last executing test programs: 9.275399564s ago: executing program 1 (id=869): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x2c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x2c}}, 0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0], 0x0) 7.576074344s ago: executing program 1 (id=876): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f00000000c0)={0x40, 0x3d}, 0x0, 0x0, 0x0, 0x0}) 7.420923189s ago: executing program 3 (id=880): socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_rdma(0x10, 0x3, 0x14) r0 = semget$private(0x0, 0x4, 0x1) semctl$GETPID(r0, 0x3, 0xb, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8, 0x0, 0xc, 0x0, 0x6368, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB], 0x40}}, 0x0) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r4, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r9, r5}) close(r4) r10 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r10, &(0x7f0000000080)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb0100", 0x25}], 0x1) 6.751841296s ago: executing program 3 (id=883): socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x23, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x64}}, 0x24000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e22, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 3.965262384s ago: executing program 0 (id=896): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r4}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000140)) 3.964055115s ago: executing program 0 (id=897): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x2ca}, 0x18) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r2, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_val={0x18, 0x3}, @map_fd={0x18, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0xf8d3, 0xde, &(0x7f0000000b80)=""/222, 0x41000, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x10, 0x1000, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f00000005c0)=[{0x5, 0x2, 0x10, 0xa}, {0x4, 0x1114, 0x2, 0x3}, {0x1, 0xf, 0x5, 0xa}, {0x2, 0x2, 0x8, 0x6}, {0x5, 0x5, 0x8, 0x3}, {0x5, 0x2, 0xb, 0x3}, {0x3, 0x5, 0x1, 0x9}, {0x3, 0x4, 0x3, 0x2}], 0x10, 0x8b}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000000000ff00000900020073797a31000000000500010007f2ff001c0007800c00018008000140fffffffe0c0002800800014004a20d"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3.681444373s ago: executing program 2 (id=901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x43000c80) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x12000092) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2) 3.680732682s ago: executing program 0 (id=902): r0 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x2001, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.621986799s ago: executing program 0 (id=903): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4156, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_retopts={{0x10}}], 0x10}, 0x4000000) 3.487990312s ago: executing program 0 (id=904): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000100)={0xd000, 0x10000, 0x7, 0x3, 0x6}) readv(r4, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) syz_io_uring_setup(0x78ef, &(0x7f0000000080)={0x0, 0xbb36, 0x20}, 0xfffffffffffffffe, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 3.487592122s ago: executing program 1 (id=905): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/fscaps', 0x0, 0x0) lseek(r3, 0x1, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_open_dev$video4linux(0x0, 0x100007, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) syz_mount_image$affs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x14000, &(0x7f00000003c0)={[{@reserved={'reserved', 0x3d, 0x7}}, {@mufs}, {@root={'root', 0x3d, 0x3}}, {@verbose}, {@bs={'bs', 0x3d, 0x800}}, {@protect}, {@bs={'bs', 0x3d, 0x1000}}, {@notruncate}, {@notruncate}, {@protect}, {@mode={'mode', 0x3d, 0x9}}, {@reserved={'reserved', 0x3d, 0x9}}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@dont_hash}, {@uid_eq}]}, 0x1, 0x9dc3, &(0x7f0000013cc0)="$eJwEwAMAbQUAwNBs27aXbdu2bS/3ro1s27Zt27a/0blvgPcP8IEBPjjAhwb48AAfGeCjA3xsgI8P8IkBPjnApwb49ACfGeCzA3xugM8P8IUBvjjAlwb48gBfGeCrA3xtgK8P8I0BvjnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgEMGOHSAwwY4fIAjBjhygKMGOHqAYwY4doDjBDhugOMFOH6AEwQ4YYATBThxgJMEOGmAkwU4eYBTBDhlgFMFOHWA0wQ4bYDTBTh9gDMEOGOAMwU4c4CzBDhrgLMFOHuAcwQ4Z4BzBTh3gPMEOG+A8wU4f4ALBLhggAsFuHCAiwS4aICLBbh4gEsEuGSASwW4dIDLBEiAywa4XIDLB7hCgCsGuFKAKwe4SoCrBrhagKsHuEaAawa4VoBrB7hOgOsGuF6A6we4QYAbBrhRgBsHuEmAmwa4WYCbB7hFgFsGuFWAWwe4TYDbBrhdgNsHuEOAOwa4U4A7B7hLgLsGuFuAuwe4R4B7BrhXgHsHuE+A+wa4X4D7B3hAgAcGeFCABwd4SICHBnhYgIcHeESARwZ4VIBHB3hMgMcGeFyAxwd4QoAnBnhSgCcHeEqApwZogKcFeHqAZwR4ZoBnBXh2gOcEeG6AgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AM8L8PwALwjwwgAvCvDiAC8J8NIALwvw8gCvCPDKAK8K8OoArwnw2gCvC/D6AG8I8MYAbwrw5gBvCfDWAG8L8PYA7wjwzgDvCvDuAO8J8N4A7wvw/gAfCPDBAB8K8OEAHwnw0QAfC/DxAJ8I8MkAnwrw6QCfCfDZAJ8L8PkAXwjwxQBfCvDlAF8J8NUAXwvw9QDfCPDNAN8K8O0A3wnw3QDfC/D9AD8I8MMAPwrw4wA/CfDTAD8L8PMAvwjwywC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AP8I8M8A/wrw7wD/CfDfAP8LcEiAQwMcFuDwAEcEODLAUQGODnBMgGMDHCfEcUMcL8TxQ5wgxAlDnCjEiUOcJMRJQ5wsxMlDnCLEKUOcKsSpQ5wmxGlDnC7E6UOcIcQZQ5wpxJlDnCXEWUOcLcTZQ5wjxDlDnCvEuUOcJ8R5Q5wvxPlDXCDEBUNcKMSFQ1wkxEVDXCzExUNcIsQlQ1wqxKVDXCZEQlw2xOVCXD7EFUJcMcSVQlw5xFVCXDXE1UJcPcQ1QlwzxLVCXDvEdUJcN8T1Qlw/xA1C3DDEjULcOMRNQtw0xM1C3DzELULcMsStQtw6xG1C3DbE7ULcPsQdQtwxxJ1C3DnEXULcNcTdQtw9xD1C3DPEvULcO8R9Qtw3xP1C3D/EA0I8MMSDQjw4xENCPDTEw0I8PMQjQjwyxKNCPDrEY0I8NsTjQjw+xBNCPDHEk0I8OcRTQjw1REM8LcTTQzwjxDNDPCvEs0M8J8RzQxyEGIQYhhiFGIeYhJiGmIWYh1iEWIZYhViH2ITYhtiF2Id4Xojnh3hBiBeGeFGIF4d4SYiXhnhZiJeHeEWIV4Z4VYhXh3hNiNeGeF2I14d4Q4g3hnhTiDeHeEuIt4Z4W4i3h3hHiHeGeFeId4d4T4j3hnhfiPeH+ECID4b4UIgPh/hIiI+G+FiIj4f4RIhPhvhUiE+H+EyIz4b4XIjPh/hCiC+G+FKIL4f4SoivhvhaiK+H+EaIb4b4Vohvh/hOiO+G+F6I74f4QYgfhvhRiB+H+EmIn4b4WYifh/hFiF+G+FWIX4f4TYjfhvhdiN+H+EOIP4b4U4g/h/hLiL+G+FuIv4f4R4h/hvhXiH+H+E+I/4b4X4hDQhwa4rAQh4c4IsSRIY4KcXSIY0IcG+I4EY4b4XgRjh/hBBFOGOFEEU4c4SQRThrhZBFOHuEUEU4Z4VQRTh3hNBFOG+F0EU4f4QwRzhjhTBHOHOEsEc4a4WwRzh7hHBHOGeFcEc4d4TwRzhvhfBHOH+ECES4Y4UIRLhzhIhEuGuFiES4e4RIRLhnhUhEuHeEyERLhshEuF+HyEa4Q4YoRrhThyhGuEuGqEa4W4eoRrhHhmhGuFeHaEa4T4boRrhfh+hFuEOGGEW4U4cYRbhLhphFuFuHmEW4R4ZYRbhXh1hFuE+G2EW4X4fYR7hDhjhHuFOHOEe4S4a4R7hbh7hHuEeGeEe4V4d4R7hPhvhHuF+H+ER4Q4YERHhThwREeEuGhER4W4eERHhHhkREeFeHRER4T4bERHhfh8RGeEOGJEZ4U4ckRnhLhqREa4WkRnh7hGRGeGeFZEZ4d4TkRnhvhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCayK8NsLrIrw+whsivDHCmyK8OcJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wicifDLCpyJ8OsJnInw2wucifD7CFyJ8McKXInw5wlcifDXC1yJ8PcI3InwzwrcifDvCdyJ8N8L3Inw/wg8i/DDCjyL8OMJPIvw0ws8i/DzCLyL8MsKvIvw6wm8i/DbC7yL8PsIfIvwxwp8i/DnCXyL8NcLfIvw9wj8i/DPCvyL8O8J/Ivw3wv8iHBLh0AiHRTg8whERjoxwVISjIxwT4dgIx4lx3BjHi3H8GCeIccIYJ4px4hgniXHSGCeLcfIYp4hxyhininHqGKeJcdoYp4tx+hhniHHGGGeKceYYZ4lx1hhni3H2GOeIcc4Y54px7hjniXHeGOeLcf4YF4hxwRgXinHhGBeJcdEYF4tx8RiXiHHJGJeKcekYl4mRGJeNcbkYl49xhRhXjHGlGFeOcZUYV41xtRhXj3GNGNeMca0Y145xnRjXjXG9GNePcYMYN4xxoxg3jnGTGDeNcbMYN49xixi3jHGrGLeOcZsYt41xuxi3j3GHGHeMcacYd45xlxh3jXG3GHePcY8Y94xxrxj3jnGfGPeNcb8Y94/xgBgPjPGgGA+O8ZAYD43xsBgPj/GIGI+M8agYj47xmBiPjfG4GI+P8YQYT4zxpBhPjvGUGE+N0RhPi/H0GM+I8cwYz4rx7BjPifHcGAcxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jGeF+P5MV4Q44UxXhTjxTFeEuOlMV4W4+UxXhHjlTFeFePVMV4T47UxXhfj9THeEOONMd4U480x3hLjrTHeFuPtMd4R450x3hXj3THeE+O9Md4X4/0xPhDjgzE+FOPDMT4S46MxPhbj4zE+EeOTMT4V49MxPhPjszE+F+PzMb4Q44sxvhTjyzG+EuOrMb4W4+sxvhHjmzG+FePbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzH+F+OQGIfGOCzG4TGOiHFkjKNiHB3jmBjHxjhOguMmOF6C4yc4QYITJjhRghMnOEmCkyY4WYKTJzhFglMmOFWCUyc4TYLTJjhdgtMnOEOCMyY4U4IzJzhLgrMmOFuCsyc4R4JzJjhXgnMnOE+C8yY4X4LzJ7hAggsmuFCCCye4SIKLJrhYgosnuESCSya4VIJLJ7hMgiS4bILLJbh8giskuGKCKyW4coKrJLhqgqsluHqCayS4ZoJrJbh2guskuG6C6yW4foIbJLhhghsluHGCmyS4aYKbJbh5glskuGWCWyW4dYLbJLhtgtsluH2COyS4Y4I7JbhzgrskuGuCuyW4e4J7JLhngnsluHeC+yS4b4L7Jbh/ggckeGCCByV4cIKHJHhogocleHiCRyR4ZIJHJXh0gsckeGyCxyV4fIInJHhigicleHKCpyR4aoImeFqCpyd4RoJnJnhWgmcneE6C5yY4SDBIMEwwSjBOMEkwTTBLME+wSLBMsEqwTrBJsE2wS7BP8LwEz0/wggQvTPCiBC9O8JIEL03wsgQvT/CKBK9M8KoEr07wmgSvTfC6BK9P8IYEb0zwpgRvTvCWBG9N8LYEb0/wjgTvTPCuBO9O8J4E703wvgTvT/CBBB9M8KEEH07wkQQfTfCxBB9P8IkEn0zwqQSfTvCZBJ9N8LkEn0/whQRfTPClBF9O8JUEX03wtQRfT/CNBN9M8K0E307wnQTfTfC9BN9P8IMEP0zwowQ/TvCTBD9N8LMEP0/wiwS/TPCrBL9O8JsEv03wuwS/T/CHBH9M8KcEf07wlwR/TfC3BH9P8I8E/0zwrwT/TvCfBP9N8L8EhyQ4NMFhCQ5PcESCIxMcleDoBMckODbBcVIcN8XxUhw/xQlSnDDFiVKcOMVJUpw0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNcXZUpw9xTlSnDPFuVKcO8V5Upw3xflSnD/FBVJcMMWFUlw4xUVSXDTFxVJcPMUlUlwyxaVSXDrFZVIkxWVTXC7F5VNcIcUVU1wpxZVTXCXFVVNcLcXVU1wjxTVTXCvFtVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCrFo1M8JsVjUzwuxeNTPCHFE1M8KcWTUzwlxVNTNMXTUjw9xTNSPDPFs1I8O8VzUjw3xUGKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYrnpXh+ihekeGGKF6V4cYqXpHhpipeleHmKV6R4ZYpXpXh1itekeG2K16V4fYo3pHhjijeleHOKt6R4a4q3pXh7inekeGeKd6V4d4r3pHhviveleH+KD6T4YIoPpfhwio+k+GiKj6X4eIpPpPhkik+l+HSKz6T4bIrPpfh8ii+k+GKKL6X4coqvpPhqiq+l+HqKb6T4Zopvpfh2iu+k+G6K76X4foofpPhhih+l+HGKn6T4aYqfpfh5il+k+GWKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4p/pPhnin+l+HeK/6T4b4r/pTgkxaEpDktxeIojUhyZ4qgUR6c4JsWxKY6T4bgZjpfh+BlOkOGEGU6U4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDhjBnOlOHMGc6S4awZzpbh7BnOkeGcGc6V4dwZzpPhvBnOl+H8GS6Q4YIZLpThwhkukuGiGS6W4eIZLpHhkhkuleHSGS6TIRkum+FyGS6f4QoZrpjhShmunOEqGa6a4WoZrp7hGhmumeFaGa6d4ToZrpvhehmun+EGGW6Y4UYZbpzhJhlumuFmGW6e4RYZbpnhVhluneE2GW6b4XYZbp/hDhnumOFOGe6c4S4Z7prhbhnunuEeGe6Z4V4Z7p3hPhnum+F+Ge6f4QEZHpjhQRkenOEhGR6a4WEZHp7hERkemeFRGR6d4TEZHpvhcRken+EJGZ6Y4UkZnpzhKRmemqEZnpbh6RmekeGZGZ6V4dkZnpPhuRkOMgwyDDOMMowzTDJMM8wyzDMsMiwzrDKsM2wybDPsMuwzPC/D8zO8IMMLM7wow4szvCTDSzO8LMPLM7wiwyszvCrDqzO8JsNrM7wuw+szvCHDGzO8KcObM7wlw1szvC3D2zO8I8M7M7wrw7szvCfDezO8L8P7M3wgwwczfCjDhzN8JMNHM3wsw8czfCLDJzN8KsOnM3wmw2czfC7D5zN8IcMXM3wpw5czfCXDVzN8LcPXM3wjwzczfCvDtzN8J8N3M3wvw/cz/CDDDzP8KMOPM/wkw08z/CzDzzP8IsMvM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98z/CPDPzP8K8O/M/wnw38z/C/DIRkOzXBYhsMzHJHhyAxHZTg6wzEZjs1wnBzHzXG8HMfPcYIcJ8xxohwnznGSHCfNcbIcJ89xihynzHGqHKfOcZocp81xuhynz3GGHGfMcaYcZ85xlhxnzXG2HGfPcY4c58xxrhznznGeHOfNcb4c589xgRwXzHGhHBfOcZEcF81xsRwXz3GJHJfMcakcl85xmRzJcdkcl8tx+RxXyHHFHFfKceUcV8lx1RxXy3H1HNfIcc0c18px7RzXyXHdHNfLcf0cN8hxwxw3ynHjHDfJcdMcN8tx8xy3yHHLHLfKcesct8lx2xy3y3H7HHfIccccd8px5xx3yXHXHHfLcfcc98hxzxz3ynHvHPfJcd8c98tx/xwPyPHAHA/K8eAcD8nx0BwPy/HwHI/I8cgcj8rx6ByPyfHYHI/L8fgcT8jxxBxPyvHkHE/J8dQczfG0HE/P8Ywcz8zxrBzPzvGcHM/NcZBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzk+mONDOT6c4yM5PprjYzk+nuMTOT6Z41M5Pp3jMzk+m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e4xc5fpnjVzl+neM3OX6b43c5fp/jDzn+mONPOf6c4y85/prjbzn+nuMfOf6Z4185/p3jPzn+m+N/OQ7JcWiOw3IcnuOIHEfmOCrH0TmOyXFsjuMUOG6B4xU4foETFDhhgRMVOHGBkxQ4aYGTFTh5gVMUOGWBUxU4dYHTFDhtgdMVOH2BMxQ4Y4EzFThzgbMUOGuBsxU4e4FzFDhngXMVOHeB8xQ4b4HzFTh/gQsUuGCBCxW4cIGLFLhogYsVuHiBSxS4ZIFLFbh0gcsUSIHLFrhcgcsXuEKBKxa4UoErF7hKgasWuFqBqxe4RoFrFrhWgWsXuE6B6xa4XoHrF7hBgRsWuFGBGxe4SYGbFrhZgZsXuEWBWxa4VYFbF7hNgdsWuF2B2xe4Q4E7FrhTgTsXuEuBuxa4W4G7F7hHgXsWuFeBexe4T4H7FrhfgfsXeECBBxZ4UIEHF3hIgYcWeFiBhxd4RIFHFnhUgUcXeEyBxxZ4XIHHF3hCgScWeFKBJxd4SoGnFmiBpxV4eoFnFHhmgWcVeHaB5xR4boGDAoMCwwKjAuMCkwLTArMC8wKLAssCqwLrApsC2wK7AvsCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8q8O4C7ynw3gLvK/D+Ah8o8MECHyrw4QIfKfDRAh8r8PECnyjwyQKfKvDpAp8p8NkCnyvw+QJfKPDFAl8q8OUCXynw1QJfK/D1At8o8M0C3yrw7QLfKfDdAt8r8P0CPyjwwwI/KvDjAj8p8NMCPyvw8wK/KPDLAr8q8OsCvynw2wK/K/D7An8o8McCfyrw5wJ/KfDXAn8r8PcC/yjwzwL/KvDvAv8p8N8C/ytwSIFDCxxW4PACRxQ4ssBRBY4ucEyBYwscp8RxSxyvxPFLnKDECUucqMSJS5ykxElLnKzEyUucosQpS5yqxKlLnKbEaUucrsTpS5yhxBlLnKnEmUucpcRZS5ytxNlLnKPEOUucq8S5S5ynxHlLnK/E+UtcoMQFS1yoxIVLXKTERUtcrMTFS1yixCVLXKrEpUtcpkRKXLbE5UpcvsQVSlyxxJVKXLnEVUpctcTVSly9xDVKXLPEtUpcu8R1Sly3xPVKXL/EDUrcsMSNSty4xE1K3LTEzUrcvMQtStyyxK1K3LrEbUrctsTtSty+xB1K3LHEnUrcucRdSty1xN1K3L3EPUrcs8S9Sty7xH1K3LfE/Urcv8QDSjywxINKPLjEQ0o8tMTDSjy8xCNKPLLEo0o8usRjSjy2xONKPL7EE0o8scSTSjy5xFNKPLVESzytxNNLPKPEM0s8q8SzSzynxHNLHJQYlBiWGJUYl5iUmJaYlZiXWJRYlliVWJfYlNiW2JXYl3heieeXeEGJF5Z4UYkXl3hJiZeWeFmJl5d4RYlXlnhViVeXeE2J15Z4XYnXl3hDiTeWeFOJN5d4S4m3lnhbibeXeEeJd5Z4V4l3l3hPifeWeF+J95f4QIkPlvhQiQ+X+EiJj5b4WImPl/hEiU+W+FSJT5f4TInPlvhcic+X+EKJL5b4Uokvl/hKia+W+FqJr5f4RolvlvhWiW+X+E6J75b4Xonvl/hBiR+W+FGJH5f4SYmflvhZiZ+X+EWJX5b4VYlfl/hNid+W+F2J35f4Q4k/lvhTiT+X+EuJv5b4W4m/l/hHiX+W+FeJf5f4T4n/lvhfiUNKHFrisBKHlziixJEljipxdIljShxb4jgVjlvheBWOX+EEFU5Y4UQVTlzhJBVOWuFkFU5e4RQVTlnhVBVOXeE0FU5b4XQVTl/hDBXOWOFMFc5c4SwVzlrhbBXOXuEcFc5Z4VwVzl3hPBXOW+F8Fc5f4QIVLljhQhUuXOEiFS5a4WIVLl7hEhUuWeFSFS5d4TIVUuGyFS5X4fIVrlDhihWuVOHKFa5S4aoVrlbh6hWuUeGaFa5V4doVrlPhuhWuV+H6FW5Q4YYVblThxhVuUuGmFW5W4eYVblHhlhVuVeHWFW5T4bYVblfh9hXuUOGOFe5U4c4V7lLhrhXuVuHuFe5R4Z4V7lXh3hXuU+G+Fe5X4f4VHlDhgRUeVOHBFR5S4aEVHlbh4RUeUeGRFR5V4dEVHlPhsRUeV+HxFZ5Q4YkVnlThyRWeUuGpFVrhaRWeXuEZFZ5Z4VkVnl3hORWeW+GgwqDCsMKowrjCpMK0wqzCvMKiwrLCqsK6wqbCtsKuwr7C8yo8v8ILKrywwosqvLjCSyq8tMLLKry8wisqvLLCqyq8usJrKry2wusqvL7CGyq8scKbKry5wlsqvLXC2yq8vcI7KryzwrsqvLvCeyq8t8L7Kry/wgcqfLDChyp8uMJHKny0wscqfLzCJyp8ssKnKny6wmcqfLbC5yp8vsIXKnyxwpcqfLnCVyp8tcLXKny9wjcqfLPCtyp8u8J3Kny3wvcqfL/CDyr8sMKPKvy4wk8q/LTCzyr8vMIvKvyywq8q/LrCbyr8tsLvKvy+wh8q/LHCnyr8ucJfKvy1wt8q/L3CPyr8s8K/Kvy7wn8q/LfC/yocUuHQCodVOLzCERWOrHBUhaMrHFPh2ArHqXHcGsercfwaJ6hxwhonqnHiGiepcdIaJ6tx8hqnqHHKGqeqceoap6lx2hqnq3H6GmeoccYaZ6px5hpnqXHWGmercfYa56hxzhrnqnHuGuepcd4a56tx/hoXqHHBGheqceEaF6lx0RoXq3HxGpeocckal6px6RqXqZEal61xuRqXr3GFGlescaUaV65xlRpXrXG1GlevcY0a16xxrRrXrnGdGtetcb0a169xgxo3rHGjGjeucZMaN61xsxo3r3GLGrescasat65xmxq3rXG7GrevcYcad6xxpxp3rnGXGnetcbcad69xjxr3rHGvGveucZ8a961xvxr3r/GAGg+s8aAaD67xkBoPrfGwGg+v8Ygaj6zxqBqPrvGYGo+t8bgaj6/xhBpPrPGkGk+u8ZQaT63RGk+r8fQaz6jxzBrPqvHsGs+p8dwaBzUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX2NZ5X4/k1XlDjhTVeVOPFNV5S46U1Xlbj5TVeUeOVNV5V49U1XlPjtTVeV+P1Nd5Q44013lTjzTXeUuOtNd5W4+013lHjnTXeVePdNd5T47013lfj/TU+UOODNT5U48M1PlLjozU+VuPjNT5R45M1PlXj0zU+U+OzNT5X4/M1vlDjizW+VOPLNb5S46s1vlbj6zW+UeObNb5V49s1vlPjuzW+V+P7NX5Q44c1flTjxzV+UuOnNX5W4+c1flHjlzV+VePXNX5T47c1flfj9zX+UOOPNf5U4881/lLjrzX+VuPvNf5R4581/lXj3zX+U+O/Nf5X45Aah9Y4rMbhNY6ocWSNo2ocXeOYGsfWOE6D4zY4XoPjNzhBgxM2OFGDEzc4SYOTNjhZg5M3OEWDUzY4VYNTNzhNg9M2OF2D0zc4Q4MzNjhTgzM3OEuDszY4W4OzNzhHg3M2OFeDczc4T4PzNjhfg/M3uECDCza4UIMLN7hIg4s2uFiDize4RINLNrhUg0s3uEyDNLhsg8s1uHyDKzS4YoMrNbhyg6s0uGqDqzW4eoNrNLhmg2s1uHaD6zS4boPrNbh+gxs0uGGDGzW4cYObNLhpg5s1uHmDWzS4ZYNbNbh1g9s0uG2D2zW4fYM7NLhjgzs1uHODuzS4a4O7Nbh7g3s0uGeDezW4d4P7NLhvg/s1uH+DBzR4YIMHNXhwg4c0eGiDhzV4eINHNHhkg0c1eHSDxzR4bIPHNXh8gyc0eGKDJzV4coOnNHhqgzZ4WoOnN3hGg2c2eFaDZzd4ToPnNjhoMGgwbDBqMG4waTBtMGswb7BosGywarBusGmwbbBrsG/wvAbPb/CCBi9s8KIGL27wkgYvbfCyBi9v8IoGr2zwqgavbvCaBq9t8LoGr2/whgZvbPCmBm9u8JYGb23wtgZvb/COBu9s8K4G727wngbvbfC+Bu9v8IEGH2zwoQYfbvCRBh9t8LEGH2/wiQafbPCpBp9u8JkGn23wuQafb/CFBl9s8KUGX27wlQZfbfC1Bl9v8I0G32zwrQbfbvCdBt9t8L0G32/wgwY/bPCjBj9u8JMGP23wswY/b/CLBr9s8KsGv27wmwa/bfC7Br9v8IcGf2zwpwZ/bvCXBn9t8LcGf2/wjwb/bPCvBv9u8J8G/23wvwaHNDi0wWENDm9wRIMjGxzV4OgGxzQ4tsFxWhy3xfFaHL/FCVqcsMWJWpy4xUlanLTFyVqcvMUpWpyyxalanLrFaVqctsXpWpy+xRlanLHFmVqcucVZWpy1xdlanL3FOVqcs8W5Wpy7xXlanLfF+Vqcv8UFWlywxYVaXLjFRVpctMXFWly8xSVaXLLFpVpcusVlWqTFZVtcrsXlW1yhxRVbXKnFlVtcpcVVW1ytxdVbXKPFNVtcq8W1W1ynxXVbXK/F9VvcoMUNW9yoxY1b3KTFTVvcrMXNW9yixS1b3KrFrVvcpsVtW9yuxe1b3KHFHVvcqcWdW9ylxV1b3K3F3Vvco8U9W9yrxb1b3KfFfVvcr8X9WzygxQNbPKjFg1s8pMVDWzysxcNbPKLFI1s8qsWjWzymxWNbPK7F41s8ocUTWzypxZNbPKXFU1u0xdNaPL3FM1o8s8WzWjy7xXNaPLfFQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt9i+e1eH6LF7R4YYsXtXhxi5e0eGmLl7V4eYtXtHhli1e1eHWL17R4bYvXtXh9ize0eGOLN7V4c4u3tHhri7e1eHuLd7R4Z4t3tXh3i/e0eG+L97V4f4sPtPhgiw+1+HCLj7T4aIuPtfh4i0+0+GSLT7X4dIvPtPhsi8+1+HyLL7T4Yosvtfhyi6+0+GqLr7X4eotvtPhmi2+1+HaL77T4bovvtfh+ix+0+GGLH7X4cYuftPhpi5+1+HmLX7T4ZYtftfh1i9+0+G2L37X4fYs/tPhjiz+1+HOLv7T4a4u/tfh7i3+0+GeLf7X4d4v/tPhvi/+1OKTFoS0Oa3F4iyNaHNniqBZHtzimxbEtjtPhuB2O1+H4HU7Q4YQdTtThxB1O0uGkHU7W4eQdTtHhlB1O1eHUHU7T4bQdTtfh9B3O0OGMHc7U4cwdztLhrB3O1uHsHc7R4ZwdztXh3B3O0+G8Hc7X4fwdLtDhgh0u1OHCHS7S4aIdLtbh4h0u0eGSHS7V4dIdLtMhHS7b4XIdLt/hCh2u2OFKHa7c4Sodrtrhah2u3uEaHa7Z4Vodrt3hOh2u2+F6Ha7f4QYdbtjhRh1u3OEmHW7a4WYdbt7hFh1u2eFWHW7d4TYdbtvhdh1u3+EOHe7Y4U4d7tzhLh3u2uFuHe7e4R4d7tnhXh3u3eE+He7b4X4d7t/hAR0e2OFBHR7c4SEdHtrhYR0e3uERHR7Z4VEdHt3hMR0e2+FxHR7f4QkdntjhSR2e3OEpHZ7aoR2e1uHpHZ7R4ZkdntXh2R2e0+G5HQ46DDoMO4w6jDtMOkw7zDrMOyw6LDusOqw7bDpsO+w67Ds8r8PzO7ygwws7vKjDizu8pMNLO7ysw8s7vKLDKzu8qsOrO7ymw2s7vK7D6zu8ocMbO7ypw5s7vKXDWzu8rcPbO7yjwzs7vKvDuzu8p8N7O7yvw/s7fKDDBzt8qMOHO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDfzv8r8MhHQ7tcFiHwzsc0eHIDkd1OLrDMR2O7XCcHsftcbwex+9xgh4n7HGiHifucZIeJ+1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeZ+xxph5n7nGWHmftcbYeZ+9xjh7n7HGuHufucZ4e5+1xvh7n73GBHhfscaEeF+5xkR4X7XGxHhfvcYkel+xxqR6X7nGZHulx2R6X63H5HlfoccUeV+px5R5X6XHVHlfrcfUe1+hxzR7X6nHtHtfpcd0e1+tx/R436HHDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx3x7363H/Hg/o8cAeD+rx4B4P6fHQHg/r8fAej+jxyB6P6vHoHo/p8dgej+vx+B5P6PHEHk/q8eQeT+nx1B7t8bQeT+/xjB7P7PGsHs/u8Zwez+1x0GPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12Pf43k9nt/jBT1e2ONFPV7c4yU9XtrjZT1e3uMVPV7Z41U9Xt3jNT1e2+N1PV7f4w093tjjTT3e3OMtPd7a42093t7jHT3e2eNdPd7d4z093tvj/wTAAwBtBQDA0Gzbtpdt27ZtL9t810a2bdu27fpG574B3j/ABwb44AAfGuDDA3xkgI8O8LEBPj7AJwb45ACfGuDTA3xmgM8O8LkBPj/AFwb44gBfGuDLA3xlgK8O8LUBvj7ANwb45gDfGuDbA3xngO8O8L0Bvj/ADwb44QA/GuDHA/xkgJ8O8LMBfj7ALwb45QC/GuDXA/xmgN8O8LsBfj/AHwb44wB/GuDPA/xlgL8O8LcB/j7APwb45wD/GuDfA/xngP8O8L8BDhng0AEOG+DwAY4Y4MgBjhrg6AGOGeDYAY4T4LgBjhfg+AFOEOCEAU4U4MQBThLgpAFOFuDkAU4R4JQBThXg1AFOE+C0AU4X4PQBzhDgjAHOFODMAc4S4KwBzhbg7AHOEeCcAc4V4NwBzhPgvAHOF+D8AS4Q4IIBLhTgwgEuEuCiAS4W4OIBLhHgkgEuFeDSAS4TIAEuG+ByAS4f4AoBrhjgSgGuHOAqAa4a4GoBrh7gGgGuGeBaAa4d4DoBrhvgegGuH+AGAW4Y4EYBbhzgJgFuGuBmAW4e4BYBbhngVgFuHeA2AW4b4HYBbh/gDgHuGOBOAe4c4C4B7hrgbgHuHuAeAe4Z4F4B7h3gPgHuG+B+Ae4f4AEBHhjgQQEeHOAhAR4a4GEBHh7gEQEeGeBRAR4d4DEBHhvgcQEeH+AJAZ4Y4EkBnhzgKQGeGqABnhbg6QGeEeCZAZ4V4NkBnhPguQGeF+D5AV4Q4IUBXhTgxQFeEuClAV4W4OUBXhHglQFeFeDVAV4T4LUBDgIMAgwDjAKMA0wCTAPMAswDLAIsA6wCrANsAmwD7ALsA7wuwOsDvCHAGwO8KcCbA7wlwFsDvC3A2wO8I8A7A7wrwLsDvCfAewO8L8D7A3wgwAcDfCjAhwN8JMBHA3wswMcDfCLAJwN8KsCnA3wmwGcDfC7A5wN8IcAXA3wpwJcDfCXAVwN8LcDXA3wjwDcDfCvAtwN8J8B3A3wvwPcD/CDADwP8KMCPA/wkwE8D/CzAzwP8IsAvA/wqwK8D/CbAbwP8LsDvA/whwB8D/CnAnwP8JcBfA/wtwN8D/CPAPwP8K8C/A/wnwH8D/C/AIQEODXBYgMMDHBHgyABHBTg6wDEBjg1wnBDHDXG8EMcPcYIQJwxxohAnDnGSECcNcbIQJw9xihCnDHGqEKcOcZoQpw1xuhCnD3GGEGcMcaYQZw5xlhBnDXG2EGcPcY4Q5wxxrhDnDnGeEOcNcb4Q5w9xgRAXDHGhEBcOcZEQFw1xsRAXD3GJEJcMcakQlw5xmRAJcdkQlwtx+RBXCHHFEFcKceUQVwlx1RBXC3H1ENcIcc0Q1wpx7RDXCXHdENcLcf0QNwhxwxA3CnHjEDcJcdMQNwtx8xC3CHHLELcKcesQtwlx2xC3C3H7EHcIcccQdwpx5xB3CXHXEHcLcfcQ9whxzxD3CnHvEPcJcd8Q9wtx/xAPCPHAEA8K8eAQDwnx0BAPC/HwEI8I8cgQjwrx6BCPCfHYEI8L8fgQTwjxxBBPCvHkEE8J8dQQDfG0EE8P8YwQzwzxrBDPDvGcEM8N8bwQzw/xghAvDPGiEC8O8ZIQLw3xshAvD/GKEK8M8aoQrw7xmhCvDXEQYhBiGGIUYhxiEmIaYhZiHmIRYhliFWIdYhNiG2IXYh/idSFeH+INId4Y4k0h3hziLSHeGuJtId4e4h0h3hniXSHeHeI9Id4b4n0h3h/iAyE+GOJDIT4c4iMhPhriYyE+HuITIT4Z4lMhPh3iMyE+G+JzIT4f4gshvhjiSyG+HOIrIb4a4mshvh7iGyG+GeJbIb4d4jshvhvieyG+H+IHIX4Y4kchfhziJyF+GuJnIX4e4hchfhniVyF+HeI3IX4b4nchfh/iDyH+GOJPIf4c4i8h/hribyH+HuIfIf4Z4l8h/h3iPyH+G+J/IQ4JcWiIw0IcHuKIEEeGOCrE0SGOCXFsiONEOG6E40U4foQTRDhhhBNFOHGEk0Q4aYSTRTh5hFNEOGWEU0U4dYTTRDhthNNFOH2EM0Q4Y4QzRThzhLNEOGuEs0U4e4RzRDhnhHNFOHeE80Q4b4TzRTh/hAtEuGCEC0W4cISLRLhohItFuHiES0S4ZIRLRbh0hMtESITLRrhchMtHuEKEK0a4UoQrR7hKhKtGuFqEq0e4RoRrRrhWhGtHuE6E60a4XoTrR7hBhBtGuFGEG0e4SYSbRrhZhJtHuEWEW0a4VYRbR7hNhNtGuF2E20e4Q4Q7RrhThDtHuEuEu0a4W4S7R7hHhHtGuFeEe0e4T4T7RrhfhPtHeECEB0Z4UIQHR3hIhIdGeFiEh0d4RIRHRnhUhEdHeEyEx0Z4XITHR3hChCdGeFKEJ0d4SoSnRmiEp0V4eoRnRHhmhGdFeHaE50R4boTnRXh+hBdEeGGEF0V4cYSXRHhphJdFeHmEV0R4ZYRXRXh1hNdEeG2EgwiDCMMIowjjCJMI0wizCPMIiwjLCKsI6wibCNsIuwj7CK+L8PoIb4jwxghvivDmCG+J8NYIb4vw9gjviPDOCO+K8O4I74nw3gjvi/D+CB+I8MEIH4rw4QgfifDRCB+L8PEIn4jwyQifivDpCJ+J8NkIn4vw+QhfiPDFCF+K8OUIX4nw1Qhfi/D1CN+I8M0I34rw7QjfifDdCN+L8P0IP4jwwwg/ivDjCD+J8NMIP4vw8wi/iPDLCL+K8OsIv4nw2wi/i/D7CH+I8McIf4rw5wh/ifDXCH+L8PcI/4jwzwj/ivDvCP+J8N8I/4twSIRDIxwW4fAIR0Q4MsJREY6OcEyEYyMcJ8ZxYxwvxvFjnCDGCWOcKMaJY5wkxkljnCzGyWOcIsYpY5wqxqljnCbGaWOcLsbpY5whxhljnCnGmWOcJcZZY5wtxtljnCPGOWOcK8a5Y5wnxnljnC/G+WNcIMYFY1woxoVjXCTGRWNcLMbFY1wixiVjXCrGpWNcJkZiXDbG5WJcPsYVYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYtwyxq1i3DrGbWLcNsbtYtw+xh1i3DHGnWLcOcZdYtw1xt1i3D3GPWLcM8a9Ytw7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjw2xuNiPD7GE2I8McaTYjw5xlNiPDVGYzwtxtNjPCPGM2M8K8azYzwnxnNjPC/G82O8IMYLY7woxotjvCTGS2O8LMbLY7wixitjvCrGq2O8JsZrYxzEGMQYxhjFGMeYxJjGmMWYx1jEWMZYxVjH2MTYxtjF2Md4XYzXx3hDjDfGeFOMN8d4S4y3xnhbjLfHeEeMd8Z4V4x3x3hPjPfGeF+M98f4QIwPxvhQjA/H+EiMj8b4WIyPx/hEjE/G+FSMT8f4TIzPxvhcjM/H+EKML8b4Uowvx/hKjK/G+FqMr8f4RoxvxvhWjG/H+E6M78b4Xozvx/hBjB/G+FGMH8f4SYyfxvhZjJ/H+EWMX8b4VYxfx/hNjN/G+F2M38f4Q4w/xvhTjD/H+EuMv8b4W4y/x/hHjH/G+FeMf8f4T4z/xvhfjENiHBrjsBiHxzgixpExjopxdIxjYhwb4zgJjpvgeAmOn+AECU6Y4EQJTpzgJAlOmuBkCU6e4BQJTpngVAlOneA0CU6b4HQJTp/gDAnOmOBMCc6c4CwJzprgbAnOnuAcCc6Z4FwJzp3gPAnOm+B8Cc6f4AIJLpjgQgkunOAiCS6a4GIJLp7gEgkumeBSCS6d4DIJkuCyCS6X4PIJrpDgigmulODKCa6S4KoJrpbg6gmukeCaCa6V4NoJrpPgugmul+D6CW6Q4IYJbpTgxglukuCmCW6W4OYJbpHglgluleDWCW6T4LYJbpfg9gnukOCOCe6U4M4J7pLgrgnuluDuCe6R4J4J7pXg3gnuk+C+Ce6X4P4JHpDggQkelODBCR6S4KEJHpbg4QkekeCRCR6V4NEJHpPgsQkel+DxCZ6Q4IkJnpTgyQmekuCpCZrgaQmenuAZCZ6Z4FkJnp3gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgIMEgwTDBKME4wSTBNMEswTzBIsEywSrBOsEmwTbBLsE+wesSvD7BGxK8McGbErw5wVsSvDXB2xK8PcE7ErwzwbsSvDvBexK8N8H7Erw/wQcSfDDBhxJ8OMFHEnw0wccSfDzBJxJ8MsGnEnw6wWcSfDbB5xJ8PsEXEnwxwZcSfDnBVxJ8NcHXEnw9wTcSfDPBtxJ8O8F3Enw3wfcSfD/BDxL8MMGPEvw4wU8S/DTBzxL8PMEvEvwywa8S/DrBbxL8NsHvEvw+wR8S/DHBnxL8OcFfEvw1wd8S/D3BPxL8M8G/Evw7wX8S/DfB/xIckuDQBIclODzBEQmOTHBUgqMTHJPg2ATHSXHcFMdLcfwUJ0hxwhQnSnHiFCdJcdIUJ0tx8hSnSHHKFKdKceoUp0lx2hSnS3H6FGdIccYUZ0px5hRnSXHWFGdLcfYU50hxzhTnSnHuFOdJcd4U50tx/hQXSHHBFBdKceEUF0lx0RQXS3HxFJdIcckUl0px6RSXSZEUl01xuRSXT3GFFFdMcaUUV05xlRRXTXG1FFdPcY0U10xxrRTXTnGdFNdNcb0U109xgxQ3THGjFDdOcZMUN01xsxQ3T3GLFLdMcasUt05xmxS3TXG7FLdPcYcUd0xxpxR3TnGXFHdNcbcUd09xjxT3THGvFPdOcZ8U901xvxT3T/GAFA9M8aAUD07xkBQPTfGwFA9P8YgUj0zxqBSPTvGYFI9N8bgUj0/xhBRPTPGkFE9O8ZQUT03RFE9L8fQUz0jxzBTPSvHsFM9J8dwUz0vx/BQvSPHCFC9K8eIUL0nx0hQvS/HyFK9I8coUr0rx6hSvSfHaFAcpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ilel+L1Kd6Q4o0p3pTizSnekuKtKd6W4u0p3pHinSneleLdKd6T4r0p3pfi/Sk+kOKDKT6U4sMpPpLioyk+luLjKT6R4pMpPpXi0yk+k+KzKT6X4vMpvpDiiym+lOLLKb6S4qspvpbi6ym+keKbKb6V4tspvpPiuym+l+L7KX6Q4ocpfpTixyl+kuKnKX6W4ucpfpHilyl+leLXKX6T4rcpfpfi9yn+kOKPKf6U4s8p/pLiryn+luLvKf6R4p8p/pXi3yn+k+K/Kf6X4pAUh6Y4LMXhKY5IcWSKo1IcneKYFMemOE6G42Y4XobjZzhBhhNmOFGGE2c4SYaTZjhZhpNnOEWGU2Y4VYZTZzhNhtNmOF2G02c4Q4YzZjhThjNnOEuGs2Y4W4azZzhHhnNmOFeGc2c4T4bzZjhfhvNnuECGC2a4UIYLZ7hIhotmuFiGi2e4RIZLZrhUhktnuEyGZLhshstluHyGK2S4YoYrZbhyhqtkuGqGq2W4eoZrZLhmhmtluHaG62S4bobrZbh+hhtkuGGGG2W4cYabZLhphptluHmGW2S4ZYZbZbh1httkuG2G22W4fYY7ZLhjhjtluHOGu2S4a4a7Zbh7hntkuGeGe2W4d4b7ZLhvhvtluH+GB2R4YIYHZXhwhodkeGiGh2V4eIZHZHhkhkdleHSGx2R4bIbHZXh8hidkeGKGJ2V4coanZHhqhmZ4WoanZ3hGhmdmeFaGZ2d4TobnZnhehudneEGGF2Z4UYYXZ3hJhpdmeFmGl2d4RYZXZnhVhldneE2G12Y4yDDIMMwwyjDOMMkwzTDLMM+wyLDMsMqwzrDJsM2wy7DP8LoMr8/whgxvzPCmDG/O8JYMb83wtgxvz/CODO/M8K4M787wngzvzfC+DO/P8IEMH8zwoQwfzvCRDB/N8LEMH8/wiQyfzPCpDJ/O8JkMn83wuQyfz/CFDF/M8KUMX87wlQxfzfC1DF/P8I0M38zwrQzfzvCdDN/N8L0M38/wgww/zPCjDD/O8JMMP83wsww/z/CLDL/M8KsMv87wmwy/zfC7DL/P8IcMf8zwpwx/zvCXDH/N8LcMf8/wjwz/zPCvDP/O8J8M/83wvwyHZDg0w2EZDs9wRIYjMxyV4egMx2Q4NsNxchw3x/FyHD/HCXKcMMeJcpw4x0lynDTHyXKcPMcpcpwyx6lynDrHaXKcNsfpcpw+xxlynDHHmXKcOcdZcpw1x9lynD3HOXKcM8e5cpw7x3lynDfH+XKcP8cFclwwx4VyXDjHRXJcNMfFclw8xyVyXDLHpXJcOsdlciTHZXNcLsflc1whxxVzXCnHlXNcJcdVc1wtx9VzXCPHNXNcK8e1c1wnx3VzXC/H9XPcIMcNc9wox41z3CTHTXPcLMfNc9wixy1z3CrHrXPcJsdtc9wux+1z3CHHHXPcKcedc9wlx11z3C3H3XPcI8c9c9wrx71z3CfHfXPcL8f9czwgxwNzPCjHg3M8JMdDczwsx8NzPCLHI3M8Ksejczwmx2NzPC7H43M8IccTczwpx5NzPCXHU3M0x9NyPD3HM3I8M8ezcjw7x3NyPDfH83I8P8cLcrwwx4tyvDjHS3K8NMfLcrw8xytyvDLHq3K8Osdrcrw2x0GOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY7X5Xh9jjfkeGOON+V4c4635HhrjrfleHuOd+R4Z4535Xh3jvfkeG+O9+V4f44P5Phgjg/l+HCOj+T4aI6P5fh4jk/k+GSOT+X4dI7P5Phsjs/l+HyOL+T4Yo4v5fhyjq/k+GqOr+X4eo5v5Phmjm/l+HaO7+T4bo7v5fh+jh/k+GGOH+X4cY6f5Phpjp/l+HmOX+T4ZY5f5fh1jt/k+G2O3+X4fY4/5Phjjj/l+HOOv+T4a46/5fh7jn/k+GeOf+X4d47/5Phvjv/lOCTHoTkOy3F4jiNyHJnjqBxH5zgmx7E5jlPguAWOV+D4BU5Q4IQFTlTgxAVOUuCkBU5W4OQFTlHglAVOVeDUBU5T4LQFTlfg9AXOUOCMBc5U4MwFzlLgrAXOVuDsBc5R4JwFzlXg3AXOU+C8Bc5X4PwFLlDgggUuVODCBS5S4KIFLlbg4gUuUeCSBS5V4NIFLlMgBS5b4HIFLl/gCgWuWOBKBa5c4CoFrlrgagWuXuAaBa5Z4FoFrl3gOgWuW+B6Ba5f4AYFbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeA+Be5b4H4F7l/gAQUeWOBBBR5c4CEFHlrgYQUeXuARBR5Z4FEFHl3gMQUeW+BxBR5f4AkFnljgSQWeXOApBZ5aoAWeVuDpBZ5R4JkFnlXg2QWeU+C5BZ5X4PkFXlDghQVeVODFBV5S4KUFXlbg5QVeUeCVBV5V4NUFXlPgtQUOCgwKDAuMCowLTApMC8wKzAssCiwLrAqsC2wKbAvsCuwLvK7A6wu8ocAbC7ypwJsLvKXAWwu8rcDbC7yjwDsLvKvAuwu8p8B7C7yvwPsLfKDABwt8qMCHC3ykwEcLfKzAxwt8osAnC3yqwKcLfKbAZwt8rsDnC3yhwBcLfKnAlwt8pcBXC3ytwNcLfKPANwt8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8L/K3A3wv8o8A/C/yrwL8L/KfAfwv8r8AhBQ4tcFiBwwscUeDIAkcVOLrAMQWOLXCcEsctcbwSxy9xghInLHGiEicucZISJy1xshInL3GKEqcscaoSpy5xmhKnLXG6EqcvcYYSZyxxphJnLnGWEmctcbYSZy9xjhLnLHGuEucucZ4S5y1xvhLnL3GBEhcscaESFy5xkRIXLXGxEhcvcYkSlyxxqRKXLnGZEilx2RKXK3H5ElcoccUSVypx5RJXKXHVElcrcfUS1yhxzRLXKnHtEtcpcd0S1ytx/RI3KHHDEjcqceMSNylx0xI3K3HzErcoccsStypx6xK3KXHbErcrcfsSdyhxxxJ3KnHnEncpcdcSdytx9xL3KHHPEvcqce8S9ylx3xL3K3H/Eg8o8cASDyrx4BIPKfHQEg8r8fASjyjxyBKPKvHoEo8p8dgSjyvx+BJPKPHEEk8q8eQSTynx1BIt8bQSTy/xjBLPLPGsEs8u8ZwSzy3xvBLPL/GCEi8s8aISLy7xkhIvLfGyEi8v8YoSryzxqhKvLvGaEq8tcVBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX+J1JV5f4g0l3ljiTSXeXOItJd5a4m0l3l7iHSXeWeJdJd5d4j0l3lvifSXeX+IDJT5Y4kMlPlziIyU+WuJjJT5e4hMlPlniUyU+XeIzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuIbJb5Z4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iFyV+WeJXJX5d4jclflvidyV+X+IPJf5Y4k8l/lziLyX+WuJvJf5e4h8l/lniXyX+XeI/Jf5b4n8lDilxaInDShxe4ogSR5Y4qsTRJY4pcWyJ41Q4boXjVTh+hRNUOGGFE1U4cYWTVDhphZNVOHmFU1Q4ZYVTVTh1hdNUOG2F01U4fYUzVDhjhTNVOHOFs1Q4a4WzVTh7hXNUOGeFc1U4d4XzVDhvhfNVOH+FC1S4YIULVbhwhYtUuGiFi1W4eIVLVLhkhUtVuHSFy1RIhctWuFyFy1e4QoUrVrhShStXuEqFq1a4WoWrV7hGhWtWuFaFa1e4ToXrVrhehetXuEGFG1a4UYUbV7hJhZtWuFmFm1e4RYVbVrhVhVtXuE2F21a4XYXbV7hDhTtWuFOFO1e4S4W7VrhbhbtXuEeFe1a4V4V7V7hPhftWuF+F+1d4QIUHVnhQhQdXeEiFh1Z4WIWHV3hEhUdWeFSFR1d4TIXHVnhchcdXeEKFJ1Z4UoUnV3hKhadWaIWnVXh6hWdUeGaFZ1V4doXnVHhuhedVeH6FF1R4YYUXVXhxhZdUeGmFl1V4eYVXVHhlhVdVeHWF11R4bYWDCoMKwwqjCuMKkwrTCrMK8wqLCssKqwrrCpsK2wq7CvsKr6vw+gpvqPDGCm+q8OYKb6nw1gpvq/D2Cu+o8M4K76rw7grvqfDeCu+r8P4KH6jwwQofqvDhCh+p8NEKH6vw8QqfqPDJCp+q8OkKn6nw2Qqfq/D5Cl+o8MUKX6rw5QpfqfDVCl+r8PUK36jwzQrfqvDtCt+p8N0K36vw/Qo/qPDDCj+q8OMKP6nw0wo/q/DzCr+o8MsKv6rw6wq/qfDbCr+r8PsKf6jwxwp/qvDnCn+p8NcKf6vw9wr/qPDPCv+q8O8K/6nw3wr/q3BIhUMrHFbh8ApHVDiywlEVjq5wTIVjKxynxnFrHK/G8WucoMYJa5yoxolrnKTGSWucrMbJa5yixilrnKrGqWucpsZpa5yuxulrnKHGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysxsVrXKLGJWtcqsala1ymRmpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1q3LXG3WrcvcY9atyzxr1q3LvGfWrct8b9aty/xgNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLbG42o8vsYTajyxxpNqPLnGU2o8tUZrPK3G02s8o8YzazyrxrNrPKfGc2s8r8bza7ygxgtrvKjGi2u8pMZLa7ysxstrvKLGK2u8qsara7ymxmtrHNQY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY13hdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjXfXeE+N99Z4X4331/hAjQ/W+FCND9f4SI2P1vhYjY/X+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb/X+EeNf9b4V41/1/hPjf/W+F+NQ2ocWuOwGofXOKLGkTWOqnF0jWNqHFvjOA2O2+B4DY7f4AQNTtjgRA1O3OAkDU7a4GQNTt7gFA1O2eBUDU7d4DQNTtvgdA1O3+AMDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDS7Z4FINLt3gMg3S4LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ2e1ODJDZ7S4KkN2uBpDZ7e4BkNntngWQ2e3eA5DZ7b4HkNnt/gBQ1e2OBFDV7c4CUNXtrgZQ1e3uAVDV7Z4FUNXt3gNQ1e2+CgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7B6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsavLPBuxq8u8F7Gry3wfsavL/BBxp8sMGHGny4wUcafLTBxxp8vMEnGnyywacafLrBZxp8tsHnGny+wRcafLHBlxp8ucFXGny1wdcafL3BNxp8s8G3Gny7wXcafLfB9xp8v8EPGvywwY8a/LjBTxr8tMHPGvy8wS8a/LLBrxr8usFvGvy2we8a/L7BHxr8scGfGvy5wV8a/LXB3xr8vcE/Gvyzwb8a/LvBfxr8t8H/GhzS4NAGhzU4vMERDY5scFSDoxsc0+DYBsdpcdwWx2tx/BYnaHHCFidqceIWJ2lx0hYna3HyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2hxyRaXanHpFpdpkRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s8aQWT27xlBZPbdEWT2vx9BbPaPHMFs9q8ewWz2nx3BbPa/H8Fi9o8cIWL2rx4hYvafHSFi9r8fIWr2jxyhavavHqFq9p8doWBy0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKdLd7V4t0t3tPivS3e1+L9LT7Q4oMtPtTiwy0+0uKjLT7W4uMtPtHiky0+1eLTLT7T4rMtPtfi8y2+0OKLLb7U4sstvtLiqy2+1uLrLb7R4pstvtXi2y2+0+K7Lb7X4vstftDihy1+1OLHLX7S4qctftbi5y1+0eKXLX7V4tctftPity1+1+L3Lf7Q4o8t/tTizy3+0uKvLf7W4u8t/tHiny3+1eLfLf7T4r8t/tfikBaHtjisxeEtjmhxZIujWhzd4pgWx7Y4Tofjdjheh+N3OEGHE3Y4UYcTdzhJh5N2OFmHk3c4RYdTdjhVh1N3OE2H03Y4XYfTdzhDhzN2OFOHM3c4S4ezdjhbh7N3OEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh0t2uFSHS3e4TId0uGyHy3W4fIcrdLhihyt1uHKHq3S4aoerdbh6h2t0uGaHa3W4dofrdLhuh+t1uH6HG3S4YYcbdbhxh5t0uGmHm3W4eYdbdLhlh1t1uHWH23S4bYfbdbh9hzt0uGOHO3W4c4e7dLhrh7t1uHuHe3S4Z4d7dbh3h/t0uG+H+3W4f4cHdHhghwd1eHCHh3R4aIeHdXh4h0d0eGSHR3V4dIfHdHhsh8d1eHyHJ3R4YocndXhyh6d0eGqHdnhah6d3eEaHZ3Z4Vodnd3hOh+d2eF6H53d4QYcXdnhRhxd3eEmHl3Z4WYeXd3hFh1d2eFWHV3d4TYfXdjjoMOgw7DDqMO4w6TDtMOsw77DosOyw6rDusOmw7bDrsO/wug6v7/CGDm/s8KYOb+7wlg5v7fC2Dm/v8I4O7+zwrg7v7vCeDu/t8L4O7+/wgQ4f7PChDh/u8JEOH+3wsQ4f7/CJDp/s8KkOn+7wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/v8IsOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+3wtw5/7/CPDv/s8K8O/+7wnw7/7fC/Dod0OLTDYR0O73BEhyM7HNXh6A7HdDi2w3F6HLfH8Xocv8cJepywx4l6nLjHSXqctMfJepy8xyl6nLLHqXqcusdpepy2x+l6nL7HGXqcsceZepy5x1l6nLXH2Xqcvcc5epyzx7l6nLvHeXqct8f5epy/xwV6XLDHhXpcuMdFely0x8V6XLzHJXpcsselely6x2V6pMdle1yux+V7XKHHFXtcqceVe1ylx1V7XK3H1Xtco8c1e1yrx7V7XKfHdXtcr8f1e9ygxw173KjHjXvcpMdNe9ysx8173KLHLXvcqsete9ymx2173K7H7Xvcoccde9ypx5173KXHXXvcrcfde9yjxz173KvHvXvcp8d9e9yvx/17PKDHA3s8qMeDezykx0N7PKzHw3s8oscjezyqx6N7PKbHY3s8rsfjezyhxxN7PKnHk3s8pcdTe7TH03o8vcczejyzx7N6PLvHc3o8t8fzejy/xwt6vLDHi3q8uMdLery0x8t6vLzHK3q8sserery6x2t6vLbHQY9Bj2GPUY9xj0mPaY9Zj3mPRY9lj1WPdY9Nj22PXY99j9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHeP9/R4b4//EwAPALQVAABDs23bXrZt27a9bNvGuzaybdu29Y3OfQO8f4APDPDBAT40wIcH+MgAHx3gYwN8fIBPDPDJAT41wKcH+MwAnx3gcwN8foAvDPDFAb40wJcH+MoAXx3gawN8fYBvDPDNAb41wLcH+M4A3x3gewN8f4AfDPDDAX40wI8H+MkAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wL8H+M8A/x3gfwMcMsChAxw2wOEDHDHAkQMcNcDRAxwzwLEDHCfAcQMcL8DxA5wgwAkDnCjAiQOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkwEUDXCzAxQNcIsAlA1wqwKUDXCZAAlw2wOUCXD7AFQJcMcCVAlw5wFUCXDXA1QJcPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI8NsDjAjw+wBMCPDHAkwI8OcBTAjw1QAM8LcDTAzwjwDMDPCvAswM8J8BzAzwvwPMDvCDACwO8KMCLA7wkwEsDvCzAywO8IsArA7wqwKsDvCbAawO8LsDrA7whwBsDvCnAmwO8JcBbA7wtwNsDvCPAOwO8K8C7A7wnwHsDHAQYBBgGGAUYB5gEmAaYBZgHWARYBlgFWAfYBNgG2AXYB3hfgPcH+ECADwb4UIAPB/hIgI8G+FiAjwf4RIBPBvhUgE8H+EyAzwb4XIDPB/hCgC8G+FKALwf4SoCvBvhagK8H+EaAbwb4VoBvB/hOgO8G+F6A7wf4QYAfBvhRgB8H+EmAnwb4WYCfB/hFgF8G+FWAXwf4TYDfBvhdgN8H+EOAPwb4U4A/B/hLgL8G+FuAvwf4R4B/BvhXgH8H+E+A/wb4X4BDAhwa4LAAhwc4IsCRAY4KcHSAYwIcG+A4IY4b4nghjh/iBCFOGOJEIU4c4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCHOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhziIiEuGuJiIS4e4hIhLhniUiEuHeIyIRLisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4S4q4h7hbi7iHuEeKeIe4V4t4h7hPiviHuF+L+IR4Q4oEhHhTiwSEeEuKhIR4W4uEhHhHikSEeFeLRIR4T4rEhHhfi8SGeEOKJIZ4U4skhnhLiqSEa4mkhnh7iGSGeGeJZIZ4d4jkhnhvieSGeH+IFIV4Y4kUhXhziJSFeGuJlIV4e4hUhXhniVSFeHeI1IV4b4nUhXh/iDSHeGOJNId4c4i0h3hribSHeHuIdId4Z4l0h3h3iPSHeG+IgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7E+0K8P8QHQnwwxIdCfDjER0J8NMTHQnw8xCdCfDLEp0J8OsRnQnw2xOdCfD7EF0J8McSXQnw5xFdCfDXE10J8PcQ3QnwzxLdCfDvEd0J8N8T3Qnw/xA9C/DDEj0L8OMRPQvw0xM9C/DzEL0L8MsSvQvw6xG9C/DbE70L8PsQfQvwxxJ9C/DnEX0L8NcTfQvw9xD9C/DPEv0L8O8R/Qvw3xP9CHBLi0BCHhTg8xBEhjgxxVIijQxwT4tgQx4lw3AjHi3D8CCeIcMIIJ4pw4ggniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4lw1ghni3D2COeIcM4I54pw7gjniXDeCOeLcP4IF4hwwQgXinDhCBeJcNEIF4tw8QiXiHDJCJeKcOkIl4mQCJeNcLkIl49whQhXjHClCFeOcJUIV41wtQhXj3CNCNeMcK0I145wnQjXjXC9CNePcIMIN4xwowg3jnCTCDeNcLMIN49wiwi3jHCrCLeOcJsIt41wuwi3j3CHCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjfC4CI+P8IQIT4zwpAhPjvCUCE+N0AhPi/D0CM+I8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4IBxEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2Ed4X4f0RPhDhgxE+FOHDET4S4aMRPhbh4xE+EeGTET4V4dMRPhPhsxE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHnEX4R4ZcRfhXh1xF+E+G3EX4X4fcR/hDhjxH+FOHPEf4S4a8R/hbh7xH+EeGfEf4V4d8R/hPhvxH+F+GQCIdGOCzC4RGOiHBkhKMiHB3hmAjHRjhOjOPGOF6M48c4QYwTxjhRjBPHOEmMk8Y4WYyTxzhFjFPGOFWMU8c4TYzTxjhdjNPHOEOMM8Y4U4wzxzhLjLPGOFuMs8c4R4xzxjhXjHPHOE+M88Y4X4zzx7hAjAvGuFCMC8e4SIyLxrhYjIvHuESMS8a4VIxLx7hMjMS4bIzLxbh8jCvEuGKMK8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybxbh5jFvEuGWMW8W4dYzbxLhtjNvFuH2MO8S4Y4w7xbhzjLvEuGuMu8W4e4x7xLhnjHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIfFeHiMR8R4ZIxHxXh0jMfEeGyMx8V4fIwnxHhijCfFeHKMp8R4aozGeFqMp8d4RoxnxnhWjGfHeE6M58Z4Xoznx3hBjBfGeFGMF8d4SYyXxnhZjJfHeEWMV8Z4VYxXx3hNjNfGeF2M18d4Q4w3xnhTjDfHeEuMt8Z4W4y3x3hHjHfGeFeMd8d4T4z3xjiIMYgxjDGKMY4xiTGNMYsxj7GIsYyxirGOsYmxjbGLsY/xvhjvj/GBGB+M8aEYH47xkRgfjfGxGB+P8YkYn4zxqRifjvGZGJ+N8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixi/jPGrGL+O8ZsYv43xuxi/j/GHGH+M8acYf47xlxh/jfG3GH+P8Y8Y/4zxrxj/jvGfGP+N8b8Yh8Q4NMZhMQ6PcUSMI2McFePoGMfEODbGcRIcN8HxEhw/wQkSnDDBiRKcOMFJEpw0wckSnDzBKRKcMsGpEpw6wWkSnDbB6RKcPsEZEpwxwZkSnDnBWRKcNcHZEpw9wTkSnDPBuRKcO8F5Epw3wfkSnD/BBRJcMMGFElw4wUUSXDTBxRJcPMElElwywaUSXDrBZRIkwWUTXC7B5RNcIcEVE1wpwZUTXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CzBzRPcIsEtE9wqwa0T3CbBbRPcLsHtE9whwR0T3CnBnRPcJcFdE9wtwd0T3CPBPRPcK8G9E9wnwX0T3C/B/RM8IMEDEzwowYMTPCTBQxM8LMHDEzwiwSMTPCrBoxM8JsFjEzwuweMTPCHBExM8KcGTEzwlwVMTNMHTEjw9wTMSPDPBsxI8O8FzEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxK8M8G7Erw7wXsSvDfBQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9gvcleH+CDyT4YIIPJfhwgo8k+GiCjyX4eIJPJPhkgk8l+HSCzyT4bILPJfh8gi8k+GKCLyX4coKvJPhqgq8l+HqCbyT4ZoJvJfh2gu8k+G6C7yX4foIfJPhhgh8l+HGCnyT4aYKfJfh5gl8k+GWCXyX4dYLfJPhtgt8l+H2CPyT4Y4I/Jfhzgr8k+GuCvyX4e4J/JPhngn8l+HeC/yT4b4L/JTgkwaEJDktweIIjEhyZ4KgERyc4JsGxCY6T4rgpjpfi+ClOkOKEKU6U4sQpTpLipClOluLkKU6R4pQpTpXi1ClOk+K0KU6X4vQpzpDijCnOlOLMKc6S4qwpzpbi7CnOkeKcKc6V4twpzpPivCnOl+L8KS6Q4oIpLpTiwikukuKiKS6W4uIpLpHikikuleLSKS6TIikum+JyKS6f4goprpjiSimunOIqKa6a4moprp7iGimumeJaKa6d4joprpvieimun+IGKW6Y4kYpbpziJilumuJmKW6e4hYpbpniViluneI2KW6b4nYpbp/iDinumOJOKe6c4i4p7pribinunuIeKe6Z4l4p7p3iPinum+J+Ke6f4gEpHpjiQSkenOIhKR6a4mEpHp7iESkemeJRKR6d4jEpHpvicSken+IJKZ6Y4kkpnpziKSmemqIpnpbi6SmekeKZKZ6V4tkpnpPiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4p0p3pXi3Snek+K9KQ5SDFIMU4xSjFNMUkxTzFLMUyxSLFOsUqxTbFJsU+xS7FO8L8X7U3wgxQdTfCjFh1N8JMVHU3wsxcdTfCLFJ1N8KsWnU3wmxWdTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1P8IsUvU/wqxa9T/CbFb1P8LsXvU/whxR9T/CnFn1P8JcVfU/wtxd9T/CPFP1P8K8W/U/wnxX9T/C/FISkOTXFYisNTHJHiyBRHpTg6xTEpjk1xnAzHzXC8DMfPcIIMJ8xwogwnznCSDCfNcLIMJ89wigynzHCqDKfOcJoMp81wugynz3CGDGfMcKYMZ85wlgxnzXC2DGfPcI4M58xwrgznznCeDOfNcL4M589wgQwXzHChDBfOcJEMF81wsQwXz3CJDJfMcKkMl85wmQzJcNkMl8tw+QxXyHDFDFfKcOUMV8lw1QxXy3D1DNfIcM0M18pw7QzXyXDdDNfLcP0MN8hwwww3ynDjDDfJcNMMN8tw8wy3yHDLDLfKcOsMt8lw2wy3y3D7DHfIcMcMd8pw5wx3yXDXDHfLcPcM98hwzwz3ynDvDPfJcN8M98tw/wwPyPDADA/K8OAMD8nw0AwPy/DwDI/I8MgMj8rw6AyPyfDYDI/L8PgMT8jwxAxPyvDkDE/J8NQMzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JIML83wsgwvz/CKDK/M8KoMr87wmgyvzfC6DK/P8IYMb8zwpgxvzvCWDG/N8LYMb8/wjgzvzPCuDO/O8J4M781wkGGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2Gf4X0Z3p/hAxk+mOFDGT6c4SMZPprhYxk+nuETGT6Z4VMZPp3hMxk+m+FzGT6f4QsZvpjhSxm+nOErGb6a4WsZvp7hGxm+meFbGb6d4TsZvpvhexm+n+EHGX6Y4UcZfpzhJxl+muFnGX6e4RcZfpnhVxl+neE3GX6b4XcZfp/hDxn+mOFPGf6c4S8Z/prhbxn+nuEfGf6Z4V8Z/p3hPxn+m+F/GQ7JcGiGwzIcnuGIDEdmOCrD0RmOyXBshuPkOG6O4+U4fo4T5DhhjhPlOHGOk+Q4aY6T5Th5jlPkOGWOU+U4dY7T5DhtjtPlOH2OM+Q4Y44z5ThzjrPkOGuOs+U4e45z5DhnjnPlOHeO8+Q4b47z5Th/jgvkuGCOC+W4cI6L5LhojovluHiOS+S4ZI5L5bh0jsvkSI7L5rhcjsvnuEKOK+a4Uo4r57hKjqvmuFqOq+e4Ro5r5rhWjmvnuE6O6+a4Xo7r57hBjhvmuFGOG+e4SY6b5rhZjpvnuEWOW+a4VY5b57hNjtvmuF2O2+e4Q4475rhTjjvnuEuOu+a4W46757hHjnvmuFeOe+e4T4775rhfjvvneECOB+Z4UI4H53hIjofmeFiOh+d4RI5H5nhUjkfneEyOx+Z4XI7H53hCjifmeFKOJ+d4So6n5miOp+V4eo5n5HhmjmfleHaO5+R4bo7n5Xh+jhfkeGGOF+V4cY6X5HhpjpfleHmOV+R4ZY5X5Xh1jtfkeG2O1+V4fY435HhjjjfleHOOt+R4a4635Xh7jnfkeGeOd+V4d4735HhvjoMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+xzvy/H+HB/I8cEcH8rx4RwfyfHRHB/L8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txSI5DcxyW4/AcR+Q4MsdROY7OcUyOY3Mcp8BxCxyvwPELnKDACQucqMCJC5ykwEkLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrMDFC1yiwCULXKrApQtcpkAKXLbA5QpcvsAVClyxwJUKXLnAVQpctcDVCly9wDUKXLPAtQpcu8B1Cly3wPUKXL/ADQrcsMCNCty4wE0K3LTAzQrcvMAtCtyywK0K3LrAbQrctsDtCty+wB0K3LHAnQrcucBdCty1wN0K3L3APQrcs8C9Cty7wH0K3LfA/Qrcv8ADCjywwIMKPLjAQwo8tMDDCjy8wCMKPLLAowo8usBjCjy2wOMKPL7AEwo8scCTCjy5wFMKPLVACzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewscFBgUGBYYFRgXmBSYFpgVmBdYFFgWWBVYF9gU2BbYFdgXeF+B9xf4QIEPFvhQgQ8X+EiBjxb4WIGPF/hEgU8W+FSBTxf4TIHPFvhcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBvxb4W4G/F/hHgX8W+FeBfxf4T4H/FvhfgUMKHFrgsAKHFziiwJEFjipwdIFjChxb4DgljlvieCWOX+IEJU5Y4kQlTlziJCVOWuJkJU5e4hQlTlniVCVOXeI0JU5b4nQlTl/iDCXOWOJMJc5c4iwlzlribCXOXuIcJc5Z4lwlzl3iPCXOW+J8Jc5f4gIlLljiQiUuXOIiJS5a4mIlLl7iEiUuWeJSJS5d4jIlUuKyJS5X4vIlrlDiiiWuVOLKJa5S4qolrlbi6iWuUeKaJa5V4tolrlPiuiWuV+L6JW5Q4oYlblTixiVuUuKmJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSUeV+LxJZ5Q4oklnlTiySWeUuKpJVriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lniXSXeXeI9Jd5b4qDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsT7Sry/xAdKfLDEh0p8uMRHSny0xMdKfLzEJ0p8ssSnSny6xGdKfLbE50p8vsQXSnyxxJdKfLnEV0p8tcTXSny9xDdKfLPEt0p8u8R3Sny3xPdKfL/ED0r8sMSPSvy4xE9K/LTEz0r8vMQvSvyyxK9K/LrEb0r8tsTvSvy+xB9K/LHEn0r8ucRfSvy1xN9K/L3EP0r8s8S/Svy7xH9K/LfE/0ocUuLQEoeVOLzEESWOLHFUiaNLHFPi2BLHqXDcCsercPwKJ6hwwgonqnDiCiepcNIKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6pw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QoXq3DxCpeocMkKl6pw6QqXqZAKl61wuQqXr3CFClescKUKV65wlQpXrXC1ClevcI0K16xwrQrXrnCdCtetcL0K169wgwo3rHCjCjeucJMKN61wswo3r3CLCrescKsKt65wmwq3rXC7CrevcIcKd6xwpwp3rnCXCnetcLcKd69wjwr3rHCvCveucJ8K961wvwr3r/CACg+s8KAKD67wkAoPrfCwCg+v8IgKj6zwqAqPrvCYCo+t8LgKj6/whApPrPCkCk+u8JQKT63QCk+r8PQKz6jwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3goHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYV3lfh/RU+UOGDFT5U4cMVPlLhoxU+VuHjFT5R4ZMVPlXh0xU+U+GzFT5X4fMVvlDhixW+VOHLFb5S4asVvlbh6xW+UeGbFb5V4dsVvlPhuxW+V+H7FX5Q4YcVflThxxV+UuGnFX5W4ecVflHhlxV+VeHXFX5T4bcVflfh9xX+UOGPFf5U4c8V/lLhrxX+VuHvFf5R4Z8V/lXh3xX+U+G/Ff5X4ZAKh1Y4rMLhFY6ocGSFoyocXeGYCsdWOE6N49Y4Xo3j1zhBjRPWOFGNE9c4SY2T1jhZjZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNs9Y4W42z1zhHjXPWOFeNc9c4T43z1jhfjfPXuECNC9a4UI0L17hIjYvWuFiNi9e4RI1L1rhUjUvXuEyN1LhsjcvVuHyNK9S4Yo0r1bhyjavUuGqNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9W4d4371LhvjfvVuH+NB9R4YI0H1XhwjYfUeGiNh9V4eI1H1HhkjUfVeHSNx9R4bI3H1Xh8jSfUeGKNJ9V4co2n1HhqjdZ4Wo2n13hGjWfWeFaNZ9d4To3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1nhVjVfXeE2N19Z4XY3X13hDjTfWeFONN9d4S4231nhbjbfXeEeNd9Z4V41313hPjffWOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/G+Gu+v8YEaH6zxoRofrvGRGh+t8bEaH6/xiRqfrPGpGp+u8Zkan63xuRqfr/GFGl+s8aUaX67xlRpfrfG1Gl+v8Y0a36zxrRrfrvGdGt+t8b0a36/xgxo/rPGjGj+u8ZMaP63xsxo/r/GLGr+s8asav67xmxq/rfG7Gr+v8Ycaf6zxpxp/rvGXGn+t8bcaf6/xjxr/rPGvGv+u8Z8a/63xvxqH1Di0xmE1Dq9xRI0jaxxV4+gax9Q4tsZxGhy3wfEaHL/BCRqcsMGJGpy4wUkanLTByRqcvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLjBRRpctMHFGly8wSUaXLLBpRpcusFlGqTBZRtcrsHlG1yhwRUbXKnBlRtcpcFVG1ytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHRvcqcGdG9ylwV0b3K3B3Rvco8E9G9yrwb0b3KfBfRvcr8H9GzygwQMbPKjBgxs8pMFDGzyswcMbPKLBIxs8qsGjGzymwWMbPK7B4xs8ocETGzypwZMbPKXBUxu0wdMaPL3BMxo8s8GzGjy7wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxq8usFrGry2wesavL7BGxq8scGbGry5wVsavLXB2xq8vcE7GryzwbsavLvBexq8t8FBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32D9zV4f4MPNPhggw81+HCDjzT4aIOPNfh4g080+GSDTzX4dIPPNPhsg881+HyDLzT4YoMvNfhyg680+GqDrzX4eoNvNPhmg281+HaD7zT4boPvNfh+gx80+GGDHzX4cYOfNPhpg581+HmDXzT4ZYNfNfh1g980+G2D3zX4fYM/NPhjgz81+HODvzT4a4O/Nfh7g380+GeDfzX4d4P/NPhvg/81OKTBoQ0Oa3B4gyMaHNngqAZHNzimwbENjtPiuC2O1+L4LU7Q4oQtTtTixC1O0uKkLU7W4uQtTtHilC1O1eLULU7T4rQtTtfi9C3O0OKMLc7U4swtztLirC3O1uLsLc7R4pwtztXi3C3O0+K8Lc7X4vwtLtDigi0u1OLCLS7S4qItLtbi4i0u0eKSLS7V4tItLtMiLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7c4iEtHtriYS0e3uIRLR7Z4lEtHt3iMS0e2+JxLR7f4gktntjiSS2e3OIpLZ7aoi2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7V4tUtXtPitS1e1+L1Ld7Q4o0t3tTizS3e0uKtLd7W4u0t3tHinS3e1eLdLd7T4r0tDloMWgxbjFqMW0xaTFvMWsxbLFosW6xarFtsWmxb7FrsW7yvxftbfKDFB1t8qMWHW3ykxUdbfKzFx1t8osUnW3yqxadbfKbFZ1t8rsXnW3yhxRdbfKnFl1t8pcVXW3ytxddbfKPFN1t8q8W3W3ynxXdbfK/F91v8oMUPW/yoxY9b/KTFT1v8rMXPW/yixS9b/KrFr1v8psVvW/yuxe9b/KHFH1v8qcWfW/ylxV9b/K3F31v8o8U/W/yrxb9b/KfFf1v8r8UhLQ5tcViLw1sc0eLIFke1OLrFMS2ObXGcDsftcLwOx+9wgg4n7HCiDifucJIOJ+1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/o8MAOD+rw4A4P6fDQDg/r8PAOj+jwyA6P6vDoDo/p8NgOj+vw+A5P6PDEDk/q8OQOT+nw1A7t8LQOT+/wjA7P7PCsDs/u8JwOz+3wvA7P7/CCDi/s8KIOL+7wkg4v7fCyDi/v8IoOr+zwqg6v7vCaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/s8K4O7+7wng7v7XDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd/hfR3e3+EDHT7Y4UMdPtzhIx0+2uFjHT7e4RMdPtnhUx0+3eEzHT7b4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eFXHX7d4Tcdftvhdx1+3+EPHf7Y4U8d/tzhLx3+2uFvHf7e4R8d/tnhXx3+3eE/Hf7b4X8dDulwaIfDOhze4YgOR3Y4qsPRHY7pcGyH4/Q4bo/j9Th+jxP0OGGPE/U4cY+T9Dhpj5P1OHmPU/Q4ZY9T9Th1j9P0OG2P0/U4fY8z9DhjjzP1OHOPs/Q4a4+z9Th7j3P0OGePc/U4d4/z9Dhvj/P1OH+PC/S4YI8L9bhwj4v0uGiPi/W4eI9L9Lhkj0v1uHSPy/RIj8v2uFyPy/e4Qo8r9rhSjyv3uEqPq/a4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4UY8b97hJj5v2uFmPm/e4RY9b9rhVj1v3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe/a4V49797hPj/v2uF+P+/d4QI8H9nhQjwf3eEiPh/Z4WI+H93hEj0f2eFSPR/d4TI/H9nhcj8f3eEKPJ/Z4Uo8n93hKj6f2aI+n9Xh6j2f0eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+Pgx6DHsMeox7jHpMe0x6zHvMeix7LHqse6x6bHtseux77Hv8nAB4AaCsAAIZm27a9bNu2bXvZtm27d21k27b9jU4wwHCA0QDjASYDTAeYDTAfYDHAcoDVAOsBNgNsB9gNsB/gcwN8foAvDPDFAb40wJcH+MoAXx3gawN8fYBvDPDNAb41wLcH+M4A3x3gewN8f4AfDPDDAX40wI8H+MkAPx3gZwP8fIBfDPDLAX41wK8H+M0Avx3gdwP8foA/DPDHAf40wJ8H+MsAfx3gbwP8fYB/DPDPAf41wL8H+M8A/x3gfwMcMsChAxw2wOEDHDHAkQMcNcDRAxwzwLEDHCfAcQMcL8DxA5wgwAkDnCjAiQOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkwEUDXCzAxQNcIsAlA1wqwKUDXCZAAlw2wOUCXD7AFQJcMcCVAlw5wFUCXDXA1QJcPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI8NsDjAjw+wBMCPDHAkwI8OcBTAjw1QAM8LcDTAzwjwDMDPCvAswM8J8BzAzwvwPMDvCDACwO8KMCLA7wkwEsDvCzAywO8IsArA7wqwKsDvCbAawO8LsDrA7whwBsDvCnAmwO8JcBbA7wtwNsDvCPAOwO8K8C7A7wnwHsDvC/A+wN8IMAHA3wowIcDfCTARwN8LMDHA3wiwCcDfCrApwN8JsBnAxwEGAQYBhgFGAeYBJgGmAWYB1gEWAZYBVgH2ATYBtgF2Af4XIDPB/hCgC8G+FKALwf4SoCvBvhagK8H+EaAbwb4VoBvB/hOgO8G+F6A7wf4QYAfBvhRgB8H+EmAnwb4WYCfB/hFgF8G+FWAXwf4TYDfBvhdgN8H+EOAPwb4U4A/B/hLgL8G+FuAvwf4R4B/BvhXgH8H+E+A/wb4X4BDAhwa4LAAhwc4IsCRAY4KcHSAYwIcG+A4IY4b4nghjh/iBCFOGOJEIU4c4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCHOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhziIiEuGuJiIS4e4hIhLhniUiEuHeIyIRLisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4S4q4h7hbi7iHuEeKeIe4V4t4h7hPiviHuF+L+IR4Q4oEhHhTiwSEeEuKhIR4W4uEhHhHikSEeFeLRIR4T4rEhHhfi8SGeEOKJIZ4U4skhnhLiqSEa4mkhnh7iGSGeGeJZIZ4d4jkhnhvieSGeH+IFIV4Y4kUhXhziJSFeGuJlIV4e4hUhXhniVSFeHeI1IV4b4nUhXh/iDSHeGOJNId4c4i0h3hribSHeHuIdId4Z4l0h3h3iPSHeG+J9Id4f4gMhPhjiQyE+HOIjIT4a4mMhPh7iEyE+GeJTIT4d4jMhPhviIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xOdCfD7EF0J8McSXQnw5xFdCfDXE10J8PcQ3QnwzxLdCfDvEd0J8N8T3Qnw/xA9C/DDEj0L8OMRPQvw0xM9C/DzEL0L8MsSvQvw6xG9C/DbE70L8PsQfQvwxxJ9C/DnEX0L8NcTfQvw9xD9C/DPEv0L8O8R/Qvw3xP9CHBLi0BCHhTg8xBEhjgxxVIijQxwT4tgQx4lw3AjHi3D8CCeIcMIIJ4pw4ggniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4lw1ghni3D2COeIcM4I54pw7gjniXDeCOeLcP4IF4hwwQgXinDhCBeJcNEIF4tw8QiXiHDJCJeKcOkIl4mQCJeNcLkIl49whQhXjHClCFeOcJUIV41wtQhXj3CNCNeMcK0I145wnQjXjXC9CNePcIMIN4xwowg3jnCTCDeNcLMIN49wiwi3jHCrCLeOcJsIt41wuwi3j3CHCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjfC4CI+P8IQIT4zwpAhPjvCUCE+N0AhPi/D0CM+I8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCJ+I8MkIn4rw6QififDZCAcRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hE+F+HzEb4Q4YsRvhThyxG+EuGrEb4W4esRvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHnEX4R4ZcRfhXh1xF+E+G3EX4X4fcR/hDhjxH+FOHPEf4S4a8R/hbh7xH+EeGfEf4V4d8R/hPhvxH+F+GQCIdGOCzC4RGOiHBkhKMiHB3hmAjHRjhOjOPGOF6M48c4QYwTxjhRjBPHOEmMk8Y4WYyTxzhFjFPGOFWMU8c4TYzTxjhdjNPHOEOMM8Y4U4wzxzhLjLPGOFuMs8c4R4xzxjhXjHPHOE+M88Y4X4zzx7hAjAvGuFCMC8e4SIyLxrhYjIvHuESMS8a4VIxLx7hMjMS4bIzLxbh8jCvEuGKMK8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybxbh5jFvEuGWMW8W4dYzbxLhtjNvFuH2MO8S4Y4w7xbhzjLvEuGuMu8W4e4x7xLhnjHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIfFeHiMR8R4ZIxHxXh0jMfEeGyMx8V4fIwnxHhijCfFeHKMp8R4aozGeFqMp8d4RoxnxnhWjGfHeE6M58Z4Xoznx3hBjBfGeFGMF8d4SYyXxnhZjJfHeEWMV8Z4VYxXx3hNjNfGeF2M18d4Q4w3xnhTjDfHeEuMt8Z4W4y3x3hHjHfGeFeMd8d4T4z3xnhfjPfH+ECMD8b4UIwPx/hIjI/G+FiMj8f4RIxPxvhUjE/H+EyMz8Y4iDGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GP8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixi/jPGrGL+O8ZsYv43xuxi/j/GHGH+M8acYf47xlxh/jfG3GH+P8Y8Y/4zxrxj/jvGfGP+N8b8Yh8Q4NMZhMQ6PcUSMI2McFePoGMfEODbGcRIcN8HxEhw/wQkSnDDBiRKcOMFJEpw0wckSnDzBKRKcMsGpEpw6wWkSnDbB6RKcPsEZEpwxwZkSnDnBWRKcNcHZEpw9wTkSnDPBuRKcO8F5Epw3wfkSnD/BBRJcMMGFElw4wUUSXDTBxRJcPMElElwywaUSXDrBZRIkwWUTXC7B5RNcIcEVE1wpwZUTXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CzBzRPcIsEtE9wqwa0T3CbBbRPcLsHtE9whwR0T3CnBnRPcJcFdE9wtwd0T3CPBPRPcK8G9E9wnwX0T3C/B/RM8IMEDEzwowYMTPCTBQxM8LMHDEzwiwSMTPCrBoxM8JsFjEzwuweMTPCHBExM8KcGTEzwlwVMTNMHTEjw9wTMSPDPBsxI8O8FzEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxK8M8G7Erw7wXsSvDfB+xK8P8EHEnwwwYcSfDjBRxJ8NMHHEnw8wScSfDLBpxJ8OsFnEnw2wUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYLPJfh8gi8k+GKCLyX4coKvJPhqgq8l+HqCbyT4ZoJvJfh2gu8k+G6C7yX4foIfJPhhgh8l+HGCnyT4aYKfJfh5gl8k+GWCXyX4dYLfJPhtgt8l+H2CPyT4Y4I/Jfhzgr8k+GuCvyX4e4J/JPhngn8l+HeC/yT4b4L/JTgkwaEJDktweIIjEhyZ4KgERyc4JsGxCY6T4rgpjpfi+ClOkOKEKU6U4sQpTpLipClOluLkKU6R4pQpTpXi1ClOk+K0KU6X4vQpzpDijCnOlOLMKc6S4qwpzpbi7CnOkeKcKc6V4twpzpPivCnOl+L8KS6Q4oIpLpTiwikukuKiKS6W4uIpLpHikikuleLSKS6TIikum+JyKS6f4goprpjiSimunOIqKa6a4moprp7iGimumeJaKa6d4joprpvieimun+IGKW6Y4kYpbpziJilumuJmKW6e4hYpbpniViluneI2KW6b4nYpbp/iDinumOJOKe6c4i4p7pribinunuIeKe6Z4l4p7p3iPinum+J+Ke6f4gEpHpjiQSkenOIhKR6a4mEpHp7iESkemeJRKR6d4jEpHpvicSken+IJKZ6Y4kkpnpziKSmemqIpnpbi6SmekeKZKZ6V4tkpnpPiuSmel+L5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4p0p3pXi3Snek+K9Kd6X4v0pPpDigyk+lOLDKT6S4qMpPpbi4yk+keKTKT6V4tMpPpPisykOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1P8IsUvU/wqxa9T/CbFb1P8LsXvU/whxR9T/CnFn1P8JcVfU/wtxd9T/CPFP1P8K8W/U/wnxX9T/C/FISkOTXFYisNTHJHiyBRHpTg6xTEpjk1xnAzHzXC8DMfPcIIMJ8xwogwnznCSDCfNcLIMJ89wigynzHCqDKfOcJoMp81wugynz3CGDGfMcKYMZ85wlgxnzXC2DGfPcI4M58xwrgznznCeDOfNcL4M589wgQwXzHChDBfOcJEMF81wsQwXz3CJDJfMcKkMl85wmQzJcNkMl8tw+QxXyHDFDFfKcOUMV8lw1QxXy3D1DNfIcM0M18pw7QzXyXDdDNfLcP0MN8hwwww3ynDjDDfJcNMMN8tw8wy3yHDLDLfKcOsMt8lw2wy3y3D7DHfIcMcMd8pw5wx3yXDXDHfLcPcM98hwzwz3ynDvDPfJcN8M98tw/wwPyPDADA/K8OAMD8nw0AwPy/DwDI/I8MgMj8rw6AyPyfDYDI/L8PgMT8jwxAxPyvDkDE/J8NQMzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JIML83wsgwvz/CKDK/M8KoMr87wmgyvzfC6DK/P8IYMb8zwpgxvzvCWDG/N8LYMb8/wjgzvzPCuDO/O8J4M783wvgzvz/CBDB/M8KEMH87wkQwfzfCxDB/P8IkMn8zwqQyfzvCZDJ/NcJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+FzGT6f4QsZvpjhSxm+nOErGb6a4WsZvp7hGxm+meFbGb6d4TsZvpvhexm+n+EHGX6Y4UcZfpzhJxl+muFnGX6e4RcZfpnhVxl+neE3GX6b4XcZfp/hDxn+mOFPGf6c4S8Z/prhbxn+nuEfGf6Z4V8Z/p3hPxn+m+F/GQ7JcGiGwzIcnuGIDEdmOCrD0RmOyXBshuPkOG6O4+U4fo4T5DhhjhPlOHGOk+Q4aY6T5Th5jlPkOGWOU+U4dY7T5DhtjtPlOH2OM+Q4Y44z5ThzjrPkOGuOs+U4e45z5DhnjnPlOHeO8+Q4b47z5Th/jgvkuGCOC+W4cI6L5LhojovluHiOS+S4ZI5L5bh0jsvkSI7L5rhcjsvnuEKOK+a4Uo4r57hKjqvmuFqOq+e4Ro5r5rhWjmvnuE6O6+a4Xo7r57hBjhvmuFGOG+e4SY6b5rhZjpvnuEWOW+a4VY5b57hNjtvmuF2O2+e4Q4475rhTjjvnuEuOu+a4W46757hHjnvmuFeOe+e4T4775rhfjvvneECOB+Z4UI4H53hIjofmeFiOh+d4RI5H5nhUjkfneEyOx+Z4XI7H53hCjifmeFKOJ+d4So6n5miOp+V4eo5n5HhmjmfleHaO5+R4bo7n5Xh+jhfkeGGOF+V4cY6X5HhpjpfleHmOV+R4ZY5X5Xh1jtfkeG2O1+V4fY435HhjjjfleHOOt+R4a4635Xh7jnfkeGeOd+V4d4735HhvjvfleH+OD+T4YI4P5fhwjo/k+GiOj+X4eI5P5Phkjk/l+HSOz+T4bI6DHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPscn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txSI5DcxyW4/AcR+Q4MsdROY7OcUyOY3Mcp8BxCxyvwPELnKDACQucqMCJC5ykwEkLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrMDFC1yiwCULXKrApQtcpkAKXLbA5QpcvsAVClyxwJUKXLnAVQpctcDVCly9wDUKXLPAtQpcu8B1Cly3wPUKXL/ADQrcsMCNCty4wE0K3LTAzQrcvMAtCtyywK0K3LrAbQrctsDtCty+wB0K3LHAnQrcucBdCty1wN0K3L3APQrcs8C9Cty7wH0K3LfA/Qrcv8ADCjywwIMKPLjAQwo8tMDDCjy8wCMKPLLAowo8usBjCjy2wOMKPL7AEwo8scCTCjy5wFMKPLVACzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewu8r8D7C3ygwAcLfKjAhwt8pMBHC3yswMcLfKLAJwt8qsCnC3ymwGcLHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYF/hcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBvxb4W4G/F/hHgX8W+FeBfxf4T4H/FvhfgUMKHFrgsAKHFziiwJEFjipwdIFjChxb4DgljlvieCWOX+IEJU5Y4kQlTlziJCVOWuJkJU5e4hQlTlniVCVOXeI0JU5b4nQlTl/iDCXOWOJMJc5c4iwlzlribCXOXuIcJc5Z4lwlzl3iPCXOW+J8Jc5f4gIlLljiQiUuXOIiJS5a4mIlLl7iEiUuWeJSJS5d4jIlUuKyJS5X4vIlrlDiiiWuVOLKJa5S4qolrlbi6iWuUeKaJa5V4tolrlPiuiWuV+L6JW5Q4oYlblTixiVuUuKmJW5W4uYlblHiliVuVeLWJW5T4rYlblfi9iXuUOKOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElHlPisSUeV+LxJZ5Q4oklnlTiySWeUuKpJVriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lniXSXeXeI9Jd5b4n0l3l/iAyU+WOJDJT5c4iMlPlriYyU+XuITJT5Z4lMlPl3iMyU+W+KgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7E50p8vsQXSnyxxJdKfLnEV0p8tcTXSny9xDdKfLPEt0p8u8R3Sny3xPdKfL/ED0r8sMSPSvy4xE9K/LTEz0r8vMQvSvyyxK9K/LrEb0r8tsTvSvy+xB9K/LHEn0r8ucRfSvy1xN9K/L3EP0r8s8S/Svy7xH9K/LfE/0ocUuLQEoeVOLzEESWOLHFUiaNLHFPi2BLHqXDcCsercPwKJ6hwwgonqnDiCiepcNIKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6pw5gpnqXDWCmercPYK56hwzgrnqnDuCuepcN4K56tw/goXqHDBCheqcOEKF6lw0QoXq3DxCpeocMkKl6pw6QqXqZAKl61wuQqXr3CFClescKUKV65wlQpXrXC1ClevcI0K16xwrQrXrnCdCtetcL0K169wgwo3rHCjCjeucJMKN61wswo3r3CLCrescKsKt65wmwq3rXC7CrevcIcKd6xwpwp3rnCXCnetcLcKd69wjwr3rHCvCveucJ8K961wvwr3r/CACg+s8KAKD67wkAoPrfCwCg+v8IgKj6zwqAqPrvCYCo+t8LgKj6/whApPrPCkCk+u8JQKT63QCk+r8PQKz6jwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3grvq/D+Ch+o8MEKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCp+p8NkKBxUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2FT5X4fMVvlDhixW+VOHLFb5S4asVvlbh6xW+UeGbFb5V4dsVvlPhuxW+V+H7FX5Q4YcVflThxxV+UuGnFX5W4ecVflHhlxV+VeHXFX5T4bcVflfh9xX+UOGPFf5U4c8V/lLhrxX+VuHvFf5R4Z8V/lXh3xX+U+G/Ff5X4ZAKh1Y4rMLhFY6ocGSFoyocXeGYCsdWOE6N49Y4Xo3j1zhBjRPWOFGNE9c4SY2T1jhZjZPXOEWNU9Y4VY1T1zhNjdPWOF2N09c4Q40z1jhTjTPXOEuNs9Y4W42z1zhHjXPWOFeNc9c4T43z1jhfjfPXuECNC9a4UI0L17hIjYvWuFiNi9e4RI1L1rhUjUvXuEyN1LhsjcvVuHyNK9S4Yo0r1bhyjavUuGqNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9W4d4371LhvjfvVuH+NB9R4YI0H1XhwjYfUeGiNh9V4eI1H1HhkjUfVeHSNx9R4bI3H1Xh8jSfUeGKNJ9V4co2n1HhqjdZ4Wo2n13hGjWfWeFaNZ9d4To3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1nhVjVfXeE2N19Z4XY3X13hDjTfWeFONN9d4S4231nhbjbfXeEeNd9Z4V41313hPjffWeF+N99f4QI0P1vhQjQ/X+EiNj9b4WI2P1/hEjU/W+FSNT9f4TI3P1jioMagxrDGqMa4xqTGtMasxr7GosayxqrGusamxrbGrsa/xuRqfr/GFGl+s8aUaX67xlRpfrfG1Gl+v8Y0a36zxrRrfrvGdGt+t8b0a36/xgxo/rPGjGj+u8ZMaP63xsxo/r/GLGr+s8asav67xmxq/rfG7Gr+v8Ycaf6zxpxp/rvGXGn+t8bcaf6/xjxr/rPGvGv+u8Z8a/63xvxqH1Di0xmE1Dq9xRI0jaxxV4+gax9Q4tsZxGhy3wfEaHL/BCRqcsMGJGpy4wUkanLTByRqcvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLjBRRpctMHFGly8wSUaXLLBpRpcusFlGqTBZRtcrsHlG1yhwRUbXKnBlRtcpcFVG1ytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHRvcqcGdG9ylwV0b3K3B3Rvco8E9G9yrwb0b3KfBfRvcr8H9GzygwQMbPKjBgxs8pMFDGzyswcMbPKLBIxs8qsGjGzymwWMbPK7B4xs8ocETGzypwZMbPKXBUxu0wdMaPL3BMxo8s8GzGjy7wXMaPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBqxq8usFrGry2wesavL7BGxq8scGbGry5wVsavLXB2xq8vcE7GryzwbsavLvBexq8t8H7Gry/wQcafLDBhxp8uMFHGny0wccafLzBJxp8ssGnGny6wWcafLbBQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN9g881+HyDLzT4YoMvNfhyg680+GqDrzX4eoNvNPhmg281+HaD7zT4boPvNfh+gx80+GGDHzX4cYOfNPhpg581+HmDXzT4ZYNfNfh1g980+G2D3zX4fYM/NPhjgz81+HODvzT4a4O/Nfh7g380+GeDfzX4d4P/NPhvg/81OKTBoQ0Oa3B4gyMaHNngqAZHNzimwbENjtPiuC2O1+L4LU7Q4oQtTtTixC1O0uKkLU7W4uQtTtHilC1O1eLULU7T4rQtTtfi9C3O0OKMLc7U4swtztLirC3O1uLsLc7R4pwtztXi3C3O0+K8Lc7X4vwtLtDigi0u1OLCLS7S4qItLtbi4i0u0eKSLS7V4tItLtMiLS7b4nItLt/iCi2u2OJKLa7c4iotrtriai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7c4iEtHtriYS0e3uIRLR7Z4lEtHt3iMS0e2+JxLR7f4gktntjiSS2e3OIpLZ7aoi2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7V4tUtXtPitS1e1+L1Ld7Q4o0t3tTizS3e0uKtLd7W4u0t3tHinS3e1eLdLd7T4r0t3tfi/S0+0OKDLT7U4sMtPtLioy0+1uLjLT7R4pMtPtXi0y0+0+KzLQ5aDFoMW4xajFtMWkxbzFrMWyxaLFusWqxbbFpsW+xa7Ft8rsXnW3yhxRdbfKnFl1t8pcVXW3ytxddbfKPFN1t8q8W3W3ynxXdbfK/F91v8oMUPW/yoxY9b/KTFT1v8rMXPW/yixS9b/KrFr1v8psVvW/yuxe9b/KHFH1v8qcWfW/ylxV9b/K3F31v8o8U/W/yrxb9b/KfFf1v8r8UhLQ5tcViLw1sc0eLIFke1OLrFMS2ObXGcDsftcLwOx+9wgg4n7HCiDifucJIOJ+1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/o8MAOD+rw4A4P6fDQDg/r8PAOj+jwyA6P6vDoDo/p8NgOj+vw+A5P6PDEDk/q8OQOT+nw1A7t8LQOT+/wjA7P7PCsDs/u8JwOz+3wvA7P7/CCDi/s8KIOL+7wkg4v7fCyDi/v8IoOr+zwqg6v7vCaDq/t8LoOr+/whg5v7PCmDm/u8JYOb+3wtg5v7/CODu/s8K4O7+7wng7v7fC+Du/v8IEOH+zwoQ4f7vCRDh/t8LEOH+/wiQ6f7PCpDp/u8JkOn+1w0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eFXHX7d4Tcdftvhdx1+3+EPHf7Y4U8d/tzhLx3+2uFvHf7e4R8d/tnhXx3+3eE/Hf7b4X8dDulwaIfDOhze4YgOR3Y4qsPRHY7pcGyH4/Q4bo/j9Th+jxP0OGGPE/U4cY+T9Dhpj5P1OHmPU/Q4ZY9T9Th1j9P0OG2P0/U4fY8z9DhjjzP1OHOPs/Q4a4+z9Th7j3P0OGePc/U4d4/z9Dhvj/P1OH+PC/S4YI8L9bhwj4v0uGiPi/W4eI9L9Lhkj0v1uHSPy/RIj8v2uFyPy/e4Qo8r9rhSjyv3uEqPq/a4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4UY8b97hJj5v2uFmPm/e4RY9b9rhVj1v3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe/a4V49797hPj/v2uF+P+/d4QI8H9nhQjwf3eEiPh/Z4WI+H93hEj0f2eFSPR/d4TI/H9nhcj8f3eEKPJ/Z4Uo8n93hKj6f2aI+n9Xh6j2f0eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1+HCPj/T4aI+P9fh4j0/0+GSPT/X4dI/P9Phsj4Me/w8AAP//wLDz/g==") 3.487206632s ago: executing program 3 (id=906): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x100}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 2.483648372s ago: executing program 3 (id=911): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018"], 0xec}}, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x0, {0x2, 0xf0, 0x1}, {0x0, 0x1}, 0xfd, 0xfd}], 0x4000) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 2.367939144s ago: executing program 4 (id=912): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) mknod$loop(0x0, 0x40, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000840), &(0x7f0000000880)="22cf", 0x2, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) write$binfmt_script(r3, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$can_j1939(r5, 0x0, 0x41) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bind$can_j1939(r5, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) 1.980852722s ago: executing program 2 (id=913): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x2ca}, 0x18) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r2, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_val={0x18, 0x3}, @map_fd={0x18, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0xf8d3, 0xde, &(0x7f0000000b80)=""/222, 0x41000, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x10, 0x1000, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f00000005c0)=[{0x5, 0x2, 0x10, 0xa}, {0x4, 0x1114, 0x2, 0x3}, {0x1, 0xf, 0x5, 0xa}, {0x2, 0x2, 0x8, 0x6}, {0x5, 0x5, 0x8, 0x3}, {0x5, 0x2, 0xb, 0x3}, {0x3, 0x5, 0x1, 0x9}, {0x3, 0x4, 0x3, 0x2}], 0x10, 0x8b}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000000000ff00000900020073797a31000000000500010007f2ff001c0007800c00018008000140fffffffe0c0002800800014004a20d"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.574400263s ago: executing program 1 (id=914): r0 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x2001, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.467520163s ago: executing program 1 (id=915): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x4}]}, 0x10) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000001100)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = dup2(r4, r4) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) syz_open_procfs(0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000240)) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f000001000000001c346d2425ef26c6"], 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r10 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) 1.343399946s ago: executing program 2 (id=916): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x8000}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="8f6bcdcdd8a1bbbbbbbbbbbb0800450020"], 0x0) 1.259994394s ago: executing program 4 (id=917): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0xffc, 0x0, 0x400007}, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) ioctl(0xffffffffffffffff, 0x5309, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd, 0x8006, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 1.259622654s ago: executing program 2 (id=918): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xc0002001}) 1.240370286s ago: executing program 4 (id=919): r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) 1.207382849s ago: executing program 3 (id=920): socket$alg(0x26, 0x5, 0x0) openat$zero(0xffffff9c, &(0x7f00000000c0), 0x102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000007ca0100000002303000008000100"], 0x1c}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') lseek(r3, 0x6, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e20, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) 1.096044671s ago: executing program 4 (id=921): syz_io_uring_setup(0x6d42, &(0x7f0000000280)={0x0, 0x32c8, 0x1000}, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc00}, 0x0) syz_io_uring_setup(0x6001f8c, &(0x7f0000000580)={0x0, 0xdd00, 0x0, 0x2}, &(0x7f0000000400), &(0x7f0000000280)) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x92, 0x0, @fd, 0xfff, 0x0, 0x6}) io_uring_enter(r0, 0x6686, 0x2936, 0x28, 0x0, 0x0) 1.078958172s ago: executing program 2 (id=922): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x9f48, 0x4, 0x8, 0x5, 0x10000, 0x3, 0x4002004c1, 0x3, 0x5, 0x0, 0x40000000800001, 0x0, 0x1, 0x0, 0x9, 0x10000008d], 0xddcd0000, 0x100000}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 983.528462ms ago: executing program 2 (id=923): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406441, &(0x7f0000000280)={0x34, 0x0, 0x3, 0xffffffffffffff91, 0x0, 0x0, 0x0, 0xfffffffffffffcb3, 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) read(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') pipe2$9p(&(0x7f00000027c0), 0x0) unshare(0x22020000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$KDGKBDIACR(r5, 0x4bfa, 0x0) 876.048422ms ago: executing program 4 (id=924): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x43000c80) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x12000092) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 361.321994ms ago: executing program 3 (id=925): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r3 = socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, 0x0, 0x0) getpeername$unix(r3, &(0x7f0000000440)=@abs, &(0x7f00000000c0)=0x6e) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) open(0x0, 0x64842, 0x389b0d52417bb201) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080102400000000f08000140000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb08004500001cfffe0000a02f90787f000001e00000012001880b00000000"], 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x2460, 0x400, 0x8000002, 0x3d7}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) 361.164054ms ago: executing program 4 (id=926): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) socket$inet(0x2, 0x3, 0x5) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x843ba, 0x0, 0xa, 0x0, 0x0) times(0x0) 207.729369ms ago: executing program 0 (id=927): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x2ca}, 0x18) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r2, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_val={0x18, 0x3}, @map_fd={0x18, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0xf8d3, 0xde, &(0x7f0000000b80)=""/222, 0x41000, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x10, 0x1000, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f00000005c0)=[{0x5, 0x2, 0x10, 0xa}, {0x4, 0x1114, 0x2, 0x3}, {0x1, 0xf, 0x5, 0xa}, {0x2, 0x2, 0x8, 0x6}, {0x5, 0x5, 0x8, 0x3}, {0x5, 0x2, 0xb, 0x3}, {0x3, 0x5, 0x1, 0x9}, {0x3, 0x4, 0x3, 0x2}], 0x10, 0x8b}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000000000ff00000900020073797a31000000000500010007f2ff001c0007800c00018008000140fffffffe0c0002800800014004a20d"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 0s ago: executing program 1 (id=928): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000040)) fanotify_mark(0xffffffffffffffff, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) kernel console output (not intermixed with test programs): 0 [ 57.430652][ T4188] device veth0_macvtap entered promiscuous mode [ 57.444358][ T4183] device veth1_macvtap entered promiscuous mode [ 57.460793][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.480090][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.494446][ T4188] device veth1_macvtap entered promiscuous mode [ 57.527277][ T4192] device veth0_macvtap entered promiscuous mode [ 57.532485][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.550419][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.562006][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.567039][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.582286][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.593608][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.605474][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.617584][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.629117][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.639264][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.649922][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.661266][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.668624][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.677099][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.686068][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.696667][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.704759][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.713698][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.722693][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.731139][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.740025][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.749909][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.761437][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.772245][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.782916][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.792776][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.803513][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.815579][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.826907][ T414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.846238][ T414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.857532][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.874544][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.883527][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.892279][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.904869][ T4192] device veth1_macvtap entered promiscuous mode [ 57.913003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.920948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.929829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.938776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.955467][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.966680][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.976853][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.987575][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.997656][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.008355][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.012159][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 58.018949][ T4297] Bluetooth: hci4: command 0x040f tx timeout [ 58.032162][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.052627][ T4297] Bluetooth: hci1: command 0x040f tx timeout [ 58.068482][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.079102][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.089895][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.105501][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.106190][ T4297] Bluetooth: hci0: command 0x040f tx timeout [ 58.116689][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.123567][ T4185] Bluetooth: hci3: command 0x040f tx timeout [ 58.134599][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.148478][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.159280][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.170720][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.181562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.190192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.200414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.209405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.221383][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.230479][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.239824][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.257395][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.266435][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.275450][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.286572][ T4299] bridge0: port 3(syz_tun) entered blocking state [ 58.293861][ T4299] bridge0: port 3(syz_tun) entered disabled state [ 58.302402][ T4299] device syz_tun entered promiscuous mode [ 58.308687][ T4299] bridge0: port 3(syz_tun) entered blocking state [ 58.315494][ T4299] bridge0: port 3(syz_tun) entered forwarding state [ 58.343870][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.357779][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.369419][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.387137][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.398046][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.413585][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.424686][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.435464][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.447061][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.455484][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.464545][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.476154][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.533778][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.548081][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.557866][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.597405][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.744662][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.784791][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.798276][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.814321][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.824524][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.839494][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.862650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.874527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.882921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.896815][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.915605][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.935854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.975014][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.995380][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.006565][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.026838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.051269][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.072107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.220936][ T4312] bridge0: port 3(syz_tun) entered blocking state [ 59.238520][ T4312] bridge0: port 3(syz_tun) entered disabled state [ 59.292937][ T4312] device syz_tun entered promiscuous mode [ 59.322623][ T4312] bridge0: port 3(syz_tun) entered blocking state [ 59.329141][ T4312] bridge0: port 3(syz_tun) entered forwarding state [ 59.383445][ T4305] loop0: detected capacity change from 0 to 32768 [ 59.431016][ T4305] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.7 (4305) [ 59.541613][ T4305] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 59.591128][ T4305] BTRFS info (device loop0): using free space tree [ 59.612676][ T4305] BTRFS info (device loop0): has skinny extents [ 59.716388][ T4307] loop2: detected capacity change from 0 to 32768 [ 59.835949][ T4307] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (4307) [ 59.926255][ T4307] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 59.938149][ T4305] BTRFS info (device loop0): enabling ssd optimizations [ 59.971694][ T4307] BTRFS info (device loop2): using free space tree [ 59.981543][ T4307] BTRFS info (device loop2): has skinny extents [ 60.092560][ T4257] Bluetooth: hci4: command 0x0419 tx timeout [ 60.109757][ T4257] Bluetooth: hci2: command 0x0419 tx timeout [ 60.182850][ T4257] Bluetooth: hci3: command 0x0419 tx timeout [ 60.201486][ T4257] Bluetooth: hci0: command 0x0419 tx timeout [ 60.227873][ T4257] Bluetooth: hci1: command 0x0419 tx timeout [ 60.270173][ T4310] loop3: detected capacity change from 0 to 32768 [ 60.366797][ T4310] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 60.375385][ T4307] BTRFS info (device loop2): enabling ssd optimizations [ 60.378641][ T4315] loop4: detected capacity change from 0 to 32768 [ 60.431634][ T4319] loop1: detected capacity change from 0 to 32768 [ 60.455552][ T4310] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 60.511519][ T4315] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.5 (4315) [ 60.633099][ T4319] XFS (loop1): Mounting V5 Filesystem [ 60.637415][ T4310] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 60.675524][ T4315] loop_set_status: loop4 () has still dirty pages (nrpages=2) [ 60.719000][ T144] BTRFS info (device loop2): space_info 5 has 10027008 free, is not full [ 60.727846][ T144] BTRFS info (device loop2): space_info total=11534336, used=53248, pinned=0, reserved=20480, may_use=1433600, readonly=0 zone_unusable=0 [ 60.742692][ T144] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 847872 [ 60.751608][ T144] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 60.759256][ T144] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 60.766956][ T144] BTRFS info (device loop2): delayed_block_rsv: size 196608 reserved 196608 [ 60.775692][ T144] BTRFS info (device loop2): delayed_refs_rsv: size 851968 reserved 389120 [ 60.852560][ T4249] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 60.893584][ T4359] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4359) [ 60.907910][ T26] audit: type=1804 audit(1763027386.356:2): pid=4372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3" name="/newroot/0/file1/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 60.909863][ T4305] BTRFS info (device loop0): balance: start -d -m [ 60.943089][ T144] BTRFS info (device loop2): cannot satisfy tickets, dumping space info [ 60.951691][ T144] BTRFS info (device loop2): space_info 5 has 10629120 free, is full [ 60.959877][ T144] BTRFS info (device loop2): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=851968, readonly=0 zone_unusable=0 [ 60.973885][ T144] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968 [ 60.982644][ T144] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 60.990267][ T144] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 60.998351][ T144] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 61.006151][ T144] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 61.013868][ T144] BTRFS info (device loop2): failing ticket with 16781312 bytes [ 61.022448][ T4307] BTRFS info (device loop2): space_info 5 has 10596352 free, is full [ 61.030745][ T4307] BTRFS info (device loop2): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=884736, readonly=0 zone_unusable=0 [ 61.041424][ T4319] XFS (loop1): Ending clean mount [ 61.044576][ T4307] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968 [ 61.055459][ T4249] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 61.058300][ T4307] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 61.072643][ T4307] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 61.080283][ T4307] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 61.088152][ T4307] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 61.186463][ T4305] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 61.242392][ T144] BTRFS info (device loop2): space_info 5 has 10596352 free, is full [ 61.250847][ T144] BTRFS info (device loop2): space_info total=11534336, used=53248, pinned=0, reserved=12288, may_use=872448, readonly=0 zone_unusable=0 [ 61.253878][ T4319] XFS (loop1): Quotacheck needed: Please wait. [ 61.265131][ T144] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968 [ 61.279984][ T144] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 61.287661][ T144] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 61.295349][ T144] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 61.303196][ T144] BTRFS info (device loop2): delayed_refs_rsv: size 393216 reserved 20480 [ 61.308131][ T4371] BTRFS warning (device loop0): failed to trim 2 block group(s), last error -512 [ 61.330741][ T4249] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 275ms [ 61.333624][ T4305] BTRFS info (device loop0): balance: canceled [ 61.360587][ T144] BTRFS info (device loop2): cannot satisfy tickets, dumping space info [ 61.369086][ T144] BTRFS info (device loop2): space_info 5 has 10629120 free, is full [ 61.371650][ T4249] gfs2: fsid=syz:syz.0: jid=0: Done [ 61.377502][ T144] BTRFS info (device loop2): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=851968, readonly=0 zone_unusable=0 [ 61.396053][ T144] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968 [ 61.404682][ T144] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 61.412353][ T144] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 61.419992][ T144] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 61.427835][ T144] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 61.435589][ T144] BTRFS info (device loop2): failing ticket with 16781312 bytes [ 61.436720][ T4310] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 61.443921][ T4370] BTRFS info (device loop2): space_info 5 has 10563584 free, is full [ 61.458897][ T4370] BTRFS info (device loop2): space_info total=11534336, used=53248, pinned=0, reserved=0, may_use=917504, readonly=0 zone_unusable=0 [ 61.468766][ T4319] XFS (loop1): Quotacheck: Done. [ 61.472612][ T4370] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968 [ 61.486381][ T4370] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 61.494064][ T4370] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 61.501754][ T4370] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 61.509571][ T4370] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 61.543286][ T4307] BTRFS info (device loop2): balance: start -s [ 61.549764][ T4307] BTRFS info (device loop2): left=0, need=98304, flags=2 [ 61.596946][ T4307] BTRFS info (device loop2): space_info 2 has 0 free, is not full [ 61.605208][ T4307] BTRFS info (device loop2): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 61.619147][ T4307] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968 [ 61.628161][ T4307] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 61.635861][ T4307] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 61.643539][ T4307] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 61.650602][ T4371] BTRFS warning (device loop0): failed to trim 1 device(s), last error -512 [ 61.651380][ T4307] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 61.678017][ T4307] BTRFS info (device loop2): relocating block group 1048576 flags system [ 61.757301][ T4307] BTRFS info (device loop2): left=0, need=32768, flags=2 [ 61.770564][ T4307] BTRFS info (device loop2): space_info 2 has 0 free, is not full [ 61.779357][ T4307] BTRFS info (device loop2): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 61.793032][ T4307] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968 [ 61.802105][ T4307] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 61.804728][ T26] audit: type=1804 audit(1763027387.256:3): pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8" name="/newroot/1/file0/bus" dev="loop1" ino=9291 res=1 errno=0 [ 61.809748][ T4307] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 61.838484][ T4307] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 61.846376][ T4307] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 61.902282][ T26] audit: type=1804 audit(1763027387.296:4): pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.8" name="/newroot/1/file0/bus" dev="loop1" ino=9291 res=1 errno=0 [ 61.946958][ T4380] XFS (loop1): User initiated shutdown received. [ 61.980293][ T4307] BTRFS error (device loop2): allocation failed flags 2, wanted 4096 tree-log 0, relocation: 0 [ 61.992203][ T4380] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 62.034635][ T4380] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 62.059768][ T4307] BTRFS info (device loop2): space_info 2 has -4096 free, is not full [ 62.068359][ T4307] BTRFS info (device loop2): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=4096, readonly=4190208 zone_unusable=0 [ 62.082305][ T4307] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968 [ 62.091078][ T4307] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 62.099334][ T4307] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 62.107032][ T4307] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 62.114905][ T4307] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 62.206922][ T4307] BTRFS info (device loop2): block group 1048576 has 4194304 bytes, 4096 used 0 pinned 0 reserved 0 zone_unusable [readonly] [ 62.221839][ T4307] BTRFS critical (device loop2): entry offset 1052672, bytes 4190208, bitmap no [ 62.239062][ T4307] BTRFS info (device loop2): block group has cluster?: no [ 62.255460][ T4307] BTRFS info (device loop2): 0 blocks of free space at or bigger than bytes is [ 62.284498][ T4307] BTRFS info (device loop2): 1 enospc errors during balance [ 62.307355][ T4307] BTRFS info (device loop2): balance: ended with status: -28 [ 62.343351][ T4188] XFS (loop1): Unmounting Filesystem [ 62.379658][ T4374] loop4: detected capacity change from 0 to 40427 [ 62.461945][ T4374] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 62.591263][ T4374] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 62.619831][ T4374] F2FS-fs (loop4): invalid crc value [ 62.694361][ T4374] F2FS-fs (loop4): Found nat_bits in checkpoint [ 62.969459][ T4374] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 62.985299][ T4374] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 63.211239][ T4402] loop1: detected capacity change from 0 to 4096 [ 63.334914][ T4407] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.419291][ T4388] loop0: detected capacity change from 0 to 32768 [ 63.464873][ T4388] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.10 (4388) [ 63.518455][ T4388] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 63.601358][ T4388] BTRFS info (device loop0): using free space tree [ 63.625407][ T4388] BTRFS info (device loop0): has skinny extents [ 63.901716][ T4388] BTRFS info (device loop0): enabling ssd optimizations [ 64.275312][ T4406] loop2: detected capacity change from 0 to 32768 [ 64.335611][ T4409] loop1: detected capacity change from 0 to 32768 [ 64.353655][ T4406] ======================================================= [ 64.353655][ T4406] WARNING: The mand mount option has been deprecated and [ 64.353655][ T4406] and is ignored by this kernel. Remove the mand [ 64.353655][ T4406] option from the mount to silence this warning. [ 64.353655][ T4406] ======================================================= [ 64.413450][ T4409] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.16 (4409) [ 64.566990][ T4429] loop4: detected capacity change from 0 to 32768 [ 64.712802][ T4409] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 64.736553][ T4406] XFS (loop2): Mounting V5 Filesystem [ 64.753631][ T4429] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.15 (4429) [ 64.795397][ T4435] Set syz1 is full, maxelem 6117 reached [ 64.803171][ T4409] BTRFS info (device loop1): force clearing of disk cache [ 64.811125][ T4409] BTRFS info (device loop1): enabling auto defrag [ 64.894710][ T4409] BTRFS info (device loop1): max_inline at 727 [ 64.911631][ T4409] BTRFS info (device loop1): enabling disk space caching [ 64.918703][ T4409] BTRFS info (device loop1): disk space caching is enabled [ 64.941316][ T4429] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 65.001369][ T4409] BTRFS info (device loop1): has skinny extents [ 65.022304][ T4406] XFS (loop2): Ending clean mount [ 65.042331][ T4429] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 65.072727][ T4406] XFS (loop2): Quotacheck needed: Please wait. [ 65.107942][ T4406] XFS (loop2): Quotacheck: Done. [ 65.133324][ T4429] BTRFS info (device loop4): trying to use backup root at mount time [ 65.175577][ T4429] BTRFS info (device loop4): setting nodatasum [ 65.182259][ T4429] BTRFS info (device loop4): force zlib compression, level 3 [ 65.191063][ T4429] BTRFS info (device loop4): turning on flush-on-commit [ 65.198541][ T4429] BTRFS info (device loop4): enabling disk space caching [ 65.206521][ T4429] BTRFS error (device loop4): cannot disable free space tree [ 65.219914][ T4429] BTRFS error (device loop4): open_ctree failed: -22 [ 65.297850][ T4409] BTRFS info (device loop1): enabling ssd optimizations [ 65.383059][ T4184] XFS (loop2): Unmounting Filesystem [ 65.389186][ T4409] BTRFS info (device loop1): clearing free space tree [ 65.406639][ T4409] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 65.439688][ T4471] process 'syz.3.21' launched '/dev/fd/3' with NULL argv: empty string added [ 65.451822][ T4409] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 65.801865][ T4480] loop1: detected capacity change from 32768 to 64 [ 65.841645][ T4409] attempt to access beyond end of device [ 65.841645][ T4409] loop1: rw=6145, want=10288, limit=64 [ 65.893480][ T4479] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 65.927899][ T4479] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 65.988104][ T4409] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 66.000192][ T4409] attempt to access beyond end of device [ 66.000192][ T4409] loop1: rw=6145, want=10304, limit=64 [ 66.018441][ T4409] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 66.038288][ T4409] BTRFS: error (device loop1) in btrfs_commit_transaction:2448: errno=-5 IO failure (Error while writing out transaction) [ 66.083960][ T4409] BTRFS info (device loop1): forced readonly [ 66.090123][ T4409] BTRFS warning (device loop1): Skipping commit of aborted transaction. [ 66.138044][ T4409] BTRFS: error (device loop1) in cleanup_transaction:2020: errno=-5 IO failure [ 66.406489][ T4494] lo speed is unknown, defaulting to 1000 [ 66.417884][ T4494] lo speed is unknown, defaulting to 1000 [ 66.428033][ T4494] lo speed is unknown, defaulting to 1000 [ 66.451144][ T4494] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 66.499765][ T4494] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 66.584377][ T4423] loop4: detected capacity change from 0 to 40427 [ 66.650770][ T4499] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET) [ 66.676792][ T4499] device syzkaller1 entered promiscuous mode [ 66.695336][ T4494] lo speed is unknown, defaulting to 1000 [ 66.719358][ T4423] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 66.728586][ T4423] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 66.781036][ T4484] loop2: detected capacity change from 0 to 32768 [ 66.796603][ T4494] lo speed is unknown, defaulting to 1000 [ 66.810229][ T4423] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 66.828149][ T4494] lo speed is unknown, defaulting to 1000 [ 66.858030][ T4484] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.20 (4484) [ 66.889020][ T4494] lo speed is unknown, defaulting to 1000 [ 66.932026][ T4494] lo speed is unknown, defaulting to 1000 [ 66.960337][ T4484] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 66.985570][ T4508] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.014530][ T4484] BTRFS info (device loop2): setting nodatacow, compression disabled [ 67.032203][ T4484] BTRFS info (device loop2): turning on flush-on-commit [ 67.041398][ T4484] BTRFS info (device loop2): using free space tree [ 67.058153][ T4484] BTRFS info (device loop2): has skinny extents [ 67.143330][ T13] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 67.168734][ T13] Bluetooth: hci4: Injecting HCI hardware error event [ 67.200494][ T4198] Bluetooth: hci4: hardware error 0x00 [ 67.226170][ T1108] Bluetooth: hci0: command 0x0401 tx timeout [ 67.265691][ T4525] tipc: Started in network mode [ 67.271114][ T4525] tipc: Node identity ac14140f, cluster identity 4711 [ 67.280319][ T4525] tipc: New replicast peer: 255.255.255.32 [ 67.286631][ T4525] tipc: Enabled bearer , priority 10 [ 67.404446][ T4484] BTRFS info (device loop2): enabling ssd optimizations [ 67.527672][ T4543] device syzkaller0 entered promiscuous mode [ 67.766976][ T4557] device syzkaller1 entered promiscuous mode [ 67.851411][ T1108] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 68.009417][ T4565] lo speed is unknown, defaulting to 1000 [ 68.037600][ T4565] lo speed is unknown, defaulting to 1000 [ 68.058150][ T4565] lo speed is unknown, defaulting to 1000 [ 68.128165][ T4565] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 68.157223][ T4570] tipc: Started in network mode [ 68.164960][ T4570] tipc: Node identity ac14140f, cluster identity 4711 [ 68.184773][ T4570] tipc: New replicast peer: 255.255.255.32 [ 68.190898][ T4570] tipc: Enabled bearer , priority 10 [ 68.198053][ T4565] lo speed is unknown, defaulting to 1000 [ 68.205285][ T4565] lo speed is unknown, defaulting to 1000 [ 68.223018][ T4565] lo speed is unknown, defaulting to 1000 [ 68.250841][ T4565] lo speed is unknown, defaulting to 1000 [ 68.268216][ T4565] lo speed is unknown, defaulting to 1000 [ 68.274754][ T1108] usb 3-1: config 0 has no interfaces? [ 68.281427][ T1108] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 68.295174][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.324586][ T1108] usb 3-1: config 0 descriptor?? [ 68.403801][ T4392] tipc: Node number set to 2886997007 [ 68.607868][ T4555] loop0: detected capacity change from 0 to 32768 [ 68.701204][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 68.710158][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 68.719067][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 68.727971][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 68.761203][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 68.771202][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 68.780455][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 68.791145][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 68.800686][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.809721][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 69.171142][ T4555] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.39 (4555) [ 69.255588][ T4503] tipc: Node number set to 2886997007 [ 69.286231][ T4555] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 69.317296][ T13] usb 3-1: USB disconnect, device number 2 [ 69.333131][ T4555] BTRFS info (device loop0): force clearing of disk cache [ 69.354652][ T4555] BTRFS info (device loop0): enabling auto defrag [ 69.380502][ T4555] BTRFS info (device loop0): max_inline at 727 [ 69.390606][ T4555] BTRFS info (device loop0): enabling disk space caching [ 69.408254][ T4555] BTRFS info (device loop0): disk space caching is enabled [ 69.423786][ T4567] loop3: detected capacity change from 0 to 32768 [ 69.433294][ T4555] BTRFS info (device loop0): has skinny extents [ 69.518042][ T4567] XFS (loop3): Mounting V5 Filesystem [ 69.658677][ T4567] XFS (loop3): Ending clean mount [ 69.678031][ T4567] XFS (loop3): Quotacheck needed: Please wait. [ 69.747191][ T4567] XFS (loop3): Quotacheck: Done. [ 69.817855][ T4555] BTRFS info (device loop0): enabling ssd optimizations [ 69.848922][ T4555] BTRFS info (device loop0): clearing free space tree [ 69.907238][ T4555] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 69.917995][ T26] audit: type=1804 audit(1763027395.366:5): pid=4567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.43" name="/newroot/12/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 69.998311][ T4555] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 70.037940][ T4613] XFS (loop3): User initiated shutdown received. [ 70.051436][ T26] audit: type=1804 audit(1763027395.396:6): pid=4567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.43" name="/newroot/12/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 70.059202][ T4613] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 70.198068][ T4616] loop3: writeback error on inode 9291, offset 0, sector 18732 [ 70.205620][ T4613] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 70.393607][ T4183] XFS (loop3): Unmounting Filesystem [ 70.668888][ T4555] loop_set_status: loop0 () has still dirty pages (nrpages=1) [ 70.700106][ T4603] loop4: detected capacity change from 0 to 32768 [ 70.710900][ T154] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 70.775055][ T4603] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.49 (4603) [ 70.830131][ T4603] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 70.894206][ T4603] BTRFS info (device loop4): turning on sync discard [ 70.894258][ T4603] BTRFS info (device loop4): setting nodatacow, compression disabled [ 70.894276][ T4603] BTRFS info (device loop4): turning off barriers [ 70.894295][ T4603] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 70.894313][ T4603] BTRFS info (device loop4): trying to use backup root at mount time [ 70.894361][ T4603] BTRFS info (device loop4): metadata ratio 6 [ 70.894377][ T4603] BTRFS info (device loop4): enabling auto defrag [ 70.894395][ T4603] BTRFS info (device loop4): enabling disk space caching [ 70.894448][ T4603] BTRFS info (device loop4): max_inline at 0 [ 70.894464][ T4603] BTRFS error (device loop4): cannot disable free space tree [ 70.897915][ T4603] BTRFS error (device loop4): open_ctree failed: -22 [ 71.005812][ T4174] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4174) [ 71.234191][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.259022][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.269660][ T4629] loop3: detected capacity change from 0 to 4096 [ 71.335105][ T4629] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 71.466893][ T4359] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 13 /dev/loop0 scanned by udevd (4359) [ 71.488348][ T4572] ODEBUG: Out of memory. ODEBUG disabled [ 72.291657][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.450127][ T4183] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 72.505137][ T4183] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 72.532264][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 72.539289][ T4183] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 72.651395][ T7] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 72.694012][ T7] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 72.728026][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 72.767902][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.814041][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.851526][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.908896][ T7] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 72.935827][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.994986][ T7] usb 5-1: config 0 descriptor?? [ 73.214478][ T4317] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.262469][ T7] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 73.366956][ T4652] tipc: Started in network mode [ 73.376643][ T4652] tipc: Node identity ac14140f, cluster identity 4711 [ 73.385491][ T4652] tipc: New replicast peer: 255.255.255.32 [ 73.394434][ T4652] tipc: Enabled bearer , priority 10 [ 73.526370][ T7] usb 5-1: USB disconnect, device number 2 [ 73.640546][ T7] usblp0: removed [ 73.781466][ T4317] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 73.859011][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.952215][ T4572] Set syz1 is full, maxelem 65536 reached [ 74.120012][ T4317] usb 1-1: Product: syz [ 74.169482][ T4317] usb 1-1: Manufacturer: syz [ 74.254237][ T4317] usb 1-1: SerialNumber: syz [ 74.285938][ T4317] usb 1-1: config 0 descriptor?? [ 74.391286][ T4297] tipc: Node number set to 2886997007 [ 74.450555][ T4661] loop3: detected capacity change from 0 to 32768 [ 74.541955][ T4661] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.60 (4661) [ 74.595028][ T4661] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 74.624245][ T4661] BTRFS info (device loop3): using free space tree [ 74.661343][ T4661] BTRFS info (device loop3): has skinny extents [ 74.761696][ T4317] usb 1-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -71 [ 74.790217][ T4317] usb 1-1: Firmware version (0.0) predates our first public release. [ 74.839549][ T4670] loop4: detected capacity change from 0 to 32768 [ 74.840081][ T4317] usb 1-1: Please update to version 0.2 or newer [ 74.871431][ T4317] usb 1-1: atusb_probe: initialization failed, error = -71 [ 74.911429][ T4317] atusb: probe of 1-1:0.0 failed with error -71 [ 74.922228][ T4317] usb 1-1: USB disconnect, device number 2 [ 74.983963][ T4670] loop_set_status: loop4 () has still dirty pages (nrpages=3) [ 75.158754][ T4661] BTRFS info (device loop3): enabling ssd optimizations [ 75.405624][ T4699] loop1: detected capacity change from 0 to 512 [ 75.475076][ T4699] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.833742][ T4699] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 76.192206][ T4699] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.374040][ T24] cfg80211: failed to load regulatory.db [ 77.869558][ T4736] loop4: detected capacity change from 0 to 512 [ 77.953434][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.012681][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.035991][ T4736] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 78.050609][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.133126][ T4736] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.206146][ T4742] loop0: detected capacity change from 0 to 4096 [ 79.116342][ T4182] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 79.141737][ T4182] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 79.483077][ T4753] loop4: detected capacity change from 0 to 4096 [ 79.639014][ T4753] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 80.481231][ T4752] loop0: detected capacity change from 0 to 2048 [ 80.636230][ T4752] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.781179][ C1] sched: RT throttling activated [ 82.119901][ T4753] fscrypt: Error allocating hmac(sha512): -2 [ 82.126515][ T4753] EXT4-fs (loop4): Error processing option "test_dummy_encryption" [-2] [ 82.282703][ T4773] tipc: Enabling of bearer rejected, already enabled [ 82.459985][ T4776] loop1: detected capacity change from 0 to 64 [ 82.507207][ T4778] Zero length message leads to an empty skb [ 82.531398][ T26] audit: type=1326 audit(1763027407.976:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4777 comm="syz.0.90" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f170e9766c9 code=0x0 [ 82.534384][ T4783] device syzkaller0 entered promiscuous mode [ 84.079560][ T4796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.94'. [ 86.544989][ T4805] loop4: detected capacity change from 0 to 1024 [ 86.604176][ T4811] loop3: detected capacity change from 0 to 256 [ 86.671888][ T4811] exfat: Deprecated parameter 'utf8' [ 86.678164][ T4811] exfat: Deprecated parameter 'namecase' [ 86.698463][ T4811] exfat: Deprecated parameter 'namecase' [ 86.718668][ T4811] exfat: Deprecated parameter 'utf8' [ 86.862950][ T4802] loop1: detected capacity change from 0 to 32768 [ 86.863457][ T4811] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 87.048821][ T4816] tipc: Started in network mode [ 87.117031][ T4816] tipc: Node identity ac14140f, cluster identity 4711 [ 87.346934][ T4816] tipc: New replicast peer: 255.255.255.32 [ 87.406490][ T4816] tipc: Enabled bearer , priority 10 [ 87.437107][ T4802] XFS (loop1): Mounting V5 Filesystem [ 88.461073][ T21] tipc: Node number set to 2886997007 [ 89.783507][ T4802] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 89.878023][ T4802] XFS (loop1): Starting recovery (logdev: internal) [ 89.920811][ T4802] XFS (loop1): Ending recovery (logdev: internal) [ 89.938203][ T4802] XFS (loop1): Quotacheck needed: Please wait. [ 89.997223][ T4802] XFS (loop1): Quotacheck: Done. [ 90.046734][ T4188] XFS (loop1): Unmounting Filesystem [ 90.146497][ T4317] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.258202][ T4840] loop3: detected capacity change from 0 to 32768 [ 90.376837][ T4840] XFS (loop3): Mounting V5 Filesystem [ 90.438140][ T4840] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 90.586190][ T4840] XFS (loop3): Starting recovery (logdev: internal) [ 90.701519][ T4317] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 90.723794][ T4840] XFS (loop3): Ending recovery (logdev: internal) [ 90.739552][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.793459][ T4317] usb 5-1: Product: syz [ 90.805649][ T4840] XFS (loop3): Quotacheck needed: Please wait. [ 90.846325][ T4317] usb 5-1: Manufacturer: syz [ 90.876468][ T4317] usb 5-1: SerialNumber: syz [ 91.041282][ T4317] usb 5-1: config 0 descriptor?? [ 91.183239][ T4317] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 91.248405][ T4840] XFS (loop3): Quotacheck: Done. [ 91.601889][ T4317] usb 5-1: USB disconnect, device number 3 [ 91.678385][ T4183] XFS (loop3): Unmounting Filesystem [ 92.828850][ T4874] tipc: Enabling of bearer rejected, already enabled [ 96.295832][ T4889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.120'. [ 96.316186][ T4891] loop1: detected capacity change from 0 to 128 [ 96.328707][ T4892] loop2: detected capacity change from 0 to 512 [ 96.498093][ T4892] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.119: bad orphan inode 15 [ 96.575043][ T4892] ext4_test_bit(bit=14, block=5) = 0 [ 96.579086][ T4908] loop4: detected capacity change from 0 to 512 [ 96.599244][ T4892] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,nogrpid,journal_dev=0x0000000000080003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 96.663842][ T4892] EXT4-fs error (device loop2): __ext4_new_inode:1076: comm syz.2.119: reserved inode found cleared - inode=1 [ 96.734606][ T4908] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.761357][ T4908] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.445232][ T4920] loop2: detected capacity change from 0 to 4096 [ 98.502985][ T4922] tipc: Enabling of bearer rejected, already enabled [ 98.512115][ T4920] ntfs3: Unknown parameter 'windows_names' [ 98.661461][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.630608][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 99.640890][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 99.755804][ T4942] 9pnet: Could not find request transport: r [ 99.791413][ T13] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 99.821309][ T13] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 100.021941][ T13] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 100.041041][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.081832][ T13] usb 1-1: Product: syz [ 100.086048][ T13] usb 1-1: Manufacturer: syz [ 100.096518][ T4955] loop2: detected capacity change from 0 to 128 [ 100.111134][ T13] usb 1-1: SerialNumber: syz [ 100.151318][ T13] usb 1-1: config 0 descriptor?? [ 100.173132][ T4955] FAT-fs (loop2): Directory bread(block 162) failed [ 100.190438][ T4955] FAT-fs (loop2): Directory bread(block 163) failed [ 100.197498][ T4924] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.209577][ T4924] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.229965][ T4955] FAT-fs (loop2): Directory bread(block 164) failed [ 100.256286][ T4955] FAT-fs (loop2): Directory bread(block 165) failed [ 100.278417][ T4955] FAT-fs (loop2): Directory bread(block 166) failed [ 100.292938][ T4955] FAT-fs (loop2): Directory bread(block 167) failed [ 100.307390][ T4955] FAT-fs (loop2): Directory bread(block 168) failed [ 100.321374][ T4955] FAT-fs (loop2): Directory bread(block 169) failed [ 100.360074][ T4955] FAT-fs (loop2): Directory bread(block 162) failed [ 100.377628][ T4955] FAT-fs (loop2): Directory bread(block 163) failed [ 100.398065][ T4955] attempt to access beyond end of device [ 100.398065][ T4955] loop2: rw=3, want=232, limit=128 [ 100.423669][ T4955] attempt to access beyond end of device [ 100.423669][ T4955] loop2: rw=2051, want=234, limit=128 [ 100.434779][ T4924] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.461340][ T4924] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 100.580740][ T4946] loop4: detected capacity change from 0 to 32768 [ 100.643051][ T4946] [ 100.643051][ T4946] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.643051][ T4946] [ 100.652900][ T4957] loop2: detected capacity change from 0 to 4096 [ 100.697033][ T4952] loop3: detected capacity change from 0 to 40427 [ 100.709271][ T4946] ERROR: (device loop4): diWrite: ixpxd invalid [ 100.709271][ T4946] [ 100.733579][ T4946] ERROR: (device loop4): txCommit: [ 100.733579][ T4946] [ 100.756375][ T4958] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.834867][ T4952] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.858210][ T4192] [ 100.858210][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.858210][ T4192] [ 100.880561][ T4192] [ 100.880561][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.880561][ T4192] [ 100.941008][ T4952] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 101.054763][ T13] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 101.167840][ T4969] tipc: Enabling of bearer rejected, already enabled [ 101.211393][ T4619] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.353124][ T4977] loop3: detected capacity change from 0 to 128 [ 101.572422][ T4619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.725885][ T4619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.938276][ T13] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 101.963747][ T4619] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.990591][ T13] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, ae:09:b3:1e:4e:79 [ 102.003163][ T4619] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.012680][ T4619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.023672][ T13] usb 1-1: USB disconnect, device number 3 [ 102.045614][ T13] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 102.060465][ T4619] usb 2-1: config 0 descriptor?? [ 102.196483][ T4986] loop0: detected capacity change from 0 to 1024 [ 102.262868][ T4986] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 102.509833][ T4986] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 102.561052][ T4963] udc-core: couldn't find an available UDC or it's busy [ 102.578211][ T4963] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.822922][ T4619] usbhid 2-1:0.0: can't add hid device: -71 [ 102.882557][ T4619] usbhid: probe of 2-1:0.0 failed with error -71 [ 102.984582][ T4619] usb 2-1: USB disconnect, device number 2 [ 103.047086][ T4999] loop4: detected capacity change from 0 to 4096 [ 103.059651][ T4999] ntfs3: Unknown parameter 'windows_names' [ 103.238690][ T5003] tipc: Enabling of bearer rejected, already enabled [ 103.530271][ T5005] infiniband syz1: set active [ 103.541219][ T5005] infiniband syz1: added syz_tun [ 103.570583][ T5005] infiniband syz1: Couldn't open port 1 [ 103.609813][ T5005] RDS/IB: syz1: added [ 103.622285][ T5005] smc: adding ib device syz1 with port count 1 [ 103.628927][ T5005] smc: ib device syz1 port 1 has pnetid [ 103.670235][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'. [ 104.257836][ T5020] loop2: detected capacity change from 0 to 128 [ 104.282509][ T5021] loop0: detected capacity change from 0 to 128 [ 104.392607][ T5020] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.438340][ T5020] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.998017][ T26] audit: type=1800 audit(1763027430.446:8): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.163" name="file2" dev="loop2" ino=13 res=0 errno=0 [ 105.062791][ T5027] Set syz1 is full, maxelem 65536 reached [ 105.100283][ T26] audit: type=1800 audit(1763027430.466:9): pid=5020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.163" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 106.322100][ T5056] tipc: Started in network mode [ 106.327040][ T5056] tipc: Node identity ac14140f, cluster identity 4711 [ 106.368930][ T5056] tipc: New replicast peer: 255.255.255.32 [ 106.375177][ T5056] tipc: Enabled bearer , priority 10 [ 107.354551][ T5068] 9pnet: Could not find request transport: r [ 107.406371][ T4392] tipc: Node number set to 2886997007 [ 108.508615][ T5081] loop2: detected capacity change from 0 to 1024 [ 108.678621][ T5081] EXT4-fs (loop2): Ignoring removed oldalloc option [ 108.775980][ T5081] EXT4-fs (loop2): Ignoring removed bh option [ 109.002015][ T5081] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.073385][ T5093] tipc: Enabling of bearer rejected, already enabled [ 109.167328][ T5081] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 110.077742][ T5104] loop2: detected capacity change from 0 to 128 [ 110.468268][ T5109] lo speed is unknown, defaulting to 1000 [ 110.876496][ T5128] tipc: Enabling of bearer rejected, already enabled [ 112.483853][ T5151] loop2: detected capacity change from 0 to 128 [ 113.208815][ T5158] tipc: Enabling of bearer rejected, already enabled [ 114.331239][ T4392] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.571306][ T4392] usb 4-1: Using ep0 maxpacket: 16 [ 114.691475][ T4392] usb 4-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.709865][ T4392] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 114.769623][ T4392] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 114.791387][ T4392] usb 4-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.833752][ T4392] usb 4-1: config 1 interface 0 has no altsetting 0 [ 114.936779][ T4392] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.957134][ T4392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 114.975423][ T4392] usb 4-1: SerialNumber: syz [ 114.994845][ T5196] 9pnet: Could not find request transport: r [ 115.021576][ T5166] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.028670][ T5166] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.119347][ T5200] tipc: Enabling of bearer rejected, already enabled [ 115.173914][ T5202] siw: device registration error -23 [ 115.284882][ T5166] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.290854][ T5208] loop4: detected capacity change from 0 to 1024 [ 115.311323][ T5166] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.428019][ T5208] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.226: Invalid block bitmap block 0 in block_group 0 [ 115.452446][ T5208] Quota error (device loop4): write_blk: dquota write failed [ 115.461360][ T5208] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 115.505598][ T5208] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.226: Failed to acquire dquot type 0 [ 115.632556][ T5208] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.226: Freeing blocks not in datazone - block = 0, count = 4096 [ 115.689743][ T5208] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.226: Invalid inode bitmap blk 0 in block_group 0 [ 115.710661][ T414] Quota error (device loop4): remove_tree: Getting block too big (0 >= 8) [ 115.731883][ T414] EXT4-fs error (device loop4): ext4_release_dquot:6245: comm kworker/u4:3: Failed to release dquot type 0 [ 115.786189][ T4392] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 115.832318][ T5208] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 115.894296][ T5208] EXT4-fs (loop4): 1 orphan inode deleted [ 115.900057][ T5208] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; nodiscard,grpid,,errors=continue. Quota mode: writeback. [ 115.981595][ T5208] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 116.185832][ T4392] usb 4-1: USB disconnect, device number 2 [ 116.196952][ T4392] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 116.375986][ T5227] loop4: detected capacity change from 0 to 4096 [ 116.477949][ T5227] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 116.817065][ T5239] 9pnet: Could not find request transport: r [ 116.867458][ T4192] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 116.935289][ T4192] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 117.372452][ T4192] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 117.533209][ T5218] Set syz1 is full, maxelem 6117 reached [ 117.874617][ T5256] tipc: Enabling of bearer rejected, already enabled [ 118.250971][ T5275] 9pnet: Could not find request transport: r [ 120.819316][ T5316] tipc: Enabling of bearer rejected, already enabled [ 120.867109][ T5318] loop4: detected capacity change from 0 to 4096 [ 121.451714][ T5318] NILFS error (device loop4): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 123.164197][ T5343] loop4: detected capacity change from 0 to 40427 [ 123.276267][ T5343] F2FS-fs (loop4): invalid crc value [ 123.294213][ T5343] F2FS-fs (loop4): Found nat_bits in checkpoint [ 123.345829][ T5343] F2FS-fs (loop4): Start checkpoint disabled! [ 123.387253][ T5343] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 123.898965][ T4755] attempt to access beyond end of device [ 123.898965][ T4755] loop4: rw=2049, want=40984, limit=40427 [ 124.486945][ T5356] loop4: detected capacity change from 0 to 512 [ 124.524720][ T5356] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 124.580759][ T5356] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.265: corrupted in-inode xattr [ 124.613319][ T5356] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.265: couldn't read orphan inode 15 (err -117) [ 124.675986][ T5356] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000001,noblock_validity,noload,delalloc,max_batch_time=0x0000000000000001,discard,inode_readahead_blks=0x0000000000004000,nomblk_io_submit,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 125.542256][ T5362] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.706038][ T5363] netlink: 36 bytes leftover after parsing attributes in process `syz.3.267'. [ 125.822897][ T5365] capability: warning: `syz.3.267' uses deprecated v2 capabilities in a way that may be insecure [ 126.814432][ T5374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.269'. [ 127.075959][ T5354] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 127.117544][ T5354] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 127.369928][ T5376] loop4: detected capacity change from 0 to 32768 [ 127.464683][ T5372] Set syz1 is full, maxelem 6117 reached [ 127.599163][ T5376] XFS (loop4): Mounting V5 Filesystem [ 127.793489][ T5376] XFS (loop4): Ending clean mount [ 127.823607][ T5376] XFS (loop4): Quotacheck needed: Please wait. [ 127.893394][ T5376] XFS (loop4): Quotacheck: Done. [ 127.942236][ T5395] ubi31: attaching mtd0 [ 127.998514][ T5395] ubi31: scanning is finished [ 128.022206][ T5395] ubi31: empty MTD device detected [ 128.286620][ T5395] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 128.361301][ T4192] XFS (loop4): Unmounting Filesystem [ 130.892855][ T5424] lo speed is unknown, defaulting to 1000 [ 131.662724][ T5432] 9pnet: Could not find request transport: r [ 131.777854][ T5406] loop4: detected capacity change from 0 to 32768 [ 131.877344][ T5406] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 131.888095][ T5435] tipc: Enabling of bearer rejected, already enabled [ 131.893529][ T5406] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 131.923049][ T5406] BTRFS info (device loop4): trying to use backup root at mount time [ 131.946057][ T5406] BTRFS info (device loop4): setting nodatasum [ 131.959256][ T5406] BTRFS info (device loop4): force zlib compression, level 3 [ 131.980199][ T5406] BTRFS info (device loop4): turning on flush-on-commit [ 132.010532][ T5406] BTRFS info (device loop4): enabling disk space caching [ 132.038759][ T5406] BTRFS error (device loop4): cannot disable free space tree [ 132.067340][ T5406] BTRFS error (device loop4): open_ctree failed: -22 [ 132.074581][ T4202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4202) [ 132.192251][ T5448] bridge0: port 3(gretap0) entered blocking state [ 132.204442][ T5448] bridge0: port 3(gretap0) entered disabled state [ 132.247416][ T5448] device gretap0 entered promiscuous mode [ 132.272452][ T5448] bridge0: port 3(gretap0) entered blocking state [ 132.279106][ T5448] bridge0: port 3(gretap0) entered forwarding state [ 132.340874][ T5450] device gretap0 left promiscuous mode [ 132.369668][ T5450] bridge0: port 3(gretap0) entered disabled state [ 132.406725][ T5453] Set syz1 is full, maxelem 65536 reached [ 132.654410][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.660833][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.804886][ T5463] 9pnet: Could not find request transport: r [ 133.237554][ T5475] tipc: Enabling of bearer rejected, already enabled [ 133.291260][ T4392] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.561348][ T4392] usb 4-1: Using ep0 maxpacket: 16 [ 133.668449][ T5488] loop4: detected capacity change from 0 to 512 [ 133.711399][ T4392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.746377][ T4392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.794027][ T4392] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 133.804714][ T5488] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 133.852136][ T4392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.856573][ T5488] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.306: corrupted in-inode xattr [ 133.893420][ T4392] usb 4-1: config 0 descriptor?? [ 133.973851][ T5488] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.306: couldn't read orphan inode 15 (err -117) [ 133.995363][ T5488] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000001,noblock_validity,noload,delalloc,max_batch_time=0x0000000000000001,discard,inode_readahead_blks=0x0000000000004000,nomblk_io_submit,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 134.725917][ T4392] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 135.161574][ T4392] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 135.246883][ T4392] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 135.274281][ T4392] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 135.300953][ T4392] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 135.350769][ T4392] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 135.386591][ T4392] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 135.449482][ T4392] ntrig 0003:1B96:0008.0001: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.3-1/input0 [ 135.570328][ T4392] usb 4-1: USB disconnect, device number 3 [ 135.864211][ T5537] loop4: detected capacity change from 0 to 128 [ 136.004285][ T5516] fido_id[5516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 136.176282][ T4392] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 136.411744][ T5542] tipc: Enabling of bearer rejected, already enabled [ 136.608108][ T4392] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 136.626736][ T4392] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.681193][ T4392] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 136.771206][ T4392] usb 4-1: config 0 has no interface number 0 [ 136.781437][ T4392] usb 4-1: config 0 has no interface number 1 [ 136.796720][ T4392] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 136.856548][ T4392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.016927][ T4392] usb 4-1: config 0 descriptor?? [ 137.072957][ T4392] usb 4-1: unknown number of interfaces: 2 [ 137.415446][ T5555] tipc: Enabled bearer , priority 0 [ 137.538455][ T5559] device syzkaller0 entered promiscuous mode [ 137.629362][ T5555] tipc: Resetting bearer [ 137.862619][ T5554] tipc: Resetting bearer [ 138.189633][ T5554] tipc: Disabling bearer [ 138.516116][ T5567] lo speed is unknown, defaulting to 1000 [ 139.476121][ T4496] usb 4-1: USB disconnect, device number 4 [ 139.917354][ T5578] 9pnet: Could not find request transport: r [ 140.548759][ T5594] tipc: Enabled bearer , priority 0 [ 140.588835][ T5594] device syzkaller0 entered promiscuous mode [ 140.639578][ T5594] tipc: Resetting bearer [ 140.670304][ T5596] tipc: Enabling of bearer rejected, already enabled [ 140.704590][ T5593] tipc: Resetting bearer [ 140.743096][ T5593] tipc: Disabling bearer [ 141.528757][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 141.539157][ T4198] CPU: 1 PID: 4198 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 141.546719][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.556943][ T4198] Workqueue: hci1 hci_rx_work [ 141.561788][ T4198] Call Trace: [ 141.565165][ T4198] [ 141.568106][ T4198] dump_stack_lvl+0x168/0x230 [ 141.572801][ T4198] ? show_regs_print_info+0x20/0x20 [ 141.578015][ T4198] ? load_image+0x3b0/0x3b0 [ 141.582652][ T4198] sysfs_create_dir_ns+0x252/0x280 [ 141.587786][ T4198] ? __lock_acquire+0x7c60/0x7c60 [ 141.592830][ T4198] ? sysfs_warn_dup+0xa0/0xa0 [ 141.597518][ T4198] ? le_conn_complete_evt+0xcbc/0x1590 [ 141.602995][ T4198] ? hci_event_packet+0xe05/0x12f0 [ 141.608159][ T4198] ? process_one_work+0x863/0x1000 [ 141.613284][ T4198] ? do_raw_spin_unlock+0x11d/0x230 [ 141.618501][ T4198] kobject_add_internal+0x662/0xd00 [ 141.623720][ T4198] kobject_add+0x152/0x210 [ 141.628276][ T4198] ? kobject_init+0x1d0/0x1d0 [ 141.633184][ T4198] ? klist_children_get+0x50/0x50 [ 141.638246][ T4198] ? get_device_parent+0x121/0x3f0 [ 141.643383][ T4198] device_add+0x483/0xfb0 [ 141.647743][ T4198] hci_conn_add_sysfs+0xd1/0x1e0 [ 141.652785][ T4198] le_conn_complete_evt+0xcbc/0x1590 [ 141.658095][ T4198] ? cs_le_create_conn+0x5e0/0x5e0 [ 141.663231][ T4198] ? __mutex_trylock_common+0x14f/0x250 [ 141.668913][ T4198] hci_le_meta_evt+0x289/0x3b80 [ 141.673772][ T4198] ? hci_event_packet+0x36d/0x12f0 [ 141.678891][ T4198] ? hci_event_packet+0x2e2/0x12f0 [ 141.683992][ T4198] ? __lock_acquire+0x7c60/0x7c60 [ 141.689017][ T4198] ? hci_remote_host_features_evt+0x280/0x280 [ 141.695107][ T4198] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 141.701195][ T4198] ? mark_lock+0x94/0x320 [ 141.705547][ T4198] ? mutex_unlock+0x10/0x10 [ 141.710055][ T4198] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 141.716028][ T4198] ? lock_chain_count+0x20/0x20 [ 141.720869][ T4198] ? __rwlock_init+0x140/0x140 [ 141.725619][ T4198] hci_event_packet+0xe05/0x12f0 [ 141.730559][ T4198] ? lockdep_hardirqs_on+0x94/0x140 [ 141.735747][ T4198] ? rcu_lock_release+0x20/0x20 [ 141.740585][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 141.745767][ T4198] hci_rx_work+0x255/0xa10 [ 141.750272][ T4198] process_one_work+0x863/0x1000 [ 141.755230][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 141.761000][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 141.766459][ T4198] ? _raw_spin_lock_irq+0xab/0xe0 [ 141.771482][ T4198] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 141.776848][ T4198] ? wq_worker_running+0x97/0x170 [ 141.781868][ T4198] worker_thread+0xaa8/0x12a0 [ 141.786555][ T4198] kthread+0x436/0x520 [ 141.790610][ T4198] ? rcu_lock_release+0x20/0x20 [ 141.795453][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 141.800112][ T4198] ret_from_fork+0x1f/0x30 [ 141.804524][ T4198] [ 141.814367][ T4198] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 141.827740][ T4198] Bluetooth: hci1: failed to register connection device [ 141.872982][ T5620] 9pnet: Could not find request transport: r [ 142.101086][ T5630] tipc: Enabling of bearer rejected, already enabled [ 143.357221][ T5659] 9pnet: Could not find request transport: r [ 143.534142][ T5669] netlink: 48 bytes leftover after parsing attributes in process `syz.0.355'. [ 143.727318][ T5674] tipc: Enabling of bearer rejected, already enabled [ 144.101291][ T13] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 144.471545][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.511474][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.533109][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.566776][ T13] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 144.586754][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.619480][ T13] usb 2-1: config 0 descriptor?? [ 145.296088][ T13] hid-generic 0003:0457:07DA.0002: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 145.546558][ T4395] usb 2-1: USB disconnect, device number 3 [ 145.627809][ T5699] fido_id[5699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 145.721384][ T5707] 9pnet: Could not find request transport: r [ 149.111769][ T5748] 9pnet: Could not find request transport: r [ 152.961990][ T5802] 9pnet: Could not find request transport: r [ 153.328696][ T5809] netlink: 'syz.3.392': attribute type 4 has an invalid length. [ 153.979160][ T5811] netlink: 'syz.3.392': attribute type 4 has an invalid length. [ 154.139839][ T5820] tipc: Enabled bearer , priority 0 [ 154.188301][ T5820] device syzkaller0 entered promiscuous mode [ 154.251050][ T5820] tipc: Resetting bearer [ 154.327567][ T5819] tipc: Resetting bearer [ 154.416387][ T5819] tipc: Disabling bearer [ 154.723115][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 156.537555][ T5856] 9pnet: Could not find request transport: r [ 159.080563][ T1108] Bluetooth: hci5: command 0x1003 tx timeout [ 159.465027][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 162.437418][ T4297] Bluetooth: hci5: command 0x1001 tx timeout [ 162.444389][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 164.333239][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.376099][ T5895] 9pnet: Could not find request transport: r [ 164.382141][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.390083][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.491269][ T4496] Bluetooth: hci5: command 0x1009 tx timeout [ 164.493011][ T5898] Set syz1 is full, maxelem 65536 reached [ 165.582103][ T5916] device syz_tun left promiscuous mode [ 165.614617][ T5916] bridge0: port 3(syz_tun) entered disabled state [ 165.628648][ T5916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.638715][ T5916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.646867][ T5916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.657014][ T5916] device bridge_slave_0 left promiscuous mode [ 165.664906][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.707598][ T5916] device bridge_slave_1 left promiscuous mode [ 165.726512][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.825077][ T5916] bond0: (slave bond_slave_0): Releasing backup interface [ 165.888383][ T5916] bond0: (slave bond_slave_1): Releasing backup interface [ 165.910432][ T5928] 9pnet: Could not find request transport: r [ 166.030699][ T5934] capability: warning: `syz.2.427' uses 32-bit capabilities (legacy support in use) [ 166.217296][ T26] audit: type=1326 audit(1763027491.666:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5940 comm="syz.2.429" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f174ec976c9 code=0x0 [ 166.256301][ T5916] team0: Port device team_slave_0 removed [ 166.279032][ T5916] team0: Port device team_slave_1 removed [ 166.286563][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.294785][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.313939][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.350490][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.409747][ T5916] bond0: (slave wlan1): Releasing backup interface [ 166.461527][ T5924] netlink: 'syz.4.424': attribute type 12 has an invalid length. [ 166.475070][ T5924] netlink: 'syz.4.424': attribute type 29 has an invalid length. [ 166.498543][ T5924] netlink: 148 bytes leftover after parsing attributes in process `syz.4.424'. [ 167.316670][ T5951] syz.3.431 (5951) used greatest stack depth: 17320 bytes left [ 171.486209][ T4234] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 172.061278][ T4234] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 172.393811][ T4234] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 172.403306][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.453150][ T4234] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 173.403455][ T6054] netlink: 'syz.1.470': attribute type 12 has an invalid length. [ 173.430587][ T6054] netlink: 'syz.1.470': attribute type 29 has an invalid length. [ 173.442706][ T6054] netlink: 148 bytes leftover after parsing attributes in process `syz.1.470'. [ 173.571497][ T4234] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 173.605043][ T4234] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 173.772260][ T4234] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 174.155939][ T4385] usb 4-1: USB disconnect, device number 5 [ 175.691408][ T4385] Bluetooth: hci1: command 0x0406 tx timeout [ 175.697938][ T4385] Bluetooth: hci2: command 0x0406 tx timeout [ 176.569519][ T6069] lo speed is unknown, defaulting to 1000 [ 177.014298][ T6082] comedi comedi0: Minor 3 could not be opened [ 179.272137][ T6099] fuse: Bad value for 'fd' [ 183.923129][ T6166] 9pnet: Could not find request transport: r [ 187.427060][ T6206] 9pnet: Could not find request transport: r [ 189.740650][ T6225] lo speed is unknown, defaulting to 1000 [ 190.173028][ T4496] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 190.289520][ T6240] 9pnet: Could not find request transport: r [ 190.421313][ T4496] usb 3-1: Using ep0 maxpacket: 8 [ 191.394840][ T4496] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 191.394899][ T4496] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.394918][ T4496] usb 3-1: Product: syz [ 191.394932][ T4496] usb 3-1: Manufacturer: syz [ 191.394945][ T4496] usb 3-1: SerialNumber: syz [ 191.406026][ T4496] usb 3-1: config 0 descriptor?? [ 191.468951][ T4496] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 191.572714][ T6255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.533'. [ 192.176837][ T6260] netlink: 'syz.1.535': attribute type 10 has an invalid length. [ 192.217969][ T6260] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 192.497115][ T6268] Set syz1 is full, maxelem 65536 reached [ 192.504490][ T6270] 9pnet: Could not find request transport: r [ 192.751450][ T6253] loop4: detected capacity change from 128 to 64 [ 192.761417][ T4496] radio-usb-si4713: probe of 3-1:0.0 failed with error -71 [ 192.771569][ T4496] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 192.794771][ T4496] usb 3-1: USB disconnect, device number 3 [ 193.520164][ T6294] 9pnet: Could not find request transport: r [ 193.680610][ T6296] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 193.726049][ T6296] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 193.791597][ T6296] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 194.096873][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.103265][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.736395][ T6311] netlink: 18 bytes leftover after parsing attributes in process `syz.3.555'. [ 195.974594][ T6316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.019738][ T6316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.082642][ T6316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.136883][ T6316] device bridge_slave_0 left promiscuous mode [ 196.188414][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.238366][ T6316] device bridge_slave_1 left promiscuous mode [ 196.295050][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.416675][ T6316] bond0: (slave bond_slave_0): Releasing backup interface [ 196.521639][ T6316] bond0: (slave bond_slave_1): Releasing backup interface [ 196.707124][ T6316] team0: Port device team_slave_0 removed [ 196.743611][ T21] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 196.748309][ T6316] team0: Port device team_slave_1 removed [ 196.758884][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.781618][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.805406][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.841249][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.141317][ T21] usb 2-1: config 0 has no interfaces? [ 197.146919][ T21] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.218094][ T6339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.562'. [ 198.448473][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.472829][ T21] usb 2-1: config 0 descriptor?? [ 198.491290][ T21] usb 2-1: can't set config #0, error -71 [ 198.497986][ T21] usb 2-1: USB disconnect, device number 4 [ 198.668411][ T6351] device veth0 entered promiscuous mode [ 198.713156][ T6345] device veth0 left promiscuous mode [ 201.772170][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.845745][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.981947][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.093818][ T6367] device bridge_slave_0 left promiscuous mode [ 202.100052][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.374681][ T6367] device bridge_slave_1 left promiscuous mode [ 202.381073][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.473437][ T6367] bond0: (slave bond_slave_0): Releasing backup interface [ 202.522720][ T6367] bond0: (slave bond_slave_1): Releasing backup interface [ 202.698654][ T6367] team0: Port device team_slave_0 removed [ 202.736970][ T6367] team0: Port device team_slave_1 removed [ 202.755303][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.774350][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.687469][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.738301][ T6367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.998704][ T6396] netlink: 68 bytes leftover after parsing attributes in process `syz.2.578'. [ 204.061098][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'. [ 204.228992][ T6407] tipc: Enabled bearer , priority 0 [ 204.243280][ T6407] device syzkaller0 entered promiscuous mode [ 204.267135][ T6407] tipc: Resetting bearer [ 204.283732][ T6405] tipc: Resetting bearer [ 204.302322][ T6405] tipc: Disabling bearer [ 205.231177][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 205.611340][ T4393] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 205.651372][ T6425] loop1: detected capacity change from 128 to 64 [ 205.711953][ T4297] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 205.752859][ T1108] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 205.765459][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.776359][ T1108] usb 5-1: Product: syz [ 205.780706][ T1108] usb 5-1: Manufacturer: syz [ 205.787655][ T1108] usb 5-1: SerialNumber: syz [ 205.796572][ T6434] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 205.807289][ T1108] usb 5-1: config 0 descriptor?? [ 205.861240][ T4393] usb 4-1: Using ep0 maxpacket: 8 [ 205.930075][ T6436] device syzkaller0 entered promiscuous mode [ 206.011339][ T4393] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 206.019788][ T4393] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.029919][ T4393] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.039954][ T4393] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.050205][ T4393] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.077687][ T4393] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 206.081568][ T4297] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 206.111344][ T4297] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.128372][ T4297] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 206.141366][ T4393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.192241][ T4297] usb 3-1: config 0 has no interface number 0 [ 206.199240][ T4297] usb 3-1: config 0 has no interface number 1 [ 206.209075][ T4297] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 206.219420][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.237646][ T4297] usb 3-1: config 0 descriptor?? [ 206.282190][ T4297] usb 3-1: unknown number of interfaces: 2 [ 206.302695][ T1108] usb 5-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -71 [ 206.324727][ T1108] usb 5-1: Firmware version (0.0) predates our first public release. [ 206.335934][ T1108] usb 5-1: Please update to version 0.2 or newer [ 206.366470][ T1108] usb 5-1: atusb_probe: initialization failed, error = -71 [ 206.373851][ T1108] atusb: probe of 5-1:0.0 failed with error -71 [ 206.393323][ T1108] usb 5-1: USB disconnect, device number 4 [ 206.465501][ T4393] usb 4-1: GET_CAPABILITIES returned 0 [ 206.471012][ T4393] usbtmc 4-1:16.0: can't read capabilities [ 208.361510][ T6428] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 208.406328][ T4297] usb 4-1: USB disconnect, device number 6 [ 209.864809][ T1108] usb 3-1: USB disconnect, device number 4 [ 209.968914][ T6469] device syzkaller0 entered promiscuous mode [ 210.019742][ T6466] Set syz1 is full, maxelem 65536 reached [ 210.251365][ T4297] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 210.383848][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 210.641329][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 210.691423][ T4297] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 210.710225][ T4297] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.754219][ T6483] bridge0: port 4(gretap0) entered blocking state [ 210.776195][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.778071][ T6483] bridge0: port 4(gretap0) entered disabled state [ 210.804483][ T4297] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.821270][ T21] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 210.833285][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.840646][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.850737][ T6483] device gretap0 entered promiscuous mode [ 210.865294][ T4297] usb 5-1: config 0 descriptor?? [ 210.877000][ T6483] bridge0: port 4(gretap0) entered blocking state [ 210.883610][ T6483] bridge0: port 4(gretap0) entered forwarding state [ 210.910712][ T21] usb 4-1: config 0 descriptor?? [ 210.913781][ T6487] tipc: Enabled bearer , priority 0 [ 210.924531][ T4297] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 210.950902][ T6488] device gretap0 left promiscuous mode [ 210.978718][ T6488] bridge0: port 4(gretap0) entered disabled state [ 211.018980][ T6487] device syzkaller0 entered promiscuous mode [ 211.051685][ T6487] tipc: Resetting bearer [ 211.073504][ T6486] tipc: Resetting bearer [ 211.091657][ T6486] tipc: Disabling bearer [ 211.673492][ T21] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 212.163393][ T21] usb 4-1: USB disconnect, device number 7 [ 212.981370][ T4317] usb 5-1: USB disconnect, device number 5 [ 212.988131][ T6516] device ipip0 entered promiscuous mode [ 216.320741][ T6529] overlayfs: failed to resolve './file0': -2 [ 216.528538][ T6554] device syzkaller0 entered promiscuous mode [ 217.472269][ T6565] tipc: Enabled bearer , priority 0 [ 217.933625][ T6570] device syzkaller0 entered promiscuous mode [ 218.001717][ T6565] tipc: Resetting bearer [ 218.023495][ T6564] tipc: Resetting bearer [ 218.067796][ T6564] tipc: Disabling bearer [ 220.322310][ T6599] device syzkaller0 entered promiscuous mode [ 223.349530][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 223.358931][ T4385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.374534][ T4185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.681251][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 225.293263][ T4385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.302110][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.315715][ T4395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.327218][ T4385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.066032][ T6635] 9pnet: Could not find request transport: r [ 226.361703][ T6641] device syzkaller0 entered promiscuous mode [ 226.442904][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.074309][ T24] usb 2-1: unable to read config index 0 descriptor/all [ 227.082051][ T24] usb 2-1: can't read configurations, error -71 [ 227.092685][ T4395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.274448][ T6668] 9pnet: Could not find request transport: r [ 228.749458][ T4395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.882362][ T6670] device syzkaller0 entered promiscuous mode [ 229.825822][ T4254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.857068][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.039868][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.211554][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.692663][ T6697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.677'. [ 231.995508][ T6704] 9pnet: Could not find request transport: r [ 231.999602][ T6706] device syzkaller0 entered promiscuous mode [ 232.003572][ T6707] ptrace attach of "./syz-executor exec"[4192] was attempted by ""[6707] [ 232.096921][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.691064][ T6721] tipc: Enabled bearer , priority 0 [ 232.707706][ T6721] device syzkaller0 entered promiscuous mode [ 232.781973][ T6721] tipc: Resetting bearer [ 232.809478][ T6720] tipc: Resetting bearer [ 232.844340][ T6720] tipc: Disabling bearer [ 232.896806][ T4317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.142222][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.237358][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.690'. [ 234.029997][ T6738] 9pnet: Could not find request transport: r [ 234.153782][ T6740] device syzkaller0 entered promiscuous mode [ 234.186233][ T4254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.543148][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.720697][ T6748] overlayfs: failed to clone upperpath [ 235.757261][ T6748] overlayfs: failed to clone upperpath [ 236.891031][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.900181][ T4254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.035121][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.405099][ T4496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.414615][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.428952][ T4185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.119082][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.709253][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.844072][ T6767] 9pnet: Could not find request transport: r [ 240.926617][ T6776] device syzkaller0 entered promiscuous mode [ 241.199085][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.142379][ T4496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.150924][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.159235][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.196106][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.219918][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.624246][ T6800] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 243.646530][ T6800] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 243.697008][ T6809] netlink: 'syz.2.719': attribute type 11 has an invalid length. [ 243.851445][ T6812] 9pnet: Could not find request transport: r [ 244.090421][ T6821] device syzkaller0 entered promiscuous mode [ 244.146117][ T6824] tipc: Enabled bearer , priority 0 [ 244.219839][ T6824] device syzkaller0 entered promiscuous mode [ 244.260148][ T6824] tipc: Resetting bearer [ 244.279336][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.332253][ T6823] tipc: Resetting bearer [ 244.376415][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.391550][ T6823] tipc: Disabling bearer [ 245.552355][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.560926][ T4254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.808512][ T4496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.819955][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.084327][ T1108] Bluetooth: hci3: command 0x0405 tx timeout [ 246.683502][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.691928][ T4254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.721155][ T6850] overlayfs: missing 'lowerdir' [ 247.206225][ T6861] 9pnet: Could not find request transport: r [ 247.458697][ T6865] 9pnet: Could not find request transport: r [ 247.639756][ T6869] device syzkaller0 entered promiscuous mode [ 247.794944][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.803562][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.129076][ T6880] lo speed is unknown, defaulting to 1000 [ 248.900287][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.078142][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.403265][ T4496] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 250.788165][ T4496] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.818384][ T4496] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 250.872320][ T4496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.907733][ T4496] usb 5-1: config 0 descriptor?? [ 250.985728][ T4496] pwc: Askey VC010 type 2 USB webcam detected. [ 251.001581][ T6915] [U] kæ}ŠÁ [ 251.119896][ T4234] net_ratelimit: 6 callbacks suppressed [ 251.119913][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.255340][ T6922] 9pnet: Could not find request transport: r [ 251.261530][ T4392] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 251.290867][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.445780][ T4496] pwc: recv_control_msg error -32 req 02 val 2b00 [ 251.464214][ T6925] tipc: Enabled bearer , priority 0 [ 251.471765][ T6925] device syzkaller0 entered promiscuous mode [ 251.488736][ T6924] tipc: Resetting bearer [ 251.515858][ T4496] pwc: recv_control_msg error -32 req 02 val 2700 [ 251.527556][ T6924] tipc: Disabling bearer [ 251.579629][ T4496] pwc: recv_control_msg error -32 req 02 val 2c00 [ 251.642681][ T6927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.648115][ T4496] pwc: recv_control_msg error -32 req 04 val 1000 [ 251.652289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.670005][ T4392] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 251.699395][ T4392] usb 4-1: config 0 interface 0 has no altsetting 0 [ 251.708714][ T4496] pwc: recv_control_msg error -32 req 04 val 1300 [ 251.736184][ T6927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.747961][ T4185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.771642][ T4496] pwc: recv_control_msg error -32 req 04 val 1400 [ 251.791366][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.802479][ T6926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.820608][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.835982][ T4496] pwc: recv_control_msg error -32 req 02 val 2000 [ 251.849554][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.889213][ T4392] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 251.905451][ T4392] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 251.935480][ T4392] usb 4-1: Product: syz [ 251.951236][ T4392] usb 4-1: Manufacturer: syz [ 251.967828][ T4392] usb 4-1: SerialNumber: syz [ 251.998443][ T4392] usb 4-1: config 0 descriptor?? [ 252.066581][ T4392] usb 4-1: selecting invalid altsetting 0 [ 252.118313][ T4496] pwc: recv_control_msg error -71 req 04 val 1500 [ 252.145911][ T4496] pwc: recv_control_msg error -71 req 02 val 2500 [ 252.177927][ T4496] pwc: recv_control_msg error -71 req 02 val 2400 [ 252.206453][ T4496] pwc: recv_control_msg error -71 req 02 val 2600 [ 252.252761][ T4496] pwc: recv_control_msg error -71 req 02 val 2900 [ 252.295506][ T4496] pwc: recv_control_msg error -71 req 02 val 2800 [ 252.338350][ T4496] pwc: recv_control_msg error -71 req 04 val 1100 [ 252.363559][ T4496] pwc: recv_control_msg error -71 req 04 val 1200 [ 252.516871][ T4496] pwc: Registered as video103. [ 252.559584][ T4496] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 252.614279][ T6934] usb 4-1: selecting invalid altsetting 0 [ 252.620570][ T6934] usb 4-1: 0:0: usb_set_interface failed (-22) [ 252.626909][ T6934] usb 4-1: selecting invalid altsetting 0 [ 252.632688][ T6934] usb 4-1: 0:0: usb_set_interface failed (-22) [ 252.640608][ T6934] usb 4-1: selecting invalid altsetting 0 [ 252.646802][ T6934] usb 4-1: 0:0: usb_set_interface failed (-22) [ 252.694119][ T4496] usb 5-1: USB disconnect, device number 6 [ 252.851420][ T4234] usb 4-1: USB disconnect, device number 8 [ 252.976795][ T6941] batman_adv: batadv0: Adding interface: dummy0 [ 253.011727][ T6941] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.079826][ T6941] batman_adv: batadv0: Interface activated: dummy0 [ 253.385820][ T4234] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 253.663763][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 253.792199][ T4234] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 253.808373][ T4234] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 253.834558][ T4234] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 253.860416][ T4234] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 253.893075][ T4234] usb 4-1: config 0 interface 0 has no altsetting 0 [ 254.070155][ T4234] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 254.101070][ T4234] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 254.120045][ T6956] [U] kæ}ŠÁ [ 254.132846][ T4234] usb 4-1: Product: syz [ 254.149932][ T4234] usb 4-1: Manufacturer: syz [ 254.169147][ T4234] usb 4-1: SerialNumber: syz [ 254.190944][ T4234] usb 4-1: config 0 descriptor?? [ 254.222266][ T6958] 9pnet: Could not find request transport: r [ 254.242462][ T4234] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 254.277475][ T4234] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 254.524762][ T4392] usb 4-1: USB disconnect, device number 9 [ 254.530059][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 254.537897][ T6939] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 254.548232][ T4392] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 255.684288][ T4392] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 256.080402][ T4392] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 256.119453][ T4392] usb 2-1: config 0 interface 0 has no altsetting 0 [ 256.181087][ T6991] lo speed is unknown, defaulting to 1000 [ 256.982910][ T4234] net_ratelimit: 42 callbacks suppressed [ 256.982924][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.996933][ T4254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.022265][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.030149][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.170534][ T4392] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 257.179807][ T4392] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 257.231957][ T4392] usb 2-1: Product: syz [ 257.237608][ T4392] usb 2-1: Manufacturer: syz [ 257.242223][ T4392] usb 2-1: SerialNumber: syz [ 257.277884][ T4392] usb 2-1: config 0 descriptor?? [ 257.337860][ T4392] usb 2-1: selecting invalid altsetting 0 [ 257.830421][ T7010] usb 2-1: selecting invalid altsetting 0 [ 257.836786][ T7010] usb 2-1: 0:0: usb_set_interface failed (-22) [ 257.843170][ T7010] usb 2-1: selecting invalid altsetting 0 [ 257.849135][ T7010] usb 2-1: 0:0: usb_set_interface failed (-22) [ 257.855489][ T7010] usb 2-1: selecting invalid altsetting 0 [ 257.861272][ T7010] usb 2-1: 0:0: usb_set_interface failed (-22) [ 258.335088][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.365386][ T4254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.015105][ T7012] tipc: Enabled bearer , priority 0 [ 259.032770][ T7012] device syzkaller0 entered promiscuous mode [ 259.073542][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.244512][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.252872][ T4496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.353615][ T7011] tipc: Resetting bearer [ 259.378824][ T7011] tipc: Disabling bearer [ 259.417171][ T4254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.510141][ T4496] usb 2-1: USB disconnect, device number 7 [ 259.517000][ T4254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.534058][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 260.133200][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 260.281505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.295029][ T26] audit: type=1326 audit(1763027584.045:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 260.295219][ T26] audit: type=1326 audit(1763027584.045:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 260.300808][ T26] audit: type=1326 audit(1763027584.045:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 260.300841][ T26] audit: type=1326 audit(1763027584.045:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 260.300867][ T26] audit: type=1326 audit(1763027584.045:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 260.302796][ T26] audit: type=1326 audit(1763027584.055:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 260.310629][ T26] audit: type=1326 audit(1763027584.055:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 260.310664][ T26] audit: type=1326 audit(1763027584.055:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 260.313228][ T26] audit: type=1326 audit(1763027584.055:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 260.313333][ T26] audit: type=1326 audit(1763027584.055:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.3.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 260.510563][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.666131][ T4254] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 261.308722][ T4254] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 261.308753][ T4254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.308773][ T4254] usb 4-1: Product: syz [ 261.308788][ T4254] usb 4-1: Manufacturer: syz [ 261.308801][ T4254] usb 4-1: SerialNumber: syz [ 261.359502][ T4254] usb 4-1: config 0 descriptor?? [ 261.491246][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.644473][ T4254] usb 4-1: atusb_control_msg: req 0x10 val 0x0 idx 0x0, error -71 [ 261.644597][ T4254] usb 4-1: Firmware version (0.0) predates our first public release. [ 261.644616][ T4254] usb 4-1: Please update to version 0.2 or newer [ 261.660499][ T4254] usb 4-1: atusb_probe: initialization failed, error = -71 [ 261.660611][ T4254] atusb: probe of 4-1:0.0 failed with error -71 [ 261.666573][ T4254] usb 4-1: USB disconnect, device number 10 [ 261.742002][ T7055] tipc: Enabled bearer , priority 0 [ 261.742593][ T7055] device syzkaller0 entered promiscuous mode [ 261.778407][ T7054] tipc: Resetting bearer [ 261.805719][ T7054] tipc: Disabling bearer [ 262.494930][ T4496] net_ratelimit: 4 callbacks suppressed [ 262.494947][ T4496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.495384][ T4496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.498201][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.761932][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.858054][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.161336][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.802'. [ 263.500334][ T7088] device syzkaller0 entered promiscuous mode [ 263.757560][ T7091] tipc: Enabled bearer , priority 0 [ 263.775699][ T7091] device syzkaller0 entered promiscuous mode [ 263.792007][ T7090] tipc: Resetting bearer [ 263.856086][ T7090] tipc: Disabling bearer [ 263.865460][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.950265][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.975582][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.060449][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.744561][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.879776][ T7123] device syzkaller0 entered promiscuous mode [ 265.965968][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 265.965982][ T26] audit: type=1326 audit(1763027589.340:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 266.129026][ T26] audit: type=1326 audit(1763027589.377:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 266.155358][ T26] audit: type=1326 audit(1763027589.377:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 266.181459][ T26] audit: type=1326 audit(1763027589.377:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 266.204277][ T26] audit: type=1326 audit(1763027589.377:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 266.230115][ T26] audit: type=1326 audit(1763027589.377:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 266.255082][ T26] audit: type=1326 audit(1763027589.377:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 266.277738][ T26] audit: type=1326 audit(1763027589.377:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 266.301332][ T26] audit: type=1326 audit(1763027589.377:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 266.324387][ T26] audit: type=1326 audit(1763027589.377:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.3.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c0ed8a6c9 code=0x7ffc0000 [ 266.390399][ T7137] tipc: Enabled bearer , priority 0 [ 266.403171][ T7137] device syzkaller0 entered promiscuous mode [ 266.421950][ T7136] tipc: Resetting bearer [ 266.445361][ T7136] tipc: Disabling bearer [ 267.154133][ T7147] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 267.215107][ T7147] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 267.508764][ T7162] device syzkaller0 entered promiscuous mode [ 267.711793][ T7169] tipc: Enabled bearer , priority 0 [ 267.738470][ T7169] device syzkaller0 entered promiscuous mode [ 267.772673][ T7168] tipc: Resetting bearer [ 267.827957][ T7168] tipc: Disabling bearer [ 267.866988][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 267.981470][ T4297] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 268.179838][ T7179] netlink: 'syz.4.838': attribute type 4 has an invalid length. [ 268.245752][ T4297] usb 2-1: Using ep0 maxpacket: 8 [ 268.345830][ T4234] lo speed is unknown, defaulting to 1000 [ 268.374229][ T4297] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 268.394959][ T4297] usb 2-1: config 179 has no interface number 0 [ 268.416571][ T4297] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 268.481337][ T4297] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 268.502320][ T4297] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 268.571956][ T4297] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 268.604323][ T4297] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 268.659608][ T4297] usb 2-1: config 179 interface 65 has no altsetting 0 [ 268.665825][ T7189] net_ratelimit: 8 callbacks suppressed [ 268.665841][ T7189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.705616][ T4297] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 268.725649][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.758073][ T4254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.795526][ T4297] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input7 [ 269.051196][ T4185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.118052][ T7189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.206015][ T7189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.228507][ T4297] usb 2-1: USB disconnect, device number 8 [ 269.240075][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 269.267273][ T4297] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 269.334603][ T7191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.342836][ T7191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.399220][ T7191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.444535][ T7191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.539390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.958499][ T7208] device syzkaller0 entered promiscuous mode [ 270.014772][ T7210] tipc: Enabled bearer , priority 0 [ 270.025446][ T7210] device syzkaller0 entered promiscuous mode [ 270.038135][ T7209] tipc: Resetting bearer [ 270.073148][ T7209] tipc: Disabling bearer [ 270.079154][ T4297] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 270.352856][ T4297] usb 3-1: Using ep0 maxpacket: 8 [ 270.663159][ T4297] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 270.672403][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.684044][ T4297] usb 3-1: Product: syz [ 270.690733][ T4297] usb 3-1: Manufacturer: syz [ 270.698270][ T4297] usb 3-1: SerialNumber: syz [ 270.704776][ T4254] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 270.719245][ T4297] usb 3-1: config 0 descriptor?? [ 270.929459][ T4185] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 270.995703][ T4297] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 271.036027][ T4254] usb 5-1: Using ep0 maxpacket: 16 [ 271.196436][ T4185] usb 4-1: Using ep0 maxpacket: 16 [ 271.338249][ T4185] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 271.371588][ T4185] usb 4-1: config 0 has no interface number 0 [ 271.378336][ T4254] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 271.398016][ T4185] usb 4-1: config 0 interface 119 has no altsetting 0 [ 271.405040][ T4254] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 271.464153][ T4254] usb 5-1: Product: syz [ 271.468344][ T4254] usb 5-1: Manufacturer: syz [ 271.473120][ T4254] usb 5-1: SerialNumber: syz [ 271.512304][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'. [ 271.531517][ T4254] usb 5-1: config 0 descriptor?? [ 271.563581][ T7240] device syzkaller0 entered promiscuous mode [ 271.581406][ T4185] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35 [ 271.595849][ T4185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.604814][ T4185] usb 4-1: Product: syz [ 271.612428][ T4185] usb 4-1: Manufacturer: syz [ 271.617735][ T4185] usb 4-1: SerialNumber: syz [ 271.631230][ T4185] usb 4-1: config 0 descriptor?? [ 271.858253][ T1108] usb 5-1: USB disconnect, device number 7 [ 271.882171][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 272.457864][ T4496] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 272.775897][ T7267] device syzkaller0 entered promiscuous mode [ 272.853524][ T4496] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.864309][ T4496] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.960505][ T4496] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 272.969796][ T4496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 272.977896][ T4496] usb 2-1: SerialNumber: syz [ 273.172835][ T4297] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 273.183722][ T4297] dvbdev: DVB: registering new adapter (Terratec H7) [ 273.191526][ T4297] usb 3-1: media controller created [ 273.206304][ T4392] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 273.260958][ T4297] usb 3-1: dvb_usb_v2: MAC address: 8e:54:00:00:00:00 [ 273.278398][ T4297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.288641][ T4496] usb 2-1: 0:2 : does not exist [ 273.327330][ T4297] DVB: Unable to find symbol drxk_attach() [ 273.351510][ T4297] dvb_usb_az6007: probe of 3-1:0.0 failed with error -22 [ 273.482174][ T4254] usb 3-1: USB disconnect, device number 5 [ 273.488223][ T4392] usb 5-1: Using ep0 maxpacket: 16 [ 273.548458][ T4496] usb 2-1: 5:0: cannot get min/max values for control 1 (id 5) [ 273.635761][ T4392] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.646028][ T4392] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.762229][ T4496] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 273.825153][ T4185] usb 4-1: USB disconnect, device number 11 [ 273.841143][ T4392] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.852765][ T4392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.865942][ T4392] usb 5-1: Product: syz [ 273.877327][ T4392] usb 5-1: Manufacturer: syz [ 273.887045][ T4392] usb 5-1: SerialNumber: syz [ 273.930259][ T7278] 8021q: VLANs not supported on hsr0 [ 274.008207][ T4496] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 274.044505][ T7284] net_ratelimit: 11 callbacks suppressed [ 274.044521][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.059719][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.068220][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.084523][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.092897][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.101581][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.109969][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.118496][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.136518][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.171152][ T7284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.222918][ T4496] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 274.457369][ T7292] loop5: detected capacity change from 0 to 7 [ 274.478556][ T4496] usb 2-1: 5:0: cannot get min/max values for control 6 (id 5) [ 274.488894][ T6932] Dev loop5: unable to read RDB block 7 [ 274.507807][ T6932] loop5: unable to read partition table [ 274.529493][ T6932] loop5: partition table beyond EOD, truncated [ 274.587252][ T7292] Dev loop5: unable to read RDB block 7 [ 274.594628][ T7292] loop5: unable to read partition table [ 274.605156][ T7292] loop5: partition table beyond EOD, truncated [ 274.633289][ T7292] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 274.724662][ T4496] usb 2-1: 5:0: cannot get min/max values for control 7 (id 5) [ 274.959665][ T4496] usb 2-1: 5:0: cannot get min/max values for control 8 (id 5) [ 275.173447][ T4496] usb 2-1: 5:0: cannot get min/max values for control 9 (id 5) [ 275.426773][ T4496] usb 2-1: 5:0: cannot get min/max values for control 10 (id 5) [ 275.511870][ T4496] usb 2-1: USB disconnect, device number 9 [ 275.579684][ T4392] usb 5-1: 0:2 : does not exist [ 275.631914][ T4392] usb 5-1: USB disconnect, device number 8 [ 275.825561][ T4297] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 275.903207][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 276.028683][ T4496] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 276.245929][ T4297] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.262859][ T4297] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.328950][ T7315] netlink: 45 bytes leftover after parsing attributes in process `syz.4.889'. [ 276.456530][ T4496] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 276.471257][ T4496] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 276.480901][ T4297] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.490930][ T4496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.503935][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.529241][ T4297] usb 3-1: Product: syz [ 276.543321][ T4297] usb 3-1: Manufacturer: syz [ 276.552601][ T4297] usb 3-1: SerialNumber: syz [ 276.576420][ T4496] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 276.628418][ T4297] cdc_mbim 3-1:1.0: skipping garbage [ 276.634701][ T4297] usb 3-1: selecting invalid altsetting 1 [ 276.706859][ T7320] tipc: Enabled bearer , priority 0 [ 276.728685][ T7320] tipc: Resetting bearer [ 276.745254][ T7319] tipc: Disabling bearer [ 276.838576][ T7322] netlink: 48 bytes leftover after parsing attributes in process `syz.4.892'. [ 276.848894][ T4297] cdc_mbim 3-1:1.0: bind() failure [ 276.872579][ T4297] usb 3-1: USB disconnect, device number 6 [ 277.627207][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 277.627228][ T26] audit: type=1326 audit(1763027600.256:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174ec976c9 code=0x7ffc0000 [ 277.692267][ T26] audit: type=1326 audit(1763027600.284:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174ec976c9 code=0x7ffc0000 [ 277.724421][ T26] audit: type=1326 audit(1763027600.284:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f174ec976c9 code=0x7ffc0000 [ 277.790248][ T26] audit: type=1326 audit(1763027600.284:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174ec976c9 code=0x7ffc0000 [ 277.812890][ T4496] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 277.847638][ T26] audit: type=1326 audit(1763027600.284:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174ec976c9 code=0x7ffc0000 [ 277.910241][ T4496] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 277.941374][ T4496] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 277.995141][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.011159][ T26] audit: type=1326 audit(1763027600.284:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f174ec976c9 code=0x7ffc0000 [ 278.012281][ T4496] usb 2-1: USB disconnect, device number 10 [ 278.058495][ T26] audit: type=1326 audit(1763027600.284:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174ec976c9 code=0x7ffc0000 [ 278.195894][ T26] audit: type=1326 audit(1763027600.284:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174ec976c9 code=0x7ffc0000 [ 278.217978][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.244238][ T26] audit: type=1326 audit(1763027600.284:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f174ec976c9 code=0x7ffc0000 [ 278.269558][ T26] audit: type=1326 audit(1763027600.293:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7340 comm="syz.2.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174ec976c9 code=0x7ffc0000 [ 279.042100][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 279.599675][ T1108] net_ratelimit: 27 callbacks suppressed [ 279.599693][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.962166][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.053656][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.138783][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 281.305514][ T7421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.925'. [ 281.423793][ T7421] [ 281.426152][ T7421] ====================================================== [ 281.433156][ T7421] WARNING: possible circular locking dependency detected [ 281.440179][ T7421] syzkaller #0 Not tainted [ 281.444599][ T7421] ------------------------------------------------------ [ 281.451616][ T7421] syz.3.925/7421 is trying to acquire lock: [ 281.457482][ T7421] ffff888077b9cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 281.468615][ T7421] [ 281.468615][ T7421] but task is already holding lock: [ 281.475954][ T7421] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 281.485596][ T7421] [ 281.485596][ T7421] which lock already depends on the new lock. [ 281.485596][ T7421] [ 281.495991][ T7421] [ 281.495991][ T7421] the existing dependency chain (in reverse order) is: [ 281.504988][ T7421] [ 281.504988][ T7421] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 281.512961][ T7421] __mutex_lock_common+0x1eb/0x2390 [ 281.518677][ T7421] mutex_lock_nested+0x17/0x20 [ 281.523946][ T7421] rfkill_register+0x33/0x8a0 [ 281.529128][ T7421] hci_register_dev+0x452/0x970 [ 281.534488][ T7421] vhci_create_device+0x32c/0x5c0 [ 281.540013][ T7421] vhci_write+0x391/0x450 [ 281.544847][ T7421] vfs_write+0x712/0xd00 [ 281.549591][ T7421] ksys_write+0x14d/0x250 [ 281.554432][ T7421] do_syscall_64+0x4c/0xa0 [ 281.559347][ T7421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.565745][ T7421] [ 281.565745][ T7421] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 281.573573][ T7421] __mutex_lock_common+0x1eb/0x2390 [ 281.579276][ T7421] mutex_lock_nested+0x17/0x20 [ 281.584544][ T7421] vhci_send_frame+0x88/0x100 [ 281.589722][ T7421] hci_send_frame+0x1a9/0x2e0 [ 281.594906][ T7421] hci_tx_work+0x9f9/0x1710 [ 281.599921][ T7421] process_one_work+0x863/0x1000 [ 281.605449][ T7421] worker_thread+0xaa8/0x12a0 [ 281.610629][ T7421] kthread+0x436/0x520 [ 281.615203][ T7421] ret_from_fork+0x1f/0x30 [ 281.620129][ T7421] [ 281.620129][ T7421] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 281.629313][ T7421] __flush_work+0xdd/0x1b0 [ 281.634234][ T7421] hci_dev_do_close+0x1e7/0x1030 [ 281.639674][ T7421] hci_error_reset+0x101/0x2c0 [ 281.644938][ T7421] process_one_work+0x863/0x1000 [ 281.650390][ T7421] worker_thread+0xaa8/0x12a0 [ 281.655597][ T7421] kthread+0x436/0x520 [ 281.660187][ T7421] ret_from_fork+0x1f/0x30 [ 281.665120][ T7421] [ 281.665120][ T7421] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 281.672748][ T7421] __mutex_lock_common+0x1eb/0x2390 [ 281.678453][ T7421] mutex_lock_nested+0x17/0x20 [ 281.683729][ T7421] bg_scan_update+0x44/0x3b0 [ 281.688830][ T7421] process_one_work+0x863/0x1000 [ 281.694272][ T7421] worker_thread+0xaa8/0x12a0 [ 281.699452][ T7421] kthread+0x436/0x520 [ 281.704025][ T7421] ret_from_fork+0x1f/0x30 [ 281.708951][ T7421] [ 281.708951][ T7421] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 281.718924][ T7421] __lock_acquire+0x2c33/0x7c60 [ 281.724288][ T7421] lock_acquire+0x197/0x3f0 [ 281.729304][ T7421] __flush_work+0xdd/0x1b0 [ 281.734225][ T7421] __cancel_work_timer+0x3ac/0x520 [ 281.739865][ T7421] hci_request_cancel_all+0xcc/0x300 [ 281.745658][ T7421] hci_dev_do_close+0x4e/0x1030 [ 281.751011][ T7421] hci_rfkill_set_block+0x10a/0x190 [ 281.756716][ T7421] rfkill_set_block+0x1c6/0x420 [ 281.762075][ T7421] rfkill_fop_write+0x458/0x560 [ 281.767428][ T7421] vfs_write+0x300/0xd00 [ 281.772171][ T7421] ksys_write+0x14d/0x250 [ 281.777037][ T7421] do_syscall_64+0x4c/0xa0 [ 281.781958][ T7421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.788368][ T7421] [ 281.788368][ T7421] other info that might help us debug this: [ 281.788368][ T7421] [ 281.798575][ T7421] Chain exists of: [ 281.798575][ T7421] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 281.798575][ T7421] [ 281.814283][ T7421] Possible unsafe locking scenario: [ 281.814283][ T7421] [ 281.821714][ T7421] CPU0 CPU1 [ 281.827059][ T7421] ---- ---- [ 281.832399][ T7421] lock(rfkill_global_mutex); [ 281.837582][ T7421] lock(&data->open_mutex); [ 281.844672][ T7421] lock(rfkill_global_mutex); [ 281.851934][ T7421] lock((work_completion)(&hdev->bg_scan_update)); [ 281.858502][ T7421] [ 281.858502][ T7421] *** DEADLOCK *** [ 281.858502][ T7421] [ 281.866623][ T7421] 1 lock held by syz.3.925/7421: [ 281.871540][ T7421] #0: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 281.881619][ T7421] [ 281.881619][ T7421] stack backtrace: [ 281.887499][ T7421] CPU: 1 PID: 7421 Comm: syz.3.925 Not tainted syzkaller #0 [ 281.894768][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.904990][ T7421] Call Trace: [ 281.908265][ T7421] [ 281.911187][ T7421] dump_stack_lvl+0x168/0x230 [ 281.915864][ T7421] ? load_image+0x3b0/0x3b0 [ 281.920389][ T7421] ? show_regs_print_info+0x20/0x20 [ 281.925594][ T7421] ? print_circular_bug+0x12b/0x1a0 [ 281.930789][ T7421] check_noncircular+0x274/0x310 [ 281.935727][ T7421] ? add_chain_block+0x940/0x940 [ 281.940699][ T7421] ? lockdep_lock+0xdc/0x1e0 [ 281.945287][ T7421] ? __lock_acquire+0x12d9/0x7c60 [ 281.950407][ T7421] ? lockdep_lock+0x1e0/0x1e0 [ 281.955084][ T7421] ? mark_lock+0x94/0x320 [ 281.959428][ T7421] __lock_acquire+0x2c33/0x7c60 [ 281.964278][ T7421] ? verify_lock_unused+0x140/0x140 [ 281.969486][ T7421] lock_acquire+0x197/0x3f0 [ 281.973994][ T7421] ? __flush_work+0xc1/0x1b0 [ 281.978585][ T7421] ? __lock_acquire+0x7c60/0x7c60 [ 281.983607][ T7421] ? read_lock_is_recursive+0x10/0x10 [ 281.988967][ T7421] ? start_flush_work+0x776/0x820 [ 281.993972][ T7421] ? finish_task_switch+0x12f/0x640 [ 281.999154][ T7421] __flush_work+0xdd/0x1b0 [ 282.003552][ T7421] ? __flush_work+0xc1/0x1b0 [ 282.008119][ T7421] ? flush_work+0x20/0x20 [ 282.012425][ T7421] ? try_to_grab_pending+0xf3/0x7e0 [ 282.017602][ T7421] ? lockdep_hardirqs_off+0x70/0x100 [ 282.022873][ T7421] ? mark_lock+0x94/0x320 [ 282.027185][ T7421] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 282.033158][ T7421] ? lock_chain_count+0x20/0x20 [ 282.037991][ T7421] ? mark_lock+0x94/0x320 [ 282.042304][ T7421] ? __cancel_work_timer+0x331/0x520 [ 282.047575][ T7421] __cancel_work_timer+0x3ac/0x520 [ 282.052673][ T7421] ? cancel_work_sync+0x20/0x20 [ 282.057507][ T7421] ? __cancel_work+0x1f4/0x2d0 [ 282.062252][ T7421] ? lockdep_hardirqs_on+0x94/0x140 [ 282.067437][ T7421] ? __cancel_work+0x26f/0x2d0 [ 282.072181][ T7421] ? cancel_work+0x20/0x20 [ 282.076661][ T7421] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 282.082275][ T7421] hci_request_cancel_all+0xcc/0x300 [ 282.087547][ T7421] hci_dev_do_close+0x4e/0x1030 [ 282.092478][ T7421] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 282.098354][ T7421] ? _raw_spin_unlock+0x40/0x40 [ 282.103184][ T7421] hci_rfkill_set_block+0x10a/0x190 [ 282.108364][ T7421] ? rcu_lock_release+0x20/0x20 [ 282.113196][ T7421] rfkill_set_block+0x1c6/0x420 [ 282.118032][ T7421] rfkill_fop_write+0x458/0x560 [ 282.122957][ T7421] ? rfkill_fop_read+0x4b0/0x4b0 [ 282.127881][ T7421] ? common_file_perm+0x130/0x1c0 [ 282.132904][ T7421] ? fsnotify_perm+0x5d/0x560 [ 282.137572][ T7421] ? security_file_permission+0x75/0xa0 [ 282.143096][ T7421] ? rfkill_fop_read+0x4b0/0x4b0 [ 282.148015][ T7421] vfs_write+0x300/0xd00 [ 282.152238][ T7421] ? file_end_write+0x250/0x250 [ 282.157071][ T7421] ? __fget_files+0x40f/0x480 [ 282.161731][ T7421] ? __fdget_pos+0x1e2/0x370 [ 282.166302][ T7421] ? ksys_write+0x71/0x250 [ 282.170697][ T7421] ksys_write+0x14d/0x250 [ 282.175005][ T7421] ? __ia32_sys_read+0x80/0x80 [ 282.179752][ T7421] ? lockdep_hardirqs_on+0x94/0x140 [ 282.184936][ T7421] do_syscall_64+0x4c/0xa0 [ 282.189335][ T7421] ? clear_bhb_loop+0x30/0x80 [ 282.193993][ T7421] ? clear_bhb_loop+0x30/0x80 [ 282.198652][ T7421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 282.204536][ T7421] RIP: 0033:0x7f7c0ed8a6c9 [ 282.208933][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.228518][ T7421] RSP: 002b:00007f7c0cfaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.236916][ T7421] RAX: ffffffffffffffda RBX: 00007f7c0efe1180 RCX: 00007f7c0ed8a6c9 [ 282.244869][ T7421] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000008 [ 282.252824][ T7421] RBP: 00007f7c0ee0cf91 R08: 0000000000000000 R09: 0000000000000000 [ 282.260776][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.268726][ T7421] R13: 00007f7c0efe1218 R14: 00007f7c0efe1180 R15: 00007ffd121df778 [ 282.276691][ T7421] [ 282.279783][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.290235][ T4496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.299697][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.447979][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.389648][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.559975][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.682682][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.783513][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.638674][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.809590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.817935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.895390][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.007456][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.873546][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.881799][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.119172][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.230883][ T4392] net_ratelimit: 1 callbacks suppressed [ 291.230899][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog