T17570] do_syscall_64+0x123/0x790 [ 948.595987][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.596015][T17570] [ 948.596022][T17570] Freed by task 17567: [ 948.596035][T17570] kasan_save_stack+0x30/0x50 [ 948.596077][T17570] kasan_save_track+0x14/0x30 [ 948.596119][T17570] kasan_save_free_info+0x3b/0x70 [ 948.596151][T17570] __kasan_slab_free+0x5f/0x80 [ 948.596195][T17570] kfree+0x22b/0x6d0 [ 948.596224][T17570] put_ep+0x117/0x150 [ 948.596266][T17570] destroy_ep_files+0x163/0x420 [ 948.596290][T17570] gadgetfs_unbind+0x139/0x260 [ 948.596315][T17570] gadget_unbind_driver+0x20c/0x4f0 [ 948.596349][T17570] device_remove+0xcb/0x180 [ 948.596382][T17570] device_release_driver_internal+0x44e/0x620 [ 948.596422][T17570] driver_detach+0xd8/0x1b0 [ 948.596459][T17570] bus_remove_driver+0x13b/0x2e0 [ 948.596490][T17570] driver_unregister+0x76/0xb0 [ 948.596529][T17570] usb_gadget_unregister_driver+0x49/0x70 [ 948.596563][T17570] dev_release+0x132/0x1b0 [ 948.596586][T17570] __fput+0x3ff/0xb50 [ 948.596611][T17570] task_work_run+0x150/0x240 [ 948.596650][T17570] get_signal+0x1bd/0x21e0 [ 948.596674][T17570] arch_do_signal_or_restart+0x91/0x7e0 [ 948.596713][T17570] exit_to_user_mode_loop+0x139/0x700 [ 948.596742][T17570] do_syscall_64+0x661/0x790 [ 948.596784][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.596813][T17570] [ 948.596820][T17570] The buggy address belongs to the object at ffff888057464c00 [ 948.596820][T17570] which belongs to the cache kmalloc-512 of size 512 [ 948.596843][T17570] The buggy address is located 8 bytes inside of [ 948.596843][T17570] freed 512-byte region [ffff888057464c00, ffff888057464e00) [ 948.596871][T17570] [ 948.596878][T17570] The buggy address belongs to the physical page: [ 948.596890][T17570] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057466c00 pfn:0x57464 [ 948.596916][T17570] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 948.596940][T17570] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 948.596965][T17570] page_type: f5(slab) [ 948.596992][T17570] raw: 00fff00000000240 ffff88801c02ec80 ffffea0001711f10 ffffea0000da7d10 [ 948.597020][T17570] raw: ffff888057466c00 000000000010000e 00000000f5000000 0000000000000000 [ 948.597048][T17570] head: 00fff00000000240 ffff88801c02ec80 ffffea0001711f10 ffffea0000da7d10 [ 948.597075][T17570] head: ffff888057466c00 000000000010000e 00000000f5000000 0000000000000000 [ 948.597103][T17570] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 948.597131][T17570] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 948.597148][T17570] page dumped because: kasan: bad access detected [ 948.597162][T17570] page_owner tracks the page as allocated [ 948.597172][T17570] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 99333561687 [ 948.597218][T17570] post_alloc_hook+0xfd/0x120 [ 948.597249][T17570] get_page_from_freelist+0x110d/0x35d0 [ 948.597284][T17570] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 948.597322][T17570] new_slab+0xa9/0x6e0 [ 948.597353][T17570] refill_objects+0xe3/0x410 [ 948.597387][T17570] __pcs_replace_empty_main+0x35e/0x650 [ 948.597421][T17570] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 948.597454][T17570] __ipv6_dev_mc_inc+0x2f1/0xc80 [ 948.597498][T17570] addrconf_dad_work+0x276/0x1360 [ 948.597533][T17570] process_one_work+0xac7/0x1b10 [ 948.597573][T17570] worker_thread+0x5ef/0xe50 [ 948.597611][T17570] kthread+0x373/0x450 [ 948.597646][T17570] ret_from_fork+0x730/0xd60 [ 948.597671][T17570] ret_from_fork_asm+0x1a/0x30 [ 948.597696][T17570] page last free pid 1 tgid 1 ts 23585691579 stack trace: [ 948.597715][T17570] free_pages_prepare+0x586/0xe00 [ 948.597745][T17570] __free_contig_range_common+0x14f/0x250 [ 948.597778][T17570] destroy_args+0xa8/0x7a0 [ 948.597819][T17570] debug_vm_pgtable+0x1d69/0x3490 [ 948.597862][T17570] do_one_initcall+0x11c/0x6f0 [ 948.597906][T17570] kernel_init_freeable+0x6ea/0x7b0 [ 948.597946][T17570] kernel_init+0x21/0x1e0 [ 948.597975][T17570] ret_from_fork+0x730/0xd60 [ 948.598004][T17570] ret_from_fork_asm+0x1a/0x30 [ 948.598030][T17570] [ 948.598036][T17570] Memory state around the buggy address: [ 948.598050][T17570] ffff888057464b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 948.598072][T17570] ffff888057464b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 948.598093][T17570] >ffff888057464c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 948.598110][T17570] ^ [ 948.598125][T17570] ffff888057464c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 948.598146][T17570] ffff888057464d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 948.598163][T17570] ================================================================== [ 948.598177][T17570] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 953.302643][T17570] CPU: 0 UID: 0 PID: 17570 Comm: syz.2.3318 Tainted: G B L syzkaller #0 PREEMPT(full) [ 953.313585][T17570] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 953.319108][T17570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 953.329150][T17570] Call Trace: [ 953.332415][T17570] [ 953.335331][T17570] dump_stack_lvl+0x100/0x190 [ 953.340019][T17570] vpanic+0x553/0x970 [ 953.343996][T17570] ? __pfx_vpanic+0x10/0x10 [ 953.348499][T17570] ? do_raw_spin_lock+0x119/0x260 [ 953.353524][T17570] panic+0xd1/0xe0 [ 953.357238][T17570] ? __pfx_panic+0x10/0x10 [ 953.361648][T17570] ? end_report.part.0+0x23/0x90 [ 953.366594][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 953.372229][T17570] ? rcu_is_watching+0x13/0xc0 [ 953.377008][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 953.382644][T17570] ? lock_release+0x24d/0x310 [ 953.387319][T17570] end_report.part.0+0x68/0x90 [ 953.392093][T17570] kasan_report.cold+0xe/0x18 [ 953.396781][T17570] ? do_raw_spin_lock+0x119/0x260 [ 953.401808][T17570] kasan_check_range+0x10f/0x1e0 [ 953.406747][T17570] do_raw_spin_lock+0x119/0x260 [ 953.411607][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 953.417242][T17570] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 953.422629][T17570] ? lock_acquire+0x31e/0x380 [ 953.427303][T17570] ? __mutex_lock+0x18f0/0x1bd0 [ 953.432181][T17570] ? _raw_spin_lock_irqsave+0x52/0x60 [ 953.437561][T17570] ? __mutex_lock+0x160b/0x1bd0 [ 953.442424][T17570] _raw_spin_lock_irqsave+0x42/0x60 [ 953.447629][T17570] ? __mutex_lock+0x31e/0x1bd0 [ 953.452405][T17570] __mutex_lock+0x31e/0x1bd0 [ 953.457009][T17570] ? ep_open+0x4c/0x2c0 [ 953.461163][T17570] ? hook_file_open+0x248/0x8e0 [ 953.466030][T17570] ? __pfx___mutex_lock+0x10/0x10 [ 953.471075][T17570] ? __pfx_apparmor_file_open+0x10/0x10 [ 953.476637][T17570] ? ep_open+0x4c/0x2c0 [ 953.480786][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 953.486421][T17570] ep_open+0x4c/0x2c0 [ 953.490403][T17570] do_dentry_open+0x6ab/0x14d0 [ 953.495178][T17570] ? __pfx_ep_open+0x10/0x10 [ 953.499764][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 953.505406][T17570] vfs_open+0x82/0x3f0 [ 953.509486][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 953.515124][T17570] path_openat+0x19fa/0x2440 [ 953.519713][T17570] ? __pfx_path_openat+0x10/0x10 [ 953.524650][T17570] do_file_open+0x20e/0x430 [ 953.529149][T17570] ? __pfx_do_file_open+0x10/0x10 [ 953.534182][T17570] ? _raw_spin_unlock+0x28/0x50 [ 953.539039][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 953.544675][T17570] ? alloc_fd+0x471/0x7a0 [ 953.549004][T17570] do_sys_openat2+0x10f/0x1e0 [ 953.553682][T17570] ? __pfx_do_sys_openat2+0x10/0x10 [ 953.558894][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 953.564530][T17570] ? do_raw_spin_lock+0x128/0x260 [ 953.569556][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 953.575190][T17570] ? find_held_lock+0x2b/0x80 [ 953.579875][T17570] __x64_sys_openat+0x12d/0x210 [ 953.584726][T17570] ? __pfx___x64_sys_openat+0x10/0x10 [ 953.590097][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 953.595755][T17570] ? srso_alias_return_thunk+0x5/0xfbef5 [ 953.601399][T17570] do_syscall_64+0x123/0x790 [ 953.606004][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.611894][T17570] RIP: 0033:0x7f85c099e159 [ 953.616303][T17570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.635907][T17570] RSP: 002b:00007f85bebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 953.644334][T17570] RAX: ffffffffffffffda RBX: 00007f85c0c26090 RCX: 00007f85c099e159 [ 953.652315][T17570] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 953.660278][T17570] RBP: 00007f85c0a3503b R08: 0000000000000000 R09: 0000000000000000 [ 953.668239][T17570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.676203][T17570] R13: 00007f85c0c26128 R14: 00007f85c0c26090 R15: 00007fff1ca17458 [ 953.684177][T17570] [ 953.687245][T17570] Kernel Offset: disabled [ 953.691558][T17570] Rebooting in 86400 seconds..