last executing test programs: 48.023913149s ago: executing program 0 (id=1885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x6a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000100700)={{0x1000, 0xdddd1000, 0x4, 0x9, 0xfd, 0x1, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x3000, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x6, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0xe, 0x6, 0x4, 0x42, 0xb, 0xfd, 0x8, 0x8, 0xe}, {0x10000, 0xdddd9000, 0x2, 0x3, 0x3, 0x9, 0xab, 0x80, 0x7, 0x2, 0xdb}, {0x60000, 0x0, 0xc, 0x7, 0xb1, 0x9, 0x21, 0x8, 0x80, 0x96, 0x7}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x5, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x70000, 0x1000, 0x9, 0x5, 0xf, 0xfa, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x8, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 46.990131574s ago: executing program 0 (id=1894): close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 46.800750969s ago: executing program 0 (id=1897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, 0x0, &(0x7f0000000080)=@udp=r1}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 46.622880903s ago: executing program 0 (id=1899): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1254, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x10009, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 46.577444504s ago: executing program 0 (id=1900): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) syz_clone(0x23a40080, 0x0, 0x38, 0x0, 0x0, 0x0) write(r0, &(0x7f0000001640)="8b", 0x22000) 46.227084653s ago: executing program 0 (id=1904): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000001940)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000019c0)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001a00)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000001cc0)={&(0x7f0000001d00), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x603ca0114ad58eb3) sendmsg$tipc(r2, &(0x7f0000001e40)={&(0x7f0000001e80)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x1) 34.986963777s ago: executing program 1 (id=1975): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 34.922513409s ago: executing program 3 (id=1976): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0xd, @empty, 0x9}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 34.757233253s ago: executing program 3 (id=1978): mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000b0000/0x2000)=nil) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 34.627483075s ago: executing program 1 (id=1979): socket$nl_generic(0x10, 0x3, 0x10) futex_waitv(&(0x7f0000003480)=[{0x7, &(0x7f0000003200)=0x7, 0x2}], 0x1, 0x0, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x51}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 33.741096068s ago: executing program 1 (id=1980): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fchmodat(0xffffffffffffffff, 0x0, 0x30) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x2, 0x0) waitid(0x0, r0, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 33.740850597s ago: executing program 3 (id=1982): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) splice(r0, 0x0, r3, 0x0, 0x80, 0x4) read$FUSE(r0, &(0x7f0000003ec0)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000001e80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000)) 33.410918115s ago: executing program 1 (id=1983): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0x3, @empty, 0x1}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) 33.304882608s ago: executing program 1 (id=1985): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55bf, &(0x7f0000006a80)="$eJzs3E2LG3UYAPBnsrt9ty7iwVsHirALTWi2L+jJqi2+YEvx5eBJs0ka0iaZZZOma089eBQPfhNR8OTRz+BBj3oTD4o3oZKZWe32RbtuNsu2vx/MPDP//PPMM0MIPDMhATy1FtM/fkvieByOiLmIOJZEvp2US8SdiAvF3Bci4kREVO5ZknL874EDEXEkIo5Pkhc5k/KlL06NT5779e3fv/3+4PzRL7/5YU9PHNhTL0ZEf63YvtUvYtYp4vVyvDHu5rF/dlzGtS05+lkxfqu9mme41dic18jjmU4xP1u7OZzEa71GcxI73Wv5+NqgOOBw3NnMM3lDer2xnu+32qt57A6zPHZuF8fduF18t90ejoo8rTLfJ3n6GI02YzHe3mgX57N2I4/NwagcL/JmrfbGJI7LWB4umlmvldex+j8v8j7wTndwcyMdt9eH3WyQnqvVX6rVz1fr61mrPWqfrTb6rfNn06VObzKtOmo3+hc6WdbptWvNrL+cLnWazWq9ni5dbK92G4O0Xq+dqZ2unlsut06lb1z5IO210qVJfK07uDnq9obptWw9Ld6xnK7Uzry8nJ6sp+9dvppefffSpctX3//o4odXXr381uvlpAfKSpdWTq+sVOunqyv15afo/D8ti97G+ScPH/7px51dNig84gP2aPO7UwfAPvJA/x/39/+h/wembif9f/9Gub87/X88Tv8f0+z/Jy2V/v+/+9/Ktvrf41PpfxdC/7+L5w87su3+P3dg6nUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBzPy989Wa+sVjsHy3HnymHniv3k4ioRMTdh5iLA1tyzpV5Fh4xf+G+Gr5LIs8wOcbBcjkSERfK5c9nd/sqAAAAwJPr6zsnPi+69WK1uNcFMUvFTZvKsY+nlC+JiIXFX6aUrTJZPT+lZPnnez42ppQtv4F1aErJiltu89PK9ljmtoRD94SkCJWZlgMAAMzE1k5gtl0IAAAAs/TZv776yszqYMaS2HyUufksOP/l/T8PBA9PVnfv+3E/AAAAsJ8ke10AAAAAsOvy/t///wEAAMCTrfj/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgL3bu50ZtIIoD8LPBQP4pKMo9reQGZaSEHHMMFJAmKIG0kAaogUg5pIQVrLBnkbwL0moZYy36Psn2znj18wxweWNpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLf6v1/PfPL78uzdntL5NnNgAAAMAp22o9r/+YNu13qf9D6vqU2kVElBFxqnYfxKiVOUg51Zn/rx6N4U9EnXDoH6fjbUR8Tcfdx64/BQAAALhdm+Vq1lTrzSktAfzrd1RcSbNoU77/limviIhq+j9TWnk4fc4UVv++h/EjU1q9gDXJFNYsuQ1P3xvlekjboHV5mMmi/hLrVtnNcwEAgD61K4EzVQgAAAA34HvfA+Aanpb2xfF0fM84bi7pheCbVgsAAAB4hYq+BwAAAAB0rq7/u9n/b/Ki/f8K+/8BAABAds3+fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRpW63nm+Vqdu7+4pk5u/1l8s0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHv25xiFYRgKouAmkZK4M7r/Yc2CXbp2MwOCx99KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCd1/nyvuLT2JOMXhuz55Xk26nx69T4d25sMxnr6d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzsz0sKhEAQRMGc8b+Tvv9hJUHPIEIENDyqqEUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzs289rHFUcAPA3O9lNU1uMUQJGpUoPerHptrb2KqIED/4JQkg3Nbq12uZgS7Dm4k1y7kX0IogISrzlf+i5gV7qrYccInjyEJlfyWyybX6QzKzN5wNv33ffTt6PmWXJd98sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhbX3wquNPI6Th9EsLtoerC/MJPXqtjqxsvRwIilJHA0Xraff2OvYG/GhLGFQvVZ+cma8vokAAADwrDi96xFxkd+HEB41l6eSujGa5v/N4pgk5/8x7yrK27bn/avrCyfylyaK/P/PPx6/tDnQaJyOk3Q6O9ftnN85laEDL/N/7vldjxhKz3z63UucXpDGR4svrjXT8xl9f//+B600HK5itgDAQZwr6jwo/h9K6nadEwPg2BgqJd5F/h+P1jsnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCqsLYbnijgKIUwMbcWJ1fWFmX71t0sPJ1bycvnevaVyn0kXzRDC7Fy3c75ntOEjX89gKs7mnc+nu93OzVu3qw7OhBD6vHR3b38e59N/4jGtEEJPy9mX+/TzyR7G2tbPjiB/e4Zqz+FIsr5dD456WqIdJ/z9jUwdb4BDDlpPukyN/PocxaAjlV/33qB47x1+z/v5LDmun6EAAOxHMy9JJvqouTyVtEVjIWz81Jv/v1mKQ0/ev3E3a8mer5Ty/8efXn5QHquc/7e3mk8d9RoH3eT89S8nb92+8/bc9elrnWudL9650H63ffHKpUtXJtPvSiZnQ2PbNyYAAACwH628lPP/kT77/ydLcXjK/n+2JZzl/1/90P6mPFbcP/8/9rY2/eqeCQAAwHHU2oxeeP2fv6M+R0StVvh6en7+Zjt73Hx+IXusdLoHNJyXcv4fj9U9KwAAAKAKa4tRz/7/1VIcnrL/X77//9Qvr/xW7jPO7i24EULonJu50b1a3XIGWu+Pfn+Oj+KHyulArbpXCgAAQF1G8lLe/2+OJfl/Y/OWh0YI4a2zIfyb/4Y/7DH/jz/87tfyWOX7/y9WusrB0xjPzkdaj4cwNF73jAAAAHiWnchLkuz/1Vye+uz3kx+33P8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULX/AgAA//9KES1X") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ftruncate(r0, 0x7) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 33.118503532s ago: executing program 2 (id=1987): r0 = socket(0x26, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000980)={0x800, 0x3, 0x9, 0x1}, 0x10) 32.956884436s ago: executing program 2 (id=1988): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000280)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x6) listen(r0, 0xa) 32.81740058s ago: executing program 3 (id=1989): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000002840)='./file0\x00', 0x577982, 0x240) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x1c1) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) sendfile(r3, r3, 0x0, 0x1000000201005) copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x2000000000000000) 32.755488731s ago: executing program 2 (id=1990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'N'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 31.16206885s ago: executing program 32 (id=1904): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000001940)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000019c0)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001a00)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000001cc0)={&(0x7f0000001d00), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x603ca0114ad58eb3) sendmsg$tipc(r2, &(0x7f0000001e40)={&(0x7f0000001e80)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x1) 31.149064471s ago: executing program 1 (id=1992): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) sendfile(r1, r0, 0x0, 0x7d1d7457) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 31.14803804s ago: executing program 2 (id=1993): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 31.147822051s ago: executing program 3 (id=1994): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) close(0x3) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x121) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000040c0)={0x2020}, 0x2020) 30.867459827s ago: executing program 2 (id=1995): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x2}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r2}, 0x8) 30.191983583s ago: executing program 2 (id=2003): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000300), &(0x7f0000000340)=@tcp=r0}, 0x20) recvfrom(r0, 0x0, 0x0, 0x2080, 0x0, 0x0) 30.180775714s ago: executing program 3 (id=2004): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20010) close(r0) 10.946911423s ago: executing program 4 (id=1991): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fchmodat(0xffffffffffffffff, 0x0, 0x30) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x2, 0x0) waitid(0x0, r0, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 8.955356241s ago: executing program 4 (id=1991): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fchmodat(0xffffffffffffffff, 0x0, 0x30) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x2, 0x0) waitid(0x0, r0, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 6.873318152s ago: executing program 4 (id=1991): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fchmodat(0xffffffffffffffff, 0x0, 0x30) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x2, 0x0) waitid(0x0, r0, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 4.666494616s ago: executing program 4 (id=1991): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fchmodat(0xffffffffffffffff, 0x0, 0x30) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x2, 0x0) waitid(0x0, r0, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 2.396206661s ago: executing program 4 (id=1991): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fchmodat(0xffffffffffffffff, 0x0, 0x30) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x2, 0x0) waitid(0x0, r0, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 0s ago: executing program 4 (id=1991): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fchmodat(0xffffffffffffffff, 0x0, 0x30) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x2, 0x0) waitid(0x0, r0, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) kernel console output (not intermixed with test programs): rewing up backlog [ 171.003955][ T55] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.029398][ T55] usb 4-1: config 0 has no interfaces? [ 171.044141][ T55] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.072146][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.094850][ T55] usb 4-1: config 0 descriptor?? [ 171.323333][ T8496] netlink: 7 bytes leftover after parsing attributes in process `syz.2.983'. [ 171.992506][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.306128][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.024103][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.300532][ T8535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.309511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.416610][ T8532] loop0: detected capacity change from 0 to 2048 [ 173.445152][ T8532] EXT4-fs (loop0): inodes count not valid: 32 vs 1824 [ 173.558505][ T8] usb 4-1: USB disconnect, device number 3 [ 174.072406][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.105500][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.343167][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.618913][ T8594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1011'. [ 176.142639][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.182860][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.241962][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.393773][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.471687][ T8628] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 178.505159][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 178.532115][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'. [ 179.163828][ T8641] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 179.263740][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.848985][ T8647] loop2: detected capacity change from 0 to 512 [ 179.897902][ T8647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.968572][ T8647] EXT4-fs (loop2): 1 truncate cleaned up [ 179.980461][ T8647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.302726][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.472429][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.648942][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 180.860001][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.989265][ T8671] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 181.116723][ T8671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.177519][ T8676] loop3: detected capacity change from 0 to 128 [ 181.198769][ T8676] EXT4-fs: Ignoring removed bh option [ 181.276729][ T8676] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.325435][ T8676] ext4 filesystem being mounted at /262/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.342817][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.371567][ T8673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.405067][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.422842][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.637779][ T8687] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.798719][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 182.383146][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.665762][ T8713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.781571][ T8715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.950108][ T8717] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 182.966571][ T8720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.100720][ T8721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.758248][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 183.786358][ T8736] loop1: detected capacity change from 0 to 128 [ 183.816390][ T8736] EXT4-fs: Ignoring removed bh option [ 183.862706][ T8736] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.894147][ T8736] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.049808][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.807953][ T8756] loop3: detected capacity change from 0 to 256 [ 184.836384][ T8756] exFAT-fs (loop3): invalid boot record signature [ 184.845463][ T8756] exFAT-fs (loop3): failed to read boot sector [ 184.864341][ T8756] exFAT-fs (loop3): failed to recognize exfat type [ 184.899027][ T8756] loop3: detected capacity change from 0 to 256 [ 185.726432][ T8780] loop0: detected capacity change from 0 to 128 [ 185.757935][ T8780] EXT4-fs: Ignoring removed bh option [ 185.820531][ T8780] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.876981][ T8780] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.021369][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.081364][ T8785] loop5: detected capacity change from 0 to 7 [ 186.135209][ T8785] Dev loop5: unable to read RDB block 7 [ 186.152934][ T8785] loop5: AHDI p1 p2 p3 [ 186.162212][ T8785] loop5: partition table partially beyond EOD, truncated [ 186.186511][ T8785] loop5: p1 start 1818582900 is beyond EOD, truncated [ 186.202197][ T8785] loop5: p3 start 335544320 is beyond EOD, truncated [ 186.373321][ T8794] net_ratelimit: 29 callbacks suppressed [ 186.373330][ T8794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.543229][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.680479][ T8794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.805947][ T8804] loop3: detected capacity change from 0 to 512 [ 186.866076][ T8804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.940329][ T8804] ext4 filesystem being mounted at /276/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.126251][ T8804] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 187.233570][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.502370][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.576530][ T8817] loop1: detected capacity change from 0 to 256 [ 187.583754][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.622229][ T8817] exFAT-fs (loop1): invalid boot record signature [ 187.653212][ T8817] exFAT-fs (loop1): failed to read boot sector [ 187.679121][ T8817] exFAT-fs (loop1): failed to recognize exfat type [ 188.622790][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.753303][ T8861] loop0: detected capacity change from 0 to 256 [ 188.778175][ T8861] exFAT-fs (loop0): invalid boot record signature [ 188.815536][ T8861] exFAT-fs (loop0): failed to read boot sector [ 188.821749][ T8861] exFAT-fs (loop0): failed to recognize exfat type [ 188.951195][ T8861] loop0: detected capacity change from 0 to 256 [ 189.523628][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'. [ 189.662481][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.062610][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.542455][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.562108][ T5785] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 190.585101][ T8896] loop1: detected capacity change from 0 to 512 [ 190.666954][ T8896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.680663][ T8896] ext4 filesystem being mounted at /292/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.705065][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.728124][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 190.764124][ T5785] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.792201][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.820339][ T5785] usb 4-1: config 0 descriptor?? [ 190.836334][ T5785] cp210x 4-1:0.0: cp210x converter detected [ 190.864597][ T8896] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 190.924987][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.242822][ T5785] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 191.254788][ T8881] loop3: detected capacity change from 0 to 256 [ 191.297858][ T5785] usb 4-1: cp210x converter now attached to ttyUSB0 [ 191.330146][ T8916] loop0: detected capacity change from 0 to 1024 [ 191.361897][ T8916] EXT4-fs: Ignoring removed bh option [ 191.417386][ T8916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.498078][ T5848] usb 4-1: USB disconnect, device number 4 [ 191.548382][ T5848] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 191.617756][ T5848] cp210x 4-1:0.0: device disconnected [ 191.640383][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.751051][ T5874] net_ratelimit: 9 callbacks suppressed [ 191.751067][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.677226][ T8957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.793397][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.812471][ T8957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.956851][ T8957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.981827][ T8957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.004192][ T8957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.018062][ T8969] netlink: 'syz.3.1160': attribute type 1 has an invalid length. [ 193.060277][ T8969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.109192][ T8955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.147991][ T8969] bond2: (slave erspan0): making interface the new active one [ 193.227032][ T8969] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 193.583330][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.822473][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.549886][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.562802][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.932887][ T9000] vlan0: entered promiscuous mode [ 194.940164][ T9000] virtio_net virtio1 eth0: entered promiscuous mode [ 196.954805][ T5874] net_ratelimit: 5 callbacks suppressed [ 196.954819][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.429480][ T9027] vlan0: entered promiscuous mode [ 197.773769][ T9036] tipc: Enabled bearer , priority 1 [ 197.781686][ T9035] tipc: Resetting bearer [ 197.844702][ T9035] tipc: Disabling bearer [ 197.982945][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.045073][ T9044] loop3: detected capacity change from 0 to 256 [ 198.074035][ T9044] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 199.023022][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.154680][ T5873] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 199.323658][ T9073] netlink: 'syz.1.1206': attribute type 1 has an invalid length. [ 199.375307][ T5873] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.394900][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.438095][ T9073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.448255][ T5873] usb 1-1: config 0 descriptor?? [ 199.479575][ T5873] cp210x 1-1:0.0: cp210x converter detected [ 199.553419][ T9076] bond2: (slave erspan0): making interface the new active one [ 199.591707][ T9076] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 199.651156][ T9078] loop3: detected capacity change from 0 to 128 [ 199.667599][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.676426][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.750731][ T9078] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.840508][ T9078] ext4 filesystem being mounted at /313/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.922203][ T5873] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 199.931473][ T9066] loop0: detected capacity change from 0 to 256 [ 200.009287][ T9003] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.033955][ T5873] usb 1-1: cp210x converter now attached to ttyUSB0 [ 200.072961][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.254763][ T5873] usb 1-1: USB disconnect, device number 3 [ 200.284280][ T9078] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 200.296887][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 200.314053][ T5873] cp210x 1-1:0.0: device disconnected [ 200.449174][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.102601][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.633134][ T9121] loop2: detected capacity change from 0 to 1024 [ 201.640723][ T9121] EXT4-fs: Ignoring removed bh option [ 201.748927][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 201.755156][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 201.761185][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 201.767565][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 201.890969][ T9121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.115231][ T9128] kvm: pic: non byte write [ 202.120403][ T9128] kvm: pic: non byte write [ 202.143776][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.440977][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.702593][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.193334][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.192483][ T9138] syz.3.1227 (9138) used greatest stack depth: 20744 bytes left [ 204.202220][ T55] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 204.222388][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.405925][ T55] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 204.426547][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.454354][ T55] usb 3-1: config 0 descriptor?? [ 204.476194][ T55] cp210x 3-1:0.0: cp210x converter detected [ 204.796362][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.808348][ T1827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.827682][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.845013][ T8267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.855001][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.866194][ T1827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.893648][ T55] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 204.897758][ T9136] loop2: detected capacity change from 0 to 256 [ 204.998506][ T9003] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.017166][ T9157] loop1: detected capacity change from 0 to 1024 [ 205.042903][ T9157] EXT4-fs: Ignoring removed bh option [ 205.048390][ T55] usb 3-1: cp210x converter now attached to ttyUSB0 [ 205.108302][ T9157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.292519][ T5874] usb 3-1: USB disconnect, device number 4 [ 205.316032][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 205.338651][ T5874] cp210x 3-1:0.0: device disconnected [ 205.557118][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.614851][ T9168] loop0: detected capacity change from 0 to 128 [ 205.627001][ T9168] FAT-fs (loop0): bogus sectors per cluster 0 [ 205.672894][ T9168] FAT-fs (loop0): Can't find a valid FAT filesystem [ 206.167451][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'. [ 207.186834][ T9195] loop0: detected capacity change from 0 to 512 [ 207.199812][ T9191] loop3: detected capacity change from 0 to 1024 [ 207.210939][ T9191] EXT4-fs: Ignoring removed bh option [ 207.237106][ T9195] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 207.270456][ T9191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.307391][ T9195] EXT4-fs (loop0): 1 truncate cleaned up [ 207.318813][ T9195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.337109][ T9203] loop2: detected capacity change from 0 to 128 [ 207.364485][ T5874] net_ratelimit: 3 callbacks suppressed [ 207.364498][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.386885][ T9203] FAT-fs (loop2): bogus sectors per cluster 0 [ 207.400198][ T9203] FAT-fs (loop2): Can't find a valid FAT filesystem [ 207.662439][ T5088] Bluetooth: hci1: command tx timeout [ 207.711138][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.823777][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.867527][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.017445][ T9220] kvm: pic: non byte write [ 208.033745][ T9220] kvm: pic: non byte write [ 208.349229][ T9236] loop2: detected capacity change from 0 to 1024 [ 208.369597][ T9236] EXT4-fs: Ignoring removed bh option [ 208.392925][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.412579][ T9236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.746769][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.432319][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.728196][ T9288] loop5: detected capacity change from 0 to 7 [ 209.742918][ T5088] Bluetooth: hci1: command tx timeout [ 209.765094][ T9288] Dev loop5: unable to read RDB block 7 [ 209.772253][ T9288] loop5: AHDI p1 p2 p3 [ 209.776473][ T9288] loop5: partition table partially beyond EOD, truncated [ 209.798819][ T9288] loop5: p1 start 1818582900 is beyond EOD, truncated [ 209.828395][ T9288] loop5: p3 start 335544320 is beyond EOD, truncated [ 209.946448][ T9297] loop0: detected capacity change from 0 to 1024 [ 210.002912][ T9297] EXT4-fs: Ignoring removed bh option [ 210.051433][ T9297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.436053][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.472371][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.555425][ T6732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.573811][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.584365][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.862899][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.321339][ T9346] loop0: detected capacity change from 0 to 1024 [ 211.356457][ T9346] EXT4-fs: Ignoring removed bh option [ 211.396091][ T9346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.502596][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.749366][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.976576][ T9373] loop3: detected capacity change from 0 to 128 [ 212.025106][ T9373] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.083598][ T9373] ext4 filesystem being mounted at /340/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.222811][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.552360][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.837154][ T9400] loop5: detected capacity change from 0 to 7 [ 212.849938][ T9400] Dev loop5: unable to read RDB block 7 [ 212.856593][ T9400] loop5: AHDI p1 p2 p3 [ 212.861136][ T9400] loop5: partition table partially beyond EOD, truncated [ 212.869380][ T9400] loop5: p1 start 1818582900 is beyond EOD, truncated [ 212.876848][ T9400] loop5: p3 start 335544320 is beyond EOD, truncated [ 213.596665][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.769573][ T9425] loop5: detected capacity change from 0 to 7 [ 213.795796][ T9425] Dev loop5: unable to read RDB block 7 [ 213.805334][ T9425] loop5: AHDI p1 p2 p3 [ 213.809573][ T9425] loop5: partition table partially beyond EOD, truncated [ 213.825686][ T9425] loop5: p1 start 1818582900 is beyond EOD, truncated [ 213.835082][ T9425] loop5: p3 start 335544320 is beyond EOD, truncated [ 213.902546][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.912072][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.078638][ T9440] loop3: detected capacity change from 0 to 512 [ 214.093250][ T9440] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 214.114781][ T9440] EXT4-fs (loop3): 1 truncate cleaned up [ 214.122353][ T9440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.261772][ T9445] input: syz0 as /devices/virtual/input/input11 [ 214.632221][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.703416][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.032449][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.044613][ T6744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.054538][ T1827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.066573][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.291957][ T9477] loop1: detected capacity change from 0 to 512 [ 215.304056][ T9477] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 215.334043][ T9477] EXT4-fs (loop1): 1 truncate cleaned up [ 215.351127][ T9477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.662983][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.733535][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.046699][ T9496] loop2: detected capacity change from 0 to 2048 [ 216.217537][ T9496] loop2: p1 < > [ 216.500845][ T9003] udevd[9003]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 216.808936][ T9530] loop3: detected capacity change from 0 to 512 [ 216.865437][ T9530] EXT4-fs (loop3): 1 truncate cleaned up [ 216.873963][ T9530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.481510][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.620739][ T9541] loop0: detected capacity change from 0 to 32768 [ 217.685963][ T9541] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.757709][ T5848] net_ratelimit: 4 callbacks suppressed [ 217.757727][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.861114][ T9571] loop3: detected capacity change from 0 to 2048 [ 217.913040][ T9571] loop3: p1 < > [ 217.932756][ T9541] XFS (loop0): Ending clean mount [ 218.099083][ T5777] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 218.147839][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.219756][ T9576] loop2: detected capacity change from 0 to 512 [ 218.293901][ T9576] EXT4-fs (loop2): 1 truncate cleaned up [ 218.300319][ T9576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.414726][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.783751][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.974400][ T9598] loop1: detected capacity change from 0 to 2048 [ 218.992584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.033055][ T9598] loop1: p1 < > [ 219.226317][ T9607] loop1: detected capacity change from 0 to 512 [ 219.281971][ T9607] EXT4-fs (loop1): 1 truncate cleaned up [ 219.293825][ T9607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.422196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.498139][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1420'. [ 219.645695][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.692240][ T9617] hsr_slave_1 (unregistering): left promiscuous mode [ 219.822637][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.142559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.302145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.790815][ T6732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.799989][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.112091][ T55] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 221.325775][ T55] usb 3-1: config 0 has no interfaces? [ 221.331327][ T55] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.356375][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.372632][ T55] usb 3-1: config 0 descriptor?? [ 221.624930][ T9689] rxe_eth0 speed is unknown, defaulting to 1000 [ 221.787054][ T9685] loop1: detected capacity change from 0 to 32768 [ 221.818098][ T9685] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 221.940083][ T9685] XFS (loop1): Ending clean mount [ 222.012732][ T5774] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.942595][ T5873] net_ratelimit: 4 callbacks suppressed [ 222.942611][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.828024][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.839595][ T55] usb 3-1: USB disconnect, device number 5 [ 223.950049][ T9717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.965762][ T9717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.978779][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1459'. [ 223.980051][ T9717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.998868][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.030539][ T9717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.041864][ T9717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.053279][ T9717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.061786][ T9717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.118913][ T9723] hsr_slave_1 (unregistering): left promiscuous mode [ 225.539429][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 225.585085][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 226.132266][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 226.326624][ T27] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 226.340189][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.353460][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 226.363215][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.376008][ T27] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 226.385531][ T27] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 226.393595][ T27] usb 1-1: Product: syz [ 226.397851][ T27] usb 1-1: Manufacturer: syz [ 226.409709][ T27] cdc_wdm 1-1:1.0: skipping garbage [ 226.418901][ T27] cdc_wdm 1-1:1.0: skipping garbage [ 226.435874][ T27] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 226.442266][ T27] cdc_wdm 1-1:1.0: Unknown control protocol [ 226.621194][ T1827] usb 1-1: USB disconnect, device number 4 [ 226.802530][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 226.811619][ T9831] netlink: 'syz.2.1495': attribute type 11 has an invalid length. [ 226.884990][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 226.906710][ T9831] netlink: 'syz.2.1495': attribute type 11 has an invalid length. [ 227.063238][ T9833] netlink: 'syz.2.1496': attribute type 8 has an invalid length. [ 227.071252][ T9833] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1496'. [ 227.081760][ T9833] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1496'. [ 227.091642][ T9833] netlink: 'syz.2.1496': attribute type 8 has an invalid length. [ 227.100078][ T9833] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1496'. [ 227.116764][ T9833] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1496'. [ 227.133464][ T9833] netlink: 'syz.2.1496': attribute type 8 has an invalid length. [ 227.141365][ T9833] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1496'. [ 227.155870][ T9833] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1496'. [ 227.192373][ T1827] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 227.393960][ T1827] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 227.411225][ T1827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.428318][ T1827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 227.446366][ T1827] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.490858][ T1827] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 227.506769][ T1827] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 227.525070][ T1827] usb 1-1: Product: syz [ 227.529296][ T1827] usb 1-1: Manufacturer: syz [ 227.557532][ T1827] cdc_wdm 1-1:1.0: skipping garbage [ 227.569216][ T1827] cdc_wdm 1-1:1.0: skipping garbage [ 227.588282][ T1827] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 227.600679][ T1827] cdc_wdm 1-1:1.0: Unknown control protocol [ 227.804636][ T9856] loop3: detected capacity change from 0 to 1024 [ 227.831910][ T9856] hfsplus: invalid btree flag [ 227.841045][ T9856] hfsplus: failed to load attributes file [ 227.962440][ T1827] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 227.967233][ T9859] loop3: detected capacity change from 0 to 512 [ 228.019752][ T9859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.032784][ T9859] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.047964][ T9859] EXT4-fs (loop3): shut down requested (0) [ 228.105526][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.142749][ T27] net_ratelimit: 15 callbacks suppressed [ 228.142763][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.152444][ T1827] usb 3-1: Using ep0 maxpacket: 16 [ 228.189236][ T1827] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 228.205978][ T1827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.218642][ T1827] usb 3-1: Product: syz [ 228.223015][ T1827] usb 3-1: Manufacturer: syz [ 228.230805][ T1827] usb 3-1: SerialNumber: syz [ 228.403820][ T9876] loop3: detected capacity change from 0 to 512 [ 228.425366][ T9876] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1515: invalid indirect mapped block 4294967295 (level 1) [ 228.481874][ T9876] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1515: invalid indirect mapped block 4294967295 (level 1) [ 228.526581][ T9876] EXT4-fs (loop3): 2 truncates cleaned up [ 228.533330][ T9880] loop1: detected capacity change from 0 to 256 [ 228.560245][ T9880] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.580116][ T9876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.700412][ T27] usb 1-1: USB disconnect, device number 5 [ 228.766681][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.182486][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.211131][ T9900] loop3: detected capacity change from 0 to 512 [ 229.289617][ T9900] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.1524: corrupted inode contents [ 229.335751][ T9900] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 229.344981][ T9900] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.1524: corrupted inode contents [ 229.362265][ T9900] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.1524: mark_inode_dirty error [ 229.384633][ T9900] EXT4-fs (loop3): 1 orphan inode deleted [ 229.417503][ T9900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.527563][ T9900] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1524: invalid indirect mapped block 234881024 (level 0) [ 229.583997][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.604166][ T9900] Invalid argument reading file caps for ./file0 [ 229.687491][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.721896][ T1827] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 229.733622][ T1827] usb 3-1: USB disconnect, device number 6 [ 229.834489][ T9917] FAULT_INJECTION: forcing a failure. [ 229.834489][ T9917] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 229.847829][ T9917] CPU: 1 PID: 9917 Comm: syz.3.1530 Not tainted syzkaller #0 [ 229.855254][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.865337][ T9917] Call Trace: [ 229.868635][ T9917] [ 229.871594][ T9917] dump_stack_lvl+0x18c/0x250 [ 229.876403][ T9917] ? show_regs_print_info+0x20/0x20 [ 229.881630][ T9917] ? load_image+0x420/0x420 [ 229.886198][ T9917] ? __might_fault+0xaa/0x120 [ 229.891014][ T9917] ? __lock_acquire+0x7eb0/0x7eb0 [ 229.896092][ T9917] ? __virt_addr_valid+0x10c/0x380 [ 229.901265][ T9917] should_fail_ex+0x394/0x4c0 [ 229.906010][ T9917] _copy_to_user+0x2f/0xa0 [ 229.910441][ T9917] bpf_verifier_vlog+0x5ac/0x840 [ 229.915413][ T9917] __btf_verifier_log+0xe3/0x140 [ 229.920364][ T9917] ? btf_check_sec_info+0x350/0x350 [ 229.925590][ T9917] btf_verifier_log_vsi+0x1fd/0x3d0 [ 229.930888][ T9917] ? sort_r+0x17f5/0x1810 [ 229.935248][ T9917] ? btf_datasec_show+0x970/0x970 [ 229.940290][ T9917] btf_datasec_check_meta+0x954/0xb50 [ 229.945685][ T9917] btf_check_all_metas+0x371/0xaf0 [ 229.950807][ T9917] btf_parse_type_sec+0xfc/0x1960 [ 229.955828][ T9917] ? btf_check_sec_info+0x350/0x350 [ 229.961034][ T9917] ? __virt_addr_valid+0x10c/0x380 [ 229.966149][ T9917] ? btf_verifier_log+0x1a0/0x1a0 [ 229.971265][ T9917] ? btf_parse_hdr+0x545/0x700 [ 229.976074][ T9917] ? btf_parse_str_sec+0x20d/0x2a0 [ 229.981200][ T9917] btf_new_fd+0x440/0x9e0 [ 229.985567][ T9917] ? bpf_btf_show_fdinfo+0x80/0x80 [ 229.990700][ T9917] ? capable+0x88/0xe0 [ 229.994805][ T9917] __sys_bpf+0x670/0x890 [ 229.999053][ T9917] ? bpf_link_show_fdinfo+0x560/0x560 [ 230.004443][ T9917] ? lock_chain_count+0x20/0x20 [ 230.009303][ T9917] __x64_sys_bpf+0x7c/0x90 [ 230.013726][ T9917] do_syscall_64+0x55/0xb0 [ 230.018142][ T9917] ? clear_bhb_loop+0x40/0x90 [ 230.022911][ T9917] ? clear_bhb_loop+0x40/0x90 [ 230.027594][ T9917] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.033637][ T9917] RIP: 0033:0x7f169319e559 [ 230.038060][ T9917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.057676][ T9917] RSP: 002b:00007f1694000028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.066099][ T9917] RAX: ffffffffffffffda RBX: 00007f1693425fa0 RCX: 00007f169319e559 [ 230.074073][ T9917] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 230.082045][ T9917] RBP: 00007f16932358b0 R08: 0000000000000000 R09: 0000000000000000 [ 230.090022][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.098013][ T9917] R13: 00007f1693426038 R14: 00007f1693425fa0 R15: 00007ffe7ac8bd98 [ 230.106013][ T9917] [ 230.223522][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.473594][ T9933] sctp: [Deprecated]: syz.1.1536 (pid 9933) Use of int in max_burst socket option deprecated. [ 230.473594][ T9933] Use struct sctp_assoc_value instead [ 230.578886][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 230.633992][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 231.218732][ T9961] loop3: detected capacity change from 0 to 4096 [ 231.227206][ T9961] EXT4-fs: Ignoring removed nobh option [ 231.244020][ T9961] EXT4-fs: Ignoring removed bh option [ 231.262437][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.271934][ T9961] EXT4-fs (loop3): Test dummy encryption mode enabled [ 231.312764][ T9961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.517629][ T9968] request_module fs- succeeded, but still no fs? [ 231.538415][ T9961] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 231.605358][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.287056][ T6732] Bluetooth: hci4: Frame reassembly failed (-84) [ 232.302213][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.315244][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.622390][ T1827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.053251][T10014] fuse: Invalid rootmode [ 233.057633][T10014] FAULT_INJECTION: forcing a failure. [ 233.057633][T10014] name fail_futex, interval 1, probability 0, space 0, times 1 [ 233.081729][T10014] CPU: 1 PID: 10014 Comm: syz.0.1568 Not tainted syzkaller #0 [ 233.089255][T10014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.099346][T10014] Call Trace: [ 233.102679][T10014] [ 233.105638][T10014] dump_stack_lvl+0x18c/0x250 [ 233.110367][T10014] ? show_regs_print_info+0x20/0x20 [ 233.115611][T10014] ? load_image+0x420/0x420 [ 233.120174][T10014] ? stack_trace_save+0xaa/0x100 [ 233.125153][T10014] ? stack_trace_snprint+0xf0/0xf0 [ 233.130304][T10014] should_fail_ex+0x394/0x4c0 [ 233.135023][T10014] get_futex_key+0x136/0x1030 [ 233.139750][T10014] ? kasan_set_track+0x4e/0x70 [ 233.144570][T10014] ? kasan_save_free_info+0x28/0x40 [ 233.149801][T10014] ? ____kasan_slab_free+0x126/0x1f0 [ 233.155121][T10014] ? __kmem_cache_free+0xba/0x1f0 [ 233.160181][T10014] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.166295][T10014] ? futex_setup_timer+0xc0/0xc0 [ 233.171277][T10014] futex_wake+0x127/0x4f0 [ 233.175648][T10014] ? futex_wake_mark+0x150/0x150 [ 233.180626][T10014] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 233.186646][T10014] ? lock_chain_count+0x20/0x20 [ 233.191515][T10014] do_futex+0x35d/0x3e0 [ 233.195691][T10014] ? __ia32_sys_get_robust_list+0x110/0x110 [ 233.201584][T10014] ? slab_free_freelist_hook+0x130/0x1a0 [ 233.207225][T10014] __se_sys_futex+0x3a9/0x440 [ 233.211940][T10014] ? __x64_sys_futex+0xf0/0xf0 [ 233.216722][T10014] ? __x64_sys_futex+0x21/0xf0 [ 233.221576][T10014] do_syscall_64+0x55/0xb0 [ 233.225992][T10014] ? clear_bhb_loop+0x40/0x90 [ 233.230668][T10014] ? clear_bhb_loop+0x40/0x90 [ 233.235376][T10014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.241277][T10014] RIP: 0033:0x7fbb9079e559 [ 233.245702][T10014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.265331][T10014] RSP: 002b:00007fbb916b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 233.273753][T10014] RAX: ffffffffffffffda RBX: 00007fbb90a25fa8 RCX: 00007fbb9079e559 [ 233.281724][T10014] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbb90a25fac [ 233.289694][T10014] RBP: 00007fbb90a25fa0 R08: 0000000000745abc R09: 0000000000000000 [ 233.297669][T10014] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 233.305647][T10014] R13: 00007fbb90a26038 R14: 00007fffdf978d60 R15: 00007fffdf978e48 [ 233.313680][T10014] [ 233.349886][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.426263][T10018] netlink: 'syz.2.1570': attribute type 9 has an invalid length. [ 233.446720][T10018] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1570'. [ 233.530160][T10022] netlink: 'syz.2.1570': attribute type 9 has an invalid length. [ 233.552136][T10022] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1570'. [ 234.048824][T10026] loop0: detected capacity change from 0 to 32768 [ 234.103111][T10026] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 234.141648][T10026] XFS (loop0): Ending clean mount [ 234.302420][ T5088] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 234.303831][ T5784] Bluetooth: hci4: command 0x1003 tx timeout [ 234.333586][ T5777] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 234.388485][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.002702][T10059] FAULT_INJECTION: forcing a failure. [ 235.002702][T10059] name failslab, interval 1, probability 0, space 0, times 0 [ 235.075087][T10059] CPU: 1 PID: 10059 Comm: syz.1.1583 Not tainted syzkaller #0 [ 235.082616][T10059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.092699][T10059] Call Trace: [ 235.095996][T10059] [ 235.098942][T10059] dump_stack_lvl+0x18c/0x250 [ 235.103645][T10059] ? show_regs_print_info+0x20/0x20 [ 235.108863][T10059] ? load_image+0x420/0x420 [ 235.113399][T10059] ? __might_sleep+0xe0/0xe0 [ 235.118022][T10059] ? __lock_acquire+0x7eb0/0x7eb0 [ 235.123088][T10059] should_fail_ex+0x394/0x4c0 [ 235.127802][T10059] should_failslab+0x9/0x20 [ 235.132334][T10059] slab_pre_alloc_hook+0x59/0x300 [ 235.137379][T10059] ? memcg_list_lru_alloc+0x231/0xb00 [ 235.142778][T10059] ? memcg_list_lru_alloc+0x231/0xb00 [ 235.148168][T10059] __kmem_cache_alloc_node+0x53/0x250 [ 235.153571][T10059] ? memcg_list_lru_alloc+0x231/0xb00 [ 235.158963][T10059] __kmalloc+0xa7/0x240 [ 235.163145][T10059] memcg_list_lru_alloc+0x231/0xb00 [ 235.168371][T10059] ? memcg_reparent_list_lrus+0x860/0x860 [ 235.174118][T10059] ? get_obj_cgroup_from_current+0xd4/0x280 [ 235.180031][T10059] ? get_obj_cgroup_from_current+0xd4/0x280 [ 235.185960][T10059] slab_pre_alloc_hook+0x2ad/0x300 [ 235.191099][T10059] ? slab_pre_alloc_hook+0xb1/0x300 [ 235.196408][T10059] kmem_cache_alloc_lru+0x4d/0x2b0 [ 235.201558][T10059] ? proc_alloc_inode+0x2a/0xb0 [ 235.206499][T10059] proc_alloc_inode+0x2a/0xb0 [ 235.211193][T10059] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 235.217549][T10059] new_inode_pseudo+0x63/0x1d0 [ 235.222362][T10059] new_inode+0x22/0x1d0 [ 235.226543][T10059] proc_get_inode+0x22/0x730 [ 235.231161][T10059] ? proc_fill_super+0x49c/0x730 [ 235.236122][T10059] proc_fill_super+0x4ab/0x730 [ 235.240927][T10059] ? proc_reconfigure+0x370/0x370 [ 235.245986][T10059] get_tree_nodev+0xb5/0x140 [ 235.250601][T10059] vfs_get_tree+0x8c/0x280 [ 235.255035][T10059] do_new_mount+0x24a/0xa40 [ 235.259573][T10059] __se_sys_mount+0x2e7/0x3d0 [ 235.264275][T10059] ? __x64_sys_mount+0xc0/0xc0 [ 235.269075][T10059] ? lockdep_hardirqs_on+0x98/0x150 [ 235.274300][T10059] ? __x64_sys_mount+0x20/0xc0 [ 235.279088][T10059] do_syscall_64+0x55/0xb0 [ 235.283519][T10059] ? clear_bhb_loop+0x40/0x90 [ 235.288213][T10059] ? clear_bhb_loop+0x40/0x90 [ 235.292906][T10059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.298820][T10059] RIP: 0033:0x7f2d6719e559 [ 235.303250][T10059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.322905][T10059] RSP: 002b:00007f2d67ff2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 235.331342][T10059] RAX: ffffffffffffffda RBX: 00007f2d67425fa0 RCX: 00007f2d6719e559 [ 235.339332][T10059] RDX: 00002000000000c0 RSI: 0000200000000440 RDI: 0000000000000000 [ 235.347323][T10059] RBP: 00007f2d672358b0 R08: 0000000000000000 R09: 0000000000000000 [ 235.355310][T10059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.363293][T10059] R13: 00007f2d67426038 R14: 00007f2d67425fa0 R15: 00007ffdcd5fff88 [ 235.371338][T10059] [ 235.383010][T10059] proc_fill_super: get root inode failed [ 235.482331][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.503388][ T1827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.663785][ T1827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.553132][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.573902][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1597'. [ 236.600100][T10095] gretap0: entered promiscuous mode [ 236.605756][T10095] macvtap1: entered promiscuous mode [ 236.615835][T10095] macvtap1: entered allmulticast mode [ 236.621260][T10095] gretap0: entered allmulticast mode [ 236.715901][T10099] gretap0: left allmulticast mode [ 236.741636][T10099] gretap0: left promiscuous mode [ 236.765705][T10099] macvtap1: left promiscuous mode [ 236.770804][T10099] macvtap1: left allmulticast mode [ 237.229052][T10122] loop0: detected capacity change from 0 to 4096 [ 237.326949][T10122] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 237.392353][ T1827] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 237.413571][T10122] ntfs3: loop0: ino=1a, mi_enum_attr [ 237.427643][T10122] ntfs3: loop0: ino=1a, mi_enum_attr [ 237.433649][T10122] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 237.582685][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.584054][ T1827] usb 4-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 237.602404][ T1827] usb 4-1: config 0 interface 0 has no altsetting 0 [ 237.612546][ T1827] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 237.621624][ T1827] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 237.642330][ T1827] usb 4-1: Product: syz [ 237.646547][ T1827] usb 4-1: Manufacturer: syz [ 237.651166][ T1827] usb 4-1: SerialNumber: syz [ 237.674602][ T1827] usb 4-1: config 0 descriptor?? [ 237.680383][T10118] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.698472][ T1827] usb 4-1: selecting invalid altsetting 0 [ 237.923154][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 237.945429][T10118] usb 4-1: BOGUS urb xfer, pipe 0 != type 3 [ 237.987645][ T1827] usb 4-1: USB disconnect, device number 5 [ 238.113743][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 238.128515][ T27] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 238.145770][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.169059][ T27] usb 1-1: Product: syz [ 238.173416][ T27] usb 1-1: Manufacturer: syz [ 238.178036][ T27] usb 1-1: SerialNumber: syz [ 238.190805][ T27] usb 1-1: config 0 descriptor?? [ 238.207822][ T27] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 238.369564][T10140] loop1: detected capacity change from 0 to 32768 [ 238.407636][T10140] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 238.478715][T10140] XFS (loop1): Ending clean mount [ 238.533101][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 238.533116][ T28] audit: type=1800 audit(1792081798.788:397): pid=10140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1615" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 238.633028][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.645552][ T28] audit: type=1800 audit(1792081798.908:398): pid=10157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1615" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 238.702573][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.735579][T10158] loop2: detected capacity change from 0 to 512 [ 238.812109][T10158] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1618: invalid indirect mapped block 4294967295 (level 1) [ 238.831363][T10140] syz.1.1615 (10140) used greatest stack depth: 20656 bytes left [ 238.850174][T10158] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1618: invalid indirect mapped block 4294967295 (level 1) [ 238.866491][T10158] EXT4-fs (loop2): 2 truncates cleaned up [ 238.878222][T10158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.897719][ T5774] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 239.492657][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.604890][T10180] loop1: detected capacity change from 0 to 16 [ 239.615752][T10180] erofs: (device loop1): mounted with root inode @ nid 36. [ 239.656863][ T27] gspca_topro: reg_r err -71 [ 239.661604][ T27] gspca_topro: Sensor soi763a [ 239.675037][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.732480][ T27] usb 1-1: USB disconnect, device number 6 [ 239.778268][T10183] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1629'. [ 239.800160][T10183] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1629'. [ 239.924509][T10187] syz.1.1630 uses obsolete (PF_INET,SOCK_PACKET) [ 239.971662][T10189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1631'. [ 240.212568][T10202] loop3: detected capacity change from 0 to 512 [ 240.224550][T10202] EXT4-fs: Ignoring removed i_version option [ 240.236988][T10202] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 240.267372][T10202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.278442][T10206] IPv4: Oversized IP packet from 127.202.26.0 [ 240.300473][T10202] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.410698][ T28] audit: type=1800 audit(1792081800.658:399): pid=10202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1637" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 240.605825][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.713192][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.723715][ T28] audit: type=1326 audit(1792081800.988:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.1.1647" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d6719e559 code=0x0 [ 240.888610][ T28] audit: type=1326 audit(1792081801.148:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.1.1647" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6719e559 code=0x7ffc0000 [ 240.936147][ T28] audit: type=1326 audit(1792081801.148:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.1.1647" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6719e559 code=0x7ffc0000 [ 240.977019][ T28] audit: type=1326 audit(1792081801.178:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.1.1647" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6719e559 code=0x7ffc0000 [ 241.018945][ T28] audit: type=1326 audit(1792081801.178:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.1.1647" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2d6719e559 code=0x7ffc0000 [ 241.050950][ T28] audit: type=1326 audit(1792081801.188:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.1.1647" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6719e559 code=0x7ffc0000 [ 241.079006][ T28] audit: type=1326 audit(1792081801.268:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.1.1647" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2d6715ed8e code=0x7ffc0000 [ 241.319555][ T1827] IPVS: starting estimator thread 0... [ 241.412190][T10250] IPVS: using max 21 ests per chain, 50400 per kthread [ 241.742404][ T1827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.750600][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.587351][T10304] loop0: detected capacity change from 0 to 512 [ 242.692482][T10304] FAT-fs (loop0): error, corrupted file size (i_pos 51, 8960) [ 242.712198][T10304] FAT-fs (loop0): Filesystem has been set read-only [ 242.719097][T10304] FAT-fs (loop0): error, corrupted file size (i_pos 51, 8960) [ 242.787476][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.188227][T10328] loop2: detected capacity change from 0 to 256 [ 243.209512][T10328] exfat: Bad value for 'uid' [ 243.235720][T10330] overlayfs: upper fs does not support file handles, falling back to index=off. [ 243.832980][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.922152][ T5848] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 244.112330][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 244.124041][ T5848] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.140682][ T5848] usb 1-1: config 0 interface 0 has no altsetting 0 [ 244.151389][ T5848] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 244.166682][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.179840][ T5848] usb 1-1: Product: syz [ 244.187813][ T5848] usb 1-1: Manufacturer: syz [ 244.193902][ T5848] usb 1-1: SerialNumber: syz [ 244.206201][ T5848] usb 1-1: config 0 descriptor?? [ 244.430867][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 244.457241][ T5848] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 244.491524][ T5848] imon:send_packet: packet tx failed (-71) [ 244.523398][ T5848] imon 1-1:0.0: panel buttons/knobs setup failed [ 244.611181][T10368] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 244.625181][ T5848] rc_core: IR keymap rc-imon-pad not found [ 244.631037][ T5848] Registered IR keymap rc-empty [ 244.639325][ T5848] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 244.649964][ T5848] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 244.674421][ T5848] imon:send_packet: packet tx failed (-71) [ 244.712208][ T5848] imon 1-1:0.0: remote input dev register failed [ 244.718766][ T5848] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 244.768202][ T5848] imon 1-1:0.0: unable to initialize intf0, err 0 [ 244.784069][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.789895][ T5848] imon:imon_probe: failed to initialize context! [ 244.792482][ T1827] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 244.798851][ T5848] imon 1-1:0.0: unable to register, err -19 [ 244.842147][ T5848] usb 1-1: USB disconnect, device number 7 [ 244.873744][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.899423][T10375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.907416][T10375] IPv6: NLM_F_CREATE should be set when creating new route [ 244.940490][T10373] loop2: detected capacity change from 0 to 8192 [ 244.997359][ T1827] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.005349][T10373] loop2: p1 p2 p3 [ 245.011476][ T1827] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.018080][T10373] loop2: partition table partially beyond EOD, truncated [ 245.021490][ T1827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.040009][ T1827] usb 2-1: Product: syz [ 245.047464][T10373] loop2: p1 start 51379968 is beyond EOD, truncated [ 245.049771][ T1827] usb 2-1: Manufacturer: syz [ 245.059099][ T1827] usb 2-1: SerialNumber: syz [ 245.095834][T10373] loop2: p3 size 100663552 extends beyond EOD, truncated [ 245.104638][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.184603][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 245.242225][ T5848] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 245.442210][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 245.451571][ T5848] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.466598][ T5848] usb 1-1: config 0 interface 0 has no altsetting 0 [ 245.476188][ T5848] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 245.485725][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.502044][ T5848] usb 1-1: Product: syz [ 245.506261][ T5848] usb 1-1: Manufacturer: syz [ 245.510961][ T5848] usb 1-1: SerialNumber: syz [ 245.528690][ T5848] usb 1-1: config 0 descriptor?? [ 245.642628][T10388] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 245.869174][ T5848] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 245.905067][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.113436][ T1827] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 246.131036][ T1827] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 246.145572][ T1827] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 246.162250][ T5848] rc_core: IR keymap rc-imon-pad not found [ 246.176302][ T5848] Registered IR keymap rc-empty [ 246.181416][ T5848] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 246.192486][ T5848] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 246.221157][T10401] tipc: Failed to remove unknown binding: 66,1,1/16777220:1171927883/1171927885 [ 246.230964][T10401] tipc: Failed to remove unknown binding: 66,1,1/16777220:1171927883/1171927885 [ 246.299771][ T5848] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 246.311941][ T5848] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 246.330906][ T5848] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:8> initialized [ 246.382239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.524833][ T1827] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 246.552412][ T1827] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 246.578526][ T1827] usb 2-1: USB disconnect, device number 2 [ 246.597260][ T1827] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 246.696522][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 246.697678][ T55] usb 1-1: USB disconnect, device number 8 [ 246.761648][T10406] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 246.942567][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.262581][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 247.822950][ T1827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.982763][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.022504][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.032046][ T6732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.044886][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.055758][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.168629][T10409] netlink: 'syz.3.1722': attribute type 1 has an invalid length. [ 249.182325][T10409] netlink: 'syz.3.1722': attribute type 4 has an invalid length. [ 249.190151][T10409] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1722'. [ 249.211131][T10409] netlink: 'syz.3.1722': attribute type 1 has an invalid length. [ 249.225562][T10409] netlink: 'syz.3.1722': attribute type 4 has an invalid length. [ 249.243849][T10409] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1722'. [ 249.342140][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 250.014709][T10414] loop0: detected capacity change from 0 to 32768 [ 250.065295][T10414] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.138646][T10437] xt_hashlimit: max too large, truncated to 1048576 [ 250.153375][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.206260][T10414] XFS (loop0): Ending clean mount [ 250.312048][ T28] kauditd_printk_skb: 291 callbacks suppressed [ 250.312063][ T28] audit: type=1800 audit(1792081810.568:698): pid=10414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1719" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 250.359850][T10446] loop2: detected capacity change from 0 to 512 [ 250.405348][ T28] audit: type=1800 audit(1792081810.668:699): pid=10451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1719" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 250.432729][T10446] FAT-fs (loop2): Unrecognized mount option "ë" or missing value [ 250.499185][T10452] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 250.569533][T10446] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 250.606496][ T28] audit: type=1326 audit(1792081810.868:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.3.1735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169319e559 code=0x7fc00000 [ 250.722595][ T28] audit: type=1326 audit(1792081810.868:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.3.1735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f169319e559 code=0x7fc00000 [ 250.812657][ T28] audit: type=1326 audit(1792081810.938:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.3.1735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16931982d7 code=0x7fc00000 [ 250.871357][ T28] audit: type=1326 audit(1792081810.938:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.3.1735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f169313f8d9 code=0x7fc00000 [ 250.898140][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.965454][ T28] audit: type=1326 audit(1792081810.938:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.3.1735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f169313f99d code=0x7fc00000 [ 251.055370][ T28] audit: type=1326 audit(1792081810.938:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.3.1735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f169319e559 code=0x7fc00000 [ 251.192326][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.213477][ T5777] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 251.244452][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 251.286293][T10466] gretap0: entered promiscuous mode [ 251.305461][T10466] macvtap1: entered promiscuous mode [ 251.324170][T10466] macvtap1: entered allmulticast mode [ 251.332084][T10466] gretap0: entered allmulticast mode [ 251.348255][T10467] gretap0: left allmulticast mode [ 251.362390][T10467] gretap0: left promiscuous mode [ 251.368550][T10467] macvtap1: left promiscuous mode [ 251.374260][T10467] macvtap1: left allmulticast mode [ 252.229041][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.479265][T10488] loop1: detected capacity change from 0 to 256 [ 252.507248][T10488] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.644045][ T28] audit: type=1800 audit(1792081812.898:706): pid=10488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1748" name="file1" dev="loop1" ino=1048643 res=0 errno=0 [ 252.650102][T10492] FAULT_INJECTION: forcing a failure. [ 252.650102][T10492] name failslab, interval 1, probability 0, space 0, times 0 [ 252.702026][T10492] CPU: 0 PID: 10492 Comm: syz.0.1741 Not tainted syzkaller #0 [ 252.709552][T10492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.719635][T10492] Call Trace: [ 252.722920][T10492] [ 252.725859][T10492] dump_stack_lvl+0x18c/0x250 [ 252.730548][T10492] ? show_regs_print_info+0x20/0x20 [ 252.735754][T10492] ? load_image+0x420/0x420 [ 252.740266][T10492] ? __might_sleep+0xe0/0xe0 [ 252.744861][T10492] ? __lock_acquire+0x7eb0/0x7eb0 [ 252.749892][T10492] should_fail_ex+0x394/0x4c0 [ 252.754578][T10492] should_failslab+0x9/0x20 [ 252.759093][T10492] slab_pre_alloc_hook+0x59/0x300 [ 252.764117][T10492] ? ops_init+0x8b/0x640 [ 252.768436][T10492] ? ops_init+0x8b/0x640 [ 252.772676][T10492] __kmem_cache_alloc_node+0x53/0x250 [ 252.778089][T10492] ? ops_init+0x8b/0x640 [ 252.782518][T10492] __kmalloc+0xa7/0x240 [ 252.786675][T10492] ? simp_init_net+0x15a/0x190 [ 252.791523][T10492] ops_init+0x8b/0x640 [ 252.795609][T10492] setup_net+0x3b6/0xa20 [ 252.799856][T10492] ? copy_net_ns+0x530/0x530 [ 252.804451][T10492] ? copy_net_ns+0x347/0x530 [ 252.809041][T10492] ? down_read_killable+0x1d0/0x340 [ 252.814315][T10492] copy_net_ns+0x361/0x530 [ 252.818734][T10492] create_new_namespaces+0x3ce/0x700 [ 252.824034][T10492] unshare_nsproxy_namespaces+0x11a/0x160 [ 252.829765][T10492] ksys_unshare+0x4fa/0x8f0 [ 252.834286][T10492] ? sighand_ctor+0x50/0x50 [ 252.838794][T10492] ? lock_chain_count+0x20/0x20 [ 252.843656][T10492] ? syscall_enter_from_user_mode+0x25/0x80 [ 252.849644][T10492] __x64_sys_unshare+0x38/0x40 [ 252.854411][T10492] do_syscall_64+0x55/0xb0 [ 252.858822][T10492] ? clear_bhb_loop+0x40/0x90 [ 252.863598][T10492] ? clear_bhb_loop+0x40/0x90 [ 252.868273][T10492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.874170][T10492] RIP: 0033:0x7fbb9079e559 [ 252.878587][T10492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.898197][T10492] RSP: 002b:00007fbb916b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 252.906615][T10492] RAX: ffffffffffffffda RBX: 00007fbb90a25fa0 RCX: 00007fbb9079e559 [ 252.914590][T10492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 252.922559][T10492] RBP: 00007fbb908358b0 R08: 0000000000000000 R09: 0000000000000000 [ 252.930534][T10492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.938704][T10492] R13: 00007fbb90a26038 R14: 00007fbb90a25fa0 R15: 00007fffdf978e48 [ 252.946700][T10492] [ 252.959861][T10493] FAT-fs (loop1): error, invalid FAT chain (i_pos 196, last_block 8200) [ 253.002061][T10493] FAT-fs (loop1): Filesystem has been set read-only [ 253.263370][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.361190][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 253.405224][T10509] gretap0: entered promiscuous mode [ 253.410814][T10509] macvtap1: entered promiscuous mode [ 253.440817][T10509] macvtap1: entered allmulticast mode [ 253.456728][T10509] gretap0: entered allmulticast mode [ 253.476780][T10510] gretap0: left allmulticast mode [ 253.532929][T10510] gretap0: left promiscuous mode [ 253.556968][T10510] macvtap1: left promiscuous mode [ 253.572151][T10510] macvtap1: left allmulticast mode [ 253.733346][T10516] FAULT_INJECTION: forcing a failure. [ 253.733346][T10516] name failslab, interval 1, probability 0, space 0, times 0 [ 253.782301][T10516] CPU: 0 PID: 10516 Comm: syz.2.1757 Not tainted syzkaller #0 [ 253.789834][T10516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.799917][T10516] Call Trace: [ 253.803214][T10516] [ 253.806166][T10516] dump_stack_lvl+0x18c/0x250 [ 253.810885][T10516] ? show_regs_print_info+0x20/0x20 [ 253.816119][T10516] ? load_image+0x420/0x420 [ 253.820662][T10516] ? __might_sleep+0xe0/0xe0 [ 253.824055][T10498] loop3: detected capacity change from 0 to 32768 [ 253.825265][T10516] ? __lock_acquire+0x7eb0/0x7eb0 [ 253.836763][T10516] should_fail_ex+0x394/0x4c0 [ 253.841483][T10516] should_failslab+0x9/0x20 [ 253.846028][T10516] slab_pre_alloc_hook+0x59/0x300 [ 253.851086][T10516] ? net_generic+0x1e/0x240 [ 253.855758][T10516] kmem_cache_alloc_node+0x5e/0x310 [ 253.861005][T10516] ? __alloc_skb+0x103/0x2c0 [ 253.865711][T10516] __alloc_skb+0x103/0x2c0 [ 253.870167][T10516] tipc_msg_build+0x163/0xe60 [ 253.874886][T10516] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 253.880996][T10516] ? verify_lock_unused+0x140/0x140 [ 253.886233][T10516] ? tipc_sk_filtering+0x13c/0x510 [ 253.891383][T10516] __tipc_sendstream+0x8fb/0x1290 [ 253.896449][T10516] ? tsk_advance_rx_queue+0x310/0x310 [ 253.902004][T10516] ? wait_woken+0x180/0x180 [ 253.906627][T10516] ? _local_bh_enable+0xa0/0xa0 [ 253.911523][T10516] tipc_sendstream+0x55/0x70 [ 253.916141][T10516] ? tipc_getsockopt+0x5a0/0x5a0 [ 253.921115][T10516] ____sys_sendmsg+0x61b/0x980 [ 253.926017][T10516] ? __asan_memset+0x22/0x40 [ 253.930648][T10516] ? __sys_sendmsg_sock+0x30/0x30 [ 253.935811][T10516] ? __import_iovec+0x5f2/0x850 [ 253.940711][T10516] ? import_iovec+0x73/0xa0 [ 253.945260][T10516] ___sys_sendmsg+0x2a6/0x360 [ 253.949986][T10516] ? __sys_sendmsg+0x2b0/0x2b0 [ 253.954841][T10516] __se_sys_sendmsg+0x1d0/0x2c0 [ 253.959733][T10516] ? __x64_sys_sendmsg+0x80/0x80 [ 253.964811][T10516] ? lockdep_hardirqs_on+0x98/0x150 [ 253.970049][T10516] do_syscall_64+0x55/0xb0 [ 253.974497][T10516] ? clear_bhb_loop+0x40/0x90 [ 253.979206][T10516] ? clear_bhb_loop+0x40/0x90 [ 253.983914][T10516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.989840][T10516] RIP: 0033:0x7f91faf9e559 [ 253.994275][T10516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.013908][T10516] RSP: 002b:00007f91fbdec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.022354][T10516] RAX: ffffffffffffffda RBX: 00007f91fb226090 RCX: 00007f91faf9e559 [ 254.030354][T10516] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 254.038350][T10516] RBP: 00007f91fb0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 254.046348][T10516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.054342][T10516] R13: 00007f91fb226128 R14: 00007f91fb226090 R15: 00007ffce9bfe198 [ 254.062354][T10516] [ 254.070670][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.100412][T10498] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 254.163698][T10498] XFS (loop3): Ending clean mount [ 254.207870][ T28] audit: type=1800 audit(1792081814.468:707): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1750" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 254.302972][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.705471][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.722919][T10498] syz.3.1750 (10498) used greatest stack depth: 20536 bytes left [ 254.800651][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 254.869111][T10547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.877688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.886703][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.895202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.903789][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.912310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.920793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.329682][T10547] tipc: Resetting bearer [ 255.403531][T10547] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.412413][T10547] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.685263][T10555] loop1: detected capacity change from 0 to 1024 [ 255.721590][T10555] hfsplus: invalid btree flag [ 255.726922][T10555] hfsplus: failed to load attributes file [ 255.985896][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.992348][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.994188][T10547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.123758][T10547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.458753][T10547] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.468127][T10547] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.477117][T10547] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.486066][T10547] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.583473][T10547] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.593256][T10547] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.603747][T10547] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.612939][T10547] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.008019][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'. [ 257.018100][T10547] syz.2.1769 (10547) used greatest stack depth: 20264 bytes left [ 257.164995][T10575] loop0: detected capacity change from 0 to 512 [ 257.217817][T10575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.265594][T10575] ext4 filesystem being mounted at /425/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.285325][T10563] team0: Port device team_slave_0 removed [ 257.300021][T10575] EXT4-fs (loop0): shut down requested (0) [ 257.312842][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 257.356075][T10557] rxe_eth0 speed is unknown, defaulting to 1000 [ 257.389620][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.779449][T10587] FAULT_INJECTION: forcing a failure. [ 257.779449][T10587] name failslab, interval 1, probability 0, space 0, times 0 [ 257.796060][T10587] CPU: 0 PID: 10587 Comm: syz.3.1778 Not tainted syzkaller #0 [ 257.803571][T10587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.813623][T10587] Call Trace: [ 257.816901][T10587] [ 257.819836][T10587] dump_stack_lvl+0x18c/0x250 [ 257.824526][T10587] ? show_regs_print_info+0x20/0x20 [ 257.829739][T10587] ? load_image+0x420/0x420 [ 257.834276][T10587] ? __might_sleep+0xe0/0xe0 [ 257.838888][T10587] ? __lock_acquire+0x7eb0/0x7eb0 [ 257.843937][T10587] should_fail_ex+0x394/0x4c0 [ 257.848654][T10587] should_failslab+0x9/0x20 [ 257.853173][T10587] slab_pre_alloc_hook+0x59/0x300 [ 257.858224][T10587] ? net_generic+0x1e/0x240 [ 257.862728][T10587] kmem_cache_alloc_node+0x5e/0x310 [ 257.867956][T10587] ? __alloc_skb+0x103/0x2c0 [ 257.872663][T10587] __alloc_skb+0x103/0x2c0 [ 257.877089][T10587] tipc_msg_build+0x163/0xe60 [ 257.881781][T10587] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 257.887852][T10587] ? verify_lock_unused+0x140/0x140 [ 257.893058][T10587] ? tipc_sk_filtering+0x13c/0x510 [ 257.898196][T10587] __tipc_sendstream+0x8fb/0x1290 [ 257.903347][T10587] ? tsk_advance_rx_queue+0x310/0x310 [ 257.908747][T10587] ? wait_woken+0x180/0x180 [ 257.913368][T10587] ? _local_bh_enable+0xa0/0xa0 [ 257.918259][T10587] tipc_sendstream+0x55/0x70 [ 257.922864][T10587] ? tipc_getsockopt+0x5a0/0x5a0 [ 257.927800][T10587] ____sys_sendmsg+0x61b/0x980 [ 257.932568][T10587] ? __asan_memset+0x22/0x40 [ 257.937166][T10587] ? __sys_sendmsg_sock+0x30/0x30 [ 257.942210][T10587] ? __import_iovec+0x5f2/0x850 [ 257.947071][T10587] ? import_iovec+0x73/0xa0 [ 257.951684][T10587] ___sys_sendmsg+0x2a6/0x360 [ 257.956381][T10587] ? __sys_sendmsg+0x2b0/0x2b0 [ 257.961215][T10587] __se_sys_sendmsg+0x1d0/0x2c0 [ 257.966113][T10587] ? __x64_sys_sendmsg+0x80/0x80 [ 257.971109][T10587] ? lockdep_hardirqs_on+0x98/0x150 [ 257.976339][T10587] do_syscall_64+0x55/0xb0 [ 257.980761][T10587] ? clear_bhb_loop+0x40/0x90 [ 257.985474][T10587] ? clear_bhb_loop+0x40/0x90 [ 257.990169][T10587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.996067][T10587] RIP: 0033:0x7f169319e559 [ 258.000476][T10587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.020302][T10587] RSP: 002b:00007f1693fdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.028723][T10587] RAX: ffffffffffffffda RBX: 00007f1693426090 RCX: 00007f169319e559 [ 258.036700][T10587] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 258.044676][T10587] RBP: 00007f16932358b0 R08: 0000000000000000 R09: 0000000000000000 [ 258.052643][T10587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.060610][T10587] R13: 00007f1693426128 R14: 00007f1693426090 R15: 00007ffe7ac8bd98 [ 258.068590][T10587] [ 259.657041][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.686673][T10621] bridge_slave_0: left allmulticast mode [ 259.692644][T10621] bridge_slave_0: left promiscuous mode [ 259.698439][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.809178][T10625] loop1: detected capacity change from 0 to 512 [ 259.825600][T10625] FAT-fs (loop1): Unrecognized mount option "ë" or missing value [ 259.876011][T10625] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 260.037914][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1795'. [ 260.865740][T10649] loop0: detected capacity change from 0 to 164 [ 261.113589][T10654] FAULT_INJECTION: forcing a failure. [ 261.113589][T10654] name failslab, interval 1, probability 0, space 0, times 0 [ 261.127040][T10654] CPU: 0 PID: 10654 Comm: syz.0.1804 Not tainted syzkaller #0 [ 261.134549][T10654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.144636][T10654] Call Trace: [ 261.147937][T10654] [ 261.150890][T10654] dump_stack_lvl+0x18c/0x250 [ 261.155605][T10654] ? show_regs_print_info+0x20/0x20 [ 261.160838][T10654] ? load_image+0x420/0x420 [ 261.165387][T10654] should_fail_ex+0x394/0x4c0 [ 261.170107][T10654] ? __sigqueue_alloc+0x32/0x520 [ 261.175082][T10654] should_failslab+0x9/0x20 [ 261.179625][T10654] slab_pre_alloc_hook+0x59/0x300 [ 261.184680][T10654] ? __lock_acquire+0x7eb0/0x7eb0 [ 261.189742][T10654] ? __sigqueue_alloc+0x32/0x520 [ 261.194708][T10654] kmem_cache_alloc+0x5a/0x2c0 [ 261.199508][T10654] ? __sigqueue_alloc+0x40c/0x520 [ 261.204558][T10654] ? __sigqueue_alloc+0x32/0x520 [ 261.209521][T10654] __sigqueue_alloc+0x40c/0x520 [ 261.214487][T10654] __send_signal_locked+0x22f/0xe00 [ 261.219733][T10654] send_signal_locked+0x7dc/0x940 [ 261.224891][T10654] ? signal_wake_up_state+0x120/0x120 [ 261.230311][T10654] ? _raw_spin_lock+0x40/0x40 [ 261.235101][T10654] ? __up_read+0x2b8/0x6b0 [ 261.239551][T10654] force_sig_info_to_task+0x347/0x490 [ 261.244973][T10654] force_sig_fault+0xf1/0x150 [ 261.249679][T10654] ? force_sig_fault_to_task+0x140/0x140 [ 261.255340][T10654] ? __bad_area_nosemaphore+0x31e/0x690 [ 261.260920][T10654] exc_page_fault+0x64/0x100 [ 261.265547][T10654] ? clear_bhb_loop+0x40/0x90 [ 261.270265][T10654] asm_exc_page_fault+0x26/0x30 [ 261.275151][T10654] RIP: 0033:0x7fbb907893e1 [ 261.279588][T10654] Code: 00 0f 1f 84 00 00 00 00 00 48 85 f6 74 37 49 89 f0 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 5f 02 00 00 fd 74 0f c5 fd d7 c1 48 83 fe 20 76 11 85 c0 74 6d f3 0f bc c0 [ 261.299226][T10654] RSP: 002b:00007fbb916aff48 EFLAGS: 00010283 [ 261.305322][T10654] RAX: 0000000000000000 RBX: 00007fbb916b0014 RCX: 0000000000000000 [ 261.313319][T10654] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 261.321312][T10654] RBP: 0000000000000004 R08: 000000000000000f R09: 0000000000000000 [ 261.329311][T10654] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 261.337310][T10654] R13: 00007fbb916affb0 R14: 00007fbb90a25fa0 R15: 0000000000000000 [ 261.345332][T10654] [ 261.592343][T10569] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 261.794844][T10569] usb 2-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 261.814885][T10569] usb 2-1: config 0 interface 0 has no altsetting 0 [ 261.846248][T10569] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 261.876082][T10569] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 261.906385][T10569] usb 2-1: Product: syz [ 261.910609][T10569] usb 2-1: Manufacturer: syz [ 261.935984][T10569] usb 2-1: SerialNumber: syz [ 261.948340][T10569] usb 2-1: config 0 descriptor?? [ 261.972701][T10657] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 262.004511][T10569] usb 2-1: selecting invalid altsetting 0 [ 263.260502][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 263.260538][ T28] audit: type=1326 audit(1792081823.518:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.0.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9079e559 code=0x7fc00000 [ 263.297811][ T28] audit: type=1326 audit(1792081823.518:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.0.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbb9079e559 code=0x7fc00000 [ 263.379688][ T28] audit: type=1326 audit(1792081823.628:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.0.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb907982d7 code=0x7fc00000 [ 263.455248][ T28] audit: type=1326 audit(1792081823.628:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.0.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb9073f8d9 code=0x7fc00000 [ 263.480146][ T28] audit: type=1326 audit(1792081823.628:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.0.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbb9073f99d code=0x7fc00000 [ 263.579584][ T28] audit: type=1326 audit(1792081823.628:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10682 comm="syz.0.1815" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbb9079e559 code=0x7fc00000 [ 264.288734][T10702] CIFS: Attempting to mount //127.0.0.1/share [ 264.300825][T10702] CIFS: VFS: Error connecting to socket. Aborting operation. [ 264.314143][T10702] CIFS: VFS: cifs_mount failed w/return code = -22 [ 264.315109][ T5780] usb 2-1: USB disconnect, device number 3 [ 264.587446][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 265.312519][T10722] loop3: detected capacity change from 0 to 4096 [ 265.350478][T10722] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 265.464889][T10722] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 265.660803][T10722] ntfs3: loop3: failed to convert name for inode a. [ 266.820374][T10739] loop3: detected capacity change from 0 to 40427 [ 266.869030][T10739] F2FS-fs (loop3): Invalid segment count (49020959) [ 266.901293][T10739] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 266.935777][T10754] netlink: 'syz.0.1841': attribute type 1 has an invalid length. [ 266.950839][T10739] F2FS-fs (loop3): Unrecognized mount option "user_xCttr" or missing value [ 267.068033][T10754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.619112][T10766] loop2: detected capacity change from 0 to 4096 [ 267.657234][T10766] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 267.694090][T10766] EXT4-fs (loop2): Test dummy encryption mode enabled [ 267.732295][T10766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.768644][T10758] bond1: (slave veth3): Enslaving as an active interface with a down link [ 267.842135][T10759] tipc: Resetting bearer [ 267.886448][T10759] tipc: Resetting bearer [ 267.933619][T10759] tipc: Resetting bearer [ 267.945251][T10759] bond1: (slave syz_tun): making interface the new active one [ 267.983112][T10759] tipc: Resetting bearer [ 267.989280][T10759] syz_tun: entered promiscuous mode [ 268.003351][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.018178][T10759] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 268.192685][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1848'. [ 268.212223][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1848'. [ 268.485347][T10790] netlink: 'syz.1.1851': attribute type 9 has an invalid length. [ 268.505715][T10790] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1851'. [ 268.590474][T10792] netlink: 'syz.1.1851': attribute type 9 has an invalid length. [ 268.622186][T10792] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1851'. [ 268.748473][T10799] netlink: 'syz.2.1855': attribute type 1 has an invalid length. [ 268.824385][T10799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 268.947922][T10804] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 269.102792][ T55] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 269.217068][T10817] lo: entered promiscuous mode [ 269.259591][T10817] tunl0: entered promiscuous mode [ 269.283598][T10817] gre0: entered promiscuous mode [ 269.380553][T10817] gretap0: entered promiscuous mode [ 269.432206][T10569] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 269.440134][T10817] erspan0: entered promiscuous mode [ 269.459611][T10817] ip_vti0: entered promiscuous mode [ 269.481388][T10817] ip6_vti0: entered promiscuous mode [ 269.507748][T10817] sit0: entered promiscuous mode [ 269.632374][T10569] usb 1-1: Using ep0 maxpacket: 16 [ 269.642150][T10569] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 269.658761][T10569] usb 1-1: config 0 has no interface number 0 [ 269.676059][T10569] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 269.690265][T10569] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 269.701222][T10817] ip6tnl0: entered promiscuous mode [ 269.724971][T10569] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 269.730689][T10817] ip6gre0: entered promiscuous mode [ 269.744446][T10569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.754777][T10569] usb 1-1: Product: syz [ 269.758968][T10569] usb 1-1: Manufacturer: syz [ 269.760839][T10817] tipc: Resetting bearer [ 269.763599][T10569] usb 1-1: SerialNumber: syz [ 269.766129][T10569] usb 1-1: config 0 descriptor?? [ 269.785697][T10812] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 269.812246][T10812] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 269.826446][T10817] syz_tun: entered promiscuous mode [ 269.868652][T10817] ip6gretap0: entered promiscuous mode [ 269.909382][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.917256][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.944035][T10817] bridge0: entered promiscuous mode [ 269.977756][T10817] vcan0: entered promiscuous mode [ 269.989229][T10817] bond0: entered promiscuous mode [ 269.995378][T10817] bond_slave_0: entered promiscuous mode [ 270.001604][T10817] bond_slave_1: entered promiscuous mode [ 270.025643][T10817] team0: entered promiscuous mode [ 270.030879][T10817] team_slave_1: entered promiscuous mode [ 270.033611][T10812] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 270.059854][T10817] nlmon0: entered promiscuous mode [ 270.062478][T10812] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 270.073018][T10817] caif0: entered promiscuous mode [ 270.093703][T10817] batadv0: entered promiscuous mode [ 270.123496][T10817] vxcan0: entered promiscuous mode [ 270.137558][T10817] vxcan1: entered promiscuous mode [ 270.148993][T10817] veth0: entered promiscuous mode [ 270.174184][T10817] veth1: entered promiscuous mode [ 270.196854][T10817] wg0: entered promiscuous mode [ 270.213967][T10817] wg1: entered promiscuous mode [ 270.235245][T10817] wg2: entered promiscuous mode [ 270.252122][T10817] veth0_to_bridge: entered promiscuous mode [ 270.289218][T10569] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 270.303457][T10817] veth1_to_bridge: entered promiscuous mode [ 270.338460][T10817] veth0_to_bond: entered promiscuous mode [ 270.369371][T10817] veth1_to_bond: entered promiscuous mode [ 270.401083][T10817] veth1_to_team: entered promiscuous mode [ 270.437497][T10817] veth0_to_batadv: entered promiscuous mode [ 270.450877][T10817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.469789][T10817] batadv_slave_0: entered promiscuous mode [ 270.495061][T10817] veth1_to_batadv: entered promiscuous mode [ 270.513264][T10817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.528730][T10817] batadv_slave_1: entered promiscuous mode [ 270.555484][T10817] xfrm0: entered promiscuous mode [ 270.580504][T10817] veth0_to_hsr: entered promiscuous mode [ 270.617484][T10817] hsr0: entered promiscuous mode [ 270.640251][T10817] veth1_virt_wifi: entered promiscuous mode [ 270.665407][T10817] veth0_virt_wifi: entered promiscuous mode [ 270.683101][T10817] virt_wifi0: entered promiscuous mode [ 270.755027][T10817] vlan0: entered promiscuous mode [ 270.760398][T10817] vlan1: entered promiscuous mode [ 270.784687][T10817] macvlan0: entered promiscuous mode [ 270.808515][T10817] macvlan1: entered promiscuous mode [ 270.819349][T10817] ipvlan0: entered promiscuous mode [ 270.829173][T10817] ipvlan1: entered promiscuous mode [ 270.874006][T10817] macvtap0: entered promiscuous mode [ 270.896217][T10817] macsec0: entered promiscuous mode [ 270.915810][T10817] geneve0: entered promiscuous mode [ 270.947434][T10817] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.958188][T10817] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.967976][T10817] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.976934][T10817] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.990687][T10817] geneve1: entered promiscuous mode [ 271.022435][T10817] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 271.045985][T10817] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 271.066048][T10817] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 271.081806][T10817] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 271.103242][T10817] sit1: entered promiscuous mode [ 271.207681][T10817] ipvlan2: entered promiscuous mode [ 271.228397][T10817] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.237410][T10817] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.246350][T10817] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.255269][T10817] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.265452][T10817] @: entered promiscuous mode [ 271.273841][T10817] bridge1: entered promiscuous mode [ 271.279285][T10817] bridge2: entered promiscuous mode [ 271.286844][T10817] vlan3: entered promiscuous mode [ 271.292793][T10817] gtp0: entered promiscuous mode [ 271.300754][T10817] gre1: entered promiscuous mode [ 271.310553][T10817] gtp1: entered promiscuous mode [ 271.323668][T10817] gre2: entered promiscuous mode [ 271.330880][T10817] bond1: entered promiscuous mode [ 271.342651][T10817] gre3: entered promiscuous mode [ 271.498427][T10569] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 271.520290][T10817] gtp2: entered promiscuous mode [ 271.522026][T10569] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 271.544210][T10817] gre4: entered promiscuous mode [ 271.552541][T10569] asix: probe of 1-1:0.34 failed with error -71 [ 271.589246][T10569] usb 1-1: USB disconnect, device number 9 [ 271.703224][T10817] gre5: entered promiscuous mode [ 271.883993][T10817] ip6erspan0: entered promiscuous mode [ 271.909458][T10817] bond2: entered promiscuous mode [ 271.921635][T10817] syztnl1: entered promiscuous mode [ 271.935946][T10817] gtp3: entered promiscuous mode [ 271.961400][T10830] tipc: Resetting bearer [ 272.101821][T10839] netlink: 'syz.3.1867': attribute type 9 has an invalid length. [ 272.116306][T10839] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1867'. [ 272.182303][T10842] netlink: 'syz.3.1867': attribute type 9 has an invalid length. [ 272.190236][T10842] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1867'. [ 272.418199][T10847] loop0: detected capacity change from 0 to 256 [ 272.441878][T10847] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 272.543597][ T28] audit: type=1800 audit(1792081832.808:715): pid=10847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1870" name="file1" dev="loop0" ino=1048645 res=0 errno=0 [ 272.697611][T10846] FAT-fs (loop0): error, invalid FAT chain (i_pos 196, last_block 8200) [ 272.707497][T10846] FAT-fs (loop0): Filesystem has been set read-only [ 273.413337][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'. [ 274.161460][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1896'. [ 274.699577][T10905] loop3: detected capacity change from 0 to 512 [ 274.730233][T10905] EXT4-fs: Ignoring removed oldalloc option [ 274.746243][T10905] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 274.761715][T10905] EXT4-fs (loop3): 1 truncate cleaned up [ 274.787679][T10905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.310644][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.604535][T10934] capability: warning: `syz.2.1903' uses 32-bit capabilities (legacy support in use) [ 275.943724][T10941] loop1: detected capacity change from 0 to 16 [ 275.995121][T10941] net_ratelimit: 266 callbacks suppressed [ 275.995139][T10941] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 277.925200][T10975] loop1: detected capacity change from 0 to 40427 [ 277.950625][T10975] F2FS-fs (loop1): invalid crc value [ 277.979233][T10975] F2FS-fs (loop1): Found nat_bits in checkpoint [ 278.078881][T10975] F2FS-fs (loop1): Start checkpoint disabled! [ 278.130529][T10975] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 278.436719][ T8344] bio_check_eod: 33 callbacks suppressed [ 278.436736][ T8344] kworker/u4:62: attempt to access beyond end of device [ 278.436736][ T8344] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 278.465854][ T8344] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 278.481038][ T8344] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 278.490916][ T8344] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 278.532284][ T5780] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 278.734866][ T5780] usb 4-1: unable to get BOS descriptor or descriptor too short [ 278.744772][ T5780] usb 4-1: not running at top speed; connect to a high speed hub [ 278.784074][ T5780] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.822098][ T5780] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 278.850266][ T5780] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 278.865217][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.892525][ T5780] usb 4-1: Product: syz [ 278.897100][ T5780] usb 4-1: Manufacturer: syz [ 278.901862][ T5780] usb 4-1: SerialNumber: syz [ 279.135838][ T5780] usb 4-1: 0:2 : does not exist [ 279.140852][ T5780] usb 4-1: unit 6 not found! [ 279.152597][ T6732] syz_tun: left promiscuous mode [ 279.218099][T10987] sctp: [Deprecated]: syz.1.1921 (pid 10987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.218099][T10987] Use struct sctp_sack_info instead [ 279.241290][ T5780] usb 4-1: USB disconnect, device number 6 [ 279.903919][ T28] audit: type=1804 audit(1792081840.168:716): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/466/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 280.264648][T11006] FAULT_INJECTION: forcing a failure. [ 280.264648][T11006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.330414][T11006] CPU: 0 PID: 11006 Comm: syz.3.1928 Not tainted syzkaller #0 [ 280.337940][T11006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.348031][T11006] Call Trace: [ 280.351340][T11006] [ 280.354291][T11006] dump_stack_lvl+0x18c/0x250 [ 280.359000][T11006] ? show_regs_print_info+0x20/0x20 [ 280.364231][T11006] ? load_image+0x420/0x420 [ 280.368773][T11006] ? __might_fault+0xaa/0x120 [ 280.373496][T11006] ? __lock_acquire+0x7eb0/0x7eb0 [ 280.378664][T11006] ? __virt_addr_valid+0x10c/0x380 [ 280.383824][T11006] should_fail_ex+0x394/0x4c0 [ 280.388616][T11006] _copy_to_user+0x2f/0xa0 [ 280.393067][T11006] tomoyo_flush+0x170/0x5b0 [ 280.397650][T11006] tomoyo_read_domain+0x6b6/0xd80 [ 280.402724][T11006] tomoyo_read_control+0x2c6/0x4d0 [ 280.407877][T11006] ? tomoyo_read_control+0x109/0x4d0 [ 280.413196][T11006] ? tomoyo_realpath_nofollow+0x110/0x110 [ 280.418970][T11006] vfs_read+0x298/0x990 [ 280.423170][T11006] ? kernel_read+0x1e0/0x1e0 [ 280.427802][T11006] ? __fget_files+0x28/0x460 [ 280.432435][T11006] ? __fget_files+0x3fc/0x460 [ 280.437151][T11006] ? __fdget_pos+0x2a3/0x330 [ 280.441750][T11006] ? ksys_read+0x74/0x260 [ 280.446101][T11006] ksys_read+0x151/0x260 [ 280.450356][T11006] ? vfs_write+0x9a0/0x9a0 [ 280.454782][T11006] ? lockdep_hardirqs_on+0x98/0x150 [ 280.459988][T11006] do_syscall_64+0x55/0xb0 [ 280.464407][T11006] ? clear_bhb_loop+0x40/0x90 [ 280.469087][T11006] ? clear_bhb_loop+0x40/0x90 [ 280.473804][T11006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.479724][T11006] RIP: 0033:0x7f169319e559 [ 280.484143][T11006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.503757][T11006] RSP: 002b:00007f1694000028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 280.512179][T11006] RAX: ffffffffffffffda RBX: 00007f1693425fa0 RCX: 00007f169319e559 [ 280.520177][T11006] RDX: 0000000000002020 RSI: 0000200000000980 RDI: 0000000000000003 [ 280.528233][T11006] RBP: 00007f16932358b0 R08: 0000000000000000 R09: 0000000000000000 [ 280.536296][T11006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.544266][T11006] R13: 00007f1693426038 R14: 00007f1693425fa0 R15: 00007ffe7ac8bd98 [ 280.552251][T11006] [ 280.555347][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.697316][ T5142] udevd[5142]: could not touch /run/udev/queue: No such file or directory [ 281.112362][T11024] FAULT_INJECTION: forcing a failure. [ 281.112362][T11024] name failslab, interval 1, probability 0, space 0, times 0 [ 281.125434][T11024] CPU: 1 PID: 11024 Comm: syz.3.1934 Not tainted syzkaller #0 [ 281.132941][T11024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.143033][T11024] Call Trace: [ 281.146343][T11024] [ 281.149299][T11024] dump_stack_lvl+0x18c/0x250 [ 281.154017][T11024] ? show_regs_print_info+0x20/0x20 [ 281.159345][T11024] ? load_image+0x420/0x420 [ 281.163892][T11024] ? __lock_acquire+0x7eb0/0x7eb0 [ 281.168950][T11024] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 281.175667][T11024] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 281.181781][T11024] should_fail_ex+0x394/0x4c0 [ 281.186505][T11024] should_failslab+0x9/0x20 [ 281.191048][T11024] slab_pre_alloc_hook+0x59/0x300 [ 281.196102][T11024] ? pcpu_alloc+0x11e7/0x1880 [ 281.200813][T11024] ? percpu_ref_init+0xc3/0x340 [ 281.205698][T11024] __kmem_cache_alloc_node+0x53/0x250 [ 281.211123][T11024] ? percpu_ref_init+0xc3/0x340 [ 281.216010][T11024] ? blk_timeout_work+0x10/0x10 [ 281.220892][T11024] kmalloc_trace+0x2a/0xe0 [ 281.225436][T11024] percpu_ref_init+0xc3/0x340 [ 281.230154][T11024] blk_alloc_queue+0x369/0x4c0 [ 281.234958][T11024] __blk_mq_alloc_disk+0x47/0x190 [ 281.240011][T11024] ? loop_add+0x2f7/0x990 [ 281.242144][ T9153] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 281.244404][T11024] loop_add+0x322/0x990 [ 281.244439][T11024] loop_control_ioctl+0x128/0x590 [ 281.244466][T11024] ? loop_set_hw_queue_depth+0x110/0x110 [ 281.266765][T11024] ? bpf_lsm_file_ioctl+0x9/0x10 [ 281.271739][T11024] ? security_file_ioctl+0x80/0xa0 [ 281.276937][T11024] ? loop_set_hw_queue_depth+0x110/0x110 [ 281.282607][T11024] __se_sys_ioctl+0xfd/0x170 [ 281.287239][T11024] do_syscall_64+0x55/0xb0 [ 281.291688][T11024] ? clear_bhb_loop+0x40/0x90 [ 281.296404][T11024] ? clear_bhb_loop+0x40/0x90 [ 281.301125][T11024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.307076][T11024] RIP: 0033:0x7f169319e559 [ 281.311517][T11024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.331238][T11024] RSP: 002b:00007f1694000028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.339659][T11024] RAX: ffffffffffffffda RBX: 00007f1693425fa0 RCX: 00007f169319e559 [ 281.347633][T11024] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 281.355609][T11024] RBP: 00007f16932358b0 R08: 0000000000000000 R09: 0000000000000000 [ 281.363579][T11024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.371551][T11024] R13: 00007f1693426038 R14: 00007f1693425fa0 R15: 00007ffe7ac8bd98 [ 281.379541][T11024] [ 281.495276][ T9153] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 281.509993][ T9153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 281.519800][ T9153] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 281.529554][ T9153] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 281.545262][ T9153] usb 3-1: Product: syz [ 281.549571][ T9153] usb 3-1: Manufacturer: syz [ 281.554372][ T9153] usb 3-1: SerialNumber: syz [ 281.566326][ T9153] usb 3-1: config 0 descriptor?? [ 281.573136][T11021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 281.588091][ T9153] usb 3-1: selecting invalid altsetting 0 [ 281.785223][T11031] netlink: 'syz.3.1938': attribute type 1 has an invalid length. [ 281.842332][T11033] loop1: detected capacity change from 0 to 512 [ 281.870566][T11033] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.884729][T11031] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.936978][T11033] EXT4-fs (loop1): orphan cleanup on readonly fs [ 281.972552][T11035] bond3: (slave veth3): Enslaving as an active interface with a down link [ 281.981805][T11033] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 282.032089][T11033] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1937: invalid indirect mapped block 1819239214 (level 1) [ 282.052054][T11031] syz_tun: left promiscuous mode [ 282.082272][T11031] tipc: Resetting bearer [ 282.096052][T11033] EXT4-fs (loop1): Remounting filesystem read-only [ 282.103383][T11033] EXT4-fs (loop1): 1 truncate cleaned up [ 282.110353][T11033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.129239][T11031] tipc: Resetting bearer [ 282.135936][ T9153] usb 3-1: USB disconnect, device number 7 [ 282.141243][T11031] bond3: (slave syz_tun): making interface the new active one [ 282.185621][T11031] tipc: Resetting bearer [ 282.197510][T11031] syz_tun: entered promiscuous mode [ 282.211115][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.211878][T11031] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 283.469880][T11063] netlink: 'syz.1.1947': attribute type 39 has an invalid length. [ 284.106227][T11078] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f] [ 284.148769][T11078] caller generic_access_phys+0x33f/0x650 mapping multiple BARs [ 284.164612][T11071] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 284.305391][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1955'. [ 284.352988][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1955'. [ 284.575786][T11091] loop1: detected capacity change from 0 to 128 [ 284.638285][T11091] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 284.663984][T11091] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.804470][T11098] netlink: 'syz.3.1960': attribute type 1 has an invalid length. [ 284.823293][T11098] netlink: 'syz.3.1960': attribute type 4 has an invalid length. [ 284.843614][T11098] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1960'. [ 284.856795][T11099] netlink: 'syz.3.1960': attribute type 1 has an invalid length. [ 284.867710][T11099] netlink: 'syz.3.1960': attribute type 4 has an invalid length. [ 284.892521][T11099] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1960'. [ 285.058660][T11103] loop3: detected capacity change from 0 to 512 [ 285.068185][T11103] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 285.094742][T11103] EXT4-fs (loop3): 1 truncate cleaned up [ 285.175290][T11103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.445629][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 285.636864][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.713565][T11138] netlink: 'syz.1.1974': attribute type 4 has an invalid length. [ 286.867277][T11140] netlink: 'syz.1.1975': attribute type 10 has an invalid length. [ 286.937466][T11140] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.966313][T11140] bond0: (slave team0): Enslaving as an active interface with an up link [ 289.127203][T11168] loop1: detected capacity change from 0 to 40427 [ 289.170400][T11168] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 289.208938][T11168] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 289.246322][T11168] F2FS-fs (loop1): invalid crc value [ 289.276059][T11168] F2FS-fs (loop1): Found nat_bits in checkpoint [ 289.368894][T11168] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 289.380440][T11168] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 289.635391][T11176] loop3: detected capacity change from 0 to 32768 [ 289.680405][T11176] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1989 (11176) [ 289.747249][T11176] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 289.769081][T11176] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 289.798506][T11176] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 289.826516][ T8344] kworker/u4:62: attempt to access beyond end of device [ 289.826516][ T8344] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 289.842169][T11176] BTRFS info (device loop3): use zstd compression, level 3 [ 289.849445][T11176] BTRFS info (device loop3): using free space tree [ 289.889597][T11184] udevd[11184]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 290.072471][T11176] BTRFS info (device loop3): enabling ssd optimizations [ 290.079495][T11176] BTRFS info (device loop3): auto enabling async discard [ 290.723042][ T5775] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 291.362916][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.374090][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 291.385686][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.407639][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.424557][ T5088] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 291.433295][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.160106][ T6834] tipc: Resetting bearer [ 292.197315][ T6834] bond1: (slave syz_tun): Releasing active interface [ 292.204847][ T6834] tipc: Resetting bearer [ 292.212522][ T6834] tipc: Resetting bearer [ 292.219711][ T6834] tipc: Disabling bearer [ 292.301801][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.319988][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.328950][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.350179][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.353027][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.361565][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 292.368639][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.387880][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.488666][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.520936][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.648947][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.660899][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.745772][ T49] vlan2 (unregistering): left allmulticast mode [ 292.757043][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 292.768752][ T49] vlan2 (unregistering): left promiscuous mode [ 292.779641][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 292.791674][ T49] bridge0: port 3(vlan2) entered disabled state [ 292.815022][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.828731][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.907384][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.918882][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.928739][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.940031][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.956347][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 292.964999][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.094874][ T49] tipc: Left network mode [ 293.566923][ T8267] syz_tun: left promiscuous mode [ 293.588209][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.602457][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.629440][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.641616][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.649798][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 293.658344][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.318428][ T49] hsr_slave_0: left promiscuous mode [ 294.329627][ T49] hsr_slave_1: left promiscuous mode [ 294.338439][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.350332][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.361698][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.374117][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.384921][ T49] bridge_slave_1: left allmulticast mode [ 294.390604][ T49] bridge_slave_1: left promiscuous mode [ 294.402628][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.426781][ T49] bridge_slave_0: left allmulticast mode [ 294.436968][ T49] bridge_slave_0: left promiscuous mode [ 294.442870][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.511345][ T49] veth1_macvtap: left promiscuous mode [ 294.521279][ T49] veth0_macvtap: left promiscuous mode [ 294.529381][ T49] veth1_vlan: left promiscuous mode [ 294.539633][ T49] veth0_vlan: left promiscuous mode [ 294.667916][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.684887][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.697672][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.707820][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.718614][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.745308][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.754984][ T49] bond1 (unregistering): (slave veth3): Releasing active interface [ 294.987099][ T49] bond1 (unregistering): Released all slaves [ 295.628464][ T49] team0 (unregistering): Port device team_slave_1 removed [ 295.689024][ T49] team0 (unregistering): Port device team_slave_0 removed [ 295.775897][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.861684][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.000410][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 296.027919][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 296.049818][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 296.077523][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 296.085368][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 296.093050][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.410733][ T49] bond0 (unregistering): Released all slaves [ 297.219387][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.230139][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.238972][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.248753][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.256547][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 297.264073][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.312628][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.320773][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.328838][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.337086][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.346205][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 298.362182][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.534501][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.543926][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.551891][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.561062][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 299.569400][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 299.578258][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.836670][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.847189][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.856220][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.865055][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.873831][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 300.887184][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.244318][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.256463][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.265230][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.276550][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.284451][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 302.291879][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.743902][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.753589][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.763793][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.773562][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.781186][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 303.788835][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.343816][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.352593][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.360831][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.370031][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.379589][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 305.388540][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.068995][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.077959][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.087241][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.096710][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.105797][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 307.113299][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.843977][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.854110][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.862369][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.870453][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.878124][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 308.886927][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.760624][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.771675][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.780070][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.790279][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.798225][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 310.805681][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.754611][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.764588][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.773794][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.781846][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.789787][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 312.797255][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.835323][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.844644][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.853590][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.861600][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.872310][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 314.879665][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.039733][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.048100][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.056212][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.067486][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.075338][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 317.084452][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.424768][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.431133][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.317488][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.327051][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.336373][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.344716][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.354622][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 319.362178][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.716337][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.725281][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.734371][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.746116][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.754781][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 321.762399][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=1991 state=3 status=67 (errno 9: Bad file descriptor) [ 323.456205][ T7032] tipc: Resetting bearer [ 323.563860][ T7032] bond3: (slave syz_tun): Releasing active interface [ 323.570951][ T7032] tipc: Resetting bearer [ 323.594381][ T7032] tipc: Resetting bearer [ 323.601237][ T7032] tipc: Disabling bearer [ 323.656626][T10030] tipc: Disabling bearer [ 323.693686][ T7445] tipc: Resetting bearer [ 323.774633][ T7445] tipc: Disabling bearer [ 324.018893][ T49] vlan2 (unregistering): left allmulticast mode [ 324.025587][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 324.036310][ T49] bridge0: port 3(vlan2) entered disabled state [ 324.243981][ T49] tipc: Left network mode [ 324.653607][ T49] bond2: (slave erspan0): Releasing active interface [ 325.186842][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.197334][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.205381][ T49] bridge_slave_1: left allmulticast mode [ 325.211174][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.221016][ T49] bridge_slave_0: left allmulticast mode [ 325.226989][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.258850][ T49] bond3 (unregistering): (slave veth3): Releasing active interface [ 325.397124][ T49] bond3 (unregistering): Released all slaves [ 325.537304][ T49] bond2 (unregistering): Released all slaves [ 325.682793][ T49] bond1 (unregistering): Released all slaves [ 326.175306][ T49] team0 (unregistering): Port device team_slave_1 removed [ 326.218366][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.278143][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.598687][ T49] bond0 (unregistering): Released all slaves [ 326.940595][ T49] IPVS: stop unused estimator thread 0... [ 329.502482][ T9153] page_pool_release_retry() stalled pool shutdown 1 inflight 120 sec