last executing test programs:

1m20.920463097s ago: executing program 1 (id=268):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x1, 0x0, 0x0, 0x1, 0x4, 0x20, 0x0, 0x0, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x2b}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x10, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000440)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m20.771810811s ago: executing program 1 (id=269):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x17e})

1m20.710053813s ago: executing program 1 (id=270):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000001440)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x100, 0x40, 0x200, 0x0, 0x40, 0x38, 0x3, 0x40, 0x2, 0x1}, [{0x1, 0x0, 0x0, 0x10000, 0x150, 0x10, 0x1000}, {0x1, 0x0, 0x0, 0x20000, 0x200, 0x0, 0x2000, 0x10}, {}], '\x00'/4096, ['\x00', '\x00', '\x00']}, 0x13e8)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000002840), &(0x7f0000002880), 0x0)

1m20.561388876s ago: executing program 1 (id=272):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c646174615f666c7573682c66617374626f6f742c6a71666d743d76667376312c6e6f696e6c696e655f64656e7472792c7573726a71756f74613d66326673002c00ff371013587045d0d273e856ce75c2b11120ece6d6a76856a2cdd8c835ef14aa3aea583b7f3affd12ff9abc9b21098874a75607f009920ad1a283ce7b8b528e239692ab156e30dd8365f708e6c98cfcd0b30d5304dd70f87da026e2d4e4df1ad07ba72683f43d76541d455d1fa118f0900000009fe28bfded255e7c5806f05b80ec0e186b4f72759eb096a1fe6793e734fe61555f01ff9f23bc11370aa247215e8f1410ea4728bb2a2c2d20bc5e61b0a4c7ddb25da21c75f35f711581d1f5b8db3be07c80000000000000000"], 0x1, 0x54f4, &(0x7f0000000800)="$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")
symlinkat(&(0x7f00000063c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000006400)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000006440)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000006480)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000064c0)='./bus\x00', &(0x7f0000006500), 0x0, &(0x7f0000006540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1m18.705134501s ago: executing program 1 (id=278):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0)

1m16.557692643s ago: executing program 1 (id=282):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x3, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[], 0x68)
sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x5ac, 0x0, 0x0, 0xfffffffffffffec8)

1m16.016552696s ago: executing program 32 (id=282):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x3, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[], 0x68)
sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x5ac, 0x0, 0x0, 0xfffffffffffffec8)

55.727763538s ago: executing program 2 (id=427):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f000000a9c0), 0x40, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f000000aa00)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f000000aa40)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f000000ab40)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x40})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f000002f9c0)={0x1, &(0x7f000002fa00)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

55.539720843s ago: executing program 2 (id=430):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x55af)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f000009de80)=0x8)

54.907201678s ago: executing program 2 (id=432):
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000e40)='./proc\x00', &(0x7f0000000e80)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000f00)='7', 0x1)
cachestat(r0, &(0x7f0000000f40)={0x80, 0x7ff}, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x4000)

54.316107573s ago: executing program 2 (id=437):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x4004, &(0x7f00000002c0)={[{@adaptive_mode}, {@jqfmt_vfsold}, {@fault_injection={'fault_injection', 0x3d, 0x64}}, {@noinline_xattr}, {@fault_type={'fault_type', 0x3d, 0x5}}, {@noinline_xattr}, {@discard_unit_segment}, {@fastboot}, {@fsync_mode_strict}, {@fastboot}]}, 0x21, 0x5544, &(0x7f0000005a40)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x14a0, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

53.352697506s ago: executing program 2 (id=443):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0)
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009a00)={[{@grpquota}, {@usrquota}, {@qnoenforce}]}, 0x4, 0x9860, &(0x7f0000000140)="$eJzs3Qm8rWPBuP91BhzzUKIJmdJozJCSeSjJHJkzZwwJZR7KUFFCRaFISiFURCoJmck8z/M8j//PcQ5xusj7/73vy+u6ro9z1vTste99f9f92Gs/+6y10qLLLTgYTDIY1Yun/+qMA25YffkJl9zixP2GX37I3kvdPfrqsUedTDr/6NMFRp8uOBgMhoy+nyGjrhs+3wknDh0MH4z8719NMO54QycYDMYbfXH0/QzmGnUy/pEvbvf8GPFApxn56fYa9eeFJhx5JyPPrLrms5sOBoMRL/v4keOa5d++UGkLLLj8gv+yeslt6Oibh/zrthdOh4/6M/7hg8H4hw5e/fExctuxXvax/5uN/JyTTDdY4YY34HP/n+uzCyy97Bj+I9fisNHXzTVyjY+5Bo2N+Tjfe7mN7hw9hUNetj8aOsaaedO30gKLLjl49XU8WGqR7e94/oX95vCFB4PhiwwGwxcdDIYv9kZ71H9Pb+iDr6qqqt6QFlhw9pHP/4aO8f3AiBe/r6XvC896ZtZbBoPhS436fnf4mi8+F6yqqqqqqqqqN2cLLDj7QvD8f5LXev4/zSm7Tdrz/6qqqqqqqqr/Oy2xwIKzj3yuP8bz/ylf6/n/A3cdc8So3/2ff65RH/XcG/tFVFVVVVVVVdVrtugS+Px/mtd6/n/OCdOc3/P/qqqqqqqqqv87LTv7ogsNXvY6e6OvnunF2+n5/6m3X7faGzXeqqqqqqqqqvqv99y9J5/2r9d8n2owxuu9v9DonwsMOfb0Cy98wwb65mjIv/88ZKc3ekz/r410HnH0NIPBpiu80UOpN6D/M69VX/8j5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4l7l+P9Lr/9/6vFrv/he8O+fYfYrTv7XR77w3v/Dl1ri3p3foKG/Eb1Vj/8PNhwyGIz2nWTDwWCw1ALLLj/TYDA4+YrZZ5h+8NJtc4+8bd7Jhr3wBvEv/jORRSblO95p2lGnIx8og7e/dB/HvnD/Szx/2LAhYwziZU160hFHbLDS43OMeTrjq38dQ186N+GJd734b1mGjrHRiFf54Bfv/8WvZUzn0WOfaeTYZ95qk81n3nLb7T6y4SZrrb/u+utuOs9sc846xzzzzDnnzOttuPG6s4z6+9XmbJoX/l7o9czZBGPO2b0LvHzOxvzaXm3OpnntOXvhHvc/e8SnXpyz4f/FOVvotedsmg1Hf6JJ5x9rsOYLczNkMJh04bEG24y8MOs4g8Gki4zedsqR235isqGDwb7/+kJHnhvnpcfgkJ1GbrPSosst+K+33Z/k38b2Ku9nP/bokc8/+nSB0acLjvo0kwz+9VAcPt8JJw4dORevmI4Jxh1v6ASDwXijL46+n8E8o07GO+XF7V7lfdbHGOgLL7Oy16g/LzThYDAYf+SZqdY6dfeRU/+/8D7t/7/+//9vXnMPeenxOGT0n9HbjPJaYLEl/vW5XpiGkXM3bPR1c400+W9+a/tX9G/jnWbEYJrXGO9rvC7OC9Hja+OTJ9/lv+t1cWi8U77GeF/jdXxfdbwr3nLQnaPu6r9tvGPs65Z84e/5X8++bvDa+7phdAfrnvfeMfd1n3n1Ib5id/niHI0zxkavtq+b8uCpdxp5//O/9r5uyZFjH+sV+7qhg8GkC724rxu541t0rMG+Iy/MNvLCYmMNjhp5YfYXLow7OH3khY+uvdnG64y8YvF/fxzMNOQVv6AJ62zRMdbZkJd97UPG+P3O4aNOxz/8xfdwepX95pDRX9Z/3FfQ43aS1xjva7z/FM7zyOvWOW7E5P9d7z9F4x3x2uN9tffLftXx7vPYqTf8N4/3pXU21suma/HXs86meeU6G/klDnvZyni934etA9uPOj/lS/e29Q53vfQ9xVhj3O9/+p5i8ddeZ5NsOMbH7XnoYMhrzc1ir2du3vNv+6CdXz43r/f7rZmmG3X7sNeYm3HmWX3GF+dm7P/i3Cz2X52b+QfDXjk3wweLDAaD6UfvHxZ9PXMz5WvPzet93IwH2486v+5LVy2899Fnvjg3Y87Ff5qbRf+rczPNS4+b6V+4bdqhg7HHHmyz1lZbbTHrqL9fvDjbqL9few0u/HrmcpL/nrl81/BXm8t/PVQnuOX8w//DGvy3ffqL97/wf3UuBy/N5WDDMRdLvVnr53/u8neXv7v83eXvLn93+Yt7leP/L73+/4GTzLvf6B9ujHX+1FPs8UaP9w3uLX38f7TvK47/7zHF1OcPHbx022senx21zZvy+Oxco07GP/LF7cY8PsgDffXjs4fOM9du/0vHZ/9/9eJafR0/h2v/7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf3Ksf/Z3nx9wBun3WZh0YfCB3r7l1XWeaNHu8b3Fv6+P9o31cc/19mlV3vHjp46bbXPP4/ahvH8f+bnl50nzfz8f8X12rH/+s/lL879B/zNUDqLVvr313+7l7Lf9z/xXHUG1Pr313+7vJ3l7+7/N3l7y5/d/mLe5Xj//O/+HsAxxxz0HYv/j7ApZPudfIbPd43uLfq8f/e/99b+393+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uBeO/4/6N8Iv/5fCS/e4wOD4///tRv/+x2AM/2Xyxyz+y+ZPDR0MHP7L5Y9Z1v/y+WMW/xXyxyz+K+aPWfw/nz9m8V8pf8ziv3L+mMX/C/ljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi/8X88cs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/y/lj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y/nj1n8t8gfs/hvmT9m8d8qf8zi/5X8MYv/1vljFv+v5o9Z/LfJH7P4b5s/ZvHfLn/M4v+1/DGL/9fzxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/PfIH7P4fyN/zOL/zfwxi/+e+WMW/73yxyz+e+ePWfz3yR+z+H8rf8zi/+38MYv/d/LHLP775o9Z/PfLH7P4fzd/zOL/vfwxi//++WMW/+/nj1n8D8gfs/gfmD9m8T8of8zi/4P8MYv/D/PHLP4/yh+z+B+cP2bxPyR/zOL/4/wxi/9P8scs/ofmj1n8D8sfs/gfnj9m8f9p/pjF/2f5Yxb/I/LHLP5H5o9Z/H+eP2bxPyp/zOL/i/wxi//R+WMW/1/mj1n8f5U/ZvE/Jn/M4v/r/DGL/2/yxyz+x+aPWfyPyx+z+B+fP2bx/23+mMX/hPwxi/+J+WMW/5Pyxyz+v8sfs/j/Pn/M4v+H/DGL/8n5Yxb/U/LHLP5/zB+z+J+aP2bxPy1/zOL/p/wxi//p+WMW/z/nj1n8/5I/ZvH/a/6Yxf+M/DGL/9/yxyz+Z+aPWfz/nj9m8T8rf8zif3b+mMX/nPwxi/8/8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfz/mT9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjEf8ggf8ziPyR/zOI/NH/M4j8sf8ziPzx/zOI/Vv6YxX/s/DGL/zj5Yxb/EfljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfzflj9m8X97/pjFf/L8MYv/O/LHLP5T5I9Z/KfMH7P4vzN/zOL/rvwxi/+788cs/u/JH7P4vzd/zOI/Vf6YxX/q/DGL/zT5Yxb/9+WPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL//vzxyz+M+WPWfw/kD9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8f9o/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8f9Y/pjFf878MYv/XPljFv+588cs/vPkj1n8P54/ZvGfN3/M4v+J/DGL/yfzxyz+8+WPWfw/lT9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf/T+WMW/8/kj1n8l8wfs/h/Nn/M4r9U/pjF/3P5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/5/PHLP4r5Y9Z/FfOH7P4fyF/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvH/Yv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4v+l/DGL/0b5Yxb/jfPHLP6b6PzHfV1bWfw31fm/viz+m+WPWfw3zx+z+H85f8ziv0X+mMV/y/wxi/9W+WMW/6/kj1n8t84fs/h/NX/M4r9N/pjFf9v8MYv/dvljFv+v5Y9Z/L+eP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4r9H/pjF/xv5Yxb/b+aPWfz3zB+z+O+VP2bx3zt/zOK/T/6Yxf9b+WMW/2/nj1n8v5M/ZvHfN3/M4r9f/pjF/7v5Yxb/7+WPWfz3zx+z+H8/f8zif0D+mMX/wPwxi/9B+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/g/DGL/yH5Yxb/H+ePWfx/kj9m8T80f8zif1j+mMX/8Pwxi/9P88cs/j/LH7P4H5E/ZvE/Mn/M4v/zV/rf9r8+rjdpFv+jWv+Yxf8X+WMW/6Pzxyz+v8wfs/j/Kn/M4n9M/pjF/9f5Yxb/3+SPWfyPzR+z+B+XP2bxPz5/zOL/2/wxi/8J+WMW/xPzxyz+J+WPWfx/lz9m8f99/pjF/w/5Yxb/k/PHLP6n5I9Z/P+YP2bxPzV/zOJ/Wv6Yxf9P+WMW/9Pzxyz+f84fs/j/JX/M4v/X/DGL/xn5Yxb/v+WPWfzPzB+z+P89f8zif1b+mMX/7Pwxi/85+WMS/xfK/9+T+A85N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zi/8/8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86/zEaPvrU4X9N/phl/V+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjE/4Wz+f97Fv8h+WMW/6H5Yxb/YfljFv/h+WMW/7Hyxyz+Y+ePWfzHyR+z+I/IH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8Z8sf8zi/7b8MYv/2/PHLP6T549Z/N+RP2bxnyJ/zOI/Zf6Yxf+d+WMW/3flj1n8350/ZvF/T/6Yxf+9+WMW/6nyxyz+U+ePWfynyR+z+L8vf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfzfnz9m8Z8pf8zi/4H8MYv/B/PHLP4fyh+z+H84f8zi/5H8MYv/R/PHLP4z549Z/GfJHxtyxgFjDQaDt7z/rPljlvU/W/6YxX/2/DGL/xz5Yxb/j+WPWfznzB+z+M+VP2bxnzt/zOI/T/6Yxf/j+WMW/3nzxyz+n8gfs/h/Mn/M4j9f/pjF/1P5Yxb/+fPHLP4LDMZ9o0b0ps7iv2DrH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8P50/ZvH/TP6YxX/J/DGL/2fzxyz+S+WPWfw/lz9m8V86f8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+H8+f8ziv1L+mMV/5fwxi/8X8scs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/y/mj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+X8ofs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+X84fs/hvkT9m8d8yf8ziv1X+mMX/K/ljFv+t88cs/l/NH7P4b5M/ZvHfNn/M4r9d/pjF/2v5Yxb/r+ePWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P475E/ZvH/Rv6Yxf+b+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx/1b+mMX/2/ljFv/v5I9Z/PfNH7P475c/ZvH/bv6Yxf97+WMW//3zxyz+388fs/gfkD9m8T8wf8zif1D+mMX/B/ljFv8f5o9Z/H+UP2bxPzh/zOJ/SP6Yxf/H+WMW/5/kj1n8D80fs/gflj9m8T88f8zi/9P8MYv/z/LHLP5H5I9Z/I/MH7P4/zx/zOJ/VP6Yxf8X+WMW/6Pzxyz+v8wfs/j/Kn/M4n9M/pjF/9f5Yxb/3+SPWfyPzR+z+B+XP2bxPz5/zOL/2/wxi/8J+WMW/xPzxyz+J+WPWfx/lz9m8f99/pjF/w/5Yxb/k/PHLP6n5I9Z/P+YP2bxPzV/zOJ/Wv6Yxf9P+WMW/9Pzxyz+f84fs/j/JX/M4v/X/DGL/xn5Yxb/v+WPWfzPzB+z+P89f8zif1b+mMX/7Pwxi/85+WMW/3/kj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+P8zf8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6jGv7Kixb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88ck/sMG+WMW/yH5Yxb/ofljFv9h+WMW/+H5Yxb/sfLHLP5j549Z/MfJH7P4j8gfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOL/tvwxi//b88cs/pPnj1n835E/ZvGfIn/M4j9l/pjF/535Yxb/d+WPWfzfnT9m8X9P/pjF/735Yxb/qfLHLP5T549Z/KfJH7P4vy9/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/N+fP2bxnyl/zOL/gfwxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/9H88cs/jPnj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi//HXtt/nP/xcb1Js/jP2frHLP5z5Y9Z/OfOH7P4z5M/ZvH/eP6YxX/e/DGL/yfyxyz+n8wfs/jPlz9m8f9U/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/0/nj1n8P5M/ZvFfMn/M4v/Z/DGL/1L5Yxb/z+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP6fzx+z+K+UP2bxXzl/zOL/hfwxi/8q+WMW/1Xzxyz+q+n9+SUOLf6r6/05i/8a+WMW/zXzxyz+a+WPWfy/mD9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+H8pf8ziv1H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+H85f8ziv0X+mMV/y/wxi/9W+WMW/6/kj1n8t84fs/h/NX/M4r9N/pjFf9v8MYv/dvljFv+v5Y9Z/L+eP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4r9H/pjF/xv5Yxb/b+aPWfz3zB+z+O+VP2bx3zt/zOK/T/6Yxf9b+WMW/2/nj1n8v5M/ZvHfN3/M4r9f/pjF/7v5Yxb/7+WPWfz3zx+z+H8/f8zif0D+mMX/wPwxi/9B+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/g/DGL/yH5Yxb/H+ePWfx/kj9m8T80f8zif1j+mMX/8Pwxi/9P88cs/j/LH7P4H5E/ZvE/Mn/M4v/z/DGL/1H5Yxb/X+SPWfyPzh+z+P8yf8zi/6v8MYv/MfljFv9f54+95f1HvHB22G/yx97y/qMadmz+mMX/uPwxi//x+WMW/9/mj1n8T8gfs/ifmD9m8T8pf8zi/7v8MYv/7/PHLP5/yB+z+J+cP2bxPyV/zOL/x/wxi/+p+WMW/9Pyxyz+f8ofs/ifnj9m8f9z/pjF/y/5Yxb/v+aPWfzPyB+z+P8tf8zif2b+mMX/7/ljFv+z8scs/mfnj1n8z8kfs/j/I3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/n/ljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549J/IcP8scs/kPyxyz+Q/PHLP7D8scs/sPzxyz+Y+WPWfzHzh+z+I+TP2bxH5E/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8ziP1n+mMX/bfljFv+3549Z/CfPH7P4vyN/zOI/Rf6YxX/K/DGL/zvzxyz+78ofs/i/O3/M4v+e/DGL/3vzxyz+U+WPWfynzh+z+E+TP2bxf1/+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+L8/f8ziP1P+mMX/A/ljFv8P5o9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv+P5Y9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjF/+P5Yxb/efPHLP6fyB+z+H8yf8ziP1/+mMX/U/ljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfw/nT9m8f/Ma/ibHxcW/yXlzq+Wxf+z+WMW/6Xyxyz+n8sfs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/xXyxyz+K+aPWfw/nz9m8V8pf8ziv3L+mMX/C/ljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi/8X88cs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/y/lj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y/nj1n8t8gfs/hvmT9m8d8qf8zi/5X8MYv/1vljFv+v5o9Z/LfJH7P4b5s/ZvHfLn/M4v+1/DGL/9fzxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3fLHLP67549Z/PfIH7P4fyN/zOL/zfwxi/+e+WMW/73yxyz+e+ePWfz3yR+z+H8rf8zi/+38MYv/d/LHLP775o9Z/PfLH7P4fzd/zOL/vfwxi//++WMW/+/nj1n8D8gfs/gfmD9m8T8of8zi/4P8MYv/D/PHLP4/yh+z+B+cP2bxPyR/zOL/4/wxi/9P8scs/ofmj1n8D8sfs/gfnj9m8f9p/pjF/2f5Yxb/I/LHLP5H5o9Z/H+eP2bxPyp/zOL/i/wxi//R+WMW/1/mj1n8f5U/ZvE/Jn/M4v/r/DGL/2/yxyz+x+aPWfyPyx+z+B+fP2bx/23+mMX/hPwxi/+J+WMW/5Pyxyz+v8sfs/j/Pn/M4v+H/DGL/8n5Yxb/U/LHLP5/zB+z+J+aP2bxPy1/zOL/p/wxi//p+WMW/z/nj1n8/5I/ZvH/a/6Yxf+M/DGL/9/yxyz+Z+aPWfz/nj9m8T8rf8zif3b+mMX/nPwxi/8/8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0sGg8Hzzz+/4xs1rDdrFv9LW/+Yxf+f+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj0n8xxrkj1n8h+SPWfyH5o9Z/Iflj1n8h+ePWfzHyh+z+I+dP2bxHyd/zOI/In/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi//b8scs/m/PH7P4T54/ZvF/R/6YxX+K/DGL/5T5Yxb/d+aPWfzflT9m8X93/pjF/z35Yxb/9+aPWfynyh+z+E+dP2bxnyZ/zOL/vvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bxf3/+mMV/pvwxi/8H8scs/h/MH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv858scs/h/LH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/x/PHLP7z5o9Z/D+RP2bx/2T+mMV/vvwxi/+n8scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H86f8zi/5n8MYv/kvljFv/P5o9Z/JfKH7P4fy5/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvH/fP6YxX+l/DGL/8r5Yxb/L+SPWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5fzB+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/L+UP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/L+cP2bx3yJ/zOK/Zf6YxX+r/DGL/1fyxyz+W+ePWfy/mj9m8d8mf8ziv23+mMV/u/wxi//X8scs/l/PH7P4b58/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv9d8scs/rvmj1n8d8sfs/jvnj9m8d8jf8zi/438MYv/N/PHLP575o9Z/PfKH7P4750/ZvHfJ3/M4v+t/DGL/7fzxyz+38kfs/jvmz9m8d8vf8zi/938MYv/9/LHLP77549Z/L+fP2bxPyB/zOJ/YP6Yxf+g/DGL/w/yxyz+P8wfs/j/KH/M4n9w/pjF/5D8MYv/j/PHLP4/yR+z+B+aP2bxPyx/zOJ/eP6Yxf+n+WMW/5/lj1n8j8gfs/gfmT9m8f95/pjF/6j8MYv/L/LHLP5H549Z/H+ZP2bx/1X+mMX/mPwxi/+v88cs/r/JH7P4H5s/ZvE/Ln/M4n98/pjF/7f5Yxb/E/LHLP4n5o9Z/E/KH7P4/y5/zOL/+/wxi/8f8scs/ifnj1n8T8kfs/j/MX/M4n9q/pjF/7T8MYv/n/LHLP6n549Z/P+cP2bx/0v+mMX/r/ljFv8z8scs/n/LH7P4n5k/ZvH/e/6Yxf+s/DGL/9n5Yxb/c/LHLP7/yB+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvH/Z/6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMS/7EH+WMW/yH5Yxb/ofljFv9h+WMW/+H5Yxb/sfLHLP5j549Z/MfJH7P4j8gfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOL/tvwxi//b88cs/pPnj1n835E/ZvGfIn/M4j9l/pjF/52vw3/4/+S43qRZ/N/V+scs/u/OH7P4vyd/zOL/3vwxi/9U+WMW/6nzxyz+0+SPWfzflz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+788fs/jPlD9m8f9A/pjF/4P5Yxb/D+WPWfw/nD9m8f9I/pjF/6P5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjF/2P5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvH/eP6YxX/e/DGL/yfyxyz+n8wfs/jPlz9m8f9U/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/0/nj1n8P5M/ZvFfMn/M4v/Z/DGL/1L5Yxb/z+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP6fzx+z+K+UP2bxXzl/zOL/hfwxi/8q+WNvUf8hY1iPvWr+2FvU/4Vevv5Xyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/xfzxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/L+WPWfw3yh+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/L+ePWfy3yB+z+G+ZP2bx3yp/zOL/lfwxi//W+WMW/6/mj1n8t8kfs/hvmz9m8d8uf8zi/7X8MYv/1/PHLP7b549Z/HfIH7P47/gf/Hf+nx7XmzSL/06tf8ziv3P+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfz3yB+z+H8jf8zi/838MYv/nvljFv+98scs/nvnj1n898kfs/h/K3/M4v/t/DGL/3fyxyz+++aPWfz3yx+z+H83f8zi/738MYv//vljFv/v549Z/A/IH7P4H5g/ZvE/KH/M4v+D/DGL/w/zxyz+P8ofs/gfnD9m8T8kf8zi/+P8MYv/T/LHLP6H5o9Z/A/LH7P4H54/ZvH/af6Yxf9n+WMW/yPyxyz+R+aPWfx/nj9m8T8qf8zi/4v8MYv/0fljFv9f5o9Z/H+VP2bxPyZ/zOL/6/wxi/9v8scs/sfmj1n8j8sfs/gfnz9m8f9t/pjF/4T8MYv/ifljFv+T8scs/r/LH7P4/97nv+Pr2cji/wef/+vK4n9y/pjF/5T8MYv/H53+9/+nDSz+pzr9/2MW/9Pyxyz+f8ofs/ifnj9m8f9z/pjF/y/5Yxb/v+aPWfzPyB+z+P8tf8zif2b+mMX/7/ljFv+z8scs/mfnj1n8z8kfs/j/I3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/n/ljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+2Av+g8Fb3v+R/AfjwnWW9f9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofGzL2YDAQ+D+dP2ZZ/8/kj1n8n80fs/g/lz9m8X8+f0ziP84gf8ziPyR/zOI/NH/M4j8sf8ziPzx/zOI/Vv6YxX/s/DGL/zj5Yxb/EfljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzH92IV1yy+E+WP2bxf1v+mMX/7fljFv/J88cs/u/IH7P4T5E/ZvGfMn/M4v/O/DGL/7vyxyz+784fs/i/J3/M4v/e/DGL/1T5Yxb/qfPHLP7T5I9Z/N+XP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP7vzx+z+M+UP2bx/0D+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMX/o/ljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMX/Y/ljFv8588cs/nPlj1n8584fs/jPkz9m8f94/pjFf978MYv/J/LHLP6fzB+z+M+XP2bx/1T+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/T+ePWfw/kz9m8V8yf8zi/9n8MYv/UvljFv/P5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/p/PH7P4r5Q/ZvFfOX/M4v+F/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjF/4v5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/l/LHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/l/PHLP5b5I9Z/LfMH7P4b5U/ZvH/Sv6YxX/r/DGL/1fzxyz+2+SPWfy3zR+z+G+XP2bx/1r+mMX/6/ljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/93Rv0eExX+PtDGL/zfyxyz+38wfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+38scs/t/OH7P4fyd/zOK/r9F/nP+8icV/P6P/68ji/938MYv/9/LHLP77549Z/L+fP2bxPyB/zOJ/YP6Yxf+g/DGL/w/yxyz+P8wfs/j/KH/M4n9w/pjF/5D8MYv/j/PHLP4/yR+z+B+aP2bxPyx/zOJ/eP6Yxf+n+WMW/5/lj1n8j8gfs/gfmT9m8f95/pjF/6j8MYv/L/LHLP5H549Z/H+ZP2bx/1X+mMX/mPwxi/+v88cs/r/JH7P4H5s/ZvE/Ln/M4n98/pjF/7f5Yxb/E/LHLP4n5o9Z/E/KH7P4/y5/zOL/+/wxi/8f8scs/ifnj1n8T8kfs/j/MX/M4n9q/pjF/7T8MYv/n/LHLP6n549Z/P+cP2bx/0v+mMX/r/ljFv8z8scs/n/LH7P4n5k/ZvH/e/6Yxf+s/DGL/9n5Yxb/c/LHLP7/yB+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvH/Z/6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMS/xGD/DGL/5D8MYv/0Pwxi/+w/DGL//D8MYv/WPljFv+x88cs/uPkj1n8R+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4T5Y/ZvF/W/6Yxf/t+WMW/8nzxyz+78gfs/hPkT9m8Z8yf8zi/878MYv/u/LHLP7vzh+z+L8nf8zi/978MYv/VPljFv+p88cs/tPkj1n835c/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/u/PH7P4z5Q/ZvH/QP6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOI/R/6Yxf9j+WMW/znzxyz+c+WPWfznzh+z+M+TP2bx/3j+mMV/3vwxi/8n8scs/p/MH7P4z5c/ZvH/VP6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv9Pv5b/5M89//z/wtDejFn8P9P6xyz+S+aPWfw/mz9m8V8qf8zi/7n8MYv/0vljFv9l8scs/svmj1n8l8sfs/gvnz822n/YW91/hfwxy/pfMX/M4v/5/DGL/0r5Yxb/lfPHLP5fyB+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/L+YP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4fyl/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4fzl/zOK/Rf6YxX/L/DGL/1b5Yxb/r+SPWfy3zh+z+H81f8ziv03+mMV/2/wxi/92+WMW/6/lj1n8v54/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8d80fs/jvlj9m8d89f8ziv0f+mMX/G/ljFv9v5o9Z/PfMH7P475U/ZvHfO3/M4r9P/pjF/1v5Yxb/b+ePWfy/kz9m8d83f8ziv1/+mMX/u/ljFv/v5Y9Z/PfPH7P4fz9/zOJ/QP6Yxf/A/DGL/0H5Yxb/H+SPWfx/mD9m8f9R/pjF/+D8MYv/IfljFv8f549Z/H+SP2bxPzR/zOJ/WP6Yxf/w/DGL/0/zxyz+P8sfs/gfkT9m8T8yf8zi//P8MYv/UfljFv9f5I9Z/I/OH7P4/zJ/zOL/q/wxi/8x+WMW/1/nj1n8f5M/ZvE/Nn/M4n9c/pjF//j8MYv/b/PHLP4n5I9Z/E/MH7P4n5Q/ZvH/Xf6Yxf/3+WMW/z/kj1n8T84fs/ifkj9m8f9j/pjF/9T8MYv/afljFv8/5Y9Z/E/PH7P4/zl/zOL/l/wxi/9f88cs/mfkj1n8/5Y/ZvE/M3/M4v/3/DGL/1n5Yxb/s/PHLP7n5I9Z/P+RP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4v/P/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzH9UI1550eJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+T+I87yB+z+A/JH7P4D80fs/gPyx+z+A/PH7P4j5U/ZvEfO3/M4j9O/pjFf0T+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/t+WPWfzfnj9m8Z88f8zi/478MYv/FPljFv8p88cs/u/MH7P4vyt/zOL/7vwxi/978scs/u/NH7P4T5U/ZvGfOn/M4j9N/pjF/335Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4v/+/DGL/0z5Yxb/D+SPWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfw/mj9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzx17wn3owGLzF/efIH7Os/4/lj1n858wfs/jPlT9m8Z87f8ziP0/+mMX/4/ljFv9588cs/p/IH7P4fzJ/zOI/X/6Yxf9T+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/D+dP2bx/0z+mMV/yfwxi/9n88cs/kvlj1n8P5c/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/h/Pn/M4r9S/pjFf+X8MYv/F/LHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv8v5o9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8N88cs/l/KH7P4b5Q/ZvHfOH/M4r9J/pjFf+z8MYv/ZvljFv/N88cs/l/OH7P4b5E/ZvHfMn/M4r9V/pjF/yv5Yxb/rfPHLP5fzR+z+G+TP2bx3zZ/zOK/Xf6Yxf9r+WMW/6/nj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx/0b+mMX/m/ljFv8988eGnHHAY6PPvqX998ofs6z/vfPHLP775I9Z/L+VP2bx/3b+mMX/O/ljFv9988cs/vvlj1n8v5s/ZvH/Xv6YxX///DGL//fzxyz+B+SPWfwPzB+z+B+UP2bx/0H+mMX/h/ljFv8f5Y9Z/A/OH7P4H5I/ZvH/cf6Yxf8n+WMW/0Pzxyz+h+WPWfwPzx+z+P80f8zi/7P8MYv/EfljFv8j88cs/j/PH7P4H5U/ZvH/Rf6Yxf/o/DGL/y/zxyz+v8ofs/gfkz9m8f91/pjF/zf5Yxb/Y/PHLP7H5Y9Z/I/PH7P4/zZ/zOJ/Qv6Yxf/E/DGL/0n5Yxb/3+WPWfx/nz9m8f9D/pjF/+T8MYv/KfljFv8/5o9Z/E/NH7P4n5Y/ZvH/U/6Yxf/0/DGL/5/zxyz+f8kfs/j/NX/M4n9G/pjF/2/5Yxb/M/PHLP5/zx+z+J+VP2bxPzt/zOJ/Tv6Yxf8f+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP7/zB+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f0ziP94gf8ziPyR/zOI/NH/M4j8sf8ziPzx/zOI/Vv6YxX/s/DGL/zj5Yxb/EfljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfzflj9m8X97/pjFf/L8MYv/O/LHLP5T5I9Z/KfMH7P4vzN/zOL/rvwxi/+788cs/u/JH7P4vzd/zOI/Vf6YxX/q/DGL/zT5Yxb/9+WPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL//vzxyz+M+WPWfw/kD9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8f9o/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8f9Y/pjFf878MYv/XPljFv+588cs/vPkj1n8P54/ZvGfN3/M4v+J/DGL/yfzxyz+8+WPWfw/lT9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf/T+WMW/8/kj1n8l8wfs/h/Nn/M4r9U/pjF/3P5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/5/PHLP4r5Y9Z/FfOH7P4fyF/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvH/Yv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4v+l/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v/l/DGL/xb5Yxb/LfPHLP5b5Y9Z/L+SP2bx3zp/zOL/1fwxi/82+WMW/23zxyz+2+WPWfy/lj9m8f96/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/jvkj9m8d81f8ziv1v+mMV/9/wxi/8e+WMW/2/kj1n8v5k/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9v5Y9Z/L+dP2bx/07+mMV/3/wxi/9++WMW/+/mj1n8v5c/ZvHfP3/M4v/9/DGL/wH5Yxb/A/PHLP4H5Y9Z/H+QP2bx/2H+mMX/R/ljFv+D88cs/ofkj1n8f5w/ZvH/Sf6Yxf/Q/DGL/2H5Yxb/w/PHLP4/zR+z+P8sf8zif0T+mMX/yPwxi//P88cs/kflj1n8f5E/ZvE/On/M4v/L/DGL/6/yxyz+x+SPWfzHyh+z+P8mf8zif2z+mMX/uPwxi//x+WMW/9/mj1n8T8gfs/ifmD9m8T8pf8zi/7v8MYv/7/PHLP5/yB+z+J+cP2bxPyV/zOL/x/wxi/+p+WMW/9Pyxyz+f8ofs/ifnj9m8f9z/pjF/y/5Yxb/v+aPWfzPyB+z+P8tf8zif2b+mMX/7/ljFv+z8scs/mfnj1n8z8kfs/j/I3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/n/ljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/AeDYf9+lcX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/LG3uv8ao86Od1/+2Fvdf3Tj3Z8/ZvF/IH/M4v9g/thb2X+cf1073kP5Y29l/5ev/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn9M4j/+IH/M4j8kf8ziPzR/zOI/LH/M4j88f8ziP1b+mMV/7Pwxi/84+WMW/xH5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/pPlj1n835Y/ZvF/e/6YxX/y/DGL/zvyxyz+U+SPWfynzB+z+L8zf8zi/678MYv/u/PHLP7vyR+z+L83f8ziP1X+mMV/6vwxi/80+WMW//flj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi//788cs/jPlj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvH/WP6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/D+eP2bxnzd/zOL/ifwxi/8n88cs/vPlj1n8P5U/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/0/ljFv/P5I9Z/JfMH7P4fzZ/zOK/VP6Yxf9z+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/+fzxyz+K+WPWfxXzh+z+H8hf8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bx/2L+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOL/pfwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/5fwxi/8W+WMW/y3zxyz+W+WPWfy/kj9m8d86f8zi/9X8MYv/NvljFv9t88feuv6XPP9y/+3yx966/q9c/1/LH7P4fz1/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvHfLX/M4r97/pjFf4/8MYv/N/LHLP7fzB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/7fyxyz+384fs/h/J3/M4r9v/pjFf7/8MYv/d/PHLP7fyx+z+O+fP2bx/37+mMX/gPwxi/+B+WMW/4Pyxyz+P8gfs/j/MH/M4v+j/DGL/8H5Yxb/Q/LHLP4/zh+z+P8kf8zif2j+mMX/sPwxi//h+WMW/5/mj1n8f5Y/ZvE/In/M4n9k/pjF/+f5Yxb/o/LHLP6/yB+z+B+dP2bx/2X+mMX/V/ljFv9j8scs/r/OH7P4/yZ/zOJ/bP6Yxf+4/DGL//H5Yxb/3+aPWfxPyB+z+J+YP2bxPyl/zOL/u/wxi//v88cs/n/IH7P4n5w/ZvE/JX/sRf/BiMHgrez/x/wxy/o/NX/M4n9a/pjF/0/5Yxb/0/PHLP5/zh+z+P8lf8zi/9f8MYv/GfljFv+/5Y9Z/M/MH7P4/z1/zOJ/Vv6Yxf/s/DGL/zn5Yxb/f+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4//Pf/Xs4iPwvCxyz+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljo/wHg8FOb23/W/LHLOv/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyT+Ewzyxyz+Q/LHLP5D88cs/sPyxyz+w/PHLP5jvYr/5VcMW+N/a2hvxiz+Y7f+MYv/OPljFv8R+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzD/f2snkf9E+WMW/4nzxyz+k+SPWfwnzR+z+E+WP2bxf1v+mMX/7fljFv/J88cs/u/IH7P4T5E/ZvGfMn/M4v/O/DGL/7vyxyz+784fs/i/J3/M4v/e/DGL/1T5Yxb/qfPHLP7T5I9Z/N+XP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP7vzx+z+M+UP2bx/0D+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMX/o/ljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMX/Y/ljFv8588cs/nPlj1n8584fs/jPkz9m8f94/pjFf978MYv/J/LHLP6fzB+z+M+XP/bW9B8l/XL/T+WPvTX9R/Vy//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/D+dP2bx/0z+mMV/yfwxi/9n88cs/kvlj1n8P5c/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/h/Pn/M4r9S/pjFf+X8MYv/F/LHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv8v5o9Z/NfOH7P4r2P0fx1fsMV/XaP/68jiv17+mMV//fwxi/8G+WMW/w3zxyz+X8ofs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+X84fs/hvkT9m8d8yf8ziv1X+mMX/K/ljFv+t88cs/l/NH7P4b5M/ZvHfNn/M4r9d/pjF/2v5Yxb/r+ePWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P475E/ZvH/Rv6Yxf+b+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx/1b+mMX/2/ljFv/v5I9Z/PfNH7P475c/ZvH/bv6Yxf97+WMW//3zxyz+388fs/gfkD9m8T8wf8zif1D+mMX/B/ljFv8f5o9Z/H+UP2bxPzh/zOJ/SP6Yxf/H+WMW/5/kj1n8D80fs/gflj9m8T88f8zi/9P8MYv/z/LHLP5H5I9Z/I/MH7P4/zx/zOJ/VP6Yxf8X+WMW/6Pzxyz+v8wfs/j/Kn/M4n9M/pjF/9f5Yxb/3+SPWfyPzR+z+B+XP2bxPz5/zOL/2/wxi/8J+WMW/xPzxyz+J+WPWfx/lz9m8f99/pjF/w/5Yxb/k/PHLP6n5I9Z/P+YP2bxPzV/zOJ/Wv6Yxf9P+WMW/9Pzxyz+f84fs/j/JX9sDP9x3+jx/D/3Kv5/zR+zrP8z8scs/n/LH7P4n5k/ZvH/e/6Yxf+s/DGL/9n5Yxb/c/LHLP7/yB+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvH/Z/6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMS/wkH+WMW/yH5Yxb/ofljFv9h+WMW/+H5Yxb/sfLHLP5j549Z/MfJH7P4j8gfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOL/tvwxi//b88cs/pPnj1n835E/ZvGfIn/M4j9l/pjF/535Yxb/d+WPWfzfnT9m8X9P/pjF/735Yxb/qfLHLP5T549Z/KfJH7P4vy9/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/N+fP2bxnyl/zOL/gfwxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/9H88cs/jPnj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi//H8scs/nPmj1n858ofs/jPnT9m8Z8nf8zi//H8MYv/vPljFv9P5I9Z/D+ZP2bxny9/zOL/qfwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP6fzh+z+H8mf8ziv2T+mMX/s/ljFv+l8scs/p/LH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8P58/ZvFfKX/M4r9y/pjF/wv5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/F/PHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv8v5Y9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8v549Z/LfIH7P4b5k/ZvHfKn/M4v+V/DGL/9b5Yxb/r+aPWfy3yR+z+G+bP2bx387qP+K1b7b4f83q/x+y+H89f8ziv33+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+O+aP2bx3y1/zOK/e/6YxX+P/DGL/zfyxyz+38wfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+38scs/t/OH7P4fyd/zOK/b/6YxX+//LG3qv+IMfy/mz/2VvUfjOH/vfwxi//++WMW/+/nj1n8D8gfs/gfmD9m8T8of8zi/4P8MYv/D/PHLP4/yh+z+B+cP2bxPyR/zOL/4/wxi/9P8scs/ofmj1n8D8sfs/gfnj9m8f9p/pjF/2f5Yxb/I/LHLP5H5o9Z/H+eP2bxPyp/zOL/i/wxi//R+WMW/1/mj1n8f5U/ZvE/Jn/M4v/r/DGL/2/yxyz+x+aPWfyPyx+z+B+fP2bx/23+mMX/hPwxi/+J+WMW/5Pyxyz+v8sfs/j/Pn/M4v+H/DGL/8n5Yxb/U/LHLP5/VPqP+I9bWPxPVfr/5yz+p+WPWfz/lD9m8T89f8zi/+f8MYv/X/LHLP5/zR+z+J+RP2bx/1v+mMX/zPwxi//f88cs/mflj1n8z84fs/ifkz9m8f9H/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/8/88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/i80zRiXLf53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6YxH+iQf6YxX9I/pjFf2j+mMV/WP6YxX94/pjFf6z8MYv/2PljFv9x8scs/iPyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4vy1/zOL/9vwxi//k+WMW/3fkj1n8p8gfs/hPmT9m8X9n/pjF/135Yxb/d+ePWfzfkz9m8X9v/pjFf6r8MYv/1PljFv9p8scs/u/LH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv/3549Z/Gd6pf/zw/7XB/bmzOL/gdY/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvH/WP6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/D+eP2bxnzd/zOL/iRf9exC8Iov/J6PHLP7z5Y9Z/D+VP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/9P5Yxb/z+SPWfyXzB+z+H82f8ziv1T+mMX/c/ljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//n88cs/ivlj1n8V84fs/h/IX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8f9i/pjFf+38MYv/OvljFv9188cs/uvljw0544CVJx519i3tv37+mGX9b5A/ZvHfMH/M4v+l/DGL/0b5Yxb/jfPHLP6b5I9Z/DfV+++I11r8N9P7cxb/zfPHLP5fzh+z+G+RP2bx3zJ/zOK/Vf6Yxf8r+WMW/63zxyz+X80fs/hvkz9m8d82f8ziv13+mMX/a/ljFv+v549Z/LfPH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/rvlj1n8d88fs/jvkT9m8f9G/pjF/5v5Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvH/Vv6Yxf/b+WMW/+/kj1n8980fs/jvlz9m8f9u/pjF/3v5Yxb//fPHLP7fzx+z+B+QP2bxPzB/zOJ/UP6Yxf8H+WMW/x/mj1n8f5Q/ZvE/OH/M4n9I/pjF/8f5Yxb/n+SPWfwPzR+z+B+WP2bxPzx/zOL/0/wxi//P8scs/kfkj1n8j8wfs/j/PH/M4n9U/pjF/xf5Yxb/o/PHLP6/zB+z+P8qf8zif0z+mMX/1/ljFv/f5I9Z/I/NH7P4H5c/ZvE/Pn/M4v/b/DGL/wn5Yxb/E/PHLP4n5Y9Z/H+XP2bx/33+mMX/D/ljFv+T88cs/qfkj1n8/6j2H+dVb7H4n6r2f/Us/qflj1n8/5Q/ZvE/PX/M4v/n/DGL/1/yxyz+f80fs/ifkT9m8f9b/pjF/8z8MYv/3/PHLP5n5Y9Z/M/OH7P4n5M/ZvH/R/6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYn/kMFgp/whif9El7X+MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5YxL/iQf5Yxb/IfljFv+h+WMW/2H5Yxb/4fljFv+x8scs/mPnj1n8x8kfs/iPyB+z+I+bP2bxHy9/7P9j5/7Dta7rO47f/CaV9GOburTh0JhrMxIZjVqIiuLxxykTzfyNegQSRH5Igqm40Uodmy51s2RTS8ecrVricHP9WtGwrNkasbXKKa6FMeZgoTlj14FziHP29lydL/t+bb4fjz/g3PfxfYc8r5f3zcV1laX/nvqHsvTfS/9Qlv4j9A9l6f9K/UNZ+u+tfyhL/330D2XpX/QPZem/r/6hLP1fpX8oS/+f0T+Upf/P6h/K0n8//UNZ+u+vfyhL/wP0D2Xp/3P6h7L0f7X+oSz9D9Q/lKX/QfqHsvR/jf6hLP1/Xv9Qlv4j9Q9l6X+w/qEs/X9B/1CW/qP0D2Xpf4j+oSz9D9U/lKX/a/UPZek/Wv9Qlv6/qH8oS//D9A9l6f9L+oey9H+d/qEs/X9Z/1CW/r+ifyhL/8P1D2Xp/3r9Q1n6j9E/lKX/G/QPZel/hP6hLP3H6h/K0v9I/UNZ+o/TP5Sl/6/qH8rSf7z+oSz936h/KEv/X9M/lKX/BP1DWfq/Sf9Qlv5v1j+Upf+v6x/K0v8t+oey9J+ofyhL/6P0D2XpP0n/UJb+R+sfytL/GP1DWfofq38oS//J+oey9D9O/1CW/sfrH8rSf4r+oSz9T9A/lKV/m/6hLP1P1D+Upf9J+oey9D9Z/1CW/qfoH8rSv13/UJb+b9U/lKX/2/QPZel/qv6hLP3frn8oS//T9A9l6T9V/1CW/qfrH8rS/wz9Q1n6v0P/UJb+Z+ofytL/nfqHsvQ/S/9Qlv5n6x/K0v8c/UNZ+p+rfyhL//P0D2Xpf77+oSz9L9A/lKX/NP1DWfpfqH8oS/+L9A9l6X+x/qEs/Tv0D2Xpf4n+oSz9p+sfytJ/hv6hLP1n6h/K0v9d+oey9L9U/1CW/rP0D2XpP1v/UJb+l+kfytJ/jv6hLP0v1z+Upf9c/UNZ+s/TP5Sl/3z9Q1n6L9A/lKX/FfqHsvRfqH8oS/936x/K0v9K/UNZ+i/SP5Sl/2L9Q1n6X6V/KEv/9+gfytL/av1DWfpfo38oS/9r9Q9l6b9E/1CW/tfpH8rS/zf0D2Xp/5v6h7L0X6p/KEv/9+ofytL/t/QPZen/Pv1DWfq/X/9Qlv7X6x/K0v8G/UNZ+t+ofyhL/9/WP5Sl/zL9Q1n6/47+oSz9f1f/UJb+N+kfytL/Zv1DWfr/nv6hLP0/oH8oS/9b9A9l6X+r/qEs/W/TP5Sl/+/rH8rS/w/0D2Xpf7v+oSz9P6h/KEv/D+kfytL/Dv1DWfov1z+Upf8f6h/K0v+P9A9l6X+n/qEs/e/SP5Sl/936h7L0/7D+oSz9P6J/KEv/e3r3H9nwr+unVJb+99p/KEv/P9Y/lKX/Cv1DWfr/if6hLP3v0z+Upf+f6h/K0v9+/UNZ+n9U/1CW/n+mfyhL/4/pH8rS/+P6h7L0/4T+oSz9/1z/UJb+n9Q/lKX/A/qHsvRfqX8oS/8H9Q9l6f8X+oey9F+lfyhL/4f0D2Xp/5f6h7L0/yv9Q1n6P6x/KEv/v9Y/lKX/p/QPZen/af1DWfp/Rv9Qlv6f1T+Upf/n9A9l6f83+oey9P+8/qEs/b+gfyhL/9X6h7L0/6L+oSz9/1b/UJb+a/QPZen/iP6hLP2/pH8oS/8v6x/K0v9R/UNZ+n9F/1CW/l/VP5Sl/9/pH8rS/zH9Q1n6f03/UJb+f69/KEv/r+sfytL/H/QPZem/Vv9Qlv7f0D+Upf86/UNZ+v+j/qEs/f9J/1CW/t/UP5Sl/z/rH8rS/1v6h7L0/7b+oSz9v6N/KEv/x/UPZen/L/qHsvR/Qv9Qlv5P6h/K0n+9/qEs/Z/SP5Sl/7/qH8rS/7v6h7L0/zf9Q1n6f0//UJb+G/QPZen/tP6hLP2/r38oS/+N+oey9P93/UNZ+m/SP5Sl/3/oH8rS/xn9Q1n6/6f+oSz9N+sfytJ/i/6hLP3/S/9Qlv4/0D+Upf9W/UNZ+j+rfyhL/+f0D2Xp/0P9Q1n6P69/KEv//9Y/lKX/C/qHsvT/kf6hLP236R9K0n+flv6hLP0H6B/K0n+g/qEs/QfpH8rSf7D+oSz9h+gfytJ/qP6hLP2H6R/K0n+4/qEs/V+hfyhL/z30D2Xpv6f+oSz999I/lKX/CP1DWfq/Uv9Qlv576x962fUHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4aTN/0eJLp82a1THPF77whS92fvFS/5cJAAD4v/bjD/0v9a8EAAAAAAAAAAAAAAAAAAAA8mri/07spf53BAAAAAAAAAAAAACA/+/a2o/eOGhAj6cG7frgNY92bP953NYzZ9xzz4Ol++eub58UvOTAXR9s27Zt2/JnJk7uejis1Wp1/q/t0/V4eO/jztdfMvKOA3Y8KpM+f9vj500dcfK8lTcP/sbyG9ufHrL92SGtCy6ZOavjDQNbrXLskNaVnQ+OGNBqleOHtG7qfDC288GUIa0VnQ+O3P7gFa3PdD54/UVzZl3c+cQJlX/P4OWirX1Ja1CPxbZ6/Ndg1/0vGfnEjO6f+3jJ7lcb3Ora/6iVX9q/1/e6vcj+u1+/HN17//3+FwReVP/2/9y67p/7eMn/9f7/4TVbF0ffe/H9d79+Ocb+oT7B5/8eG+39ub/X5/+Dg5fceX/U8DW3dO6/7fT7Dup6avBP8vn/x69fju29/4E9Pv93fo6f3P35f1irVY7bzd8OSKWt/bqNfb3/973/wa/udTNg1/3f/ZX1e3Xu/97nW0u7nhrSz/1P7uv9//pev1agf9ra79rW6/2/H/tvjQ5ecuf+N6wcsf3z//r7L9pvl+/1Z//H9d7/mAWzLx8zf9Hiw2fOnja9Y3rHZRPGjj9i3IQJ48eP2f6JYMePu/mbAkns3vt/a49eNwNarY6d96vvu3Fy5/43PbT0I11PDe/n/o/v8/3/YO//EBo1sDV0aOvKaQsWzDtix4/dD8fu+HHHPxbsvx9//j/ksK5/rPvvDAe0WgfsvB993oRhnfu/am5Z1fXU0H7uf0qf+5/U8+8qgf7Zzff/i3vd9Nj/URuuWdi5/0N/sO/6rqf6++f/E/rc/53e/2F3tLW3an0T7dz/kcOuO7HadWnz939Qnyb2P3LzTVuqXZcT7R/q08T+py5784XVrstJ9g/1aWL/D84+f1m163Ky/UN9mtj/C6/acmC163KK/UN9mtj/Y9996p5q16Xd/qE+Tez/g7e3H1nturzV/qE+Tez/8CuenVjturzN/qE+Tez/kj1PW1Htupxq/1CfJvZ/4rZj9qt2Xd5u/1CfJvY/4LrvLal2XU6zf6hPE/t/ctqyOdWuy1T7h/o0sf8VI0c/V+26nG7/UJ8m9r/06TdOqXZdzrB/qE8T+//qrXc8Vu26vMP+oT5N7P8T5+x7R7Xrcqb9Q32a2P8PRz20R7Xr8k77h/o0sf+1a1c8UO26nGX/UJ8m9r98xaBR1a7L2fYP9Wli/9eeMP3RatflHPuH+jSx/3Hjv3x2tetyrv1DfZrY/wGf+9ZT1a7LefYP9Wli/6c9vHB+tetyvv1DfZrY/8IDP/6jatflAvuH+jSx/7d0HDij2nWZZv9Qnyb2X27eY22163Kh/UN9mtj/WZvumlTtulxk/1CfJva/au8vfKzadbnY/qE+Tex/89zLJlS7Lh32D/VpYv/fee+176t2XS6xf6hPE/u/5fmvl2rXZbr9Q32a2P+GsWedU+26zLB/qE8T+7/r5GceqXZdZto/1KeJ/S9b9fiCatflXfYP9Wli/6tXn/REtetyqf1DfZrY/6Gjx4zo+eyzP+F1mWX/UJ8m9j/nzKUfqnZdZts/1KeJ/R97/62vrXZdLrN/qE8T+x/+tYmfrHZd5tg/1KeJ/X964vs/Ve26XG7/UJ8m9r9l0iGHVbsuc+0f6tPE/tc9MPa2atdlnv1DfZrY/wceub3idZlv/1CfJvY/93UvbKp2XRbYP9Snif2/aeoZi6pdlyvsH+rTxP73u3PKF6tdl4X2D/VpYv/nfvv7p1a7Lu+2f6hPE/s/ZP8LD6p2Xa60f6hPE/ufMXPNDdWuyyL7h/o0sf/Jy9eNq3ZdFts/1KeJ/e/95Py7q12Xq+wf6tPE/jcO2v+UatflPfYP9Wli//de/fA3q12Xq+0f6tPE/m+4/qMd1a7LNfYP9Wli/5/dOnRztetyrf0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ww4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2D6N0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAoAAD//3EW6vs=")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x9c}}, 0x4000040)

52.101472377s ago: executing program 2 (id=447):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @remote}}}}, 0x0)

51.52902472s ago: executing program 33 (id=447):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, @remote}}}}, 0x0)

32.491762092s ago: executing program 0 (id=556):
r0 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2)
writev(r0, &(0x7f0000000940)=[{&(0x7f00000007c0)="09643dff5a54", 0x6}], 0x1)
r1 = fanotify_init(0x200, 0x1000)
r2 = dup(r0)
fanotify_mark(r1, 0x1, 0x8001000, r2, 0x0)
copy_file_range(r0, &(0x7f0000000080)=0x5, r0, 0x0, 0x5, 0x0)

32.259527878s ago: executing program 0 (id=560):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@host, 0x4}, 0x0, 0x2})

32.095557782s ago: executing program 0 (id=564):
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x24)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00'], 0x2b)
sendfile(r2, r0, 0x0, 0x5000000053d2)

31.895760197s ago: executing program 0 (id=567):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x180c8, &(0x7f0000000200)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000340)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x14927e, 0xd0)
mount(&(0x7f0000000600)=@loop={'/dev/loop', 0x0}, &(0x7f0000000640)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000700)='./bus\x00', 0x8000, 0x30)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x80000000, 0x6, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09030000000000000073ac58818d78c660e677df8dc905b90242b7c5a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d30007d702000000000000000000000001", [0xb]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ff)

30.727208565s ago: executing program 0 (id=578):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0)
close(0x3)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a02, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x301)

30.167298399s ago: executing program 0 (id=583):
setresgid(0xee00, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0xc08)

29.652342511s ago: executing program 34 (id=583):
setresgid(0xee00, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0xc08)

29.027804096s ago: executing program 4 (id=592):
r0 = syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000f00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000001180)=0xfd8)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000001200))

28.780613922s ago: executing program 4 (id=594):
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200007, 0x801, 0x4, 0x7})
r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchownat(r1, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)

28.492561609s ago: executing program 4 (id=597):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x1ffffff)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0))

28.187521657s ago: executing program 4 (id=598):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3, &(0x7f0000000180)={[{@user_xattr}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@grpid}]}, 0x8, 0x638, &(0x7f00000001c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(0xffffffffffffffff, r0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f00000000c0)={0x0, 0x0, '\x00', 0x7f0aa8ade1217b54, 0x0})
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000f00)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000f40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

27.711179668s ago: executing program 4 (id=601):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000030603000000000000000000010000030900020073797a31000000000500010007"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x800)

27.070180634s ago: executing program 4 (id=607):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e297", 0x3, 0x840, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))

26.761765861s ago: executing program 35 (id=607):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e297", 0x3, 0x840, 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))

11.190517429s ago: executing program 3 (id=645):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe88fffa000000000000000000000001ac14142500000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x2, 0xa, 0x20, 0x30, 0x3a, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x9, 0x4, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x80000003, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040)

9.798563773s ago: executing program 3 (id=647):
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x8041)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

8.466900785s ago: executing program 3 (id=648):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0)

7.157287317s ago: executing program 3 (id=650):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xc})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x7, 0x6, 0xaaca, 0x80000001, 0x2}}]})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000340)={0x0, 0x401})

5.881562348s ago: executing program 5 (id=651):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x8000007, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x28f43000)
recvmmsg(r0, &(0x7f00000000c0), 0x400000000000046, 0x40000122, 0x0)

5.881089668s ago: executing program 3 (id=652):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
read$nci(r0, 0x0, 0x0)

5.016309059s ago: executing program 6 (id=584):
r0 = open(&(0x7f0000000400)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000540)='3', 0x1)
sendfile(r0, r0, 0x0, 0x8112)

4.655667598s ago: executing program 5 (id=653):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x101e01, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000ac0)=0x15)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000b00)=0x7e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000b40)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000b80)=0xef)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x8)

4.655268908s ago: executing program 7 (id=609):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

4.293006827s ago: executing program 6 (id=584):
r0 = open(&(0x7f0000000400)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000540)='3', 0x1)
sendfile(r0, r0, 0x0, 0x8112)

3.994146614s ago: executing program 5 (id=654):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_j1939(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2, 0x0, {0x1, 0x1, 0x4}, 0xff}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x20048015)

3.993930334s ago: executing program 7 (id=609):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

3.652354552s ago: executing program 6 (id=584):
r0 = open(&(0x7f0000000400)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000540)='3', 0x1)
sendfile(r0, r0, 0x0, 0x8112)

3.31897508s ago: executing program 5 (id=655):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_io_uring_setup(0x7a9e, &(0x7f0000000100)={0x0, 0x88dd, 0x20, 0x3, 0x2eb}, 0x0, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0x200d75, 0x1f280, 0x7ffff, 0x139})
io_uring_enter(r0, 0x100, 0x9abe, 0x1f, 0x0, 0x18)

3.3175801s ago: executing program 7 (id=609):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

2.973748079s ago: executing program 6 (id=584):
r0 = open(&(0x7f0000000400)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000540)='3', 0x1)
sendfile(r0, r0, 0x0, 0x8112)

2.629635487s ago: executing program 5 (id=656):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0x2, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x54, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0x12, 0x0, 0x800080ee, 0xa, 0x1b, 0x1, 0x9, 0x200, 0x3e, 0x3, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0x6, 0xe, 0x7, 0x6c7, 0xffffffff, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x45, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f3, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8220, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0x2, 0x0, 0x2, 0xfffffffb, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x1, 0x29503faf, 0x2, 0xa2, 0x7, 0xa9, 0x85, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x129, 0x4, 0x1, 0x44aa, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0x9, 0x5, 0x93a, 0x9, 0x0, 0x100, 0xb9, 0x1eb, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0xa362, 0x1, 0x0, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0xa1, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x10, 0x5, 0x7, 0x1, 0x269d, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x7f, 0xffff2441, 0xfff]}, 0x45c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.629191457s ago: executing program 7 (id=609):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

1.965177173s ago: executing program 3 (id=657):
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x931e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8b, 0xc0, 0x6, {0x8, 0xb, 0x0, 0x0, 0x1, 0x5, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x8, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x5, 0xaf, {0x8, 0x25, 0x1, 0x82, 0xf, 0x80, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xb, 0x1, 0x2, {0x8, 0x25, 0x1, 0x80, 0x7b832adf99b526f, 0x1, 0x9}}}}}}}}]}}, 0x0)

1.964331063s ago: executing program 6 (id=584):
r0 = open(&(0x7f0000000400)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000540)='3', 0x1)
sendfile(r0, r0, 0x0, 0x8112)

1.313236589s ago: executing program 7 (id=609):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

607.895256ms ago: executing program 5 (id=658):
r0 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

607.531756ms ago: executing program 6 (id=584):
r0 = open(&(0x7f0000000400)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000540)='3', 0x1)
sendfile(r0, r0, 0x0, 0x8112)

0s ago: executing program 7 (id=609):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

kernel console output (not intermixed with test programs):

e xattr: invalid ea_ino
[  118.801231][   T59] team0 (unregistering): Port device team_slave_1 removed
[  118.827183][ T6726] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.291: couldn't read orphan inode 15 (err -117)
[  118.850399][ T6726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.886450][ T6726] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  118.896321][   T59] team0 (unregistering): Port device team_slave_0 removed
[  118.946356][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.002651][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.064890][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.195436][   T51] Bluetooth: hci3: command tx timeout
[  119.397113][   T59] bond0 (unregistering): Released all slaves
[  119.466893][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.475733][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.483935][ T6668] bridge_slave_1: entered allmulticast mode
[  119.496684][ T6668] bridge_slave_1: entered promiscuous mode
[  119.578768][ T6668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.595363][    T9] usb 3-1: Cannot set autoneg
[  119.610446][    T9] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71
[  119.625493][ T6668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.673972][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.682807][    T9] usb 3-1: USB disconnect, device number 5
[  119.759923][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.765402][ T6668] team0: Port device team_slave_0 added
[  119.787947][ T6740] loop3: detected capacity change from 0 to 256
[  119.804486][ T6668] team0: Port device team_slave_1 added
[  119.808837][ T6740] exfat: Deprecated parameter 'utf8'
[  119.833935][ T6740] exfat: Deprecated parameter 'namecase'
[  119.852121][ T6740] exfat: Deprecated parameter 'namecase'
[  119.923002][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.923492][ T6740] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d)
[  119.937814][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.013852][ T6668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.039361][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.051214][ T6747] FAULT_INJECTION: forcing a failure.
[  120.051214][ T6747] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  120.061714][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.084079][ T6747] CPU: 0 PID: 6747 Comm: syz.0.296 Not tainted syzkaller #0
[  120.097431][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  120.107516][ T6747] Call Trace:
[  120.110810][ T6747]  <TASK>
[  120.113759][ T6747]  dump_stack_lvl+0x18c/0x250
[  120.118494][ T6747]  ? show_regs_print_info+0x20/0x20
[  120.123724][ T6747]  ? load_image+0x420/0x420
[  120.128259][ T6747]  ? __might_fault+0xaa/0x120
[  120.132964][ T6747]  ? __lock_acquire+0x7eb0/0x7eb0
[  120.138032][ T6747]  should_fail_ex+0x394/0x4c0
[  120.142742][ T6747]  _copy_to_user+0x2f/0xa0
[  120.147179][ T6747]  rng_dev_read+0x3d2/0x780
[  120.151698][ T6747]  ? hwrng_yield+0x30/0x30
[  120.156131][ T6747]  ? common_file_perm+0x198/0x1f0
[  120.161186][ T6747]  ? fsnotify_perm+0x3ed/0x5e0
[  120.165976][ T6747]  ? hwrng_yield+0x30/0x30
[  120.170425][ T6747]  vfs_read+0x298/0x990
[  120.174629][ T6747]  ? kernel_read+0x1e0/0x1e0
[  120.179224][ T6747]  ? __fget_files+0x28/0x460
[  120.183820][ T6747]  ? __fget_files+0x3fc/0x460
[  120.188511][ T6747]  ? __fdget_pos+0x1d8/0x330
[  120.193105][ T6747]  ? ksys_read+0x74/0x260
[  120.197442][ T6747]  ksys_read+0x151/0x260
[  120.201693][ T6747]  ? vfs_write+0x9a0/0x9a0
[  120.206113][ T6747]  ? lockdep_hardirqs_on+0x98/0x150
[  120.211309][ T6747]  do_syscall_64+0x55/0xb0
[  120.215723][ T6747]  ? clear_bhb_loop+0x40/0x90
[  120.220415][ T6747]  ? clear_bhb_loop+0x40/0x90
[  120.225092][ T6747]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  120.231089][ T6747] RIP: 0033:0x7f4f2c39f559
[  120.235510][ T6747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.255124][ T6747] RSP: 002b:00007f4f2d334028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  120.263565][ T6747] RAX: ffffffffffffffda RBX: 00007f4f2c625fa0 RCX: 00007f4f2c39f559
[  120.271624][ T6747] RDX: 000000000000fef3 RSI: 0000200000000680 RDI: 0000000000000004
[  120.279601][ T6747] RBP: 00007f4f2c436b20 R08: 0000000000000000 R09: 0000000000000000
[  120.287593][ T6747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.295568][ T6747] R13: 00007f4f2c626038 R14: 00007f4f2c625fa0 R15: 00007fff687f9358
[  120.303554][ T6747]  </TASK>
[  120.306685][ T6668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.427648][ T6668] hsr_slave_0: entered promiscuous mode
[  120.464322][ T6668] hsr_slave_1: entered promiscuous mode
[  120.482231][ T6668] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  120.489847][ T6668] Cannot create hsr debugfs directory
[  120.566814][ T6757] FAULT_INJECTION: forcing a failure.
[  120.566814][ T6757] name failslab, interval 1, probability 0, space 0, times 0
[  120.596873][ T6757] CPU: 0 PID: 6757 Comm: syz.0.299 Not tainted syzkaller #0
[  120.604227][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  120.614311][ T6757] Call Trace:
[  120.617611][ T6757]  <TASK>
[  120.620559][ T6757]  dump_stack_lvl+0x18c/0x250
[  120.625279][ T6757]  ? show_regs_print_info+0x20/0x20
[  120.630511][ T6757]  ? load_image+0x420/0x420
[  120.635055][ T6757]  ? __might_sleep+0xe0/0xe0
[  120.639677][ T6757]  ? __lock_acquire+0x7eb0/0x7eb0
[  120.644738][ T6757]  should_fail_ex+0x394/0x4c0
[  120.649452][ T6757]  should_failslab+0x9/0x20
[  120.653978][ T6757]  slab_pre_alloc_hook+0x59/0x300
[  120.659037][ T6757]  kmem_cache_alloc+0x5a/0x2d0
[  120.663826][ T6757]  ? vm_area_dup+0x27/0x270
[  120.668360][ T6757]  vm_area_dup+0x27/0x270
[  120.672716][ T6757]  copy_vma+0x4ff/0x9c0
[  120.676920][ T6757]  ? vma_link+0x530/0x530
[  120.681300][ T6757]  ? up_write+0x1be/0x410
[  120.685661][ T6757]  move_vma+0x7d4/0x1940
[  120.689942][ T6757]  ? vma_expandable+0xf0/0xf0
[  120.694643][ T6757]  ? mtree_load+0x109/0x840
[  120.699175][ T6757]  ? mas_alloc_nodes+0x8c0/0x8c0
[  120.704140][ T6757]  ? do_munmap+0xe6/0x140
[  120.708521][ T6757]  ? bpf_lsm_mmap_addr+0x9/0x10
[  120.713409][ T6757]  ? security_mmap_addr+0x72/0x90
[  120.718472][ T6757]  ? get_unmapped_area+0x2f9/0x360
[  120.723623][ T6757]  mremap_to+0x51f/0x5d0
[  120.727901][ T6757]  __se_sys_mremap+0x6a8/0x11a0
[  120.732796][ T6757]  ? __x64_sys_mremap+0xc0/0xc0
[  120.737686][ T6757]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  120.743701][ T6757]  ? lock_chain_count+0x20/0x20
[  120.748589][ T6757]  ? lockdep_hardirqs_on+0x98/0x150
[  120.753820][ T6757]  ? __x64_sys_mremap+0x20/0xc0
[  120.758699][ T6757]  do_syscall_64+0x55/0xb0
[  120.763145][ T6757]  ? clear_bhb_loop+0x40/0x90
[  120.767851][ T6757]  ? clear_bhb_loop+0x40/0x90
[  120.772566][ T6757]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  120.778491][ T6757] RIP: 0033:0x7f4f2c39f559
[  120.782925][ T6757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.792352][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.802526][ T6757] RSP: 002b:00007f4f2d334028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  120.819104][ T6757] RAX: ffffffffffffffda RBX: 00007f4f2c625fa0 RCX: 00007f4f2c39f559
[  120.827109][ T6757] RDX: 0000000000600000 RSI: 0000000000009000 RDI: 0000200000000000
[  120.835107][ T6757] RBP: 00007f4f2c436b20 R08: 0000200000a00000 R09: 0000000000000000
[  120.843098][ T6757] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  120.851091][ T6757] R13: 00007f4f2c626038 R14: 00007f4f2c625fa0 R15: 00007fff687f9358
[  120.859108][ T6757]  </TASK>
[  120.869194][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  120.877373][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.027164][ T6668] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  121.071341][ T6668] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  121.096214][ T6668] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  121.104245][ T6768] FAULT_INJECTION: forcing a failure.
[  121.104245][ T6768] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  121.126340][ T6668] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  121.126563][ T6768] CPU: 0 PID: 6768 Comm: syz.0.302 Not tainted syzkaller #0
[  121.140342][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  121.150420][ T6768] Call Trace:
[  121.153697][ T6768]  <TASK>
[  121.156624][ T6768]  dump_stack_lvl+0x18c/0x250
[  121.161301][ T6768]  ? show_regs_print_info+0x20/0x20
[  121.166517][ T6768]  ? load_image+0x420/0x420
[  121.171022][ T6768]  ? __lock_acquire+0x7eb0/0x7eb0
[  121.176049][ T6768]  should_fail_ex+0x394/0x4c0
[  121.180746][ T6768]  prepare_alloc_pages+0x1e1/0x5b0
[  121.185885][ T6768]  __alloc_pages+0x134/0x460
[  121.190479][ T6768]  ? zone_statistics+0x170/0x170
[  121.195421][ T6768]  ? _raw_spin_lock_irqsave+0x100/0x100
[  121.200970][ T6768]  ? copy_page_from_iter+0xe8/0x100
[  121.206168][ T6768]  pipe_write+0x52a/0x1b20
[  121.210589][ T6768]  ? pipe_read+0x1330/0x1330
[  121.215216][ T6768]  ? end_current_label_crit_section+0x149/0x170
[  121.221465][ T6768]  ? common_file_perm+0x198/0x1f0
[  121.226516][ T6768]  vfs_write+0x474/0x9a0
[  121.230789][ T6768]  ? file_end_write+0x250/0x250
[  121.235645][ T6768]  ? __fget_files+0x3fc/0x460
[  121.240325][ T6768]  ? __fdget_pos+0x1d8/0x330
[  121.244934][ T6768]  ? ksys_write+0x74/0x260
[  121.249367][ T6768]  ksys_write+0x151/0x260
[  121.253696][ T6768]  ? __ia32_sys_read+0x90/0x90
[  121.258458][ T6768]  ? lockdep_hardirqs_on+0x98/0x150
[  121.263649][ T6768]  do_syscall_64+0x55/0xb0
[  121.268059][ T6768]  ? clear_bhb_loop+0x40/0x90
[  121.272740][ T6768]  ? clear_bhb_loop+0x40/0x90
[  121.277444][ T6768]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  121.283360][ T6768] RIP: 0033:0x7f4f2c39f559
[  121.287794][ T6768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.307513][ T6768] RSP: 002b:00007f4f2d334028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  121.315969][ T6768] RAX: ffffffffffffffda RBX: 00007f4f2c625fa0 RCX: 00007f4f2c39f559
[  121.324013][ T6768] RDX: 00000000ffffff9a RSI: 0000200000000180 RDI: 0000000000000005
[  121.331994][ T6768] RBP: 00007f4f2c436b20 R08: 0000000000000000 R09: 0000000000000000
[  121.340001][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  121.347978][ T6768] R13: 00007f4f2c626038 R14: 00007f4f2c625fa0 R15: 00007fff687f9358
[  121.351509][ T6770] loop2: detected capacity change from 0 to 1024
[  121.355969][ T6768]  </TASK>
[  121.357049][   T51] Bluetooth: hci3: command tx timeout
[  121.433077][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.509051][ T6668] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.563949][ T6668] 8021q: adding VLAN 0 to HW filter on device team0
[  121.595614][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.602863][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.613969][ T6774] syz.0.304 (6774) used greatest stack depth: 20624 bytes left
[  121.628029][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.635261][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.645225][ T6770] hfsplus: xattr searching failed
[  121.660733][ T6770] hfsplus: xattr searching failed
[  121.818179][   T59] hfsplus: b-tree write err: -5, ino 3
[  121.837011][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.202177][ T6798] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.448259][ T6802] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.540653][ T6668] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.687586][ T6802] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.771209][ T6802] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.874685][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.960063][ T6802] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.994437][ T6802] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.028983][ T6802] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.040207][ T6668] veth0_vlan: entered promiscuous mode
[  123.064605][ T6802] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.093148][ T6668] veth1_vlan: entered promiscuous mode
[  123.145979][ T6668] veth0_macvtap: entered promiscuous mode
[  123.164484][ T6668] veth1_macvtap: entered promiscuous mode
[  123.201435][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.227938][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.258842][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.285201][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.305311][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.341531][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.359349][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.404607][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.431919][   T51] Bluetooth: hci3: command tx timeout
[  123.437786][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.461691][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.472343][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.482478][ T6668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.493183][ T6668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.504770][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.524486][ T6668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.553924][ T6668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.585852][ T6668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.601337][ T6668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.628317][ T6838] eCryptfs: maximum fs stacking depth exceeded
[  123.658841][ T6838] Reading sb failed; rc = [-22]
[  123.836452][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.863942][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.890503][ T6853] loop0: detected capacity change from 0 to 256
[  123.912818][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.920983][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.950541][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.987291][ T6853] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  123.992306][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.081698][   T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  124.306325][   T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.339446][   T23] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  124.387213][   T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  124.414346][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  124.439401][   T23] usb 4-1: SerialNumber: syz
[  124.455456][   T23] usb 4-1: bad CDC descriptors
[  124.616900][ T6876] loop0: detected capacity change from 0 to 16
[  124.641070][ T6876] erofs: (device loop0): mounted with root inode @ nid 36.
[  124.688460][   T23] usb 4-1: USB disconnect, device number 7
[  124.700981][ T6876] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89
[  124.727559][ T6876] syz.0.323: attempt to access beyond end of device
[  124.727559][ T6876] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  124.754939][ T6876] erofs: (device loop0): z_erofs_readahead: readahead error at folio 4 @ nid 89
[  124.776030][ T6876] syz.0.323: attempt to access beyond end of device
[  124.776030][ T6876] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16
[  124.816111][ T6880] lo: entered allmulticast mode
[  124.822558][ T6876] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192]
[  124.840409][ T6879] lo: left allmulticast mode
[  124.847199][   T28] audit: type=1800 audit(1792585371.619:10): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.323" name="file2" dev="loop0" ino=89 res=0 errno=0
[  124.966803][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.398581][ T6901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.332'.
[  125.453534][ T6901] bond0: entered promiscuous mode
[  125.502250][ T6901] gretap0: entered promiscuous mode
[  125.532235][ T6901] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.539852][ T6901] Cannot create hsr debugfs directory
[  125.560342][ T6901] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  125.596114][ T6901] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  125.607806][ T6901] hsr0: entered promiscuous mode
[  125.880180][ T6921] loop3: detected capacity change from 0 to 16
[  125.907400][ T6921] erofs: (device loop3): mounted with root inode @ nid 36.
[  125.987998][ T6921] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89
[  125.998643][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.014294][ T6921] syz.3.336: attempt to access beyond end of device
[  126.014294][ T6921] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  126.086477][ T6921] erofs: (device loop3): z_erofs_readahead: readahead error at folio 4 @ nid 89
[  126.111945][ T6921] syz.3.336: attempt to access beyond end of device
[  126.111945][ T6921] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16
[  126.159936][ T6921] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192]
[  126.222976][   T28] audit: type=1800 audit(1792585372.989:11): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.336" name="file2" dev="loop3" ino=89 res=0 errno=0
[  126.289342][ T6934] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  126.462521][ T6942] FAULT_INJECTION: forcing a failure.
[  126.462521][ T6942] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  126.479892][ T6942] CPU: 0 PID: 6942 Comm: syz.2.345 Not tainted syzkaller #0
[  126.487253][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  126.497332][ T6942] Call Trace:
[  126.500620][ T6942]  <TASK>
[  126.503576][ T6942]  dump_stack_lvl+0x18c/0x250
[  126.508278][ T6942]  ? show_regs_print_info+0x20/0x20
[  126.513488][ T6942]  ? load_image+0x420/0x420
[  126.518013][ T6942]  ? __lock_acquire+0x7eb0/0x7eb0
[  126.523047][ T6942]  should_fail_ex+0x394/0x4c0
[  126.527733][ T6942]  prepare_alloc_pages+0x1e1/0x5b0
[  126.532847][ T6942]  __alloc_pages+0x134/0x460
[  126.537436][ T6942]  ? zone_statistics+0x170/0x170
[  126.542372][ T6942]  ? lockdep_softirqs_off+0x440/0x440
[  126.547746][ T6942]  ? free_zapped_rcu+0x250/0x250
[  126.552776][ T6942]  __kmalloc_large_node+0x8c/0x1f0
[  126.557894][ T6942]  ? io_alloc_hash_table+0x2d/0xb0
[  126.563003][ T6942]  __kmalloc+0x114/0x240
[  126.567244][ T6942]  ? init_hash_table+0xc7/0xe0
[  126.572012][ T6942]  io_alloc_hash_table+0x2d/0xb0
[  126.576950][ T6942]  io_ring_ctx_alloc+0x160/0xc10
[  126.582068][ T6942]  io_uring_create+0x2df/0x1330
[  126.586911][ T6942]  ? __might_fault+0xc6/0x120
[  126.591580][ T6942]  ? __might_fault+0xaa/0x120
[  126.596263][ T6942]  __se_sys_io_uring_setup+0x29f/0x2b0
[  126.601725][ T6942]  ? __x64_sys_io_uring_setup+0x60/0x60
[  126.607279][ T6942]  ? lockdep_hardirqs_on+0x98/0x150
[  126.612476][ T6942]  do_syscall_64+0x55/0xb0
[  126.616912][ T6942]  ? clear_bhb_loop+0x40/0x90
[  126.621604][ T6942]  ? clear_bhb_loop+0x40/0x90
[  126.626294][ T6942]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  126.632187][ T6942] RIP: 0033:0x7fc34d39f559
[  126.636597][ T6942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.656205][ T6942] RSP: 002b:00007fc34e236028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  126.664648][ T6942] RAX: ffffffffffffffda RBX: 00007fc34d625fa0 RCX: 00007fc34d39f559
[  126.672630][ T6942] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00000000000048fd
[  126.680597][ T6942] RBP: 00007fc34d436b20 R08: 0000000000000000 R09: 0000000000000000
[  126.688560][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  126.696525][ T6942] R13: 00007fc34d626038 R14: 00007fc34d625fa0 R15: 00007ffd861f8f88
[  126.704499][ T6942]  </TASK>
[  126.782220][    T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  126.899046][ T6953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.939144][ T6956] loop0: detected capacity change from 0 to 256
[  126.952570][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.976292][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  126.990528][    T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  127.026996][    T8] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  127.032113][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.051209][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.081413][    T8] usb 5-1: Product: syz
[  127.102911][    T8] usb 5-1: Manufacturer: syz
[  127.107576][    T8] usb 5-1: SerialNumber: syz
[  127.347329][    T8] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  127.748978][    T8] usb 5-1: USB disconnect, device number 2
[  127.769737][    T8] usblp0: removed
[  127.890628][ T6992] loop2: detected capacity change from 0 to 16
[  127.922342][ T6992] erofs: (device loop2): mounted with root inode @ nid 36.
[  127.935793][ T6992] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89
[  127.947879][ T6992] syz.2.353: attempt to access beyond end of device
[  127.947879][ T6992] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  127.979004][ T6992] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 89
[  127.992238][ T6992] syz.2.353: attempt to access beyond end of device
[  127.992238][ T6992] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16
[  128.023075][ T6992] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192]
[  128.035918][   T28] audit: type=1800 audit(1792585374.809:12): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.353" name="file2" dev="loop2" ino=89 res=0 errno=0
[  128.073528][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.109598][ T7001] IPv6: sit1: Disabled Multicast RS
[  128.181755][ T5854] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  128.401279][ T5854] usb 1-1: unable to get BOS descriptor or descriptor too short
[  128.419428][ T5854] usb 1-1: no configurations
[  128.425158][ T7011] syzkaller1: entered promiscuous mode
[  128.434956][ T5854] usb 1-1: can't read configurations, error -22
[  128.444882][ T7011] syzkaller1: entered allmulticast mode
[  128.723846][ T7024] netlink: 'syz.4.363': attribute type 20 has an invalid length.
[  128.737002][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'.
[  128.757480][ T7024] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.767180][ T7024] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.776319][ T7024] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.785113][ T7024] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.799587][ T7005] loop3: detected capacity change from 0 to 32768
[  128.826586][ T7024] netlink: 'syz.4.363': attribute type 20 has an invalid length.
[  128.849727][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'.
[  128.869974][ T7005] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  129.020526][ T7039] trusted_key: syz.4.365 sent an empty control message without MSG_MORE.
[  129.060058][ T7040] loop0: detected capacity change from 0 to 16
[  129.070412][ T7005] XFS (loop3): Ending clean mount
[  129.104664][ T7040] erofs: (device loop0): mounted with root inode @ nid 36.
[  129.112195][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.136021][ T7040] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89
[  129.177987][ T7040] syz.0.366: attempt to access beyond end of device
[  129.177987][ T7040] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  129.203948][ T7044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.367'.
[  129.236384][ T7040] erofs: (device loop0): z_erofs_readahead: readahead error at folio 4 @ nid 89
[  129.245720][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'.
[  129.281120][ T7040] syz.0.366: attempt to access beyond end of device
[  129.281120][ T7040] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16
[  129.319364][ T7040] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192]
[  129.377188][   T28] audit: type=1800 audit(1792585376.149:13): pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.366" name="file2" dev="loop0" ino=89 res=0 errno=0
[  129.440828][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  129.541018][ T7053] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  129.657564][    T8] libceph: connect (1)[c::]:6789 error -101
[  129.664420][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  129.789592][   T27] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  129.917901][ T7071] ip_tables: iptables: counters copy to user failed while replacing table
[  129.929607][ T5854] libceph: connect (1)[c::]:6789 error -101
[  129.936700][ T5854] libceph: mon0 (1)[c::]:6789 connect error
[  129.995975][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.084529][   T27] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  130.156106][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.316506][ T7051] loop4: detected capacity change from 0 to 40427
[  130.379541][ T7051] F2FS-fs (loop4): invalid crc value
[  130.409598][ T7051] F2FS-fs (loop4): Found nat_bits in checkpoint
[  130.439785][ T7061] ceph: No mds server is up or the cluster is laggy
[  130.441672][ T7058] ceph: No mds server is up or the cluster is laggy
[  130.473360][ T5854] libceph: connect (1)[c::]:6789 error -101
[  130.479470][ T5854] libceph: mon0 (1)[c::]:6789 connect error
[  130.582061][ T7051] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  130.754080][ T6668] syz-executor: attempt to access beyond end of device
[  130.754080][ T6668] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  130.803846][ T6668] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  130.822513][ T6668] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  130.892129][ T7099] loop0: detected capacity change from 0 to 512
[  131.040889][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.193388][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.563166][ T7123] page:ffffea00014f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53e00
[  131.583992][ T7123] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  131.593819][ T7123] page_type: 0xffffffff()
[  131.599384][ T7123] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  131.622397][ T7123] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  131.640744][ T7123] page dumped because: unmovable page
[  131.650961][ T7123] page_owner tracks the page as allocated
[  131.664679][ T7123] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 49, tgid 49 (kworker/u4:3), ts 113220901950, free_ts 103808392136
[  131.696493][ T7123]  post_alloc_hook+0x1c1/0x200
[  131.701382][ T7123]  get_page_from_freelist+0x2181/0x22a0
[  131.711500][ T7123]  __alloc_pages+0x1f0/0x460
[  131.720045][ T7123]  __alloc_pages_bulk+0x49b/0x900
[  131.731704][ T7123]  kasan_populate_vmalloc+0xcd/0x280
[  131.741487][ T7123]  alloc_vmap_area+0x1d2d/0x1e50
[  131.751731][ T7123]  vm_map_ram+0x693/0xcf0
[  131.761712][ T7123]  _xfs_buf_map_pages+0x143/0x3e0
[  131.767538][ T7123]  xfs_buf_get_map+0xdad/0x18b0
[  131.777879][ T7123]  xfs_buf_read_map+0x88/0x990
[  131.789945][ T7123]  xfs_buf_readahead_map+0x5a/0x80
[  131.795420][ T7123]  xfs_btree_reada_bufs+0x162/0x230
[  131.800775][ T7123]  xfs_iwalk_ichunk_ra+0x24c/0x3f0
[  131.811224][ T7123]  xfs_iwalk_ag+0x596/0x9d0
[  131.821341][ T7123]  xfs_iwalk_ag_work+0xf5/0x1a0
[  131.831456][ T7123]  xfs_pwork_work+0x7b/0x180
[  131.841569][ T7123] page last free stack trace:
[  131.849689][ T7123]  __free_pages_ok+0x994/0xad0
[  131.857878][ T7123]  io_pages_unmap+0x1c4/0x300
[  131.863031][ T7123]  io_rings_free+0xbb/0x3d0
[  131.867694][ T7123]  io_ring_ctx_free+0x745/0x950
[  131.868319][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.873231][ T7123]  io_ring_exit_work+0x7a6/0x830
[  131.886571][ T7123]  process_scheduled_works+0xa60/0x1600
[  131.895262][ T7123]  worker_thread+0xa5e/0xfe0
[  131.900065][ T7123]  kthread+0x2fa/0x390
[  131.907412][ T7123]  ret_from_fork+0x48/0x80
[  131.918280][ T7123]  ret_from_fork_asm+0x11/0x20
[  131.922022][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.959871][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.990836][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.015454][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.024959][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.344616][ T7157] loop3: detected capacity change from 0 to 512
[  132.354737][ T7157] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  132.423940][   T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  132.615703][   T27] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  132.629241][   T27] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  132.637832][   T27] usb 1-1: Product: syz
[  132.646658][   T27] usb 1-1: SerialNumber: syz
[  132.655938][   T27] usb 1-1: config 0 descriptor??
[  132.685431][ T7165] loop3: detected capacity change from 0 to 2048
[  132.749758][ T7165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.768118][ T7165] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  132.838560][ T7165] overlayfs: failed to verify upper (/proc, ino=19, err=-28)
[  132.847331][ T7165] overlayfs: failed to verify index dir 'upper' xattr
[  132.855356][ T7165] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  132.877064][   T27] hso 1-1:0.0: Failed to find BULK IN ep
[  132.945881][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.957528][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  132.963988][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  133.081033][ T5762] usb 1-1: USB disconnect, device number 8
[  133.330485][ T7175] loop4: detected capacity change from 0 to 1024
[  133.564003][ T7173] loop3: detected capacity change from 0 to 32768
[  133.607827][ T7173] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  133.716659][ T7173] XFS (loop3): Ending clean mount
[  133.732307][ T7191] FAULT_INJECTION: forcing a failure.
[  133.732307][ T7191] name failslab, interval 1, probability 0, space 0, times 0
[  133.745916][ T7191] CPU: 0 PID: 7191 Comm: syz.0.419 Not tainted syzkaller #0
[  133.753240][ T7191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  133.763324][ T7191] Call Trace:
[  133.766621][ T7191]  <TASK>
[  133.769575][ T7191]  dump_stack_lvl+0x18c/0x250
[  133.774286][ T7191]  ? show_regs_print_info+0x20/0x20
[  133.779516][ T7191]  ? load_image+0x420/0x420
[  133.784056][ T7191]  ? __might_sleep+0xe0/0xe0
[  133.788680][ T7191]  ? __lock_acquire+0x7eb0/0x7eb0
[  133.793740][ T7191]  should_fail_ex+0x394/0x4c0
[  133.798445][ T7191]  should_failslab+0x9/0x20
[  133.802970][ T7191]  slab_pre_alloc_hook+0x59/0x300
[  133.808052][ T7191]  ? _raw_spin_lock_irq+0xbb/0xf0
[  133.813107][ T7191]  kmem_cache_alloc+0x5a/0x2d0
[  133.817895][ T7191]  ? alloc_uid+0x151/0x550
[  133.822354][ T7191]  alloc_uid+0x151/0x550
[  133.826630][ T7191]  __sys_setuid+0x1ca/0x580
[  133.831164][ T7191]  do_syscall_64+0x55/0xb0
[  133.835609][ T7191]  ? clear_bhb_loop+0x40/0x90
[  133.840306][ T7191]  ? clear_bhb_loop+0x40/0x90
[  133.844995][ T7191]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  133.850889][ T7191] RIP: 0033:0x7f4f2c39f559
[  133.855303][ T7191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.874905][ T7191] RSP: 002b:00007f4f2d334028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069
[  133.883324][ T7191] RAX: ffffffffffffffda RBX: 00007f4f2c625fa0 RCX: 00007f4f2c39f559
[  133.891297][ T7191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01
[  133.899264][ T7191] RBP: 00007f4f2c436b20 R08: 0000000000000000 R09: 0000000000000000
[  133.907258][ T7191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.915225][ T7191] R13: 00007f4f2c626038 R14: 00007f4f2c625fa0 R15: 00007fff687f9358
[  133.923200][ T7191]  </TASK>
[  133.926293][    C0] vkms_vblank_simulate: vblank timer overrun
[  134.035700][ T5772] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  134.385548][   T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  134.522365][ T7215] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  134.571771][   T27] usb 5-1: Using ep0 maxpacket: 8
[  134.576630][ T7217] FAULT_INJECTION: forcing a failure.
[  134.576630][ T7217] name failslab, interval 1, probability 0, space 0, times 0
[  134.578702][   T27] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  134.591387][ T7219] FAULT_INJECTION: forcing a failure.
[  134.591387][ T7219] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  134.612711][ T7217] CPU: 0 PID: 7217 Comm: syz.3.428 Not tainted syzkaller #0
[  134.620042][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  134.630119][ T7217] Call Trace:
[  134.633402][ T7217]  <TASK>
[  134.636336][ T7217]  dump_stack_lvl+0x18c/0x250
[  134.641028][ T7217]  ? show_regs_print_info+0x20/0x20
[  134.646239][ T7217]  ? load_image+0x420/0x420
[  134.650745][ T7217]  ? __might_sleep+0xe0/0xe0
[  134.655341][ T7217]  ? __lock_acquire+0x7eb0/0x7eb0
[  134.660367][ T7217]  should_fail_ex+0x394/0x4c0
[  134.665050][ T7217]  should_failslab+0x9/0x20
[  134.669559][ T7217]  slab_pre_alloc_hook+0x59/0x300
[  134.674595][ T7217]  kmem_cache_alloc+0x5a/0x2d0
[  134.679356][ T7217]  ? __kernfs_new_node+0xe5/0x7f0
[  134.684396][ T7217]  __kernfs_new_node+0xe5/0x7f0
[  134.689255][ T7217]  ? kernfs_new_node+0x260/0x260
[  134.694207][ T7217]  ? up_write+0x1be/0x410
[  134.698543][ T7217]  kernfs_new_node+0x14c/0x260
[  134.703318][ T7217]  __kernfs_create_file+0x4b/0x2e0
[  134.708445][ T7217]  sysfs_add_file_mode_ns+0x237/0x2f0
[  134.713822][ T7217]  internal_create_group+0x431/0xd10
[  134.719108][ T7217]  ? kernfs_add_one+0x149/0x6b0
[  134.723974][ T7217]  ? sysfs_create_group+0x20/0x20
[  134.729003][ T7217]  ? up_write+0x1be/0x410
[  134.733337][ T7217]  sysfs_create_groups+0x59/0x120
[  134.738361][ T7217]  device_add_attrs+0x1b2/0x830
[  134.743216][ T7217]  ? device_add_class_symlinks+0x240/0x240
[  134.749019][ T7217]  ? device_add_class_symlinks+0x21f/0x240
[  134.754822][ T7217]  device_add+0x51a/0xc40
[  134.759151][ T7217]  netdev_register_kobject+0x188/0x320
[  134.764614][ T7217]  register_netdevice+0x12aa/0x1ba0
[  134.769822][ T7217]  ? netif_stacked_transfer_operstate+0x210/0x210
[  134.776249][ T7217]  ? __local_bh_enable_ip+0x13a/0x1c0
[  134.781641][ T7217]  ? lockdep_hardirqs_on+0x98/0x150
[  134.786863][ T7217]  ? __local_bh_enable_ip+0x13a/0x1c0
[  134.792244][ T7217]  ? _local_bh_enable+0xa0/0xa0
[  134.797098][ T7217]  ? slip_open+0xb50/0xe50
[  134.801521][ T7217]  ? rcu_is_watching+0x15/0xb0
[  134.806290][ T7217]  slip_open+0xbb2/0xe50
[  134.810537][ T7217]  ? tty_set_termios_ldisc+0x4f/0xc0
[  134.815830][ T7217]  ? pptp_ppp_ioctl+0x170/0x170
[  134.820683][ T7217]  ? up_write+0x1be/0x410
[  134.825013][ T7217]  tty_ldisc_open+0x9d/0x100
[  134.829607][ T7217]  tty_set_ldisc+0x356/0x530
[  134.834286][ T7217]  tty_ioctl+0xc22/0xdc0
[  134.838527][ T7217]  ? tty_get_icount+0xb0/0xb0
[  134.843205][ T7217]  __se_sys_ioctl+0xfd/0x170
[  134.847799][ T7217]  do_syscall_64+0x55/0xb0
[  134.852218][ T7217]  ? clear_bhb_loop+0x40/0x90
[  134.856897][ T7217]  ? clear_bhb_loop+0x40/0x90
[  134.861580][ T7217]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  134.867485][ T7217] RIP: 0033:0x7fc47d99f559
[  134.871942][ T7217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.891569][ T7217] RSP: 002b:00007fc47e942028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  134.899986][ T7217] RAX: ffffffffffffffda RBX: 00007fc47dc25fa0 RCX: 00007fc47d99f559
[  134.907958][ T7217] RDX: 0000200000000600 RSI: 0000000000005423 RDI: 0000000000000004
[  134.916013][ T7217] RBP: 00007fc47da36b20 R08: 0000000000000000 R09: 0000000000000000
[  134.923985][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.931951][ T7217] R13: 00007fc47dc26038 R14: 00007fc47dc25fa0 R15: 00007fff9a5e1c68
[  134.939935][ T7217]  </TASK>
[  134.943061][    C0] vkms_vblank_simulate: vblank timer overrun
[  134.950660][   T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  134.951254][ T7219] CPU: 0 PID: 7219 Comm: syz.0.429 Not tainted syzkaller #0
[  134.965237][   T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  134.967686][ T7219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  134.978683][   T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  134.987441][ T7219] Call Trace:
[  134.987456][ T7219]  <TASK>
[  134.987465][ T7219]  dump_stack_lvl+0x18c/0x250
[  134.987496][ T7219]  ? show_regs_print_info+0x20/0x20
[  134.987517][ T7219]  ? load_image+0x420/0x420
[  134.987539][ T7219]  ? __might_fault+0xaa/0x120
[  134.987557][ T7219]  ? __lock_acquire+0x7eb0/0x7eb0
[  134.987582][ T7219]  should_fail_ex+0x394/0x4c0
[  134.987609][ T7219]  _copy_from_user+0x2f/0xe0
[  135.001547][   T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  135.003707][ T7219]  xsk_setsockopt+0x350/0x750
[  135.003737][ T7219]  ? xsk_poll+0x670/0x670
[  135.003760][ T7219]  ? __fget_files+0x28/0x460
[  135.003781][ T7219]  ? aa_sock_opt_perm+0x74/0x100
[  135.003798][ T7219]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  135.003820][ T7219]  ? security_socket_setsockopt+0x7e/0xa0
[  135.003842][ T7219]  ? xsk_poll+0x670/0x670
[  135.003863][ T7219]  do_sock_setsockopt+0x175/0x1a0
[  135.010577][   T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  135.013720][ T7219]  ? __fdget+0x180/0x210
[  135.013752][ T7219]  __x64_sys_setsockopt+0x182/0x200
[  135.013778][ T7219]  do_syscall_64+0x55/0xb0
[  135.013800][ T7219]  ? clear_bhb_loop+0x40/0x90
[  135.013823][ T7219]  ? clear_bhb_loop+0x40/0x90
[  135.013848][ T7219]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  135.013870][ T7219] RIP: 0033:0x7f4f2c39f559
[  135.013889][ T7219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.013902][ T7219] RSP: 002b:00007f4f2d334028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  135.013930][ T7219] RAX: ffffffffffffffda RBX: 00007f4f2c625fa0 RCX: 00007f4f2c39f559
[  135.013944][ T7219] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003
[  135.013955][ T7219] RBP: 00007f4f2c436b20 R08: 0000000000000020 R09: 0000000000000000
[  135.022586][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.023100][ T7219] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000000
[  135.200010][ T7219] R13: 00007f4f2c626038 R14: 00007f4f2c625fa0 R15: 00007fff687f9358
[  135.208026][ T7219]  </TASK>
[  135.211149][    C0] vkms_vblank_simulate: vblank timer overrun
[  135.282177][   T27] usb 5-1: GET_CAPABILITIES returned 0
[  135.287732][   T27] usbtmc 5-1:16.0: can't read capabilities
[  135.352892][ T1203] net_ratelimit: 6 callbacks suppressed
[  135.352914][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.381247][ T7228] FAULT_INJECTION: forcing a failure.
[  135.381247][ T7228] name failslab, interval 1, probability 0, space 0, times 0
[  135.406413][ T7228] CPU: 0 PID: 7228 Comm: syz.2.432 Not tainted syzkaller #0
[  135.413755][ T7228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  135.423833][ T7228] Call Trace:
[  135.427131][ T7228]  <TASK>
[  135.430086][ T7228]  dump_stack_lvl+0x18c/0x250
[  135.434798][ T7228]  ? show_regs_print_info+0x20/0x20
[  135.440031][ T7228]  ? load_image+0x420/0x420
[  135.444564][ T7228]  ? __lock_acquire+0x7eb0/0x7eb0
[  135.449612][ T7228]  ? is_dynamic_key+0x260/0x260
[  135.454494][ T7228]  ? __lock_acquire+0x1431/0x7eb0
[  135.459545][ T7228]  should_fail_ex+0x394/0x4c0
[  135.464252][ T7228]  should_failslab+0x9/0x20
[  135.468777][ T7228]  slab_pre_alloc_hook+0x59/0x300
[  135.473832][ T7228]  kmem_cache_alloc_lru+0x4d/0x2c0
[  135.478963][ T7228]  ? __d_alloc+0x31/0x710
[  135.483325][ T7228]  __d_alloc+0x31/0x710
[  135.487511][ T7228]  d_alloc_parallel+0xe0/0x1590
[  135.492399][ T7228]  ? verify_lock_unused+0x140/0x140
[  135.497625][ T7228]  ? verify_lock_unused+0x140/0x140
[  135.502862][ T7228]  ? lockdep_softirqs_off+0x440/0x440
[  135.508270][ T7228]  ? lockdep_softirqs_off+0x440/0x440
[  135.513668][ T7228]  ? d_hash_and_lookup+0x1b0/0x1b0
[  135.518816][ T7228]  ? __init_waitqueue_head+0xa8/0x140
[  135.524223][ T7228]  __lookup_slow+0x138/0x400
[  135.528848][ T7228]  ? lookup_one_len+0x2e0/0x2e0
[  135.533747][ T7228]  ? down_read+0x1ac/0x2e0
[  135.538189][ T7228]  lookup_slow+0x53/0x70
[  135.542467][ T7228]  walk_component+0x2ad/0x3e0
[  135.547177][ T7228]  path_lookupat+0x148/0x420
[  135.551800][ T7228]  filename_lookup+0x22d/0x580
[  135.556600][ T7228]  ? hashlen_string+0x110/0x110
[  135.561495][ T7228]  ? __lock_acquire+0x7eb0/0x7eb0
[  135.566543][ T7228]  ? __might_fault+0xaa/0x120
[  135.571237][ T7228]  vfs_statx+0x112/0x680
[  135.575501][ T7228]  ? vfs_fstatat+0x1b0/0x1b0
[  135.580130][ T7228]  ? getname_flags+0x20a/0x500
[  135.584914][ T7228]  vfs_fstatat+0x12a/0x1b0
[  135.589328][ T7228]  __x64_sys_newfstatat+0x149/0x1f0
[  135.594547][ T7228]  ? __ia32_sys_newlstat+0x1e0/0x1e0
[  135.599871][ T7228]  ? lockdep_hardirqs_on+0x98/0x150
[  135.605087][ T7228]  do_syscall_64+0x55/0xb0
[  135.609502][ T7228]  ? clear_bhb_loop+0x40/0x90
[  135.614196][ T7228]  ? clear_bhb_loop+0x40/0x90
[  135.618906][ T7228]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  135.624817][ T7228] RIP: 0033:0x7fc34d39f559
[  135.629227][ T7228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.648840][ T7228] RSP: 002b:00007fc34e236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[  135.657276][ T7228] RAX: ffffffffffffffda RBX: 00007fc34d625fa0 RCX: 00007fc34d39f559
[  135.665263][ T7228] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  135.673264][ T7228] RBP: 00007fc34d436b20 R08: 0000000000000000 R09: 0000000000000000
[  135.681252][ T7228] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000
[  135.689242][ T7228] R13: 00007fc34d626038 R14: 00007fc34d625fa0 R15: 00007ffd861f8f88
[  135.697252][ T7228]  </TASK>
[  135.700292][    C0] vkms_vblank_simulate: vblank timer overrun
[  135.735999][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.747503][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.756653][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.765779][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.774899][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.833075][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.842226][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.851341][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.860436][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.891428][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.900586][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.909710][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.918834][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.929034][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.938158][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.947237][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.989339][ T5762] usb 5-1: USB disconnect, device number 3
[  136.072069][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.153262][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.347698][ T7246] loop0: detected capacity change from 0 to 32768
[  136.378833][ T7246] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  136.392851][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.480714][ T7248] loop2: detected capacity change from 0 to 40427
[  136.491149][ T7246] XFS (loop0): Ending clean mount
[  136.512113][ T7248] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  136.524804][ T7248] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  136.533971][ T7248] F2FS-fs (loop2): build fault injection attr: rate: 64, type: 0x7ffff
[  136.547969][ T7248] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x5
[  136.557667][ T7246] XFS (loop0): Quotacheck needed: Please wait.
[  136.578397][ T7248] F2FS-fs (loop2): invalid crc value
[  136.600736][ T7248] F2FS-fs (loop2): Found nat_bits in checkpoint
[  136.641670][ T7246] XFS (loop0): Quotacheck: Done.
[  136.731584][ T7248] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  136.762638][ T7248] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  136.789356][ T7248] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of __f2fs_setxattr+0x1e0/0x1310
[  136.804382][ T7248] overlayfs: failed to create directory ./bus/work (errno: 12); mounting read-only
[  136.835364][ T5773] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  136.857412][ T5775] syz-executor: attempt to access beyond end of device
[  136.857412][ T5775] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  136.871939][ T5775] syz-executor: attempt to access beyond end of device
[  136.871939][ T5775] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  137.011718][ T1203] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  137.201787][ T1203] usb 4-1: Using ep0 maxpacket: 16
[  137.211200][ T1203] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.245309][ T5775] syz-executor: attempt to access beyond end of device
[  137.245309][ T5775] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  137.264437][ T1203] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.284807][ T1203] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.306778][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  137.314227][ T1203] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  137.332930][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.349745][ T1203] usb 4-1: config 0 interface 0 has no altsetting 0
[  137.355944][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  137.364114][ T1203] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  137.373525][ T1203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.391201][ T5775] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  137.392963][ T1203] usb 4-1: config 0 descriptor??
[  137.417943][ T7268] loop4: detected capacity change from 0 to 32768
[  137.433976][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.559825][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.599690][ T7268] JBD2: Ignoring recovery information on journal
[  137.693546][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.749581][ T7268] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  137.782095][ T5781] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  137.823389][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode
[  137.861349][ T1203] logitech-djreceiver 0003:046D:C53A.0003: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0
[  137.879699][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.992004][ T5781] usb 1-1: Using ep0 maxpacket: 8
[  137.999973][ T5781] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  138.015147][ T5781] usb 1-1: config 0 has no interface number 0
[  138.048676][ T5781] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  138.070250][ T5762] usb 4-1: USB disconnect, device number 8
[  138.075375][ T5781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.085093][ T5781] usb 1-1: Product: syz
[  138.091113][ T5781] usb 1-1: Manufacturer: syz
[  138.096267][ T5781] usb 1-1: SerialNumber: syz
[  138.115818][ T5781] usb 1-1: config 0 descriptor??
[  138.207386][ T6668] ocfs2: Unmounting device (7,4) on (node local)
[  138.341542][ T5781] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[  138.378386][ T5781] usb 1-1: Failed to initialize entity for entity 6
[  138.401516][ T5781] usb 1-1: Failed to register entities (-22).
[  138.478219][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.566939][ T5781] usb 1-1: USB disconnect, device number 9
[  139.114321][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.181834][ T5781] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  139.361366][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  139.373319][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  139.383375][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  139.393604][ T5781] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.408534][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  139.419580][ T5781] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  139.429789][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  139.437267][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.447309][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  139.454646][ T5781] usb 4-1: Product: syz
[  139.459137][ T5781] usb 4-1: Manufacturer: syz
[  139.465841][ T5781] usb 4-1: SerialNumber: syz
[  139.522269][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.554975][   T12] gretap0 (unregistering): left promiscuous mode
[  139.798341][ T7304] rxe_eth0 speed is unknown, defaulting to 1000
[  139.858031][ T7323] loop4: detected capacity change from 0 to 512
[  139.887760][ T7323] EXT4-fs: Ignoring removed orlov option
[  139.961810][ T7323] EXT4-fs: Ignoring removed mblk_io_submit option
[  140.101911][ T7323] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.456: corrupted in-inode xattr: e_value size too large
[  140.221027][ T7323] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.456: couldn't read orphan inode 15 (err -117)
[  140.285260][ T7323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.460848][ T6668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.532428][ T5781] cdc_ncm 4-1:1.0: failed to get mac address
[  140.552439][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.821866][ T5781] cdc_ncm 4-1:1.0: bind() failure
[  140.897525][ T5781] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  140.906673][ T5781] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  140.916480][ T5781] usbtest: probe of 4-1:1.1 failed with error -71
[  140.940995][ T5781] usb 4-1: USB disconnect, device number 9
[  140.979090][   T12] hsr_slave_0: left promiscuous mode
[  141.000432][   T12] hsr_slave_1: left promiscuous mode
[  141.009121][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.020915][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.055037][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.062620][   T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  141.081135][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.102396][   T12] bridge_slave_1: left allmulticast mode
[  141.108099][   T12] bridge_slave_1: left promiscuous mode
[  141.122070][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.148021][   T12] bridge_slave_0: left allmulticast mode
[  141.154968][   T12] bridge_slave_0: left promiscuous mode
[  141.160868][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.197836][   T12] veth1_macvtap: left promiscuous mode
[  141.203721][   T12] veth0_macvtap: left promiscuous mode
[  141.209452][   T12] veth1_vlan: left promiscuous mode
[  141.217228][   T12] veth0_vlan: left promiscuous mode
[  141.255707][   T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  141.273655][   T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  141.295138][   T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  141.321717][   T27] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  141.367839][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.389199][ T7343] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  141.397052][ T7343] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  141.423297][   T27] pl2303 1-1:1.0: pl2303 converter detected
[  141.444428][   T27] usb 1-1: pl2303 converter now attached to ttyUSB0
[  141.501895][ T7352] tls_set_device_offload: netdev not found
[  141.513496][   T51] Bluetooth: hci1: command tx timeout
[  141.592817][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.788329][ T7343] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  141.802640][ T7343] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  141.823748][ T7343] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  141.853004][ T7343] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  141.953503][ T7343] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  142.166175][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.223512][ T7343] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  142.241110][ T7343] pl2303 ttyUSB0: error sending break = -32
[  142.381952][ T5762] usb 1-1: USB disconnect, device number 10
[  142.416282][ T5762] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  142.432457][ T5762] pl2303 1-1:1.0: device disconnected
[  142.559242][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.559455][   T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  142.577977][   T51] Bluetooth: hci2: Injecting HCI hardware error event
[  142.588973][ T5090] Bluetooth: hci2: hardware error 0x00
[  142.633237][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.762797][   T12] team0 (unregistering): Port device team_slave_1 removed
[  142.826530][   T12] team0 (unregistering): Port device team_slave_0 removed
[  142.885682][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.983034][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.591720][   T51] Bluetooth: hci1: command tx timeout
[  143.599983][   T12] bond0 (unregistering): Released all slaves
[  143.681913][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.782504][ T7304] chnl_net:caif_netlink_parms(): no params data found
[  144.074249][ T7379] UBIFS error (pid: 7379): cannot open "./file0", error -22
[  144.092163][ T7304] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.146993][ T7304] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.158552][ T7304] bridge_slave_0: entered allmulticast mode
[  144.177357][ T7304] bridge_slave_0: entered promiscuous mode
[  144.199655][ T7304] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.211272][ T7304] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.218960][ T7304] bridge_slave_1: entered allmulticast mode
[  144.234602][ T7304] bridge_slave_1: entered promiscuous mode
[  144.320343][ T7304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.360280][ T7304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.461009][ T7304] team0: Port device team_slave_0 added
[  144.466906][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880277f7400: rx timeout, send abort
[  144.476926][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880277f7400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  144.492468][ T7304] team0: Port device team_slave_1 added
[  144.537113][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.548417][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.580870][ T7304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.605765][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.621748][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.656470][ T7304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.661718][ T5090] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  144.682341][ T5762] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  144.715401][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.757410][ T7304] hsr_slave_0: entered promiscuous mode
[  144.787389][ T7304] hsr_slave_1: entered promiscuous mode
[  144.794739][ T7304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.811688][ T7304] Cannot create hsr debugfs directory
[  144.895887][ T5762] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  144.918371][ T5762] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  144.940141][ T5762] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  144.965329][ T5762] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  144.986845][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.025570][ T7398] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  145.035474][ T7398] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  145.058727][ T5762] pl2303 4-1:1.0: pl2303 converter detected
[  145.092491][ T5762] usb 4-1: pl2303 converter now attached to ttyUSB0
[  145.113394][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.275635][ T7304] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  145.291437][ T7304] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  145.317144][ T7304] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  145.339264][ T7304] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  145.396772][ T7413] loop4: detected capacity change from 0 to 2048
[  145.435102][ T7398] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  145.454976][ T7398] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  145.468732][ T7398] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  145.475514][ T7413] GPT:first_usable_lbas don't match.
[  145.481047][ T7413] GPT:34 != 290
[  145.485714][ T7398] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  145.500005][ T7304] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.501795][ T7413] GPT: Use GNU Parted to correct GPT errors.
[  145.509073][ T7398] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  145.531882][ T7413]  loop4: p1 p2 p3
[  145.604319][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.627184][ T7304] 8021q: adding VLAN 0 to HW filter on device team0
[  145.650721][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.657930][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.676601][   T51] Bluetooth: hci1: command tx timeout
[  145.761502][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.762050][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880277f6c00: rx timeout, send abort
[  145.778206][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880277f6c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  145.809594][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.816859][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.839705][ T7398] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  145.882771][ T7398] pl2303 ttyUSB0: error sending break = -32
[  145.965948][ T5762] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  146.076742][ T1203] usb 4-1: USB disconnect, device number 10
[  146.089778][ T1203] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  146.124609][ T1203] pl2303 4-1:1.0: device disconnected
[  146.182056][ T5762] usb 5-1: Using ep0 maxpacket: 8
[  146.223746][ T5762] usb 5-1: unable to get BOS descriptor or descriptor too short
[  146.243106][ T5762] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  146.291021][ T5762] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  146.310512][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.326070][ T7304] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.333228][ T5762] usb 5-1: Product: Š°
[  146.333249][ T5762] usb 5-1: Manufacturer: ķ•”ļ§„āƒ“īœ„įæ«äˆŠē«’ā¼žļƒź’æä•‘ć³¼ēŒķ‘ī¶†ä’¼ā—µć°–ķ˜Ÿā°ę¦źžžź„“ā¹ƒćµ¤ļŠź…“ā„Ļ±éØ£ī…±å–āƑ
[  146.333270][ T5762] usb 5-1: SerialNumber: ģ¦—é…„巛䈄ļ•ƒģ½¹ģ†‡ī›€ā‰ē­±ī˜—ē„©ļ—–ė¹Œļ¶§ģ‚»įŒšģ¾’×ŗĻ˜ā©›ē‰¶č‘ė„¼ķ“žä…ē© į³Œē–”ē£°ī””怔
[  146.387235][ T7435] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  146.624131][ T5762] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  146.688263][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  146.792399][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.802131][ T5762] usb 5-1: USB disconnect, device number 4
[  146.935672][ T7451] FAULT_INJECTION: forcing a failure.
[  146.935672][ T7451] name failslab, interval 1, probability 0, space 0, times 0
[  147.019092][ T7451] CPU: 1 PID: 7451 Comm: syz.3.475 Not tainted syzkaller #0
[  147.026439][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  147.036522][ T7451] Call Trace:
[  147.039834][ T7451]  <TASK>
[  147.042787][ T7451]  dump_stack_lvl+0x18c/0x250
[  147.047502][ T7451]  ? show_regs_print_info+0x20/0x20
[  147.052727][ T7451]  ? load_image+0x420/0x420
[  147.057245][ T7451]  ? __might_sleep+0xe0/0xe0
[  147.061837][ T7451]  ? __lock_acquire+0x7eb0/0x7eb0
[  147.066876][ T7451]  should_fail_ex+0x394/0x4c0
[  147.071549][ T7451]  should_failslab+0x9/0x20
[  147.076060][ T7451]  slab_pre_alloc_hook+0x59/0x300
[  147.081121][ T7451]  ? snd_pcm_open+0x3f0/0x600
[  147.085827][ T7451]  __kmem_cache_alloc_node+0x53/0x260
[  147.091227][ T7451]  ? snd_pcm_open+0x3f0/0x600
[  147.095933][ T7451]  kmalloc_trace+0x2a/0xe0
[  147.100387][ T7451]  snd_pcm_open+0x3f0/0x600
[  147.104933][ T7451]  ? snd_pcm_mmap_control_fault+0x270/0x270
[  147.110860][ T7451]  ? do_task_dead+0xd0/0xd0
[  147.115403][ T7451]  snd_pcm_playback_open+0x6f/0xd0
[  147.120544][ T7451]  chrdev_open+0x58c/0x600
[  147.122281][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.124975][ T7451]  ? cd_forget+0x160/0x160
[  147.125041][ T7451]  ? fsnotify_perm+0x3ed/0x5e0
[  147.125071][ T7451]  do_dentry_open+0x880/0x14b0
[  147.145057][ T7304] veth0_vlan: entered promiscuous mode
[  147.147359][ T7451]  ? cd_forget+0x160/0x160
[  147.147395][ T7451]  path_openat+0x284f/0x3270
[  147.161890][ T7451]  ? do_sys_openat2+0xda/0x1d0
[  147.165132][ T7304] veth1_vlan: entered promiscuous mode
[  147.166662][ T7451]  ? __x64_sys_openat+0x139/0x160
[  147.166697][ T7451]  ? verify_lock_unused+0x140/0x140
[  147.166720][ T7451]  ? do_filp_open+0x430/0x430
[  147.187101][ T7451]  do_filp_open+0x1f2/0x430
[  147.191648][ T7451]  ? vfs_tmpfile+0x620/0x620
[  147.196292][ T7451]  ? _raw_spin_unlock+0x28/0x40
[  147.201170][ T7451]  ? alloc_fd+0x590/0x640
[  147.205582][ T7451]  do_sys_openat2+0x134/0x1d0
[  147.206986][ T7304] veth0_macvtap: entered promiscuous mode
[  147.210296][ T7451]  ? do_sys_open+0xe0/0xe0
[  147.210326][ T7451]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  147.221474][ T7304] veth1_macvtap: entered promiscuous mode
[  147.226401][ T7451]  ? lock_chain_count+0x20/0x20
[  147.226428][ T7451]  ? lock_chain_count+0x20/0x20
[  147.226451][ T7451]  __x64_sys_openat+0x139/0x160
[  147.226481][ T7451]  do_syscall_64+0x55/0xb0
[  147.251204][ T7451]  ? clear_bhb_loop+0x40/0x90
[  147.255913][ T7451]  ? clear_bhb_loop+0x40/0x90
[  147.260446][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.260605][ T7451]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  147.271202][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.276871][ T7451] RIP: 0033:0x7fc47d95fd8e
[  147.276890][ T7451] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  147.276905][ T7451] RSP: 002b:00007fc47e941b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  147.276925][ T7451] RAX: ffffffffffffffda RBX: 00007fc47e9426c0 RCX: 00007fc47d95fd8e
[  147.276939][ T7451] RDX: 0000000000000002 RSI: 00007fc47e941c00 RDI: ffffffffffffff9c
[  147.276951][ T7451] RBP: 00007fc47e941c00 R08: 0000000000000000 R09: 0000000000000000
[  147.276964][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  147.276976][ T7451] R13: 00007fc47dc26038 R14: 00007fc47dc25fa0 R15: 00007fff9a5e1c68
[  147.277003][ T7451]  </TASK>
[  147.426770][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.446475][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.456755][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.490288][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.528291][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.557611][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.586162][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.605665][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.662567][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.679544][ T7304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.690461][ T7304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.756738][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.782156][   T51] Bluetooth: hci1: command tx timeout
[  147.839395][ T7304] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.881154][ T7304] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.899866][ T7304] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.910420][ T7463] loop3: detected capacity change from 0 to 40427
[  147.918639][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.926924][ T7463] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  147.934776][ T7463] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  147.961173][ T7463] F2FS-fs (loop3): Found nat_bits in checkpoint
[  147.962108][ T7304] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.025874][ T7463] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  148.033653][ T7463] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  148.312435][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.512012][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.520011][ T7463] syz.3.477: attempt to access beyond end of device
[  148.520011][ T7463] loop3: rw=2049, sector=77824, nr_sectors = 4096 limit=40427
[  148.564198][ T7463] syz.3.477: attempt to access beyond end of device
[  148.564198][ T7463] loop3: rw=2049, sector=49152, nr_sectors = 4096 limit=40427
[  148.580888][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.655503][ T7463] syz.3.477: attempt to access beyond end of device
[  148.655503][ T7463] loop3: rw=2049, sector=57344, nr_sectors = 12288 limit=40427
[  148.666581][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.684599][ T7463] syz.3.477: attempt to access beyond end of device
[  148.684599][ T7463] loop3: rw=2049, sector=69632, nr_sectors = 8 limit=40427
[  148.699801][ T7463] syz.3.477: attempt to access beyond end of device
[  148.699801][ T7463] loop3: rw=2049, sector=69640, nr_sectors = 8 limit=40427
[  148.714817][ T7463] syz.3.477: attempt to access beyond end of device
[  148.714817][ T7463] loop3: rw=2049, sector=69648, nr_sectors = 8 limit=40427
[  148.716441][ T7482] FAULT_INJECTION: forcing a failure.
[  148.716441][ T7482] name failslab, interval 1, probability 0, space 0, times 0
[  148.729234][ T7463] syz.3.477: attempt to access beyond end of device
[  148.729234][ T7463] loop3: rw=2049, sector=69656, nr_sectors = 8 limit=40427
[  148.729433][ T7463] syz.3.477: attempt to access beyond end of device
[  148.729433][ T7463] loop3: rw=2049, sector=69664, nr_sectors = 8 limit=40427
[  148.729579][ T7463] syz.3.477: attempt to access beyond end of device
[  148.729579][ T7463] loop3: rw=2049, sector=69672, nr_sectors = 8 limit=40427
[  148.762414][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.769798][ T7463] syz.3.477: attempt to access beyond end of device
[  148.769798][ T7463] loop3: rw=2049, sector=69680, nr_sectors = 8 limit=40427
[  148.910010][ T7482] CPU: 0 PID: 7482 Comm: syz.4.482 Not tainted syzkaller #0
[  148.917358][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  148.927433][ T7482] Call Trace:
[  148.930726][ T7482]  <TASK>
[  148.933676][ T7482]  dump_stack_lvl+0x18c/0x250
[  148.938385][ T7482]  ? show_regs_print_info+0x20/0x20
[  148.943616][ T7482]  ? load_image+0x420/0x420
[  148.948153][ T7482]  ? __might_sleep+0xe0/0xe0
[  148.952772][ T7482]  ? __lock_acquire+0x7eb0/0x7eb0
[  148.957830][ T7482]  should_fail_ex+0x394/0x4c0
[  148.962539][ T7482]  should_failslab+0x9/0x20
[  148.967066][ T7482]  slab_pre_alloc_hook+0x59/0x300
[  148.972114][ T7482]  ? memcg_list_lru_alloc+0x335/0xb00
[  148.977508][ T7482]  ? memcg_list_lru_alloc+0x335/0xb00
[  148.982903][ T7482]  __kmem_cache_alloc_node+0x53/0x260
[  148.988303][ T7482]  ? memcg_list_lru_alloc+0x335/0xb00
[  148.993698][ T7482]  __kmalloc+0xa7/0x240
[  148.997876][ T7482]  memcg_list_lru_alloc+0x335/0xb00
[  149.003102][ T7482]  ? memcg_reparent_list_lrus+0x860/0x860
[  149.008850][ T7482]  ? get_obj_cgroup_from_current+0xd4/0x280
[  149.014770][ T7482]  slab_pre_alloc_hook+0x2ad/0x300
[  149.019894][ T7482]  ? slab_pre_alloc_hook+0xb1/0x300
[  149.025208][ T7482]  kmem_cache_alloc_lru+0x4d/0x2c0
[  149.030349][ T7482]  ? new_inode_pseudo+0x82/0x1d0
[  149.035292][ T7482]  new_inode_pseudo+0x82/0x1d0
[  149.040057][ T7482]  __ns_get_path+0x249/0x5f0
[  149.044651][ T7482]  ? __put_net+0x60/0x60
[  149.048891][ T7482]  open_related_ns+0xce/0x210
[  149.053588][ T7482]  ? apparmor_capable+0x137/0x1a0
[  149.058614][ T7482]  ? ns_get_path+0x90/0x90
[  149.063038][ T7482]  sock_ioctl+0x40b/0x7e0
[  149.067401][ T7482]  ? sock_poll+0x3e0/0x3e0
[  149.071820][ T7482]  ? bpf_lsm_file_ioctl+0x9/0x10
[  149.076776][ T7482]  ? security_file_ioctl+0x80/0xa0
[  149.081887][ T7482]  ? sock_poll+0x3e0/0x3e0
[  149.086305][ T7482]  __se_sys_ioctl+0xfd/0x170
[  149.090896][ T7482]  do_syscall_64+0x55/0xb0
[  149.095315][ T7482]  ? clear_bhb_loop+0x40/0x90
[  149.099989][ T7482]  ? clear_bhb_loop+0x40/0x90
[  149.104687][ T7482]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  149.110575][ T7482] RIP: 0033:0x7f223699f559
[  149.114984][ T7482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.134587][ T7482] RSP: 002b:00007f2237944028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  149.143000][ T7482] RAX: ffffffffffffffda RBX: 00007f2236c25fa0 RCX: 00007f223699f559
[  149.150984][ T7482] RDX: 00002000000018c0 RSI: 000000000000894c RDI: 0000000000000003
[  149.158965][ T7482] RBP: 00007f2236a36b20 R08: 0000000000000000 R09: 0000000000000000
[  149.166940][ T7482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.174907][ T7482] R13: 00007f2236c26038 R14: 00007f2236c25fa0 R15: 00007ffe337b5238
[  149.182904][ T7482]  </TASK>
[  149.190714][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.202526][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.254367][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  149.394120][ T7488] "syz.5.448" (7488) uses obsolete ecb(arc4) skcipher
[  149.752161][ T5781] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  149.934037][ T5781] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  149.953578][ T5781] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  149.980026][ T5781] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  150.021563][ T5781] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  150.031037][ T5781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.070896][ T7491] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  150.071832][ T7486] loop0: detected capacity change from 0 to 40427
[  150.079837][ T7491] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  150.106332][ T7486] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  150.128440][ T7486] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  150.148934][ T5781] pl2303 5-1:1.0: pl2303 converter detected
[  150.176574][ T7486] F2FS-fs (loop0): invalid crc value
[  150.183072][ T5781] usb 5-1: pl2303 converter now attached to ttyUSB0
[  150.221465][ T7486] F2FS-fs (loop0): Found nat_bits in checkpoint
[  150.234613][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.385329][ T7486] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  150.403906][ T7486] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  150.484058][   T28] audit: type=1804 audit(1792585397.259:14): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.490" name="/newroot/126/file0/bus" dev="loop0" ino=10 res=1 errno=0
[  150.557086][ T7491] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  150.590372][ T7491] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  150.613097][ T7491] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  150.644975][ T7491] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  150.681904][ T7491] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  150.982450][ T7491] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  150.997751][ T7491] pl2303 ttyUSB0: error sending break = -32
[  151.210222][ T5781] usb 5-1: USB disconnect, device number 5
[  151.250162][ T5781] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  151.276207][ T5781] pl2303 5-1:1.0: device disconnected
[  151.282363][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.056251][  T173] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  152.234158][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.271984][  T173] usb 6-1: Using ep0 maxpacket: 32
[  152.299682][  T173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.318543][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.322289][  T173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.374916][  T173] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  152.409672][  T173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.432702][  T173] usb 6-1: config 0 descriptor??
[  152.547455][ T7583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.557460][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.798151][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.875253][  T173] ft260 0003:0403:6030.0004: unknown main item tag 0x0
[  152.907992][  T173] ft260 0003:0403:6030.0004: unknown main item tag 0x0
[  153.062017][  T173] ft260 0003:0403:6030.0004: chip code: 0000 0000
[  153.263053][  T173] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0
[  153.356917][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.399215][ T7618] netlink: 'syz.3.506': attribute type 1 has an invalid length.
[  153.459774][ T7618] 8021q: adding VLAN 0 to HW filter on device bond1
[  153.467239][  T173] ft260 0003:0403:6030.0004: failed to retrieve status: -71, no wakeup
[  153.506242][  T173] ft260 0003:0403:6030.0004: failed to retrieve status: -71
[  153.541738][  T173] ft260 0003:0403:6030.0004: failed to reset I2C controller: -71
[  153.571167][ T7618] bond1: (slave gretap1): making interface the new active one
[  153.613918][ T7618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.625242][  T173] usb 6-1: USB disconnect, device number 2
[  153.657273][ T7618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.682382][ T7618] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  153.709729][   T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.795875][ T7618] syz.3.506 (7618) used greatest stack depth: 19896 bytes left
[  154.609152][ T7672] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.520'.
[  154.638509][ T7676] loop5: detected capacity change from 0 to 512
[  154.761775][ T7676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.836421][ T7676] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  155.009067][ T7694] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.522: corrupted xattr block 33: invalid ea_ino
[  155.057803][ T7694] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.522: corrupted xattr block 33: invalid ea_ino
[  155.148430][ T7304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.232316][ T5762] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  155.382669][  T173] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  155.453802][ T5762] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.467094][ T5762] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  155.481958][ T5762] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  155.508099][ T5762] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  155.532835][ T5762] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  155.544145][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.553022][ T5762] usb 4-1: Product: syz
[  155.559696][ T7718] tipc: Publication distribution failure
[  155.562007][ T5762] usb 4-1: Manufacturer: syz
[  155.573259][ T5762] usb 4-1: SerialNumber: syz
[  155.584976][  T173] usb 5-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  155.619258][  T173] usb 5-1: config 0 interface 0 has no altsetting 0
[  155.641670][  T173] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  155.660980][  T173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.684973][  T173] usb 5-1: config 0 descriptor??
[  155.788471][ T7691] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  156.133354][  T173] hid-led 0003:1294:1320.0005: hidraw0: USB HID v10.01 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0
[  156.179261][  T173] hid-led 0003:1294:1320.0005: Riso Kagaku Webmail Notifier initialized
[  156.329927][ T5853] usb 5-1: USB disconnect, device number 6
[  156.369911][ T5781] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38)
[  156.401222][ T5781] leds riso_kagaku0:green: Setting an LED's brightness failed (-38)
[  156.420157][ T5781] leds riso_kagaku0:red: Setting an LED's brightness failed (-38)
[  156.475521][ T5781] net_ratelimit: 19 callbacks suppressed
[  156.475537][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.504682][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.615239][ T7691] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  156.730178][ T7758] FAULT_INJECTION: forcing a failure.
[  156.730178][ T7758] name failslab, interval 1, probability 0, space 0, times 0
[  156.747719][ T7758] CPU: 1 PID: 7758 Comm: syz.5.544 Not tainted syzkaller #0
[  156.755074][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  156.765157][ T7758] Call Trace:
[  156.768459][ T7758]  <TASK>
[  156.771410][ T7758]  dump_stack_lvl+0x18c/0x250
[  156.776126][ T7758]  ? show_regs_print_info+0x20/0x20
[  156.781362][ T7758]  ? load_image+0x420/0x420
[  156.785905][ T7758]  ? __might_sleep+0xe0/0xe0
[  156.790528][ T7758]  ? __lock_acquire+0x7eb0/0x7eb0
[  156.795585][ T7758]  should_fail_ex+0x394/0x4c0
[  156.800304][ T7758]  should_failslab+0x9/0x20
[  156.804827][ T7758]  slab_pre_alloc_hook+0x59/0x300
[  156.809870][ T7758]  ? __might_sleep+0xe0/0xe0
[  156.814482][ T7758]  ? load_msg+0xc4/0x380
[  156.818773][ T7758]  ? load_msg+0xc4/0x380
[  156.823040][ T7758]  __kmem_cache_alloc_node+0x53/0x260
[  156.828442][ T7758]  ? load_msg+0xc4/0x380
[  156.832710][ T7758]  __kmalloc+0xa7/0x240
[  156.836308][ T5762] cdc_ncm 4-1:1.0: bind() failure
[  156.836883][ T7758]  load_msg+0xc4/0x380
[  156.846006][ T7758]  do_msgsnd+0x1a8/0x1300
[  156.850373][ T7758]  ? __might_fault+0xaa/0x120
[  156.855084][ T7758]  ? __lock_acquire+0x7eb0/0x7eb0
[  156.856070][ T5762] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  156.860110][ T7758]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  156.872553][ T7758]  ? ksys_msgsnd+0xa0/0xa0
[  156.877003][ T7758]  ? __might_fault+0xc6/0x120
[  156.881700][ T7758]  ? __might_fault+0xaa/0x120
[  156.882648][ T5762] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  156.886422][ T7758]  ? __x64_sys_msgsnd+0xe9/0x110
[  156.897867][ T7758]  do_syscall_64+0x55/0xb0
[  156.902316][ T7758]  ? clear_bhb_loop+0x40/0x90
[  156.907024][ T7758]  ? clear_bhb_loop+0x40/0x90
[  156.911731][ T7758]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  156.917652][ T7758] RIP: 0033:0x7fe23a19f559
[  156.922088][ T7758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.938845][ T5762] usbtest: probe of 4-1:1.1 failed with error -71
[  156.941739][ T7758] RSP: 002b:00007fe23afc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045
[  156.941765][ T7758] RAX: ffffffffffffffda RBX: 00007fe23a425fa0 RCX: 00007fe23a19f559
[  156.941778][ T7758] RDX: 0000000000002000 RSI: 00002000000009c0 RDI: 0000000000000000
[  156.941790][ T7758] RBP: 00007fe23a236b20 R08: 0000000000000000 R09: 0000000000000000
[  156.980660][ T7758] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000
[  156.988741][ T7758] R13: 00007fe23a426038 R14: 00007fe23a425fa0 R15: 00007ffde499c828
[  156.995921][ T5762] usb 4-1: USB disconnect, device number 11
[  156.996722][ T7758]  </TASK>
[  157.126157][   T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.233317][ T7767] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  157.260312][ T7771] input: syz0 as /devices/virtual/input/input11
[  157.439208][ T7777] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.446392][ T7777] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.518728][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.625364][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.554'.
[  157.657473][ T7788] xfrm1: entered promiscuous mode
[  157.687899][ T7788] xfrm1: entered allmulticast mode
[  157.703655][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.5.554'.
[  158.109831][ T7813] device-mapper: ioctl: Unable to rename non-existent device,  to uuid .2\“£«.j—DH
[  158.312454][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.365177][ T7819] loop4: detected capacity change from 0 to 2048
[  158.372498][ T7823] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  158.424059][ T7825] loop0: detected capacity change from 0 to 512
[  158.536474][ T7819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.587613][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.622921][ T7819] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.688732][ T7819] fs-verity: sha512 using implementation "sha512-avx2"
[  158.732371][ T7825] loop0: detected capacity change from 512 to 0
[  158.772086][ T7836] bio_check_eod: 1489 callbacks suppressed
[  158.772102][ T7836] syz.0.567: attempt to access beyond end of device
[  158.772102][ T7836] loop0: rw=524288, sector=148, nr_sectors = 4 limit=0
[  158.850619][ T7836] syz.0.567: attempt to access beyond end of device
[  158.850619][ T7836] loop0: rw=524288, sector=152, nr_sectors = 4 limit=0
[  158.867772][ T6668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.870760][ T7836] syz.0.567: attempt to access beyond end of device
[  158.870760][ T7836] loop0: rw=524288, sector=156, nr_sectors = 4 limit=0
[  158.885677][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.894164][ T7836] syz.0.567: attempt to access beyond end of device
[  158.894164][ T7836] loop0: rw=524288, sector=160, nr_sectors = 4 limit=0
[  158.919558][ T7836] syz.0.567: attempt to access beyond end of device
[  158.919558][ T7836] loop0: rw=524288, sector=164, nr_sectors = 4 limit=0
[  158.937696][ T7836] syz.0.567: attempt to access beyond end of device
[  158.937696][ T7836] loop0: rw=524288, sector=168, nr_sectors = 4 limit=0
[  158.952910][ T7836] syz.0.567: attempt to access beyond end of device
[  158.952910][ T7836] loop0: rw=524288, sector=172, nr_sectors = 4 limit=0
[  158.968203][ T7836] syz.0.567: attempt to access beyond end of device
[  158.968203][ T7836] loop0: rw=0, sector=148, nr_sectors = 4 limit=0
[  158.981805][ T7836] FAT-fs (loop0): Directory bread(block 37) failed
[  159.019477][ T7836] syz.0.567: attempt to access beyond end of device
[  159.019477][ T7836] loop0: rw=0, sector=152, nr_sectors = 4 limit=0
[  159.071840][ T7836] FAT-fs (loop0): Directory bread(block 38) failed
[  159.097891][ T7836] syz.0.567: attempt to access beyond end of device
[  159.097891][ T7836] loop0: rw=0, sector=156, nr_sectors = 4 limit=0
[  159.154913][ T7836] FAT-fs (loop0): Directory bread(block 39) failed
[  159.177383][ T7836] FAT-fs (loop0): Directory bread(block 40) failed
[  159.198754][ T7836] FAT-fs (loop0): Directory bread(block 41) failed
[  159.212173][ T7836] FAT-fs (loop0): Directory bread(block 42) failed
[  159.229055][ T7836] FAT-fs (loop0): Directory bread(block 43) failed
[  159.236240][ T7855] vivid-000: disconnect
[  159.246147][ T7858] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff
[  159.270999][ T7836] FAT-fs (loop0): Directory bread(block 37) failed
[  159.299405][ T7836] FAT-fs (loop0): Directory bread(block 38) failed
[  159.315962][ T7836] FAT-fs (loop0): Directory bread(block 39) failed
[  159.332344][   T27] vivid-000: reconnect
[  159.467553][   T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.490613][   T49] FAT-fs (loop0): bread failed in fat_clusters_flush
[  159.519834][ T5773] FAT-fs (loop0): unable to read boot sector to mark fs as dirty
[  159.592888][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.778839][ T7875] loop4: detected capacity change from 0 to 512
[  159.829977][ T7877] netlink: 16 bytes leftover after parsing attributes in process `syz.5.580'.
[  159.843126][ T7875] EXT4-fs (loop4): Test dummy encryption mode enabled
[  159.849958][ T7875] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  159.886829][ T7875] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  159.948010][ T7875] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.581: bad orphan inode 131083
[  159.979791][ T7875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.210576][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.427204][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.575286][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.625795][ T7875] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  160.742487][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.792567][ T6668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.108925][ T7917] loop5: detected capacity change from 0 to 2048
[  161.199232][ T7917] EXT4-fs error (device loop5): ext4_orphan_get:1434: comm syz.5.590: bad orphan inode 214
[  161.254922][ T7917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.461285][ T7304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.512470][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  161.542224][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  161.550553][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  161.563124][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  161.572155][ T5090] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  161.579529][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  161.648525][ T7937] net_ratelimit: 3 callbacks suppressed
[  161.648543][ T7937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.672225][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.699438][ T7937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.806681][  T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.828444][ T7933] rxe_eth0 speed is unknown, defaulting to 1000
[  161.895401][ T7937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.914935][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.987162][ T7937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.085697][ T7937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.123596][ T7952] loop4: detected capacity change from 0 to 1024
[  162.165495][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.187766][ T7952] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  162.207095][ T7952] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  162.362993][ T7952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  162.449683][ T6668] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  162.515525][ T6668] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  162.572159][ T6668] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length
[  162.712924][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.947373][ T6668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.100695][ T7933] chnl_net:caif_netlink_parms(): no params data found
[  163.122095][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  163.172605][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory
[  163.491389][ T7992] FAULT_INJECTION: forcing a failure.
[  163.491389][ T7992] name failslab, interval 1, probability 0, space 0, times 0
[  163.511172][ T7992] CPU: 0 PID: 7992 Comm: syz.5.610 Not tainted syzkaller #0
[  163.518516][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  163.528594][ T7992] Call Trace:
[  163.531885][ T7992]  <TASK>
[  163.534837][ T7992]  dump_stack_lvl+0x18c/0x250
[  163.539548][ T7992]  ? show_regs_print_info+0x20/0x20
[  163.544777][ T7992]  ? load_image+0x420/0x420
[  163.549318][ T7992]  ? __might_sleep+0xe0/0xe0
[  163.553942][ T7992]  ? __lock_acquire+0x7eb0/0x7eb0
[  163.558991][ T7992]  ? trace_contention_end+0x39/0xe0
[  163.564228][ T7992]  should_fail_ex+0x394/0x4c0
[  163.568920][ T7992]  should_failslab+0x9/0x20
[  163.573420][ T7992]  slab_pre_alloc_hook+0x59/0x300
[  163.578447][ T7992]  kmem_cache_alloc+0x5a/0x2d0
[  163.583209][ T7992]  ? skb_clone+0x1eb/0x370
[  163.587627][ T7992]  skb_clone+0x1eb/0x370
[  163.591872][ T7992]  pfkey_sendmsg+0x4e3/0x11a0
[  163.596568][ T7992]  ? pfkey_release+0x340/0x340
[  163.601358][ T7992]  ? aa_sock_msg_perm+0x94/0x150
[  163.606314][ T7992]  ? apparmor_socket_sendmsg+0x8e/0x330
[  163.611870][ T7992]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  163.617152][ T7992]  ? security_socket_sendmsg+0x80/0xa0
[  163.622645][ T7992]  ? pfkey_release+0x340/0x340
[  163.627408][ T7992]  ____sys_sendmsg+0x61b/0x980
[  163.632184][ T7992]  ? __asan_memset+0x22/0x40
[  163.636795][ T7992]  ? __sys_sendmsg_sock+0x30/0x30
[  163.641839][ T7992]  ? __import_iovec+0x5f2/0x850
[  163.646691][ T7992]  ? import_iovec+0x73/0xa0
[  163.651198][ T7992]  ___sys_sendmsg+0x2a6/0x360
[  163.655879][ T7992]  ? __sys_sendmsg+0x2b0/0x2b0
[  163.660672][ T7992]  __se_sys_sendmsg+0x1d0/0x2c0
[  163.665523][ T7992]  ? __x64_sys_sendmsg+0x80/0x80
[  163.670472][ T7992]  ? lockdep_hardirqs_on+0x98/0x150
[  163.675671][ T7992]  do_syscall_64+0x55/0xb0
[  163.680088][ T7992]  ? clear_bhb_loop+0x40/0x90
[  163.684766][ T7992]  ? clear_bhb_loop+0x40/0x90
[  163.689451][ T7992]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.695345][ T7992] RIP: 0033:0x7fe23a19f559
[  163.699753][ T7992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.719362][ T7992] RSP: 002b:00007fe23afc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.727774][ T7992] RAX: ffffffffffffffda RBX: 00007fe23a425fa0 RCX: 00007fe23a19f559
[  163.735746][ T7992] RDX: 0000000000000000 RSI: 0000200000005b40 RDI: 0000000000000003
[  163.743711][ T7992] RBP: 00007fe23a236b20 R08: 0000000000000000 R09: 0000000000000000
[  163.751680][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.759658][ T7992] R13: 00007fe23a426038 R14: 00007fe23a425fa0 R15: 00007ffde499c828
[  163.767638][ T7992]  </TASK>
[  163.801823][   T51] Bluetooth: hci2: command tx timeout
[  163.818769][ T7933] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.826270][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.833776][ T7933] bridge_slave_0: entered allmulticast mode
[  163.841164][ T7933] bridge_slave_0: entered promiscuous mode
[  163.895228][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.913015][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.920244][ T7933] bridge_slave_1: entered allmulticast mode
[  163.938662][ T7933] bridge_slave_1: entered promiscuous mode
[  164.096171][ T8004] loop3: detected capacity change from 0 to 256
[  164.106613][ T7933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.136110][ T8004] FAT-fs (loop3): Unrecognized mount option "shortš" or missing value
[  164.155684][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  164.174297][ T7933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.210501][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  164.264342][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  164.319086][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  164.425411][ T7933] team0: Port device team_slave_0 added
[  164.474615][ T7933] team0: Port device team_slave_1 added
[  164.726569][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.752072][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.792253][ T7933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.808334][ T1142] hsr_slave_0: left promiscuous mode
[  164.816317][ T1142] hsr_slave_1: left promiscuous mode
[  164.822798][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.830236][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.838649][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.848421][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.857209][ T1142] bridge_slave_1: left allmulticast mode
[  164.863246][ T1142] bridge_slave_1: left promiscuous mode
[  164.869967][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.880996][ T1142] bridge_slave_0: left allmulticast mode
[  164.887107][ T1142] bridge_slave_0: left promiscuous mode
[  164.893935][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.986257][ T1142] veth1_macvtap: left promiscuous mode
[  165.001732][ T1142] veth0_macvtap: left promiscuous mode
[  165.010440][ T1142] veth1_vlan: left promiscuous mode
[  165.022043][ T1142] veth0_vlan: left promiscuous mode
[  165.832053][ T5090] Bluetooth: hci2: command tx timeout
[  166.241488][ T1142] team0 (unregistering): Port device team_slave_1 removed
[  166.303744][ T1142] team0 (unregistering): Port device team_slave_0 removed
[  166.360481][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.438526][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.959527][ T5853] net_ratelimit: 9 callbacks suppressed
[  166.959543][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.995790][ T1142] bond0 (unregistering): Released all slaves
[  167.057008][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.064247][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.090393][ T7933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.115757][ T8017] netlink: 'syz.3.617': attribute type 1 has an invalid length.
[  167.130880][ T8017] netlink: 'syz.3.617': attribute type 2 has an invalid length.
[  167.168011][ T8034] netlink: 31 bytes leftover after parsing attributes in process `syz.5.623'.
[  167.177105][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.623'.
[  167.246795][ T7933] hsr_slave_0: entered promiscuous mode
[  167.254057][ T7933] hsr_slave_1: entered promiscuous mode
[  167.260999][ T7933] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  167.269268][ T7933] Cannot create hsr debugfs directory
[  167.495662][ T8043] loop5: detected capacity change from 0 to 1024
[  167.526800][ T8043] EXT4-fs: Ignoring removed bh option
[  167.548477][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  167.613310][ T8046] loop3: detected capacity change from 0 to 1024
[  167.620684][ T8046] EXT4-fs: Ignoring removed bh option
[  167.623072][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  167.651341][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  167.678752][ T8043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  167.693180][ T3455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.737753][ T8046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  167.777056][ T8043] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.810822][ T8046] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.871361][ T8043] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm syz.5.624: lblock 0 mapped to illegal pblock 0 (length 4)
[  167.871745][   T28] audit: type=1800 audit(1792585414.639:15): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.624" name="file1" dev="loop5" ino=15 res=0 errno=0
[  167.905190][ T7933] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  167.917415][ T5090] Bluetooth: hci2: command tx timeout
[  167.953074][ T7933] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  167.971160][ T8043] EXT4-fs error (device loop5): ext4_ext_remove_space:2957: inode #15: comm syz.5.624: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  167.992164][  T173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.002070][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.047829][ T8043] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm syz.5.624: lblock 0 mapped to illegal pblock 0 (length 4)
[  168.062253][ T7933] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  168.069215][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  168.101473][ T7933] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  168.108400][ T8043] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117
[  168.136072][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  168.150519][ T8043] EXT4-fs (loop5): This should not happen!! Data will be lost
[  168.150519][ T8043] 
[  168.160670][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.175103][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory
[  168.324677][ T7304] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  168.378908][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  168.389996][ T7933] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.420057][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  168.440552][ T7933] 8021q: adding VLAN 0 to HW filter on device team0
[  168.476202][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.483397][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.522885][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.530027][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.675789][ T7933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.802846][   T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.889728][ T7933] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.032404][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.416051][ T7933] veth0_vlan: entered promiscuous mode
[  169.483748][ T7933] veth1_vlan: entered promiscuous mode
[  169.595293][ T7933] veth0_macvtap: entered promiscuous mode
[  169.641247][ T7933] veth1_macvtap: entered promiscuous mode
[  169.699490][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.731685][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.741572][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.786581][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.817079][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.849999][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.876082][ T7933] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.913851][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.925631][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.949040][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.968449][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.991866][ T5090] Bluetooth: hci2: command tx timeout
[  169.997744][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.048757][ T7933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.072447][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.093345][ T7933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.113194][ T7933] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.162031][ T7933] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.191142][ T7933] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.201540][ T7933] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.211478][ T7933] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.034862][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.260387][ T8142] FAULT_INJECTION: forcing a failure.
[  171.260387][ T8142] name failslab, interval 1, probability 0, space 0, times 0
[  171.283585][ T8142] CPU: 1 PID: 8142 Comm: syz.5.632 Not tainted syzkaller #0
[  171.290937][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  171.301019][ T8142] Call Trace:
[  171.304318][ T8142]  <TASK>
[  171.307265][ T8142]  dump_stack_lvl+0x18c/0x250
[  171.311982][ T8142]  ? show_regs_print_info+0x20/0x20
[  171.317215][ T8142]  ? load_image+0x420/0x420
[  171.321752][ T8142]  ? __might_sleep+0xe0/0xe0
[  171.326375][ T8142]  ? __lock_acquire+0x7eb0/0x7eb0
[  171.331502][ T8142]  ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0
[  171.338214][ T8142]  should_fail_ex+0x394/0x4c0
[  171.342931][ T8142]  should_failslab+0x9/0x20
[  171.347712][ T8142]  slab_pre_alloc_hook+0x59/0x300
[  171.352799][ T8142]  ? pcpu_alloc+0x11e7/0x1880
[  171.357511][ T8142]  ? percpu_ref_init+0xc3/0x340
[  171.362393][ T8142]  __kmem_cache_alloc_node+0x53/0x260
[  171.367799][ T8142]  ? percpu_ref_init+0xc3/0x340
[  171.372690][ T8142]  ? io_allocate_scq_urings+0x620/0x620
[  171.378266][ T8142]  kmalloc_trace+0x2a/0xe0
[  171.382719][ T8142]  percpu_ref_init+0xc3/0x340
[  171.387429][ T8142]  io_ring_ctx_alloc+0x205/0xc10
[  171.392398][ T8142]  io_uring_create+0x2df/0x1330
[  171.397277][ T8142]  ? __might_fault+0xc6/0x120
[  171.401966][ T8142]  ? __might_fault+0xaa/0x120
[  171.406644][ T8142]  __se_sys_io_uring_setup+0x29f/0x2b0
[  171.412111][ T8142]  ? __x64_sys_io_uring_setup+0x60/0x60
[  171.417667][ T8142]  ? lockdep_hardirqs_on+0x98/0x150
[  171.422865][ T8142]  do_syscall_64+0x55/0xb0
[  171.427280][ T8142]  ? clear_bhb_loop+0x40/0x90
[  171.431957][ T8142]  ? clear_bhb_loop+0x40/0x90
[  171.436633][ T8142]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  171.442529][ T8142] RIP: 0033:0x7fe23a19f559
[  171.446946][ T8142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.466569][ T8142] RSP: 002b:00007fe23afc4fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  171.475007][ T8142] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007fe23a19f559
[  171.482981][ T8142] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 00000000000003e3
[  171.490946][ T8142] RBP: 00007fe23a236b20 R08: 0000000000000000 R09: 0000000000000000
[  171.498919][ T8142] R10: 0000200000000100 R11: 0000000000000206 R12: 00002000000000c0
[  171.506889][ T8142] R13: 0000200000000100 R14: 0000200000000080 R15: 00007ffde499c828
[  171.514869][ T8142]  </TASK>
[  172.152362][   T27] net_ratelimit: 2 callbacks suppressed
[  172.152377][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.201731][   T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  172.325941][ T3455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.388485][   T23] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  172.399594][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11
[  172.421693][   T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  172.435185][   T23] usb 6-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00
[  172.444320][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.462606][   T23] usb 6-1: config 0 descriptor??
[  172.658080][ T3455] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.897005][   T23] itetech 0003:06CB:2968.0006: unknown main item tag 0x0
[  172.921795][   T23] itetech 0003:06CB:2968.0006: unknown main item tag 0x0
[  172.928998][   T23] itetech 0003:06CB:2968.0006: unknown main item tag 0x0
[  172.971961][   T23] itetech 0003:06CB:2968.0006: unknown main item tag 0x0
[  172.979081][   T23] itetech 0003:06CB:2968.0006: unknown main item tag 0x0
[  173.011748][   T23] itetech 0003:06CB:2968.0006: unknown main item tag 0x0
[  173.043216][   T23] itetech 0003:06CB:2968.0006: hidraw0: USB HID v21.0a Device [HID 06cb:2968] on usb-dummy_hcd.5-1/input0
[  173.096836][   T23] usb 6-1: USB disconnect, device number 3
[  173.192552][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.492939][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.072662][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.228520][ T3455] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.240470][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.339086][ T3455] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.446356][ T3455] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.569316][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.660241][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.061959][    T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  175.256142][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  175.265675][    T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.272442][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.288983][    T8] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  175.313511][    T8] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  175.358270][    T8] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  175.391668][    T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  175.412838][    T8] usb 4-1: config 1 interface 1 has no altsetting 0
[  175.423236][    T8] usb 4-1: string descriptor 0 read error: -22
[  175.429544][    T8] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  175.458706][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.802916][  T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.108252][ T3455] hsr_slave_0: left promiscuous mode
[  176.116212][ T3455] hsr_slave_1: left promiscuous mode
[  176.151954][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.159412][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.170928][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.183823][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.194498][ T3455] bridge_slave_1: left allmulticast mode
[  176.200179][ T3455] bridge_slave_1: left promiscuous mode
[  176.208728][ T3455] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.225648][ T3455] bridge_slave_0: left allmulticast mode
[  176.231343][ T3455] bridge_slave_0: left promiscuous mode
[  176.237630][ T3455] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.267787][ T3455] veth1_macvtap: left promiscuous mode
[  176.275981][ T3455] veth0_macvtap: left promiscuous mode
[  176.282862][ T3455] veth1_vlan: left promiscuous mode
[  176.288246][ T3455] veth0_vlan: left promiscuous mode
[  176.556599][    T8] usb 4-1: 2:0: failed to get current value for ch 1 (-71)
[  176.679830][    T8] usb 4-1: USB disconnect, device number 12
[  177.352093][ T5855] net_ratelimit: 3 callbacks suppressed
[  177.352108][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.419988][ T3455] team0 (unregistering): Port device team_slave_1 removed
[  177.487730][ T3455] team0 (unregistering): Port device team_slave_0 removed
[  177.549436][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.608487][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.767956][ T8250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.777126][ T8250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.797730][ T8250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.806726][ T8250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.852099][ T8250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.877572][ T8249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.051847][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.297177][ T3455] bond0 (unregistering): Released all slaves
[  178.394119][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.203885][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.833892][ T8300] loop5: detected capacity change from 0 to 512
[  179.841181][ T8300] EXT4-fs: Ignoring removed nobh option
[  179.852906][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  179.878256][ T8300] EXT4-fs: Mount option(s) incompatible with ext2
[  179.951829][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  179.994243][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory
[  180.251933][    T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  180.465917][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.490823][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.503869][    T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  180.531675][    T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  180.540761][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.566435][    T8] usb 6-1: config 0 descriptor??
[  181.008045][    T8] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd
[  181.033901][    T8] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  181.061068][    T8] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  181.276464][    T8] usb 6-1: USB disconnect, device number 4
[  182.552006][   T27] net_ratelimit: 6 callbacks suppressed
[  182.552022][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.567611][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.195194][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.592114][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.702732][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.153026][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.632013][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.791981][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.809193][  T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.675066][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.378435][ T8434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  187.752258][ T5781] net_ratelimit: 4 callbacks suppressed
[  187.752276][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.144645][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.531755][   T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  188.723045][   T23] usb 4-1: Using ep0 maxpacket: 8
[  188.735323][   T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.756125][   T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  188.766382][   T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  188.777813][   T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  188.789303][   T23] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  188.798862][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.807215][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.821462][   T23] hub 4-1:1.0: bad descriptor, ignoring hub
[  188.834860][   T23] hub: probe of 4-1:1.0 failed with error -5
[  188.841394][   T23] cdc_wdm 4-1:1.0: skipping garbage
[  188.848216][   T23] cdc_wdm 4-1:1.0: skipping garbage
[  188.858489][   T23] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  188.888314][   T23] cdc_wdm 4-1:1.0: Unknown control protocol
[  189.162058][   T23] usb 4-1: USB disconnect, device number 13
[  189.273792][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.342678][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.511800][   T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  189.720508][   T23] usb 4-1: Using ep0 maxpacket: 32
[  189.739363][   T23] usb 4-1: unable to get BOS descriptor or descriptor too short
[  189.762856][   T23] usb 4-1: unable to read config index 0 descriptor/start: -71
[  189.770482][   T23] usb 4-1: can't read configurations, error -71
[  189.832074][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: open /dev/vhci failed
 (errno 2: No such file or directory)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=7 req=609 state=3 status=67 (errno 32: Broken pipe)
[  190.475693][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.872192][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.007828][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.158518][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.256625][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.393374][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.613725][ T3455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.922047][   T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.654452][   T12] hsr_slave_0: left promiscuous mode
[  192.666210][   T12] hsr_slave_1: left promiscuous mode
[  192.679152][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.690182][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.698419][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.709766][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.718587][   T12] bridge_slave_1: left allmulticast mode
[  192.735710][   T12] bridge_slave_1: left promiscuous mode
[  192.741643][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.761278][   T12] bridge_slave_0: left allmulticast mode
[  192.767253][   T12] bridge_slave_0: left promiscuous mode
[  192.773477][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.808811][   T12] veth1_macvtap: left promiscuous mode
[  192.814631][   T12] veth0_macvtap: left promiscuous mode
[  192.820280][   T12] veth1_vlan: left promiscuous mode
[  192.826231][   T12] veth0_vlan: left promiscuous mode
[  192.954967][   T27] net_ratelimit: 2 callbacks suppressed
[  192.954983][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.650832][   T12] team0 (unregistering): Port device team_slave_1 removed
[  193.705546][   T12] team0 (unregistering): Port device team_slave_0 removed
[  193.752290][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  193.765126][ T5762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.807999][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  193.921881][   T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.993117][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.156154][   T12] bond0 (unregistering): Released all slaves
[  194.399869][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  194.411825][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  194.431900][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.565911][   T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.635324][   T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.696807][   T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.744754][   T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.056975][   T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.637192][   T12] bond1: (slave gretap1): Releasing active interface
[  196.155965][   T12] hsr_slave_0: left promiscuous mode
[  196.162014][   T12] hsr_slave_1: left promiscuous mode
[  196.167793][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.176491][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.184651][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.192139][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.199696][   T12] bridge_slave_1: left allmulticast mode
[  196.205619][   T12] bridge_slave_1: left promiscuous mode
[  196.211294][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.220059][   T12] bridge_slave_0: left allmulticast mode
[  196.226057][   T12] bridge_slave_0: left promiscuous mode
[  196.231991][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.259330][   T12] veth1_macvtap: left promiscuous mode
[  196.265219][   T12] veth0_macvtap: left promiscuous mode
[  196.270760][   T12] veth1_vlan: left promiscuous mode
[  196.276207][   T12] veth0_vlan: left promiscuous mode
[  196.491415][   T12] bond1 (unregistering): Released all slaves
[  196.960357][   T12] team0 (unregistering): Port device team_slave_1 removed
[  197.008947][   T12] team0 (unregistering): Port device team_slave_0 removed
[  197.055927][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.104253][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.425498][   T12] bond0 (unregistering): Released all slaves