last executing test programs:

2m37.993498541s ago: executing program 1 (id=483):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0xffffffff, 0x4)

2m37.785990622s ago: executing program 1 (id=484):
r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000100)='./sys\x00', 0x102)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r3, &(0x7f00000000c0)='1\x00', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r4, &(0x7f00000001c0)='1\x00', 0x1)
fchdir(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
mount$fuse(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x80000, 0x0)

2m33.86125062s ago: executing program 1 (id=487):
lsetxattr(0x0, 0x0, 0x0, 0x0, 0x2)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcff, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2m33.494018129s ago: executing program 1 (id=488):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000840)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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")
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
r1 = open(&(0x7f0000000340)='./bus\x00', 0x68042, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r2, 0x2007ffb)
sendfile(r1, r2, 0x0, 0x1000000201005)
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009a80)={[{@prjquota}, {@sysvgroups}]}, 0x4, 0x9864, &(0x7f0000000140)="$eJzs3Qm8rWPBuP91nINjHko0IVMajRlSMg8lmSNz5owhocxDGSpKqCgUSSmEikiZZSbzPM/zPP4/xznE6SLv7/++r17XdX2cs8a99r3v73M/9trPPmutuMiyCwwGEw9G9vLpPztj/5tWW26CJTY/Yd9hVx6815L3jrp6rJEnk8w36nT+UacLDAaDIaMeZ8jI64bNe/wJYwyGDUb898/GH2fcMcYfDMYddXHU4wzmHHky3hEv3+/F0eKBTj3i0+058s9LTTDiQUacWWWN5zcZDAbDX/XxI8Y18798odLmX2C5Bf5p9YrbGKNuHvLP2146HTbyz3iHDQbjHTJ4/e1jxH3HfNXH/m824nNOPO1g+Zvegs/9f67Pz7/UMqP5j1iLQ0ddN+eINT76GjQ2+na+17Ib3j1qCoeMmriX182Qt2i7/39qxfkXWWLw+ut4sOTC29314kv7zWELDQbDFh4Mhi0yGAxb9K32qP+e3tKNr6qqqt6S5l9gthHP/8YY7fuB4S9/X0vfF57z3Cy3DQbDlhz5/e6wNV5+LlhVVVVVVVVV/5nNv8BsC8Lz/4nf6Pn/1CfvOknP/6uqqqqqqqr+77T4/AvMNuK5/mjP/6d4o+f/D91z9OEjf/d/vjlHftQLb+0XUVVVVVVVVVVv2CKL4/P/qd/o+f95x099Yc//q6qqqqqqqv7vtMxsiyw4eNXr7I26esaXb6fn/6fcecOqb9V4q6qqqqqqquq/3gv3n3TqP1+7esrBaK/3/lKjfi4w5JjTLr74LRvof0ZD/vXnITu+1WP6/9sI5+FHTT0YbLL8Wz2Uegv6P/Na9fU/Uv7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+51jv+/8vr/pxy31svvBf/B6We76qR/fuRL7/0/bMnF79/pLRr6W9Hb9fj/YIMhg8Eo34k3GAwGS86/zHIzDgaDk66abfrpBq/cNteI2+aZdOhLbxD/8j8TWXgSfuAdpxl5OmJDGbzzlcc45qXHX/zFQ4cOGW0Qr2qSEw8/fP0Vn5x99NMZXv/rGOOVcxOccM/L/5ZljNHuNPx1Pvjlx3/5axndedTYZxwx9pm23HizmbbYZtuPbbDxmuuts946m8w96xyzzD733HPMMdO6G2y0zswj/369OZv6pb8XfDNzNv7oc3b//K+es9G/ttebs6nfeM5eesT9zh3+mZfnbNh/cc4WfOM5m3qDUZ9okvnGHKzx0twMGQwmWWjMwdYjLswy9mAwycKj7jvFiPt+atIxBoN9/vmFjjg39ivb4JAdR9xnxUWWXWDkbmow+OfpP3ud97Mfa9TI5xt1Ov+o0wVGfpqJB//cFIfNe/wJY4yYi9dMx/jjjDvG+IPBuKMujnqcwdwjT8Y9+eX7vc77rI820JdeZmXPkX9eaoLBYDDeiDNTrnnKbiOm/n/hfdr/n/7//y9ecw15ZXscMurPqPuM9Jp/0cX/+blemoYRczd01HVzjjD5b35r+9f0L+Odevhg6jcY7xu8Ls5L0fa10UmT7fzf9bo4NN4p3mC8b/A6vq873hVuO/DukQ/13zbe0fZ1S7z093xvZl83eON93VB6gHUueP/o+7rPvf4QX7O7fHmOxh7tTq+3r5vioKl2HPH4873xvm6JEWMf8zX7ujEGg0kWfHlfN2LHt8iYg31GXJh1xIVFxxwcOeLCbC9dGGdw2ogLH19r043WHnHFYv+6Hcw45DW/oAnrbJHR1tmQV33tQ0b7/c5hI0/HO+zl93B6nf3mkFFf1r/dV9B2O/EbjPcN3n8K53nEdWsfO3yy/673n6LxDn/j8b7e+2W/7nj3fuKUm/6bx/vKOhvzVdO12JtZZ1O/dp2N+BKHvmplvNnvw9aG+488P8Urj7bV9ve88j3FmKM97r/7nmKxN15nE28w2sftcchgyBvNzaJvZm7e9y/7oJ1ePTdv9vutGacdefvQN5ibsedebYaX52as/+LcLPpfnZv5BkNfOzfDBgsPBoPpRu0fFnkzczPFG8/Nm91uxoX7jzy/zitXLbTXUWe9PDejz8W/m5tF/qtzM/Ur2810L902zRiDscYabL3mlltuPsvIv1++OOvIv994DS70ZuZy4v+euXzPsNeby39uquPfduFh/2YN/ss+/eXHX+i/OpeDV+ZysMHoi6X+U+vnf+7yd5e/u/zd5e8uf3f5i3ud4/+vvP7/ARPPs++oH26MeeFUk+/+Vo/3Le5tffx/lO9rjv/vPvlUF44xeOW2Nzw+O/I+/5HHZ+cceTLeES/fb/TjgzzQ1z8+e8jcc+76v3R89v+pl9fqm/g5XPt/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7jXOf4/88u/B3DnLEs/MupA6Jj37rLy0m/1eN/i3tbH/0f5vub4/9Ir73LvGINXbnvD4/8j7+M4/n/Ls4vs/Z98/P/ltdrx//o35e8O/Ud/DZB629b6d5e/uzfyH+d/cRz11tT6d5e/u/zd5e8uf3f5u8vfXf7iXuf4/3wv/x7A0UcfuO3Lvw9w+SR7nvRWj/ct7u16/L/3//fW/t9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7qXj/yP/jfCr/6XwUm0XGBz//7/dqN//GIzmv3T+mMV/mfypMQYDh/+y+WOW9b9c/pjFf/n8MYv/CvljFv8v5o9Z/FfMH7P4r5Q/ZvH/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4v/l/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/yv5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjF/6v5Yxb/zfPHLP5b5I9Z/LfMH7P4fy1/zOK/Vf6Yxf/r+WMW/63zxyz+2+SPWfy3zR+z+H8jf8zi/838MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+38ofs/h/O3/M4r9H/pjFf8/8MYv/XvljFv+988cs/t/JH7P4fzd/zOL/vfwxi/8++WMW/33zxyz+388fs/j/IH/M4r9f/pjF/4f5Yxb//fPHLP4H5I9Z/A/MH7P4/yh/zOL/4/wxi/9P8scs/gflj1n8D84fs/j/NH/M4v+z/DGL/yH5Yxb/Q/PHLP6H5Y9Z/H+eP2bx/0X+mMX/8Pwxi/8R+WMW/1/mj1n8j8wfs/j/Kn/M4n9U/pjF/9f5Yxb/3+SPWfyPzh+z+P82f8zi/7v8MYv/MfljFv9j88cs/sflj1n8f58/ZvE/Pn/M4n9C/pjF/8T8MYv/H/LHLP5/zB+z+P8pf8zif1L+mMX/5Pwxi/+f88cs/qfkj1n8T80fs/j/JX/M4n9a/pjF/6/5Yxb/v+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/P+eP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4v+P/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyT+Qwb5Yxb/IfljFv8x8scs/kPzxyz+w/LHLP5j5o9Z/MfKH7P4j50/ZvEfnj9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOI/af6Yxf8d+WMW/3fmj1n8J8sfs/i/K3/M4j95/pjFf4r8MYv/u/PHLP7vyR+z+L83f8zi/778MYv/+/PHLP5T5o9Z/KfKH7P4T50/ZvH/QP6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fzB/zOI/Y/6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/4/nj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/0/kj1n858gfs/jPmT9m8Z8rf8ziP3f+mMX/k/ljFv958scs/p/KH7P4fzp/zOI/b/6Yxf8z+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/D+bP2bx/1z+mMV/ifwxi//n88cs/kvmj1n8v5A/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/h/MX/M4r9i/pjFf6X8MYv/l/LHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv8v549Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/l/JH7P4b5g/ZvHfKH/M4r+xzn+cN3Uvi/8mOv83l8V/0/wxi/9m+WMW/6/mj1n8N88fs/hvkT9m8d8yf8zi/7X8MYv/VvljFv+v549Z/LfOH7P4b5M/ZvHfNn/M4v+N/DGL/zfzxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P4fyt/zOL/7fwxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+H8nf8zi/938MYv/9/LHLP775I9Z/PfNH7P4fz9/zOL/g/wxi/9++WMW/x/mj1n8988fs/gfkD9m8T8wf8zi/6P8MYv/j/PHLP4/yR+z+B+UP2bxPzh/zOL/0/wxi//P8scs/ofkj1n8D80fs/gflj9m8f95/pjF/xf5Yxb/w/PHLP5H5I9Z/H/5Wv87/tfH9R+axf/I1j9m8f9V/pjF/6j8MYv/r/PHLP6/yR+z+B+dP2bx/23+mMX/d/ljFv9j8scs/sfmj1n8j8sfs/j/Pn/M4n98/pjF/4T8MYv/ifljFv8/5I9Z/P+YP2bx/1P+mMX/pPwxi//J+WMW/z/nj1n8T8kfs/ifmj9m8f9L/pjF/7T8MYv/X/PHLP5/yx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH5P4v1T+/5rEf8j5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/f+SPWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5j9awUacO/+vyxyzr//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyT+L53N/1+z+A/JH7P4j5E/ZvEfmj9m8R+WP2bxHzN/zOI/Vv6YxX/s/DGL//D8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+78gfs/i/M3/M4j9Z/pjF/135Yxb/yfPHLP5T5I9Z/N+dP2bxf0/+mMX/vfljFv/35Y9Z/N+fP2bxnzJ/zOI/Vf6YxX/q/DGL/wfyxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf+D+WMW/xnzxyz+H8ofs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/h/PH/M4j9T/pjFf+b8sSFn7D/mYDB42/vPkj9mWf+z5o9Z/GfLH7P4z54/ZvH/RP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/D+ZP2bxnyd/zOL/qfwxi/+n88cs/vPmj1n8P5M/ZvGfL3/M4j//YJy3akT/0Vn8F2j9Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/Z/PHLP6fyx+z+C+RP2bx/3z+mMV/yfwxi/8X8scs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/y/mj1n8V8wfs/ivlD9m8f9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi/+X8MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/K/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8d80f8ziv1n+mMX/q/ljFv/N88cs/lvkj1n8t8wfs/h/LX/M4r9V/pjF/+v5Yxb/rfPHLP7b5I9Z/LfNH7P4fyN/zOL/zfwxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP7fyh+z+H87f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+38kfs/h/N3/M4v+9/DGL/z75Yxb/ffPHLP7fzx+z+P8gf8ziv1/+mMX/h/ljFv/988cs/gfkj1n8D8wfs/j/KH/M4v/j/DGL/0/yxyz+B+WPWfwPzh+z+P80f8zi/7P8MYv/IfljFv9D88cs/oflj1n8f54/ZvH/Rf6Yxf/w/DGL/xH5Yxb/X+aPWfyPzB+z+P8qf8zif1T+mMX/1/ljFv/f5I9Z/I/OH7P4/zZ/zOL/u/wxi/8x+WMW/2Pzxyz+x+WPWfx/nz9m8T8+f8zif0L+mMX/xPwxi/8f8scs/n/MH7P4/yl/zOJ/Uv6Yxf/k/DGL/5/zxyz+p+SPWfxPzR+z+P8lf8zif1r+mMX/r/ljFv+/5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8/54/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zi/4/8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+Y9s2GsvWvyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH5P4Dx3kj1n8h+SPWfzHyB+z+A/NH7P4D8sfs/iPmT9m8R8rf8ziP3b+mMV/eP6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv935I9Z/N+ZP2bxnyx/zOL/rvwxi//k+WMW/ynyxyz+784fs/i/J3/M4v/e/DGL//vyxyz+788fs/hPmT9m8Z8qf8ziP3X+mMX/A/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/8H8MYv/jPljFv8P5Y9Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/D+eP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/D/xxv5j/4+P6z80i/8crX/M4j9n/pjFf678MYv/3PljFv9P5o9Z/OfJH7P4fyp/zOL/6fwxi/+8+WMW/8/kj1n858sfs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bx/2z+mMX/c/ljFv8l8scs/p/PH7P4L5k/ZvH/Qv6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4v/F/DGL/4r5Yxb/lfLHLP5fyh+z+K+cP2bxXyV/zOK/qt6fX+LQ4r+a3p+z+K+eP2bxXyN/zOK/Zv6Yxf/L+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/1fyxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/1fzxyz+m+ePWfy3yB+z+G+ZP2bx/1r+mMV/q/wxi//X88cs/lvnj1n8t8kfs/hvmz9m8f9G/pjF/5v5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvHfKX/M4r9z/pjFf5f8MYv/rvljFv/d8scs/rvnj1n8v5U/ZvH/dv6YxX+P/DGL/575Yxb/vfLHLP57549Z/L+TP2bx/27+mMX/e/ljFv998scs/vvmj1n8v58/ZvH/Qf6YxX+//DGL/w/zxyz+++ePWfwPyB+z+B+YP2bx/1H+mMX/x/ljFv+f5I9Z/A/KH7P4H5w/ZvH/af6Yxf9n+WMW/0Pyxyz+h+aPWfwPyx+z+P88f8zi/4v8MYv/4fljFv8j8scs/r/MH7P4H5k/ZvH/Vf6Yxf+o/DGL/6/zxyz+v8kfs/gfnT9m8f9t/tjb3n/4S2eH/i5/7G3vP7Khx+SPWfyPzR+z+B+XP2bx/33+mMX/+Pwxi/8J+WMW/xPzxyz+f8gfs/j/MX/M4v+n/DGL/0n5Yxb/k/PHLP5/zh+z+J+SP2bxPzV/zOL/l/wxi/9p+WMW/7/mj1n8/5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8f97/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8/8scs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH5P4Dxvkj1n8h+SPWfzHyB+z+A/NH7P4D8sfs/iPmT9m8R8rf8ziP3b+mMV/eP6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv935I9Z/N+ZP2bxnyx/zOL/rvwxi//k+WMW/ynyxyz+784fs/i/J3/M4v/e/DGL//vyxyz+788fs/hPmT9m8Z8qf8ziP3X+mMX/A/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/8H8MYv/jPljFv8P5Y9Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/D+eP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/D+RP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/T+aPWfznyR+z+H8qf8zi/+n8MYv/vPljFv/P5I9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8f9s/pjF/3Nv4G/eLiz+S8idXy+L/+fzxyz+S+aPWfy/kD9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+H8xf8ziv2L+mMV/pfwxi/+X8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/y/nj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+X8kfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/83yxyz+X80fs/hvnj9m8d8if8ziv2X+mMX/a/ljFv+t8scs/l/PH7P4b50/ZvHfJn/M4r9t/pjF/xv5Yxb/b+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/XfLHLP675o9Z/HfLH7P4754/ZvH/Vv6Yxf/b+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx/07+mMX/u/ljFv/v5Y9Z/PfJH7P475s/ZvH/fv6Yxf8H+WMW//3yxyz+P8wfs/jvnz9m8T8gf8zif2D+mMX/R/ljFv8f549Z/H+SP2bxPyh/zOJ/cP6Yxf+n+WMW/5/lj1n8D8kfs/gfmj9m8T8sf8zi//P8MYv/L/LHLP6H549Z/I/IH7P4/zJ/zOJ/ZP6Yxf9X+WMW/6Pyxyz+v84fs/j/Jn/M4n90/pjF/7f5Yxb/3+WPWfyPyR+z+B+bP2bxPy5/zOL/+/wxi//x+WMW/xPyxyz+J+aPWfz/kD9m8f9j/pjF/0/5Yxb/k/LHLP4n549Z/P+cP2bxPyV/zOJ/av6Yxf8v+WMW/9Pyxyz+f80fs/j/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zi//f8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/ssFg8OKLL+7wVg3rPzWL/+Wtf8zi/4/8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHJP5jDvLHLP5D8scs/mPkj1n8h+aPWfyH5Y9Z/MfMH7P4j5U/ZvEfO3/M4j88f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/zvyxyz+78wfs/hPlj9m8X9X/pjFf/L8MYv/FPljFv93549Z/N+TP2bxf2/+mMX/ffljFv/3549Z/KfMH7P4T5U/ZvGfOn/M4v+B/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/YP6YxX/G/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+H88fs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+n8gfs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/8n88cs/vPkj1n8P5U/ZvH/dP6YxX/e/DGL/2fyxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4fzZ/zOL/ufwxi/8S+WMW/8/nj1n8l8wfs/h/IX/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8f9i/pjFf8X8MYv/SvljFv8v5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/l/OH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8v5I/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8v5o/ZvHfPH/M4r9F/pjFf8v8MYv/1/LHLP5b5Y9Z/L+eP2bx3zp/zOK/Tf6YxX/b/DGL/zfyxyz+38wfs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+O+WP2bx3z1/zOL/rfwxi/+388cs/nvkj1n898wfs/jvlT9m8d87f8zi/538MYv/d/PHLP7fyx+z+O+TP2bx3zd/zOL//fwxi/8P8scs/vvlj1n8f5g/ZvHfP3/M4n9A/pjF/8D8MYv/j/LHLP4/zh+z+P8kf8zif1D+mMX/4Pwxi/9P88cs/j/LH7P4H5I/ZvE/NH/M4n9Y/pjF/+f5Yxb/X+SPWfwPzx+z+B+RP2bx/2X+mMX/yPwxi/+v8scs/kflj1n8f50/ZvH/Tf6Yxf/o/DGL/2/zxyz+v8sfs/gfkz9m8T82f8zif1z+mMX/9/ljFv/j88cs/ifkj1n8T8wfs/j/IX/M4v/H/DGL/5/yxyz+J+WPWfxPzh+z+P85f8zif0r+mMX/1Pwxi/9f8scs/qflj1n8/5o/ZvH/W/6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF/+/5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/v/IH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/TOI/1iB/zOI/JH/M4j9G/pjFf2j+mMV/WP6YxX/M/DGL/1j5Yxb/sfPHLP7D88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+L8jf8zi/878MYv/ZPljFv935Y9Z/CfPH7P4T5E/ZvF/95vwH/Y/Oa7/0Cz+72n9Yxb/9+aPWfzflz9m8X9//pjFf8r8MYv/VPljFv+p88cs/h/IH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8P5o9Z/GfMH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOL/8fwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOL/ifwxi/8c+WMW/znzxyz+c+WPWfznzh+z+H8yf8ziP0/+mMX/U/ljFv9P549Z/OfNH7P4fyZ/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/Z/PHLP6fyx+z+C+RP2bx/3z+mMV/yfwxi/8X8scs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/y/mj1n8V8wfs/ivlD9m8f9S/pjFf+X8sbep/5DRrMdaJX/sber/Uq9e/6vmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMX/y/ljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/9X8scs/hvmj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMV/s/wxi/9X88cs/pvnj1n8t8gfs/hvmT9m8f9a/pjFf6v8MYv/1/PHLP5b549Z/LfJH7P4b5s/ZvH/Rv6Yxf+b+WMW/+3yxyz+2+ePWfx3+Df+O/1Pj+s/NIv/jq1/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P4fyt/zOL/7fwxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+H8nf8zi/938MYv/9/LHLP775I9Z/PfNH7P4fz9/zOL/g/wxi/9++WMW/x/mj1n8988fs/gfkD9m8T8wf8zi/6P8MYv/j/PHLP4/yR+z+B+UP2bxPzh/zOL/0/wxi//P8scs/ofkj1n8D80fs/gflj9m8f95/pjF/xf5Yxb/w/PHLP5H5I9Z/H+ZP2bxPzJ/zOL/q/wxi/9R+WMW/1/nj1n8f5M/ZvE/On/M4v/b/DGL/+/yxyz+x+SPWfyPzR+z+B+XP2bx/33+mMX/+Pwxi/8J+WMW/xPzxyz+f8gfs/j/0ee/w5u5k8X/Tz7/N5XF/6T8MYv/yfljFv8/O/0f/Hd3sPif4vT/t1n8T80fs/j/JX/M4n9a/pjF/6/5Yxb/v+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/P+eP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4v+P/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/sJf/B4G3v/1j+g3HgOsv6fzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I8NGWswGAj8n80fs6z/5/LHLP7P549Z/F/IH7P4v5g/JvEfe5A/ZvEfkj9m8R8jf8ziPzR/zOI/LH/M4j9m/pjFf6z8MYv/2PljFv/h+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfIf1fDXXLL4T5o/ZvF/R/6Yxf+d+WMW/8nyxyz+78ofs/hPnj9m8Z8if8zi/+78MYv/e/LHLP7vzR+z+L8vf8zi//78MYv/lPljFv+p8scs/lPnj1n8P5A/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/h/MH7P4z5g/ZvH/UP6Yxf/D+WMW/4/kj1n8P5o/ZvH/WP6Yxf/j+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bxny1/zOI/e/6Yxf8T+WMW/znyxyz+c+aPWfznyh+z+M+dP2bx/2T+mMV/nvwxi/+n8scs/p/OH7P4z5s/ZvH/TP6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv/P5o9Z/D+XP2bxXyJ/zOL/+fwxi/+S+WMW/y/kj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/xXyxyz+X8wfs/ivmD9m8V8pf8zi/6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMX/y/ljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/9X8scs/hvmj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMV/s/wxi/9X88cs/pvnj1n8t8gfs/hvmT9m8f9a/pjFf6v8MYv/1/PHLP5b549Z/LfJH7P4b5s/ZvH/Rv6Yxf+b+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3dC/LcLiv3vamMX/W/ljFv9v549Z/PfIH7P475k/ZvHfK3/M4r93/pjF/zv5Yxb/7+aPWfy/lz9m8d/H6D/2v7+LxX9fo/+byOL//fwxi/8P8scs/vvlj1n8f5g/ZvHfP3/M4n9A/pjF/8D8MYv/j/LHLP4/zh+z+P8kf8zif1D+mMX/4Pwxi/9P88cs/j/LH7P4H5I/ZvE/NH/M4n9Y/pjF/+f5Yxb/X+SPWfwPzx+z+B+RP2bx/2X+mMX/yPwxi/+v8scs/kflj1n8f50/ZvH/Tf6Yxf/o/DGL/2/zxyz+v8sfs/gfkz9m8T82f8zif1z+mMX/9/ljFv/j88cs/ifkj1n8T8wfs/j/IX/M4v/H/DGL/5/yxyz+J+WPWfxPzh+z+P85f8zif0r+mMX/1Pwxi/9f8scs/qflj1n8/5o/ZvH/W/6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF/+/5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/v/IH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/TOI/fJA/ZvEfkj9m8R8jf8ziPzR/zOI/LH/M4j9m/pjFf6z8MYv/2PljFv/h+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/N+RP2bxf2f+mMV/svwxi/+78scs/pPnj1n8p8gfs/i/O3/M4v+e/DGL/3vzxyz+78sfs/i/P3/M4j9l/pjFf6r8MYv/1PljFv8P5I9Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/B/PHLP4z5o9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bx/3j+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+M+eP2bx/0T+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfw/mT9m8Z8nf8zi/6n8MYv/p/PHLP7z5o9Z/D+TP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjF/7Nv5D/ZCy+++L8wtP/ELP6fa/1jFv8l8scs/p/PH7P4L5k/ZvH/Qv6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLHxvlP/Tt7r98/phl/a+QP2bx/2L+mMV/xfwxi/9K+WMW/y/lj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+X84fs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfy/kj9m8d8wf8ziv1H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfy/mj9m8d88f8ziv0X+mMV/y/wxi//X8scs/lvlj1n8v54/ZvHfOn/M4r9N/pjFf9v8MYv/N/LHLP7fzB+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4v+t/DGL/7fzxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOL/nfwxi/9388cs/t/LH7P475M/ZvHfN3/M4v/9/DGL/w/yxyz+++WPWfx/mD9m8d8/f8zif0D+mMX/wPwxi/+P8scs/j/OH7P4/yR/zOJ/UP6Yxf/g/DGL/0/zxyz+P8sfs/gfkj9m8T80f8zif1j+mMX/5/ljFv9f5I9Z/A/PH7P4H5E/ZvH/Zf6Yxf/I/DGL/6/yxyz+R+WPWfx/nT9m8f9N/pjF/+j8MYv/b/PHLP6/yx+z+B+TP2bxPzZ/zOJ/XP6Yxf/3+WMW/+Pzxyz+J+SPWfxPzB+z+P8hf8zi/8f8MYv/n/LHLP4n5Y9Z/E/OH7P4/zl/zOJ/Sv6Yxf/U/DGL/1/yxyz+p+WPWfz/mj9m8f9b/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX/7/ljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+/8gfs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78Rzb8tRct/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYn/OIP8MYv/kPwxi/8Y+WMW/6H5Yxb/YfljFv8x88cs/mPlj1n8x84fs/gPzx+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v+O/DGL/zvzxyz+k+WPWfzflT9m8Z88f8ziP0X+mMX/3fljFv/35I9Z/N+bP2bxf1/+mMX//fljFv8p88cs/lPlj1n8p84fs/h/IH/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8P5g/ZvGfMX/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/8fzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/7YS/5TDQaDt7n/7PljlvX/ifwxi/8c+WMW/znzxyz+c+WPWfznzh+z+H8yf8ziP0/+mMX/U/ljFv9P549Z/OfNH7P4fyZ/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/Z/PHLP6fyx+z+C+RP2bx/3z+mMV/yfwxi/8X8scs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/y/mj1n8V8wfs/ivlD9m8f9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi/+X8MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/K/ljFv8N88cs/hvlj1n8N84fs/iPlT9m8d80f8ziv1n+mMX/q/ljFv/N88cs/lvkj1n8t8wfs/h/LX/M4r9V/pjF/+v5Yxb/rfPHLP7b5I9Z/LfNH7P4fyN/zOL/zfwxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP7fyh+z+H87f8ziv0f+2JAz9n9i1Nm3tf+e+WOW9b9X/pjFf+/8MYv/d/LHLP7fzR+z+H8vf8ziv0/+mMV/3/wxi//388cs/j/IH7P475c/ZvH/Yf6YxX///DGL/wH5Yxb/A/PHLP4/yh+z+P84f8zi/5P8MYv/QfljFv+D88cs/j/NH7P4/yx/zOJ/SP6Yxf/Q/DGL/2H5Yxb/n+ePWfx/kT9m8T88f8zif0T+mMX/l/ljFv8j88cs/r/KH7P4H5U/ZvH/df6Yxf83+WMW/6Pzxyz+v80fs/j/Ln/M4n9M/pjF/9j8MYv/cfljFv/f549Z/I/PH7P4n5A/ZvE/MX/M4v+H/DGL/x/zxyz+f8ofs/iflD9m8T85f8zi/+f8MYv/KfljFv9T88cs/n/JH7P4n5Y/ZvH/a/6Yxf9v+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/v+ePWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4/yN/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxif+4g/wxi/+Q/DGL/xj5Yxb/ofljFv9h+WMW/zHzxyz+Y+WPWfzHzh+z+A/PH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/478MYv/O/PHLP6T5Y9Z/N+VP2bxnzx/zOI/Rf6Yxf/d+WMW//fkj1n835s/ZvF/X/6Yxf/9+WMW/ynzxyz+U+WPWfynzh+z+H8gf8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfw/mD9m8Z8xf8zi/6H8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/x/PHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/J/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4v/J/DGL/zz5Yxb/T+WPWfw/nT9m8Z83f8zi/5n8MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+n80fs/h/Ln/M4r9E/pjF//P5Yxb/JfPHLP5fyB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/L+YP2bxXzF/zOK/Uv6Yxf9L+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/5fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/r+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/r+aPWfw3zx+z+G+RP2bx3zJ/zOL/tfwxi/9W+WMW/6/nj1n8t84fs/hvkz9m8d82f8zi/438MYv/N/PHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/rvlj1n8d88fs/h/K3/M4v/t/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P4fyd/zOL/3fwxi//38scs/vvkj1n8980fs/h/P3/M4v+D/DGL/375Yxb/H+aPWfz3zx+z+B+QP2bxPzB/zOL/o/wxi/+P88cs/j/JH7P4H5Q/ZvE/OH/M4v/T/DGL/8/yxyz+h+SPWfwPzR+z+B+WP2bx/3n+mMX/F/ljFv/D88cs/kfkj1n8f5k/ZvE/Mn/M4v+r/DGL/1H5Yxb/X+ePWfx/kz9m8T86f8ziP2b+mMX/d/ljFv9j8scs/sfmj1n8j8sfs/j/Pn/M4n98/pjF/4T8MYv/ifljFv8/5I9Z/P+YP2bx/1P+mMX/pPwxi//J+WMW/z/nj1n8T8kfs/ifmj9m8f9L/pjF/7T8MYv/X/PHLP5/yx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4/z1/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/x/5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwHg6H/epXF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vyxt7v/6iPPjvtA/tjb3X9U4z6YP2bxfyh/zOL/cP7Y29l/7H9eO+4j+WNvZ/9Xr/9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/TOI/3iB/zOI/JH/M4j9G/pjFf2j+mMV/WP6YxX/M/DGL/1j5Yxb/sfPHLP7D88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+L8jf8zi/878MYv/ZPljFv935Y9Z/CfPH7P4T5E/ZvF/d/6Yxf89+WMW//fmj1n835c/ZvF/f/6YxX/K/DGL/1T5Yxb/qfPHLP4fyB+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/D+aPWfxnzB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+H8sf8zi//H8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8zi/4n8MYv/HPljFv8588cs/nPlj1n8584fs/h/Mn/M4j9P/pjF/1P5Yxb/T+ePWfznzR+z+H8mf8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/2fzxyz+n8sfs/gvkT9m8f98/pjFf8n8MYv/F/LHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8v5o9Z/FfMH7P4r5Q/ZvH/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4v/l/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/yv5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjF/6v5Yxb/zfPHLP5b5I9Z/LfMH7P4fy1/zOK/Vf6Yxf/r+WMW/63zxyz+2+SPvX39L3vx1f7b5o+9ff1fu/6/kT9m8f9m/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/2/lj1n8v50/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv/v5I9Z/L+bP2bx/17+mMV/n/wxi/+++WMW/+/nj1n8f5A/ZvHfL3/M4v/D/DGL//75Yxb/A/LHLP4H5o9Z/H+UP2bx/3H+mMX/J/ljFv+D8scs/gfnj1n8f5o/ZvH/Wf6Yxf+Q/DGL/6H5Yxb/w/LHLP4/zx+z+P8if8zif3j+mMX/iPwxi/8v88cs/kfmj1n8f5U/ZvE/Kn/M4v/r/DGL/2/yxyz+R+ePWfx/mz9m8f9d/pjF/5j8MYv/sfljFv/j8scs/r/PH7P4H58/ZvE/IX/M4n9i/pjF/w/5Yxb/P+aPWfz/lD9m8T8pf8zif3L+2Mv+g+GDwdvZ/8/5Y5b1f0r+mMX/1Pwxi/9f8scs/qflj1n8/5o/ZvH/W/6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF/+/5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/v/4V/82B5H/FYFjFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/bKT/YDDY8e3tf1v+mGX9354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjEf/xB/pjFf0j+mMV/jPwxi//Q/DGL/7D8MYv/mK/jf+VVQ1f/3xraf2IW/7Fa/5jFf+z8MYv/8Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+Q/7+0o8h/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+L8jf8zi/878MYv/ZPljFv935Y9Z/CfPH7P4T5E/ZvF/d/6Yxf89+WMW//fmj1n835c/ZvF/f/6YxX/K/DGL/1T5Yxb/qfPHLP4fyB+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/D+aPWfxnzB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+H8sf8zi//H8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8zi/4n8MYv/HPljFv8588cs/nPlj1n8584fs/h/Mn/M4j9P/pjF/1P5Yxb/T+ePWfznzR97e/qPlH61/2fyx96e/iN7tf98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP6fzR+z+H8uf8ziv0T+mMX/8/ljFv8l88cs/l/IH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8v5g/ZvFfMX/M4r9S/pjF/0v5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/l/PHLP5r5Y9Z/Nc2+r+JL9jiv47R/01k8V83f8ziv17+mMV//fwxi/8G+WMW/6/kj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/6/mj1n8N88fs/hvkT9m8d8yf8zi/7X8MYv/VvljFv+v549Z/LfOH7P4b5M/ZvHfNn/M4v+N/DGL/zfzxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P4fyt/zOL/7fwxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+H8nf8zi/938MYv/9/LHLP775I9Z/PfNH7P4fz9/zOL/g/wxi/9++WMW/x/mj1n8988fs/gfkD9m8T8wf8zi/6P8MYv/j/PHLP4/yR+z+B+UP2bxPzh/zOL/0/wxi//P8scs/ofkj1n8D80fs/gflj9m8f95/pjF/xf5Yxb/w/PHLP5H5I9Z/H+ZP2bxPzJ/zOL/q/wxi/9R+WMW/1/nj1n8f5M/ZvE/On/M4v/b/DGL/+/yxyz+x+SPWfyPzR+z+B+XP2bx/33+mMX/+Pwxi/8J+WMW/xPzxyz+f8gfs/j/MX/M4v+n/DGL/0n5Yxb/k/PHLP5/zh+z+J+SP2bxPzV/zOL/l/wxi/9p+WMW/7/mj1n8/5Y/Npr/OG/1eP5/9zr+p+ePWdb/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX/7/ljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+/8gfs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX9M4j/BIH/M4j8kf8ziP0b+mMV/aP6YxX9Y/pjFf8z8MYv/WPljFv+x88cs/sPzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4vyN/zOL/zvwxi/9k+WMW/3flj1n8J88fs/hPkT9m8X93/pjF/z35Yxb/9+aPWfzflz9m8X9//pjFf8r8MYv/VPljFv+p88cs/h/IH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8P5o9Z/GfMH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOL/8fwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOL/ifwxi/8c+WMW/znzxyz+c+WPWfznzh+z+H8yf8ziP0/+mMX/U/ljFv9P549Z/OfNH7P4fyZ/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/Z/PHLP6fyx+z+C+RP2bx/3z+mMV/yfwxi/8X8scs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/y/mj1n8V8wfs/ivlD9m8f9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi/+X8MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/K/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8d80f8ziv1n+mMX/q/ljFv/N88cs/lvkj1n8t8wfs/h/LX/M4r9V/pjF/+v5Yxb/rfPHLP7b5I9Z/Le1+g9/45st/t+w+v+bLP7fzB+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4v+t/DGL/7fzxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOL/nfwxi/9388cs/t/LH7P475M/ZvHfN3/s7eo/fDT/7+ePvV39B6P5/yB/zOK/X/6Yxf+H+WMW//3zxyz+B+SPWfwPzB+z+P8of8zi/+P8MYv/T/LHLP4H5Y9Z/A/OH7P4/zR/zOL/s/wxi/8h+WMW/0Pzxyz+h+WPWfx/nj9m8f9F/pjF//D8MYv/EfljFv9f5o9Z/I/MH7P4/yp/zOJ/VP6Yxf/X+WMW/9/kj1n8j84fs/j/Nn/M4v+7/DGL/zH5Yxb/Y/PHLP7H5Y9Z/H+fP2bxPz5/zOJ/Qv6Yxf/E/DGL/x/yxyz+f8wfs/j/KX/M4n9S/pjF/+T8MYv/n5X+w//tPSz+pyj9/30W/1Pzxyz+f8kfs/iflj9m8f9r/pjF/2/5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv+/549Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/j/I3/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735P9SU4922eJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPSfwnHOSPWfyH5I9Z/MfIH7P4D80fs/gPyx+z+I+ZP2bxHyt/zOI/dv6YxX94/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/3fkj1n835k/ZvGfLH/M4v+u/DGL/+T5Yxb/KfLHLP7vzh+z+L8nf8zi/978MYv/+/LHLP7vzx+z+E+ZP2bxnyp/zOI/df6Yxf8D+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOL/wfwxi/+Mr/V/cej/+sD+M7P4f6j1j1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n8P54/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n8P5E/ZvGfI3/M4j9n/pjFf678MYv/3PljFv9P5o9Z/OfJH7P4f+pl/zaC12Tx/3T0mMV/3vwxi/9n8scs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+H82f8zi/7n8MYv/EvljFv/P549Z/JfMH7P4fyF/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvH/Yv6YxX/F/DGL/0r5Yxb/L+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5fzh+z+K+VP2bxXzt/zOK/Tv6YxX/d/LEhZ+y/0kQjz76t/dfLH7Os//Xzxyz+G+SPWfy/kj9m8d8wf8ziv1H+mMV/4/wxi/8mev8d8FqL/6Z6f87iv1n+mMX/q/ljFv/N88cs/lvkj1n8t8wfs/h/LX/M4r9V/pjF/+v5Yxb/rfPHLP7b5I9Z/LfNH7P4fyN/zOL/zfwxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP7fyh+z+H87f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+38kfs/h/N3/M4v+9/DGL/z75Yxb/ffPHLP7fzx+z+P8gf8ziv1/+mMX/h/ljFv/988cs/gfkj1n8D8wfs/j/KH/M4v/j/DGL/0/yxyz+B+WPWfwPzh+z+P80f8zi/7P8MYv/IfljFv9D88cs/oflj1n8f54/ZvH/Rf6Yxf/w/DGL/xH5Yxb/X+aPWfyPzB+z+P8qf8zif1T+mMX/1/ljFv/f5I9Z/I/OH7P4/zZ/zOL/u/wxi/8x+WMW/2Pzxyz+x+WPWfx/nz9m8T8+f8zif0L+mMX/xPwxi/8f8scs/n/MH7P4/yl/zOJ/Uv6Yxf/k/DGL/5/V/mO/7i0W/1PU/q+fxf/U/DGL/1/yxyz+p+WPWfz/mj9m8f9b/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX/7/ljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyT+QwaDHfOHJP4TXtH6xyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj0n8Jxrkj1n8h+SPWfzHyB+z+A/NH7P4D8sfs/iPmT9m8R8rf8ziP3b+mMV/eP6YxX+c/DGL///Hzv2Ha13Xdxy/+U0o6cc2dWnDoTHXZiQyGrUQFcXjj1Mmmvkb9QgkiPyQBFNxo5U6Nl3qZsmmlo45W7XU4eb6taJhWbM1YmuVU1wLY8zBQnPGrgPnEOfs7bk6X/b92nw/Hn/Aue/j+w55Xi/vm4vraoT+oSz999A/lKX/nvqHsvQfqX8oS/9X6h/K0n8v/UNZ+u+tfyhL/6J/KEv/ffQPZen/Kv1DWfr/jP6hLP1/Vv9Qlv776h/K0n8//UNZ+u+vfyhL/5/TP5Sl/6v1D2Xpf4D+oSz9D9Q/lKX/a/QPZen/8/qHsvQfpX8oS/+D9A9l6f8L+oey9B+tfyhL/4P1D2Xpf4j+oSz9X6t/KEv/MfqHsvT/Rf1DWfofqn8oS/9f0j+Upf/r9A9l6f/L+oey9P8V/UNZ+h+mfyhL/9frH8rSf6z+oSz936B/KEv/w/UPZek/Tv9Qlv5H6B/K0n+8/qEs/X9V/1CW/hP0D2Xp/0b9Q1n6/5r+oSz9J+ofytL/TfqHsvR/s/6hLP1/Xf9Qlv5v0T+Upf8k/UNZ+h+pfyhL/8n6h7L0P0r/UJb+R+sfytL/GP1DWfpP0T+Upf+x+oey9D9O/1CW/lP1D2Xpf7z+oSz92/QPZel/gv6hLP1P1D+Upf9J+oey9D9Z/1CW/u36h7L0f6v+oSz936Z/KEv/U/QPZen/dv1DWfqfqn8oS/9p+oey9D9N/1CW/qfrH8rS/x36h7L0P0P/UJb+79Q/lKX/mfqHsvQ/S/9Qlv5n6x/K0v8c/UNZ+p+rfyhL//P0D2Xpf77+oSz9p+sfytL/Av1DWfpfqH8oS/+L9A9l6d+hfyhL/4v1D2XpP0P/UJb+M/UPZek/S/9Qlv7v0j+Upf8l+oey9J+tfyhL/zn6h7L0v1T/UJb+c/UPZel/mf6hLP3n6R/K0n++/qEs/RfoH8rSf6H+oSz9L9c/lKX/Iv1DWfq/W/9Qlv5X6B/K0n+x/qEs/ZfoH8rS/0r9Q1n6v0f/UJb+V+kfytL/av1DWfpfo38oS/+l+oey9L9W/1CW/r+hfyhL/9/UP5Sl/zL9Q1n6v1f/UJb+v6V/KEv/9+kfytL//fqHsvS/Tv9Qlv7X6x/K0v8G/UNZ+v+2/qEs/ZfrH8rS/3f0D2Xp/7v6h7L0v1H/UJb+N+kfytL/9/QPZen/Af1DWfrfrH8oS/9b9A9l6X+r/qEs/X9f/1CW/n+gfyhL/9v0D2Xp/0H9Q1n6f0j/UJb+t+sfytJ/hf6hLP3/UP9Qlv5/pH8oS/879A9l6X+n/qEs/e/SP5Sl/4f1D2Xp/xH9Q1n63927/6iGf10/pbL0v8f+Q1n6/7H+oSz9V+ofytL/T/QPZel/r/6hLP3/VP9Qlv736R/K0v+j+oey9P8z/UNZ+n9M/1CW/h/XP5Sl/yf0D2Xp/+f6h7L0/6T+oSz979c/lKX/A/qHsvR/UP9Qlv5/oX8oS/9V+oey9H9I/1CW/n+pfyhL/7/SP5Sl/8P6h7L0/2v9Q1n6f0r/UJb+n9Y/lKX/Z/QPZen/Wf1DWfp/Tv9Qlv5/o38oS//P6x/K0v8L+oey9F+tfyhL/y/qH8rS/2/1D2Xpv0b/UJb+j+gfytL/S/qHsvT/sv6hLP0f1T+Upf9X9A9l6f9V/UNZ+v+d/qEs/R/TP5Sl/9f0D2Xp//f6h7L0/7r+oSz9/0H/UJb+a/UPZen/Df1DWfqv0z+Upf8/6h/K0v+f9A9l6f9N/UNZ+v+z/qEs/b+lfyhL/2/rH8rS/zv6h7L0f1z/UJb+/6J/KEv/J/QPZen/pP6hLP3X6x/K0v8p/UNZ+v+r/qEs/b+rfyhL/3/TP5Sl//f0D2Xpv0H/UJb+T+sfytL/+/qHsvTfqH8oS/9/1z+Upf8m/UNZ+v+H/qEs/Z/RP5Sl/3/qH8rSf7P+oSz9t+gfytL/v/QPZen/A/1DWfpv1T+Upf+z+oey9H9O/1CW/j/UP5Sl//P6h7L0/2/9Q1n6v6B/KEv/H+kfytJ/m/6hJP33bukfytJ/gP6hLP0H6h/K0n+Q/qEs/QfrH8rSf4j+oSz9h+ofytJ/mP6hLP2H6x/K0v8V+oey9B+hfyhL/z30D2Xpv6f+oSz9R+ofytL/lfqHsvTfS//Qy64/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAT5sFi5dcMn327I75vvCFL3yx84uX+r9MAADA/7Uff+h/qX8lAAAAAAAAAAAAAAAAAAAAkFcT/3diL/W/IwAAAAAAAAAAAAAA/H/X1n7UxkEDejw1aNcHr3m0Y/vP47eeMfPuux8s3T93ffvE4CUH7vpg27Zt21Y8M2lK18NhrVar839t767Hw3sfd77+0lG377/jUZn8+VsfP3fayJPmP3DT4G+suKH96SHbnx3SOv/iWbM73jCw1SrHDGld0fng8AGtVjluSOvGzgfjOh9MHdJa2fngiO0PXtH6TOeD1184d/ZFnU8cX/n3DF4u2tqXtgb1WGyrx38Ndt3/0lFPzOz+uY+X7H61wa2u/Y9+4Ev79fpetxfZf/frl6N677/f/4LAi+rf/p9b1/1zHy/5v97/P7xm65Loey++/+7XL0fbP9Qn+PzfY6O9P/f3+vx/UPCSO++PHL7m5s79t51274FdTw3+ST7///j1yzG99z+wx+f/zs/xU7o//w9rtcqxu/nbAam0tV+7sa/3/773P/jVvW4G7Lr/u76yfs/O/d/zfGtZ11ND+rn/KX29/1/X69cK9E9b+53ber3/92P/rTHBS+7c/4YHRm7//L/+vgv33eV7/dn/sb33P3bhnMvGLli85LBZc6bP6JjRcenEcRMOHz9x4oQJY7d/Itjx427+pkASu/f+3xrR62ZAq9Wx8371vTdM6dz/poeWfaTrqeH93P9xfb7/H+T9H0KjB7aGDm1dMX3hwvmH7/ix++G4HT/u+MeC/ffjz/8HH9r1j3X/neGAVmv/nfdjzp04rHP/V84rq7qeGtrP/U/tc/+Te/5dJdA/u/n+f1Gvmx77P3LD1Ys693/ID/ZZ3/VUf//8f3yf+7/D+z/sjrb2Vq1vop37P2LYtSdUuy5t/v4P6tPE/kdtvnFLtetygv1DfZrY/7Tlb76g2nU50f6hPk3s/8E55y2vdl1Osn+oTxP7f+FVWw6odl1Otn+oTxP7f+y7T91d7bq02z/Up4n9f/C29iOqXZe32j/Up4n9H3b5s5OqXZe32T/Up4n9X7zHqSurXZdT7B/q08T+T9h29L7Vrsvb7R/q08T+B1z7vaXVrsup9g/1aWL/T05fPrfadZlm/1CfJva/ctSY56pdl9PsH+rTxP6XPf3GqdWuy+n2D/VpYv9fveX2x6pdl3fYP9Snif1/4ux9bq92Xc6wf6hPE/v/4eiHRlS7Lu+0f6hPE/tfu3bl/dWuy5n2D/VpYv8rVg4aXe26nGX/UJ8m9n/N8TMerXZdzrZ/qE8T+x8/4ctnVbsu59g/1KeJ/e//uW89Ve26nGv/UJ8m9n/qw4sWVLsu59k/1KeJ/S864OM/qnZdzrd/qE8T+39LxwEzq12X6fYP9Wli/+WmEWurXZcL7B/q08T+z9x05+Rq1+VC+4f6NLH/VXt94WPVrstF9g/1aWL/m+ddOrHademwf6hPE/v/znuveV+163Kx/UN9mtj/zc9/vVS7LjPsH+rTxP43jDvz7GrXZab9Q32a2P+dJz3zSLXrMsv+oT5N7H/5qscXVrsu77J/qE8T+1+9+sQnql2XS+wf6tPE/g8ZM3Zkz2ef/Qmvy2z7h/o0sf+5Zyz7ULXrMsf+oT5N7P+Y+255bbXrcqn9Q32a2P/wr036ZLXrMtf+oT5N7P/Tk97/qWrX5TL7h/o0sf8tkw8+tNp1mWf/UJ8m9r/u/nG3Vrsu8+0f6tPE/j/wyG0Vr8sC+4f6NLH/ea97YVO167LQ/qE+Tez/TdNOX1ztulxu/1CfJva/7x1Tv1jtuiyyf6hPE/s/59vfP6XadXm3/UN9mtj/wftdcGC163KF/UN9mtj/zFlrrq92XRbbP9Snif1PWbFufLXrssT+oT5N7H+vJxfcVe26XGn/UJ8m9r9x0H4nV7su77F/qE8T+7/nqoe/We26XGX/UJ8m9n/9dR/tqHZdrrZ/qE8T+//s1qGbq12Xa+wfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UQvRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABHAQAA//96y+r8")
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000880)={0x0, 0x3, 0x0, 0xffffffff})
pipe2$watch_queue(0x0, 0x80)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)

2m28.55793397s ago: executing program 1 (id=499):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m28.18459121s ago: executing program 1 (id=503):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='+p', 0x2)
syz_mount_image$ocfs2(&(0x7f0000000340), &(0x7f0000004780)='./file0\x00', 0x100002a, &(0x7f0000000140)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d6974612c75737271756f74612c646174613d77726974656261636b2c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030302c696e6f646536342c0007773318a7bf944797a1ef0b63c3e1938c916726ed410b1843bffd52033749632f6f8b4f1535a120ae1d708991373b8aad0ea68b04ce45ceaacdf67ab7a8bbd38be60a9638889baadcc779edcd2000c5c89d709c859e9a1bfe2bf0fb74da655c33a1ada85e368121e1ed09e6b7516eb334f82af831bf7951ac772d2cd2d5a2b00508d4a2fa05bdc2ac99df43659467f8930a207e2a30669ba9035300a091f5597e6bddac7465c773b76c7518920732c5b728eac1661d47ba48127a097dd5db13c16ea4a3f4d15b5642a8d917f2a8e294397a7e34201577a99d41a2f1a84ce027556ef8ef01b84b13afad500b53cb7559ca8434bde5736f6c05075a4baaf68c161f2fc15de50f955c2d651a4154e63fc2c706458363dacc71cc5537747a5e45cba61f5c73b27ef48791920ad99dc8a2d6df4a3d0b26dd437d1b8f7bca6d2700"/427], 0x0, 0x4714, &(0x7f0000009780)="$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")
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2)
ioctl$NBD_CLEAR_SOCK(r1, 0xab04)

2m12.448310173s ago: executing program 32 (id=503):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='+p', 0x2)
syz_mount_image$ocfs2(&(0x7f0000000340), &(0x7f0000004780)='./file0\x00', 0x100002a, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/427], 0x0, 0x4714, &(0x7f0000009780)="$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")
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2)
ioctl$NBD_CLEAR_SOCK(r1, 0xab04)

8.070224613s ago: executing program 4 (id=915):
r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000100)='./sys\x00', 0x102)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
write(r2, &(0x7f00000000c0)='1\x00', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r3, &(0x7f00000001c0)='1\x00', 0x1)
fchdir(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
mount$fuse(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x80000, 0x0)

7.197945669s ago: executing program 4 (id=919):
r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)
mprotect(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x0)
syz_clone(0x668c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0)
ftruncate(r0, 0x0)

5.67402861s ago: executing program 2 (id=925):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0', 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0)
io_setup(0x1, &(0x7f0000000040))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}}, 0x0)

5.468909181s ago: executing program 0 (id=926):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

5.419547423s ago: executing program 2 (id=927):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==")
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2)
pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)

5.046859333s ago: executing program 2 (id=930):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f00000004c0)=""/99, 0x63, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r0, 0x0, 0x0)
write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000002440)={0x2, 0x0, {&(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg(r0, &(0x7f0000000c00)={0x1, {&(0x7f0000000940)=""/168, 0xa8, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48)

4.9115955s ago: executing program 4 (id=931):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f000500000000000000000000000000020000000000000005000200010000", 0x23}], 0x1}, 0x0)

4.839299554s ago: executing program 0 (id=932):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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")
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x14)
open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r2 = open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x4)
copy_file_range(r2, 0x0, r0, 0x0, 0x20000000008, 0x0)

4.686534952s ago: executing program 2 (id=934):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x4c810)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
fsopen(0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a0563000000000000010902"], 0x0)
write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2)

4.404701587s ago: executing program 4 (id=935):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x84, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x84}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000b00)={0x2, 0x5000, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

3.678198615s ago: executing program 4 (id=936):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.070017158s ago: executing program 4 (id=939):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='10', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='0', 0x1)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
write$UHID_INPUT(r1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x42000000)

2.374277144s ago: executing program 3 (id=942):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f00000004c0)=""/99, 0x63, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r0, &(0x7f00000007c0)={0x1, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000002440)={0x2, 0x0, {&(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg(r0, &(0x7f0000000c00)={0x1, {&(0x7f0000000940)=""/168, 0xa8, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48)

2.26891538s ago: executing program 0 (id=943):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="240000005f000500000000000000000000000000020000000000000005000200010000", 0x23}], 0x1}, 0x0)

2.248281991s ago: executing program 3 (id=944):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

2.08596945s ago: executing program 3 (id=945):
pipe(0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf25020000000800010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r3, &(0x7f0000000140)='1\n', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0)
write(r4, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
writev(r5, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="b5ae4164202bad", 0x7}, {&(0x7f0000000c40)="28f155dcb9497aec74", 0x9}], 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800)

1.105610551s ago: executing program 0 (id=946):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x2, 0x9800, 0x0, 0x4}}, 0x2e)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, 0x0)
write$ppp(r3, &(0x7f0000000700)="b068", 0x2)

1.083380392s ago: executing program 3 (id=947):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

930.057261ms ago: executing program 0 (id=948):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000700)='veno', 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendto$inet(r0, &(0x7f0000000240)="c9273f6a588e06d9965d", 0xa, 0x4044880, 0x0, 0x0)

873.307254ms ago: executing program 2 (id=949):
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000002580)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="f415eacf6f10b66ebc1e4c2c1212f670786ec8fc47e959021152fffe7993373cf12e7435104c66e74abc10bf9b8e9092742786095b01d38c6856e2e092c302b8d105ac05b01e1d406092b34b38fc72eedaaa0e7aae6b33ece8bcd506981320b3bcab0edb2b", @ANYRES64, @ANYRES64, @ANYRESOCT], 0x41, 0x5f12, &(0x7f000000c9c0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000000, 0x0, 0x0, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='dir0\x00')

699.315343ms ago: executing program 3 (id=950):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000000)='./file1\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
setpgid(r1, r1)
syz_read_part_table(0x5e3, &(0x7f0000001100)="$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")
getpgid(r1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)

343.222662ms ago: executing program 3 (id=951):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r0, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008844)
fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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")
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0xd00, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000180))
syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x1000)
r6 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1})
close_range(r6, 0xffffffffffffffff, 0x0)
io_uring_enter(r3, 0x7fffdfe, 0xb08b, 0xd, 0x0, 0x0)

202.571409ms ago: executing program 2 (id=952):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f00000004c0)=""/99, 0x63, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r0, &(0x7f00000007c0)={0x1, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000002440)={0x2, 0x0, {&(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg(r0, &(0x7f0000000c00)={0x1, {&(0x7f0000000940)=""/168, 0xa8, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48)

0s ago: executing program 0 (id=953):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd)
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0xff, 0x800, 0xffbffffffffffffb, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x7fe, 0x10000000}, 0x0, 0x0)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef)

kernel console output (not intermixed with test programs):

ect_data cause=failed comm="syz.1.298" name="report_desc" dev="configfs" ino=13872 res=0 errno=0
[  169.747157][ T6752] CIFS: Attempting to mount //127.0.0.1/share
[  169.763551][ T6752] CIFS: VFS: Error connecting to socket. Aborting operation.
[  169.772058][ T6752] CIFS: VFS: cifs_mount failed w/return code = -111
[  169.910027][ T6753] nbd0: detected capacity change from 0 to 63
[  170.370077][ T5817] airspy 3-1:0.0: usb_control_msg() failed -110 request 0f
[  170.572383][ T5087] block nbd0: Receive control failed (result -104)
[  170.593684][ T5817] airspy 3-1:0.0: Registered as swradio24
[  170.599558][ T5817] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  170.966037][ T6228] usb 3-1: USB disconnect, device number 6
[  171.080768][ T6769] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  171.561521][ T6773] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0
[  175.375573][   T28] audit: type=1800 audit(1789850327.874:40): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.309" name="report_length" dev="configfs" ino=12701 res=0 errno=0
[  175.440103][   T28] audit: type=1800 audit(1789850327.874:41): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.309" name="report_desc" dev="configfs" ino=12702 res=0 errno=0
[  175.698083][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'.
[  175.888387][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.312'.
[  175.992701][ T6818] CIFS: Attempting to mount //127.0.0.1/share
[  176.104185][ T6820] nbd1: detected capacity change from 0 to 63
[  176.855489][ T5087] block nbd1: Receive control failed (result -104)
[  177.050793][ T6818] CIFS: VFS: Error connecting to socket. Aborting operation.
[  177.080034][ T6818] CIFS: VFS: cifs_mount failed w/return code = -4
[  179.139825][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  179.265282][ T6830] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  179.956449][ T6843] loop1: detected capacity change from 0 to 1024
[  179.997367][ T6843] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  180.033201][ T6843] JBD2: no valid journal superblock found
[  180.060030][   T28] audit: type=1800 audit(1789850332.554:42): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.319" name="report_length" dev="configfs" ino=12745 res=0 errno=0
[  180.081779][ T6843] EXT4-fs (loop1): Could not load journal inode
[  180.117810][   T28] audit: type=1800 audit(1789850332.564:43): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.319" name="report_desc" dev="configfs" ino=12746 res=0 errno=0
[  181.151497][ T6857] overlayfs: failed to resolve './bus': -2
[  181.462550][ T6860] loop3: detected capacity change from 0 to 1024
[  181.518274][ T6860] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  181.558682][ T6860] JBD2: no valid journal superblock found
[  181.574968][ T6860] EXT4-fs (loop3): Could not load journal inode
[  181.627132][ T6314] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  181.959849][ T6228] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  182.146288][ T5840] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  182.162879][ T6228] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  182.184290][ T6228] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.202856][ T6228] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  182.213912][ T6228] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.233891][ T6228] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  182.247867][ T6228] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  182.257687][ T6228] usb 2-1: Product: syz
[  182.265855][ T6228] usb 2-1: Manufacturer: syz
[  182.286835][ T6228] cdc_wdm 2-1:1.0: skipping garbage
[  182.306056][ T6228] cdc_wdm 2-1:1.0: skipping garbage
[  182.317686][ T6228] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  182.328407][ T6228] cdc_wdm 2-1:1.0: Unknown control protocol
[  182.334521][ T5840] usb 3-1: Using ep0 maxpacket: 8
[  182.349873][ T5840] usb 3-1: config index 0 descriptor too short (expected 5924, got 36)
[  182.358558][ T5840] usb 3-1: config 250 has an invalid interface number: 228 but max is -1
[  182.377949][ T5840] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0
[  182.389750][ T5840] usb 3-1: config 250 has no interface number 0
[  182.396079][ T5840] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  182.409505][ T5840] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  182.421431][ T5840] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  182.435414][ T5840] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  182.447072][ T5840] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  182.459775][ T2176] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  182.468529][ T5840] usb 3-1: config 250 interface 228 has no altsetting 0
[  182.478390][ T5840] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  182.489080][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  182.501055][ T5840] usb 3-1: Product: syz
[  182.503699][ T5817] usb 2-1: USB disconnect, device number 4
[  182.505256][ T5840] usb 3-1: SerialNumber: syz
[  182.540090][ T5840] hub 3-1:250.228: bad descriptor, ignoring hub
[  182.546416][ T5840] hub: probe of 3-1:250.228 failed with error -5
[  182.659877][ T2176] usb 1-1: Using ep0 maxpacket: 8
[  182.678656][ T2176] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  182.690074][ T2176] usb 1-1: config 179 has no interface number 0
[  182.696390][ T2176] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  182.712333][ T2176] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  182.744167][ T2176] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  182.750153][ T5840] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  182.759011][ T2176] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  182.783729][ T2176] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  182.799257][ T2176] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  182.813485][ T2176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.844353][ T6878] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  183.091146][ T5817] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  183.242637][ T6883] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  183.601153][ T5817] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  183.884920][ T5817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  183.897434][ T2176] usb 3-1: USB disconnect, device number 7
[  184.323977][ T5817] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  184.475447][ T2176] usblp0: removed
[  184.687567][ T5817] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.781069][   T56] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6
[  186.150886][ T5817] usb 2-1: string descriptor 0 read error: -71
[  186.157382][ T5817] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  186.162837][ T5914] usb 1-1: USB disconnect, device number 4
[  186.166538][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  186.182068][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  186.234997][ T5914] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  186.349004][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  186.397731][ T5817] usb 2-1: can't set config #1, error -71
[  186.417789][   T28] audit: type=1800 audit(1789850338.914:44): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.329" name="report_length" dev="configfs" ino=12829 res=0 errno=0
[  186.440359][ T5817] usb 2-1: USB disconnect, device number 5
[  186.499006][   T28] audit: type=1800 audit(1789850338.914:45): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.329" name="report_desc" dev="configfs" ino=12830 res=0 errno=0
[  186.628224][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'.
[  186.709826][   T56] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  186.769096][ T6894] overlayfs: failed to resolve './bus': -2
[  186.826081][ T5817] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  186.900091][   T56] usb 3-1: Using ep0 maxpacket: 8
[  186.910263][   T56] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  186.928831][   T56] usb 3-1: config 0 has no interface number 0
[  186.938992][   T56] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  186.960224][   T56] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  186.979463][   T56] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  187.009875][   T56] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  187.029015][   T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.052142][ T5817] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  187.066643][   T56] usb 3-1: config 0 descriptor??
[  187.076851][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.088472][   T56] ldusb 3-1:0.55: Interrupt in endpoint not found
[  187.105084][ T5817] usb 2-1: Product: syz
[  187.121401][ T5817] usb 2-1: Manufacturer: syz
[  187.129759][ T5817] usb 2-1: SerialNumber: syz
[  187.137065][ T5817] usb 2-1: config 0 descriptor??
[  187.152976][ T5817] hub 2-1:0.0: bad descriptor, ignoring hub
[  187.159034][ T5817] hub: probe of 2-1:0.0 failed with error -5
[  187.406868][ T5817] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  187.433481][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  187.449259][ T5817] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  187.459469][ T5817] usb 2-1: media controller created
[  187.505596][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  187.579099][ T5817] DVB: Unable to find symbol dib7000p_attach()
[  187.587033][ T5817] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  187.690304][ T5817] rc_core: IR keymap rc-dib0700-rc5 not found
[  187.701372][ T5817] Registered IR keymap rc-empty
[  187.707693][ T5817] dvb-usb: could not initialize remote control.
[  187.716551][ T5817] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  187.735081][ T5817] usb 2-1: USB disconnect, device number 6
[  187.855733][ T6228] usb 3-1: USB disconnect, device number 8
[  189.831933][   T28] audit: type=1800 audit(1789850342.324:46): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.342" name="report_length" dev="configfs" ino=14301 res=0 errno=0
[  190.112845][   T28] audit: type=1800 audit(1789850342.434:47): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.342" name="report_desc" dev="configfs" ino=14302 res=0 errno=0
[  190.520708][ T5817] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  190.630072][ T5914] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  190.947556][ T5914] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  190.980909][ T5914] usb 4-1: config 0 has no interface number 0
[  191.005561][ T5914] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  191.024420][   T28] audit: type=1800 audit(1789850343.504:48): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.345" name=10 dev="sda1" ino=2044 res=0 errno=0
[  191.059004][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.079251][ T5914] usb 4-1: Product: syz
[  191.086336][ T5914] usb 4-1: Manufacturer: syz
[  191.096218][ T5914] usb 4-1: SerialNumber: syz
[  191.111044][ T5914] usb 4-1: config 0 descriptor??
[  191.133306][ T5914] usb 4-1: selecting invalid altsetting 1
[  191.144735][ T5914] dvb_ttusb_budget: ttusb_init_controller: error
[  191.167877][ T5914] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  191.299011][ T5914] DVB: Unable to find symbol stv0299_attach()
[  191.377890][ T5914] DVB: Unable to find symbol tda8083_attach()
[  191.397713][ T5914] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  191.424990][ T5914] usb 4-1: USB disconnect, device number 2
[  191.556418][ T6929] overlayfs: failed to resolve './bus': -2
[  191.923639][   T28] audit: type=1800 audit(1789850344.424:49): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.353" name="report_length" dev="configfs" ino=13005 res=0 errno=0
[  191.954937][   T28] audit: type=1800 audit(1789850344.424:50): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.353" name="report_desc" dev="configfs" ino=13006 res=0 errno=0
[  194.812533][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  194.819930][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  194.996595][ T6965] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.018905][ T6965] 8021q: adding VLAN 0 to HW filter on device team0
[  195.039131][ T6965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  195.529449][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'.
[  196.436728][ T6976] binfmt_misc: register: failed to install interpreter file ./cgroup
[  196.450596][ T6979] capability: warning: `syz.0.363' uses deprecated v2 capabilities in a way that may be insecure
[  196.939019][ T6974] overlayfs: failed to resolve './bus': -2
[  198.109656][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'.
[  199.314297][ T5841] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  199.570781][ T5841] usb 1-1: device descriptor read/64, error -71
[  199.950133][ T5841] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[  200.190456][ T5841] usb 1-1: device descriptor read/64, error -71
[  200.387867][ T5841] usb usb1-port1: attempt power cycle
[  200.911663][ T5841] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[  201.026090][ T5841] usb 1-1: device descriptor read/8, error -71
[  201.361656][ T5924] block nbd0: Possible stuck request ffff888022290000: control (read@0,4096B). Runtime 30 seconds
[  201.809812][ T5841] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[  201.885860][ T5841] usb 1-1: device descriptor read/8, error -71
[  202.030159][ T5841] usb usb1-port1: unable to enumerate USB device
[  202.288557][ T7026] syzkaller0: entered promiscuous mode
[  202.311869][ T7026] syzkaller0: entered allmulticast mode
[  202.761019][ T7023] overlayfs: failed to resolve './bus': -2
[  203.059836][ T5841] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  203.261596][ T5841] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  203.280162][ T5841] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  203.309907][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.344589][ T5841] as10x_usb: device has been detected
[  203.366534][ T5841] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  203.412253][ T5841] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  203.606295][ T5841] as10x_usb: error during firmware upload part1
[  203.620871][ T7040] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  203.927701][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'.
[  206.483609][ T5841] Registered device Abilis Systems DVB-Titan
[  206.858780][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[  206.871075][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  206.872146][ T5786] Bluetooth: hci3: command 0x0406 tx timeout
[  206.877089][   T51] Bluetooth: hci2: command 0x0401 tx timeout
[  206.955451][ T6228] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  207.153027][ T6228] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  207.164388][ T6228] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  207.174670][ T6228] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  207.184635][ T6228] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  207.194240][ T6228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.235672][ T6228] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  207.339843][   T97] block nbd1: Possible stuck request ffff888022370000: control (read@0,4096B). Runtime 30 seconds
[  207.464859][   T56] usb 3-1: USB disconnect, device number 9
[  207.506176][ T6228] snd-usb-audio: probe of 1-1:27.0 failed with error -12
[  207.526539][   T56] Unregistered device Abilis Systems DVB-Titan
[  207.595858][   T56] as10x_usb: device has been disconnected
[  208.093810][ T7057] netlink: 48 bytes leftover after parsing attributes in process `syz.0.389'.
[  208.162595][   T56] usb 1-1: USB disconnect, device number 9
[  208.162647][ T7060] bridge_slave_0: left allmulticast mode
[  208.193804][ T7060] bridge_slave_0: left promiscuous mode
[  208.217625][ T7060] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.719216][ T7060] bridge_slave_1: left allmulticast mode
[  208.724969][ T7060] bridge_slave_1: left promiscuous mode
[  208.734718][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.746828][ T7060] bond0: (slave bond_slave_0): Releasing backup interface
[  208.783623][ T7060] bond0: (slave bond_slave_1): Releasing backup interface
[  208.880688][ T7060] team0: Port device team_slave_0 removed
[  208.905027][ T7060] team0: Port device team_slave_1 removed
[  208.924283][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.942802][ T7060] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.952934][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.960669][ T7060] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.102160][ T7064] overlayfs: failed to resolve './bus': -2
[  209.157005][ T7073] loop2: detected capacity change from 0 to 512
[  211.192377][ T7088] loop1: detected capacity change from 0 to 32768
[  211.453391][ T7110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  211.760533][ T7103] overlayfs: failed to resolve './bus': -2
[  213.232439][ T7136] CIFS: Attempting to mount //127.0.0.1/share
[  213.247117][ T7136] CIFS: VFS: Error connecting to socket. Aborting operation.
[  213.255365][ T7136] CIFS: VFS: cifs_mount failed w/return code = -111
[  213.572645][ T7141] loop1: detected capacity change from 0 to 4096
[  213.621346][ T7141] ntfs3: loop1: Failed to load $MFT (-22).
[  213.698763][ T7141] netlink: 'syz.1.417': attribute type 10 has an invalid length.
[  213.719519][ T7144] loop3: detected capacity change from 0 to 512
[  213.744283][ T7141] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.752349][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.800994][ T7144] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  213.806433][ T7148] loop1: detected capacity change from 0 to 128
[  213.809112][ T7144] System zones: 
[  213.848374][ T7141] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.859408][ T7141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.861517][ T7144] 1-12
[  213.866999][ T7141] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.876794][ T7141] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.915994][ T7144] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.420: missing EA_INODE flag
[  213.960863][ T7148] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  213.988434][ T7144] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.420: error while reading EA inode 12 err=-117
[  214.027211][ T6886] udevd[6886]: incorrect ext4 checksum on /dev/loop1
[  214.032148][ T7141] 
: (slave bridge0): Enslaving as an active interface with an up link
[  214.034397][ T7144] EXT4-fs (loop3): 1 orphan inode deleted
[  214.086038][ T7144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.196126][   T28] audit: type=1800 audit(1789850366.684:51): pid=7153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.423" name="report_length" dev="configfs" ino=15034 res=0 errno=0
[  214.277915][   T28] audit: type=1800 audit(1789850366.694:52): pid=7153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.423" name="report_desc" dev="configfs" ino=15035 res=0 errno=0
[  215.030529][ T7161] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  215.178128][ T7150] overlayfs: failed to resolve './bus': -2
[  215.865626][ T7169] loop2: detected capacity change from 0 to 256
[  215.914462][ T7169] exfat: Unknown parameter 'zero_size_dir'
[  216.504271][ T7171] loop2: detected capacity change from 0 to 4096
[  216.556697][ T7171] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  216.568514][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.690536][ T7171] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  216.787355][ T7171] ntfs3: loop2: Failed to load $Extend (-2).
[  216.805178][ T7167] loop1: detected capacity change from 0 to 32768
[  216.809819][ T7171] ntfs3: loop2: Failed to initialize $Extend.
[  216.835801][ T7167] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.427 (7167)
[  216.939520][ T7167] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  216.969628][ T7167] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  217.016591][ T7167] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  217.061105][ T7167] BTRFS info (device loop1): use zstd compression, level 3
[  217.068441][ T7167] BTRFS info (device loop1): using free space tree
[  217.183639][   T28] audit: type=1800 audit(1789850369.674:53): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.434" name="report_length" dev="configfs" ino=15901 res=0 errno=0
[  217.277572][   T28] audit: type=1800 audit(1789850369.704:54): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.434" name="report_desc" dev="configfs" ino=15902 res=0 errno=0
[  217.329661][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'.
[  217.393688][ T7167] BTRFS info (device loop1): enabling ssd optimizations
[  217.426293][ T7167] BTRFS info (device loop1): auto enabling async discard
[  217.605892][   T28] audit: type=1800 audit(1789850370.074:55): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.427" name="bus" dev="loop1" ino=263 res=0 errno=0
[  217.626093][    C1] vkms_vblank_simulate: vblank timer overrun
[  217.690900][   T28] audit: type=1800 audit(1789850370.104:56): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.427" name="bus" dev="loop1" ino=263 res=0 errno=0
[  217.711094][    C1] vkms_vblank_simulate: vblank timer overrun
[  218.023803][ T7193] overlayfs: failed to resolve './bus': -2
[  218.242694][ T5774] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  218.668585][   T28] audit: type=1800 audit(1789850371.164:57): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.446" name="report_length" dev="configfs" ino=15938 res=0 errno=0
[  218.759915][   T28] audit: type=1800 audit(1789850371.204:58): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.446" name="report_desc" dev="configfs" ino=15939 res=0 errno=0
[  219.293387][ T7238] FAULT_INJECTION: forcing a failure.
[  219.293387][ T7238] name failslab, interval 1, probability 0, space 0, times 0
[  219.329844][ T7238] CPU: 1 PID: 7238 Comm: syz.1.452 Not tainted syzkaller #0
[  219.337202][ T7238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  219.347306][ T7238] Call Trace:
[  219.350617][ T7238]  <TASK>
[  219.353581][ T7238]  dump_stack_lvl+0x18c/0x250
[  219.358320][ T7238]  ? show_regs_print_info+0x20/0x20
[  219.363565][ T7238]  ? load_image+0x420/0x420
[  219.368106][ T7238]  ? __might_sleep+0xe0/0xe0
[  219.369261][ T7231] syz.3.449 (7231) used greatest stack depth: 19256 bytes left
[  219.372711][ T7238]  ? __lock_acquire+0x7d80/0x7d80
[  219.372776][ T7238]  should_fail_ex+0x394/0x4c0
[  219.390079][ T7238]  should_failslab+0x9/0x20
[  219.394630][ T7238]  slab_pre_alloc_hook+0x59/0x300
[  219.399698][ T7238]  ? kvmalloc_node+0x70/0x180
[  219.404419][ T7238]  ? kvmalloc_node+0x70/0x180
[  219.409132][ T7238]  __kmem_cache_alloc_node+0x53/0x250
[  219.414556][ T7238]  ? kvmalloc_node+0x70/0x180
[  219.419276][ T7238]  __kmalloc_node+0xa6/0x240
[  219.424170][ T7238]  ? xt_replace_table+0x90/0x750
[  219.429154][ T7238]  kvmalloc_node+0x70/0x180
[  219.433705][ T7238]  xt_replace_table+0x185/0x750
[  219.438605][ T7238]  xt_register_table+0x1e8/0x560
[  219.443592][ T7238]  ipt_register_table+0x164/0x7b0
[  219.448663][ T7238]  ? trace_packet+0x4a0/0x4a0
[  219.453387][ T7238]  ? ipt_alloc_initial_table+0x4ff/0x610
[  219.459064][ T7238]  iptable_nat_table_init+0x43/0x2d0
[  219.464393][ T7238]  xt_find_table_lock+0x304/0x3e0
[  219.469456][ T7238]  xt_request_find_table_lock+0x26/0x100
[  219.475127][ T7238]  do_ipt_get_ctl+0x71a/0x1210
[  219.479952][ T7238]  ? do_ipt_set_ctl+0xe00/0xe00
[  219.484873][ T7238]  ? __lock_acquire+0x7d80/0x7d80
[  219.489938][ T7238]  ? rcu_is_watching+0x15/0xb0
[  219.494744][ T7238]  ? trace_contention_end+0x39/0xe0
[  219.499976][ T7238]  ? __mutex_lock+0x30d/0xc80
[  219.504688][ T7238]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  219.510356][ T7238]  ? mutex_unlock+0x10/0x10
[  219.514898][ T7238]  ? __might_fault+0xaa/0x120
[  219.519613][ T7238]  ? __lock_acquire+0x7d80/0x7d80
[  219.524686][ T7238]  nf_getsockopt+0x262/0x280
[  219.529322][ T7238]  ip_getsockopt+0x19f/0x230
[  219.533961][ T7238]  ? ip_get_mcast_msfilter+0x360/0x360
[  219.539461][ T7238]  ? __might_fault+0xaa/0x120
[  219.544172][ T7238]  ? __might_fault+0xc6/0x120
[  219.548880][ T7238]  ? __might_fault+0xaa/0x120
[  219.553587][ T7238]  ? sctp_getsockopt+0x9b/0xb60
[  219.558478][ T7238]  ? sock_recv_errqueue+0x5e0/0x5e0
[  219.563714][ T7238]  do_sock_getsockopt+0x379/0x450
[  219.568783][ T7238]  ? __ia32_sys_setsockopt+0x200/0x200
[  219.574279][ T7238]  ? warn_bogus_irq_restore+0x20/0x30
[  219.579695][ T7238]  __x64_sys_getsockopt+0x1d6/0x280
[  219.584939][ T7238]  ? warn_bogus_irq_restore+0x20/0x30
[  219.590362][ T7238]  ? warn_bogus_irq_restore+0x20/0x30
[  219.595772][ T7238]  do_syscall_64+0x55/0xb0
[  219.600247][ T7238]  ? clear_bhb_loop+0x40/0x90
[  219.604967][ T7238]  ? clear_bhb_loop+0x40/0x90
[  219.609772][ T7238]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  219.615717][ T7238] RIP: 0033:0x7fbea279e159
[  219.620337][ T7238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.639985][ T7238] RSP: 002b:00007fbea3621028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  219.648440][ T7238] RAX: ffffffffffffffda RBX: 00007fbea2a25fa0 RCX: 00007fbea279e159
[  219.656451][ T7238] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004
[  219.664459][ T7238] RBP: 00007fbea283506b R08: 00002000000000c0 R09: 0000000000000000
[  219.672473][ T7238] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  219.680486][ T7238] R13: 00007fbea2a26038 R14: 00007fbea2a25fa0 R15: 00007fffd2fd7be8
[  219.688543][ T7238]  </TASK>
[  220.118195][ T7236] loop2: detected capacity change from 0 to 32768
[  220.140163][ T7236] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.451 (7236)
[  220.209938][ T7236] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  220.250808][ T7236] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  220.304190][ T7236] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  220.329808][ T7236] BTRFS info (device loop2): use zstd compression, level 3
[  220.349828][ T7236] BTRFS info (device loop2): using free space tree
[  220.516458][ T7236] BTRFS info (device loop2): enabling ssd optimizations
[  220.549965][ T7236] BTRFS info (device loop2): auto enabling async discard
[  220.571684][ T7211] CacheFiles: Failed to register: -95
[  220.584672][ T7241] overlayfs: failed to resolve './bus': -2
[  220.955826][ T5778] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  222.373464][ T7286] loop3: detected capacity change from 0 to 32768
[  222.425172][ T7293] FAULT_INJECTION: forcing a failure.
[  222.425172][ T7293] name failslab, interval 1, probability 0, space 0, times 0
[  222.462628][ T7286] JBD2: Ignoring recovery information on journal
[  222.470621][ T7293] CPU: 1 PID: 7293 Comm: syz.2.466 Not tainted syzkaller #0
[  222.477967][ T7293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  222.488059][ T7293] Call Trace:
[  222.491373][ T7293]  <TASK>
[  222.494335][ T7293]  dump_stack_lvl+0x18c/0x250
[  222.499063][ T7293]  ? show_regs_print_info+0x20/0x20
[  222.504308][ T7293]  ? load_image+0x420/0x420
[  222.508861][ T7293]  ? __might_sleep+0xe0/0xe0
[  222.513495][ T7293]  ? __lock_acquire+0x7d80/0x7d80
[  222.518561][ T7293]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  222.524584][ T7293]  should_fail_ex+0x394/0x4c0
[  222.529311][ T7293]  should_failslab+0x9/0x20
[  222.533856][ T7293]  slab_pre_alloc_hook+0x59/0x300
[  222.538939][ T7293]  ? lockdep_hardirqs_on+0x98/0x150
[  222.544180][ T7293]  kmem_cache_alloc+0x5a/0x2c0
[  222.548977][ T7293]  ? taskstats_exit+0x14d/0xce0
[  222.553831][ T7293]  taskstats_exit+0x14d/0xce0
[  222.558693][ T7293]  ? sysctl_delayacct+0x220/0x220
[  222.563718][ T7293]  ? rcu_read_lock_any_held+0xb4/0x140
[  222.569183][ T7293]  ? rcu_read_lock_bh_held+0x100/0x100
[  222.574661][ T7293]  do_exit+0x8fc/0x2530
[  222.578831][ T7293]  ? put_task_struct+0xc0/0xc0
[  222.583617][ T7293]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  222.589641][ T7293]  ? get_signal+0x100e/0x1390
[  222.594351][ T7293]  ? lock_chain_count+0x20/0x20
[  222.599240][ T7293]  ? _raw_spin_lock_irq+0xbb/0xf0
[  222.604309][ T7293]  do_group_exit+0x22d/0x2f0
[  222.608934][ T7293]  ? lockdep_hardirqs_on+0x98/0x150
[  222.614171][ T7293]  get_signal+0x12a6/0x1390
[  222.618734][ T7293]  arch_do_signal_or_restart+0xc2/0x7b0
[  222.624344][ T7293]  ? __ia32_sys_get_robust_list+0x110/0x110
[  222.630271][ T7293]  ? slab_free_freelist_hook+0x130/0x1a0
[  222.635944][ T7293]  ? get_sigframe_size+0x20/0x20
[  222.640944][ T7293]  ? exit_to_user_mode_loop+0x3b/0x110
[  222.646454][ T7293]  exit_to_user_mode_loop+0x70/0x110
[  222.651787][ T7293]  exit_to_user_mode_prepare+0xee/0x180
[  222.657379][ T7293]  syscall_exit_to_user_mode+0x1a/0x50
[  222.662877][ T7293]  do_syscall_64+0x61/0xb0
[  222.667331][ T7293]  ? clear_bhb_loop+0x40/0x90
[  222.672052][ T7293]  ? clear_bhb_loop+0x40/0x90
[  222.676782][ T7293]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  222.682719][ T7293] RIP: 0033:0x7fb1bff9e159
[  222.687180][ T7293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.707441][ T7293] RSP: 002b:00007fb1c0d9b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  222.715911][ T7293] RAX: fffffffffffffe00 RBX: 00007fb1c0225fa8 RCX: 00007fb1bff9e159
[  222.723932][ T7293] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb1c0225fa8
[  222.731949][ T7293] RBP: 00007fb1c0225fa0 R08: 0000000000000000 R09: 0000000000000000
[  222.739960][ T7293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.747967][ T7293] R13: 00007fb1c0226038 R14: 00007ffe6bb77cf0 R15: 00007ffe6bb77dd8
[  222.755986][ T7293]  </TASK>
[  222.784971][ T7286] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  222.897400][ T7295] overlayfs: failed to resolve './bus': -2
[  223.348321][   T28] audit: type=1804 audit(1789850375.844:59): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.462" name="/newroot/123/file1/file1" dev="loop3" ino=17059 res=1 errno=0
[  223.748334][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.756093][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.794435][ T7316] bridge0: entered allmulticast mode
[  223.841706][ T7318] bridge_slave_1: left allmulticast mode
[  223.856787][ T7318] bridge_slave_1: left promiscuous mode
[  223.878856][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.942955][ T7318] bridge_slave_0: left allmulticast mode
[  223.966973][ T7318] bridge_slave_0: left promiscuous mode
[  223.991635][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.561503][ T7319] loop1: detected capacity change from 0 to 32768
[  224.580488][ T7319] (syz.1.473,7319,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear
[  224.580488][ T7319] " or missing value
[  224.614688][ T7319] (syz.1.473,7319,1):ocfs2_fill_super:1178 ERROR: status = -22
[  225.443014][ T7336] bridge0: port 1(syz_tun) entered blocking state
[  225.470205][ T7336] bridge0: port 1(syz_tun) entered disabled state
[  225.511840][ T7336] syz_tun: entered allmulticast mode
[  225.536496][ T7336] syz_tun: entered promiscuous mode
[  225.566025][ T7336] bridge0: port 1(syz_tun) entered blocking state
[  225.572696][ T7336] bridge0: port 1(syz_tun) entered forwarding state
[  225.642321][ T7339] overlayfs: failed to resolve './bus': -2
[  225.987934][ T7342] loop2: detected capacity change from 0 to 4096
[  226.101313][ T5787] ocfs2: Unmounting device (7,3) on (node local)
[  226.391691][ T7348] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  228.342939][ T7331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  228.950300][   T12] net_ratelimit: 27 callbacks suppressed
[  230.143538][ T7350] loop3: detected capacity change from 0 to 4096
[  230.182916][ T7353] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  230.221371][ T7353] bond1 (unregistering): Released all slaves
[  230.632809][ T7359] loop1: detected capacity change from 0 to 4096
[  230.765751][ T7362] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  230.887987][ T7355] loop2: detected capacity change from 0 to 32768
[  230.912852][ T7355] (syz.2.486,7355,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear
[  230.912852][ T7355] " or missing value
[  230.929987][   T28] audit: type=1800 audit(1789850383.414:60): pid=7359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.488" name="bus" dev="loop1" ino=18 res=0 errno=0
[  230.959758][ T7355] (syz.2.486,7355,0):ocfs2_fill_super:1178 ERROR: status = -22
[  231.651718][   T97] block nbd0: Possible stuck request ffff888022290000: control (read@0,4096B). Runtime 60 seconds
[  231.910762][ T7367] overlayfs: failed to resolve './bus': -2
[  232.448242][ T7384] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  234.129854][    C1] net_ratelimit: 21 callbacks suppressed
[  235.296273][ T7389] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9)
[  236.491787][ T7391] loop3: detected capacity change from 0 to 40427
[  236.498484][ T7395] loop2: detected capacity change from 0 to 40427
[  236.537538][ T7391] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  236.556520][ T7395] F2FS-fs (loop2): invalid crc value
[  236.562385][ T7391] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  236.594447][ T7391] F2FS-fs (loop3): build fault injection attr: rate: 6, type: 0x7ffff
[  236.618996][ T7391] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7
[  236.638697][ T7400] loop1: detected capacity change from 0 to 32768
[  236.646143][ T7395] F2FS-fs (loop2): Found nat_bits in checkpoint
[  236.654478][ T7391] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x188/0x5d0
[  236.706124][ T7391] F2FS-fs (loop3): invalid crc value
[  236.735078][ T7391] F2FS-fs (loop3): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x44ea/0x6b60
[  236.761869][ T7391] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12)
[  236.869029][ T7395] F2FS-fs (loop2): Start checkpoint disabled!
[  236.967750][ T7395] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  237.093315][   T28] audit: type=1800 audit(1789850389.584:61): pid=7395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.501" name="file1" dev="loop2" ino=10 res=0 errno=0
[  237.149375][ T7395] syz.2.501: attempt to access beyond end of device
[  237.149375][ T7395] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  237.225488][ T7395] syz.2.501: attempt to access beyond end of device
[  237.225488][ T7395] loop2: rw=2049, sector=45224, nr_sectors = 128 limit=40427
[  237.351912][ T7395] syz.2.501: attempt to access beyond end of device
[  237.351912][ T7395] loop2: rw=2049, sector=45352, nr_sectors = 128 limit=40427
[  237.429967][   T97] block nbd1: Possible stuck request ffff888022370000: control (read@0,4096B). Runtime 60 seconds
[  237.434542][ T7395] syz.2.501: attempt to access beyond end of device
[  237.434542][ T7395] loop2: rw=2049, sector=45480, nr_sectors = 128 limit=40427
[  237.538943][ T7395] syz.2.501: attempt to access beyond end of device
[  237.538943][ T7395] loop2: rw=2049, sector=45608, nr_sectors = 128 limit=40427
[  237.589050][ T7395] syz.2.501: attempt to access beyond end of device
[  237.589050][ T7395] loop2: rw=2049, sector=45736, nr_sectors = 128 limit=40427
[  237.633802][ T7395] syz.2.501: attempt to access beyond end of device
[  237.633802][ T7395] loop2: rw=2049, sector=45864, nr_sectors = 128 limit=40427
[  237.654694][ T7395] syz.2.501: attempt to access beyond end of device
[  237.654694][ T7395] loop2: rw=2049, sector=45992, nr_sectors = 128 limit=40427
[  237.674602][ T7395] syz.2.501: attempt to access beyond end of device
[  237.674602][ T7395] loop2: rw=2049, sector=46120, nr_sectors = 128 limit=40427
[  237.724652][ T7395] syz.2.501: attempt to access beyond end of device
[  237.724652][ T7395] loop2: rw=2049, sector=46248, nr_sectors = 128 limit=40427
[  237.752820][ T7406] overlayfs: failed to resolve './bus': -2
[  238.512665][ T7417] loop3: detected capacity change from 0 to 32768
[  238.729652][ T7417] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.507 (7417)
[  239.329791][    C0] net_ratelimit: 30 callbacks suppressed
[  241.650768][ T1088] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  241.690245][ T1088] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  242.469425][ T7435] block device autoloading is deprecated and will be removed.
[  242.491254][ T7435] md: loop0 has zero or unknown size, marking faulty!
[  242.510103][ T7435] md: error, md_import_device() returned -22
[  242.518263][ T7427] FAULT_INJECTION: forcing a failure.
[  242.518263][ T7427] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  242.539029][ T7427] CPU: 0 PID: 7427 Comm: syz.0.511 Not tainted syzkaller #0
[  242.546388][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  242.556457][ T7427] Call Trace:
[  242.559937][ T7427]  <TASK>
[  242.562901][ T7427]  dump_stack_lvl+0x18c/0x250
[  242.567630][ T7427]  ? show_regs_print_info+0x20/0x20
[  242.572853][ T7427]  ? load_image+0x420/0x420
[  242.577405][ T7427]  ? __lock_acquire+0x7d80/0x7d80
[  242.582482][ T7427]  should_fail_ex+0x394/0x4c0
[  242.587216][ T7427]  prepare_alloc_pages+0x1e1/0x5b0
[  242.592374][ T7427]  __alloc_pages+0x134/0x460
[  242.597005][ T7427]  ? zone_statistics+0x170/0x170
[  242.602005][ T7427]  __folio_alloc+0x10/0x20
[  242.606461][ T7427]  vma_alloc_folio+0x474/0x8f0
[  242.611266][ T7427]  ? mpol_shared_policy_lookup+0x14b/0x1e0
[  242.617141][ T7427]  shmem_alloc_folio+0x1a9/0x2a0
[  242.622138][ T7427]  ? folio_put+0xd0/0xd0
[  242.626452][ T7427]  ? __vm_enough_memory+0x11a/0x370
[  242.631702][ T7427]  ? shmem_inode_acct_block+0x35e/0x460
[  242.637293][ T7427]  shmem_alloc_and_acct_folio+0x1cb/0x6c0
[  242.643065][ T7427]  ? put_swap_device+0x230/0x230
[  242.648028][ T7427]  ? filemap_get_entry+0xce/0x3f0
[  242.653076][ T7427]  ? xas_load+0x11d/0x140
[  242.653102][ T7427]  ? filemap_get_entry+0xce/0x3f0
[  242.653123][ T7427]  ? filemap_get_entry+0xce/0x3f0
[  242.653146][ T7427]  ? filemap_get_entry+0x375/0x3f0
[  242.653173][ T7427]  ? page_cache_prev_miss+0x390/0x390
[  242.662759][ T7427]  shmem_get_folio_gfp+0xe1d/0x2b40
[  242.662820][ T7427]  shmem_write_begin+0xf2/0x430
[  242.662855][ T7427]  generic_perform_write+0x2fe/0x5c0
[  242.672996][ T7427]  ? generic_file_direct_write+0x3e0/0x3e0
[  242.673023][ T7427]  ? down_write+0x16e/0x200
[  242.673055][ T7427]  ? file_update_time+0x98/0x1a0
[  242.683866][ T7427]  shmem_file_write_iter+0xfb/0x120
[  242.683909][ T7427]  vfs_write+0x474/0x9a0
[  242.683948][ T7427]  ? file_end_write+0x250/0x250
[  242.694057][ T7427]  ? __fget_files+0x3fc/0x460
[  242.694097][ T7427]  ? __fdget+0x180/0x210
[  242.704492][ T7427]  ? __x64_sys_pwrite64+0xf7/0x220
[  242.737987][ T7427]  __x64_sys_pwrite64+0x198/0x220
[  242.743057][ T7427]  ? ksys_pwrite64+0x1c0/0x1c0
[  242.747855][ T7427]  ? lockdep_hardirqs_on+0x98/0x150
[  242.747896][ T7427]  do_syscall_64+0x55/0xb0
[  242.747924][ T7427]  ? clear_bhb_loop+0x40/0x90
[  242.757539][ T7427]  ? clear_bhb_loop+0x40/0x90
[  242.766893][ T7427]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  242.766925][ T7427] RIP: 0033:0x7f77b699e159
[  242.777244][ T7427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  242.777266][ T7427] RSP: 002b:00007f77b7897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  242.805334][ T7427] RAX: ffffffffffffffda RBX: 00007f77b6c25fa0 RCX: 00007f77b699e159
[  242.805355][ T7427] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003
[  242.805370][ T7427] RBP: 00007f77b6a3506b R08: 0000000000000000 R09: 0000000000000000
[  242.805384][ T7427] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000
[  242.805399][ T7427] R13: 00007f77b6c26038 R14: 00007f77b6c25fa0 R15: 00007ffde78cc118
[  242.821391][ T7427]  </TASK>
[  243.439029][ T7439] overlayfs: failed to resolve './bus': -2
[  243.639286][ T7441] loop0: detected capacity change from 0 to 32768
[  243.665703][ T7441] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.517 (7441)
[  243.715072][ T7441] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  243.740126][ T7441] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  243.748946][ T7441] BTRFS info (device loop0): disabling tree log
[  243.781001][ T7441] BTRFS info (device loop0): using free space tree
[  243.804951][ T7446] loop2: detected capacity change from 0 to 64
[  243.923359][ T7441] BTRFS info (device loop0): enabling ssd optimizations
[  243.949841][ T7441] BTRFS info (device loop0): auto enabling async discard
[  244.449796][    C0] net_ratelimit: 27 callbacks suppressed
[  247.405470][ T5779] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  247.467618][ T7470] SET target dimension over the limit!
[  247.982962][ T7477] FAULT_INJECTION: forcing a failure.
[  247.982962][ T7477] name failslab, interval 1, probability 0, space 0, times 0
[  247.996287][ T7477] CPU: 1 PID: 7477 Comm: syz.0.521 Not tainted syzkaller #0
[  248.003625][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  248.013731][ T7477] Call Trace:
[  248.017045][ T7477]  <TASK>
[  248.020015][ T7477]  dump_stack_lvl+0x18c/0x250
[  248.024745][ T7477]  ? show_regs_print_info+0x20/0x20
[  248.030006][ T7477]  ? load_image+0x420/0x420
[  248.034569][ T7477]  ? __might_sleep+0xe0/0xe0
[  248.039214][ T7477]  ? __lock_acquire+0x7d80/0x7d80
[  248.044290][ T7477]  should_fail_ex+0x394/0x4c0
[  248.049023][ T7477]  should_failslab+0x9/0x20
[  248.053575][ T7477]  slab_pre_alloc_hook+0x59/0x300
[  248.058665][ T7477]  kmem_cache_alloc+0x5a/0x2c0
[  248.063482][ T7477]  ? __kernfs_new_node+0xe5/0x7f0
[  248.068560][ T7477]  __kernfs_new_node+0xe5/0x7f0
[  248.073473][ T7477]  ? kernfs_new_node+0x260/0x260
[  248.078454][ T7477]  ? up_write+0x1be/0x410
[  248.082806][ T7477]  kernfs_new_node+0x14c/0x260
[  248.087593][ T7477]  __kernfs_create_file+0x4b/0x2e0
[  248.092808][ T7477]  sysfs_add_file_mode_ns+0x237/0x2f0
[  248.098228][ T7477]  internal_create_group+0x431/0xd10
[  248.103553][ T7477]  ? kernfs_add_one+0x149/0x6b0
[  248.108458][ T7477]  ? sysfs_create_group+0x20/0x20
[  248.113518][ T7477]  ? up_write+0x1be/0x410
[  248.117875][ T7477]  sysfs_create_groups+0x59/0x120
[  248.122958][ T7477]  device_add_attrs+0xdf/0x830
[  248.127744][ T7477]  ? device_add_class_symlinks+0x240/0x240
[  248.133570][ T7477]  ? device_add_class_symlinks+0x21f/0x240
[  248.139479][ T7477]  device_add+0x51a/0xc40
[  248.143832][ T7477]  netdev_register_kobject+0x188/0x320
[  248.149337][ T7477]  register_netdevice+0x12aa/0x1ba0
[  248.154568][ T7477]  ? netif_stacked_transfer_operstate+0x210/0x210
[  248.161000][ T7477]  ? __local_bh_enable_ip+0x13a/0x1c0
[  248.166389][ T7477]  ? lockdep_hardirqs_on+0x98/0x150
[  248.171629][ T7477]  ? __local_bh_enable_ip+0x13a/0x1c0
[  248.177016][ T7477]  ? _local_bh_enable+0xa0/0xa0
[  248.181882][ T7477]  ? slip_open+0xb50/0xe50
[  248.186315][ T7477]  ? rcu_is_watching+0x15/0xb0
[  248.191100][ T7477]  slip_open+0xbb2/0xe50
[  248.195357][ T7477]  ? tty_set_termios_ldisc+0x4f/0xc0
[  248.200666][ T7477]  ? pptp_ppp_ioctl+0x170/0x170
[  248.205534][ T7477]  ? up_write+0x1be/0x410
[  248.209873][ T7477]  tty_ldisc_open+0x9d/0x100
[  248.209937][ T7477]  tty_set_ldisc+0x356/0x530
[  248.209962][ T7477]  tty_ioctl+0xc22/0xdc0
[  248.223584][ T7477]  ? tty_get_icount+0xb0/0xb0
[  248.228278][ T7477]  __se_sys_ioctl+0xfd/0x170
[  248.232907][ T7477]  do_syscall_64+0x55/0xb0
[  248.237342][ T7477]  ? clear_bhb_loop+0x40/0x90
[  248.242034][ T7477]  ? clear_bhb_loop+0x40/0x90
[  248.246728][ T7477]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  248.252639][ T7477] RIP: 0033:0x7f77b699e159
[  248.257068][ T7477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  248.276693][ T7477] RSP: 002b:00007f77b7897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  248.285124][ T7477] RAX: ffffffffffffffda RBX: 00007f77b6c25fa0 RCX: 00007f77b699e159
[  248.293106][ T7477] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000003
[  248.301087][ T7477] RBP: 00007f77b6a3506b R08: 0000000000000000 R09: 0000000000000000
[  248.309072][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  248.317057][ T7477] R13: 00007f77b6c26038 R14: 00007f77b6c25fa0 R15: 00007ffde78cc118
[  248.325058][ T7477]  </TASK>
[  248.912617][ T7484] overlayfs: failed to resolve './bus': -2
[  249.819743][    C1] net_ratelimit: 27 callbacks suppressed
[  251.513983][ T7486] loop3: detected capacity change from 0 to 32768
[  252.311342][ T7499] loop3: detected capacity change from 0 to 512
[  252.316630][ T7495] device-mapper: table: 248:0: multipath: priority group count mismatch (-EINVAL)
[  252.349832][ T7495] device-mapper: ioctl: error adding target to table
[  252.400290][ T7499] EXT4-fs (loop3): 1 truncate cleaned up
[  252.408423][ T7499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.567377][   T28] audit: type=1800 audit(1789850405.064:62): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.532" name="file1" dev="loop3" ino=13 res=0 errno=0
[  252.631136][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  252.640988][ T7499] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.532: bg 0: block 465: padding at end of block bitmap is not set
[  252.666829][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  252.666834][ T7499] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 117
[  252.690558][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  252.697749][ T7503] loop0: detected capacity change from 0 to 2048
[  252.706667][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  252.715353][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  252.723318][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  252.812758][ T7499] EXT4-fs (loop3): This should not happen!! Data will be lost
[  252.812758][ T7499] 
[  252.831474][ T5817] IPVS: starting estimator thread 0...
[  252.939961][ T7503]  loop0: p2 p3 < > p4 < p5 >
[  252.945181][ T7503] loop0: partition table partially beyond EOD, 
[  252.956306][ T7509] IPVS: using max 15 ests per chain, 36000 per kthread
[  253.008267][ T7503] truncated
[  253.023031][ T7503] loop0: p3 start 4225 is beyond EOD, truncated
[  253.200465][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.454622][ T6871] udevd[6871]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  253.468085][ T6879] udevd[6879]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[  253.493984][ T6886] udevd[6886]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  254.032111][ T7505] chnl_net:caif_netlink_parms(): no params data found
[  254.771349][ T5777] Bluetooth: hci4: command tx timeout
[  254.849808][    C1] net_ratelimit: 35 callbacks suppressed
[  255.976817][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  256.060929][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  256.850265][ T5777] Bluetooth: hci4: command tx timeout
[  257.100881][ T5142] udevd[5142]: worker [5791] /devices/virtual/block/nbd1 is taking a long time
[  257.191262][ T5142] udevd[5142]: worker [5783] /devices/virtual/block/nbd0 is taking a long time
[  257.349913][ T7505] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.364815][ T7505] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.384559][ T7505] bridge_slave_0: entered allmulticast mode
[  257.421106][ T7505] bridge_slave_0: entered promiscuous mode
[  257.447080][ T7505] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.468203][ T7505] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.493618][ T7505] bridge_slave_1: entered allmulticast mode
[  257.515275][ T7505] bridge_slave_1: entered promiscuous mode
[  257.535880][ T7534] loop2: detected capacity change from 0 to 1024
[  257.739177][ T7505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  257.789242][ T7505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.014128][ T7505] team0: Port device team_slave_0 added
[  258.051307][ T7505] team0: Port device team_slave_1 added
[  258.238720][ T7505] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.253851][ T7505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.307173][ T7505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.335843][ T7505] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.353985][ T7505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.386356][ T7532] loop3: detected capacity change from 0 to 32768
[  258.391872][ T7505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  258.415036][ T7541] ubi0: attaching mtd0
[  258.432629][ T7532] (syz.3.541,7532,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear
[  258.432629][ T7532] " or missing value
[  258.486028][ T7541] ubi0: scanning is finished
[  258.489961][ T7532] (syz.3.541,7532,0):ocfs2_fill_super:1178 ERROR: status = -22
[  258.521760][ T7541] ubi0: empty MTD device detected
[  258.699202][ T7505] hsr_slave_0: entered promiscuous mode
[  258.753442][ T7541] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  258.772833][ T7505] hsr_slave_1: entered promiscuous mode
[  258.799222][ T7505] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  258.806585][ T7541] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  258.807265][ T7541] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  258.807287][ T7541] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  258.807305][ T7541] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  258.807321][ T7541] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  258.807338][ T7541] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2858726816
[  258.807360][ T7541] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  258.867131][ T7542] ubi0: background thread "ubi_bgt0d" started, PID 7542
[  258.939170][ T5777] Bluetooth: hci4: command tx timeout
[  258.984414][ T7505] Cannot create hsr debugfs directory
[  259.050131][ T7542] ubi0: scrubbed PEB 0 (LEB 2147479551:0), data moved to PEB 31
[  259.560655][ T7548] syz.0.547 (7548) used greatest stack depth: 18968 bytes left
[  259.605327][ T7551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.548'.
[  260.289758][    C1] net_ratelimit: 36 callbacks suppressed
[  261.010062][ T5777] Bluetooth: hci4: command tx timeout
[  262.876639][   T97] block nbd0: Possible stuck request ffff888022290000: control (read@0,4096B). Runtime 90 seconds
[  263.253408][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'.
[  263.263484][ T5817] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  263.436025][ T7505] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  263.467189][ T7505] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  263.482542][ T5817] usb 4-1: Using ep0 maxpacket: 8
[  263.489284][ T7572] loop2: detected capacity change from 0 to 64
[  263.519844][ T5817] usb 4-1: config index 0 descriptor too short (expected 5924, got 36)
[  263.528135][ T5817] usb 4-1: config 250 has an invalid interface number: 228 but max is -1
[  263.549078][ T7568] loop0: detected capacity change from 0 to 32768
[  263.560505][ T5817] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0
[  263.577639][ T7568] (syz.0.552,7568,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear
[  263.577639][ T7568] " or missing value
[  263.578335][ T7505] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  263.599386][ T5817] usb 4-1: config 250 has no interface number 0
[  263.629789][ T5817] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  263.641583][ T7568] (syz.0.552,7568,1):ocfs2_fill_super:1178 ERROR: status = -22
[  263.670308][ T5817] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  263.720237][ T5817] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  263.761036][ T7505] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  263.772309][ T5817] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  263.831917][ T5817] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  263.900818][ T5817] usb 4-1: config 250 interface 228 has no altsetting 0
[  263.922386][ T5817] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  263.959742][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  263.968081][ T5817] usb 4-1: Product: syz
[  264.004776][ T5817] usb 4-1: SerialNumber: syz
[  264.040537][ T5817] hub 4-1:250.228: bad descriptor, ignoring hub
[  264.068090][ T5817] hub: probe of 4-1:250.228 failed with error -5
[  264.265500][ T7505] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.284266][ T5817] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  264.349310][ T7505] 8021q: adding VLAN 0 to HW filter on device team0
[  264.404707][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.412789][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.489333][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.496587][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.712958][ T5840] usb 4-1: USB disconnect, device number 3
[  264.734745][ T5840] usblp0: removed
[  264.946789][ T7505] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.649727][    C1] net_ratelimit: 38 callbacks suppressed
[  268.185908][ T5924] block nbd1: Possible stuck request ffff888022370000: control (read@0,4096B). Runtime 90 seconds
[  268.566477][ T7505] veth0_vlan: entered promiscuous mode
[  268.623247][ T7505] veth1_vlan: entered promiscuous mode
[  268.738331][ T7505] veth0_macvtap: entered promiscuous mode
[  268.812932][ T7505] veth1_macvtap: entered promiscuous mode
[  268.907601][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.922673][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.935560][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.971039][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.988744][ T7505] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.141309][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  269.160644][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.028437][ T7505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.320914][ T7505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.361162][ T7505] batman_adv: batadv0: Interface activated: batadv_slave_1
[  270.393538][ T7625] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  270.413715][ T7505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.425148][ T7505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.492710][ T7505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.501722][ T7505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.659721][    C0] net_ratelimit: 47 callbacks suppressed
[  270.735348][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.765237][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.830227][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.856385][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.023591][ T7637] loop2: detected capacity change from 0 to 16
[  271.058590][ T7637] erofs: (device loop2): mounted with root inode @ nid 36.
[  271.346800][ T7643] CIFS: Attempting to mount //127.0.0.1/share
[  271.362027][ T7643] CIFS: VFS: Error connecting to socket. Aborting operation.
[  271.369626][ T7643] CIFS: VFS: cifs_mount failed w/return code = -111
[  272.391020][ T7643] nbd2: detected capacity change from 0 to 63
[  272.421507][ T5777] block nbd2: Receive control failed (result -32)
[  272.468315][ T5924] block nbd2: Dead connection, failed to find a fallback
[  272.476050][ T5924] block nbd2: shutting down sockets
[  272.482229][ T5924] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  272.492208][ T5924] Buffer I/O error on dev nbd2, logical block 0, async page read
[  272.500407][ T5924] Buffer I/O error on dev nbd2, logical block 1, async page read
[  272.508170][ T5924] Buffer I/O error on dev nbd2, logical block 2, async page read
[  272.516367][ T5924] Buffer I/O error on dev nbd2, logical block 3, async page read
[  272.526484][ T5924] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  272.537284][ T5924] Buffer I/O error on dev nbd2, logical block 0, async page read
[  272.545419][ T5924] Buffer I/O error on dev nbd2, logical block 1, async page read
[  272.553641][ T5924] Buffer I/O error on dev nbd2, logical block 2, async page read
[  272.561760][ T5924] Buffer I/O error on dev nbd2, logical block 3, async page read
[  272.571118][ T5924] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  272.580264][ T5924] Buffer I/O error on dev nbd2, logical block 0, async page read
[  272.588026][ T5924] Buffer I/O error on dev nbd2, logical block 1, async page read
[  272.596071][ T5924] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  272.605696][ T5924] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  272.615148][ T5924] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  272.624428][ T5924] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  272.634199][ T5924] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[  272.643439][ T5924] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  272.652694][ T5924] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  272.662141][ T6871] ldm_validate_partition_table(): Disk read failed.
[  272.671163][ T6871] Dev nbd2: unable to read RDB block 0
[  272.686063][ T6871]  nbd2: unable to read partition table
[  272.748177][ T6871] ldm_validate_partition_table(): Disk read failed.
[  272.831839][ T6871] Dev nbd2: unable to read RDB block 0
[  272.888810][ T6871]  nbd2: unable to read partition table
[  274.090992][ T7685] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  275.739745][    C1] net_ratelimit: 38 callbacks suppressed
[  276.740314][ T5840] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  277.305855][ T7694] FAULT_INJECTION: forcing a failure.
[  277.305855][ T7694] name failslab, interval 1, probability 0, space 0, times 0
[  277.350096][ T7694] CPU: 1 PID: 7694 Comm: syz.3.585 Not tainted syzkaller #0
[  277.357459][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  277.367537][ T7694] Call Trace:
[  277.370830][ T7694]  <TASK>
[  277.373774][ T7694]  dump_stack_lvl+0x18c/0x250
[  277.378488][ T7694]  ? show_regs_print_info+0x20/0x20
[  277.383709][ T7694]  ? load_image+0x420/0x420
[  277.388219][ T7694]  ? __might_sleep+0xe0/0xe0
[  277.392813][ T7694]  ? __lock_acquire+0x7d80/0x7d80
[  277.397842][ T7694]  should_fail_ex+0x394/0x4c0
[  277.402527][ T7694]  should_failslab+0x9/0x20
[  277.407054][ T7694]  slab_pre_alloc_hook+0x59/0x300
[  277.412096][ T7694]  ? percpu_ref_put+0x12/0x100
[  277.416864][ T7694]  kmem_cache_alloc+0x5a/0x2c0
[  277.421640][ T7694]  ? fib_insert_alias+0x300/0x1280
[  277.426763][ T7694]  fib_insert_alias+0x300/0x1280
[  277.431700][ T7694]  ? lockdep_rtnl_is_held+0x26/0x30
[  277.431727][ T7694]  ? fib_find_node+0x294/0x2f0
[  277.437275][ T7694]  fib_trie_unmerge+0x30c/0xcf0
[  277.447025][ T7694]  fib_unmerge+0xc0/0x350
[  277.447057][ T7694]  fib4_rule_configure+0x118/0xaf0
[  277.451570][ T7694]  ? __nla_parse+0x40/0x50
[  277.451608][ T7694]  fib_nl_newrule+0x135e/0x1e40
[  277.461367][ T7694]  ? verify_lock_unused+0x140/0x140
[  277.471499][ T7694]  ? fib_rules_seq_read+0xf0/0xf0
[  277.471532][ T7694]  ? rcu_is_watching+0x15/0xb0
[  277.481465][ T7694]  ? trace_contention_end+0x39/0xe0
[  277.486726][ T7694]  ? fib_rules_seq_read+0xf0/0xf0
[  277.491769][ T7694]  rtnetlink_rcv_msg+0x843/0xf90
[  277.496758][ T7694]  ? rtnetlink_rcv_msg+0x220/0xf90
[  277.501874][ T7694]  ? rtnetlink_bind+0x80/0x80
[  277.506560][ T7694]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  277.512566][ T7694]  ? lock_chain_count+0x20/0x20
[  277.517431][ T7694]  ? __local_bh_enable_ip+0x13a/0x1c0
[  277.522818][ T7694]  ? lockdep_hardirqs_on+0x98/0x150
[  277.528025][ T7694]  ? __local_bh_enable_ip+0x13a/0x1c0
[  277.533405][ T7694]  ? _local_bh_enable+0xa0/0xa0
[  277.538259][ T7694]  ? __dev_queue_xmit+0x272/0x37e0
[  277.543373][ T7694]  ? __dev_queue_xmit+0x1329/0x37e0
[  277.548580][ T7694]  ? __dev_queue_xmit+0x272/0x37e0
[  277.553704][ T7694]  ? ref_tracker_free+0x686/0x830
[  277.558754][ T7694]  netlink_rcv_skb+0x235/0x4c0
[  277.563525][ T7694]  ? rtnetlink_bind+0x80/0x80
[  277.568225][ T7694]  ? netlink_ack+0x1160/0x1160
[  277.573001][ T7694]  ? __lock_acquire+0x7d80/0x7d80
[  277.578040][ T7694]  ? netlink_deliver_tap+0x2e/0x1b0
[  277.583242][ T7694]  netlink_unicast+0x7b1/0x930
[  277.588013][ T7694]  netlink_sendmsg+0x8d0/0xbf0
[  277.592784][ T7694]  ? netlink_getsockopt+0x590/0x590
[  277.598000][ T7694]  ? apparmor_socket_sendmsg+0x8e/0x330
[  277.603555][ T7694]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  277.608846][ T7694]  ? security_socket_sendmsg+0x80/0xa0
[  277.614310][ T7694]  ? netlink_getsockopt+0x590/0x590
[  277.619523][ T7694]  ____sys_sendmsg+0x61b/0x980
[  277.624500][ T7694]  ? __asan_memset+0x22/0x40
[  277.629131][ T7694]  ? __sys_sendmsg_sock+0x30/0x30
[  277.634174][ T7694]  ? __import_iovec+0x5f2/0x850
[  277.639046][ T7694]  ? import_iovec+0x73/0xa0
[  277.643577][ T7694]  ___sys_sendmsg+0x2a6/0x360
[  277.648279][ T7694]  ? __sys_sendmsg+0x2b0/0x2b0
[  277.653131][ T7694]  __se_sys_sendmsg+0x1d0/0x2c0
[  277.658003][ T7694]  ? __x64_sys_sendmsg+0x80/0x80
[  277.662964][ T7694]  ? lockdep_hardirqs_on+0x98/0x150
[  277.668192][ T7694]  do_syscall_64+0x55/0xb0
[  277.672681][ T7694]  ? clear_bhb_loop+0x40/0x90
[  277.677386][ T7694]  ? clear_bhb_loop+0x40/0x90
[  277.682081][ T7694]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  277.687984][ T7694] RIP: 0033:0x7f337e79e159
[  277.692402][ T7694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  277.712030][ T7694] RSP: 002b:00007f337f591028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  277.720458][ T7694] RAX: ffffffffffffffda RBX: 00007f337ea25fa0 RCX: 00007f337e79e159
[  277.728435][ T7694] RDX: 0000000000044004 RSI: 0000200000000400 RDI: 0000000000000005
[  277.736433][ T7694] RBP: 00007f337e83506b R08: 0000000000000000 R09: 0000000000000000
[  277.744404][ T7694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  277.752381][ T7694] R13: 00007f337ea26038 R14: 00007f337ea25fa0 R15: 00007ffcbdde6558
[  277.760374][ T7694]  </TASK>
[  279.432683][ T7700] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.472419][ T7700] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.853857][ T7700] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.863235][ T7700] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.873322][ T7700] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.882498][ T7700] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.998620][ T7727] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0
[  280.849767][    C0] net_ratelimit: 40 callbacks suppressed
[  281.731443][ T5840] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  281.962298][ T5840] usb 4-1: config index 0 descriptor too short (expected 28277, got 36)
[  281.979612][ T5840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.034480][ T5840] usb 4-1: config 0 has no interfaces?
[  282.079889][ T5840] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  282.130264][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.171638][ T5840] usb 4-1: config 0 descriptor??
[  283.454173][ T7750] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  285.337535][   T56] usb 4-1: USB disconnect, device number 5
[  285.782414][ T7755] loop3: detected capacity change from 0 to 256
[  285.889733][    C0] net_ratelimit: 24 callbacks suppressed
[  287.069889][   T56] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  287.312658][   T56] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.341687][   T56] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  287.362978][   T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.369946][ T5820] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  287.374399][   T56] usb 3-1: Product: syz
[  287.407665][   T56] usb 3-1: Manufacturer: syz
[  287.420387][   T56] usb 3-1: SerialNumber: syz
[  287.446483][   T56] usb 3-1: config 0 descriptor??
[  287.589878][ T5820] usb 1-1: Using ep0 maxpacket: 32
[  287.620322][ T5820] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  287.655587][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.683888][ T5820] usb 1-1: Product: syz
[  287.695154][ T5820] usb 1-1: Manufacturer: syz
[  287.709419][ T5820] usb 1-1: SerialNumber: syz
[  287.731408][ T5820] usb 1-1: config 0 descriptor??
[  288.176059][ T5820] airspy 1-1:0.0: Board ID: 00
[  288.519684][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  289.392033][   T56] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected
[  289.504069][   T56] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82
[  289.599102][ T7782] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  289.727660][   T56] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[  289.907507][   T56] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  289.986103][ T5820] airspy 1-1:0.0: Firmware version: 
[  290.045774][   T56] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  290.419167][   T56] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  290.742290][   T56] usb 3-1: USB disconnect, device number 10
[  291.080768][   T56] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  291.235883][    C0] net_ratelimit: 20 callbacks suppressed
[  291.293948][   T56] keyspan 3-1:0.0: device disconnected
[  291.499327][ T5820] airspy 1-1:0.0: usb_control_msg() failed -71 request 11
[  291.843104][ T5820] airspy 1-1:0.0: Registered as swradio24
[  291.848977][ T5820] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  291.897515][ T5820] usb 1-1: USB disconnect, device number 10
[  292.361551][ T7791] loop0: detected capacity change from 0 to 4096
[  292.371311][ T7791] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  292.416062][ T7791] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  292.445822][ T7791] ntfs3: loop0: Failed to load $Extend (-2).
[  292.482731][ T7791] ntfs3: loop0: Failed to initialize $Extend.
[  293.092735][ T5924] block nbd0: Possible stuck request ffff888022290000: control (read@0,4096B). Runtime 120 seconds
[  293.488598][ T7800] loop0: detected capacity change from 0 to 32768
[  293.569989][ T7800] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  293.603883][ T7800] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  293.691736][ T7800] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  293.833557][ T7800] BTRFS info (device loop0): use zstd compression, level 3
[  293.955770][ T7800] BTRFS info (device loop0): using free space tree
[  294.522017][ T7800] BTRFS info (device loop0): enabling ssd optimizations
[  294.529042][ T7800] BTRFS info (device loop0): auto enabling async discard
[  294.677995][   T28] audit: type=1800 audit(1789850447.174:63): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.613" name="bus" dev="loop0" ino=263 res=0 errno=0
[  294.733609][   T28] audit: type=1800 audit(1789850447.184:64): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.613" name="bus" dev="loop0" ino=263 res=0 errno=0
[  294.822102][   T28] audit: type=1326 audit(1789850447.314:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7830 comm="syz.4.622" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0305f9e159 code=0x0
[  294.845423][    C0] vkms_vblank_simulate: vblank timer overrun
[  295.440780][ T5779] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  295.557402][ T7831] loop3: detected capacity change from 0 to 32768
[  295.679341][ T7831] JBD2: Ignoring recovery information on journal
[  295.912078][ T7831] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  296.295384][ T2970] net_ratelimit: 25 callbacks suppressed
[  296.400518][   T28] audit: type=1804 audit(1789850448.904:66): pid=7857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.621" name="/newroot/162/file1/file1" dev="loop3" ino=17059 res=1 errno=0
[  297.214877][ T5787] ocfs2: Unmounting device (7,3) on (node local)
[  297.451847][   T28] audit: type=1326 audit(1789850449.954:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.2.635" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1bff9e159 code=0x0
[  297.475192][    C0] vkms_vblank_simulate: vblank timer overrun
[  298.125280][ T7884] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  298.216534][   T97] block nbd1: Possible stuck request ffff888022370000: control (read@0,4096B). Runtime 120 seconds
[  301.500687][ T7892] loop0: detected capacity change from 0 to 4096
[  301.545262][ T7892] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  301.604374][ T7892] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  301.637673][ T7892] ntfs3: loop0: Failed to load $Extend (-2).
[  301.663169][ T7892] ntfs3: loop0: Failed to initialize $Extend.
[  301.889731][    C1] net_ratelimit: 21 callbacks suppressed
[  302.136892][   T28] audit: type=1326 audit(1789850454.624:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.0.648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77b699e159 code=0x0
[  302.160327][    C0] vkms_vblank_simulate: vblank timer overrun
[  302.170648][ T7894] loop4: detected capacity change from 0 to 32768
[  302.225988][ T7894] JBD2: Ignoring recovery information on journal
[  302.351438][ T7894] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  302.512406][ T7919] binder_alloc: 7914: binder_alloc_buf size 64768 failed, no address space
[  302.529566][ T7919] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  302.726946][   T28] audit: type=1804 audit(1789850455.204:69): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.642" name="/newroot/18/file1/file1" dev="loop4" ino=17059 res=1 errno=0
[  305.555336][ T7505] ocfs2: Unmounting device (7,4) on (node local)
[  306.059315][   T28] audit: type=1326 audit(1789850458.554:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7943 comm="syz.2.660" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1bff9e159 code=0x0
[  306.132866][ T7942] nbd3: detected capacity change from 0 to 63
[  306.143114][ T5777] block nbd3: Receive control failed (result -32)
[  306.159710][   T24] block nbd3: Dead connection, failed to find a fallback
[  306.166786][   T24] block nbd3: shutting down sockets
[  306.178972][   T24] blk_print_req_error: 80 callbacks suppressed
[  306.178989][   T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  306.185267][   T24] buffer_io_error: 138 callbacks suppressed
[  306.185280][   T24] Buffer I/O error on dev nbd3, logical block 0, async page read
[  306.200627][   T24] Buffer I/O error on dev nbd3, logical block 1, async page read
[  306.216468][   T24] Buffer I/O error on dev nbd3, logical block 2, async page read
[  306.226877][   T24] Buffer I/O error on dev nbd3, logical block 3, async page read
[  306.235026][   T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  306.244177][   T24] Buffer I/O error on dev nbd3, logical block 0, async page read
[  306.252037][   T24] Buffer I/O error on dev nbd3, logical block 1, async page read
[  306.252062][   T24] Buffer I/O error on dev nbd3, logical block 2, async page read
[  306.252082][   T24] Buffer I/O error on dev nbd3, logical block 3, async page read
[  306.252377][   T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  306.267873][   T24] Buffer I/O error on dev nbd3, logical block 0, async page read
[  306.292793][   T24] Buffer I/O error on dev nbd3, logical block 1, async page read
[  306.300890][   T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  306.310254][   T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  306.322742][   T24] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  306.332073][   T24] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  306.341349][   T24] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  306.375817][ T5924] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  306.385945][ T5924] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  306.398131][ T6871] ldm_validate_partition_table(): Disk read failed.
[  306.432482][ T6871] Dev nbd3: unable to read RDB block 0
[  306.446951][ T6871]  nbd3: unable to read partition table
[  306.471645][ T6871] ldm_validate_partition_table(): Disk read failed.
[  306.479381][ T6871] Dev nbd3: unable to read RDB block 0
[  306.488763][ T6871]  nbd3: unable to read partition table
[  307.180421][    C1] net_ratelimit: 24 callbacks suppressed
[  312.259741][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  312.289761][    C1] net_ratelimit: 17 callbacks suppressed
[  312.927119][ T7999] binder_alloc: 7997: binder_alloc_buf size 64768 failed, no address space
[  312.965769][ T7999] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  313.281352][ T7996] loop4: detected capacity change from 0 to 32768
[  313.478305][ T7996] JBD2: Ignoring recovery information on journal
[  314.220344][ T7996] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  314.557101][   T28] audit: type=1804 audit(1789850467.054:71): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.680" name="/newroot/25/file1/file1" dev="loop4" ino=17059 res=1 errno=0
[  314.770057][ T7505] ocfs2: Unmounting device (7,4) on (node local)
[  315.192341][ T8031] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  315.199856][ T5841] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  317.350039][ T3442] net_ratelimit: 17 callbacks suppressed
[  317.424888][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  317.436043][ T5841] usb 4-1: config index 0 descriptor too short (expected 28277, got 36)
[  317.446089][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  317.449616][ T5841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  317.546504][ T5841] usb 4-1: config 0 has no interfaces?
[  317.556689][ T5841] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  317.585581][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.617780][ T5841] usb 4-1: config 0 descriptor??
[  318.532549][ T5841] usb 4-1: USB disconnect, device number 6
[  319.435849][ T8060] loop2: detected capacity change from 0 to 4096
[  319.477968][ T8060] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  319.552578][ T8060] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  319.568745][ T8049] loop0: detected capacity change from 0 to 32768
[  319.609192][ T8060] ntfs3: loop2: Failed to load $Extend (-2).
[  319.618217][ T8060] ntfs3: loop2: Failed to initialize $Extend.
[  319.645125][ T8049] JBD2: Ignoring recovery information on journal
[  319.848185][ T8049] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  319.965608][ T8061] loop4: detected capacity change from 0 to 32768
[  320.008328][ T8061] (syz.4.701,8061,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear
[  320.008328][ T8061] " or missing value
[  320.092401][ T8061] (syz.4.701,8061,1):ocfs2_fill_super:1178 ERROR: status = -22
[  320.513370][ T5779] ocfs2: Unmounting device (7,0) on (node local)
[  320.760070][   T56] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  321.616924][   T56] usb 4-1: config index 0 descriptor too short (expected 28277, got 36)
[  321.629755][   T56] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  321.666134][   T56] usb 4-1: config 0 has no interfaces?
[  321.689922][   T56] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  321.698994][   T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.767143][   T56] usb 4-1: config 0 descriptor??
[  322.093494][ T8082] syz.0.706: vmalloc error: size 0, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=test,mems_allowed=0-1
[  322.252505][ T8082] CPU: 0 PID: 8082 Comm: syz.0.706 Not tainted syzkaller #0
[  322.259856][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  322.269957][ T8082] Call Trace:
[  322.273289][ T8082]  <TASK>
[  322.276258][ T8082]  dump_stack_lvl+0x18c/0x250
[  322.280993][ T8082]  ? show_regs_print_info+0x20/0x20
[  322.286243][ T8082]  ? load_image+0x420/0x420
[  322.290799][ T8082]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  322.297265][ T8082]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  322.303818][ T8082]  warn_alloc+0x246/0x340
[  322.308195][ T8082]  ? rcu_is_watching+0x15/0xb0
[  322.313010][ T8082]  ? zone_watermark_ok_safe+0x230/0x230
[  322.318613][ T8082]  __vmalloc_node_range+0x1055/0x1320
[  322.324063][ T8082]  ? free_vm_area+0x50/0x50
[  322.328611][ T8082]  ? kvmalloc_node+0x70/0x180
[  322.333330][ T8082]  ? rcu_is_watching+0x15/0xb0
[  322.338149][ T8082]  ? kvmalloc_node+0x70/0x180
[  322.342877][ T8082]  ? trace_kmalloc+0x1f/0xa0
[  322.347523][ T8082]  kvmalloc_node+0x13f/0x180
[  322.352165][ T8082]  ? hash_netiface_create+0x34b/0xf80
[  322.357567][ T8082]  hash_netiface_create+0x34b/0xf80
[  322.362781][ T8082]  ? __lock_acquire+0x7d80/0x7d80
[  322.367841][ T8082]  ? hash_netport6_gc+0x5c0/0x5c0
[  322.372882][ T8082]  ip_set_create+0xad1/0x1960
[  322.377581][ T8082]  ? ip_set_create+0x4fe/0x1960
[  322.382488][ T8082]  ? ip_set_protocol+0x5b0/0x5b0
[  322.387430][ T8082]  ? trace_contention_end+0x39/0xe0
[  322.392660][ T8082]  nfnetlink_rcv_msg+0xcaf/0x1290
[  322.397706][ T8082]  ? nfnetlink_rcv_msg+0x228/0x1290
[  322.402955][ T8082]  ? nfnetlink_unbind+0x160/0x160
[  322.408013][ T8082]  netlink_rcv_skb+0x235/0x4c0
[  322.412801][ T8082]  ? nfnetlink_unbind+0x160/0x160
[  322.417845][ T8082]  ? netlink_ack+0x1160/0x1160
[  322.422648][ T8082]  ? apparmor_capable+0x137/0x1a0
[  322.427679][ T8082]  ? bpf_lsm_capable+0x9/0x10
[  322.432368][ T8082]  ? security_capable+0x89/0xb0
[  322.437254][ T8082]  nfnetlink_rcv+0x2c9/0x2490
[  322.441954][ T8082]  ? mark_lock+0x94/0x320
[  322.446318][ T8082]  ? mark_lock+0x94/0x320
[  322.449861][    C1] net_ratelimit: 22 callbacks suppressed
[  322.450656][ T8082]  ? __lock_acquire+0x1262/0x7d80
[  322.461332][ T8082]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  322.461366][ T8082]  ? kmalloc_reserve+0x95/0x240
[  322.461394][ T8082]  ? verify_lock_unused+0x140/0x140
[  322.467167][ T8082]  ? verify_lock_unused+0x140/0x140
[  322.477297][ T8082]  ? __netlink_lookup+0xc7/0x820
[  322.487447][ T8082]  ? netlink_deliver_tap+0x2e/0x1b0
[  322.487478][ T8082]  ? __lock_acquire+0x7d80/0x7d80
[  322.497687][ T8082]  ? net_generic+0x1e/0x240
[  322.497718][ T8082]  ? netlink_deliver_tap+0x2e/0x1b0
[  322.507404][ T8082]  netlink_unicast+0x7b1/0x930
[  322.507444][ T8082]  netlink_sendmsg+0x8d0/0xbf0
[  322.516958][ T8082]  ? netlink_getsockopt+0x590/0x590
[  322.522176][ T8082]  ? apparmor_socket_sendmsg+0x8e/0x330
[  322.522207][ T8082]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  322.533020][ T8082]  ? security_socket_sendmsg+0x80/0xa0
[  322.533043][ T8082]  ? netlink_getsockopt+0x590/0x590
[  322.543701][ T8082]  ____sys_sendmsg+0x61b/0x980
[  322.543740][ T8082]  ? __asan_memset+0x22/0x40
[  322.553105][ T8082]  ? __sys_sendmsg_sock+0x30/0x30
[  322.553131][ T8082]  ? __import_iovec+0x5f2/0x850
[  322.563034][ T8082]  ? import_iovec+0x73/0xa0
[  322.563070][ T8082]  ___sys_sendmsg+0x2a6/0x360
[  322.572231][ T8082]  ? __sys_sendmsg+0x2b0/0x2b0
[  322.577072][ T8082]  __se_sys_sendmsg+0x1d0/0x2c0
[  322.577106][ T8082]  ? __x64_sys_sendmsg+0x80/0x80
[  322.586912][ T8082]  ? lockdep_hardirqs_on+0x98/0x150
[  322.592129][ T8082]  do_syscall_64+0x55/0xb0
[  322.592158][ T8082]  ? clear_bhb_loop+0x40/0x90
[  322.601232][ T8082]  ? clear_bhb_loop+0x40/0x90
[  322.601264][ T8082]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  322.611906][ T8082] RIP: 0033:0x7f77b699e159
[  322.611933][ T8082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  322.611952][ T8082] RSP: 002b:00007f77b7897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  322.611978][ T8082] RAX: ffffffffffffffda RBX: 00007f77b6c25fa0 RCX: 00007f77b699e159
[  322.652529][ T8082] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  322.660517][ T8082] RBP: 00007f77b6a3506b R08: 0000000000000000 R09: 0000000000000000
[  322.668583][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  322.676643][ T8082] R13: 00007f77b6c26038 R14: 00007f77b6c25fa0 R15: 00007ffde78cc118
[  322.684644][ T8082]  </TASK>
[  322.734206][ T8082] Mem-Info:
[  322.737577][ T8082] active_anon:7465 inactive_anon:0 isolated_anon:0
[  322.737577][ T8082]  active_file:16792 inactive_file:40124 isolated_file:0
[  322.737577][ T8082]  unevictable:771 dirty:78 writeback:0
[  322.737577][ T8082]  slab_reclaimable:10822 slab_unreclaimable:103429
[  322.737577][ T8082]  mapped:30419 shmem:1368 pagetables:707
[  322.737577][ T8082]  sec_pagetables:0 bounce:0
[  322.737577][ T8082]  kernel_misc_reclaimable:0
[  322.737577][ T8082]  free:1320179 free_pcp:8312 free_cma:0
[  322.823839][ T8082] Node 0 active_anon:29932kB inactive_anon:0kB active_file:67168kB inactive_file:160296kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:121676kB dirty:312kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11384kB pagetables:2912kB sec_pagetables:0kB all_unreclaimable? no
[  322.875477][ T8082] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  322.933575][ T8082] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  322.962241][ T8082] lowmem_reserve[]: 0 2521 2522 2522 2522
[  322.968923][ T8082] Node 0 DMA32 free:1363728kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:29892kB inactive_anon:0kB active_file:67168kB inactive_file:159472kB unevictable:1548kB writepending:312kB present:3129332kB managed:2586800kB mlocked:12kB bounce:0kB free_pcp:19040kB local_pcp:4684kB free_cma:0kB
[  323.034254][ T8082] lowmem_reserve[]: 0 0 0 0 0
[  323.048025][ T8082] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  323.099992][ T8082] lowmem_reserve[]: 0 0 0 0 0
[  323.106997][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.113716][ T8082] Node 1 
[  323.114737][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.120068][ T8082] Normal free:3901380kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14880kB local_pcp:6656kB free_cma:0kB
[  323.154284][ T8082] lowmem_reserve[]: 0 0 0 0 0
[  323.167087][ T8082] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  323.189971][ T5924] block nbd0: Possible stuck request ffff888022290000: control (read@0,4096B). Runtime 150 seconds
[  323.220540][ T8082] Node 0 DMA32: 2400*4kB (UME) 1002*8kB (UM) 524*16kB (UME) 304*32kB (UME) 324*64kB (UME) 63*128kB (UME) 31*256kB (UME) 20*512kB (UME) 5*1024kB (UME) 5*2048kB (UME) 309*4096kB (M) = 1363728kB
[  323.249480][ T8082] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  323.262399][ T8082] Node 1 Normal: 239*4kB (UME) 65*8kB (UME) 42*16kB (UME) 103*32kB (UME) 32*64kB (UE) 7*128kB (UME) 1*256kB (U) 1*512kB (M) 1*1024kB (U) 2*2048kB (UE) 949*4096kB (M) = 3901380kB
[  323.282292][ T8082] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  323.291974][ T8082] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  323.301788][ T8082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  323.312751][ T8082] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  323.323540][ T8082] 58257 total pagecache pages
[  323.328352][ T8082] 0 pages in swap cache
[  323.333008][ T8082] Free swap  = 124712kB
[  323.337416][ T8082] Total swap = 124996kB
[  323.342086][ T8082] 2097051 pages RAM
[  323.345911][ T8082] 0 pages HighMem/MovableOnly
[  323.345924][ T8082] 416965 pages reserved
[  323.345933][ T8082] 0 pages cma reserved
[  323.676961][ T8079] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  323.719060][ T8079] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.005688][ T6228] usb 4-1: USB disconnect, device number 7
[  324.202132][ T8079] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.211566][ T8079] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.220563][ T8079] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.229535][ T8079] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  326.087640][ T8097] loop4: detected capacity change from 0 to 32768
[  326.132212][ T8097] (syz.4.713,8097,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear
[  326.132212][ T8097] " or missing value
[  326.146060][ T8097] (syz.4.713,8097,1):ocfs2_fill_super:1178 ERROR: status = -22
[  326.606426][ T8099] loop0: detected capacity change from 0 to 32768
[  326.728404][ T8099] JBD2: Ignoring recovery information on journal
[  326.860272][ T5820] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  327.889734][    C1] net_ratelimit: 15 callbacks suppressed
[  328.802657][ T8099] JBD2: journal reset failed
[  328.819781][ T8099] (syz.0.714,8099,1):ocfs2_journal_load:1168 ERROR: Failed to load journal!
[  328.843518][ T5820] usb 4-1: config index 0 descriptor too short (expected 28277, got 36)
[  328.853625][ T8099] (syz.0.714,8099,1):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -4
[  328.870911][ T5820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  328.896008][ T5924] block nbd1: Possible stuck request ffff888022370000: control (read@0,4096B). Runtime 150 seconds
[  328.913859][ T5820] usb 4-1: config 0 has no interfaces?
[  328.919408][ T5820] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  328.919441][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.959892][ T5820] usb 4-1: config 0 descriptor??
[  328.981607][ T8117] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  329.389179][ T8108] bridge0: port 1(syz_tun) entered disabled state
[  329.512094][ T5817] usb 4-1: USB disconnect, device number 8
[  331.419234][ T8134] loop0: detected capacity change from 0 to 32768
[  331.447916][ T8134] (syz.0.726,8134,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear
[  331.447916][ T8134] " or missing value
[  331.490152][ T8134] (syz.0.726,8134,1):ocfs2_fill_super:1178 ERROR: status = -22
[  331.593524][ T8151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.728'.
[  331.714235][ T8152] CIFS: Attempting to mount //127.0.0.1/share
[  332.592659][ T8152] CIFS: VFS: Error connecting to socket. Aborting operation.
[  332.605624][ T8152] CIFS: VFS: cifs_mount failed w/return code = -4
[  332.949828][ T5841] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  333.241380][ T5841] usb 1-1: config 0 has no interfaces?
[  333.246992][ T5841] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  333.274507][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.295744][ T5841] usb 1-1: config 0 descriptor??
[  333.419560][ T8108] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.439752][ T8108] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.448684][ T8108] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.509843][ T8108] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.697233][ T8162] loop4: detected capacity change from 0 to 32768
[  333.760772][ T8162] JBD2: Ignoring recovery information on journal
[  333.926732][ T8162] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  334.051615][   T35] net_ratelimit: 11 callbacks suppressed
[  334.196183][ T8169] loop2: detected capacity change from 0 to 4096
[  334.217688][ T8169] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  334.305637][ T8169] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  334.356593][ T7505] ocfs2: Unmounting device (7,4) on (node local)
[  334.366606][ T8169] ntfs3: loop2: Failed to load $Extend (-2).
[  334.395800][ T8169] ntfs3: loop2: Failed to initialize $Extend.
[  334.731949][ T8178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.738'.
[  334.816380][ T8179] CIFS: Attempting to mount //127.0.0.1/share
[  334.830562][ T8179] CIFS: VFS: Error connecting to socket. Aborting operation.
[  334.838243][ T8179] CIFS: VFS: cifs_mount failed w/return code = -111
[  335.689744][ T6228] usb 1-1: USB disconnect, device number 11
[  337.148385][ T8176] loop2: detected capacity change from 0 to 32768
[  337.158976][ T8176] (syz.2.737,8176,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear
[  337.158976][ T8176] " or missing value
[  337.179224][ T8198] loop3: detected capacity change from 0 to 4096
[  337.189603][ T8176] (syz.2.737,8176,1):ocfs2_fill_super:1178 ERROR: status = -22
[  337.242319][ T8198] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  337.312965][ T8198] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  337.365145][ T8198] ntfs3: loop3: Failed to load $Extend (-2).
[  337.379988][ T8198] ntfs3: loop3: Failed to initialize $Extend.
[  337.527452][ T8194] loop0: detected capacity change from 0 to 32768
[  337.653377][ T8194] JBD2: Ignoring recovery information on journal
[  337.928418][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'.
[  338.257648][ T8194] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  338.564846][ T8214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.749'.
[  338.742134][ T8216] CIFS: Attempting to mount //127.0.0.1/share
[  339.460379][ T8216] CIFS: VFS: Error connecting to socket. Aborting operation.
[  339.467802][ T8216] CIFS: VFS: cifs_mount failed w/return code = -4
[  339.486693][ T8194] (syz.0.743,8194,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -4
[  339.507441][   T28] audit: type=1800 audit(1789850492.004:72): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.743" name="file1" dev="loop0" ino=17059 res=0 errno=0
[  339.706442][ T5779] ocfs2: Unmounting device (7,0) on (node local)
[  340.293413][ T8232] loop4: detected capacity change from 0 to 4096
[  340.306694][ T8232] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[  340.425018][ T8232] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  340.474924][ T8232] ntfs3: loop4: Failed to load $Extend (-2).
[  340.474949][ T8232] ntfs3: loop4: Failed to initialize $Extend.
[  340.902473][ T8242] loop0: detected capacity change from 0 to 1024
[  341.058576][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'.
[  341.230863][ T8242] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  341.644158][ T8242] JBD2: no valid journal superblock found
[  341.685888][ T8242] EXT4-fs (loop0): Could not load journal inode
[  342.348846][ T8261] loop3: detected capacity change from 0 to 4096
[  342.362734][ T8254] loop4: detected capacity change from 0 to 32768
[  342.396487][ T8261] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  342.433272][ T8254] JBD2: Ignoring recovery information on journal
[  342.492197][ T8254] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  342.506963][ T8261] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  342.567404][ T8261] ntfs3: loop3: Failed to load $Extend (-2).
[  342.610017][ T8261] ntfs3: loop3: Failed to initialize $Extend.
[  342.857618][   T28] audit: type=1804 audit(1789850495.354:73): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.764" name="/newroot/50/file1/file1" dev="loop4" ino=17059 res=1 errno=0
[  343.081759][ T7505] ocfs2: Unmounting device (7,4) on (node local)
[  343.425606][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'.
[  344.476414][ T8287] loop0: detected capacity change from 0 to 4096
[  344.579393][ T8293] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  344.650274][   T28] audit: type=1800 audit(1789850497.144:74): pid=8287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.776" name="bus" dev="loop0" ino=18 res=0 errno=0
[  345.149260][ T8282] loop2: detected capacity change from 0 to 32768
[  345.267878][ T8282] JBD2: Ignoring recovery information on journal
[  345.413997][ T8282] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  345.770856][ T8296] loop0: detected capacity change from 0 to 32768
[  345.822337][ T8296] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  345.868189][ T8296] JBD2: Ignoring recovery information on journal
[  345.901913][ T5778] ocfs2: Unmounting device (7,2) on (node local)
[  346.071407][ T8296] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  346.435715][   T28] audit: type=1804 audit(1789850498.934:75): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.778" name="/newroot/203/file1/file1" dev="loop0" ino=17059 res=1 errno=0
[  346.624462][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.783'.
[  347.047800][ T5779] ocfs2: Unmounting device (7,0) on (node local)
[  347.553380][ T8323] loop2: detected capacity change from 0 to 1024
[  347.583940][ T8323] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  347.614490][ T8323] JBD2: no valid journal superblock found
[  347.648764][ T8323] EXT4-fs (loop2): Could not load journal inode
[  348.263695][ T8344] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  351.780202][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'.
[  352.701515][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.806'.
[  353.412258][   T97] block nbd0: Possible stuck request ffff888022290000: control (read@0,4096B). Runtime 180 seconds
[  354.406070][ T8374] loop0: detected capacity change from 0 to 32768
[  354.474585][ T8374] JBD2: Ignoring recovery information on journal
[  354.542312][ T8374] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  354.637914][ T8384] loop2: detected capacity change from 0 to 32768
[  354.712840][   T28] audit: type=1804 audit(1789850507.204:76): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.805" name="/newroot/211/file1/file1" dev="loop0" ino=17059 res=1 errno=0
[  354.765547][ T8384] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  354.843250][ T8384] JBD2: Ignoring recovery information on journal
[  355.060183][ T8384] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  355.140406][ T5779] ocfs2: Unmounting device (7,0) on (node local)
[  355.150823][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'.
[  356.342689][ T5778] ocfs2: Unmounting device (7,2) on (node local)
[  359.011648][   T97] block nbd1: Possible stuck request ffff888022370000: control (read@0,4096B). Runtime 180 seconds
[  359.065444][ T8442] loop2: detected capacity change from 0 to 32768
[  359.086171][ T8442] (syz.2.830,8442,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear
[  359.086171][ T8442] " or missing value
[  359.099814][ T8442] (syz.2.830,8442,0):ocfs2_fill_super:1178 ERROR: status = -22
[  360.993978][ T8463] loop2: detected capacity change from 0 to 32768
[  361.034537][ T8463] JBD2: Ignoring recovery information on journal
[  361.180828][ T8463] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  361.358849][   T28] audit: type=1804 audit(1789850513.854:77): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.839" name="/newroot/200/file1/file1" dev="loop2" ino=17059 res=1 errno=0
[  361.534668][ T8483] loop4: detected capacity change from 0 to 32768
[  361.548067][ T5778] ocfs2: Unmounting device (7,2) on (node local)
[  361.576608][ T8483] (syz.4.847,8483,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear
[  361.576608][ T8483] " or missing value
[  361.678232][ T8483] (syz.4.847,8483,1):ocfs2_fill_super:1178 ERROR: status = -22
[  361.738263][ T8497] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  365.474256][ T8502] loop4: detected capacity change from 0 to 4096
[  365.500042][ T8502] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[  365.647282][ T8502] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  365.789042][ T8502] ntfs3: loop4: Failed to load $Extend (-2).
[  365.838150][ T8502] ntfs3: loop4: Failed to initialize $Extend.
[  366.450643][ T8519] binder: BINDER_SET_CONTEXT_MGR already set
[  366.457300][ T8519] binder: 8518:8519 ioctl 4018620d 200000004a80 returned -16
[  366.877981][ T8513] loop0: detected capacity change from 0 to 32768
[  366.926234][ T8513] JBD2: Ignoring recovery information on journal
[  366.991381][ T8513] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  367.059318][ T8515] loop3: detected capacity change from 0 to 32768
[  367.125643][   T28] audit: type=1800 audit(1789850519.624:78): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.859" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  367.172032][ T8515] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  367.214660][ T8515] JBD2: Ignoring recovery information on journal
[  367.391005][ T8515] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  367.431886][ T5779] ocfs2: Unmounting device (7,0) on (node local)
[  367.639707][   T28] audit: type=1804 audit(1789850520.134:79): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.860" name="/newroot/233/file1/file1" dev="loop3" ino=17059 res=1 errno=0
[  367.928942][ T5787] ocfs2: Unmounting device (7,3) on (node local)
[  368.034293][ T8526] loop2: detected capacity change from 0 to 32768
[  368.083923][ T8526] (syz.2.864,8526,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear
[  368.083923][ T8526] " or missing value
[  368.136122][ T8526] (syz.2.864,8526,1):ocfs2_fill_super:1178 ERROR: status = -22
[  368.621548][   T28] audit: type=1326 audit(1789850521.124:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.3.868" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f337e79e159 code=0x0
[  369.332995][ T8564] loop4: detected capacity change from 0 to 4096
[  369.362117][ T8564] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[  369.571800][ T8564] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  369.624301][ T8558] loop0: detected capacity change from 0 to 32768
[  369.700242][ T8564] ntfs3: loop4: Failed to load $Extend (-2).
[  369.706520][ T8564] ntfs3: loop4: Failed to initialize $Extend.
[  369.728797][ T8558] JBD2: Ignoring recovery information on journal
[  369.915288][ T8558] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  370.141346][   T28] audit: type=1800 audit(1789850522.614:81): pid=8558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.874" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  370.273894][ T8583] syz.3.883: vmalloc error: size 8192, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=test,mems_allowed=0-1
[  370.319975][ T8583] CPU: 1 PID: 8583 Comm: syz.3.883 Not tainted syzkaller #0
[  370.327357][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  370.337431][ T8583] Call Trace:
[  370.340786][ T8583]  <TASK>
[  370.340837][ T8583]  dump_stack_lvl+0x18c/0x250
[  370.348549][ T8583]  ? show_regs_print_info+0x20/0x20
[  370.353830][ T8583]  ? load_image+0x420/0x420
[  370.358388][ T8583]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  370.364867][ T8583]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  370.371415][ T8583]  warn_alloc+0x246/0x340
[  370.375793][ T8583]  ? zone_watermark_ok_safe+0x230/0x230
[  370.381350][ T8583]  ? mod_memcg_page_state+0x4bd/0x940
[  370.386754][ T8583]  __vmalloc_node_range+0x1055/0x1320
[  370.392163][ T8583]  ? free_vm_area+0x50/0x50
[  370.396688][ T8583]  ? kvmalloc_node+0x70/0x180
[  370.401384][ T8583]  ? rcu_is_watching+0x15/0xb0
[  370.406182][ T8583]  ? kvmalloc_node+0x70/0x180
[  370.410878][ T8583]  ? trace_kmalloc+0x1f/0xa0
[  370.415486][ T8583]  kvmalloc_node+0x13f/0x180
[  370.420093][ T8583]  ? hash_netiface_create+0x34b/0xf80
[  370.425619][ T8583]  hash_netiface_create+0x34b/0xf80
[  370.430833][ T8583]  ? __lock_acquire+0x7d80/0x7d80
[  370.435982][ T8583]  ? hash_netport6_gc+0x5c0/0x5c0
[  370.441022][ T8583]  ip_set_create+0xad1/0x1960
[  370.445766][ T8583]  ? ip_set_create+0x4fe/0x1960
[  370.450648][ T8583]  ? ip_set_protocol+0x5b0/0x5b0
[  370.455599][ T8583]  ? trace_contention_end+0x39/0xe0
[  370.460833][ T8583]  nfnetlink_rcv_msg+0xcaf/0x1290
[  370.465897][ T8583]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  370.472054][ T8583]  ? nfnetlink_rcv_msg+0x228/0x1290
[  370.477282][ T8583]  ? nfnetlink_unbind+0x160/0x160
[  370.482334][ T8583]  ? __dev_queue_xmit+0x1be8/0x37e0
[  370.487540][ T8583]  ? __netlink_deliver_tap+0x579/0x7f0
[  370.493049][ T8583]  ? netlink_deliver_tap+0x19c/0x1b0
[  370.498355][ T8583]  ? netlink_unicast+0x77b/0x930
[  370.503300][ T8583]  ? netlink_sendmsg+0x8d0/0xbf0
[  370.508246][ T8583]  ? ____sys_sendmsg+0x61b/0x980
[  370.513240][ T8583]  ? ___sys_sendmsg+0x2a6/0x360
[  370.518103][ T8583]  ? __se_sys_sendmsg+0x1d0/0x2c0
[  370.523139][ T8583]  ? do_syscall_64+0x55/0xb0
[  370.527757][ T8583]  netlink_rcv_skb+0x235/0x4c0
[  370.532561][ T8583]  ? nfnetlink_unbind+0x160/0x160
[  370.537601][ T8583]  ? netlink_ack+0x1160/0x1160
[  370.542385][ T8583]  ? apparmor_capable+0x137/0x1a0
[  370.547471][ T8583]  ? bpf_lsm_capable+0x9/0x10
[  370.552163][ T8583]  ? security_capable+0x89/0xb0
[  370.557041][ T8583]  nfnetlink_rcv+0x2c9/0x2490
[  370.561737][ T8583]  ? __local_bh_enable_ip+0x13a/0x1c0
[  370.567121][ T8583]  ? lockdep_hardirqs_on+0x98/0x150
[  370.572376][ T8583]  ? __local_bh_enable_ip+0x13a/0x1c0
[  370.572403][ T8583]  ? _local_bh_enable+0xa0/0xa0
[  370.578010][ T8583]  ? __dev_queue_xmit+0x272/0x37e0
[  370.588050][ T8583]  ? __dev_queue_xmit+0x1329/0x37e0
[  370.588077][ T8583]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  370.588104][ T8583]  ? __dev_queue_xmit+0x272/0x37e0
[  370.588145][ T8583]  ? ref_tracker_free+0x686/0x830
[  370.603974][ T8583]  ? refcount_inc+0x70/0x70
[  370.613542][ T8583]  ? __asan_memcpy+0x40/0x70
[  370.618186][ T8583]  ? __skb_clone+0x5c/0x6c0
[  370.622707][ T8583]  ? __skb_clone+0x446/0x6c0
[  370.627322][ T8583]  ? netlink_deliver_tap+0x2e/0x1b0
[  370.632538][ T8583]  ? __lock_acquire+0x7d80/0x7d80
[  370.637590][ T8583]  ? netlink_deliver_tap+0x2e/0x1b0
[  370.642806][ T8583]  netlink_unicast+0x7b1/0x930
[  370.647595][ T8583]  netlink_sendmsg+0x8d0/0xbf0
[  370.652385][ T8583]  ? netlink_getsockopt+0x590/0x590
[  370.657596][ T8583]  ? apparmor_socket_sendmsg+0x8e/0x330
[  370.663158][ T8583]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  370.668454][ T8583]  ? security_socket_sendmsg+0x80/0xa0
[  370.673922][ T8583]  ? netlink_getsockopt+0x590/0x590
[  370.679131][ T8583]  ____sys_sendmsg+0x61b/0x980
[  370.683914][ T8583]  ? __asan_memset+0x22/0x40
[  370.688518][ T8583]  ? __sys_sendmsg_sock+0x30/0x30
[  370.693554][ T8583]  ? __import_iovec+0x5f2/0x850
[  370.698426][ T8583]  ? import_iovec+0x73/0xa0
[  370.702947][ T8583]  ___sys_sendmsg+0x2a6/0x360
[  370.707643][ T8583]  ? __sys_sendmsg+0x2b0/0x2b0
[  370.712460][ T8583]  __se_sys_sendmsg+0x1d0/0x2c0
[  370.717523][ T8583]  ? __x64_sys_sendmsg+0x80/0x80
[  370.722519][ T8583]  ? lockdep_hardirqs_on+0x98/0x150
[  370.727773][ T8583]  do_syscall_64+0x55/0xb0
[  370.732224][ T8583]  ? clear_bhb_loop+0x40/0x90
[  370.736925][ T8583]  ? clear_bhb_loop+0x40/0x90
[  370.741624][ T8583]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  370.747534][ T8583] RIP: 0033:0x7f337e79e159
[  370.752019][ T8583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  370.771766][ T8583] RSP: 002b:00007f337f591028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  370.780219][ T8583] RAX: ffffffffffffffda RBX: 00007f337ea25fa0 RCX: 00007f337e79e159
[  370.788208][ T8583] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  370.796194][ T8583] RBP: 00007f337e83506b R08: 0000000000000000 R09: 0000000000000000
[  370.804177][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  370.812144][ T8583] R13: 00007f337ea26038 R14: 00007f337ea25fa0 R15: 00007ffcbdde6558
[  370.820146][ T8583]  </TASK>
[  370.830496][ T8583] Mem-Info:
[  370.835280][ T8583] active_anon:10514 inactive_anon:0 isolated_anon:0
[  370.835280][ T8583]  active_file:16792 inactive_file:40282 isolated_file:0
[  370.835280][ T8583]  unevictable:768 dirty:59 writeback:0
[  370.835280][ T8583]  slab_reclaimable:10887 slab_unreclaimable:102229
[  370.835280][ T8583]  mapped:30408 shmem:5469 pagetables:673
[  370.835280][ T8583]  sec_pagetables:0 bounce:0
[  370.835280][ T8583]  kernel_misc_reclaimable:0
[  370.835280][ T8583]  free:1319454 free_pcp:6592 free_cma:0
[  370.977182][ T5779] ocfs2: Unmounting device (7,0) on (node local)
[  370.986644][ T8583] Node 0 active_anon:41956kB inactive_anon:0kB active_file:67168kB inactive_file:160928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121632kB dirty:236kB writeback:0kB shmem:20340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11536kB pagetables:2592kB sec_pagetables:0kB all_unreclaimable? no
[  371.036677][ T8583] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  371.201389][   T28] audit: type=1326 audit(1789850523.704:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.2.886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1bff9e159 code=0x0
[  371.219785][ T8583] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  371.303538][ T8583] lowmem_reserve[]: 0 2521 2522 2522 2522
[  371.336591][ T8583] Node 0 DMA32 free:1382308kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:30252kB inactive_anon:0kB active_file:67168kB inactive_file:159620kB unevictable:1536kB writepending:252kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:3636kB local_pcp:1520kB free_cma:0kB
[  371.391538][ T8583] lowmem_reserve[]: 0 0 0 0 0
[  371.396373][ T8583] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  371.480544][ T8583] lowmem_reserve[]: 0 0 0 0 0
[  371.485338][ T8583] Node 1 Normal free:3901380kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14912kB local_pcp:6656kB free_cma:0kB
[  371.549359][ T8583] lowmem_reserve[]: 0 0 0 0 0
[  371.555500][ T8583] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  371.568813][ T8583] Node 0 DMA32: 889*4kB (UME) 1012*8kB (UME) 828*16kB (UME) 780*32kB (UME) 368*64kB (UME) 72*128kB (UME) 32*256kB (UME) 20*512kB (UME) 5*1024kB (UME) 5*2048kB (UME) 309*4096kB (UM) = 1382084kB
[  371.594625][ T8583] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  371.614723][ T8583] Node 1 Normal: 239*4kB (UME) 65*8kB (UME) 42*16kB (UME) 103*32kB (UME) 32*64kB (UE) 7*128kB (UME) 
[  371.614919][ T8583] 1*256kB (U) 1*512kB (M) 1*1024kB (U) 2*2048kB (UE) 949*4096kB (M) = 3901380kB
[  371.646806][ T8583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  371.657462][ T8583] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  371.671973][ T8603] socket: no more sockets
[  371.673811][ T8583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  371.687769][ T8583] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  371.707793][ T8583] 58276 total pagecache pages
[  371.714311][ T8583] 0 pages in swap cache
[  371.718663][ T8583] Free swap  = 124712kB
[  371.732388][ T8583] Total swap = 124996kB
[  371.744888][ T8583] 2097051 pages RAM
[  371.776107][ T8583] 0 pages HighMem/MovableOnly
[  371.781457][ T8583] 416965 pages reserved
[  371.785655][ T8583] 0 pages cma reserved
[  372.017001][ T8610] loop0: detected capacity change from 0 to 4096
[  372.035126][ T8610] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  372.105293][ T8610] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  372.206214][ T8610] ntfs3: loop0: Failed to load $Extend (-2).
[  372.231909][ T8610] ntfs3: loop0: Failed to initialize $Extend.
[  372.819079][ T8629] socket: no more sockets
[  373.025454][ T8612] loop3: detected capacity change from 0 to 32768
[  373.053234][ T8612] JBD2: Ignoring recovery information on journal
[  373.106426][ T8612] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  373.231183][ T5787] ocfs2: Unmounting device (7,3) on (node local)
[  373.616909][ T8644] loop3: detected capacity change from 0 to 2048
[  373.627412][   T28] audit: type=1326 audit(1789850526.124:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.0.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77b699e159 code=0x0
[  373.715544][ T8644]  loop3: p2 p3 < > p4 < p5 >
[  373.720527][ T8644] loop3: partition table partially beyond EOD, truncated
[  373.743926][ T8644] loop3: p3 start 4225 is beyond EOD, truncated
[  374.082088][ T8654] loop2: detected capacity change from 0 to 4096
[  374.098681][ T8654] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  374.151787][ T8654] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  374.172041][ T8656] socket: no more sockets
[  374.196436][ T8654] ntfs3: loop2: Failed to load $Extend (-2).
[  374.218957][ T8654] ntfs3: loop2: Failed to initialize $Extend.
[  374.326566][ T8658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.906'.
[  374.431840][ T8659] CIFS: Attempting to mount //127.0.0.1/share
[  374.447244][ T8659] CIFS: VFS: Error connecting to socket. Aborting operation.
[  374.455191][ T8659] CIFS: VFS: cifs_mount failed w/return code = -111
[  374.544401][ T8659] nbd4: detected capacity change from 0 to 63
[  375.176085][ T5087] block nbd4: Receive control failed (result -104)
[  375.802753][ T5821] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  375.823075][ T5087] Bluetooth: hci4: command 0x0406 tx timeout
[  376.026360][ T8684] socket: no more sockets
[  376.036868][ T5821] usb 1-1: config index 0 descriptor too short (expected 28277, got 36)
[  376.062369][ T5821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  376.106969][ T5821] usb 1-1: config 0 has no interfaces?
[  376.138521][ T5821] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  376.153878][ T8685] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  376.208285][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.272946][ T5821] usb 1-1: config 0 descriptor??
[  376.499441][ T8681] loop2: detected capacity change from 0 to 32768
[  376.608847][ T8681] JBD2: Ignoring recovery information on journal
[  376.725398][ T8681] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  376.815438][ T8695] loop3: detected capacity change from 0 to 2048
[  376.892759][ T8695]  loop3: p2 p3 < > p4 < p5 >
[  376.921596][ T8695] loop3: partition table partially beyond EOD, truncated
[  376.968140][ T8695] loop3: p3 start 4225 is beyond EOD, truncated
[  377.012496][   T28] audit: type=1804 audit(1789850529.504:84): pid=8703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.914" name="/newroot/217/file1/file1" dev="loop2" ino=17059 res=1 errno=0
[  377.187810][ T6879] udevd[6879]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  377.188348][ T7059] udevd[7059]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  377.237412][ T6314] udevd[6314]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  377.376777][ T5778] ocfs2: Unmounting device (7,2) on (node local)
[  377.414114][ T6879] udevd[6879]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  377.416173][ T6871] udevd[6871]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  377.435376][ T6314] udevd[6314]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  378.398188][ T5821] usb 1-1: USB disconnect, device number 12
[  378.612693][ T8727] loop2: detected capacity change from 0 to 512
[  378.686625][ T8727] EXT4-fs (loop2): 1 truncate cleaned up
[  378.704502][ T8727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  378.816344][ T8734] loop3: detected capacity change from 0 to 2048
[  378.854323][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  378.861616][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  378.872861][ T8734]  loop3: p2 p3 < > p4 < p5 >
[  378.877608][ T8734] loop3: partition table partially beyond EOD, truncated
[  378.891570][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.907736][ T8734] loop3: p3 start 4225 is beyond EOD, truncated
[  379.406249][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'.
[  380.112420][ T6871] udevd[6871]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  380.156211][ T8144] IPVS: starting estimator thread 0...
[  380.250488][ T8750] IPVS: using max 32 ests per chain, 76800 per kthread
[  380.611426][ T5821] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  380.851334][ T5821] usb 3-1: config index 0 descriptor too short (expected 28277, got 36)
[  380.892202][ T5821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  380.900316][ T8760] socket: no more sockets
[  380.914985][ T5821] usb 3-1: config 0 has no interfaces?
[  380.941937][ T5821] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  380.979752][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.003199][ T5821] usb 3-1: config 0 descriptor??
[  381.118214][ T8740] loop0: detected capacity change from 0 to 32768
[  381.126940][ T8764] autofs4:pid:8764:autofs_fill_super: called with bogus options
[  381.180560][ T8740] JBD2: Ignoring recovery information on journal
[  381.292245][ T8740] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  381.529194][   T28] audit: type=1804 audit(1789850534.024:85): pid=8771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.932" name="/newroot/235/file1/file1" dev="loop0" ino=17059 res=1 errno=0
[  381.689197][ T5779] ocfs2: Unmounting device (7,0) on (node local)
[  381.987002][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'.
[  382.959459][ T6228] usb 3-1: USB disconnect, device number 11
[  383.349207][ T8793] loop3: detected capacity change from 0 to 2048
[  383.402624][ T8793]  loop3: p2 p3 < > p4 < p5 >
[  383.408111][ T8793] loop3: partition table partially beyond EOD, truncated
[  383.425684][ T8793] loop3: p3 start 4225 is beyond EOD, truncated
[  383.486801][ T8791] loop2: detected capacity change from 0 to 32768
[  383.543565][ T6871] blk_print_req_error: 72 callbacks suppressed
[  383.543579][ T6871] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  383.656252][ T6314] udevd[6314]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  383.671045][ T7059] udevd[7059]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  383.686722][ T6871] udevd[6871]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  383.779070][ T8796] loop3: detected capacity change from 0 to 1024
[  383.790388][ T7059] udevd[7059]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  383.793488][ T6871] udevd[6871]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  383.814932][ T8796] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  383.826690][ T6314] udevd[6314]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  383.854871][ T8796] JBD2: no valid journal superblock found
[  383.940357][ T8796] EXT4-fs (loop3): Could not load journal inode
[  383.969864][   T29] INFO: task syz.1.503:7400 blocked for more than 143 seconds.
[  383.972211][   T97] block nbd0: Possible stuck request ffff888022290000: control (read@0,4096B). Runtime 210 seconds
[  383.977725][   T29]       Not tainted syzkaller #0
[  383.993458][    C1] virtqueue callback for ffff888023e69400 (ffffffff85c745d0)
[  384.000980][    C1] No more buffers in queue
[  384.001011][    C1] Receiving skb proto 0x0800 len 52 type 0
[  384.001039][    C1] No more buffers in queue
[  384.005047][ T7505] send_to_group: group=ffff88802da55000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88804c23f580 data_type=1 dir=0000000000000000 cookie=0
[  384.030966][ T7505] inotify_handle_inode_event: group=ffff88802da55000 mark=ffff888058c74258 mask=8
[  384.040264][ T7505] fsnotify_insert_event: group=ffff88802da55000 event=ffff888058b37440
[  384.049835][    C1] No more buffers in queue
[  384.054593][    C1] eth0: xmit ffff88801ff57640 42:01:0a:80:00:01
[  384.058247][ T8799] kcov: kcov_start: t = ffff8880223c0000, size = 524288, area = ffffc9000d31a000
[  384.060955][    C1] Added buffer head 4 to ffff888023e69600
[  384.070004][    C1] virtqueue callback for ffff888023e69600 (ffffffff85c746c0)
[  384.083471][    C1] Sent skb ffff88801ff57640
[  384.088067][    C1] No more buffers in queue
[  384.109769][ T5142] get_one_event: group=ffff88802da55000 event=ffff888058b37440
[  384.117362][ T5142] fsnotify_remove_first_event: group=ffff88802da55000 event=ffff888058b37440
[  384.128909][ T6871] kernfs backing_file: removing
[  384.152630][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  384.159710][ T6871] kernfs offset: removing
[  384.169966][ T6871] kernfs sizelimit: removing
[  384.170523][   T29] task:syz.1.503       state:D
[  384.174627][ T6871] kernfs autoclear: removing
[  384.174665][ T6871] kernfs partscan: removing
[  384.189726][ T5142] inotify_read: group=ffff88802da55000 kevent=ffff888058b37440
[  384.197425][   T29]  stack:25576 pid:7400  ppid:5774   flags:0x00004004
[  384.204680][ T5142] copy_event_to_user: group=ffff88802da55000 event=ffff888058b37440
[  384.213012][ T6871] kernfs dio: removing
[  384.215615][   T29] Call Trace:
[  384.217155][ T6871] kernfs loop: removing
[  384.224595][ T5142] inotify_read: group=ffff88802da55000 kevent=0000000000000000
[  384.232800][   T29]  <TASK>
[  384.236489][ T5778] send_to_group: group=ffff88802da55000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88802cbe9a80 data_type=1 dir=0000000000000000 cookie=0
[  384.240939][   T29]  __schedule+0x15ae/0x4660
[  384.259941][ T6871] kobject: 'loop3' (ffff888020276ba8): kobject_uevent_env
[  384.267150][ T6871] kobject: 'loop3' (ffff888020276ba8): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  384.285930][   T29]  ? asan.module_dtor+0x20/0x20
[  384.295532][ T5142] kobject: 'loop4' (ffff8881488901e8): kobject_uevent_env
[  384.300105][ T6871] kobject: 'loop3' (ffff888020276ba8): kobject_uevent_env
[  384.310468][ T5778] inotify_handle_inode_event: group=ffff88802da55000 mark=ffff88801bbdaaf0 mask=8
[  384.312019][   T29]  ? __mutex_lock+0x66e/0xc80
[  384.319926][ T5778] fsnotify_insert_event: group=ffff88802da55000 event=ffff888058b37480
[  384.329800][ T5142] kobject: 'loop4' (ffff8881488901e8): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  384.333084][ T6871] kobject: 'loop3' (ffff888020276ba8): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  384.353329][   T29]  ? __mutex_trylock_common+0x8a/0x270
[  384.353396][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[  384.353428][   T29]  schedule+0xbd/0x170
[  384.353459][   T29]  schedule_preempt_disabled+0x13/0x20
[  384.394739][ T5142] get_one_event: group=ffff88802da55000 event=ffff888058b37480
[  384.402549][ T5142] fsnotify_remove_first_event: group=ffff88802da55000 event=ffff888058b37480
[  384.427632][   T29]  __mutex_lock+0x673/0xc80
[  384.429236][ T8801] kcov: kcov_start: t = ffff88807d5cbc00, size = 524288, area = ffffc9000d71b000
[  384.441853][   T29]  ? __mutex_lock+0x4d2/0xc80
[  384.456306][ T5142] inotify_read: group=ffff88802da55000 kevent=ffff888058b37480
[  384.469775][   T29]  ? blkdev_get_by_dev+0x11b/0x610
[  384.475133][   T29]  ? mutex_lock_nested+0x20/0x20
[  384.479805][ T5142] copy_event_to_user: group=ffff88802da55000 event=ffff888058b37480
[  384.480494][   T29]  ? iput+0x33f/0x900
[  384.499157][   T29]  ? disk_block_events+0xa7/0x120
[  384.500755][ T5142] inotify_read: group=ffff88802da55000 kevent=0000000000000000
[  384.509641][   T29]  ? blkdev_get_by_dev+0xf6/0x610
[  384.524806][   T29]  blkdev_get_by_dev+0x11b/0x610
[  384.535789][   T29]  blkdev_open+0x14e/0x360
[  384.544934][   T29]  do_dentry_open+0x880/0x14b0
[  384.545689][ T5142] kobject: 'loop2' (ffff888020275fe8): kobject_uevent_env
[  384.555607][   T29]  ? blkdev_mmap+0x1b0/0x1b0
[  384.567763][   T29]  path_openat+0x284f/0x3270
[  384.577261][   T29]  ? do_sys_openat2+0xda/0x1d0
[  384.583938][ T5142] kobject: 'loop2' (ffff888020275fe8): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  384.587899][   T29]  ? __x64_sys_openat+0x139/0x160
[  384.612550][   T29]  ? verify_lock_unused+0x140/0x140
[  384.614295][ T6879] inotify_handle_inode_event: group=ffff88802da55000 mark=ffff888058c74258 mask=8000
[  384.620378][ T7059] inotify_handle_inode_event: group=ffff88802da55000 mark=ffff88801bbdaaf0 mask=8000
[  384.639164][ T6871] inotify_handle_inode_event: group=ffff88802da55000 mark=ffff888058c74d48 mask=8000
[  384.646748][   T29]  ? do_filp_open+0x430/0x430
[  384.649934][ T8802] kcov: kcov_start: t = ffff888028705a00, size = 524288, area = ffffc9000e71f000
[  384.659437][   T29]  do_filp_open+0x1f2/0x430
[  384.667595][ T7059] fsnotify_insert_event: group=ffff88802da55000 event=ffff888058b374c0
[  384.667607][ T6879] fsnotify_insert_event: group=ffff88802da55000 event=ffff888076302ac0
[  384.669846][ T5142] get_one_event: group=ffff88802da55000 event=ffff888076302ac0
[  384.681704][   T29]  ? vfs_tmpfile+0x620/0x620
[  384.684220][ T5142] fsnotify_remove_first_event: group=ffff88802da55000 event=ffff888076302ac0
[  384.706733][   T29]  ? _raw_spin_unlock+0x28/0x40
[  384.709714][ T6871] fsnotify_insert_event: group=ffff88802da55000 event=ffff888076302b00
[  384.731831][   T29]  ? alloc_fd+0x590/0x640
[  384.749474][   T29]  do_sys_openat2+0x134/0x1d0
[  384.763089][ T8803] kcov: kcov_start: t = ffff888031eb0000, size = 524288, area = ffffc9000f322000
[  384.779019][   T29]  ? do_sys_open+0xe0/0xe0
[  384.779688][ T5142] inotify_read: group=ffff88802da55000 kevent=ffff888076302ac0
[  384.794443][ T5142] copy_event_to_user: group=ffff88802da55000 event=ffff888076302ac0
[  384.801922][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  384.802879][ T5142] get_one_event: group=ffff88802da55000 event=ffff888058b374c0
[  384.808509][    C0] virtqueue callback for ffff88801b66ee00 (ffffffff84a02460)
[  384.816218][ T5142] fsnotify_remove_first_event: group=ffff88802da55000 event=ffff888058b374c0
[  384.823425][    C0] virtqueue interrupt with no work for ffff88801b66ec00
[  384.823442][    C0] virtqueue interrupt with no work for ffff88801b66ea00
[  384.830576][ T8144] Added buffer head 0 to ffff88801b66ee00
[  384.862838][   T29]  ? lock_chain_count+0x20/0x20
[  384.867932][   T29]  __x64_sys_openat+0x139/0x160
[  384.879218][   T29]  do_syscall_64+0x55/0xb0
[  384.880515][ T5142] inotify_read: group=ffff88802da55000 kevent=ffff888058b374c0
[  384.883921][   T29]  ? clear_bhb_loop+0x40/0x90
[  384.902320][   T29]  ? clear_bhb_loop+0x40/0x90
[  384.907141][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  384.911659][ T5142] copy_event_to_user: group=ffff88802da55000 event=ffff888058b374c0
[  384.915733][ T8804] kcov: kcov_start: t = ffff88807ac5bc00, size = 524288, area = ffffc90010b13000
[  384.931714][ T5142] get_one_event: group=ffff88802da55000 event=ffff888076302b00
[  384.937745][   T29] RIP: 0033:0x7fbea275e98e
[  384.939306][ T5142] fsnotify_remove_first_event: group=ffff88802da55000 event=ffff888076302b00
[  384.943921][   T29] RSP: 002b:00007fbea3620b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  384.967063][ T8799] kcov: kcov_task_exit: t = ffff8880223c0000, kcov->t = ffff8880223c0000
[  384.973328][ T5142] inotify_read: group=ffff88802da55000 kevent=ffff888076302b00
[  384.986514][ T8805] kcov: kcov_start: t = ffff88802e961e00, size = 524288, area = ffffc90011b17000
[  384.991927][   T29] RAX: ffffffffffffffda RBX: 00007fbea36216c0 RCX: 00007fbea275e98e
[  384.995961][ T5142] copy_event_to_user: group=ffff88802da55000 event=ffff888076302b00
[  385.009415][   T29] RDX: 0000000000000002 RSI: 00007fbea3620c00 RDI: ffffffffffffff9c
[  385.020926][ T5142] inotify_read: group=ffff88802da55000 kevent=0000000000000000
[  385.025527][   T29] RBP: 00007fbea3620c00 R08: 0000000000000000 R09: 0000000000000000
[  385.036798][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  385.037782][ T6871] inotify_handle_inode_event: group=ffff88802da55000 mark=ffff88801bbda0c8 mask=8000
[  385.044923][   T29] R13: 00007fbea2a26038 R14: 00007fbea2a25fa0 R15: 00007fffd2fd7be8
[  385.067546][ T6871] fsnotify_insert_event: group=ffff88802da55000 event=ffff888076302b40
[  385.071040][   T29]  </TASK>
[  385.079437][ T8801] kcov: kcov_task_exit: t = ffff88807d5cbc00, kcov->t = ffff88807d5cbc00
[  385.085951][ T5142] get_one_event: group=ffff88802da55000 event=ffff888076302b40
[  385.095844][ T5142] fsnotify_remove_first_event: group=ffff88802da55000 event=ffff888076302b40
[  385.107201][ T8802] kcov: kcov_task_exit: t = ffff888028705a00, kcov->t = ffff888028705a00
[  385.113317][    C1] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
[  385.138902][   T29] 
[  385.138902][   T29] Showing all locks held in the system:
[  385.151858][ T5142] inotify_read: group=ffff88802da55000 kevent=ffff888076302b40
[  385.173072][   T97] sd 0:0:1:0: cmd ffff888024923d10 CDB: 0x2a
[  385.176000][ T5142] copy_event_to_user: group=ffff88802da55000 event=ffff888076302b40
[  385.179910][   T97] Added buffer head 27 to ffff88814325e200
[  385.180030][   T97] sd 0:0:1:0: cmd ffff8880249240d0 CDB: 0x2a
[  385.198194][ T5142] inotify_read: group=ffff88802da55000 kevent=0000000000000000
[  385.200406][   T97] Added buffer head 20 to ffff88814325e200
[  385.214748][   T97] sd 0:0:1:0: cmd ffff888024924490 CDB: 0x2a
[  385.221031][   T97] Added buffer head 17 to ffff88814325e200
[  385.227004][   T97] sd 0:0:1:0: cmd ffff888024924850 CDB: 0x2a
[  385.233303][   T97] Added buffer head 43 to ffff88814325e200
[  385.239324][   T97] sd 0:0:1:0: cmd ffff888024924c10 CDB: 0x2a
[  385.245447][   T97] Added buffer head 9 to ffff88814325e200
[  385.251353][   T97] sd 0:0:1:0: cmd ffff888024924fd0 CDB: 0x2a
[  385.257468][   T97] Added buffer head 49 to ffff88814325e200
[  385.263399][   T97] sd 0:0:1:0: cmd ffff888024925390 CDB: 0x2a
[  385.269445][   T97] Added buffer head 42 to ffff88814325e200
[  385.275585][   T97] sd 0:0:1:0: cmd ffff888024925750 CDB: 0x2a
[  385.281761][   T97] Added buffer head 89 to ffff88814325e200
[  385.289532][    C1] virtqueue callback for ffff88814325e200 (ffffffff857f2980)
[  385.289731][   T97] sd 0:0:1:0: cmd ffff888024925b10 CDB: 0x2a
[  385.296967][    C1] sd 0:0:1:0: cmd ffff888024924fd0 response 0 status 0x0 sense_len 0
[  385.311399][    C1] sd 0:0:1:0: cmd ffff888024923d10 response 0 status 0x0 sense_len 0
[  385.319485][    C1] sd 0:0:1:0: cmd ffff888024924490 response 0 status 0x0 sense_len 0
[  385.327671][    C1] sd 0:0:1:0: cmd ffff888024924c10 response 0 status 0x0 sense_len 0
[  385.336016][    C1] sd 0:0:1:0: cmd ffff888024924850 response 0 status 0x0 sense_len 0
[  385.344088][    C1] sd 0:0:1:0: cmd ffff888024925390 response 0 status 0x0 sense_len 0
[  385.352206][    C1] No more buffers in queue
[  385.356657][    C1] sd 0:0:1:0: cmd ffff8880249240d0 response 0 status 0x0 sense_len 0
[  385.364748][    C1] sd 0:0:1:0: cmd ffff888024925750 response 0 status 0x0 sense_len 0
[  385.372827][    C1] No more buffers in queue
[  385.377298][   T97] Added buffer head 89 to ffff88814325e200
[  385.384013][   T97] sd 0:0:1:0: cmd ffff888024925ed0 CDB: 0x2a
[  385.390166][   T97] Added buffer head 20 to ffff88814325e200
[  385.396077][   T97] sd 0:0:1:0: cmd ffff888024926290 CDB: 0x2a
[  385.402271][   T97] Added buffer head 42 to ffff88814325e200
[  385.408223][   T97] sd 0:0:1:0: cmd ffff888024926650 CDB: 0x2a
[  385.414331][   T97] Added buffer head 43 to ffff88814325e200
[  385.420236][   T97] sd 0:0:1:0: cmd ffff888024926a10 CDB: 0x2a
[  385.426295][   T97] Added buffer head 9 to ffff88814325e200
[  385.432262][   T97] sd 0:0:1:0: cmd ffff888024926dd0 CDB: 0x2a
[  385.438357][   T97] Added buffer head 17 to ffff88814325e200
[  385.444314][   T97] sd 0:0:1:0: cmd ffff888024927190 CDB: 0x2a
[  385.450409][   T97] Added buffer head 27 to ffff88814325e200
[  385.456297][   T97] sd 0:0:1:0: cmd ffff888024927550 CDB: 0x2a
[  385.463520][   T97] Added buffer head 49 to ffff88814325e200
[  385.471205][    C1] virtqueue callback for ffff88814325e200 (ffffffff857f2980)
[  385.478644][    C1] sd 0:0:1:0: cmd ffff888024927190 response 0 status 0x0 sense_len 0
[  385.486739][    C1] sd 0:0:1:0: cmd ffff888024925b10 response 0 status 0x0 sense_len 0
[  385.494809][    C1] sd 0:0:1:0: cmd ffff888024927550 response 0 status 0x0 sense_len 0
[  385.502875][    C1] sd 0:0:1:0: cmd ffff888024926dd0 response 0 status 0x0 sense_len 0
[  385.510941][    C1] sd 0:0:1:0: cmd ffff888024925ed0 response 0 status 0x0 sense_len 0
[  385.519090][    C1] sd 0:0:1:0: cmd ffff888024926290 response 0 status 0x0 sense_len 0
[  385.527162][    C1] sd 0:0:1:0: cmd ffff888024926650 response 0 status 0x0 sense_len 0
[  385.535231][    C1] sd 0:0:1:0: cmd ffff888024926a10 response 0 status 0x0 sense_len 0
[  385.543293][    C1] No more buffers in queue
[  385.599803][ T5779] send_to_group: group=ffff88802da55000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff888025dfb300 data_type=1 dir=0000000000000000 cookie=0
[  385.615272][ T5779] inotify_handle_inode_event: group=ffff88802da55000 mark=ffff88801bbdad48 mask=8
[  385.623045][   T35] sd 0:0:1:0: cmd ffff888024927910 CDB: 0x2a
[  385.625009][ T5779] fsnotify_insert_event: group=ffff88802da55000 event=ffff888076302b80
[  385.639962][   T29] 1 lock held by khungtaskd/29:
[  385.641261][ T8796] kcov: kcov_task_exit: t = ffff888018391e00, kcov->t = ffff888018391e00
[  385.654272][   T29]  #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  385.659896][ T6871] inotify_handle_inode_event: group=ffff88802da55000 mark=ffff88801bbda960 mask=8000
[  385.664898][   T35] Added buffer head 9 to ffff88814325e200
[  385.677286][ T5778] send_to_group: group=ffff88802da55000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff888025dfae00 data_type=1 dir=0000000000000000 cookie=0
[  385.694882][   T29] 3 locks held by kworker/u4:2/35:
[  385.694904][   T29] 5 locks held by kworker/u4:3/49:
[  385.694947][   T29] 2 locks held by getty/5532:
[  385.694959][   T29]  #0: ffff88802da5a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  385.695066][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}
[  385.727132][ T6871] fsnotify_insert_event: group=ffff88802da55000 event=ffff888076302440
[  385.729773][   T35] sd 0:0:1:0: cmd ffff888024927cd0 CDB: 0x2a
[  385.735090][ T8804] kcov: kcov_task_exit: t = ffff88807ac5bc00, kcov->t = ffff88807ac5bc00
[  385.769707][ T5778] inotify_handle_inode_event: group=ffff88802da55000 mark=ffff888058c74e10 mask=8
[  385.778410][   T35] Added buffer head 43 to ffff88814325e200
[  385.778961][ T5778] fsnotify_insert_event: group=ffff88802da55000 event=ffff888076302480
[  385.785664][ T5142] get_one_event: group=ffff88802da55000 event=ffff888076302b80
[  385.800010][ T6871] inotify_handle_inode_event: group=ffff88802da55000 mark=ffff88801bbdabb8 mask=8000
[  385.801214][ T5142] fsnotify_remove_first_event: group=ffff88802da55000 event=ffff888076302b80
[  385.810675][    C0] virtqueue callback for ffff88801b66ee00 (ffffffff84a02460)
[  385.810727][    C0] virtqueue interrupt with no work for ffff88801b66ec00
[  385.810741][    C0] virtqueue interrupt with no work for ffff88801b66ea00
[  385.810871][   T29] , at: n_tty_read+0x428/0x1370
[  385.829769][ T6228] Added buffer head 0 to ffff88801b66ee00
[  385.834710][ T6871] fsnotify_insert_event: group=ffff88802da55000 event=ffff8880763024c0
[  385.848824][   T35] sd 0:0:1:0: cmd ffff888024928090 CDB: 0x2a
[  385.851933][ T8805] kcov: kcov_task_exit: t = ffff88802e961e00, kcov->t = ffff88802e961e00
[  385.865496][   T35] Added buffer head 42 to ffff88814325e200
[  385.870276][   T29] 1 lock held by udevd/5783:
[  385.874707][ T5142] inotify_read: group=ffff88802da55000 kevent=ffff888076302b80
[  385.889644][    C1] wireguard: wg0: Handshake for peer 2 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2)
[  385.901999][   T35] sd 0:0:1:0: cmd ffff888024928450 CDB: 0x2a
[  385.910032][   T29]  #0: ffff888141b5d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610
[  385.910120][   T29] 1 lock held by udevd/5791:
[  385.910133][   T29]  #0: ffff8880223204c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610
[  385.910199][   T29] 2 locks held by udevd/6871:
[  385.910213][   T29] 1 lock held by udevd/6886:
[  385.910225][   T29]  #0: ffff8880222ff4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610
[  385.910285][   T29] 1 lock held by syz.1.503/7400:
[  385.910297][   T29]  #0: ffff8880223204c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610
[  385.910496][   T49] wireguard: wg0: Sending handshake initiation to peer 2 ([::1]:20003/0%0)
[  385.933597][   T29] 1 lock held by syz.3.951/8803:
[  385.945059][   T35] Added buffer head 20 to ffff88814325e200
[  385.989894][ T5142] copy_event_to_user: group=ffff88802da55000 event=ffff888076302b80
[  385.997948][ T5142] get_one_event: group=ffff88802da55000 event=ffff888076302440
[  386.005781][ T5142] fsnotify_remove_first_event: group=ffff88802da55000 event=ffff888076302440
[  386.019492][   T29] 
[  386.021986][   T29] =============================================
[  386.021986][   T29] 
[  386.023510][ T5142] inotify_read: group=ffff88802da55000 kevent=ffff888076302440
[  386.039766][   T29] NMI backtrace for cpu 1
[  386.043871][ T5142] copy_event_to_user: group=ffff88802da55000 event=ffff888076302440
[  386.044112][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  386.052555][   T35] sd 0:0:1:0: cmd ffff888024928810 CDB: 0x2a
[  386.059353][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  386.059368][   T29] Call Trace:
[  386.059377][   T29]  <TASK>
[  386.059387][   T29]  dump_stack_lvl+0x18c/0x250
[  386.065460][ T5142] get_one_event: group=ffff88802da55000 event=ffff888076302480
[  386.075414][   T29]  ? __wake_up_klogd+0xd9/0x100
[  386.075447][   T29]  ? show_regs_print_info+0x20/0x20
[  386.075473][   T29]  ? load_image+0x420/0x420
[  386.078748][ T5142] fsnotify_remove_first_event: group=ffff88802da55000 event=ffff888076302480
[  386.081690][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  386.087436][   T35] Added buffer head 17 to ffff88814325e200
[  386.093911][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  386.099543][ T5142] inotify_read: group=ffff88802da55000 kevent=ffff888076302480
[  386.103946][   T29]  ? load_image+0x420/0x420
[  386.103973][   T29]  ? wq_watchdog_touch+0xef/0x170
[  386.104001][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  386.104062][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  386.104095][   T29]  watchdog+0xf59/0xfa0
[  386.104200][   T29]  ? watchdog+0x1e1/0xfa0
[  386.104234][   T29]  kthread+0x2fa/0x390
[  386.104255][   T29]  ? hungtask_pm_notify+0x50/0x50
[  386.104280][   T29]  ? kthread_blkcg+0xd0/0xd0
[  386.116688][ T5142] copy_event_to_user: group=ffff88802da55000 event=ffff888076302480
[  386.117542][   T29]  ret_from_fork+0x48/0x80
[  386.124079][   T35] sd 0:0:1:0: cmd ffff888024928bd0 CDB: 0x2a
[  386.128303][   T29]  ? kthread_blkcg+0xd0/0xd0
[  386.128331][   T29]  ret_from_fork_asm+0x11/0x20
[  386.134574][ T5142] get_one_event: group=ffff88802da55000 event=ffff8880763024c0
[  386.142033][   T29]  </TASK>
[  386.142552][   T29] Sending NMI from CPU 1 to CPUs 0:
[  386.146560][ T5142] fsnotify_remove_first_event: group=ffff88802da55000 event=ffff8880763024c0
[  386.151694][    C0] NMI backtrace for cpu 0
[  386.151706][    C0] CPU: 0 PID: 5142 Comm: udevd Not tainted syzkaller #0
[  386.151722][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  386.151731][    C0] RIP: 0010:deref_stack_reg+0x8c/0x230
[  386.151753][    C0] Code: 67 10 4c 89 fb 48 c1 eb 03 0f b6 04 2b 84 c0 0f 85 76 01 00 00 41 8b 2f 31 ff 89 ee e8 5d ae 4b 00 85 ed 0f 95 c0 48 8b 2c 24 <49> 39 ee 0f 96 c1 20 c1 49 39 ec 0f 97 c0 84 c1 74 1e 48 8d 45 08
[  386.151766][    C0] RSP: 0018:ffffc900000075e8 EFLAGS: 00000002
[  386.151782][    C0] RAX: ffffffff813be001 RBX: 1ffff92000000ee1 RCX: 0000000000000100
[  386.151794][    C0] RDX: ffff88807d12bc00 RSI: 0000000000000001 RDI: 0000000000000000
[  386.151804][    C0] RBP: ffffc900032c7990 R08: ffff88807d12bc00 R09: 0000000000000003
[  386.151815][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc900032c8000
[  386.151825][    C0] R13: 1ffff92000000ee3 R14: ffffc900032c0000 R15: ffffc90000007708
[  386.151837][    C0] FS:  00007f3cc437f880(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  386.151851][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  386.151863][    C0] CR2: 00007f77b6bed158 CR3: 0000000018afb000 CR4: 00000000003506f0
[  386.151878][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000063235cd5
[  386.151888][    C0] DR3: 0000000000007000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  386.151899][    C0] Call Trace:
[  386.151905][    C0]  <IRQ>
[  386.151914][    C0]  unwind_next_frame+0x1781/0x2990
[  386.151936][    C0]  ? _printk+0xde/0x130
[  386.151955][    C0]  ? _printk+0xde/0x130
[  386.151970][    C0]  ? stack_trace_save+0x100/0x100
[  386.151988][    C0]  arch_stack_walk+0x144/0x190
[  386.152007][    C0]  ? __dynamic_pr_debug+0x1a3/0x260
[  386.152030][    C0]  stack_trace_save+0xaa/0x100
[  386.152048][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  386.152069][    C0]  ? debug_objects_fill_pool+0x8b/0x790
[  386.152090][    C0]  kasan_save_stack+0x3e/0x60
[  386.152107][    C0]  ? kasan_save_stack+0x3e/0x60
[  386.152123][    C0]  ? __kasan_record_aux_stack+0xaf/0xc0
[  386.152141][    C0]  ? insert_work+0x3d/0x310
[  386.152157][    C0]  ? __queue_work+0xcf4/0xfd0
[  386.152171][    C0]  ? call_timer_fn+0x189/0x540
[  386.152186][    C0]  ? __run_timers+0x59c/0x810
[  386.152199][    C0]  ? run_timer_softirq+0x67/0xf0
[  386.152213][    C0]  ? handle_softirqs+0x27d/0x820
[  386.152228][    C0]  ? __irq_exit_rcu+0xd3/0x190
[  386.152242][    C0]  ? irq_exit_rcu+0x9/0x20
[  386.152255][    C0]  ? sysvec_apic_timer_interrupt+0xa4/0xc0
[  386.152270][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  386.152290][    C0]  ? vprintk_emit+0x46f/0x610
[  386.152306][    C0]  ? _printk+0xde/0x130
[  386.152341][    C0]  __kasan_record_aux_stack+0xaf/0xc0
[  386.152360][    C0]  insert_work+0x3d/0x310
[  386.152379][    C0]  __queue_work+0xcf4/0xfd0
[  386.152394][    C0]  ? __queue_work+0x1bb/0xfd0
[  386.152413][    C0]  call_timer_fn+0x189/0x540
[  386.152428][    C0]  ? queue_work_node+0x3d0/0x3d0
[  386.152442][    C0]  ? call_timer_fn+0xd2/0x540
[  386.152457][    C0]  ? __run_timers+0x810/0x810
[  386.152476][    C0]  ? do_raw_spin_unlock+0x121/0x230
[  386.152496][    C0]  ? queue_work_node+0x3d0/0x3d0
[  386.152511][    C0]  __run_timers+0x59c/0x810
[  386.152542][    C0]  ? detach_timer+0x2b0/0x2b0
[  386.152560][    C0]  ? lock_chain_count+0x20/0x20
[  386.152579][    C0]  run_timer_softirq+0x67/0xf0
[  386.152595][    C0]  handle_softirqs+0x27d/0x820
[  386.152609][    C0]  ? read_tsc+0x9/0x20
[  386.152625][    C0]  ? ktime_get+0x24b/0x280
[  386.152643][    C0]  ? __irq_exit_rcu+0xd3/0x190
[  386.152660][    C0]  ? do_softirq+0x1a0/0x1a0
[  386.152677][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  386.152699][    C0]  __irq_exit_rcu+0xd3/0x190
[  386.152715][    C0]  ? irq_exit_rcu+0x20/0x20
[  386.152733][    C0]  irq_exit_rcu+0x9/0x20
[  386.152747][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  386.152762][    C0]  </IRQ>
[  386.152767][    C0]  <TASK>
[  386.152772][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  386.152791][    C0] RIP: 0010:vprintk_emit+0x46f/0x610
[  386.152809][    C0] Code: 85 3f 01 00 00 e8 c1 a8 1b 00 45 89 f7 48 85 db 48 8b 1c 24 75 07 e8 b0 a8 1b 00 eb 06 e8 a9 a8 1b 00 fb 48 c7 c7 c0 64 12 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 b3
[  386.152822][    C0] RSP: 0018:ffffc900032c77a0 EFLAGS: 00000293
[  386.152835][    C0] RAX: ffffffff816be2a7 RBX: ffffffff816be14b RCX: ffff88807d12bc00
[  386.152846][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d1264c0
[  386.152856][    C0] RBP: ffffc900032c7890 R08: ffffffff911eb5af R09: 1ffffffff223d6b5
[  386.152867][    C0] R10: dffffc0000000000 R11: fffffbfff223d6b6 R12: dffffc0000000000
[  386.152879][    C0] R13: 1ffff92000658ef8 R14: 000000000000004a R15: 000000000000004a
[  386.152891][    C0]  ? vprintk_emit+0x30b/0x610
[  386.152909][    C0]  ? vprintk_emit+0x467/0x610
[  386.152929][    C0]  ? vprintk_emit+0x30b/0x610
[  386.152947][    C0]  ? printk_sprint+0x460/0x460
[  386.152963][    C0]  ? vprintk_emit+0x53d/0x610
[  386.152979][    C0]  ? vprintk_emit+0x30b/0x610
[  386.152996][    C0]  ? printk_sprint+0x460/0x460
[  386.153037][    C0]  _printk+0xde/0x130
[  386.153056][    C0]  ? load_image+0x420/0x420
[  386.153073][    C0]  ? load_image+0x420/0x420
[  386.153093][    C0]  __dynamic_pr_debug+0x1a3/0x260
[  386.153115][    C0]  ? param_get_dyndbg_classes+0x170/0x170
[  386.153135][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  386.153154][    C0]  ? param_get_dyndbg_classes+0x170/0x170
[  386.153185][    C0]  fsnotify_remove_first_event+0x2a7/0x2c0
[  386.153206][    C0]  inotify_read+0x232/0xa90
[  386.153228][    C0]  ? do_inotify_init+0x450/0x450
[  386.153248][    C0]  ? wait_woken+0x180/0x180
[  386.153266][    C0]  ? common_file_perm+0x198/0x1f0
[  386.153286][    C0]  ? fsnotify_perm+0x271/0x5e0
[  386.153306][    C0]  ? do_inotify_init+0x450/0x450
[  386.153324][    C0]  vfs_read+0x298/0x990
[  386.153346][    C0]  ? kernel_read+0x1e0/0x1e0
[  386.153370][    C0]  ? __se_sys_sendmsg+0x1e7/0x2c0
[  386.153391][    C0]  ? __fdget_pos+0x1d8/0x330
[  386.153412][    C0]  ksys_read+0x151/0x260
[  386.153432][    C0]  ? vfs_write+0x9a0/0x9a0
[  386.153453][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  386.153470][    C0]  do_syscall_64+0x55/0xb0
[  386.153488][    C0]  ? clear_bhb_loop+0x40/0x90
[  386.153507][    C0]  ? clear_bhb_loop+0x40/0x90
[  386.153534][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  386.153552][    C0] RIP: 0033:0x7f3cc3ca7407
[  386.153566][    C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  386.153578][    C0] RSP: 002b:00007fff89479ad0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  386.153593][    C0] RAX: ffffffffffffffda RBX: 00007f3cc437f880 RCX: 00007f3cc3ca7407
[  386.153604][    C0] RDX: 0000000000000110 RSI: 00007fff89479d10 RDI: 0000000000000007
[  386.153614][    C0] RBP: 00000000000000e3 R08: 0000000000000000 R09: 0000000000000000
[  386.153623][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  386.153633][    C0] R13: 000056368d9ce100 R14: 00005636acde3c10 R15: 00007fff89479d10
[  386.153652][    C0]  </TASK>
[  386.290017][   T35] Added buffer head 49 to ffff88814325e200
[  386.294853][ T5142] inotify_read: group=ffff88802da55000 kevent=ffff8880763024c0
[  386.318795][   T35] sd 0:0:1:0: cmd ffff888024928f90 CDB: 0x2a
[  386.339737][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  386.339752][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  386.339771][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  386.339782][   T29] Call Trace:
[  386.339790][   T29]  <TASK>
[  386.339799][   T29]  dump_stack_lvl+0x18c/0x250
[  386.339831][   T29]  ? show_regs_print_info+0x20/0x20
[  386.339855][   T29]  ? load_image+0x420/0x420
[  386.339885][   T29]  panic+0x2ca/0x720
[  386.339908][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  386.339927][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  386.339949][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  386.339975][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  386.340005][   T29]  watchdog+0xf98/0xfa0
[  386.340029][   T29]  ? watchdog+0x1e1/0xfa0
[  386.340056][   T29]  kthread+0x2fa/0x390
[  386.340073][   T29]  ? hungtask_pm_notify+0x50/0x50
[  386.340096][   T29]  ? kthread_blkcg+0xd0/0xd0
[  386.340113][   T29]  ret_from_fork+0x48/0x80
[  386.340134][   T29]  ? kthread_blkcg+0xd0/0xd0
[  386.340151][   T29]  ret_from_fork_asm+0x11/0x20
[  386.340185][   T29]  </TASK>
[  386.344214][   T29] Kernel Offset: disabled