last executing test programs: 55.406614392s ago: executing program 3 (id=287): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x3, 0x350, &(0x7f0000000900)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) 54.729762092s ago: executing program 3 (id=291): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) r1 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x10022, 0x338}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 49.601431626s ago: executing program 3 (id=303): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x8, 0xfffffffa}, 0x28) 49.520135153s ago: executing program 3 (id=305): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf1, &(0x7f0000001cc0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='nilfs2\x00', 0x1a088dc, 0x0) 49.171522304s ago: executing program 3 (id=308): getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f00000001c0)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0x9) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "afad7d68ed510018db63a40000000008c000"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 45.16141144s ago: executing program 3 (id=317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000225c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000022540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200, 0x8d0, 0xfff, 0x401, 0x5, 0x9, 0x0, 0x401, 0x9}}}}]}, 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 44.668191073s ago: executing program 32 (id=317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000225c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000022540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200, 0x8d0, 0xfff, 0x401, 0x5, 0x9, 0x0, 0x401, 0x9}}}}]}, 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 20.182516892s ago: executing program 0 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x4010) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x74}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) socket$igmp(0x2, 0x3, 0x2) 17.137783962s ago: executing program 0 (id=377): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004845) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f7}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16.654680034s ago: executing program 0 (id=380): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 15.57663349s ago: executing program 0 (id=385): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) 14.588987507s ago: executing program 0 (id=387): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 13.452401448s ago: executing program 0 (id=391): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff8000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13.053619323s ago: executing program 33 (id=391): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff8000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10.077024397s ago: executing program 4 (id=402): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) r1 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x10022, 0x338}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 7.917023418s ago: executing program 1 (id=405): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x28}, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x108) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYBLOB="00000000e0897ef510", @ANYBLOB], 0x50) r2 = openat(0xffffffffffffff9c, 0x0, 0xa000, 0x1da) read$FUSE(r2, 0x0, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x40000080) 7.097254291s ago: executing program 1 (id=406): syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x1009}}, {0x58, &(0x7f0000000680)=@string={0x58, 0x3, "359e0698e4c3d6c12b58c1f01b15ad6de7c29c1bb3613ff270e49fc1ed02e6745a20010308e05d059b1b25753109a8a1c33fd24fad3e3d6aeffd5d9abe0000b909fc67ab4983136f04f4f7a9e1ef3e2634d5f80d5a55"}}]}) 6.917431567s ago: executing program 2 (id=407): socket(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.863465042s ago: executing program 4 (id=408): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) msgrcv(r2, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 5.957041812s ago: executing program 4 (id=409): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13edecbd5949e59be1", 0x15}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}, {0x0}], 0x2}, 0x123) shutdown(r0, 0x1) 5.823454164s ago: executing program 2 (id=410): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000980)={0x400, 0x4, 0x0, 'queue1\x00', 0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaa93aaaaaaaaaaaaaa008100200086dd60e400ff00403a00fe880000000000000000000000000001fe8000000060f0f0fd83aedf4c3800000000000000000000aa02009078000000006000000000801100fc00000000000000000000000000000000000000000000000000ffffac14140017c11d58674e624c1a146558aab57fffa228aeb319ee64f0f3dfd8913a11e7526f4cb97a19d996700d6f34789ea8260800"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x400c045) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4.653054347s ago: executing program 4 (id=411): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x104004, 0x0) 4.567152705s ago: executing program 2 (id=412): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="9e4aa4c07d192c34f0ab28f8dc6958", 0xf, 0x41, &(0x7f0000000180)={0xa, 0x4e23, 0x8001, @loopback, 0xe}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x32}, 0x8) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 4.330856326s ago: executing program 4 (id=413): syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000380)='./file2\x00', 0x0, &(0x7f0000008e80)=ANY=[@ANYBLOB="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", @ANYBLOB="b9a4abc44866767c55bcf2656fb201bf716f0e33767a18663b5b7026e194d8382081d058c60c56a6e77acfd56cd1665a20fc899569321a485690a93a0702294afec9d16c3d65a48a64270b0ef1360bb460ae187e916c4c99eb9de23cf4e1db62d87759bec3d0685643ab5dcf5f183294ac3daf6d786ce54e837c0976fadd7c241f6bca4d98e3e1ade6ef060523e5835682ab46adf47c71f0c85939a840e5c2cebd3a1fe9661caac1f634245c9a061cda4f4755c0f5581d0966ac97a782fabc5a29b944592b7d22ba9b772eaf29006b4c2063acb7b7fc5994e06a3687ebd9135dd4182c20566ff245b5073cb79104702c7e75eb4aa9", @ANYRESDEC], 0x25, 0x55be, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) 3.932619432s ago: executing program 1 (id=414): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x8, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x38}}, 0x10) 3.601015661s ago: executing program 1 (id=415): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) r1 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x10022, 0x338}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.007007553s ago: executing program 2 (id=416): socket(0x10, 0x3, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x7168, 0x3010, 0x2, 0x41}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2.070572886s ago: executing program 2 (id=417): syz_open_dev$usbfs(&(0x7f0000000480), 0xfffffffffffffffe, 0x1) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x12) fallocate(0xffffffffffffffff, 0xb4, 0x2, 0xbf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x60, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r1, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x14) 1.948937507s ago: executing program 4 (id=418): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0xffffffff, [0x0, 0x0, 0xf, 0x40000, 0x1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffff7f, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0xfffffffe, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x3, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffdfc, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x3fd, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x80000, 0x0, 0xfffffffd, 0x7fff, 0x8, 0x0, 0x0, 0x2be8252d, 0x9, 0x4, 0x198ea6eb, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x8, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0x0, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0xfffffffc, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x5, 0x0, 0x0, 0xf, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 873.641892ms ago: executing program 2 (id=419): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x5}, 0x10}, 0x94) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 443.02835ms ago: executing program 5 (id=392): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000000000)='./file1\x00', 0x3200041, &(0x7f0000000400)={[{@gid}, {@eas_rw}, {@eas_rw}, {@check_none}]}, 0x1, 0x9e18, &(0x7f000000a040)="$eJwsk2P054XDRH+5zbbtutm2bdv2zX0/NrJt125tm23b3mxsfM7/nOf9nHlxZ+5dAxw+wBEDvHuA9wxw5ADvHeCoAd43wPsH+MAAHxzgQwN8eICPDPDRAT42wMcH+MQAnxzgUwN8eoDPDPDZAT43wOcH+MIAXxzgSwN8eYCvDPDVAb42wNcH+MYA3xzgWwN8e4DvDPDdAb43wPcH+MEAPxzgRwP8eICfDPDTAX42wM8H+MUARw/wywF+NcCvB/jNAL8d4HcD/H6APwzwxwH+NMCfB/jLAH8d4G8D/H2AfwxwzAD/HOBfA/x7gP8M8N8B/jfAoQDHCnDsAMcJcNwAxwtw/AAnCHDCAIcFOFGAEwc4SYCTBjhZgJMHOEWAUwY4VYBTBzhNgNMGOF2A0wc4Q4AzBjhTgDMHOEuAswY4W4CzBzhHgHMGOFeAcwc4T4DzBjhfgPMHuECACwa4UIALB7hIgIsGuFiAiwe4RIAEuGSASwW4dIDLBLhsgMsFuHyAKwS4YoArBbhygKsEuGqAqwW4eoBrBLhmgGsFuHaA6wS4boDrBbh+gBsEuGGAGwW4cYCbBLhpgJsFuHmAWwS4ZYBbBbh1gNsEuG2A2wW4fYA7BLhjgDsFuHOAuwS4a4C7Bbh7gHsEuGeAewW4d4D7BLhvgPsFuH+ABwR4YIAHBXhwgIcEeGiAhwV4eIBHBHhkgEcFeHSAxwR4bIDHBXh8gCcEeGKABnhSgCcHeEqApwZ4WoCnB3hGgGcGOAgwCDAMMAowDjAJMA0wCzAPsAiwDLAKsA6wCbANsAuwD/CsAM8O8JwAzw3wvADPD/CCAC8M8KIALw7wkgAvDfCyAC8P8IoArwzwqgCvDvCaAK8N8LoArw/whgBvDPCmAG8O8JYAbw3wtgBvD/COAO8M8K4Ahwc4IsC7A7wnwJEB3hvgqADvC/D+AB8I8MEAHwrw4QAfCfDRAB8L8PEAnwjwyQCfCvDpAJ8J8NkAnwvw+QBfCPDFAF8K8OUAXwnw1QBfC/D1AN8I8M0A3wrw7QDfCfDdAN8L8P0APwjwwwA/CvDjAD8J8NMAPwvw8wC/CHB0gF8G+FWAXwf4TYDfBvhdgN8H+EOAPwb4U4A/B/hLgL8G+FuAvwf4R4BjAvwzwL8C/DvAfwL8N8D/AhwKcawQxw5xnBDHDXG8EMcPcYIQJwxxWIgThThxiJOEOGmIk4U4eYhThDhliFOFOHWI04Q4bYjThTh9iDOEOGOIM4U4c4izhDhriLOFOHuIc4Q4Z4hzhTh3iPOEOG+I84U4f4gLhLhgiAuFuHCIi4S4aIiLhbh4iEuESIhLhrhUiEuHuEyIy4a4XIjLh7hCiCuGuFKIK4e4SoirhrhaiKuHuEaIa4a4Vohrh7hOiOuGuF6I64e4QYgbhrhRiBuHuEmIm4a4WYibh7hFiFuGuFWIW4e4TYjbhrhdiNuHuEOIO4a4U4g7h7hLiLuGuFuIu4e4R4h7hrhXiHuHuE+I+4a4X4j7h3hAiAeGeFCIB4d4SIiHhnhYiIeHeESIR4Z4VIhHh3hMiMeGeFyIx4d4QognhmiIJ4V4coinhHhqiKeFeHqIZ4R4ZoiDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsQzwrx7BDPCfHcEM8L8fwQLwjxwhAvCvHiEC8J8dIQLwvx8hCvCPHKEK8K8eoQrwnx2hCvC/H6EG8I8cYQbwrx5hBvCfHWEG8L8fYQ7wjxzhDvCnF4iCNCvDvEe0IcGeK9IY4K8b4Q7w/xgRAfDPGhEB8O8ZEQHw3xsRAfD/GJEJ8M8akQnw7xmRCfDfG5EJ8P8YUQXwzxpRBfDvGVEF8N8bUQXw/xjRDfDPGtEN8O8Z0Q3w3xvRDfD/GDED8M8aMQPw7xkxA/DfGzED8P8YsQR4f4ZYhfhfh1iN+E+G2I34X4fYg/hPhjiD+F+HOIv4T4a4i/hfh7iH+EOCbEP0P8K8S/Q/wnxH9D/C/EoQjHinDsCMeJcNwIx4tw/AgniHDCCIdFOFGEE0c4SYSTRjhZhJNHOEWEU0Y4VYRTRzhNhNNGOF2E00c4Q4QzRjhThDNHOEuEs0Y4W4SzRzhHhHNGOFeEc0c4T4TzRjhfhPNHuECEC0a4UIQLR7hIhItGuFiEi0e4RIREuGSES0W4dITLRLhshMtFuHyEK0S4YoQrRbhyhKtEuGqEq0W4eoRrRLhmhGtFuHaE60S4boTrRbh+hBtEuGGEG0W4cYSbRLhphJtFuHmEW0S4ZYRbRbh1hNtEuG2E20W4fYQ7RLhjhDtFuHOEu0S4a4S7Rbh7hHtEuGeEe0W4d4T7RLhvhPtFuH+EB0R4YIQHRXhwhIdEeGiEh0V4eIRHRHhkhEdFeHSEx0R4bITHRXh8hCdEeGKERnhShCdHeEqEp0Z4WoSnR3hGhGdGOIgwiDCMMIowjjCJMI0wizCPsIiwjLCKsI6wibCNsIuwj/CsCM+O8JwIz43wvAjPj/CCCC+M8KIIL47wkggvjfCyCC+P8IoIr4zwqgivjvCaCK+N8LoIr4/whghvjPCmCG+O8JYIb43wtghvj/COCO+M8K4Ih0c4IsK7I7wnwpER3hvhqAjvi/D+CB+I8MEIH4rw4QgfifDRCB+L8PEIn4jwyQifivDpCJ+J8NkIn4vw+QhfiPDFCF+K8OUIX4nw1Qhfi/D1CN+I8M0I34rw7QjfifDdCN+L8P0IP4jwwwg/ivDjCD+J8NMIP4vw8wi/iHB0hF9G+FWEX0f4TYTfRvhdhN9H+EOEP0b4U4Q/R/hLhL9G+FuEv0f4R4RjIvwzwr8i/DvCfyL8N8L/IhyKcawYx45xnBjHjXG8GMePcYIYJ4xxWIwTxThxjJPEOGmMk8U4eYxTxDhljFPFOHWM08Q4bYzTxTh9jDPEOGOMM8U4c4yzxDhrjLPFOHuMc8Q4Z4xzxTh3jPPEOG+M88U4f4wLxLhgjAvFuHCMi8S4aIyLxbh4jEvESIxLxrhUjEvHuEyMy8a4XIzLx7hCjCvGuFKMK8e4SoyrxrhajKvHuEaMa8a4Voxrx7hOjOvGuF6M68e4QYwbxrhRjBvHuEmMm8a4WYybx7hFjFvGuFWMW8e4TYzbxrjduEND/+O7Q4w7xrhTjDvHuEuMu8a4W4y7x7hHjHvGuFeMe8e4T4z7xrhfjPvHeECMB8Z4UIwHx3hIjIfGeFiMh8d4RIxHxnhUjEfHeEyMx8Z4XIzHx3hCjCfGaIwnxXhyjKfEeGqMp8V4eoxnxHhmjIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xjPivHsGM+J8dwYz4vx/BgviPHCGC+K8eIYL4nx0hgvi/HyGK+I8coYr4rx6hivifHaGK+L8foYb4jxxhhvivHmGG+J8dYYb4vx9hjviPHOGO+KcXiMI2K8O8Z7YhwZ470xjorxvhjvj/GBGB+M8aEYH47xkRgfjfGxGB+P8YkYn4zxqRifjvGZGJ+N8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixhHx/hljF/F+HWM38T4bYzfxfh9jD/E+GOMP8X4c4y/xPhrjL/F+HuMf8Q4JsY/Y/wrxr9j/CfGf2P8L8ahBMdKcOwEx0lw3ATHS3D8BCdIcMIEhyU4UYITJzhJgpMmOFmCkyc4RYJTJjhVglMnOE2C0yY4XYLTJzhDgjMmOFOCMyc4S4KzJjhbgrMnOEeCcyY4V4JzJzhPgvMmOF+C8ye4QIILJrhQggsnuEiCiya4WIKLJ7hEgiS4ZIJLJbh0gsskuGyCyyW4fIIrJLhigisluHKCqyS4aoKrJbh6gmskuGaCayW4doLrJLhugusluH6CGyS4YYIbJbhxgpskuGmCmyW4eYJbJLhlglsluHWC2yS4bYLbJbh9gjskuGOCOyW4c4K7JLhrgrsluHuCeyS4Z4J7Jbh3gvskuG+C+yW4f4IHJHhgggcleHCChyR4aIKHJXh4gkckeGSCRyV4dILHJHhsgscleHyCJyR4YoImeFKCJyd4SoKnJnhagqcneEaCZyY4SDBIMEwwSjBOMEkwTTBLME+wSLBMsEqwTrBJsE2wS7BP8KwEz07wnATPTfC8BM9P8IIEL0zwogQvTvCSBC9N8LIEL0/wigSvTPCqBK9O8JoEr03wugSvT/CGBG9M8KYEb07wlgRvTfC2BG9P8I4E70zwrgSHJzgiwbsTvCfBkQnem+CoBO9L8P4EH0jwwQQfSvDhBB9J8NEEH0vw8QSfSPDJBJ9K8OkEn0nw2QSfS/D5BF9I8MUEX0rw5QRfSfDVBF9L8PUE30jwzQTfSvDtBN9J8N0E30vw/QQ/SPDDBD9K8OMEP0nw0wQ/S/DzBL9IcHSCXyb4VYJfJ/hNgt8m+F2C3yf4Q4I/JvhTgj8n+EuCvyb4W4K/J/hHgmMS/DPBvxL8O8F/Evw3wf8SHEpxrBTHTnGcFMdNcbwUx09xghQnTHFYihOlOHGKk6Q4aYqTpTh5ilOkOGWKU6U4dYrTpDhtitOlOH2KM6Q4Y4ozpThzirOkOGuKs6U4e4pzpDhninOlOHeK86Q4b4rzpTh/igukuGCKC6W4cIqLpLhoiouluHiKS6RIikumuFSKS6e4TIrLprhcisunuEKKK6a4Uoorp7hKiqumuFqKq6e4RoprprhWimunuE6K66a4Xorrp7hBihumuFGKG6e4SYqbprhZipunuEWKW6a4VYpbp7hNitumuF2K26e4Q4o7prhTijunuEuKu6a4W4q7p7hHinumuFeKe6e4T4r7prhfivuneECKB6Z4UIoHp3hIioemeFiKh6d4RIpHpnhUikeneEyKx6Z4XIrHp3hCiiemaIonpXhyiqekeGqKp6V4eopnpHhmioMUgxTDFKMU4xSTFNMUsxTzFIsUyxSrFOsUmxTbFLsU+xTPSvHsFM9J8dwUz0vx/BQvSPHCFC9K8eIUL0nx0hQvS/HyFK9I8coUr0rx6hSvSfHaFK9L8foUb0jxxhRvSvHmFG9J8dYUb0vx9hTvSPHOFO9KcXiKI1K8O8V7UhyZ4r0pjkrxvhTvT/GBFB9M8aEUH07xkRQfTfGxFB9P8YkUn0zxqRSfTvGZlOTZFJ9L8fkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cMUP0rx4xQ/SfHTFD9L8fMUv0hxdIpfpvhVil+n+E2K36b4XYrfp/hDij+m+FOKP6f4S4q/pvhbir+n+EeKY1L8M8W/Uvw7xX9S/DfF/1IcynCsDMfOcJwMx81wvAzHz3CCDCfMcFiGE2U4cYaTZDhphpNlOHmGU2Q4ZYZTZTh1htNkOG2G02U4fYYzZDhjhjNlOHOGs2Q4a4azZTh7hnNkOGeGc2U4d4bzZDhvhvNlOH+GC2S4YIYLZbhwhotkuGiGi2W4eIZLZEiGS2a4VIZLZ7hMhstmuFyGy2e4QoYrZrhShitnuEqGq2a4WoarZ7hGhmtmuFaGa2e4TobrZrhehutnuEGGG2a4UYYbZ7hJhptmuFmGm2e4RYZbZrhVhltnuE2G22a4XYbbZ7hDhjtmuFOGO2e4S4a7ZrhbhrtnuEeGe2a4V4Z7Z7hPhvtmuF+G+2d4QIYHZnhQhgdneEiGh2Z4WIaHZ3hEhkdmeFSGR2d4TIbHZnhchsdneEKGJ2ZohidleHKGp2R4aoanZXh6hmdkeGaGgwyDDMMMowzjDJMM0wyzDPMMiwzLDKsM6wybDNsMuwz7DM/K8OwMz8nw3AzPy/D8DC/I8MIML8rw4gwvyfDSDC/L8PIMr8jwygyvyvDqDK/J8NoMr8vw+gxvyPDGDG/K8OYMb8nw1gxvy/D2DO/I8M4M78pweIYjMrw7w3syHJnhvRmOyvC+DO/P8IEMH8zwoQwfzvCRDB/N8LEMH8/wiQyfzPCpDJ/O8JkMn83wuQyfz/CFDF/M8KUMX87wlQxfzfC1DF/P8I0M38zwrQzfzvCdDN/N8L0M38/wgww/zPCjDD/O8JMMP83wsww/z/CLDEdn+GWGX2X4dYbfZPhtht9l+H2GP2T4Y4Y/Zfhzhr9k+GuGv2X4e4Z/ZDgmwz8z/CvDvzP8J8N/M/wvw6Ecx8px7BzHyXHcHMfLcfwcJ8hxwhyH5ThRjhPnOEmOk+Y4WY6T5zhFjlPmOFWOU+c4TY7T5jhdjtPnOEOOM+Y4U44z5zhLjrPmOFuOs+c4R45z5jhXjnPnOE+O8+Y4X47z57hAjgvmuFCOC+e4SI6L5rhYjovnuESO5LhkjkvluHSOy+S4bI7L5bh8jivkuGKOK+W4co6r5LhqjqvluHqOa+S45oRDQ/9jsXaO6+S4bo7r5bh+jhvkuGGOG+W4cY6b5LhpjpvluHmOW+S4ZY5b5bh1jtvkuG2O2+W4fY475LhjjjvluHOOu+S4a4675bh7jnvkuGeOe+W4d4775LhvjvvluH+OB+R4YI4H5XhwjofkeGiOh+V4eI5H5HhkjkfleHSOx+R4bI7H5Xh8jifkeGKO5nhSjifneEqOp+Z4Wo6n53hGjmfmOMgxyDHMMcoxzjHJMc0xyzHPscixzLHKsc6xybHNscuxz/GsHM/O8Zwcz83xvBzPz/GCHC/M8aIcL87xkhwvzfGyHC/P8Yocr8zxqhyvzvGaHK/N8bocr8/xhhxvzPGmHG/O8ZYcb83xthxvz/GOHO/8316jzxozPMcR//v10NDQeENDQyNzHBoaGhqV43053p/jAzk++P+Zh3N8JMdHc3wsx8dzfCLHJ3N8Ksenc3wmx2dzfC7H53N8IccXc3wpx5dzfCXHV3N8LcfXc3wjxzdzfCvHt3N8J8d3c3wvx/dz/CDHD3P8KMePc/wkx09z/CzHz3P8IsfROX6Z41c5fp3jNzl+m+N3OX6f4w85/pjjTzn+nOMvOf6a4285/p7jHzmOyfHPHP/K8e8c/8nx3xz/+x+TAscqcOwCxylw3ALHK3D8AicocMIChxU4UYETFzhJgZMWOFmBkxc4RYFTFjhVgVMXOE2B0xY4XYHTFzhDgTMWOFOBMxc4S4GzFjhbgbMXOEeBcxY4V4FzFzhPgfMWOF+B8xe4QIELFrhQgQsXuEiBixa4WIGLF7hEgRS4ZIFLFbh0gRvM0IxZtsDlCly+wBUKHBpraGilAlcucJUCVy1wtQJXL3CNAtcscK0C1y5wnQLXLXC9Atf/X1+BGxa4UYEbF7hJgZsWuFmBmxe4RYFbFrhVgVsXuE2B2xa4XYHbF7hDgTsWuFOBOxe4S4G7FrhbgbsXuEeBexa4V4F7F7hPgfsWuF+B+xd4QIEHFnhQgQcXeEiBhxZ4WIGHF3hEgUcWeFSBRxd4TIHHFnhcgccXeEKBJxZogScVeHKBpxR4aoGnFXh6gWcUeGaBgwKDAsMCowLjApMC0wKzAvMCiwLLAqsC6wKbAtsCuwL7As8q8OwCzynw3ALPK/D8Ai8o8MICLyrw4gIvKfDSAi8r8PICryjwygKvKvDqAq8p8NoCryvw+gJvKPDGAm8q8OYCbynw1gJvK/D2Au8o8M4C7ypweIEjCry7wHsKHFngvQWOKvC+Au8v8IECHyzwoQIfLvCRAh8t8LECHy/wiQKfLPCpAp8u8JkCny3wuQKfL/CFAl8s8KUCXy7wlQJfLfC1Al8v8I0C3yzwrQLfLvCdAt8t8L0C3y/wgwI/LPCjAj8u8JMCPy3wswI/L/CLAkcX+GWBXxX4dYHfFPhtgd8V+H2BPxT4Y4E/Ffhzgb8U+GuBvxX4e4F/FDimwD8L/KvAvwv8p8B/C/zvf16UOFaJY5c4TonjljheieOXOEGJE5Y4rMSJSpy4xElKnLTEyUqcvMQpSpyyxKlKnLrEaUqctsTpSpy+xBlKnLHEmUqcucRZSpy1xNlKnL3EOUqcs8S5Spy7xHlKnLfE+Uqcv8QFSlywxIVKXLjERUpctMTFSly8xCVKpMQlS1yqxKVLXKbEZUtcrsTlS1yhxBVLXKnElUtcpcRVS1ytxNVLXKPENUtcq8S1S1ynxHVLXK/E9UvcoMQNS9yoxI1L3KTETUvcrMTNS9yixC1L3KrErUvcpsRtS9yuxO1L3KHEHUvcqcSdS9ylxF1L3K3E3Uvco8Q9S9yrxL1L3KfEfUvcr8T9SzygxANLPKjEg0s8pMRDSzysxMNLPKLEI0s8qsSjSzymxGNLPK7E40s8ocQTS7TEk0o8ucRTSjy1xNNKPL3EM0o8s8RBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2JZ5V4donnlHhuieeVeH6JF5R4YYkXlXhxiZeUeGmJl5V4eYlXlHhliVeVeHWJ15R4bYnXlXh9iTeUeGOJN5V4c4m3lHhribeVeHuJd5R4Z4l3lTi8xBEl3l3iPSWOLPHeEkeVeF+J95f4QIkPlvhQiQ+X+EiJj5b4WImPl/hEiU+W+FSJT5f4TInPlvhcic+X+EKJL5b4Uokvl/hKia+W+FqJr5f4RolvlvhWiW+X+E6J75b4Xonvl/hBiR+W+FGJH5f4SYmflvhZiZ+X+EWJo0v8ssSvSvy6xG9K/LbE70r8vsQfSvyxxJ9K/LnEX0r8tcTfSvy9xD9KHFPinyX+VeLfJf5T4r8l/lfiUIVjVTh2heNUOG6F41U4foUTVDhhhcMqnKjCiSucpMJJK5yswskrnKLCKSucqsKpK5ymwmkrnK7C6SucocIZK5ypwpkrnKXCWSucrcLZK5yjwjkrnKvCuSucp8J5K5yvwvkrXKDCBStcqMKFK1ykwkUrXKzCxStcokIqXLLCpSpcusJlKly2wuUqXL7CFSpcscKVKly5wlUqXLXC1SpcvcI1KlyzwrUqXLvCdSpct8L1Kly/wg0q3LDCjSrcuMJNKty0ws0q3LzCLSrcssKtKty6wm0q3LbC7SrcvsIdKtyxwp0q3LnCXSrctcLdKty9wj0q3LPCvSrcu8J9Kty3wv0q3L/CAyo8sMKDKjy4wkMqPLTCwyo8vMIjKjyywqMqPLrCYyo8tsLjKjy+whMqPLFCKzypwpMrPKXCUys8rcLTKzyjwjMrHFQYVBhWGFUYV5hUmFaYVZhXWFRYVlhVWFfYVNhW2FXYV3hWhWdXeE6F51Z4XoXnV3hBhRdWeFGFF1d4SYWXVnhZhZdXeEWFV1Z4VYVXV3hNhddWeF2F11d4Q4U3VnhThTdXeEuFt1Z4W4W3V3hHhXdWeFeFwyscUeHdFd5T4cgK761wVIX3VXh/hQ9U+GCFD1X4cIWPVPhohY9V+HiFT1T4ZIVPVfh0hc9U+GyFz1X4fIUvVPhihS9V+HKFr1T4aoWvVfh6hW9U+GaFb1X4doXvVPhuhe9V+H6FH1T4YYUfVfhxhZ9U+GmFn1X4eYVfVDi6wi8r/KrCryv8psJvK/yuwu8r/KHCHyv8qcKfK/ylwl8r/K3C3yv8o8IxFf5Z4V8V/l3hPxX+W+F/FQ7VOFaNY9c4To3j1jhejePXOEGNE9Y4rMaJapy4xklqnLTGyWqcvMYpapyyxqlqnLrGaWqctsbpapy+xhlqnLHGmWqcucZZapy1xtlqnL3GOWqcs8a5apy7xnlqnLfG+Wqcv8YFalywxoVqXLjGRWpctMbFaly8xiVqpMYla1yqxqVrXKbGZWtcrsbla1yhxhVrXKnGlWtcpcZVa1ytxtVrXKPGNWtcq8a1a1ynxnVrXK/G9WvcoMYNa9yoxo1r3KTGTWvcrMbNa9yixi1r3KrGrWvcpsZta9yuxu1r3KHGHWvcqcada9ylxl1r3K3G3Wvco8Y9a9yrxr1r3KfGfWvcr8b9azygxgNrPKjGg2s8pMZDazysxsNrPKLGI2s8qsajazymxmNrPK7G42s8ocYTa7TGk2o8ucZTajy1xtNqPL3GM2o8s8ZBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NZ9V4do3n1HhujefVeH6NF9R4YY0X1XhxjZfUeGmNl9V4eY1X1HhljVfVeHWN19R4bY3X1Xh9jTfUeGONN9V4c4231HhrjbfVeHuNd9R4Z4131Ti8xhE13l3jPTWOrPHeGkfVeF+N99f4QI0P1vhQjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1vhcjc/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNo2v8ssavavy6xm9q/LbG72r8vsYfavyxxp9q/LnGX2r8tcbfavy9xj9qHFPjnzX+VePfNf5T4781/lfjUINjNTh2g+M0OG6D4zU4foMTNDhhg8ManKjBiRucpMFJG5yswckbnKLBKRucqsGpG5ymwWkbnK7B6RucocEZG5ypwZkbnKXBWRucrcHZG5yjwTkbnKvBuRucp8F5G5yvwfkbXKDBBRtcqMGFG1ykwUUbXKzBxRtcokEaXLLBpRpcusFlGly2weUaXL7BFRpcscGVGly5wVUaXLXB1RpcvcE1GlyzwbUaXLvBdRpct8H1Gly/wQ0a3LDBjRrcuMFNGty0wc0a3LzBLRrcssGtGty6wW0a3LbB7RrcvsEdGtyxwZ0a3LnBXRrctcHdGty9wT0a3LPBvRrcu8F9Gty3wf0a3L/BAxo8sMGDGjy4wUMaPLTBwxo8vMEjGjyywaMaPLrBYxo8tsHjGjy+wRMaPLFBGzypwZMbPKXBUxs8rcHTGzyjwTMbHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3hWg2c3eE6D5zZ4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3eEWDVzZ4VYNXN3hNg9c2eF2D1zd4Q4M3NnhTgzc3eEuDtzZ4W4O3N3hHg3c2eFeDwxsc0eDdDd7T4MgG721wVIP3NXh/gw80+GCDDzX4cIOPNPhog481+HiDTzT4ZINPNfh0g880+GyDzzX4fIMvNPhigy81+HKDrzT4aoOvNfh6g280+GaDbzX4doPvNPhug+81+H6DHzT4YYMfNfhxg580+GmDnzX4eYNfNDi6wS8b/KrBrxv8psFvG/yuwe8b/KHBHxv8qcGfG/ylwV8b/K3B3xv8o8ExDf7Z4F8N/t3gPw3+2+B/DQ61OFaLY7c4Tovjtjhei+O3OEGLE7Y4rMWJWpy4xUlanLTFyVqcvMUpWpyyxalanLrFaVqctsXpWpy+xRlanLHFmVqcucVZWpy1xdlanL3FOVqcs8W5Wpy7xXlanLfF+Vqcv8UFWlywxYVaXLjFRVpctMXFWly8xSVapMUlW1yqxaVbXKbFZVtcrsXlW1yhxRVbXKnFlVtcpcVVW1ytxdVbXKPFNVtcq8W1W1ynxXVbXK/F9VvcoMUNW9yoxY1b3KTFTVvcrMXNW9yixS1b3KrFrVvcpsVtW9yuxe1b3KHFHVvcqcWdW9ylxV1b3K3F3Vvco8U9W9yrxb1b3KfFfVvcr8X9WzygxQNbPKjFg1s8pMVDWzysxcNbPKLFI1s8qsWjWzymxWNbPK7F41s8ocUTW7TFk1o8ucVTWjy1xdNaPL3FM1o8s8VBi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32LZ7V4dovntHhui+e1eH6LF7R4YYsXtXhxi5e0eGmLl7V4eYtXtHhli1e1eHWL17R4bYvXtXh9ize0eGOLN7V4c4u3tHhri7e1eHuLd7R4Z4t3tTi8xREt3t3iPS2ObPHeFke1eF+L97f4QIsPtvhQiw+3+EiLj7b4WIuPt/hEi0+2+FSLT7f4TIvPtvhcy7D/efNCiy+2+FKLL7f4Souvtvhai6+3+EaLb7b4Votvt/hOi++2+F6L77f4QYsftvhRix+3+EmLn7b4WYuft/hFi6Nb/LLFr1r8usVvWvy2xe9a/L7FH1r8scWfWvy5xV9a/LXF31r8vcU/WhzT4p8t/tXi3y3+0+K/Lf7X4lCHY3U4dofjdDhuh+N1OH6HE3Q4YYfDOpyow4k7nKTDSTucrMPJO5yiwyk7nKrDqTucpsNpO5yuw+k7nKHDGTucqcOZO5ylw1k7nK3D2Tuco8M5O5yrw7k7nKfDeTucr8P5O1ygwwU7XKjDhTtcpMNFO1ysw8U7XKJDOlyyw6U6XLrDZTpctsPlOly+Y9jQ0JArdrhShyt3uEqHq3a4Woerd7hGh2t2uFaHa3e4Tofrdrheh+t3uEGHG3a4UYcbd7hJh5t2uFmHm3e4RYdbdrhVh1t3uE2H23a4XYfbd7hDhzt2uFOHO3e4S4e7drhbh7t3uEeHe3a4V4d7d7hPh/t2uF+H+3d4QIcHdnhQhwd3eEiHh3Z4WIeHd3hEh0d2eFSHR3d4TIfHdnhch8d3eEKHJ3Zohyd1eHKHp3R4aoendXh6h2d0eGaHgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Ds/q8OwOz+nw3A7P6/D8Di/o8MIOL+rw4g4v6fDSDi/r8PIOr+jwyg6v6vDqDq/p8NoOr+vw+g5v6PDGDm/q8OYOb+nw1g5v6/D2Du/o8M4O7+pweIcjOry7w3s6HNnhvR2O6vC+Du/v8IEOH+zwoQ4f7vCRDh/t8LEOH+/wiQ6f7PCpDp/u8JkOn+3wuQ6f7/CFDl/s8KUOX+7wlQ5f7fC1Dl/v8I0O3+zwrQ7f7vCdDt/t8L0O3+/wgw4/7PCjDj/u8JMOP+3wsw4/7/CLDkd3+GWHX3X4dYffdPhth991+H2HP3T4Y4c/dfhzh790+GuHv3X4e4d/dDimwz87/KvDvzv8p8N/O/yvw6Eex+px7B7H6XHcHsfrcfweJ+hxwh6H9ThRjxP3OEmPk/Y4WY+T9zhFj1P2OFWPU/c4TY/T9jhdj9P3OEOPM/Y4U48z9zhLj7P2OFuPs/c4R49z9jhXj3P3OE+P8/Y4X4/z97hAjwv2uFCPC/e4SI+L9rhYj4v3uESP9Lhkj0v1uHSPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S4b4/79bh/jwf0eGCPB/V4cI+H9Hhoj4f1eHiPR/R4ZI9H9Xh0j8f0eGyPx/V4fI8n9Hhij/Z4Uo8n93hKj6f2eFqPp/d4Ro9n9jjoMegx7DHqMe4x6THtMesx77Hoseyx6rHusemx7bHrse/xrB7P7vGcHs/t8bwez+/xgh4v7PGiHi/u8ZIeL+3xsh4v7/GKHq/s8aoer+7xmh6v7fG6Hq/v8YYeb+zxph5v7vGWHm/t8bYeb+/xjh7v7PGuHof3OKLHu3u8p8eRPd7b46j+/1ikByY8DwaBoqnb1Lbt3tq2bdv2rZHa72OjtpnUtm3bjHZ25vsLZw4OH+CIAT48wEcG+OgAHxvg4wN8YoBPDvCpAT49wGcG+OwAnxvg8wN8YYAvDvClAb48wFcG+OoAXxvg6wN8Y4BvDvCtAb49wHcG+O4A3xvg+wP8YIAfDvCjAX48wE8G+OkAPxvg5wP8YoBfDvCrAX49wG8G+O0Avxvg9wP8YYA/DvCnAf48wF8G+OsAfxvg7wP8Y4B/DvCvAf49wH8G+O8A/xvgyAGOGuDoAY4Z4NgBDglwnADHDXC8AMcPcIIAJwxwogAnDnCSAIcGOGmAkwU4eYBTBDhlgFMFOHWA0wQ4bYDTBTh9gDMEOGOAMwU4c4CzBDhrgLMFOHuAcwQ4Z4BzBTh3gPMEOG+A8wU4f4ALBLhggAsFuHCAiwS4aICLBbh4gEsEuGSASwVIgEsHuEyAywa4XIDLB7hCgCsGuFKAKwe4SoCrBrhagKsHuEaAawa4VoBrB7hOgOsGuF6A6we4QYAbBrhRgBsHuEmAmwa4WYCbB7hFgFsGuFWAWwe4TYDbBrhdgNsHuEOAOwa4U4A7B7hLgLsGuFuAuwe4R4B7BrhXgHsHuE+A+wa4X4D7B3hAgAcGeFCABwd4SICHBnhYgIcHeESARwZ4VIBHB3hMgMcGeFyAxwd4QoAnBnhSgCcHaICnBHhqgKcFeHqAZwR4ZoBnBXh2gOcEeG6AwwI8L8DzA7wgwAsDvCjAiwO8JMBLA7wswMsDvCLAKwO8KsBBgEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH2AVwd4TYDXBnhdgNcHeEOANwZ4U4A3B3hLgLcGeFuAtwd4R4B3BnhXgHcHeE+A9wZ4X4D3B/hAgA8G+FCAwwMcEeDDAT4S4KMBPhbg4wE+EeCTAT4V4NMBPhPgswE+F+DzAb4Q4IsBvhTgywG+EuCrAb4W4OsBvhHgmwG+FeDbAb4T4LsBvhfg+wF+EOCHAX4U4McBfhLgpwF+FuDnAX4R4JcBfhXg1wF+E+C3AX4X4PcB/hDgjwH+FODPAf4S4K8B/hbg7wH+EeCfAf4V4N8B/hPgvwH+F+DIAEcFODrAMQGODXBIiOOEOG6I44U4fogThDhhiBOFOHGIk4Q4NMRJQ5wsxMlDnCLEKUOcKsSpQ5wmxGlDnC7E6UOcIcQZQ5wpxJlDnCXEWUOcLcTZQ5wjxDlDnCvEuUOcJ8R5Q5wvxPlDXCDEBUNcKMSFQ1wkxEVDXCzExUNcIsQlQ1wqREJcOsRlQlw2xOVCXD7EFUJcMcSVQlw5xFVCXDXE1UJcPcQ1QlwzxLVCXDvEdUJcN8T1Qlw/xA1C3DDEjULcOMRNQtw0xM1C3DzELULcMsStQtw6xG1C3DbE7ULcPsQdQtwxxJ1C3DnEXULcNcTdQtw9xD1C3DPEvULcO8R9Qtw3xP1C3D/EA0I8MMSDQjw4xENCPDTEw0I8PMQjQjwyxKNCPDrEY0I8NsTjQjw+xBNCPDHEk0I8OURDPCXEU0M8LcTTQzwjxDNDPCvEs0M8J8RzQxwW4nkhnh/iBSFeGOJFIV4c4iUhXhriZSFeHuIVIV4Z4lUhDkIMQgxDjEKMQ0xCTEPMQsxDLEIsQ6xCrENsQmxD7ELsQ7w6xGtCvDbE60K8PsQbQrwxxJtCvDnEW0K8NcTbQrw9xDtCvDPEu0K8O8R7Qrw3xPtCvD/EB0J8MMSHQhwe4ogQHw7xkRAfDfGxEB8P8YkQnwzxqRCfDvGZEJ8N8bkQnw/xhRBfDPGlEF8O8ZUQXw3xtRBfD/GNEN8M8a0Q3w7xnRDfDfG9EN8P8YMQPwzxoxA/DvGTED8N8bMQPw/xixC/DPGrEL8O8ZsQvw3xuxC/D/GHEH8M8acQfw7xlxB/DfG3EH8P8Y8Q/wzxrxD/DvGfEP8N8b8QR4Y4KsTRIY4JcWyIQyIcJ8JxIxwvwvEjnCDCCSOcKMKJI5wkwqERThrhZBFOHuEUEU4Z4VQRTh3hNBFOG+F0EU4f4QwRzhjhTBHOHOEsEc4a4WwRzh7hHBHOGeFcEc4d4TwRzhvhfBHOH+ECES4Y4UIRLhzhIhEuGuFiES4e4RIRLhnhUhES4dIRLhPhshEuF+HyEa4Q4YoRrhThyhGuEuGqEa4W4eoRrhHhmhGuFeHaEa4T4boRrhfh+hFuEOGGEW4U4cYRbhLhphFuFuHmEW4R4ZYRbhXh1hFuE+G2EW4X4fYR7hDhjhHuFOHOEe4S4a4R7hbh7hHuEeGeEe4V4d4R7hPhvhHuF+H+ER4Q4YERHhThwREeEuGhER4W4eERHhHhkREeFeHRER4T4bERHhfh8RGeEOGJEZ4U4ckRGuEpEZ4a4WkRnh7hGRGeGeFZEZ4d4TkRnhvhsAjPi/D8CC+I8MIIL4rw4ggvifDSCC+L8PIIr4jwygivinAQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR/h1RFeE+G1EV4X4fUR3hDhjRHeFOHNEd4S4a0R3hbh7RHeEeGdEd4V4d0R3hPhvRHeF+H9ET4Q4YMRPhTh8AhHRPhwhI9E+GiEj0X4eIRPRPhkhE9F+HSEz0T4bITPRfh8hC9E+GKEL0X4coSvRPhqhK9F+HqEb0T4ZoRvRfh2hO9E+G6E70X4foQfRPhhhB9F+HGEn0T4aYSfRfh5hF9E+GWEX0X4dYTfRPhthN9F+H2EP0T4Y4Q/RfhzhL9E+GuEv0X4e4R/RPhnhH9F+HeE/0T4b4T/RTgywlERjo5wTIRjIxwS4zgxjhvjeDGOH+MEMU4Y40QxThzjJDEOjXHSGCeLcfIYp4hxyhininHqGKeJcdoYp4tx+hhniHHGGGeKceYYZ4lx1hhni3H2GOeIcc4Y54px7hjniXHeGOeLcf4YF4hxwRgXinHhGBeJcdEYF4tx8RiXiHHJGJeKkRiXjnGZGJeNcbkYl49xhRhXjHGlGFeOcZUYV41xtRhXj3GNGNeMca0Y145xnRjXjXG9GNePcYMYN4xxoxg3jnGTGDeNcbMYN49xixi3jHGrGLeOcZsYt41xuxi3j3GHGHeMcacYd45xlxh3jXG3GHePcY8Y94xxrxj3jnGfGPeNcb8Y94/xgBgPjPGgGA+O8ZAYD43xsBgPj/GIGI+M8agYj47xmBiPjfG4GI+P8YQYT4zxpBhPjtEYT4nx1BhPi/H0GM+I8cwYz4rx7BjPifHcGIfFeF6M58d4QYwXxnhRjBfHeEmMl8Z4WYyXx3hFjFfGeFWMgxiDGMMYoxjjGJMY0xizGPMYixjLGKsY6xibGNsYuxj7GK+O8ZoYr43xuhivj/GGGG+M8aYYb47xlhhvjfG2GG+P8Y4Y74zxrhjvjvGeGO+N8b4Y74/xgRgfjPGhGIfHOCLGh2N8JMZHY3wsxsdjfCLGJ2N8KsanY3wmxmdjfC7G52N8IcYXY3wpxpdjfCXGV2N8LcbXY3wjxjdjfCvGt2N8J8Z3Y3wvxvdj/CDGD2P8KMaPY/wkxk9j/CzGz2P8IsYvY/wqxq9j/CbGb2P8LsbvY/whxh9j/CnGn2P8JcZfY/wtxt9j/CPGP2P8K8a/Y/wnxn9j/C/GkTGOinF0jGNiHBvjkATHSXDcBMdLcPwEJ0hwwgQnSnDiBCdJcGiCkyY4WYKTJzhFglMmOFWCUyc4TYLTJjhdgtMnOEOCMyY4U4IzJzhLgrMmOFuCsyc4R4JzJjhXgnMnOE+C8yY4X4LzJ7hAggsmuFCCCye4SIKLJrhYgosnuESCSya4VIIkuHSCyyS4bILLJbh8giskuGKCKyW4coKrJLhqgqsluHqCayS4ZoJrJbh2guskuG6C6yW4foIbJLhhghsluHGCmyS4aYKbJbh5glskuGWCWyW4dYLbJLhtgtsluH2COyS4Y4I7JbhzgrskuGuCuyW4e4J7JLhngnsluHeC+yS4b4L7Jbh/ggckeGCCByV4cIKHJHhogocleHiCRyR4ZIJHJXh0gsckeGyCxyV4fIInJHhigicleHKCJnhKgqcmeFqCpyd4RoJnJnhWgmcneE6C5yY4LMHzEjw/wQsSvDDBixK8OMFLErw0wcsSvDzBKxK8MsGrEhwkGCQYJhglGCeYJJgmmCWYJ1gkWCZYJVgn2CTYJtgl2Cd4dYLXJHhtgtcleH2CNyR4Y4I3JXhzgrckeGuCtyV4e4J3JHhngncleHeC9yR4b4L3JXh/gg8k+GCCDyU4PMERCT6c4CMJPprgYwk+nuATCT6Z4FMJPp3gMwk+m+BzCT6f4AsJvpjgSwm+nOArCb6a4GsJvp7gGwm+meBbCb6d4DsJvpvgewm+n+AHCX6Y4EcJfpzgJwl+muBnCX6e4BcJfpngVwl+neA3CX6b4HcJfp/gDwn+mOBPCf6c4C8J/prgbwn+nuAfCf6Z4F8J/p3gPwn+m+B/CY5McFSCoxMck+DYBIekOE6K46Y4XorjpzhBihOmOFGKE6c4SYpDU5w0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNcXZUpw9xTlSnDPFuVKcO8V5Upw3xflSnD/FBVJcMMWFUlw4xUVSXDTFxVJcPMUlUlwyxaVSJMWlU1wmxWVTXC7F5VNcIcUVU1wpxZVTXCXFVVNcLcXVU1wjxTVTXCvFtVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCrFo1M8JsVjUzwuxeNTPCHFE1M8KcWTUzTFU1I8NcXTUjw9xTNSPDPFs1I8O8VzUjw3xWEpnpfi+SlekOKFKV6U4sUpXpLipSleluLlKV6R4pUpXpXiIMUgxTDFKMU4xSTFNMUsxTzFIsUyxSrFOsUmxTbFLsU+xatTvCbFa1O8LsXrU7whxRtTvCnFm1O8JcVbU7wtxdtTvCPFO1O8K8W7U7wnxXtTvC/F+1N8IMUHU3woxeEpjkjx4RQfSfHRFB9L8fEUn0jxyRSfSvHpFJ9J8dkUn0vx+RRfSPHFFF9K8eUUX0nx1RRfS/H1FN9I8c0U30rx7RTfSfHdFN9L8f0UP0jxwxQ/SvHjFD9J8dMUP0vx8xS/SPHLFL9K8esUv0nx2xS/S/H7FH9I8ccUf0rx5xR/SfHXFH9L8fcU/0jxzxT/SvHvFP9J8d8U/0txZIqjUhyd4pgUx6Y4JMNxMhw3w/EyHD/DCTKcMMOJMpw4w0kyHJrhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDhjBnOlOHMGc6S4awZzpbh7BnOkeGcGc6V4dwZzpPhvBnOl+H8GS6Q4YIZLpThwhm+n+GiGS6W4eIZLpHhkhkulSEZLp3hMhkum+FyGS6f4QoZrpjhShmunOEqGa6a4WoZrp7hGhmumeFaGa6d4ToZrpvhehmun+EGGW6Y4UYZbpzhJhlumuFmGW6e4RYZbpnhVhluneE2GW6b4XYZbp/hDhnumOFOGe6c4S4Z7prhbhnunuEeGe6Z4V4Z7p3hPhnum+F+Ge6f4QEZHpjhQRkenOEhGR6a4WEZHp7hERkemeFRGR6d4TEZHpvhcRken+EJGZ6Y4UkZnpyhGZ6S4akZnpbh6RmekeGZGZ6V4dkZnpPhuRkOy/C8DM/P8IIML8zwogwvzvCSDC/N8LIML8/wigyvzPCqDAcZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ9hleneE1GV6b4XUZXp/hDRnemOFNGd6c4S0Z3prhbRnenuEdGd6Z4V0Z3p3hPRnem+F9Gd6f4QMZPpjhQxkOz3BEhg9n+EiGj2b4WIaPZ/hEhk9m+FSGT2f4TIbPZvhchs9n+EKGL2b4UoYvZ/hKhq9m+FqGr2f4RoZvZvhWhm9n+E6G72b43v8Of5Dhhxl+lOHHGX6S4acZfpbh5xl+keGXGX6V4dcZfpPhtxl+l+H3Gf6Q4Y8Z/pThzxn+kuGvGf6W4e8Z/pHhnxn+leHfGf6T4b8Z/pfhyAxHZTg6wzEZjs1wSI7j5DhujuPlOH6OE+Q4YY4T5ThxjpPkODTHSXOcLMfJc5wixylznCrHqXOcJsdpc5wux+lznCHHGXOcKceZc5wlx1lznC3H2XOcI8c5c5wrx7lznCfHeXOcL8f5c1wgxwVzXCjHhXNcJMdFc1wsx8VzXCLHJXNcKkdyXDrHZXJcNsflclw+xxVyXDHHlXJcOcdVclw1x9VyXD3HNXJcM8e1clw7x3VyXDfH9XJcP8cNctwwx41y3DjHTXLcNMfNctw8xy1y3DLHrXLcOsdtctw2x+1y3D7HHXLcMcedctw5x11y3DXH3XLcPcc9ctwzx71y3DvHfXLcN8f9ctw/xwNyPDDHg3I8OMdDcjw0x8NyPDzHI3I8Msejcjw6x2NyPDbH43I8PscTcjwxx5NyPDlHczwlx1NzPC3H03M8I8czczwrx7NzPCfHc3McluN5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOQ5yDHIMc4xyjHNMckxzzHLMcyxyLHOscqxzbHJsc+xy7HO8Osdrcrw2x+tyvD7HG3K8Mcebcrw5x1tyvDXH23K8Pcc7crwzx7tyvDvHe3K8N8f7crw/xwdyfDDHh3IcnuOIHB/O8ZEcH83xsRwfz/GJHJ/M8akcn87xmRyfzfG5HJ/P8YUcX8zxpRxfzvGVHF/N8bUcX8/xjRzfzPGtHN/O8Z0c383xvRzfz/GDHD/M8aMcP87xkxw/zfGzHD/P8Yscv8zxqxy/zvGbHL/N8bscv8/xhxx/zPGnHH/O8Zccf83xtxx/z/GPHP/M8a8c/87xnxz/zfG/HEfmOCrH0TmOyXFsjkMKHKfAcQscr8DxC5ygwAkLnKjAiQucpMChBU5a4GQFTl7gFAVOWeBUBU5d4DQFTlvgdAVOX+AMBc5Y4EwFzlzgLAXOWuBsBc5e4BwFzlngXAXOXeA8Bc5b4HwFzl/gAgUuWOBCBS5c4CIFLlrgYgUuXuASBS5Z4FIFUuDSBS5T4LIFLlfg8gWuUOCKBa5U4MoFrlLgqgWuVuDqBa5R4JoFrlXg2gWuU+C6Ba5X4PoFblDghgVuVODGBW5S4KYFblbg5gVuUeCWBW5V4NYFblPgtgVuV+D2Be5Q4I4F7lTgzgXuUuCuBe5W4O4F7lHgngXuVeDeBe5T4L4F7lfg/gUeUOCBBR5U4MEFHlLgoQUeVuDhBR5R4JEFHlXg0QUeU+CxBR5X4PEFnlDgiQWeVODJBVrgKQWeWuBpBZ5e4BkFnlngWQWeXeA5BZ5b4LACzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCrypwUGBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2Bf4NUFXlPgtQVeV+D1Bd5Q4I0F3lTgzQXeUuCtBd5W4O0F3lHgnQXeVeDdBd5T4L0F3lfg/QU+UOCDBT5U4PACRxT4cIGPFPhogY8V+HiBTxT4ZIFPFfh0gc8U+GyBzxX4fIEvFPhigS8V+HKBrxT4aoGvFfh6gW8U+GaBbxX4doHvFPhuge8V+H6BHxT4YYEfFfhxgZ8U+GmBnxX4eYFfFPhlgV8V+HWB3xT4bYHfFfh9gT8U+GOBPxX4c4G/FPhrgb8V+HuBf/y/z1D8q8C/C/ynwH8L/K/AkQWOKnB0gWMKHFvgkBLHKXHcEscrcfwSJyhxwhInKnHiEicpcWiJk5Y4WYmTlzhFiVOWOFWJU5c4TYnTljhdidOXOEOJM5Y4U4kzlzhLibOWOFuJs5c4R4lzljhXiXOXOE+J85Y4X4nzl7hAiQuWuFCJC5e4SImLlrhYiYuXuESJS5a4VImUuHSJy5S4bInLlbh8iSuUuGKJK5W4comrlLhqiauVuHqJa5S4Zolrlbh2ieuUuG6J65W4fokblLhhiRuVuHGJm5S4aYmblbh5iVuUuGWJW5W4dYnblLhtiduVuH2JO5S4Y4k7lbhzibuUuGuJu5W4e4l7lLhniXuVuHeJ+5S4b4n7lbh/iQeUeGCJB5V4cImHlHhoiYeVeHiJR5R4ZIlHlXh0iceUeGyJx5V4fIknlHhiiSeVeHKJlnhKiaeWeFqJp5d4RolnlnhWiWeXeE6J55Y4rMTzSjy/xAtKvLDEi0q8uMRLSry0xMtKvLzEK0q8ssSrShyUGJQYlhiVGJeYlJiWmJWYl1iUWJZYlViX2JTYltiV2Jd4dYnXlHhtideVeH2JN5R4Y4k3lXhzibeUeGuJt5V4e4l3lHhniXeVeHeJ95R4b4n3lXh/iQ+U+GCJD5U4vMQRJT5c4iMlPlriYyU+XuITJT5Z4lMlPl3iMyU+W+JzJT5f4gslvljiSyW+XOIrJb5a4mslvl7iGyW+WeJbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+J/JY4scVSJo0scU+LYEodUOE6F41Y4XoXjVzhBhRNWOFGFE1c4SYVDK5y0wskqnLzCKSqcssKpKpy6wmkqnLbC6SqcvsIZKpyxwpkqnLnCWSqctcLZKpy9wjkqnLPCuSqcu8J5Kpy3wvkqnL/CBSpcsMKFKly4wkUqXLTCxSpcvMIlKlyywqUqpMKlK1ymwmUrXK7C5StcocIVK1ypwpUrXKXCVStcrcLVK1yjwjUrXKvCtStcp8J1K1yvwvUr3KDCDSvcqMKNK9ykwk0r3KzCzSvcosItK9yqwq0r3KbCbSvcrsLtK9yhwh0r3KnCnSvcpcJdK9ytwt0r3KPCPSvcq8K9K9ynwn0r3K/C/Ss8oMIDKzyowoMrPKTCQys8rMLDKzyiwiMrPKrCoys8psJjKzyuwuMrPKHCEys8qcKTK7TCUyo8tcLTKjy9wjMqPLPCsyo8u8JzKjy3wmEVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXhoMKgwrDCqMK4wqTCtMKswrzCosKywqrCusKmwrbCrsK+wqsrvKbCayu8rsLrK7yhwhsrvKnCmyu8pcJbK7ytwtsrvKPCOyu8q8K7K7ynwnsrvK/C+yt8oMIHK3yowuEVjqjw4QofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKn6vw+QpfqPDFCl+q8OUKX6nw1Qpfq/D1Ct+o8M0K36rw7QrfqfDdCt+r8P0KP6jwwwo/qvDjCj+p8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8K/6twZIWjKhxd4ZgKx1Y4pMZxahy3xvFqHL/GCWqcsMaJapy4xklqHFrjpDVOVuPkNU5R45Q1TlXj1DVOU+O0NU5X4/Q1zlDjjDXOVOPMNc5S46w1zlbj7DXOUeOcNc5V49w1zlPjvDXOV+P8NS5Q44I1LlTjwjUuUuOiNS5W4+I1LlHjkjUuVSM1Ll3jMjUuW+NyNS5f4wo1rljjSjWuXOMqNa5a42o1rl7jGjWuWeNaNa5d4zo1rlvjejWuX+MGNW5Y40Y1blzjJjVuWuNmNW5e4xY1blnjVjVuXeM2NW5b43Y1bl/jDjXuWONONe5c4y417lrjbjXuXuMeNe5Z41417l3jPjXuW+N+Ne5f4wE1HljjQTUeXOMhNR5a42E1Hl7jETUeWeNRNR5d4zE1HlvjcTUeX+MJNZ5Y40k1nlyjNZ5S46k1nlbj6TWeUeOZNZ5V49k1nlPjuTUOq/G8Gs+v8YIaL6zxohovrvGSGi+t8bIaL6/xihqvrPGqGgc1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY19jVeXeM1NV5b43U1Xl/jDTXeWONNNd5c4y013lrjbTXeXuMdNd5Z41013l3jPTXeW+N9Nd5f4wM1PljjQzUOr3FEjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1vhcjc/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNf9f4T43/1vhfjSNrHFXj6BrH1Di2xiENjtPguA2O1+D4DU7Q4IQNTtTgxA1O0uDQBidtcLIGJ29wiganbHCqBqducJoGp21wuganb3CGBmdscKYGZ25wlgZnbXC2BmdvcI4G52xwrgbnbnCeBudtcL4G529wgQYXbHChBhducJEGF21wsQYXb3CJBpdscKkGaXDpBpdpcNkGl2tw+QZXaHDFBldqcOUGV2lw1QZXa3D1BtdocM0G12pw7QbXaXDdBtdrcP0GN2hwwwY3anDjBjdpcNMGN2tw8wa3aHDLBrdqcOsGt2lw2wa3a3D7BndocMcGd2pw5wZ3aXDXBndrcPcG92hwzwb3anDvBvdpcN8G92tw/wYPaPDABg9q8OAGD2nw0AYPa/DwBo9o8MgGj2rw6AaPafDYBo9r8PgGT2jwxAZPavDkBm3wlAZPbfC0Bk9v8IwGz2zwrAbPbvCcBs9tcFiD5zV4foMXNHhhgxc1eHGDlzR4aYOXNXh5g1c0eGWDVzU4aDBoMGwwajBuMGkwbTBrMG+waLBssGqwbrBpsG2wa7Bv8OoGr2nw2gava/D6Bm9o8MYGb2rw5gZvafDWBm9r8PYG72jwzgbvavDuBu9p8N4G72vw/gYfaPDBBh9qcHiDIxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbB5xp8vsEXGnyxwZcafLnBVxp8tcHXGny9wTcafLPBtxp8u8F3Gny3wfcafL/BDxr8sMGPGvy4wU8a/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/Gvy7wX8a/LfB/xoc2eCoBkc3OKbBsQ0OaXGcFsdtcbwWx29xghYnbHGiFiducZIWh7Y4aYuTtTh5i1O0OGWLU7U4dYvTtDhti9O1OH2LM7Q4Y4sztThzi7O0OGuLs7U4e4tztDhni3O1OHeL87Q4b4vztTh/iwu0uGCLC7W4cIuLtLhoi4u1uHiLS7S4ZItLtUiLS7e4TIvLtrhci8u3uEKLK7a4Uosrt7hKi6u2uFqLq7e4RotrtrhWi2u3uE6L67a4Xovrt7hBixu2uFGLG7e4SYubtrhZi5u3uEWLW7a4VYtbt7hNi9u2uF2L27e4Q4s7trhTizu3uEuLu7a4W4u7t7hHi3u2uFeLe7e4T4v7trhfi/u3eECLB7Z4UIsHt3hIi4e2eFiLh7d4RItHtnhUi0e3eEyLx7Z4XIvHt3hCiye2eFKLJ7doi6e0eGqLp7V4eotntHhmi2e1eHaL57R4bovDWjyvxfNbvKDFC1u8qMWLW7ykxUtbvKzFy1u8osUrW7yqxUGLQYthi1GLcYtJi2mLWYt5i0WLZYtVi3WLTYtti12LfYtXt3hNi9e2eF2L17d4Q4s3tnhTize3eEuLt7Z4W4u3t3hHi3e2eFeLd7d4T4v3tnhfi/e3+ECLD7b4UIvDWxzR4sMtPtLioy0+1uLjLT7R4pMtPtXi0y0+0+KzLT7X4vMtvtDiiy2+1OLLLb7S4qstvtbi6y2+0eKbLb7V4tstvtPiuy2+1+L7LX7Q4octftTixy1+0uKnLX7W4uctftHily1+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4p8t/tXi3y3+0+K/Lf7X4sgWR7U4usUxLY5tcUiH43Q4bofjdTh+hxN0OGGHE3U4cYeTdDi0w0k7nKzDyTucosMpO5yqw6k7nKbDaTucrsPpO5yhwxk7nKnDmTucpcNZO5ytw9k7nKPDOTucq8O5O5ynw3k7nK/D+TtcoMMFO1yow4U7XKTDRTtcrMPFO1yiwyU7XKpDOly6w2U6XLbD5TpcvsMVOlyxw5U6XLnDVTpctcPVOly9wzU6XLPDtTpcu8N1Oly3w/U6XL/DDTrcsMONOty4w0063LTDzTrcvMMtOtyyw6063LrDbTrctsPtOty+wx063LHDnTrcucNdOty1w9063L3DPTrcs8O9Oty7w3063LfD/Trcv8MDOjyww4M6PLjDQzo8tMPDOjy8wyM6PLLDozo8usNjOjy2w+M6PL7DEzo8scOTOjy5Qzs8pcNTOzytw9M7PKPDMzs8q8OzOzynw3M7HNbheR2e3+EFHV7Y4UUdXtzhJR1e2uFlHV7e4RUdXtnhVR0OOgw6DDuMOow7TDpMO8w6zDssOiw7rDqsO2w6bDvsOuw7vLrDazq8tsPrOry+wxs6vLHDmzq8ucNbOry1w9s6vL3DOzq8s8O7Ory7w3s6vLfD+zq8v8MHOnyww4c6HN7hiA4f7vCRDh/t8LEOH+/wiQ6f7PCpDp/u8JkOn+3wuQ6f7/CFDl/s8KUOX+7wlQ5f7fC1Dl/v8I0O3+zwrQ7f7vCdDt/t8L0O3+/wgw4/7PCjDj/u8JMOP+3wsw4/7/CLDr/s8KsOv+7wmw6/7fC7Dr/v8IcOf+zwpw5/7vCXDn/t8LcOf+/wjw7/7PCvYUP8u8N/Ovy3w/86HNnhqA5Hdzimw7EdDulxnB7H7XG8HsfvcYIeJ+xxoh4n7nGSHof2OGmPk/U4eY9T9Dhlj1P1OHWP0/Q4bY/T9Th9jzP0OGOPM/U4c4+z9Dhrj7P1OHuPc/Q4Z49z9Th3j/P0OG+P8/U4f48L9Lhgjwv1uHCPi/S4aI+L9bh4j0v0uGSPS/VIj0v3uEyPy/a4XI/L97hCjyv2uFKPK/e4So+r9rhaj6v3uEaPa/a4Vo9r97hOj+v2uF6P6/e4QY8b9rhRjxv3uEmPm/a4WY+b97hFj1v2uFWPW/e4TY/b9rhdj9v3uEOPO/a4U48797hLj7v2uFuPu/e4R4979rhXj3v3uE+P+/a4X4/793hAjwf2eFCPB/d4SI+H9nhYj4f3eESPR/Z4VI9H93hMj8f2eFyPx/d4Qo8n9nhSjyf3aI+n9Hhqj6f1eHqPZ/R4Zo9n9Xh2j+f0eG6Pw3o8r8fze7ygxwt7vKjHi3u8pMdLe7ysx8t7vKLHK3u8qsdBj0GPYY9Rj3GPSY9pj1mPeY9Fj2WPVY91j02PbY9dj32PV/d4TY/X9nhdj9f3eEOPN/Z4U48393hLj7f2eFuPt/d4R4939nhXj3f3eE+P9/Z4X4/39/hAjw/2+FCPw3sc0fN/JJdjE98HowVTpklt2+7Wtm3btrdWatv4/2zUiGrbtm3eeeaeb3B2Zl+sIwc4aoCjBzhmgGMH+PAAHxngowN8bICPD/CJAT45wKcG+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLAX45wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D/CPAf45wL8G+PcA/xngvwP8b4BDAhwnwHEDHC/A8QOcIMAJAxwa4EQBDgtweIATBzhJgJMGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WICLB7hEgAS4ZIBLBbh0gMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyAJwR4YoAGeFKAJwd4SoCnBnhagKcHeEaAZwZ4VoBnB3hOgCMCPDfA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA2wK8PcA7AhwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Ad4Z4B3BXh3gPcEeG+A9wV4f4APBPhggA8FODLAUQGODnBMgGMDfDjARwJ8NMDHAnw8wCcCfDLApwJ8OsBnAnw2wOcCfD7AFwJ8McCXAnw5wFcCfDXA1wJ8PcA3AnwzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwL8NcDfAvw9wD8C/DPAvwL8O8B/Avw3wP+C8RwS4jghjhvieCGOH+IEIU4Y4tAQJwpxWIjDQ5w4xElCnDTEyUKcPMQpQpwyxKlCnDrEaUKcNsTpQpw+xBlCnDHEmUKcOcRZQpw1xNlCnD3EOUKcM8S5Qpw7xHlCnDfE+UKcP8QFQlwwxIVCXDjERUJcNMTFQlw8xCVCJMQlQ1wqxKVDXCbEZUNcLsTlQ1whxBVDXCnElUNcJcRVQ1wtxNVDXCPENUNcK8S1Q1wnxHVDXC/E9UPcIMQNQ9woxI1D3CTETUPcLMTNQ9wixC1D3CrErUPcJsRtQ9wuxO1D3CHEHUPcKcSdQ9wlxF1D3C3E3UPcI8Q9Q9wrxL1D3CfEfUPcL8T9QzwgxANDPCjEg0M8JMRDQzwsxMNDPCLEI0M8KsSjQzwmxGNDPC7E40M8IcQTQzTEk0I8OcRTQjw1xNNCPD3EM0I8M8SzQjw7xHNCHBHiuSGeF+L5IV4Q4oUhXhTixSFeEuKlIV4W4uUhXhHilSFeFeLVIV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4iDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsQ7Q7wrxLtDvCfEe0O8L8T7Q3wgxAdDfCjEkSGOCnF0iGNCHBviwyE+EuKjIT4W4uMhPhHikyE+FeLTIT4T4rMhPhfi8yG+EOKLIb4U4sshvhLiqyG+FuLrIb4R4pshvhXi2yG+E+K7Ib4X4vshfhDihyF+FOLHIX4S4qchfhbi5yF+EeKXIX4V4tchfhPityF+F+L3If4Q4o8h/hTizyH+EuKvIf4W4u8h/hHinyH+FeLfIf4T4r8h/hfikAjHiXDcCMeLcPwIJ4hwwgiHRjhRhMMiHB7hxBFOEuGkEU4W4eQRThHhlBFOFeHUEU4T4bQRThfh9BHOEOGMEc4U4cwRzhLhrBHOFuHsEc4R4ZwRzhXh3BHOE+G8Ec4X4fwRLhDhghEuFOHCES4S4aIRLhbh4hEuESERLhnhUhEuHeEyES4b4XIRLh/hChGuGOFKEa4c4SoRrhrhahGuHuEaEa4Z4VoRrh3hOhGuG+F6Ea4f4QYRbhjhRhFuHOEmEW4a4WYRbh7hFhFuGeFWEW4d4TYRbhvhdhFuH+EOEe4Y4U4R7hzhLhHuGuFuEe4e4R4R7hnhXhHuHeE+Ee4b4X4R7h/hAREeGOFBER4c4SERHhrhYREeHuERER4Z4VERHh3hMREeG+FxER4f4QkRnhihEZ4U4ckRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+GICM+N8LwIz4/wgggvjPCiCC+O8JIIL43wsggvj/CKCK+M8KoIr47wmgivjfC6CK+P8IYIb4zwpghvjvCWCG+N8LYIb4/wjggHEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2EfYR3hnhXRHeHeE9Ed4b4X0R3h/hAxE+GOFDEY6McFSEoyMcE+HYCB+O8JEIH43wsQgfj/CJCJ+M8KkIn47wmQifjfC5CJ+P8IUIX4zwpQhfjvCVCF+N8LUIX4/wjQjfjPCtCN+O8J0I343wvQjfj/CDCD+M8KMIP47wkwg/jfCzCD+P8IsIv4zwqwi/jvCbCL+N8LsIv4/whwh/jPCnCH+O8JcIf43wtwh/j/CPCP+M8K8I/47wnwj/jfC/CIfEOE6M48Y4XozjxzhBjBPGODTGiWIcFuPwGCeOcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhjnj3GBGBeMcaEYF45xkRgXjXGxGBePcYkYiXHJGJeKcekYl4lx2RiXi3H5GFeIccUYV4px5RhXiXHVGFeLcfUY14hxzRjXinHtGNeJcd0Y14tx/Rg3iHHDGDeKceMYNxl3yJD/cdssxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjNMaTYjw5xlNiPDXG02I8PcYzYjwzxrNiPDvGc2IcEeO5MZ4X4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2N8KMaRMY6KcXSMY2IcG+PDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQBMdJcNwEx0tw/AQnSHDCBIcmOFGCwxIcnuDECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6RIAkumeBSCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemKAJnpTgySOGe0qCpyZ4WoKnJ3hGgmcmeFaCZyd4ToIjEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxIcJBgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgneGeCdyV4d4L3JHhvgvcleH+CDyT4YIIPJTgywVEJjk5wTIJjE3w4wUcSfDTBxxJ8PMEnEnwywacSfDrBZxJ8NsHnEnw+wRcSfDHBlxJ8OcFXEnw1wdcSfD3BNxJ8M8G3Enw7wXcSfDfB9xJ8P8EPEvwwwY8S/DjBTxL8NMHPEvw8wS8S/DLBrxL8OsFvEvw2we8S/D7BHxL8McGfEvw5wV8S/DXB3xL8PcE/Evwzwb8S/DvBfxL8N8H/EhyS4jgpjpvieCmOn+IEKU6Y4tAUJ0pxWIrDU5w4xUlSnDTFyVKcPMUpUpwyxalSnDrFaVKcNsXpUpw+xRlSnDHFmVKcOcVZUpw1xdlSnD3FOVKcM8W5Upw7xXlSnDfF+VKcP8UFUlwwxYVSXDjFRVJcNMXFUlw8xSVSJMUlU1wqxaVTXCbFZVNcLsXlU1whxRVTXCnFlVNcJcVVU1wtxdVTXCPFNVNcK8W1U1wnxXVTXC/F9VPcIMUNU9woxY1T3CTFTVPcLMXNU9wixS1T3CrFrVPcJsVtU9wuxe1T3CHFHVPcKcWdU9wlxV1T3C3F3VPcI8U9U9wrxb1T3CfFfVPcL8X9UzwgxQNTPCjFg1M8JMVDUzwsxcNTPCLFI1M8KsWjUzwmxWNTPC7F41M8IcUTUzTFk1I8OcVTUjw1xdNSPD3FM1I8M8WzUjw7xXNSHJHiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsU7U7wrxbtTvCfFe1O8L8X7U3wgxQdTfCjFkSmOSnF0imNSHJviwyk+kuKjKT6W4uMpPpHikyk+leLTKT6T4rMpPpfi8ym+kOKLKb6U4sspvpLiqym+luLrKb6R4pspvpXi2ym+k+K7Kb6X4vspfpDihyl+lOLHKX6S4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4r8p/pfikAzHyXDcDMfLcPwMJ8hwwgyHZjhRhsMyHJ7hxBlOkuGkGU6W4eQZTpHhlBlOleHUGU6T4bQZTpfh9BnOkOGMGc6U4cwZzpLhrBnOluHsGc6R4ZwZzpXh3BnOk+G8Gc6X4fwZLpDhghkulOHCGS6S4aIZLpbh4hkukSEZLpnhUhkuneEyGS6b4XIZLp/hChmumOFKGa6c4SoZrprhahmunuEaGa6Z4VoZrp3hOhmum+F6Ga6f4QYZbpjhRhlunOEmGW6a4WYZbp7hFhlumeFWGW6d4TYZbpvhdhlun+EOGe6Y4U4Z7pzhLhnumuFuGe6e4R4Z7pnhXhnuneE+2f8CA/fLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nw2AyPy/D4DE/I8MQMzfCkDE/O8JQMT83wtAxPz/CMDM/M8KwMz87wnAxHZHhuhudleH6GF2R4YYYXZXhxhpdkeGmGl2V4eYZXZHhlhldleHWG12R4bYbXZXh9hjdkeGOGN2V4c4a3ZHhrhrdleHuGd2Q4yDDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8M4M78rw7gzvyfDeDO/L8P4MH8jwwQwfynBkhqMyHJ3hmAzHZvhwho9k+GiGj2X4eIZPZPhkhk9l+HSGz2T4bIbPZfh8hi9k+GKGL2X4coavZPhqhq9l+HqGb2T4ZoZvZfh2hu9k+G6G72X4foYfZPhhhh9l+HGGn2T4aYafZfh5hl9k+GWGX2X4dYbfZPhtht9l+H2GP2T4Y4Y/Zfhzhr9k+GuGv2X4e4Z/ZPhnhn9l+HeG/2T4b4b/ZTgkx3FyHDfH8XIcP8cJcpwwx6E5TpTjsByH5zhxjpPkOGmOk+U4eY5T5DhljlPlOHWO0+Q4bY7T5Th9jjPkOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCOi+S4aI6L5bh4jkvkSI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOa+a4Vo5r57hOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5miOJ+V4co6n5HhqjqfleHqOZ+R4Zo5n5Xh2jufkOCLHc3M8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjx0GOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY535nhXjnfneE+O9+Z4X4735/hAjg/m+FCOI3MclePoHMfkODbHh3N8JMdHc3wsx8dzfCLHJ3N8Ksenc3wmx2dzfC7H53N8IccXc3wpx5dzfCXHV3N8LcfXc3wjxzdzfCvHt3N8J8d3c3wvx/dz/CDHD3P8KMePc/wkx09z/CzHz3P8Iscvc/wqx69z/CbHb3P8Lsfvc/whxx9z/CnHn3P8Jcdfc/wtx99z/CPHP3P8K8e/c/wnx39z/C/HIQWOU+C4BY5X4PgFTlDghAUOLXCiAocVOLzAiQucpMBJC5yswMkLnKLAKQucqsCpC5ymwGkLnK7A6QucocAZC5ypwJkLnKXAWQucrcDZC5yjwDkLnKvAuQucp8B5C5yvwPkLXKDABQtcqMCFC1ykwEULXKzAxQtcokAKXLLApQpcusBlCly2wOUKXL7AFQpcscCVCly5wFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tsDjCjy+wBMKPLFACzypwJMLPKXAUws8rcDTCzyjwDMLPKvAsws8p8ARBZ5b4HkFnl/gBQVeWOBFBV5c4CUFXlrgZQVeXuAVBV5Z4FUFXl3gNQVeW+B1BV5f4A0F3ljgTQXeXOAtBd5a4G0F3l7gHQUOCgwKDAuMCowLTApMC8wKzAssCiwLhg4ZMsS6wKbAtsCuwL7AOwu8q8C7C7ynwHsLvK/A+wt8oMAHC3yowJEFjipwdIFjChxb4MMFPlLgowU+VuDjBT5R4JMFPlXg0wU+U+CzBT5X4PMFvlDgiwW+VODLBb5S4KsFvlbg6wW+UeCbBb5V4NsFvlPguwW+V+D7BX5Q4IcFflTgxwV+UuCnBX5W4OcFflHglwV+VeDXBX5T4LcFflfg9wX+UOCPBf5U4M8F/lLgrwX+VuDvBf5R4J8F/lXg3wX+U+C/Bf5X4JASxylx3BLHK3H8EicoccISh5Y4UYnDShxe4sQlTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbi7CXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlTiwiUuUuKiJS5W4uIlLlEiJS5Z4lIlLl3iMiUuW+JyJS5f4golrljiSiWuXOIqJa5a4molrl7iGiWuWeJaJa5d4jolrlvieiWuX+IGJW5Y4kYlblziJiVuWuJmJW5e4hYlblniViVuXeI2JW5b4nYlbl/iDiXuWOJOJe5c4i4l7lribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5d4jElHlvicSUeX+IJJZ5YoiWeVOLJJZ5S4qklnlbi6SWeUeKZJZ5V4tklnlPiiBLPLfG8Es8v8YISLyzxohIvLvGSEi8t8bISLy/xihKvLPGqEq8u8ZoSry3xuhKvL/GGEm8s8aYSby7xlhJvLfG2Em8v8Y4SByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2Jd5Z4l0l3l3iPSXeW+J9Jd5f4gMlPljiQyWOLHFUiaNLHFPi2BIfLvGREh8t8bESHy/xiRKfLPGpEp8u8ZkSny3xuRKfL/GFEl8s8aUSXy7xlRJfLfG1El8fNuT/V+JbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+J/JQ6pcJwKx61wvArHr3CCCiescGiFE1U4rMLhFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVUuGSFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFVrhSRWeXOEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVjqjw3ArPq/D8Ci+o8MIKL6rw4govqfDSCi+r8PIKr6jwygqvqvDqCq+p8NoKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+ocFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+GdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVPlThyApHVTi6wjEVjq3w4QofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKn6vw+QpfqPDFCl+q8OUKX6nw1Qpfq/D1Ct+o8M0K36rw7QrfqfDdCt+r8P0KP6jwwwo/qvDjCj+p8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8K/6twSI3j1DhujePVOH6NE9Q4YY1Da5yoxmE1Dq9x4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqJEal6xxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zRGk+q8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqXFEjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R42DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsa76zxrhrvrvGeGu+t8b4a76/xgRofrPGhGkfWOKrG0TWOqXFsjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1vhcjc/X+EKNL9b4Uo0v1/hKja/W+FqNr9f4Ro1v1vhWjW/X+E6N79b4Xo3v1/hBjR/W+FGNH9f4SY2f1vhZjZ/X+EWNX9b4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1/hHjX/W+FeNf9f4T43/1vhfjUMaHKfBcRscr8HxG5ygwQkbHNrgRA0Oa3B4gxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDNLhkg0s1uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigzZ4UoMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6DIxo8t8HzGjy/wQsavLDBixq8uMFLGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsaHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3hng3c1eHeD9zR4b4P3NXh/gw80+GCDDzU4ssFRDY5ucEyDYxt8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbB5xp8vsEXGnyxwZcafLnBVxp8tcHXGny9wTcafLPBtxp8u8F3Gny3wfcafL/BDxr8sMGPGvy4wU8a/LTBzxr8vMEvGvyywa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BPxr8s8G/Gvy7wX8a/LfB/xoc0uI4LY7b4ngtjt/iBC1O2OLQFidqcViLw1ucuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWqTFJVtcqsWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1u0xZNaPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWhzR4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7FO1u8q8W7W7ynxXtbvK/F+1t8oMUHW3yoxZEtjmpxdItjWhzb4sMtPtLioy0+1uLjLT7R4pMtPtX+vy/PtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi//970+H43Q4bofjdTh+hxN0OGGHQzucqMNhHQ7vcOIOJ+lw0g4n63DyDqfocMoOp+pw6g6n6XDaDqfrcPoOZ+hwxg5n6nDmDmfpcNYOZ+tw9g7n6HDODufqcO4O5+lw3g7n63D+DhfocMEOF+pw4Q4X6XDRDhfrcPEOl+iQDpfscKkOl+5wmQ6X7XC5DpfvcIUOV+xwpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s0A5P6vDkDk/p8NQOT+vw9A7P6PDMDs/q8OwOz+lwRIfndnheh+d3eEGHF3Z4UYcXd3hJh5d2eFmHl3d4RYdXdnhVh1d3eE2H13Z4XYfXd3hDhzd2eFOHN3d4S4e3dnhbh7d3eEeHgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Du/s8K4O7+7wng7v7fC+Du/v8IEOH+zwoQ5Hdjiqw9EdjulwbIcPd/hIh492+FiHj3f4RIdPdvhUh093+EyHz3b4XIfPd/hChy92+FKHL3f4Soevdvhah693+EaHb3b4Vodvd/hOh+92+F6H73f4QYcfdvhRhx93+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHv3f4R4d/dvhXh393+E+H/3b4X4dDehynx3F7HK/H8XucoMcJexza40Q9DutxeI8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj/S4ZI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo/2eFKPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOjyN6PLfH83o8v8cLerywx4t6vLjHS3q8tMfLery8xyt6vLLHq3q8usdrery2x+t6vL7HG3q8scebery5x1t6vLXH23q8vcc7ehz0GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pd4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1OLLHUT2O7nFMj2P7/2PRntv4LgAFim/VqmXbdp1s27Zt+2Tbtu39vjaybSzbWLW2+9zn3vMezn8f7Af45ACfGuDTA3xmgM8O8LkBPj/AFwb44gBfGuDLA3xlgK8O8LUBvj7ANwb45gDfGuDbA3xngO8O8L0Bvj/ADwb44QA/GuDHA/xkgCMH+OkAPxvg5wP8YoBfDvCrAX49wG8G+O0Avxvg9wP8YYA/DvCnAf48wF8G+OsAfxvg7wP8Y4B/DvCvAY4a4N8D/GeA/w5w9AD/G+CYAY4d4JAAhwY4ToDjBjhegMMCHD/ACQKcMMDhAU4U4MQBThLgpAFOFuDkAU4R4JQBThXg1AFOE+C0AU4X4PQBzhDgjAHOFODMAc4S4KwBzhbg7AHOEeCcAc4V4NwBzhPgvAHOF+D8AS4Q4IIBLhTgwgEuEuCiAS4W4OIBLhEgAS4Z4FIBLh3gMgEuG+ByAS4f4AoBrhjgSgGuHOAqAa4a4GoBrh7gGgGuGeBaAa4d4DoBrhvgegGuH+AGAW4Y4EYBbhzgJgFuGuBmAW4e4BYBbhngVgFuHeA2AW4b4HYBbh/gDgHuGOBOAe4c4C4B7hrgbgHuHuAeAe4Z4F4B7h3gPgHuG+B+Ae4f4AEBHhjgQQEeHOAhAR4a4GEBHh7gEQEeGeBRAR4d4DEBHhvgcQEeH+AJAZ4YoAGeFODJAZ4S4KkBnhbg6QGeEeCZAZ4V4NkBnhPguQGeF+D5AV4Q4IUBXhTgxQFeEuClAV4W4OUBXhHglQFeFeDVAV4T4LUBXhfg9QHeEOCNAd4U4M0B3hLgrQHeFuDtAd4R4J0B3hXg3QHeE+C9Ad4X4P0BPhDggwE+FODDAT4S4KMBPhbg4wE+EeCIAAcBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB9gE+GeBTAT4d4DMBPhvgcwE+H+ALAb4Y4EsBvhzgKwG+GuBrAb4e4BsBvhngWwG+HeA7Ab4b4HsBvh/gBwF+GOBHAX4c4CcBjgzw0wA/C/DzAL8I8MsAvwrw6wC/CfDbAL8L8PsAfwjwxwB/CvDnAH8J8NcAfwvw9wD/CPDPAP8KcFSAfwf4T4D/Bjg6wP8CHBPg2ACHhDg0xHFCHDfE8UIcFuL4IU4Q4oQhDg9xohAnDnGSECcNcbIQJw9xihCnDHGqEKcOcZoQpw1xuhCnD3GGEGcMcaYQZw5xlhBnDXG2EGcPcY4Q5wxxrhDnDnGeEOcNcb4Q5w9xgRAXDHGhEBcOcZEQFw1xsRAXD3GJEAlxyRCXCnHpEJcJcdkQlwtx+RBXCHHFEFcKceUQVwlx1RBXC3H1ENcIcc0Q1wpx7RDXCXHdENcLcf0QNwhxwxA3CnHjEDcJcdMQNwtx8xC3CHHLELcKcesQtwlx2xC3C3H7EHcIcccQdwpx5xB3CXHXEHcLcfcQ9whxzxD3CnHvEPcJcd8Q9wtx/xAPCPHAEA8K8eAQDwnx0BAPC/HwEI8I8cgQjwrx6BCPCfHYEI8L8fgQTwjxxBAN8aQQTw7xlBBPDfG0EE8P8YwQzwzxrBDPDvGcEM8N8bwQzw/xghAvDPGiEC8O8ZIQLw3xshAvD/GKEK8M8aoQrw7xmhCvDfG6EK8P8YYQbwzxphBvDvGWEG8N8bYQbw/xjhDvDPGuEO8O8Z4Q7w3xvhDvD/GBEB8M8aEQHw7xkRAfDfGxEB8P8YkQR4Q4CDEIMQwxCjEOMQkxDTELMQ+xCLEMsQqxDrEJsQ2xC7EP8ckQnwrx6RCfCfHZEJ8L8fkQXwjxxRBfCvHlEF8J8dUQXwvx9RDfCPHNEN8K8e0Q3wnx3RDfC/H9ED8I8cMQPwrx4xA/CXFkiJ+G+FmIn4f4RYhfhvhViF+H+E2I34b4XYjfh/hDiD+G+FOIP4f4S4i/hvhbiL+H+EeIf4b4V4ijQvw7xH9C/DfE0SH+F+KYEMeGOCTCoRGOE+G4EY4X4bAIx49wgggnjHB4hBNFOHGEk0Q4aYSTRTh5hFNEOGWEU0U4dYTTRDhthNNFOH2EM0Q4Y4QzRThzhLNEOGuEs0U4e4RzRDhnhHNFOHeE80Q4b4TzRTh/hAtEuGCEC0W4cISLRLhohItFuHiES0RIhEtGuFSES0e4TITLRrhchMtHuEKEK0a4UoQrR7hKhKtGuFqEq0e4RoRrRrhWhGtHuM6w/zcbEa4f4QYRbhjhRhFuHOEmEW4a4WYRbh7hFhFuGeFWEW4d4TYRbhvhdhFuH+EOEe4Y4U4R7hzhLhHuGuFuEe4e4R4R7hnhXhHuHeE+Ee4b4X4R7h/hAREeGOFBER4c4SERHhrhYREeHuERER4Z4VERHh3hMREeG+FxER4f4QkRnhihEZ4U4ckRnhLhqRGeFuHpEZ4R4ZkRnhXh2RGeE+G5EZ4X4fkRXhDhhRFeFOHFEV4S4aURXhbh5RFeEeGVEV4V4dURXhPhtRFeF+H1Ed4Q4Y0R3hThzRHeEuGtEd4W4e0R3hHhnRHeFeHdEd4T4b0R3hfh/RE+EOGDET4U4cMRPhLhoxE+FuHjET4R4YgIBxEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2ET4Z4VMRPh3hMxE+G+FzET4f4QsRvhjhSxG+HOErEb4a4WsRvh7hGxG+GeFbEb4d4TsRvhvhexG+H+EHEX4Y4UcRfhzhJxGOjPDTCD+L8PMIv4jwywi/ivDrCL+J8NsIv4vw+wh/iPDHCH+K8OcIf4nw1wh/i/D3CP+I8M8I/4pwVIR/R/hPhP9GODrC/yIcE+HYCIfEODTGcWIcN8bxYhwW4/gxo8b+Xw6PcaIYJ45xkhgnjXGyGCePcYoYp4xxqhinjnGaGKeNcboYp49xhhhnjHGmGGeOcZYYZ41xthhnj3GOGOeMca4Y545xnhjnjXG+GOePcYEYF4xxoRgXjnGRGBeNcbEYF49xiRiJcckYl4px6RiXiXHZGJeLcfkYV4hxxRhXinHlGFeJcdUYV4tx9RjXiHHNGNeKce0Y14lx3RjXi3H9GDeIccMYN4px4xg3iXHTGDeLcfMYt4hxyxi3inHrGLeJcdsYt4tx+xh3iHHHGHeKcecYd4lx1xh3i3H3GPeIcc8Y94px7xj3iXHfGPeLcf8YD4jxwBgPivHgGA+J8dAYD4vx8BiPiPHIGI+K8egYj4nx2BiPi/H4GE+I8cQYjfGkGE+O8ZQYT43xtBhPj/GMGM+M8awYz47xnBjPjfG8GM+P8YIYL4zxohgvjvGSGC+N8bIYL4/xihivjPGqGK+O8ZoYr43xuhivj/GGGG+M8aYYb47xlhhvjfG2GG+P8Y4Y74zxrhjvjvGeGO+N8b4Y74/xgRgfjPGhGB+O8ZEYH43xsRgfj/GJGEfEOIgxiDGMMYoxjjGJMY0xizGPsYixjLGKsY6xibGNsYuxj/HJGJ+K8ekYn4nx2Rifi/H5GF+I8cUYX4rx5RhfifHVGF+L8fUY34jxzRjfivHtGN+J8d0Y34vx/Rg/iPHDGD+K8eMYP4lxZIyfxvhZjJ/H+EWMX8b4VYxfx/hNjN/G+F2M38f4Q4w/xvhTjD/H+EuMv8b4W4y/x/hHjH/G+FeMo2L8O8Z/Yvw3xtEx/hfjmBjHxjgkwaEJjpPguAmOl+CwBMdPcIIEJ0xweIITJThxgpMkOGmCkyU4eYJTJDhlglMlOHWC0yQ4bYLTJTh9gjMkOGOCMyU4c4KzJDhrgrMlOHuCcyQ4Z4JzJTh3gvMkOG+C8yU4f4ILJLhgggsluHCCiyS4aIKLJbh4gkskSIJLJrhUgksnuEyCyya4XILLJ7hCgismuFKCKye4SoKrJrhagqsnuEaCaya4VoJrJ7hOgusmuF6C6ye4QYIbJrhRghsnuEmCmya4WYKbJ7hFglsmuFWCWye4TYLbJrhdgtsnuEOCOya4U4I7J7hLgrsmuFuCuye4R4J7JrhXgnsnuE+C+ya4X4L7J3hAggcmeFCCByd4SIKHJnhYgocneESCRyZ4VIJHJ3hMgscmeFyCxyd4QoInJmiCJyV4coKnJHhqgqcleHqCZyR4ZoJnJXh2guckeG6C5yV4foIXJHhhghcleHGClyR4aYKXJXh5glckeGWCVyV4dYLXJHhtgtcleH2CNyR4Y4I3JXhzgrckeGuCtyV4e4J3JHhngncleHeC9yR4b4L3JXh/gg8k+GCCDyX4cIKPJPhogo8l+HiCTyQ4IsFBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn2CTyb4VIJPJ/hMgs8m+FyCzyf4QoIvJvhSgi8n+EqCryb4WoKvJ/hGgm8m+FaCbyf4ToLvJvhegu8n+EGCHyb4UYIfJ/hJgiMT/DTBzxL8PMEvEvwywa8S/DrBbxL8NsHvEvw+wR8S/DHBnxL8OcFfEvw1wd8S/D3BPxL8M8G/EhyV4N8J/pPgvwmOTvC/BMckODbBISkOTXGcFMdNcbwUh6U4fooTpDhhisNTnCjFiVOcJMVJU5wsxclTnCLFKVOcKsWpU5wmxWlTnC7F6VOcIcUZU5wpxZlTnCXFWVOcLcXZU5wjxTlTnCvFuVOcJ8V5U5wvxflTXCDFBVNcKMWFU1wkxUVTXCzFxVNcIkVSXDLFpVJcOsVlUlw2xeVSXD7FFVJcMcWVUlw5xVVSXDXF1VJcPcU1UlwzxbVSXDvFdVJcN8X1Ulw/xQ1S3DDFjVLcOMVNUtw0xc1S3DzFLVLcMsWtUtw6xW1S3DbF7VLcPsUdUtwxxZ1S3DnFXVLcNcXdUtw9xT1S3DPFvVLcO8V9Utw3xf1S3D/FA1I8MMWDUjw4xUNSPDTFw1I8PMUjUjwyxaNSPDrFY1I8NsXjUjw+xRNSPDFFUzwpxZNTPCXFU1M8LcXTUzwjxTNTPCvFs1M8J8VzUzwvxfNTvCDFC1O8KMWLU7wkxUtTvCzFy1O8IsUrU7wqxatTvCbFa1O8LsXrU7whxRtTvCnFm1O8JcVbU7wtxdtTvCPFO1O8K8W7U7wnxXtTvC/F+1N8IMUHU3woxYdTfCTFR1N8LMXHU3wixREpDlIMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsU3wyxadSfDrFZ1J8NsXnUnw+xRdSfDHFl1J8OcVXUnw1xddSfD3FN1J8M8W3Unw7xXdSfDfF91J8P8UPUvwwxY9S/DjFT1IcmeKnKX6W4ucpfpHilyl+leLXKX6T4rcpfpfi9yn+kOKPKf6U4s8p/pLiryn+luLvKf6R4p8p/pXiqBT/TvGfFP9NcXSK/6U4JsWxKQ7JcGiG42Q4bobjZTgsw/EznCDDCTMcnuFEGU6c4SQZTprhZBlOnuEUGU6Z4VQZTp3hNBlOm+F0GU6f4QwZzpjhTBnOnOEsGc6a4WwZzp7hHBnOmeFcGc6d4TwZzpvhfBnOn+ECGS6Y4UIZLpzhIhkumuFiGS6e4RIZkuGSGS6V4dIZLpPhshkul+HyGa6Q4YoZrpThyhmukuGqGa6W4eoZrpHhmhmuleHaGa6T4boZrpfh+hlukOGGGW6U4cYZbpLhphluluHmGW6R4ZYZbpXh1hluk+G2GW6X4fYZ7pDhjhnulOHOGe6S4a4Z7pbh7hnukeGeGe6V4d4Z7pPhvhnul+H+GR6Q4YEZHpThwRkekuGhGR6W4eEZHpHhkRkeleHRGR6T4bEZHpfh8RmekOGJGZrhSRmenOEpGZ6a4WkZnp7hGRmemeFZGZ6d4TkZnpvheRmen+EFGV6Y4UUZXpzhJRlemuFlGV6e4RUZXpnhVRleneE1GV6b4XUZXp/hDRnemOFNGd6c4S0Z3prhbRnenuEdGd6Z4V0Z3p3hPRnem+F9Gd6f4QMZPpjhQxk+nOEjGT6a4WMZPp7hExmOyHCQYZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ/hkxk+leHTGT6T4bMZPpfh8xm+kOGLGb6U4csZvpLhqxm+luHrGb6R4ZsZvpXh2xm+k+G7Gb6X4fsZfpDhhxl+lOHHGX6S4cgMP83wsww/z/CLDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwz/zPCvDEdl+HeG/2T4b4ajM/wvwzEZjs1wSI5Dcxwnx3FzHC/HYTmOn+MEOU6Y4/AcJ8px4hwnyXHSHCfLcfIcp8hxyhynynHqHKfJcdocp8tx+hxnyHHGHGfKceYcZ8lx1hxny3H2HOfIcc4c58px7hznyXHeHOfLcf4cF8hxwRwXynHhHBfJcdEcF8tx8RyXyJEcl8xxqRyXznGZHJfNcbkcl89xhRxXzHGlHFfOcZUcV81xtRxXz3GNHNfMca0c185xnRzXzXG9HNfPcYMcN8xxoxw3znGTHDfNcbMcN89xixy3zHGrHLfOcZsct81xuxy3z3GHHHfMcaccd85xlxx3zXG3HHfPcY8c98xxrxz3znGfHPfNcb8c98/xgBwPzPGgHA/O8ZAcD83xsBwPz/GIHI/M8agcj87xmByPzfG4HI/P8YQcT8zRHE/K8eQcT8nx1BxPy/H0HM/I8cwcz8rx7BzPyfHcHM/L8fwcL8jxwhwvyvHiHC/J8dIcL8vx8hyvyPHKHK/K8eocr8nx2hyvy/H6HG/I8cYcb8rx5hxvyfHWHG/L8fYc78jxzhzvyvHuHO/J8d4c78vx/hwfyPHBHB/K8eEcH8nx0Rwfy/HxHJ/IcUSOgxyDHMMcoxzjHJMc0xyzHPMcixzLHKsc6xybHNscuxz74UOG/O8TT+X4dI7P5Phsjs/l+HyOL+T4Yo4v5fhyjq/k+GqOr+X4eo5v5Phmjm/l+HaO7+T4bo7v5fh+jh/k+GGOH+X4cY6f5Dgyx09z/CzHz3P8Iscvc/wqx69z/CbHb3P8Lsfvc/whxx9z/CnHn3P8Jcdfc/wtx99z/CPHP3P8K8dROf6d4z85/pvj6Bz/y3FMjmNzHFLg0ALHKXDcAscrcFiB4xc4QYETFji8wIkKnLjASQqctMDJCpy8wCkKnLLAqQqcusBpCpy2wOkKnL7AGQqcscCZCpy5wFkKnLXA2QqcvcA5CpyzwLkKnLvAeQqct8D5Cpy/wAUKXLDAhQpcuMBFCly0wMUKXLzAJQqkwCULXKrApQtcpsBlC1yuwOULXKHAFQtcqcCVC1ylwFULXK3A1Qtco8A1C1yrwLULXKfAdQtcr8D1C9ygwA0L3KjAjQvcpMBNC9yswM0L3KLALQvcqsCtC9ymwG0L3K7A7QvcocAdC9ypwJ0L3KXAXQvcrcDdC9yjwD0L3KvAvQvcp8B9C9yvwP0LPKDAAws8qMCDCzykwEMLPKzAwws8osAjCzyqwKMLPKbAYws8rsDjCzyhwBMLtMCTCjy5wFMKPLXA0wo8vcAzCjyzwLMKPLvAcwo8t8DzCjy/wAsKvLDAiwq8uMBLCry0wMsKvLzAKwq8ssCrCry6wGsKvLbA6wq8vsAbCryxwJsKvLnAWwq8tcDbCry9wDsKvLPAuwq8u8B7Cry3wPsKvL/ABwp8sMCHCny4wEcKfLTAxwp8vMAnChxR4KDAoMCwwKjAuMCkwLTArMC8wKLAssCqwLrApsC2wK7AvsAnC3yqwKcLfKbAZwt8rsDnC3yhwBcLfKnAlwt8pcBXC3ytwNcLfKPANwt8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTAkQV+WuBnBX5e4BcFflngVwV+XeA3BX5b4HcFfl/gDwX+WOBPBf5c4C8F/lrgbwX+XuAfBf5Z4F8Fjirw7wL/KfDfAkcX+F+BYwocW+CQEoeWOE6J45Y4XonDShy/xAlKnLDE4SVOVOLEJU5S4qQlTlbi5CVOUeKUJU5V4tQlTlPitCVOV+L0Jc5Q4owlzlTizCXOUuKsJc5W4uwlzlHinCXOVeLcJc5T4rwlzlfi/CUuUOKCJS5U4sIlLlLioiUuVuLiJS5RIiUuWeJSJS5d4jIlLlviciUuX+IKJa5Y4kolrlziKiWuWuJqJa5e4holrlniWiWuXeI6Ja5b4nolrl/iBiVuWOJGJW5c4iYlblriZiVuXuIWJW5Z4lYlbl3iNiVuW+J2JW5f4g4l7ljiTiXuXOIuJe5a4m4l7l7iHiXuWeJeJe5d4j4l7lvifiXuX+IBJR5Y4kElHlziISUeWuJhJR5e4hElHlniUSUeXeIxJR5b4nElHl/iCSWeWKIlnlTiySWeUuKpJZ5W4uklnlHimSWeVeLZJZ5T4rklnlfi+SVeUOKFJV5U4sUlXlLipSVeVuLlJV5R4pUlXlXi1SVeU+K1JV5X4vUl3lDijSXeVOLNJd5S4q0l3lbi7SXeUeKdJd5V4t0l3lPivSXeV+L9JT5Q4oMlPlTiwyU+UuKjJT5W4uMlPlHiiBIHJQYlhiVGJcYlJiWmJWYl5iUWJZYlViXWJTYltiV2JfYlPlniUyU+XeIzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuIbJb5Z4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJY4s8dMSPyvx8xK/KPHLEr8q8esSvynx2xK/K/H7En8o8ccSfyrx5xJ/KfHXEn8r8fcS/yjxzxL/KnFUiX+X+E+J/5Y4usT/ShxT4tgSh1Q4tMJxKhy3wvEqHFbh+BVOUOGEFQ6vcKIKJ65wkgonrXCyCievcIoKp6xwqgqnrnCaCqetcLoKp69whgpnrHCmCmeucJYKZ61wtgpnr3COCuescK4K565wngrnrXC+CuevcIEKF6xwoQoXrnCRChetcLEKF69wiQqpcMkKl6pw6QqXqXDZCpercPkKV6hwxQpXqnDlClepcNUKV6tw9QrXqHDNCteqcO0K16lw3QrXq3D9CjeocMMKN6pw4wo3qXDTCjercPMKt6hwywq3qnDrCrepcNsKt6tw+wp3qHDHCneqcOcKd6lw1wp3q3D3CveocM8K96pw7wr3qXDfCvercP8KD6jwwAoPqvDgCg+p8NAKD6vw8AqPqPDICo+qGDliyBCPqfDYCo+r8PgKT6jwxAqt8KQKT67wlApPrfC0Ck+v8IwKz6zwrArPrvCcCs+t8LwKz6/wggovrPCiCi+u8JIKL63wsgovr/CKCq+s8KoKr67wmgqvrfC6Cq+v8IYKb6zwpgpvrvCWCm+t8LYKb6/wjgrvrPCuCu+u8J4K763wvgrvr/CBCh+s8KEKH67wkQofrfCxCh+v8IkKR1Q4qDCoMKwwqjCuMKkwrTCrMK+wqLCssKqwrrCpsK2wq7Cv8MkKn6rw6QqfqfDZCp+r8PkKX6jwxQpfqvDlCl+p8NUKX6vw9QrfqPDNCt+q8O0K36nw3Qrfq/D9Cj+o8MMKP6rw4wo/qXBkhZ9W+FmFn1f4RYVfVvhVhV9X+E2F31b4XYXfV/hDhT9W+FOFP1f4S4W/Vvhbhb9X+EeFf1b4V4WjKvy7wn8q/LfC0RX+V+GYCsdWOKTGoTWOU+O4NY5X47Aax69xghonrHF4jRPVOHGNk9Q4aY2T1Th5jVPUOGWNU9U4dY3T1DhtjdPVOH2NM9Q4Y40z1ThzjbPUOGuNs9U4e41z1DhnjXPVOHeN89Q4b43z1Th/jQvUuGCNC9W4cI2L1LhojYvVuHiNS9RIjUvWuFSNS9e4TI3L1rhcjcvXuEKNK9a4Uo0r17hKjavWuFqNq9e4Ro1r1rhWjWvXuE6N69a4Xo3r17hBjRvWuFGNG9e4SY2b1rhZjZvXuEWNW9a4VY1b17hNjdvWuF2N29e4Q4071rhTjTvXuEuNu9a4W42717hHjXvWuFeNe9e4T4371rhfjfvXeECNB9Z4UI0H13hIjYfWeFiNh9d4RI1H1nhUjUfXeEyNx9Z4XI3H13hCjSfWaI0n1XhyjafUeGqNp9V4eo1n1HhmjWfVeHaN59R4bo3n1Xh+jRfUeGGNF9V4cY2X1HhpjZfVeHmNV9R4ZY1X1Xh1jdfUeG2N19V4fY031HhjjTfVeHONt9R4a4231Xh7jXfUeGeNd9V4d4331HhvjffVeH+ND9T4YI0P1fhwjY/U+GiNj9X4eI1P1DiixkGNQY1hjVGNcY1JjWmNWY15jUWNZY1VjXWNTY1tjV2NfY1P1vhUjU/X+EyNz9b4XI3P1/hCjS/W+FKNL9f4So2v1vhaja/X+EaNb9b4Vo1v1/hOje/W+F6N79f4QY0f1vhRjR/X+EmNI2v8tMbPavy8xi9q/LLGr2r8usZvavy2xu9q/L7GH2r8scafavy5xl9q/LXG32r8vcY/avyzxr9qHFXj3zX+U+O/NY6u8b8ax9Q4tsYhDQ5tcJwGx21wvAaHNTh+gxM0OGGDwxucqMGJG5ykwUkbnKzByRucosEpG5yqwakbnKbBaRucrsHpG5yhwRkbnKnBmRucpcFZG5ytwdkbnKPBORucq8G5G5ynwXkbnK/B+RtcoMEFG1yowYUbXKTBRRtcrMHFG1yiQRpcssGlGly6wWUaXLbB5RpcvsEVGlyxwZUaXLnBVRpctcHVGly9wTUaXLPBtRpcu8F1Gly3wfUaXL/BDRrcsMGNGty4wU0a3LTBzRrcvMEtGtyywa0a3LrBbRrctsHtGty+wR0a3LHBnRrcucFdGty1wd0a3L3BPRrcs8G9Gty7wX0a3LfB/Rrcv8EDGjywwYMaPLjBQxo8tMHDGjy8wSMaPLLBoxo8usFjGjy2weMaPL7BExo8sUEbPKnBkxs8pcFTGzytwdMbPKPBMxs8q8GzGzynwXMbPK/B8xu8oMELG7yowYsbvKTBSxu8rMHLG7yiwSsbvKrBqxu8psFrG7yuwesbvKHBGxu8qcGbG7ylwVsbvK3B2xu8o8E7G7yrwbsbvKfBexu8r8H7G3ygwQcbfKjBhxt8pMFHG3yswccbfKLBEQ0OGgwaDBuMGowbTBpMG8wazBssGiwbrBqsG2wabBvsGuwbfLLBpxp8usFnGny2wecafL7BFxp8scGXGny5wVcafLXB1xp8vcE3GnyzwbcafLvBdxp8t8H3Gny/wQ8a/LDBjxr8uMFPGhzZ4KcNftbg5w1+0eCXDX7V4NcNftPgtw1+1+D3Df7Q4I8N/tTgzw3+0uCvDf7W4O8N/tHgnw3+1eCoBv9u8J8G/21wdIP/NTimwbENDmlxaIvjtDhui+O1OKzF8VucoMUJWxze4kQtTtziJC1O2uJkLU7e4hQtTtniVC1O3eI0LU7b4nQtTt/iDC3O2OJMLc7c4iwtztribC3O3uIcLc7Z4lwtzt3iPC3O2+J8Lc7f4gItLtjiQi0u3OIiLS7a4mItLt7iEi3S4pItLjV6qEu3uEyLy7a4XIvLt7hCiyu2uFKLK7e4Sourtrhai6u3uEaLa7a4Votrt7hOi+u2uF6L67e4QYsbtrhRixu3uEmLm7a4WYubt7hFi1u2uFWLW7e4TYvbtrhdi9u3uEOLO7a4U4s7t7hLi7u2uFuLu7e4R4t7trhXi3u3uE+L+7a4X4v7t3hAiwe2eFCLB7d4SIuHtnhYi4e3eESLR7Z4VItHt3hMi8e2eFyLx7d4QosntmiLJ7V4countHhqi6e1eHqLZ7R4ZotntXh2i+e0eG6L57V4fosXtHhhixe1eHGLl7R4aYuXtXh5i1e0eGWLV7V4dYvXtHhti9e1eH2LN7R4Y4s3tXhzi7e0eGuLt7V4e4t3tHhni3e1eHeL97R4b4v3tXh/iw+0+GCLD7X4cIuPtPhoi4+1+HiLT7Q4osVBi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32LT7b4VItPt/hMi8+2+FyLz7f4QosvtvhSiy+3+EqLr7b4Wouvt/hGi2+2+FaLb7f4Tovvtvhei++3+EGLH7b4UYsft/hJiyNb/LTFz1r8vMUvWvyyxa9a/LrFb1r8tsXvWvy+xR9a/LHFn1r8ucVfWvy1xd9a/L3FP1r8s8W/WhzV4t8t/tPivy2ObvG/Fse0OLbFIR0O7XCcDsftcLwOh3U4focTdDhhh8M7nKjDiTucpMNJO5ysw8k7nKLDKTucqsOpO5ymw2k7nK7D6TucocMZO5ypw5k7nKXDWTucrcPZO5yjwzk7nKvDuTucp8N5O5yvw/k7XKDDBTtcqMOFO1ykw0U7XKzDxTtcokM6XLLDpTpcusNlOly2w+U6XL7DFTpcscOVOly5w1U6XLXD1TpcvcM1Olyzw7U6XLvDdTpct8P1Oly/ww063LDDjTrcuMNNOty0w8063LzDLTrcssOtOty6w2063LbD7TrcvsMdOtyxw5063LnDXTrctcPdOty9wz063LPDvTrcu8N9Oty3w/063L/DAzo8sMODOjy4w0M6PLTDwzo8vMMjOjyyw6M6PLrDYzo8tsPjOjy+wxM6PLFDOzypw5M7PKXDUzs8rcPTOzyjwzM7PKvDszs8p8NzOzyvw/M7vKDDCzu8qMOLO7ykw0s7vKzDyzu8osMrO7yqw6s7vKbDazu8rsPrO7yhwxs7vKnDmzu8pcNbO7ytw9s7vKPDOzu8q8O7O7ynw3s7vK/D+zt8oMMHO3yow4c7fKTDRzt8rMPHO3yiwxEdDjoMOgw7jDqMO0w6TDvMOsw7LDosO6w6rDtsOmw77DrsO3yyw6c6fLrDZzp8tsPnOny+wxc6fLHDlzp8ucNXOny1w9c6fL3DNzp8s8O3Ony7w3c6fLfD9zp8v8MPOvyww486/LjDTzoc2eGnHX7W4ecdftHhlx1+1eHXHX7T4bcdftfh9x3+0OGPHf7U4c8d/tLhrx3+1uHvHf7R4Z8d/tXhqA7/7vCfDv/tcHSH/3U4psOxHQ7pcWiP4/Q4bo/j9Tisx/F7nKDHCXsc3uNEPU7c4yQ9TtrjZD1O3uMUPU7Z41Q9Tt3jND1O2+N0PU7f4ww9ztjjTD3O3OMsPc7a42w9zt7jHD3O2eNcPc7d4zw9ztvjfD3O3+MCPS7Y40I9LtzjIj0u2uNiPS7e4xI90uOSPS7V49I9LtPjsj0u1+PyPa7Q44o9rtTjyj2u0uOqPa7W4+o9rtHjmj2u1ePaPa7T47o9rtfj+j1u0OOGPW7U48Y9btLjpj1u1uPmPW7R45Y9btXj1j1u0+O2PW7X4/Y97tDjjj3u1OPOPe7S46497tbj7j3u0eOePe7V49497tPjvj3u1+P+PR7Q44E9HtTjwT0e0uOhPR7W4+E9HtHjkT0e1ePRPR7T47E9Htfj8T2e0OOJPdrjST2e3OMpPZ7a42k9nt7jGT2e2eNZPZ7d4zk9ntvjeT2e3+MFPV7Y40U9XtzjJT1e2uNlPV7e4xU9XtnjVT1e3eM1PV7b43U9Xt/jDT3e2ONNPd7c4y093trjbT3e3uMdPd7Z41093t3jPT3e2+N9Pd7f4wM9PtjjQz0+3OMjPT7a42M9Pt7jEz2O6HHQ4/8EAAD//1R32m0=") 382.332086ms ago: executing program 1 (id=420): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(0x3) r0 = syz_io_uring_setup(0x8d6, &(0x7f00000001c0)={0x0, 0xd52f, 0x800, 0x0, 0x378}, &(0x7f0000000040)=0x0, &(0x7f00000017c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 0s ago: executing program 1 (id=421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) kernel console output (not intermixed with test programs): : Not using interface batadv_slave_0 (retrying later): interface not active [ 89.645507][ T5082] Bluetooth: hci0: command tx timeout [ 89.654708][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.706410][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.713521][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.740511][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.792823][ T5766] team0: Port device team_slave_0 added [ 89.805820][ T5082] Bluetooth: hci2: command tx timeout [ 89.806193][ T5769] Bluetooth: hci1: command tx timeout [ 89.824496][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.832020][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.858443][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.871292][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.878534][ T5769] Bluetooth: hci3: command tx timeout [ 89.884328][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.910699][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.924088][ T5766] team0: Port device team_slave_1 added [ 90.014658][ T5768] hsr_slave_0: entered promiscuous mode [ 90.022556][ T5768] hsr_slave_1: entered promiscuous mode [ 90.029398][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.037972][ T5768] Cannot create hsr debugfs directory [ 90.045152][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.058775][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.086165][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.099517][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.106854][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.133231][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.185910][ T5779] hsr_slave_0: entered promiscuous mode [ 90.192644][ T5779] hsr_slave_1: entered promiscuous mode [ 90.200723][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.208487][ T5779] Cannot create hsr debugfs directory [ 90.384183][ T5766] hsr_slave_0: entered promiscuous mode [ 90.391195][ T5766] hsr_slave_1: entered promiscuous mode [ 90.397781][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.405836][ T5766] Cannot create hsr debugfs directory [ 90.684686][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.713676][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.724637][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.738820][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.824299][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.839407][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.852447][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.882320][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.961487][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.973377][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.993240][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.007881][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.092166][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.119418][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.142490][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.152818][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.192051][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.263941][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.312470][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.320391][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.349903][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.371091][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.378974][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.452254][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.469638][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.511577][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.522222][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.529487][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.571879][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.579457][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.590164][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.597627][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.633138][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.640560][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.718261][ T5769] Bluetooth: hci0: command tx timeout [ 91.848019][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.875667][ T5769] Bluetooth: hci1: command tx timeout [ 91.878052][ T5082] Bluetooth: hci2: command tx timeout [ 91.944307][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.966553][ T5082] Bluetooth: hci3: command tx timeout [ 91.998421][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.005859][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.053591][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.061276][ T3496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.178050][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.291357][ T787] cfg80211: failed to load regulatory.db [ 92.378313][ T5765] veth0_vlan: entered promiscuous mode [ 92.423152][ T5765] veth1_vlan: entered promiscuous mode [ 92.466770][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.548240][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.579311][ T5765] veth0_macvtap: entered promiscuous mode [ 92.651996][ T5765] veth1_macvtap: entered promiscuous mode [ 92.669703][ T5768] veth0_vlan: entered promiscuous mode [ 92.714749][ T5768] veth1_vlan: entered promiscuous mode [ 92.724157][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.743520][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.788757][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.799400][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.808621][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.819259][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.848695][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.877341][ T5779] veth0_vlan: entered promiscuous mode [ 92.920640][ T5768] veth0_macvtap: entered promiscuous mode [ 92.930439][ T5779] veth1_vlan: entered promiscuous mode [ 92.944802][ T5768] veth1_macvtap: entered promiscuous mode [ 93.050281][ T5766] veth0_vlan: entered promiscuous mode [ 93.058888][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.069256][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.094441][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.106712][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.119435][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.140733][ T5766] veth1_vlan: entered promiscuous mode [ 93.173052][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.184534][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.197402][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.224753][ T5779] veth0_macvtap: entered promiscuous mode [ 93.250142][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.262493][ T5779] veth1_macvtap: entered promiscuous mode [ 93.266264][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.283159][ T5766] veth0_macvtap: entered promiscuous mode [ 93.300145][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.312207][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.324142][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.334539][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.368193][ T5766] veth1_macvtap: entered promiscuous mode [ 93.403748][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.418848][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.429498][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.440136][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.452648][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.493501][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.504943][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.515861][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.526749][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.538629][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.552351][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.572188][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.612297][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.627479][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.639036][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.651204][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.670026][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.693250][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.712681][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.724478][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.739720][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.750604][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.767967][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.779770][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.795881][ T5082] Bluetooth: hci0: command tx timeout [ 93.831055][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.840500][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.850621][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.860029][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.882462][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.897048][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.906317][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.915080][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.955733][ T5082] Bluetooth: hci2: command tx timeout [ 93.957770][ T5769] Bluetooth: hci1: command tx timeout [ 93.991339][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.003771][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.036188][ T5769] Bluetooth: hci3: command tx timeout [ 94.129626][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.139735][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.165807][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.178791][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.276649][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.284546][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.395212][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.403791][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.484789][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.509347][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.041652][ T5877] syz.3.4[5877]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.875382][ T5769] Bluetooth: hci0: command tx timeout [ 96.014370][ T5882] loop2: detected capacity change from 0 to 8 [ 96.035496][ T5769] Bluetooth: hci1: command tx timeout [ 96.038806][ T5082] Bluetooth: hci2: command tx timeout [ 96.125407][ T5082] Bluetooth: hci3: command tx timeout [ 97.185864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.764693][ T5926] lo speed is unknown, defaulting to 1000 [ 97.765483][ T5926] lo speed is unknown, defaulting to 1000 [ 97.778480][ T5926] lo speed is unknown, defaulting to 1000 [ 97.798048][ T5926] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.860499][ T5926] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 98.089566][ T5926] lo speed is unknown, defaulting to 1000 [ 98.102691][ T5926] lo speed is unknown, defaulting to 1000 [ 98.115110][ T5926] lo speed is unknown, defaulting to 1000 [ 98.123649][ T5926] lo speed is unknown, defaulting to 1000 [ 98.335659][ T5900] tty tty4: ldisc open failed (-12), clearing slot 3 [ 98.388169][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 98.436007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.516582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.526430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.535064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 98.705699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.714970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.728224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.770292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.780751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.931799][ T5082] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 100.006371][ T5940] loop3: detected capacity change from 0 to 32768 [ 100.090871][ T5940] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.14 (5940) [ 100.177642][ T5940] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.236315][ T5940] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 100.268446][ T5940] BTRFS info (device loop3): using free space tree [ 100.569426][ T5971] syz.0.17 (5971) used greatest stack depth: 17960 bytes left [ 100.595886][ T5940] BTRFS info (device loop3): enabling ssd optimizations [ 100.602917][ T5940] BTRFS info (device loop3): auto enabling async discard [ 100.841732][ T28] audit: type=1800 audit(1767732967.015:2): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 101.139362][ T6003] loop2: detected capacity change from 0 to 512 [ 101.169629][ T6003] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.274420][ T6003] EXT4-fs (loop2): 1 orphan inode deleted [ 101.292396][ T5950] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 101.307497][ T6003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.331337][ T5950] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u4:20: Failed to release dquot type 1 [ 101.359690][ T6003] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.523395][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.875282][ C0] sched: RT throttling activated [ 103.274132][ T5779] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.336431][ T6018] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.622380][ T6045] siw: device registration error -23 [ 105.584792][ T6051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.29'. [ 105.626387][ T5855] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.918399][ T5855] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.945400][ T5855] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 105.966357][ T5855] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.981351][ T5855] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 106.169884][ T5855] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 106.201974][ T5855] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.267972][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.325703][ T5855] usb 1-1: Product: syz [ 107.330122][ T5855] usb 1-1: Manufacturer: syz [ 107.398850][ T5855] cdc_wdm 1-1:1.0: skipping garbage [ 107.404353][ T5855] cdc_wdm 1-1:1.0: skipping garbage [ 107.496719][ T5855] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 107.516120][ T5855] cdc_wdm 1-1:1.0: Unknown control protocol [ 107.589427][ T5855] usb 1-1: USB disconnect, device number 2 [ 107.790924][ T6075] process 'syz.1.41' launched '/dev/fd/5' with NULL argv: empty string added [ 109.428053][ T6074] program syz.3.44 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.438818][ T6074] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 109.563789][ T6081] loop0: detected capacity change from 0 to 4096 [ 109.854000][ T6090] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.087145][ T6096] siw: device registration error -23 [ 110.906311][ T28] audit: type=1800 audit(1767732977.095:3): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.43" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 111.172189][ T6093] loop1: detected capacity change from 0 to 32768 [ 111.196429][ T6093] ======================================================= [ 111.196429][ T6093] WARNING: The mand mount option has been deprecated and [ 111.196429][ T6093] and is ignored by this kernel. Remove the mand [ 111.196429][ T6093] option from the mount to silence this warning. [ 111.196429][ T6093] ======================================================= [ 111.410453][ T6093] JBD2: Ignoring recovery information on journal [ 111.446291][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 111.475485][ T6105] loop0: detected capacity change from 0 to 4096 [ 111.526385][ T6105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.613942][ T6093] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 111.644045][ T6105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.753114][ T6094] loop3: detected capacity change from 0 to 32768 [ 111.788511][ T6094] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.49 (6094) [ 111.906025][ T6094] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.946273][ T6094] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 111.995521][ T6094] BTRFS info (device loop3): force clearing of disk cache [ 112.006703][ T6093] syz.1.48 (6093) used greatest stack depth: 17712 bytes left [ 112.025420][ T6094] BTRFS info (device loop3): force zlib compression, level 3 [ 112.055854][ T6094] BTRFS info (device loop3): enabling auto defrag [ 112.096987][ T6094] BTRFS info (device loop3): max_inline at 0 [ 112.103076][ T6094] BTRFS info (device loop3): enabling disk space caching [ 112.146026][ T6094] BTRFS info (device loop3): disk space caching is enabled [ 112.188725][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 112.368135][ T6094] BTRFS info (device loop3): enabling ssd optimizations [ 112.375177][ T6094] BTRFS info (device loop3): auto enabling async discard [ 112.423618][ T6094] BTRFS info (device loop3): rebuilding free space tree [ 112.572911][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.584029][ T6094] BTRFS info (device loop3): disabling free space tree [ 112.615955][ T6094] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.674835][ T6094] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.778273][ T6134] loop2: detected capacity change from 0 to 2048 [ 112.878292][ T6134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.920764][ T6134] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.932497][ T5779] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.164878][ T6144] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.57: bg 0: block 345: padding at end of block bitmap is not set [ 113.241265][ T6144] EXT4-fs (loop2): Remounting filesystem read-only [ 113.331140][ T5774] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop3 scanned by udevd (5774) [ 113.389026][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.950114][ T6143] loop0: detected capacity change from 0 to 32768 [ 114.019843][ T6143] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 114.272081][ T5780] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 115.529158][ T6164] netlink: 96 bytes leftover after parsing attributes in process `syz.0.63'. [ 117.361533][ T6177] netlink: 36 bytes leftover after parsing attributes in process `syz.3.66'. [ 117.854715][ T6184] batman_adv: batadv0: Adding interface: gretap1 [ 117.906454][ T6184] batman_adv: batadv0: Interface activated: gretap1 [ 118.044711][ T6184] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 118.065773][ T6184] ALSA: mixer_oss: invalid index 1374389 [ 118.317568][ T6190] loop1: detected capacity change from 0 to 1024 [ 118.336062][ T6190] EXT4-fs: inline encryption not supported [ 118.343017][ T6190] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.376061][ T6190] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.499708][ T6190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.661148][ T6197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.68'. [ 119.249502][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.281247][ T6218] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 122.406340][ T6221] lo speed is unknown, defaulting to 1000 [ 122.454777][ T6225] loop2: detected capacity change from 0 to 2048 [ 122.510087][ T6225] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 122.528481][ T6225] UDF-fs: Scanning with blocksize 512 failed [ 122.585450][ T6225] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.061333][ T6232] loop1: detected capacity change from 0 to 32768 [ 125.101214][ T6232] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 125.241914][ T5774] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 125.489884][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 125.529803][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 125.576356][ T6247] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.586337][ T6247] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.595186][ T6247] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.605868][ T6247] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.633698][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 125.651869][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 125.706062][ T6247] Zero length message leads to an empty skb [ 126.653495][ T6265] Illegal XDP return value 4294967274 on prog (id 13) dev syz_tun, expect packet loss! [ 126.786808][ T28] audit: type=1326 audit(1767732992.955:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 126.884423][ T28] audit: type=1326 audit(1767732992.965:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 126.981474][ T28] audit: type=1326 audit(1767732992.995:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 127.096848][ T28] audit: type=1326 audit(1767732992.995:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 127.163248][ T28] audit: type=1326 audit(1767732992.995:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 127.249098][ T28] audit: type=1326 audit(1767732992.995:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 127.275394][ T788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.322301][ T28] audit: type=1326 audit(1767732992.995:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.2.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 127.486993][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 127.504420][ T788] usb 2-1: config 0 has an invalid interface number: 76 but max is 0 [ 127.528805][ T788] usb 2-1: config 0 has no interface number 0 [ 127.570095][ T788] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 127.601217][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.621095][ T788] usb 2-1: Product: syz [ 127.633445][ T788] usb 2-1: Manufacturer: syz [ 127.677747][ T788] usb 2-1: SerialNumber: syz [ 127.720547][ T788] usb 2-1: config 0 descriptor?? [ 127.769872][ T788] dw2102: su3000_identify_state [ 127.774985][ T788] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 127.844179][ T788] dw2102: su3000_power_ctrl: 1, initialized 0 [ 127.856833][ T788] dvb-usb: bulk message failed: -22 (2/0) [ 127.893890][ T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.946983][ T788] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 128.022772][ T788] usb 2-1: media controller created [ 128.042857][ T788] dvb-usb: bulk message failed: -22 (6/0) [ 128.061142][ T788] dw2102: i2c transfer failed. [ 128.073559][ T788] dvb-usb: bulk message failed: -22 (6/0) [ 128.123553][ T788] dw2102: i2c transfer failed. [ 128.133720][ T788] dvb-usb: bulk message failed: -22 (6/0) [ 128.155404][ T788] dw2102: i2c transfer failed. [ 128.197977][ T788] dvb-usb: bulk message failed: -22 (6/0) [ 128.206278][ T788] dw2102: i2c transfer failed. [ 128.212091][ T788] dvb-usb: bulk message failed: -22 (6/0) [ 128.235321][ T788] dw2102: i2c transfer failed. [ 128.240223][ T788] dvb-usb: bulk message failed: -22 (6/0) [ 128.259341][ T788] dw2102: i2c transfer failed. [ 128.265131][ T788] dvb-usb: MAC address: 02:02:02:02:02:02 [ 128.364533][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.632622][ T788] dvb-usb: bulk message failed: -22 (3/0) [ 128.638846][ T788] dw2102: command 0x0e transfer failed. [ 128.644951][ T788] dvb-usb: bulk message failed: -22 (3/0) [ 128.650803][ T788] dw2102: command 0x0e transfer failed. [ 129.403392][ T788] dvb-usb: bulk message failed: -22 (3/0) [ 129.506203][ T788] dw2102: command 0x0e transfer failed. [ 129.549607][ T788] dvb-usb: bulk message failed: -22 (3/0) [ 129.749573][ T788] dw2102: command 0x0e transfer failed. [ 129.891620][ T788] dvb-usb: bulk message failed: -22 (1/0) [ 129.994974][ T6290] loop2: detected capacity change from 0 to 16 [ 130.044752][ T788] dw2102: command 0x51 transfer failed. [ 130.136434][ T6290] erofs: (device loop2): mounted with root inode @ nid 36. [ 130.375578][ T788] DVB: Unable to find symbol ds3000_attach() [ 130.386539][ T788] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 132.107920][ T788] rc_core: IR keymap rc-su3000 not found [ 132.113634][ T788] Registered IR keymap rc-empty [ 132.927898][ T788] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 132.940847][ T788] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 133.240661][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.247587][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.283883][ T6296] Set syz1 is full, maxelem 65536 reached [ 133.385271][ T788] dvb-usb: schedule remote query interval to 150 msecs. [ 133.392304][ T788] dw2102: su3000_power_ctrl: 0, initialized 1 [ 133.415365][ T788] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 133.447727][ T788] usb 2-1: USB disconnect, device number 2 [ 133.677631][ T788] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 136.369066][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 137.572689][ T6345] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 137.727556][ T6342] loop0: detected capacity change from 0 to 128 [ 137.752279][ T6342] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.768986][ T6345] netlink: set zone limit has 8 unknown bytes [ 137.844032][ T6342] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.959298][ T28] audit: type=1804 audit(1767733004.135:11): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.119" name="/newroot/31/file0/bus" dev="loop0" ino=1048592 res=1 errno=0 [ 138.139086][ T28] audit: type=1804 audit(1767733004.325:12): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.119" name="/newroot/31/file0/bus" dev="loop0" ino=1048592 res=1 errno=0 [ 138.257694][ T5938] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.658778][ T6362] bridge0: port 3(gretap0) entered blocking state [ 138.665415][ T6362] bridge0: port 3(gretap0) entered disabled state [ 138.672051][ T6362] gretap0: entered allmulticast mode [ 138.679093][ T6362] gretap0: entered promiscuous mode [ 138.685211][ T6362] bridge0: port 3(gretap0) entered blocking state [ 138.692202][ T6362] bridge0: port 3(gretap0) entered forwarding state [ 143.485441][ T5855] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 143.708410][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.731896][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.746710][ T5855] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 143.817947][ T5855] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 143.860008][ T5855] usb 3-1: Manufacturer: syz [ 143.900727][ T5855] usb 3-1: config 0 descriptor?? [ 143.961002][ T6391] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.635477][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 144.985980][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 145.001435][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.010780][ T9] usb 4-1: Product: syz [ 145.015098][ T9] usb 4-1: Manufacturer: syz [ 145.020486][ T9] usb 4-1: SerialNumber: syz [ 145.045681][ T9] usb 4-1: config 0 descriptor?? [ 145.408483][ T5855] usbhid 3-1:0.0: can't add hid device: -71 [ 145.414572][ T5855] usbhid: probe of 3-1:0.0 failed with error -71 [ 145.449174][ T5855] usb 3-1: USB disconnect, device number 2 [ 145.457397][ T23] usb 4-1: USB disconnect, device number 2 [ 145.704989][ T6425] loop0: detected capacity change from 0 to 256 [ 145.742354][ T6425] exfat: Deprecated parameter 'utf8' [ 145.883133][ T6425] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 146.723127][ T6434] sp0: Synchronizing with TNC [ 147.033207][ T6423] [U] [ 148.877070][ T6446] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 149.050668][ T6446] netlink: set zone limit has 8 unknown bytes [ 149.431979][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 150.585014][ T6457] loop3: detected capacity change from 0 to 2048 [ 150.764623][ T6457] GPT:first_usable_lbas don't match. [ 150.791269][ T6457] GPT:34 != 290 [ 150.800806][ T6457] GPT: Use GNU Parted to correct GPT errors. [ 150.821104][ T6457] loop3: p1 p2 p3 [ 151.590704][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 151.768067][ T5774] udevd[5774]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 151.780691][ T6303] udevd[6303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 151.827375][ T6302] udevd[6302]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 151.957183][ T5774] udevd[5774]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 151.967530][ T6303] udevd[6303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 151.979603][ T6302] udevd[6302]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 152.254008][ T6475] loop2: detected capacity change from 0 to 64 [ 152.509270][ T6475] Trying to free block not in datazone [ 152.526552][ T6475] Trying to free block not in datazone [ 152.532094][ T6475] Trying to free block not in datazone [ 152.584011][ T6475] Trying to free block not in datazone [ 152.601848][ T6475] Trying to free block not in datazone [ 152.619097][ T6475] Trying to free block not in datazone [ 152.636299][ T6475] Trying to free block not in datazone [ 152.652813][ T6475] Trying to free block not in datazone [ 152.665996][ T6475] Trying to free block not in datazone [ 152.687761][ T6475] Trying to free block not in datazone [ 152.701415][ T6475] Trying to free block not in datazone [ 152.709503][ T6475] Trying to free block not in datazone [ 152.718724][ T6475] Trying to free block not in datazone [ 152.752286][ T6475] Trying to free block not in datazone [ 152.778725][ T6475] Trying to free block not in datazone [ 152.815324][ T6475] Trying to free block not in datazone [ 152.820868][ T6475] Trying to free block not in datazone [ 152.835444][ T6475] Trying to free block not in datazone [ 152.846989][ T6475] Trying to free block not in datazone [ 152.869052][ T6475] Trying to free block not in datazone [ 152.874566][ T6475] Trying to free block not in datazone [ 152.920367][ T6475] Trying to free block not in datazone [ 152.940290][ T6475] Trying to free block not in datazone [ 152.960753][ T6475] Trying to free block not in datazone [ 152.978034][ T6475] Trying to free block not in datazone [ 152.993865][ T6475] Trying to free block not in datazone [ 153.010008][ T6475] Trying to free block not in datazone [ 153.031829][ T6475] Trying to free block not in datazone [ 153.048600][ T6475] Trying to free block not in datazone [ 153.058976][ T6475] Trying to free block not in datazone [ 153.077270][ T6477] loop0: detected capacity change from 0 to 32768 [ 153.089255][ T6475] Trying to free block not in datazone [ 153.123125][ T6475] Trying to free block not in datazone [ 153.136090][ T6475] Trying to free block not in datazone [ 153.162475][ T6477] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.156 (6477) [ 153.174969][ T6475] Trying to free block not in datazone [ 153.186195][ T6475] Trying to free block not in datazone [ 153.196399][ T6475] Trying to free block not in datazone [ 153.267293][ T6477] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 153.278621][ T6475] Trying to free block not in datazone [ 153.290394][ T6475] Trying to free block not in datazone [ 153.301305][ T6477] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 153.311463][ T6475] Trying to free block not in datazone [ 153.324153][ T6486] netlink: 'syz.3.158': attribute type 3 has an invalid length. [ 153.335730][ T6475] Trying to free block not in datazone [ 153.341272][ T6475] Trying to free block not in datazone [ 153.363779][ T6477] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 153.383753][ T6475] Trying to free block not in datazone [ 153.417408][ T6475] Trying to free block not in datazone [ 153.423036][ T6475] Trying to free block not in datazone [ 153.440765][ T6477] BTRFS info (device loop0): use zstd compression, level 3 [ 153.465858][ T6486] netlink: 3 bytes leftover after parsing attributes in process `syz.3.158'. [ 153.485056][ T6475] Trying to free block not in datazone [ 153.499894][ T6477] BTRFS info (device loop0): using free space tree [ 153.508430][ T6475] Trying to free block not in datazone [ 153.519999][ T6475] Trying to free block not in datazone [ 153.565503][ T6475] Trying to free block not in datazone [ 153.575755][ T6475] Trying to free block not in datazone [ 153.581401][ T6475] Trying to free block not in datazone [ 153.587394][ T6475] Trying to free block not in datazone [ 153.593008][ T6475] Trying to free block not in datazone [ 153.599055][ T6475] Trying to free block not in datazone [ 153.606491][ T6475] Trying to free block not in datazone [ 153.614779][ T6475] Trying to free block not in datazone [ 153.625639][ T6475] Trying to free block not in datazone [ 153.631258][ T6475] Trying to free block not in datazone [ 153.637328][ T6475] Trying to free block not in datazone [ 153.645582][ T6475] Trying to free block not in datazone [ 153.651276][ T6475] Trying to free block not in datazone [ 153.657285][ T6475] Trying to free block not in datazone [ 153.663485][ T6475] Trying to free block not in datazone [ 153.674049][ T6475] Trying to free block not in datazone [ 153.679917][ T6475] Trying to free block not in datazone [ 153.685768][ T6475] Trying to free block not in datazone [ 153.691273][ T6475] Trying to free block not in datazone [ 153.697348][ T6475] Trying to free block not in datazone [ 153.702903][ T6475] Trying to free block not in datazone [ 153.709090][ T6475] Trying to free block not in datazone [ 153.714630][ T6475] Trying to free block not in datazone [ 153.722133][ T6475] Trying to free block not in datazone [ 153.727733][ T6475] Trying to free block not in datazone [ 153.733228][ T6475] Trying to free block not in datazone [ 153.744611][ T6475] Trying to free block not in datazone [ 153.750328][ T6475] Trying to free block not in datazone [ 153.758657][ T6475] Trying to free block not in datazone [ 153.764970][ T6475] Trying to free block not in datazone [ 153.770620][ T6475] Trying to free block not in datazone [ 153.776400][ T6475] Trying to free block not in datazone [ 153.787647][ T6475] Trying to free block not in datazone [ 153.796256][ T6475] Trying to free block not in datazone [ 153.805628][ T6475] Trying to free block not in datazone [ 153.811160][ T6475] Trying to free block not in datazone [ 153.858416][ T6475] Trying to free block not in datazone [ 153.932671][ T6475] Trying to free block not in datazone [ 153.945470][ T6477] BTRFS info (device loop0): enabling ssd optimizations [ 153.977848][ T6475] Trying to free block not in datazone [ 153.983357][ T6475] Trying to free block not in datazone [ 154.008522][ T6477] BTRFS info (device loop0): auto enabling async discard [ 154.047112][ T6475] Trying to free block not in datazone [ 154.073068][ T28] audit: type=1800 audit(1767733020.255:13): pid=6477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.156" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 154.085450][ T6475] Trying to free block not in datazone [ 154.195673][ T6475] Trying to free block not in datazone [ 154.201328][ T6475] Trying to free block not in datazone [ 154.266503][ T6475] Trying to free block not in datazone [ 154.272073][ T6475] Trying to free block not in datazone [ 154.325293][ T6475] Trying to free block not in datazone [ 154.337068][ T6475] Trying to free block not in datazone [ 154.385335][ T6475] Trying to free block not in datazone [ 154.390881][ T6475] Trying to free block not in datazone [ 154.445325][ T6475] Trying to free block not in datazone [ 154.450859][ T6475] Trying to free block not in datazone [ 154.504376][ T6475] Trying to free block not in datazone [ 154.523478][ T6475] Trying to free block not in datazone [ 154.531587][ T5765] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 154.572844][ T6475] Trying to free block not in datazone [ 154.605421][ T6475] Trying to free block not in datazone [ 154.610952][ T6475] Trying to free block not in datazone [ 154.661257][ T6475] Trying to free block not in datazone [ 154.684318][ T6475] Trying to free block not in datazone [ 154.725454][ T6475] Trying to free block not in datazone [ 154.764017][ T6475] Trying to free block not in datazone [ 154.774185][ T6475] Trying to free block not in datazone [ 154.805369][ T6475] Trying to free block not in datazone [ 154.842380][ T6475] Trying to free block not in datazone [ 154.865514][ T6475] Trying to free block not in datazone [ 154.871025][ T6475] Trying to free block not in datazone [ 154.916914][ T6475] Trying to free block not in datazone [ 154.922458][ T6475] Trying to free block not in datazone [ 154.959790][ T6475] Trying to free block not in datazone [ 154.991862][ T6475] Trying to free block not in datazone [ 155.022689][ T6475] Trying to free block not in datazone [ 155.049526][ T6475] Trying to free block not in datazone [ 155.055035][ T6475] Trying to free block not in datazone [ 155.101382][ T6475] Trying to free block not in datazone [ 155.145328][ T6475] Trying to free block not in datazone [ 155.155689][ T6475] Trying to free block not in datazone [ 155.161234][ T6475] Trying to free block not in datazone [ 155.187527][ T6475] Trying to free block not in datazone [ 155.202500][ T6475] Trying to free block not in datazone [ 155.210370][ T6475] Trying to free block not in datazone [ 155.220171][ T6475] Trying to free block not in datazone [ 155.243426][ T6475] Trying to free block not in datazone [ 155.252075][ T6475] Trying to free block not in datazone [ 155.260243][ T6475] Trying to free block not in datazone [ 155.283146][ T6475] Trying to free block not in datazone [ 155.292278][ T6475] Trying to free block not in datazone [ 155.301519][ T6475] Trying to free block not in datazone [ 155.311206][ T6475] Trying to free block not in datazone [ 155.320581][ T6475] Trying to free block not in datazone [ 155.328723][ T6475] Trying to free block not in datazone [ 155.334633][ T6475] Trying to free block not in datazone [ 155.344062][ T6475] Trying to free block not in datazone [ 155.352344][ T6475] Trying to free block not in datazone [ 155.361822][ T6475] Trying to free block not in datazone [ 155.370059][ T6475] Trying to free block not in datazone [ 155.378235][ T6475] Trying to free block not in datazone [ 155.384188][ T6475] Trying to free block not in datazone [ 155.395074][ T6475] Trying to free block not in datazone [ 155.412112][ T6475] Trying to free block not in datazone [ 155.420372][ T6475] Trying to free block not in datazone [ 155.428995][ T6475] Trying to free block not in datazone [ 155.434862][ T6475] Trying to free block not in datazone [ 155.444077][ T6475] Trying to free block not in datazone [ 155.451967][ T6475] Trying to free block not in datazone [ 155.461550][ T6475] Trying to free block not in datazone [ 155.471695][ T6475] Trying to free block not in datazone [ 155.480866][ T6475] Trying to free block not in datazone [ 155.497162][ T6475] Trying to free block not in datazone [ 155.503686][ T6475] Trying to free block not in datazone [ 155.513061][ T6475] Trying to free block not in datazone [ 155.521266][ T6475] Trying to free block not in datazone [ 155.529177][ T6475] Trying to free block not in datazone [ 155.535772][ T6475] Trying to free block not in datazone [ 155.542825][ T6475] Trying to free block not in datazone [ 155.548734][ T6475] Trying to free block not in datazone [ 155.557394][ T6475] Trying to free block not in datazone [ 155.563258][ T6475] Trying to free block not in datazone [ 155.569006][ T6475] Trying to free block not in datazone [ 155.574957][ T6475] Trying to free block not in datazone [ 155.582849][ T6475] Trying to free block not in datazone [ 155.588821][ T6475] Trying to free block not in datazone [ 155.595383][ T6475] Trying to free block not in datazone [ 155.601294][ T6475] Trying to free block not in datazone [ 155.607838][ T6475] Trying to free block not in datazone [ 155.615616][ T6475] Trying to free block not in datazone [ 155.621247][ T6475] Trying to free block not in datazone [ 155.627262][ T6475] Trying to free block not in datazone [ 155.632852][ T6475] Trying to free block not in datazone [ 155.641063][ T6475] Trying to free block not in datazone [ 155.647215][ T6475] Trying to free block not in datazone [ 155.653092][ T6475] Trying to free block not in datazone [ 155.661883][ T6475] Trying to free block not in datazone [ 155.667835][ T6475] Trying to free block not in datazone [ 155.674696][ T6475] Trying to free block not in datazone [ 155.680764][ T6475] Trying to free block not in datazone [ 155.686415][ T6475] Trying to free block not in datazone [ 155.693726][ T6475] Trying to free block not in datazone [ 155.699415][ T6475] Trying to free block not in datazone [ 155.706552][ T6475] Trying to free block not in datazone [ 155.713070][ T6475] Trying to free block not in datazone [ 155.722342][ T6475] Trying to free block not in datazone [ 155.728167][ T6475] Trying to free block not in datazone [ 155.735161][ T6475] Trying to free block not in datazone [ 155.741542][ T6475] Trying to free block not in datazone [ 155.747483][ T6475] Trying to free block not in datazone [ 155.754332][ T6475] Trying to free block not in datazone [ 155.760665][ T6475] Trying to free block not in datazone [ 155.767766][ T6475] Trying to free block not in datazone [ 155.773714][ T6475] Trying to free block not in datazone [ 155.779393][ T6475] Trying to free block not in datazone [ 155.785345][ T6475] Trying to free block not in datazone [ 155.790962][ T6475] Trying to free block not in datazone [ 155.797863][ T6475] Trying to free block not in datazone [ 155.803405][ T6475] Trying to free block not in datazone [ 155.812029][ T6475] Trying to free block not in datazone [ 155.817719][ T6475] Trying to free block not in datazone [ 155.825785][ T6475] Trying to free block not in datazone [ 155.831410][ T6475] Trying to free block not in datazone [ 155.837384][ T6475] Trying to free block not in datazone [ 155.844992][ T6475] Trying to free block not in datazone [ 155.851720][ T6475] Trying to free block not in datazone [ 155.858221][ T6475] Trying to free block not in datazone [ 155.864097][ T6475] Trying to free block not in datazone [ 155.870220][ T6475] Trying to free block not in datazone [ 155.876135][ T6475] Trying to free block not in datazone [ 155.881747][ T6475] Trying to free block not in datazone [ 155.889977][ T6475] Trying to free block not in datazone [ 155.895655][ T6475] Trying to free block not in datazone [ 155.902786][ T6475] Trying to free block not in datazone [ 155.908468][ T6475] Trying to free block not in datazone [ 155.916478][ T6475] Trying to free block not in datazone [ 155.922086][ T6475] Trying to free block not in datazone [ 155.927964][ T6475] Trying to free block not in datazone [ 155.935179][ T6475] Trying to free block not in datazone [ 155.941074][ T6475] Trying to free block not in datazone [ 155.946678][ T6475] Trying to free block not in datazone [ 155.952558][ T6475] Trying to free block not in datazone [ 155.958208][ T6475] Trying to free block not in datazone [ 155.964110][ T6475] Trying to free block not in datazone [ 155.969727][ T6475] Trying to free block not in datazone [ 155.976218][ T6475] Trying to free block not in datazone [ 155.982212][ T6475] Trying to free block not in datazone [ 155.988068][ T6475] Trying to free block not in datazone [ 155.993749][ T6475] Trying to free block not in datazone [ 155.999734][ T6475] Trying to free block not in datazone [ 156.005441][ T6475] Trying to free block not in datazone [ 156.011326][ T6475] Trying to free block not in datazone [ 156.017724][ T6475] Trying to free block not in datazone [ 156.023597][ T6475] Trying to free block not in datazone [ 156.029241][ T6475] Trying to free block not in datazone [ 156.035159][ T6475] Trying to free block not in datazone [ 156.040841][ T6475] Trying to free block not in datazone [ 156.046719][ T6475] Trying to free block not in datazone [ 156.052330][ T6475] Trying to free block not in datazone [ 156.058275][ T6475] Trying to free block not in datazone [ 156.064023][ T6475] Trying to free block not in datazone [ 156.069904][ T6475] Trying to free block not in datazone [ 156.075564][ T6475] Trying to free block not in datazone [ 156.081444][ T6475] Trying to free block not in datazone [ 156.087755][ T6475] Trying to free block not in datazone [ 156.093667][ T6475] Trying to free block not in datazone [ 156.099381][ T6475] Trying to free block not in datazone [ 156.105326][ T6475] Trying to free block not in datazone [ 156.110930][ T6475] Trying to free block not in datazone [ 156.117671][ T6475] Trying to free block not in datazone [ 156.123317][ T6475] Trying to free block not in datazone [ 156.129200][ T6475] Trying to free block not in datazone [ 156.134803][ T6475] Trying to free block not in datazone [ 156.140765][ T6475] Trying to free block not in datazone [ 157.122600][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 157.858227][ T6540] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 157.920426][ T6540] netlink: set zone limit has 8 unknown bytes [ 159.042852][ T6523] loop0: detected capacity change from 0 to 40427 [ 159.109322][ T6523] F2FS-fs (loop0): build fault injection attr: rate: 174, type: 0x7ffff [ 160.748734][ T9] IPVS: starting estimator thread 0... [ 161.345596][ T6577] IPVS: using max 20 ests per chain, 48000 per kthread [ 161.456855][ T6580] usb usb8: usbfs: process 6580 (syz.3.180) did not claim interface 0 before use [ 162.799811][ T5770] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 162.985347][ T5770] usb 4-1: Using ep0 maxpacket: 16 [ 163.008482][ T5770] usb 4-1: unable to get BOS descriptor or descriptor too short [ 163.019682][ T6582] loop0: detected capacity change from 0 to 32768 [ 163.046090][ T6582] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 163.064623][ T5770] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 163.076720][ T5770] usb 4-1: config 13 has no interface number 0 [ 163.089310][ T5770] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 163.151853][ T5770] usb 4-1: config 13 interface 50 has no altsetting 0 [ 163.180826][ T5770] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 163.229097][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.249124][ T6303] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 163.270510][ T5770] usb 4-1: Product: syz [ 163.295106][ T5770] usb 4-1: Manufacturer: syz [ 163.311283][ T5770] usb 4-1: SerialNumber: syz [ 163.358511][ T6589] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 165.291764][ T6611] vivid-000: kernel_thread() failed [ 165.808939][ T6614] syz.0.195[6614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.809137][ T6614] syz.0.195[6614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.083082][ T5770] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 166.162846][ T5770] usb 4-1: MIDIStreaming interface descriptor not found [ 166.484017][ T6620] loop3: detected capacity change from 0 to 2048 [ 166.491453][ T5770] usb 4-1: USB disconnect, device number 3 [ 166.561286][ T6620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.606068][ T6620] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.631493][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.705379][ T5855] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 166.837351][ T6631] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.196: bg 0: block 345: padding at end of block bitmap is not set [ 166.862659][ T6631] EXT4-fs (loop3): Remounting filesystem read-only [ 166.916099][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 166.925879][ T5855] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 166.945606][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.965599][ T5855] usb 2-1: config 0 descriptor?? [ 167.037999][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.188459][ T5855] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 167.215732][ T5855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.236008][ T5855] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 167.251708][ T5855] usb 2-1: media controller created [ 167.304327][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.395450][ T5770] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 167.591939][ T5770] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 167.603741][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.622461][ T5770] usb 1-1: Product: syz [ 167.632609][ T5770] usb 1-1: Manufacturer: syz [ 167.649869][ T5770] usb 1-1: SerialNumber: syz [ 167.657062][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 167.667371][ T5770] usb 1-1: config 0 descriptor?? [ 167.803376][ T6642] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 167.865448][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 167.873333][ T27] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 167.900928][ T27] usb 3-1: config 0 has no interface number 0 [ 167.908413][ T9] usb 1-1: USB disconnect, device number 3 [ 167.933353][ T27] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 167.957839][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.967257][ T27] usb 3-1: Product: syz [ 167.973957][ T27] usb 3-1: Manufacturer: syz [ 167.980619][ T27] usb 3-1: SerialNumber: syz [ 167.994314][ T27] usb 3-1: config 0 descriptor?? [ 168.010369][ T27] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 168.322954][ T5855] stb0899_attach: Driver disabled by Kconfig [ 168.331458][ T5855] az6027: no front-end attached [ 168.331458][ T5855] [ 168.340082][ T5855] az6027: usb out operation failed. (-71) [ 168.359156][ T5855] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 168.383796][ T5855] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 168.391346][ T27] usb 3-1: qt2_attach - failed to power on unit: -71 [ 168.437968][ T27] quatech2: probe of 3-1:0.51 failed with error -71 [ 169.159145][ T27] usb 3-1: USB disconnect, device number 3 [ 169.189990][ T5855] dvb-usb: schedule remote query interval to 400 msecs. [ 169.258884][ T5855] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 169.343396][ T6647] loop1: detected capacity change from 0 to 512 [ 169.350338][ T5855] usb 2-1: USB disconnect, device number 3 [ 169.387689][ T6647] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.412805][ T6647] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2872: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 169.429546][ T6647] EXT4-fs (loop1): 1 truncate cleaned up [ 169.437291][ T6647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.499132][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.611520][ T5855] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 172.409658][ T6666] loop0: detected capacity change from 0 to 32768 [ 172.466084][ T6672] loop2: detected capacity change from 0 to 32768 [ 172.478655][ T6672] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.211 (6672) [ 172.530054][ T6672] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.548018][ T6666] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 172.552055][ T6672] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 172.568083][ T6672] BTRFS info (device loop2): metadata ratio 2 [ 172.574241][ T6672] BTRFS info (device loop2): force zlib compression, level 3 [ 172.582788][ T6672] BTRFS info (device loop2): enabling auto defrag [ 172.589744][ T6672] BTRFS info (device loop2): max_inline at 0 [ 172.600547][ T6672] BTRFS info (device loop2): using free space tree [ 172.721002][ T6672] BTRFS info (device loop2): auto enabling async discard [ 172.792954][ T6666] XFS (loop0): Ending clean mount [ 172.984596][ T5765] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 173.065741][ T5766] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 173.860862][ T6715] loop2: detected capacity change from 0 to 512 [ 173.903876][ T6715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.931641][ T6715] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.945373][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 174.012606][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.150261][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 174.675687][ T6686] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 174.971437][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.985274][ T9] usb 1-1: Product: syz [ 174.989593][ T9] usb 1-1: Manufacturer: syz [ 174.994333][ T9] usb 1-1: SerialNumber: syz [ 175.005153][ T9] usb 1-1: config 0 descriptor?? [ 175.240563][ T9] usb 1-1: USB disconnect, device number 4 [ 176.841207][ T6730] loop1: detected capacity change from 0 to 32768 [ 176.883177][ T6730] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.935367][ T5855] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 176.959406][ T6730] XFS (loop1): Ending clean mount [ 177.084557][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 177.143428][ T5855] usb 3-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x78, skipping [ 177.206431][ T5855] usb 3-1: config 0 interface 0 has no altsetting 0 [ 177.273517][ T5855] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 177.289991][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 177.317080][ T5855] usb 3-1: Product: syz [ 177.321345][ T5855] usb 3-1: Manufacturer: syz [ 177.353676][ T5855] usb 3-1: SerialNumber: syz [ 177.376776][ T5855] usb 3-1: config 0 descriptor?? [ 177.382595][ T6736] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.516562][ T5855] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 177.709016][ T5855] usb 3-1: USB disconnect, device number 4 [ 177.864666][ T6302] udevd[6302]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.094489][ T6768] tipc: Started in network mode [ 179.099984][ T6768] tipc: Node identity 26034efdb5cd, cluster identity 4711 [ 179.126734][ T6768] tipc: Enabled bearer , priority 0 [ 179.167369][ T6768] tipc: Resetting bearer [ 179.238028][ T6767] tipc: Disabling bearer [ 179.306367][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'. [ 179.359254][ T6778] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.369306][ T6778] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.376230][ T6780] syz.0.236 uses obsolete (PF_INET,SOCK_PACKET) [ 179.378419][ T6778] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.393195][ T6778] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.411959][ T6778] vxlan0: entered promiscuous mode [ 179.542665][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 179.835485][ T5770] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 180.040165][ T5770] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 180.055088][ T6803] lo speed is unknown, defaulting to 1000 [ 180.061091][ T5770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.069358][ T5770] usb 1-1: Product: syz [ 180.073565][ T5770] usb 1-1: Manufacturer: syz [ 180.085434][ T5770] usb 1-1: SerialNumber: syz [ 180.098010][ T5770] usb 1-1: config 0 descriptor?? [ 180.342860][ T5770] usb 1-1: USB disconnect, device number 5 [ 180.474093][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'. [ 181.677915][ T6803] netlink: 'syz.1.243': attribute type 4 has an invalid length. [ 181.966615][ T5770] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 182.197255][ T5770] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 182.231203][ T5770] usb 4-1: config 0 has no interface number 0 [ 182.244346][ T5770] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 182.286989][ T5770] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 182.318499][ T5770] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 182.346618][ T5770] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.373908][ T5770] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 182.391454][ T6826] syzkaller0: entered promiscuous mode [ 182.397440][ T6826] syzkaller0: entered allmulticast mode [ 182.405539][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.428205][ T5770] usb 4-1: config 0 descriptor?? [ 182.441749][ T6820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 182.451587][ T6820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 182.487934][ T5770] ldusb 4-1:0.55: Interrupt in endpoint not found [ 182.511062][ T6829] loop1: detected capacity change from 0 to 64 [ 182.570353][ T6829] Trying to free block not in datazone [ 182.579233][ T6829] minix_free_block (loop1:21): bit already cleared [ 182.732800][ T5770] usb 4-1: USB disconnect, device number 4 [ 183.826553][ T6847] slcan: can't register candev [ 183.831795][ T6847] Falling back ldisc for ttyS3. [ 184.278404][ T6855] loop3: detected capacity change from 0 to 32768 [ 184.312836][ T6855] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.255 (6855) [ 184.438721][ T6855] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.465444][ T6855] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 184.493097][ T6855] BTRFS info (device loop3): setting nodatasum [ 184.523288][ T6855] BTRFS info (device loop3): enabling auto defrag [ 184.555106][ T6855] BTRFS info (device loop3): disabling tree log [ 184.581899][ T6855] BTRFS info (device loop3): using free space tree [ 184.750531][ T6855] BTRFS info (device loop3): enabling ssd optimizations [ 184.775409][ T6855] BTRFS info (device loop3): auto enabling async discard [ 185.357476][ T5779] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.976049][ T6883] overlay: ./file1 is not a directory [ 186.285780][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 186.489055][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 186.518703][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 186.528140][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.541527][ T9] usb 4-1: Product: syz [ 186.546637][ T9] usb 4-1: Manufacturer: syz [ 186.551314][ T9] usb 4-1: SerialNumber: syz [ 186.558592][ T9] usb 4-1: config 0 descriptor?? [ 186.572599][ T9] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 186.625432][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.777632][ T6885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.796805][ T6885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.815717][ T6885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.826682][ T6885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.850517][ T6885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.851889][ T8] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 186.876895][ T6885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.888793][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.897313][ T8] usb 1-1: Product: syz [ 186.901983][ T8] usb 1-1: Manufacturer: syz [ 186.925312][ T8] usb 1-1: SerialNumber: syz [ 186.937080][ T8] usb 1-1: config 0 descriptor?? [ 187.180381][ T8] usb 1-1: USB disconnect, device number 6 [ 188.598514][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 188.618012][ T6885] team_slave_0: entered promiscuous mode [ 188.624210][ T6885] team_slave_1: entered promiscuous mode [ 188.630824][ T6885] macvtap1: entered promiscuous mode [ 188.650770][ T6885] team0: entered promiscuous mode [ 188.671325][ T6885] macvtap1: entered allmulticast mode [ 188.677210][ T6885] team0: entered allmulticast mode [ 188.683775][ T6885] team_slave_0: entered allmulticast mode [ 188.690279][ T6885] team_slave_1: entered allmulticast mode [ 188.697973][ T6885] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 188.706246][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 188.729168][ T6893] team0: left allmulticast mode [ 188.734271][ T6893] team_slave_0: left allmulticast mode [ 188.745151][ T6893] team_slave_1: left allmulticast mode [ 188.765056][ T6893] team0: left promiscuous mode [ 188.793795][ T6893] team_slave_0: left promiscuous mode [ 188.799445][ T6893] team_slave_1: left promiscuous mode [ 188.860619][ T9] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 188.889651][ T9] visor: probe of 4-1:0.0 failed with error -71 [ 188.929499][ T9] usb 4-1: USB disconnect, device number 5 [ 189.612958][ T6902] loop1: detected capacity change from 0 to 8192 [ 190.045570][ T5082] Bluetooth: hci0: Malformed Event: 0x02 [ 191.219440][ T6926] loop2: detected capacity change from 0 to 128 [ 191.234583][ T6926] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.257067][ T6926] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.317435][ T28] audit: type=1804 audit(1767733057.505:14): pid=6926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.273" name="/newroot/84/file0/bus" dev="loop2" ino=1048594 res=1 errno=0 [ 191.367034][ T788] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 191.516389][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 191.535076][ T28] audit: type=1804 audit(1767733057.715:15): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.273" name="/newroot/84/file0/bus" dev="loop2" ino=1048594 res=1 errno=0 [ 191.588642][ T6933] lo speed is unknown, defaulting to 1000 [ 191.915342][ T6935] loop0: detected capacity change from 0 to 1024 [ 192.036991][ T6935] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 192.118844][ T6935] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 192.130399][ T6935] EXT4-fs (loop0): orphan cleanup on readonly fs [ 192.147206][ T6935] EXT4-fs error (device loop0): ext4_free_blocks:6676: comm syz.0.276: Freeing blocks not in datazone - block = 0, count = 4096 [ 192.169125][ T6935] EXT4-fs (loop0): 1 orphan inode deleted [ 192.184656][ T6935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.795181][ T5929] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.484001][ T6941] loop2: detected capacity change from 0 to 32768 [ 193.506177][ T6941] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.277 (6941) [ 193.872199][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 193.880898][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.892194][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.901503][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.911974][ T788] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 193.921530][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.933883][ T788] usb 4-1: config 0 descriptor?? [ 193.945056][ T6941] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.983842][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 193.995359][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.998884][ T6941] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 194.003449][ T9] usb 2-1: Product: syz [ 194.003468][ T9] usb 2-1: Manufacturer: syz [ 194.044451][ T6941] BTRFS info (device loop2): setting nodatacow, compression disabled [ 194.065526][ T9] usb 2-1: SerialNumber: syz [ 194.079909][ T6941] BTRFS info (device loop2): force clearing of disk cache [ 194.097031][ T9] usb 2-1: config 0 descriptor?? [ 194.115562][ T6941] BTRFS info (device loop2): enabling ssd optimizations [ 194.134832][ T6941] BTRFS info (device loop2): using spread ssd allocation scheme [ 194.152985][ T788] usbhid 4-1:0.0: can't add hid device: -71 [ 194.166626][ T6941] BTRFS info (device loop2): turning off barriers [ 194.173147][ T6941] BTRFS info (device loop2): disabling free space tree [ 194.189909][ T788] usbhid: probe of 4-1:0.0 failed with error -71 [ 194.200835][ T6941] BTRFS info (device loop2): not using ssd optimizations [ 194.200862][ T6941] BTRFS info (device loop2): not using spread ssd allocation scheme [ 194.326317][ T788] usb 4-1: USB disconnect, device number 6 [ 194.387786][ T9] usb 2-1: USB disconnect, device number 4 [ 194.482332][ T6941] BTRFS info (device loop2): rebuilding free space tree [ 194.548948][ T6941] BTRFS info (device loop2): disabling free space tree [ 194.573310][ T6961] loop0: detected capacity change from 0 to 1024 [ 194.585366][ T6941] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 194.610214][ T6961] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 194.610250][ T6941] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 194.682949][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.690379][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.715333][ T6961] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 194.743203][ T28] audit: type=1800 audit(1767733060.925:16): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.277" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 194.786050][ T6961] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 194.794435][ T6961] EXT4-fs (loop0): orphan cleanup on readonly fs [ 194.834638][ T6961] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.281: Inode bitmap for bg 0 marked uninitialized [ 194.887016][ T6961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.981900][ T28] audit: type=1800 audit(1767733061.165:17): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.277" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 195.056903][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 195.100207][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.265483][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 195.281569][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 195.333306][ T27] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 195.371046][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.402092][ T27] usb 2-1: config 0 descriptor?? [ 195.413953][ T6982] loop0: detected capacity change from 0 to 1024 [ 195.633787][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 195.670806][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 195.690499][ T27] usb 2-1: USB disconnect, device number 5 [ 195.713917][ T6987] loop3: detected capacity change from 0 to 256 [ 195.831724][ T6987] FAT-fs (loop3): Directory bread(block 64) failed [ 195.858730][ T6987] FAT-fs (loop3): Directory bread(block 65) failed [ 195.883933][ T6987] FAT-fs (loop3): Directory bread(block 66) failed [ 195.901936][ T6987] FAT-fs (loop3): Directory bread(block 67) failed [ 195.909266][ T6987] FAT-fs (loop3): Directory bread(block 68) failed [ 195.953918][ T6987] FAT-fs (loop3): Directory bread(block 69) failed [ 195.962898][ T6987] FAT-fs (loop3): Directory bread(block 70) failed [ 195.975357][ T6987] FAT-fs (loop3): Directory bread(block 71) failed [ 195.982191][ T6987] FAT-fs (loop3): Directory bread(block 72) failed [ 195.995775][ T6987] FAT-fs (loop3): Directory bread(block 73) failed [ 196.023606][ T5766] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 196.074768][ T6987] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 196.082847][ T6987] FAT-fs (loop3): Filesystem has been set read-only [ 196.405466][ T6994] warning: `syz.1.292' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 196.729801][ T5757] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 197.688478][ T5757] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 197.705256][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.734056][ T5757] usb 4-1: Product: syz [ 197.738734][ T5757] usb 4-1: Manufacturer: syz [ 197.743447][ T5757] usb 4-1: SerialNumber: syz [ 197.769558][ T5757] usb 4-1: config 0 descriptor?? [ 197.970867][ T6995] loop0: detected capacity change from 0 to 32768 [ 197.992803][ T5757] usb 4-1: USB disconnect, device number 7 [ 198.032998][ T6995] XFS: attr2 mount option is deprecated. [ 198.060779][ T6995] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 198.142751][ T6995] XFS (loop0): Ending clean mount [ 198.207749][ T6995] XFS (loop0): Quotacheck needed: Please wait. [ 198.367992][ T28] audit: type=1326 audit(1767733064.545:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 198.454209][ T28] audit: type=1326 audit(1767733064.545:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 198.479213][ T28] audit: type=1326 audit(1767733064.615:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 198.521401][ T28] audit: type=1326 audit(1767733064.615:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 198.534352][ T6995] XFS (loop0): Quotacheck: Done. [ 199.004252][ T28] audit: type=1326 audit(1767733064.615:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 199.347985][ T28] audit: type=1326 audit(1767733064.615:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 199.370921][ T28] audit: type=1326 audit(1767733064.615:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 199.395436][ T28] audit: type=1326 audit(1767733064.625:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 199.460255][ T28] audit: type=1326 audit(1767733064.625:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 199.538617][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.726449][ T28] audit: type=1326 audit(1767733065.915:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.2.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0b58f749 code=0x7ffc0000 [ 200.207832][ T7034] loop0: detected capacity change from 0 to 2048 [ 200.215286][ T7034] ext4: Unknown parameter 'rootcontext' [ 201.466727][ T7042] loop3: detected capacity change from 0 to 2048 [ 201.545352][ T7047] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.802231][ T5779] NILFS (loop3): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3) [ 201.835633][ T5779] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=13) [ 201.924015][ T5779] Remounting filesystem read-only [ 201.932193][ T5779] NILFS (loop3): error -5 truncating bmap (ino=13) [ 202.152142][ T7056] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 202.205977][ T7057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.307'. [ 203.117246][ T5779] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 203.147243][ T5779] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 203.154608][ T5779] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 203.163249][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.181078][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.192701][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.225597][ T5779] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 203.245819][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.281326][ T5779] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 203.300738][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.314489][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.325556][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.335109][ T5779] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 203.345833][ T5757] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 203.349918][ T5779] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 203.383600][ T5779] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 203.392448][ T5779] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 203.409384][ T5779] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 203.419513][ T5779] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 203.428980][ T5779] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 203.441000][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.451876][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.465363][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.479917][ T5779] NILFS (loop3): discard dirty page: offset=0, ino=19 [ 203.490351][ T5779] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 203.514372][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.530178][ T7071] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.542517][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.552951][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.561934][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.593826][ T5779] NILFS (loop3): discard dirty page: offset=0, ino=20 [ 203.601070][ T5779] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 203.614555][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.619915][ T7071] loop2: detected capacity change from 0 to 128 [ 203.647823][ T5757] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 203.659984][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.668676][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.684291][ T5757] usb 1-1: Product: syz [ 203.703862][ T5757] usb 1-1: Manufacturer: syz [ 203.710065][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.719246][ T5757] usb 1-1: SerialNumber: syz [ 203.728016][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.747711][ T5757] usb 1-1: config 0 descriptor?? [ 203.787313][ T5779] NILFS (loop3): discard dirty page: offset=0, ino=12 [ 203.805382][ T5779] NILFS (loop3): discard dirty block: blocknr=17, size=1024 [ 203.812440][ T7071] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.851423][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.905254][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.926432][ T7071] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 203.953924][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.975635][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.990145][ T5779] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 204.011769][ T5779] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 204.023478][ T5779] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 204.054169][ T5779] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 204.063793][ T5855] usb 1-1: USB disconnect, device number 7 [ 204.188663][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.199345][ T5779] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 204.206652][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.215884][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.224943][ T5779] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 204.233398][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.245392][ T5779] NILFS (loop3): discard dirty page: offset=98304, ino=3 [ 204.253116][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.262469][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.542087][ T7076] xt_TCPMSS: Only works on TCP SYN packets [ 204.565802][ T5779] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 205.280229][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.495343][ T5779] NILFS (loop3): discard dirty page: offset=131072, ino=3 [ 205.503090][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.523324][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.547577][ T5779] NILFS (loop3): discard dirty block: blocknr=46, size=1024 [ 205.570082][ T5779] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.594456][ T5766] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.509396][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 208.346421][ T788] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 208.548349][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 208.652760][ T788] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 209.111443][ T788] usb 2-1: config 0 has no interface number 0 [ 209.111487][ T788] usb 2-1: config 0 interface 89 has no altsetting 0 [ 209.114664][ T788] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 209.114695][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.114724][ T788] usb 2-1: Product: syz [ 209.114739][ T788] usb 2-1: Manufacturer: syz [ 209.114754][ T788] usb 2-1: SerialNumber: syz [ 209.126411][ T788] usb 2-1: config 0 descriptor?? [ 209.266266][ T5769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.274920][ T5769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.279654][ T5769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.280902][ T5769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.281918][ T5769] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.282340][ T5769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.431272][ T7121] lo speed is unknown, defaulting to 1000 [ 210.225168][ T7121] chnl_net:caif_netlink_parms(): no params data found [ 210.245381][ T788] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 210.348135][ T12] hsr_slave_0: left promiscuous mode [ 210.358346][ T12] hsr_slave_1: left promiscuous mode [ 210.377787][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.392297][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.402737][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.429205][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.444343][ T788] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 210.461287][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.472755][ T788] usb 3-1: Product: syz [ 210.481760][ T788] usb 3-1: Manufacturer: syz [ 210.487532][ T788] usb 3-1: SerialNumber: syz [ 210.499242][ T788] usb 3-1: config 0 descriptor?? [ 210.507863][ T12] bridge_slave_1: left allmulticast mode [ 210.535068][ T12] bridge_slave_1: left promiscuous mode [ 210.547160][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.613485][ T12] bridge_slave_0: left allmulticast mode [ 210.622869][ T12] bridge_slave_0: left promiscuous mode [ 210.630173][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.733014][ T8] usb 3-1: USB disconnect, device number 5 [ 210.809505][ T787] usb 2-1: USB disconnect, device number 6 [ 210.864510][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 210.864526][ T28] audit: type=1326 audit(1767733077.045:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7137 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56d98f749 code=0x7ffc0000 [ 210.945312][ T28] audit: type=1326 audit(1767733077.045:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7137 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56d98f749 code=0x7ffc0000 [ 211.075912][ T28] audit: type=1326 audit(1767733077.105:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7137 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fa56d98f749 code=0x7ffc0000 [ 211.098075][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.179661][ T12] veth1_macvtap: left promiscuous mode [ 211.195402][ T28] audit: type=1326 audit(1767733077.105:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7137 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56d98f749 code=0x7ffc0000 [ 211.206074][ T12] veth0_macvtap: left promiscuous mode [ 211.220831][ T28] audit: type=1326 audit(1767733077.105:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7137 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56d98f749 code=0x7ffc0000 [ 211.268061][ T12] veth1_vlan: left promiscuous mode [ 211.318109][ T51] Bluetooth: hci3: command tx timeout [ 211.800049][ T12] veth0_vlan: left promiscuous mode [ 212.131011][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 212.137429][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 213.409134][ T5082] Bluetooth: hci3: command tx timeout [ 215.268496][ T7172] loop2: detected capacity change from 0 to 1024 [ 215.347093][ T7172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 215.391478][ T7172] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.485666][ T5082] Bluetooth: hci3: command tx timeout [ 215.502107][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 216.332646][ T12] team0 (unregistering): Port device team_slave_1 removed [ 216.404218][ T12] team0 (unregistering): Port device team_slave_0 removed [ 216.480574][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.505469][ T7185] loop2: detected capacity change from 0 to 40427 [ 216.518096][ T7185] F2FS-fs (loop2): build fault injection attr: rate: 174, type: 0x7ffff [ 216.593278][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.975339][ T787] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 217.193134][ T787] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 217.202830][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.211451][ T787] usb 3-1: Product: syz [ 217.216341][ T787] usb 3-1: Manufacturer: syz [ 217.221016][ T787] usb 3-1: SerialNumber: syz [ 217.232826][ T787] usb 3-1: config 0 descriptor?? [ 217.465588][ T787] usb 3-1: USB disconnect, device number 6 [ 217.513526][ T12] bond0 (unregistering): Released all slaves [ 217.559082][ T5082] Bluetooth: hci3: command tx timeout [ 217.670185][ T5855] lo speed is unknown, defaulting to 1000 [ 219.456853][ T7200] netlink: 'syz.0.344': attribute type 6 has an invalid length. [ 219.476072][ T7121] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.533351][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.553937][ T7121] bridge_slave_0: entered allmulticast mode [ 219.571413][ T7121] bridge_slave_0: entered promiscuous mode [ 219.594044][ T7204] loop1: detected capacity change from 0 to 128 [ 219.602140][ T7200] netlink: 'syz.0.344': attribute type 4 has an invalid length. [ 219.623839][ T7200] netlink: 17 bytes leftover after parsing attributes in process `syz.0.344'. [ 219.644241][ T7204] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.681550][ T7121] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.803565][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.856424][ T7204] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.892721][ T7121] bridge_slave_1: entered allmulticast mode [ 219.929899][ T7121] bridge_slave_1: entered promiscuous mode [ 220.134469][ T7215] netlink: 44 bytes leftover after parsing attributes in process `syz.0.347'. [ 220.160582][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.347'. [ 220.188064][ T7121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.208422][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.223226][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 220.253041][ T7121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.613348][ T7121] team0: Port device team_slave_0 added [ 220.667186][ T7121] team0: Port device team_slave_1 added [ 220.716764][ T7230] tipc: Enabling of bearer rejected, failed to enable media [ 220.770193][ T7121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.787776][ T7121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.853600][ T7121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.899132][ T7121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.927675][ T7121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.027258][ T7121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.354293][ T7121] hsr_slave_0: entered promiscuous mode [ 221.392881][ T7121] hsr_slave_1: entered promiscuous mode [ 221.411162][ T7121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.423527][ T7121] Cannot create hsr debugfs directory [ 221.429665][ T7222] loop2: detected capacity change from 0 to 32768 [ 221.462959][ T7222] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.348 (7222) [ 221.544844][ T7222] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.563256][ T7222] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 221.573102][ T7222] BTRFS info (device loop2): metadata ratio 2 [ 221.580476][ T7222] BTRFS info (device loop2): force zlib compression, level 3 [ 221.604604][ T7222] BTRFS info (device loop2): enabling auto defrag [ 221.665520][ T7222] BTRFS info (device loop2): max_inline at 0 [ 221.698667][ T7222] BTRFS info (device loop2): using free space tree [ 221.801696][ T7226] loop0: detected capacity change from 0 to 40427 [ 221.955884][ T7222] BTRFS info (device loop2): auto enabling async discard [ 221.976050][ T7226] F2FS-fs (loop0): invalid crc value [ 222.063823][ T7226] F2FS-fs (loop0): Found nat_bits in checkpoint [ 222.364167][ T7121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.425606][ T7121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.436198][ T7226] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 222.465814][ T7121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.498542][ T5766] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.576790][ T7121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.102923][ T7121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.165794][ T5770] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 223.234923][ T7121] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.270534][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.277798][ T5931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.356685][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.363878][ T5950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.404949][ T5770] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 223.414539][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.456995][ T5770] usb 3-1: Product: syz [ 223.461244][ T5770] usb 3-1: Manufacturer: syz [ 223.505686][ T5770] usb 3-1: SerialNumber: syz [ 223.559382][ T5770] usb 3-1: config 0 descriptor?? [ 223.587746][ T7121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.399327][ T5770] usb 3-1: USB disconnect, device number 7 [ 224.776413][ T7300] syzkaller0: entered promiscuous mode [ 224.810647][ T7300] syzkaller0: entered allmulticast mode [ 225.343108][ T7314] loop1: detected capacity change from 0 to 256 [ 225.519661][ T7314] FAT-fs (loop1): Directory bread(block 64) failed [ 225.526939][ T7314] FAT-fs (loop1): Directory bread(block 65) failed [ 225.549722][ T7314] FAT-fs (loop1): Directory bread(block 66) failed [ 225.556797][ T7314] FAT-fs (loop1): Directory bread(block 67) failed [ 225.563768][ T7314] FAT-fs (loop1): Directory bread(block 68) failed [ 225.585146][ T7314] FAT-fs (loop1): Directory bread(block 69) failed [ 225.593803][ T7314] FAT-fs (loop1): Directory bread(block 70) failed [ 225.624604][ T7314] FAT-fs (loop1): Directory bread(block 71) failed [ 225.631905][ T7314] FAT-fs (loop1): Directory bread(block 72) failed [ 225.652170][ T7314] FAT-fs (loop1): Directory bread(block 73) failed [ 226.135500][ T788] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 226.345487][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 226.356477][ T788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.382340][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.401822][ T788] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 226.412363][ T788] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 226.421447][ T788] usb 2-1: Product: syz [ 226.426378][ T788] usb 2-1: Manufacturer: syz [ 226.431068][ T788] usb 2-1: SerialNumber: syz [ 226.452363][ T788] usb 2-1: config 0 descriptor?? [ 226.696107][ T788] usb 2-1: USB disconnect, device number 7 [ 227.550680][ T5757] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 227.771292][ T5757] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.786124][ T5757] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 227.795103][ T5757] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 227.806999][ T5757] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 227.816359][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.838825][ T7324] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 227.848472][ T5757] hub 2-1:1.0: bad descriptor, ignoring hub [ 227.854463][ T5757] hub: probe of 2-1:1.0 failed with error -5 [ 227.862585][ T5757] cdc_wdm 2-1:1.0: skipping garbage [ 227.868010][ T5757] cdc_wdm 2-1:1.0: skipping garbage [ 227.878706][ T5757] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 227.884954][ T5757] cdc_wdm 2-1:1.0: Unknown control protocol [ 228.524429][ T7121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.581493][ T7324] usb 2-1: reset full-speed USB device number 8 using dummy_hcd [ 228.863258][ T7325] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 228.901752][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 228.908773][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 228.916507][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 228.923172][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 228.929966][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 228.936629][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 228.944268][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 228.950930][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 228.965356][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 228.972034][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 228.978452][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 228.985111][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 228.991305][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 229.751446][ T5757] usb 2-1: USB disconnect, device number 8 [ 229.819911][ T7347] loop2: detected capacity change from 0 to 256 [ 230.387023][ T7121] veth0_vlan: entered promiscuous mode [ 230.418296][ T7121] veth1_vlan: entered promiscuous mode [ 230.431364][ T7361] loop0: detected capacity change from 0 to 512 [ 230.459912][ T7361] EXT4-fs: Ignoring removed oldalloc option [ 230.535269][ T7361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.552579][ T7121] veth0_macvtap: entered promiscuous mode [ 230.595673][ T788] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 230.625128][ T7121] veth1_macvtap: entered promiscuous mode [ 230.721191][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.738249][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.757731][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.781815][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.825351][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.841199][ T788] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 230.852074][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.859932][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.891834][ T788] usb 3-1: Product: syz [ 230.891853][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.902123][ T788] usb 3-1: Manufacturer: syz [ 230.926526][ T7121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.941762][ T788] usb 3-1: SerialNumber: syz [ 230.956187][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.974296][ T788] usb 3-1: config 0 descriptor?? [ 230.984907][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.002547][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.016354][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.052409][ T7121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.079610][ T7121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.114972][ T7121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.163960][ T7121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.208753][ T7121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.226697][ T788] usb 3-1: USB disconnect, device number 8 [ 231.240893][ T7121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.273694][ T7121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.615633][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.670071][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.771164][ T5942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.798844][ T5942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.966992][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 233.155126][ T7396] loop1: detected capacity change from 0 to 512 [ 233.176741][ T7396] journal_path: Lookup failure for './file0' [ 233.183119][ T7396] EXT4-fs: error: could not find journal device path [ 233.777747][ T7410] loop2: detected capacity change from 0 to 1024 [ 233.811844][ T7410] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.873031][ T7410] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 233.939157][ T7410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.036443][ T7410] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: inode #11: comm syz.2.376: missing EA_INODE flag [ 234.080510][ T7410] EXT4-fs (loop2): Remounting filesystem read-only [ 234.241647][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.805343][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 235.385593][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 235.526068][ T7452] loop0: detected capacity change from 0 to 1024 [ 235.599568][ T7452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.614739][ T27] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 235.644611][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.690815][ T27] usb 2-1: Product: syz [ 235.695160][ T27] usb 2-1: Manufacturer: syz [ 235.757346][ T27] usb 2-1: SerialNumber: syz [ 235.765843][ T7399] loop4: detected capacity change from 0 to 65536 [ 235.808014][ T27] usb 2-1: config 0 descriptor?? [ 235.826274][ T7452] loop0: detected capacity change from 1024 to 64 [ 235.887979][ T7399] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 235.899334][ T7457] EXT4-fs error (device loop0): ext4_xattr_ibody_get:657: inode #15: comm syz.0.385: corrupted in-inode xattr: bad magic number in in-inode xattr [ 235.957728][ T7417] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 236.025766][ T7457] EXT4-fs error (device loop0): get_max_inline_xattr_value_size:69: inode #15: comm syz.0.385: corrupt xattr in inline inode [ 236.116365][ T7399] XFS (loop4): Ending clean mount [ 236.121747][ T787] usb 2-1: USB disconnect, device number 9 [ 236.220820][ T7399] XFS (loop4): Quotacheck needed: Please wait. [ 236.234179][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.357661][ T5765] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /97/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 236.411714][ T7399] XFS (loop4): Quotacheck: Done. [ 236.587855][ T7121] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 236.601663][ T5931] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2249: inode #15: comm kworker/u4:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 236.633318][ T5931] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 1803188595: comm kworker/u4:13: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 236.725750][ T5931] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 236.763277][ T5931] EXT4-fs (loop0): This should not happen!! Data will be lost [ 236.763277][ T5931] [ 236.817321][ T5931] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2249: inode #15: comm kworker/u4:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 236.865565][ T5931] EXT4-fs error (device loop0): ext4_ind_map_blocks:604: inode #15: comm kworker/u4:13: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 236.934375][ T5931] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117 [ 236.963252][ T5931] EXT4-fs (loop0): This should not happen!! Data will be lost [ 236.963252][ T5931] [ 236.989720][ T5765] EXT4-fs (loop0): Inode 15 (ffff88805fecee00): i_reserved_data_blocks (1) not cleared! [ 237.032219][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.108954][ T7454] kmmpd-loop0: attempt to access beyond end of device [ 237.108954][ T7454] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 237.149506][ T7454] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 238.435575][ T28] audit: type=1326 audit(1767733104.615:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3da58f749 code=0x7ffc0000 [ 238.479332][ T28] audit: type=1326 audit(1767733104.615:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fb3da58f749 code=0x7ffc0000 [ 238.557748][ T28] audit: type=1326 audit(1767733104.615:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3da58f749 code=0x7ffc0000 [ 238.629152][ T28] audit: type=1326 audit(1767733104.615:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3da58f749 code=0x7ffc0000 [ 238.699509][ T28] audit: type=1326 audit(1767733104.615:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3da58f749 code=0x7ffc0000 [ 238.723729][ T28] audit: type=1326 audit(1767733104.615:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3da58f749 code=0x7ffc0000 [ 238.805459][ T28] audit: type=1326 audit(1767733104.615:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3da58f749 code=0x7ffc0000 [ 238.883534][ T28] audit: type=1326 audit(1767733104.615:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb3da58f749 code=0x7ffc0000 [ 238.934837][ T28] audit: type=1326 audit(1767733104.615:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3da58f749 code=0x7ffc0000 [ 238.969862][ T28] audit: type=1326 audit(1767733104.615:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.1.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3da58f749 code=0x7ffc0000 [ 239.295937][ T5769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.307637][ T5769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.316729][ T5769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.327601][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.336055][ T5769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 239.347626][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.349075][ T7512] chnl_net:caif_netlink_parms(): no params data found [ 240.479146][ T7512] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.486663][ T7512] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.494132][ T7512] bridge_slave_0: entered allmulticast mode [ 240.506345][ T7512] bridge_slave_0: entered promiscuous mode [ 240.517750][ T7512] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.537964][ T7512] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.545384][ T7512] bridge_slave_1: entered allmulticast mode [ 240.553165][ T7512] bridge_slave_1: entered promiscuous mode [ 240.600749][ T7512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.613232][ T7512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.752765][ T7512] team0: Port device team_slave_0 added [ 240.793271][ T7512] team0: Port device team_slave_1 added [ 240.979820][ T7512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.003825][ T7512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.063845][ T7512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.113752][ T7512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.123315][ T7512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.176707][ T7512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.305439][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 241.369918][ T5855] IPVS: starting estimator thread 0... [ 241.462418][ T7512] hsr_slave_0: entered promiscuous mode [ 241.468569][ T7541] IPVS: using max 26 ests per chain, 62400 per kthread [ 241.490088][ T7512] hsr_slave_1: entered promiscuous mode [ 241.501141][ T7512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.514134][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 241.527307][ T7512] Cannot create hsr debugfs directory [ 241.588812][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.643022][ T9] usb 5-1: Product: syz [ 241.662797][ T9] usb 5-1: Manufacturer: syz [ 241.686153][ T9] usb 5-1: SerialNumber: syz [ 241.715498][ T5769] Bluetooth: hci0: command tx timeout [ 241.727021][ T9] usb 5-1: config 0 descriptor?? [ 241.955537][ T9] usb 5-1: USB disconnect, device number 2 [ 242.660143][ T7512] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 242.698270][ T7512] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 242.711620][ T7512] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 242.727110][ T7512] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 243.727405][ T7512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.796057][ T5769] Bluetooth: hci0: command tx timeout [ 243.799182][ T7512] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.848201][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.855781][ T5931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.902101][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.909366][ T5931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.205365][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 246.138005][ T7590] syz.2.410 (7590): drop_caches: 2 [ 246.166093][ T5769] Bluetooth: hci0: command tx timeout [ 246.172225][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 246.180770][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 246.336924][ T7512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.709418][ T9] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 246.722654][ T9] usb 2-1: config 0 has no interface number 0 [ 246.732193][ T9] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 246.746433][ T9] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 246.765265][ T9] usb 2-1: config 0 interface 88 has no altsetting 0 [ 246.774812][ T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 246.785286][ T9] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 246.805536][ T9] usb 2-1: Product: syz [ 246.809791][ T9] usb 2-1: Manufacturer: 鸵順쏤쇖堫ᔛ涭싧ᮜ憳솟˭瓦⁚́՝ᮛ甥ऱꆨ㿃俒㺭樽﷯驝¾뤀ﰉꭧ草漓꧷☾픴෸啚 [ 246.835738][ T9] usb 2-1: SerialNumber: syz [ 246.856632][ T9] usb 2-1: config 0 descriptor?? [ 247.040255][ T9] input: 鸵順쏤쇖堫ᔛ涭싧ᮜ憳솟˭瓦⁚́՝ᮛ甥ऱꆨ㿃俒㺭樽﷯驝¾뤀ﰉꭧ草漓꧷☾픴෸啚 s as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input7 [ 247.156628][ T9] usb 2-1: USB disconnect, device number 10 [ 247.310035][ T6302] udevd[6302]: Error opening device "/dev/input/event4": No such file or directory [ 247.351243][ T6302] udevd[6302]: Unable to EVIOCGABS device "/dev/input/event4" [ 247.386381][ T6302] udevd[6302]: Unable to EVIOCGABS device "/dev/input/event4" [ 247.458158][ T7596] netlink: 'syz.2.412': attribute type 4 has an invalid length. [ 247.591481][ T7512] veth0_vlan: entered promiscuous mode [ 247.631474][ T7512] veth1_vlan: entered promiscuous mode [ 247.734670][ T7512] veth0_macvtap: entered promiscuous mode [ 247.756552][ T7512] veth1_macvtap: entered promiscuous mode [ 247.795678][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 247.827504][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.859937][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.885324][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.905268][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.936784][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.978125][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.007382][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.028035][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.042379][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 248.057303][ T7512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.065586][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.074526][ T9] usb 2-1: Product: syz [ 248.099274][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.110232][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.118318][ T9] usb 2-1: Manufacturer: syz [ 248.125924][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.138891][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.145701][ T9] usb 2-1: SerialNumber: syz [ 248.158548][ T7600] loop4: detected capacity change from 0 to 40427 [ 248.167609][ T9] usb 2-1: config 0 descriptor?? [ 248.192990][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.204103][ T5769] Bluetooth: hci0: command tx timeout [ 248.211446][ T7600] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 248.244259][ T7600] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 248.269204][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.300658][ T7512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.313190][ T7600] F2FS-fs (loop4): invalid crc value [ 248.364231][ T7512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.404058][ T7600] F2FS-fs (loop4): Found nat_bits in checkpoint [ 248.411722][ T9] usb 2-1: USB disconnect, device number 11 [ 248.442176][ T7512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.502932][ T7512] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.551388][ T7512] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.575465][ T7512] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.630469][ T7512] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.785755][ T7600] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 248.831543][ T7600] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 249.796760][ T5929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.951479][ T5929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.253903][ T5931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.273404][ T5931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.597884][ T7651] loop5: detected capacity change from 0 to 128 [ 250.685937][ T7651] hpfs: filesystem error: invalid number of hotfixes: 256, used: 2066844985; already mounted read-only [ 250.730734][ T7651] hpfs: filesystem error: improperly stopped [ 250.767607][ T7651] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 250.803189][ T7651] hpfs: You really don't want any checks? You are crazy... [ 250.846921][ T7651] hpfs: hpfs_map_sector(): read error [ 250.852374][ T7651] hpfs: code page support is disabled [ 250.892501][ T7651] ================================================================== [ 250.900645][ T7651] BUG: KASAN: use-after-free in strcmp+0x6f/0xb0 [ 250.907090][ T7651] Read of size 1 at addr ffff888051a26fa6 by task syz.5.392/7651 [ 250.914870][ T7651] [ 250.917261][ T7651] CPU: 1 PID: 7651 Comm: syz.5.392 Not tainted syzkaller #0 [ 250.924596][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.934701][ T7651] Call Trace: [ 250.938020][ T7651] [ 250.940984][ T7651] dump_stack_lvl+0x16c/0x230 [ 250.945707][ T7651] ? __lock_acquire+0x7c80/0x7c80 [ 250.950773][ T7651] ? show_regs_print_info+0x20/0x20 [ 250.956034][ T7651] ? load_image+0x3b0/0x3b0 [ 250.960598][ T7651] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 250.966026][ T7651] ? __virt_addr_valid+0x18c/0x540 [ 250.971181][ T7651] ? __virt_addr_valid+0x469/0x540 [ 250.976341][ T7651] print_report+0xac/0x220 [ 250.980801][ T7651] ? strcmp+0x6f/0xb0 [ 250.984808][ T7651] kasan_report+0x117/0x150 [ 250.989345][ T7651] ? strcmp+0x6f/0xb0 [ 250.993370][ T7651] strcmp+0x6f/0xb0 [ 250.997229][ T7651] hpfs_get_ea+0x115/0xda0 [ 251.001701][ T7651] ? hpfs_read_ea+0xba0/0xba0 [ 251.006604][ T7651] ? __getblk_gfp+0x54/0x660 [ 251.011240][ T7651] ? __bread_gfp+0x64/0x330 [ 251.015779][ T7651] ? hpfs_map_sector+0x14f/0x370 [ 251.020752][ T7651] ? hpfs_map_fnode+0x27e/0x690 [ 251.025643][ T7651] hpfs_read_inode+0x19e/0x1010 [ 251.030550][ T7651] ? iget_locked+0x733/0x840 [ 251.035183][ T7651] ? hpfs_init_inode+0x2d0/0x2d0 [ 251.040195][ T7651] ? security_inode_alloc+0xc1/0x110 [ 251.045525][ T7651] ? do_raw_spin_unlock+0x121/0x230 [ 251.050787][ T7651] ? hpfs_init_inode+0x1d0/0x2d0 [ 251.055765][ T7651] hpfs_fill_super+0x12d5/0x1ec0 [ 251.060757][ T7651] ? hpfs_mount+0x40/0x40 [ 251.065118][ T7651] ? vscnprintf+0x80/0x80 [ 251.069572][ T7651] ? down_read_killable+0x340/0x340 [ 251.074799][ T7651] ? setup_bdev_super+0x56b/0x660 [ 251.079870][ T7651] mount_bdev+0x22b/0x2d0 [ 251.084234][ T7651] ? hpfs_mount+0x40/0x40 [ 251.088595][ T7651] ? get_tree_bdev+0x510/0x510 [ 251.093403][ T7651] ? vfs_parse_fs_param+0x420/0x420 [ 251.098633][ T7651] legacy_get_tree+0xea/0x180 [ 251.103341][ T7651] ? hpfs_ioctl+0x240/0x240 [ 251.108196][ T7651] vfs_get_tree+0x8c/0x280 [ 251.112661][ T7651] do_new_mount+0x24b/0xa40 [ 251.117208][ T7651] __se_sys_mount+0x2da/0x3c0 [ 251.121926][ T7651] ? __x64_sys_mount+0xc0/0xc0 [ 251.126733][ T7651] ? lockdep_hardirqs_on+0x98/0x150 [ 251.131992][ T7651] ? __x64_sys_mount+0x20/0xc0 [ 251.136780][ T7651] do_syscall_64+0x55/0xb0 [ 251.141223][ T7651] ? clear_bhb_loop+0x40/0x90 [ 251.145933][ T7651] ? clear_bhb_loop+0x40/0x90 [ 251.150648][ T7651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.156595][ T7651] RIP: 0033:0x7fb70fd90eea [ 251.161058][ T7651] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.180791][ T7651] RSP: 002b:00007fb710c8be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 251.189254][ T7651] RAX: ffffffffffffffda RBX: 00007fb710c8bef0 RCX: 00007fb70fd90eea [ 251.197264][ T7651] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007fb710c8beb0 [ 251.205270][ T7651] RBP: 000020000000a000 R08: 00007fb710c8bef0 R09: 0000000003200041 [ 251.213299][ T7651] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 251.221295][ T7651] R13: 00007fb710c8beb0 R14: 0000000000009e18 R15: 0000200000000400 [ 251.229309][ T7651] [ 251.232375][ T7651] [ 251.234719][ T7651] The buggy address belongs to the physical page: [ 251.241172][ T7651] page:ffffea0001468980 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x51a26 [ 251.251360][ T7651] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 251.258500][ T7651] page_type: 0xffffffff() [ 251.262852][ T7651] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 251.271454][ T7651] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 251.280147][ T7651] page dumped because: kasan: bad access detected [ 251.286593][ T7651] page_owner tracks the page as freed [ 251.291984][ T7651] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7613, tgid 7612 (syz.1.415), ts 248758710006, free_ts 250494712677 [ 251.309637][ T7651] post_alloc_hook+0x1cd/0x210 [ 251.314470][ T7651] get_page_from_freelist+0x195c/0x19f0 [ 251.320052][ T7651] __alloc_pages+0x1e3/0x460 [ 251.324670][ T7651] __folio_alloc+0x10/0x20 [ 251.329117][ T7651] vma_alloc_folio+0x47a/0x8f0 [ 251.333913][ T7651] shmem_alloc_folio+0x179/0x230 [ 251.338875][ T7651] shmem_alloc_and_acct_folio+0x189/0x630 [ 251.344619][ T7651] shmem_get_folio_gfp+0xcde/0x2ac0 [ 251.349843][ T7651] shmem_fault+0x1b6/0x7f0 [ 251.354304][ T7651] __do_fault+0x13b/0x4e0 [ 251.358658][ T7651] handle_mm_fault+0x3886/0x4920 [ 251.363625][ T7651] __get_user_pages+0x5ea/0x1470 [ 251.368593][ T7651] populate_vma_page_range+0x2b6/0x370 [ 251.374076][ T7651] __mm_populate+0x24c/0x380 [ 251.378693][ T7651] vm_mmap_pgoff+0x2e7/0x400 [ 251.383314][ T7651] do_syscall_64+0x55/0xb0 [ 251.387755][ T7651] page last free stack trace: [ 251.392438][ T7651] free_unref_page_prepare+0x7ce/0x8e0 [ 251.397931][ T7651] free_unref_page_list+0xbe/0x860 [ 251.403097][ T7651] release_pages+0x1fa0/0x2220 [ 251.407899][ T7651] __folio_batch_release+0x71/0xe0 [ 251.413050][ T7651] shmem_undo_range+0x5d0/0x1a40 [ 251.418021][ T7651] shmem_evict_inode+0x273/0xa70 [ 251.422986][ T7651] evict+0x486/0x870 [ 251.426907][ T7651] __dentry_kill+0x431/0x650 [ 251.431530][ T7651] dentry_kill+0xb8/0x290 [ 251.435887][ T7651] dput+0xfe/0x1e0 [ 251.439631][ T7651] __fput+0x5e5/0x970 [ 251.443645][ T7651] task_work_run+0x1ce/0x250 [ 251.448261][ T7651] do_exit+0x90b/0x23c0 [ 251.452447][ T7651] do_group_exit+0x21b/0x2d0 [ 251.457093][ T7651] get_signal+0x12fc/0x1400 [ 251.461641][ T7651] arch_do_signal_or_restart+0x9c/0x7b0 [ 251.467239][ T7651] [ 251.469588][ T7651] Memory state around the buggy address: [ 251.475251][ T7651] ffff888051a26e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 251.483349][ T7651] ffff888051a26f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 251.491437][ T7651] >ffff888051a26f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 251.499525][ T7651] ^ [ 251.504646][ T7651] ffff888051a27000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 251.512731][ T7651] ffff888051a27080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 251.520831][ T7651] ================================================================== [ 251.556500][ T7651] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 251.563770][ T7651] CPU: 0 PID: 7651 Comm: syz.5.392 Not tainted syzkaller #0 [ 251.571101][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.581199][ T7651] Call Trace: [ 251.584519][ T7651] [ 251.587486][ T7651] dump_stack_lvl+0x16c/0x230 [ 251.592223][ T7651] ? show_regs_print_info+0x20/0x20 [ 251.597738][ T7651] ? load_image+0x3b0/0x3b0 [ 251.602295][ T7651] panic+0x2c0/0x710 [ 251.606234][ T7651] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 251.612438][ T7651] ? bpf_jit_dump+0xd0/0xd0 [ 251.616996][ T7651] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 251.622930][ T7651] ? _raw_spin_unlock+0x40/0x40 [ 251.627852][ T7651] ? strcmp+0x6f/0xb0 [ 251.631874][ T7651] check_panic_on_warn+0x84/0xa0 [ 251.636854][ T7651] ? strcmp+0x6f/0xb0 [ 251.640876][ T7651] end_report+0x6f/0x140 [ 251.645157][ T7651] kasan_report+0x128/0x150 [ 251.649704][ T7651] ? strcmp+0x6f/0xb0 [ 251.653735][ T7651] strcmp+0x6f/0xb0 [ 251.657595][ T7651] hpfs_get_ea+0x115/0xda0 [ 251.662079][ T7651] ? hpfs_read_ea+0xba0/0xba0 [ 251.666834][ T7651] ? __getblk_gfp+0x54/0x660 [ 251.671486][ T7651] ? __bread_gfp+0x64/0x330 [ 251.676051][ T7651] ? hpfs_map_sector+0x14f/0x370 [ 251.681043][ T7651] ? hpfs_map_fnode+0x27e/0x690 [ 251.685944][ T7651] hpfs_read_inode+0x19e/0x1010 [ 251.690844][ T7651] ? iget_locked+0x733/0x840 [ 251.695476][ T7651] ? hpfs_init_inode+0x2d0/0x2d0 [ 251.700457][ T7651] ? security_inode_alloc+0xc1/0x110 [ 251.705786][ T7651] ? do_raw_spin_unlock+0x121/0x230 [ 251.711299][ T7651] ? hpfs_init_inode+0x1d0/0x2d0 [ 251.716295][ T7651] hpfs_fill_super+0x12d5/0x1ec0 [ 251.721301][ T7651] ? hpfs_mount+0x40/0x40 [ 251.725679][ T7651] ? vscnprintf+0x80/0x80 [ 251.730074][ T7651] ? down_read_killable+0x340/0x340 [ 251.735325][ T7651] ? setup_bdev_super+0x56b/0x660 [ 251.740406][ T7651] mount_bdev+0x22b/0x2d0 [ 251.744793][ T7651] ? hpfs_mount+0x40/0x40 [ 251.749187][ T7651] ? get_tree_bdev+0x510/0x510 [ 251.754005][ T7651] ? vfs_parse_fs_param+0x420/0x420 [ 251.759260][ T7651] legacy_get_tree+0xea/0x180 [ 251.763989][ T7651] ? hpfs_ioctl+0x240/0x240 [ 251.768556][ T7651] vfs_get_tree+0x8c/0x280 [ 251.773017][ T7651] do_new_mount+0x24b/0xa40 [ 251.777582][ T7651] __se_sys_mount+0x2da/0x3c0 [ 251.782311][ T7651] ? __x64_sys_mount+0xc0/0xc0 [ 251.787122][ T7651] ? lockdep_hardirqs_on+0x98/0x150 [ 251.792373][ T7651] ? __x64_sys_mount+0x20/0xc0 [ 251.797189][ T7651] do_syscall_64+0x55/0xb0 [ 251.801689][ T7651] ? clear_bhb_loop+0x40/0x90 [ 251.806417][ T7651] ? clear_bhb_loop+0x40/0x90 [ 251.811233][ T7651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.817189][ T7651] RIP: 0033:0x7fb70fd90eea [ 251.821646][ T7651] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.841300][ T7651] RSP: 002b:00007fb710c8be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 251.849766][ T7651] RAX: ffffffffffffffda RBX: 00007fb710c8bef0 RCX: 00007fb70fd90eea [ 251.857803][ T7651] RDX: 000020000000a000 RSI: 0000200000000000 RDI: 00007fb710c8beb0 [ 251.865827][ T7651] RBP: 000020000000a000 R08: 00007fb710c8bef0 R09: 0000000003200041 [ 251.873842][ T7651] R10: 0000000003200041 R11: 0000000000000246 R12: 0000200000000000 [ 251.881861][ T7651] R13: 00007fb710c8beb0 R14: 0000000000009e18 R15: 0000200000000400 [ 251.889907][ T7651] [ 251.893322][ T7651] Kernel Offset: disabled [ 251.897699][ T7651] Rebooting in 86400 seconds..